ICND1 Network Security Basics 5

Question 1

Which command configures the maximum number of MAC addresses allowed on a port security-enabled interface?

Accepted Answer

switchport port-security maximum 2

Answer

The 'switchport port-security maximum' command sets the number of MAC addresses allowed on the interface before a violation occurs.

Question 2

What distinguishes RADIUS from TACACS+ in terms of protocol and encryption?

Accepted Answer

RADIUS uses UDP and encrypts only the password; TACACS+ uses TCP and encrypts the entire payload

Answer

RADIUS uses UDP (ports 1812/1813) and only encrypts the password field, while TACACS+ uses TCP port 49 and encrypts the entire authentication payload.

Question 3

What is the purpose of a DMZ (Demilitarized Zone) in network security architecture?

Accepted Answer

A network segment that hosts public-facing services while isolating them from the internal network

Answer

A DMZ is a perimeter network segment that hosts public-accessible servers (web, email, DNS) while preventing direct access to the internal corporate network.

Question 4

Which type of IDS/IPS detection method identifies attacks by comparing traffic patterns against a database of known attack signatures?

Accepted Answer

Signature-based detection

Answer

Signature-based detection compares network traffic or system behavior against a database of known attack patterns to identify threats.

Question 5

Which Cisco feature uses 802.1X to enforce authentication before allowing a device to access the network?

Accepted Answer

Network Access Control (NAC)

Answer

Cisco NAC leverages 802.1X port-based authentication to verify device identity and compliance before granting network access.

(ICND1) Interconnecting Cisco Networking Devices Part 1 Practice Test

(ICND1) Interconnecting Cisco Networking Devices Part 1 Practice Test

ICND1 Network Security Basics 5