An attacker is launching a DoS attack on the Company network using a hacking tool designed to exhaust the IP address space available from the DHCP servers for a period of time.
Which procedure would best defend against this type of attack？ （）
A. Configure only trusted interfaces with root guard.
B. Implement private VLANs （PVLANs） to carry only user traffic.
C. Implement private VLANs （PVLANs） to carry only DHCP traffic.
D. Configure only untrusted interfaces with root guard.
E. Configure DHCP spoofing on all ports that connect untrusted clients.
F. Configure DHCP snooping only on ports that connect trusted DHCP servers.
G. None of the other alternatives apply
您可能感興趣的試卷
你可能感興趣的試題
The Company is concerned about Layer 2 security threats.
Which statement is true about these threats？ （）
A. MAC spoofing attacks allow an attacking device to receive frames intended for a different network host.
B. Port scanners are the most effective defense against dynamic ARP inspection.
C. MAC spoofing, in conjunction with ARP snooping, is the most effective counter-measure against reconnaissance attacks that use dynamic ARP inspection (DAI) to determine vulnerable attack points.
D. Dynamic ARP inspection in conjunction with ARP spoofing can be used to counter DHCP snooping attacks.
E. DHCP snooping sends unauthorized replies to DHCP queries.
F. ARP spoofing can be used to redirect traffic to counter dynamic ARP inspection.
G. None of the other alternatives apply.
Refer to the exhibit. Port security has been configured on the switch port Fa0/5.
What would happen if another device is connected to the port after the maximum number of devices has been reached， even if one or more of the original MAC addresses are inactive？（）
A. The port will permit the new MAC address because one or more of the original MAC addresses are inactive.
B. The port will permit the new MAC address because one or more of the original MAC addresses will age out.
C. Because the new MAC address is not configured on the port， the port will not permit the new MAC address.
D. Although one or more of the original MAC addresses are inactive， the port will not permit the new MAC address.
Refer to the exhibit.
What is the problem with this configuration？（）
A. Spanning tree PortFast cannot be configured on a port where a voice VLAN is configured.
B. Sticky secure MAC addresses cannot be used on a port when a voice VLAN is configured.
C. Spanning tree PortFast cannot be configured on a port when a sticky secure MAC address is used.
D. The switch port must be configured as a trunk.
You need to configure port security on switch R1.
Which two statements are true about this technology？ （）
A. Port security can be configured for ports supporting VoIP.
B. With port security configured， four MAC addresses are allowed by default.
C. The network administrator must manually enter the MAC address for each device in order for the switch to allow connectivity.
D. Withsecurity configured， only one MAC addresses is allowed by default.
E. Port security cannot be configured for ports supporting VoIP.
Refer to the exhibit. Based on the running configuration that is shown for interface FastEthernet0/2，
what two conclusions can be deduced？（）
A. Connecting a host with MAC address 0000.0000.4147 will move interface FastEthernet0/2 into error disabled state.
B. The host with address 0000.0000.4141 is removed from the secure address list after 5 seconds of inactivity.
C. The sticky secure MAC addresses are treated as static secure MAC addresses after the running configuration is saved to the startup configuration and the switch is restarted.
D. Interface FastEthernet0/2 is a voice VLAN port.
E. The host with address 0000.0000.000b is removed from the secure address list after 300 seconds.
最新試題
During routine maintenance， it became necessary to shutdown G1/0/1 on DS1 and DS2. All other interface were up. During this time， DS1 became the active device for Vlan104’s HSRP group. As related to Vlan104’s HSRP group. What can be done to make the group function properly ？ （）
Which two statements about the various implementations of STP are true？（）
Refer to the exhibit. STP has been implemented in the network. Switch SW_A is the root switch for the default VLAN. To reduce the broadcast domain， the network administrator decides to split users on the network into VLAN 2 and VLAN 10. The administrator issues the command spanning-tree vlan 2 root primary on switch SW_A. What will happen as a result of this change？（）
Which two statements are true about BPDU port-guard and BPDU filtering？（）
Refer to the exhibit. Switch S2 contains the default configuration. Switches S1 and S3 both have had the command spanning-tree mode rapid-pvst issued on them. What will be the result？（）
If G1/0/1 on DS1 is shutdown， what will be the current priority value of the Vlan105’s group on DS1 ？（）
Which statement is correct about RSTP port roles？（）
Examine the diagram. A network administrator has recently installed the above switched network using 3550s and would like to control the selection of the root bridge.Which switch should theadministrator configure as the root bridge and which configuration command must theadministrator enter to accomplish this？（）
Which two statements are true when the extended system ID feature is enabled？ （）
Refer to the exhibit. What will happen when one more user is connected to interface FastEthernet 5/1？ （）