Boson CCNA Exam C

What kind of attack uses the MAC address of another known host on the network in order to bypass port security measures?

MAC spoofing

What type of attack generates thousands of forged frames every minute with the intention of overwhelming the switch's MAC address table?

MAC flooding

What type of attack sends a gratuitous ARP (GARG) message to a host?

ARP poisoning

What type of attack attempts to inject packets into other VLANs by accessing the VLAN trunk and double-tagging 802.1Q frame?

VLAN hopping

What kind of attack installs a rogue DHCP server on the network in an attempt to intercept DHCP requests?

DHCP spoofing

Which management tools are written in Ruby?

Puppet and Chef

Which management tools are written in Python?

Ansible and Salt

Puppet

accepts inbound requests from Puppet agents by using HTTPS on TCP port 8140.

What kind of architecture does Puppet use?

client/server architecture

Managed nodes that are running the Puppet Agent application can receive configurations from a

master server that is running Puppet Server.

In Puppet, what are Modules written in?

Ruby Domain Specific Language (DSL) or Puppet DSL

What can chef use architecture wise?

client/server or a standalone client configuration

How do Chef communicate?

HTTPS on TCP port 443

How is information contained in Chef?

Within cookbooks that are written in Ruby DSL and are stored on a Chef Server

Managed nodes that are running the Chef Client can pull...?

cookbooks from the server

In Chef, standalone clients that do not have access to a server can do what?

run chef-solo and pull cookbooks from a local directory or from a tar.gz archive on the Internet

What doesn't Ansible use?

agent software on managed nodes

What does ansible use to connect to remote nodes?

SSH

What port does SSH operate in and what does it use?

TCP port 22

Configurations that are stored on the Ansible server in playbooks are written in what?

YAML

What can managed nodes use to download scripted modules from an Ansible server?

SSH

Salt can use what kind of architecture?

client/server

How can Salt use client/server architecture?

by installing salt master software on the server and salt minion software on managed nodes.

In salt, Masters and minions communicate by using what?

ZeroMQ

To communicate, Salt requires what?

TCP ports 4505 and 4506

Salt can also be used without what kind of software?

Salt Secure Shell

Where is Salt configuration information stored?

State modules that are typically written in YAML

What else can be used for complex configuration scripts for Salt?

Python or PyDSL

What should you do to move the trust boundary to the IP phone?

issue the 'mls qos trust cos' command on the switch port connected to the IP phone

What does the 'mls qos trust cos command' on the switch port connected to the IP phone do?

moves the trust boundary to the IP phone

What command configures a switch to trust both voice traffic sent by an IP phone and data traffic sent by the host through the IP phone?

mls qos trust cos

what command configures an IP phone to override the priority of the data packets it receives from the host and assign new CoS values to the host-generated packets?

switchport priority extend cos

What don't IP phones have?

A CLI (must be configured through the cli of the switch port connected to the IP phone)

What does not support Cisco SDA that is the Cisco enterprise management platform?

Cisco PI

What is Cisco SDA? (Software-Defined Access)

Cisco-developed means of building LANs by using policies and automation

What does Cisco PI rely on?

browser-based GUI to enable admins to perform operations, diagnose problems, and interact with devices on the network.

What is Cisco DNA specifically build for?

to support SDA

How do admins typically interact with Cisco DNA?

browser-based GUI

What type of platform is Cisco Network Assistant?

LAN management platform

What does Cisco Network Assistant enable?

a LAN admin to perform network operations, diagnose problems, and interact with network devices by using a GUI.

A typical Cisco Network Assistant installation supports up to how many devices?

80

What doesn't Cisco Network Assistant support?

Cisco SDA

What are the 7 fields in order of an ethernet frame?

preamble, SOF, destination address, source address, type, payload, and FCS

If a hose does not have the IP address that corresponds to the FQDN of a web server cached and does not use a hosts file, what must it contact to resolve the FQDN of the target web server into an IP address?

DNS

What mitigation technique should you use for social engineering, pharming, and brute force attack?

User awareness or training

What mitigation technique should you use for burglary and tailgating?

Physical access control

What is often interpreted by a human admin?

output of show commands

What uses a centralized controller to define data models?

network automation

What is written by a human to parse show command output?

automation script

What do SDN use to send network instruction from software applications to the central controller?

northbound APIs

What is the SAL?

a database or registry of the services provided by the southbound APIs.

In a controller-based network, what typically contains end devices and Layer 2 switches?

the data plane

What also operates in the data plane?

Layer 3 switches

A centralized controller connects to the data plane by using what?

Southbound API

What are some examples of a southbound API?

NETCONF, OpenFlow, or OnePK

What are the network tasks that are typically performed in the data plane?

encapsulation, decapsulation, add or removing trunk headers, encryption, matching MACs to a MAC table, matching IPs to paths in a routing table, NAT, and filtering using ACLs or port security.

In a controller-based network, what is the control plane?

centralized

The control plane is responsible for network decision making in what two networks?

controller-based and traditional

The control plane in a traditional network is typically distributed

among many devices

Where is decision-making logic moved to in a controller-based network?

central controller or monitored by a central controller

In a controller-based network, a centralized controller connencts to what plane?

application plane

What does a controller-based network use to connect the application plane?

northbound API

A controller communicates with application in the application play by using a northbound API such as what?

REST and OSGi

In both a controller-based network and a traditional network, what plane consists of network management protocols?

management plane

What protocols are often used in the management plane?

Telnet, SSH, SNMP, and Syslog

What best describes a lightweight AP in local mode?

default operating mode

If you are running K9 IOS, and want to configure SSH for incoming VTY connections on a router WITH a hostname, but does not have a domain name or an RSA key pair, or configured VTY lines and you issue the 'crypto key generate rsa' command, what message will you likely receive?

Please define a domain-name first

You want to establish an EtherChannel between SwitchA and SwitchB that uses an IEEE standards-based protocol. What channel-group modes could you configure on the switches?

SwtichA set to active and SwitchB set to Active or SwitchA set to passive and SwitchB set to active

What are the possible combinations in LACP?

Active Active or Active Passive

What protocol groups individual physical ports into a single logical link, called an EtherChannel?

Link Aggregation Control Protocol (LACP)

What command do you use to verify the status of an EtherChannel link?

show etherchannel summary

Out of LACP and PAGP, which protocol is proprietary?

Port Aggregation Protocol (PAgP)

What protocol identifies neighboring ports and their group capabilities but does not assign roles to the EtherChannel's endpoints?

PAgP

Active and passive keywords can only be used with what protocol?

LACP

What keywords can only be used with PAgP?

auto, desirable, and non-silent

In PAgP, what does 'auto' configure?

the channel group to listen for PAgP negotiation to be offered

Either or both sides must be set to what to establish an EtherChannel over PAgP?

desirable

What will happen if you set both sides to auto for two switches using PAgP?

No EtherChannel will be established

What does the non-silent option do in PAgP?

requires that a port receive PAgP packets before the port is added to the channel

Which VLAN is untagged?

the native VLAN

What command should you issue to configure a switch to send traffic from VLAN 17 as untagged?

switchport trunk native vlan 17

What topology provides the best balance of scalability and redundancy when deployed in the enterprise edge of the Cisco enterprise architecture model?

partial-mesh

what address is reserved for Ethernet loopback testing?

CF-00-00-00-00-00

What type of frame is power-save poll?

802.11 control frame

What are the three types of 802.11 frames?

control, management, and data

What field of the 802.11 frame header is used to identify the type and subtype of each frame?

Frame Control

What type of 802.11 frame is used to manage the connection between an AP and a wireless client?

management frames

What type of 802.11 frame is not encrypted by default?

management frames

What type of 802.11 frame is used to manage access to the wireless medium?

Control frames

What are some examples of control flames?

RTS, CTS, ACK, and PS Poll

What are some examples of management frames?

beacons, probe requests, probe responses, authentication requests, deauthentications, reassociation, and announcement traffic indication messages.

What type of 802.11 frame is used to convey user data through the wireless network?

Data frames

What are the two general categories of data frames?

contention free (CF) service frames and contention-based service frames

Most wireless networks operate in what service infrastructure?

contention-based

What do most wireless devices use to share a medium in a contention-based service infrastructure?

Distributed Coordination Function (DCF)

What does DCF rely on to manage interference and does not provide any QoS features?

RTS and CTS

What infrastructure does CD use to control access to the medium and to provide QoS features through the APs?

802.11 Point Coordination Function (PCF)

If you issue the default-information originate command and don't see the default gateway of last resort on another router, the issue is like what?

misconfigured static route

If you issue the 'show cdp neighbors' command, what information will be displayed?

the interface on RouterA connected to the neighboring device, the interface on the neighboring device that is connected to RouterA, the device ID of the neighboring device, and the capabilities and product number of the neighboring device.

When you issue the 'errdisable detect cause inline-power' command, Power policing is enabled with the default settings. If a PD attempts to draw more than the cutoff power from a PoE-enabled interface, how long will the interface remain in an error-disabled state?

until it is manually reset