ICND1 VLAN Management 5

Question 1

Which security threat exploits the default behavior of DTP to gain access to multiple VLANs?

Accepted Answer

VLAN hopping via switch spoofing

Answer

Switch spoofing is a VLAN hopping attack where a rogue device negotiates a trunk link using DTP, gaining access to all VLANs on the switch.

Question 2

A network engineer configures 'switchport mode dynamic desirable' on a port. Under what condition will the port become a trunk?

Accepted Answer

Only when the other end is set to 'mode trunk' or 'dynamic desirable'

Answer

'dynamic desirable' actively initiates trunking and forms a trunk if the opposite side is set to trunk, dynamic desirable, or dynamic auto.

Question 3

What is the result of a native VLAN mismatch on the two ends of an 802.1Q trunk?

Accepted Answer

Untagged frames are delivered to the wrong VLAN, causing traffic leakage

Answer

A native VLAN mismatch causes untagged frames from one switch to be placed in the wrong VLAN on the other switch, creating a traffic leakage security issue.

Question 4

When configuring inter-VLAN routing on a Layer 3 switch, which command enables IP routing globally?

Accepted Answer

ip routing

Answer

The global configuration command 'ip routing' enables the Layer 3 switch to perform IP routing between VLAN interfaces (SVIs).

Question 5

Which statement best describes a Switched Virtual Interface (SVI)?

Accepted Answer

A logical Layer 3 interface associated with a VLAN used for inter-VLAN routing or management

Answer

An SVI is a virtual Layer 3 interface on a multilayer switch tied to a VLAN, providing a gateway IP address for hosts in that VLAN.

(ICND1) Interconnecting Cisco Networking Devices Part 1 Practice Test

(ICND1) Interconnecting Cisco Networking Devices Part 1 Practice Test

ICND1 VLAN Management 5