IT-341 Module-10 Chapter-10 (Cisco)

Which attack encrypts the data on hosts in an attempt to extract a monetary payment from the victim?

a. DDoS

b. Data breach

c. Malware

d. Ransomware

d. Ransomware

Which devices are specifically designed for network security? (Choose three)

a. VPN-enabled router

b. NGFW

c. Switch

d. WLC

e. NAC

a. VPN-enabled router

b. NGFW

e. NAC

Which device monitors SMTP traffic to block threats and encrypt outgoing messages to prevent data loss?

a. NGFW

b. ESA

c. NAC

d. WSA

b. ESA

Which device monitors HTTP traffic to block access to risky sites and encrypt outgoing messages?

a. NGFW

b. ESA

c. NAC

d. WSA

d. WSA

Which AAA component is responsible for collecting and reporting usage data for auditing and billing purposes?

a. Authentication

b. Authorization

c. Accounting

c. Accounting

Which AAA component is responsible for controlling who is permitted to access the network?

a. Authentication

b. Authorization

c. Accounting

a. Authentication

Which AAA component is responsible for determining what the user can access?

a. Authentication

b. Authorization

c. Accounting

b. Authorization

In an 802.1X implementation, which device is responsible for relaying responses?

a. Supplicant

b. Authenticator

c. Router

d. Authentication server

e. Client

b. Authenticator

Which of the following mitigation techniques are used to protect Layer 3 through Layer 7 of the OSI Model? (Choose three.)

a. DHCP snooping

b. VPN

c. Firewalls

d. IPSG

e. IPS devices

b. VPN

c. Firewalls

e. IPS devices

Which of the following mitigation techniques prevents many types of attacks including MAC address table overflow and DHCP starvation attacks?

a. IPSG

b. DHCP snooping

c. DAI

d. Port security

d. Port security

Which of the following mitigation techniques prevents MAC and IP address spoofing?

a. IPSG

b. DHCP snooping

c. DAI

d. Port security

a. IPSG

Which of the following mitigation techniques prevents ARP spoofing and ARP poisoning attacks?

a. IPSG

b. DHCP snooping

c. DAI

d. Port security

c. DAI

Which of the following mitigation techniques prevents DHCP starvation and DHCP spoofing attacks?

a. IPSG

b. DHCP snooping

c. DAI

d. Port security

b. DHCP snooping

What is the behavior of a switch as a result of a successful MAC address table attack?

a. The switch will shut down.

b. The switch interfaces will transition to the error-disabled state.

c. The switch will forward all received frames to all other ports within the VLAN.

d. The switch will drop all received frames.

c. The switch will forward all received frames to all other ports within the VLAN.

What would be the primary reason a threat actor would launch a MAC address overflow attack?

a. So that the threat actor can see frames that are destined for other devices.

b. So that the threat actor can execute arbitrary code on the switch.

c. So that the switch stops forwarding traffic.

d. So that legitimate hosts cannot obtain a MAC address.

a. So that the threat actor can see frames that are destined for other devices.

What mitigation technique must be implemented to prevent MAC address overflow attacks?

a. IPSG

b. DAI

c. Port security

d. DHCP snooping

c. Port security

A threat actor changes the MAC address of the threat actor's device to the MAC address of the default gateway. What type of attack is this?

a. Address spoofing

b. ARP spoofing

c. CDP reconnaissance

d. DHCP starvation

e. STP attack

f. VLAN hopping

a. Address spoofing

A threat actor sends a BPDU message with priority 0. What type of attack is this?

a. Address spoofing

b. ARP spoofing

c. CDP reconnaissance

d. DHCP starvation

e. STP attack

f. VLAN hopping

e. STP attack

A threat actor leases all the available IP addresses on a subnet. What type of attack is this?

a. Address spoofing

b. ARP spoofing

c. CDP reconnaissance

d. DHCP starvation

e. STP attack

f. VLAN hopping

d. DHCP starvation

A threat actor sends a message that causes all other devices to believe the MAC address of the threat actor's device is the default gateway. What type of attack is this?

a. Address spoofing

b. ARP spoofing

c. CDP reconnaissance

d. DHCP starvation

e. STP attack

f. VLAN hopping

b. ARP spoofing

A threat actor configures a host with the 802.1Q protocol and forms a trunk with the connected switch. What type of attack is this?

a. Address spoofing

b. ARP spoofing

c. CDP reconnaissance

d. DHCP starvation

e. STP attack

f. VLAN hopping

f. VLAN hopping

A threat actor discovers the IOS version and IP addresses of the local switch. What type of attack is this?

a. Address spoofing

b. ARP spoofing

c. CDP reconnaissance

d. DHCP starvation

e. STP attack

f. VLAN hopping

c. CDP reconnaissance

What two protocols are supported on Cisco devices for AAA communications? (Choose two.)

a. VTP

b. LLDP

c. HSRP

d. RADIUS

e. TACACS+

d. RADIUS

e. TACACS+

Which service is enabled on a Cisco router by default that can reveal significant information about the router and potentially make it more vulnerable to attack?

a. HTTP

b. CDP

c. FTP

d. LLDP

b. CDP

When security is a concern, which OSI Layer is considered to be the weakest link in a network system?

a. Layer 4

b. Layer 2

c. Layer 3

d. Layer 7

b. Layer 2

Which Layer 2 attack will result in a switch flooding incoming frames to all ports?

a. ARP poisoning

b. IP address spoofing

c. MAC address overflow

d. Spanning Tree Protocol manipulation

c. MAC address overflow

Why is authentication with AAA preferred over a local database method?

a. It uses less network bandwidth.

b. It requires a login and password combination on the console, vty lines, and aux ports.​

c. It provides a fallback authentication method if the administrator forgets the username or password.

d. It specifies a different password for each line or port.

c. It provides a fallback authentication method if the administrator forgets the username or password.

In a server-based AAA implementation, which protocol will allow the router to successfully communicate with the AAA server?

a. SSH

b. RADIUS

c. TACACS

d. 802.1x

b. RADIUS

Which Cisco solution helps prevent MAC and IP address spoofing attacks?

a. Port Security

b. DHCP Snooping

c. IP Source Guard

d. Dynamic ARP Inspection

c. IP Source Guard

What is the purpose of AAA accounting?

a. To collect and report application usage

b. To determine which resources the user can access

c. To prove users are who they say they are

d. To determine which operations the user can perform

a. To collect and report application usage

Which Layer 2 attack will result in legitimate users not getting valid IP addresses?

a. ARP spoofing

b. DHCP starvation

c. IP address spoofing

d. MAC address flooding

b. DHCP starvation

Which three Cisco products focus on endpoint security solutions? (Choose three.)

a. IPS Sensor Appliance

b. Web Security Appliance

c. Email Security Appliance

d. SSL/IPsec VPN Appliance

e. Adaptive Security Appliance

f. NAC Appliance

b. Web Security Appliance

c. Email Security Appliance

f. NAC Appliance

True or False?
In the 802.1X standard, the client attempting to access the network is referred to as the supplicant.

True

What is involved in an IP address spoofing attack?

a. A legitimate network IP address is hijacked by a rogue node.

b. A rogue node replies to an ARP request with its own MAC address indicated for the target IP address.

c. A rogue DHCP server provides false IP configuration parameters to legitimate DHCP clients.

d. Bogus DHCPDISCOVER messages are sent to consume all the available IP addresses on a DHCP server.

a. A legitimate network IP address is hijacked by a rogue node.

What three services are provided by the AAA framework? (Choose three.)

a. Accounting

b. Automation

c. Authorization

d. Authentication

e. Autobalancing

f. Autoconfiguration

a. Accounting

c. Authorization

d. Authentication

Because of implemented security controls, a user can only access a server with FTP. Which AAA component accomplishes this?

a. Accessibility

b. Accounting

c. Auditing

d. Authentication

e. Authorization

e. Authorization

What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?

a. Disable DTP.

b. Disable STP.

c. Enable port security.

d. Place unused ports in an unused VLAN.

c. Enable port security.