What is true about access control on bridged and routed VLAN traffic？ （）
A. Router ACLs can be applied to the input and output directions of a VLAN interface.
B. Bridged ACLs can be applied to the input and output directions of a VLAN interface.
C. Only router ACLs can be applied to a VLAN interface.
D. VLAN maps and router ACLs can be used in combination.
E. VLAN maps can be applied to a VLAN interface
您可能感興趣的試卷
你可能感興趣的試題
On a Company switch named R1 you configure the following： iparp inspection vlan 10-12， 15
What is the purpose of this global configuration command made on R1？（）
A. Discards ARP packets with invalid IP-to-MAC address bindings on trusted ports
B. Validates outgoing ARP requests for interfaces configured on VLAN 10， 11， 12， or 15
C. Intercepts， logs， and discards ARP packets with invalid IP-to-MAC address bindings
D. Intercepts all ARP requests and responses on trusted ports
E. None of the other alternatives apply
As the network technician at Company， you need to configure DHCP snooping on a new switch.
Which three steps are required？ （）
A. Configure the switch to insert and remove DHCP relay information （option-82 field） in forwarded DHCP request messages.
B. Configure DHCP snooping globally.
C. Configure the switch as a DHCP server.
D. Configure DHCP snooping on an interface.
E. Configure all interfaces as DHCP snooping trusted interfaces.
F. Configure DHCP snooping on a VLAN or range of VLANs.
In the use of 802.1X access control，
which three protocols are allowed through the switch port before authentication takes place？ （）
A. STP
B. CDP
C. EAP MD5
D. TACACS+
E. EAP-over-LAN
F. protocols not filtered by an ACL
The DAI feature has been implemented in the Company switched LAN.
Which three statements are true about the dynamic ARP inspection （DAI） feature？ （）
A. DAI can be performed on ingress ports only.
B. DAI can be performed on both ingress and egress ports.
C. DAI is supported on access ports， trunk ports， EtherChannel ports， and private VLAN ports.
D. DAI should be enabled on the root switch for particular VLANs only in order to secure the ARP caches of hosts in the domain.
E. DAI should be configured on all access switch ports as untrusted and on all switch ports connected to other switches as trusted.
F. DAI is supported on access and trunk ports only.
pany has implemented 802.1X authentication as a security enhancement.
Which statement is true about 802.1x port-based authentication？（）
A. TACACS+ is the only supported authentication server type.
B. If a host initiates the authentication process and does not receive a response， it assumes it is not authorized.
C. RADIUS is the only supported authentication server type.
D. Before transmitting data， an 802.1x host must determine the authorization state of the switch.
E. Hosts are required to havea 802.1x authentication client or utilize PPPoE.
F. None of the other alternatives apply.
最新試題
Which option correctly identifies the Cisco IOS switching methods in descending order from the fastest method to the slowest method？（）
Refer to the exhibit. Which Virtual Router Redundancy Protocol （VRRP） statement is true about the roles of the master virtual router and the backup virtual router？（）
What will occur when a nonedge switch port that is configured for Rapid Spanning Tree does not receive a BPDU from its neighbor for three consecutive hello time intervals？（）
Refer to the exhibit. STP has been implemented in the network. Switch SW_A is the root switch for the default VLAN. To reduce the broadcast domain， the network administrator decides to split users on the network into VLAN 2 and VLAN 10. The administrator issues the command spanning-tree vlan 2 root primary on switch SW_A. What will happen as a result of this change？（）
Which three statements are true of the Link Aggregation Control Protocol （LACP）？（）
Refer to the exhibit. LACP has been configured on Switch1 as shown. Which is the correct command set to configure LACP on Switch2？（）
How are STP timers and state transitions affected when a topology change occurs in an STP environment？（）
Refer to the exhibit. Based on the output of the show spanning-tree command， which statement is true？ （）
Which two statements about the various implementations of STP are true？（）
Refer to the exhibit. What does the command channel-group 1 mode desirable do？ （）