You are implementing basic switch security best practices.
Which of these is a tactic that you can use to mitigate compromises from being launched through the switch？（）
A.Make all ports private VLAN ports.
B.Place all unused ports in native VLAN 1 until needed.
C.Proactively configure unused switch ports as access ports.
D.Disable Cisco Discovery Protocol globally.
您可能感興趣的試卷
你可能感興趣的試題
Three Cisco Catalyst switches have been configured with a first-hop redundancy protocol. While reviewing some show commands， debug output， and the syslog， you discover the following information：
What conclusion can you infer from this information？（）
A.VRRP is initializing and operating correctly.
B.HSRP is not properly exchanging three hello messages.
C.VRRP is not properly exchanging three hello messages.
D.HSRP is initializing and operating correctly.
E.GLBP is not properly exchanging three hello messages.
F.GLBP is initializing and operating correctly.
You work as a network engineer for . You study the exhibit carefully. Three switches are configured for HSRP. Switch1 remains in the HSRP listen state.
What is the most likely cause of this status？（）
A.this is normal operation
B.IP addressing is incorrect
C.standby group number does not match VLAN number
D.incorrect standby timers
E.incorrect priority commands
hostname Switch1
interface Vlan10
ip address 172.16.10.32 255.255.255.0
no ip redirects
standby 1 ip 172.16.10.110
standby 1 timers 1 5
standby 1 priority 130
hostname Switch2
interface Vlan10
ip address 172.16.10.33 255.255.255.0
no ip redirects
standby 1 ip 172.16.10.110
standby 1 timers 1 5
standby 1 priority 120
HSRP was implemented and configured on two switches while scheduled network maintenance was performed.
After the two switches have finished rebooting， you notice via show commands that Switch2 is the HSRP active router.
Which two items are most likely the cause of Switch1 not becoming the active router？ （）
A.premption is disabled
B.standby group number does not match VLAN number
C.IP addressing is incorrect
D.IP redirect is disabled
E.incorrect standby timers
F.booting delays
You work as a network engineer for . You study the exhibit carefully. From the configuration shown，
what can be determined？（）
Exhibit:
A.The remaining secure MAC addresses will be dynamically learned， converted to sticky secure MAC addresses， and added to the running configuration.
B.Since a voice VLAN is configured in this example， port security should be set for a maximum of 2.
C.The sticky addresses will only be those manually configured MAC addresses enabled with the sticky keyword.
D.A security violation will restrict the number of addresses to a maximum of 10 addresses per access VLAN and voice VLAN. The port will be shut down if more than 10 devices per VLAN attempt to access the port.
When you enable port security on an interface that is also configured with a voice VLAN，
what is the maximum number of secure MAC addresses that should be set on the port？（）
A.No more than one secure MAC address should be set.
B.The default will be set.
C.The IP phone should use a dedicated port， therefore only one MAC address is needed per port.
D.No value is needed if the switchport priority extend command is configured.
E.No more than two secure MAC addresses should be set.
最新試題
Which statement is correct about RSTP port roles？（）
Refer to the exhibit. What command was issued on the Layer 3 switch Sw1 between Exhibit #1 and Exhibit #2？（）
Refer to the exhibit. For what purpose is the command show ip cef used？（）
Which two statements are true when the extended system ID feature is enabled？ （）
How are STP timers and state transitions affected when a topology change occurs in an STP environment？（）
Which three statements about STP timers are true？（）
What must be the same to make multiple switches part of the same Multiple Spanning Tree （MST）？（）
Refer to the exhibit. The command switchport mode access is issued on interface FastEthernet0/13 on switch CAT1. What will be the result？（）
Which router redundancy protocol cannot be configured for interface tracking？（）
Refer to the exhibit. All network links are FastEthernet. Although there is complete connectivity throughout the network， Front Line users have been complaining that they experience slower network performance when accessing the server farm than the Reception office experiences. Based on the exhibit， which two statements are true？（）