多項(xiàng)選擇題What are two methods of mitigating MAC address flooding attacks?()

A.Place unused ports in a common VLAN.
B.Implement private VLANs.
C.Implement DHCP snooping.
D.Implement port security.
E.Implement VLAN access maps.


您可能感興趣的試卷

你可能感興趣的試題

2.多項(xiàng)選擇題Which two statements about a wireless repeater topology are true?()

A.A wireless repeater is an access point that is not connected to the wired LAN.
B.The repeater feature is only available in lightweight access point topologies.
C.The SSID of the root access point must be configured on the repeater access point.
D.This topology requires a 10 - 15 percent overlap between a wired access point and the wireless repeater.
E.This topology requires a 15 - 25 percent overlap between a wired access point and the wireless repeater.
F.To avoid interference, the repeater access point must use a different channel from what the root access point uses.

3.多項(xiàng)選擇題

You need to configure the WLAN client utility on a new machine.
 Which two of the following are true regarding this utility? ()

A.The Aironet Desktop Utility (ADU) can be used to enable or disable the adapter radio and to configure LEAP authentication with dynamic WEP.
B.In Windows XP environment, a client adapter can only be configured and managed with the Microsoft Configuration Manager.
C.The Microsoft Wireless Configuration Manager can be configured to display the Aironet System Tray Utility (ASTU) icon in the Windows system tray.
D.The Cisco Aironet Desktop Utility (ADU) and the Microsoft Wirelss Configuration Manager can both be enabled at the same time to setup WLAN client cards.

4.單項(xiàng)選擇題

A Cisco Aironet Wireless LAN Adapter CB21AG is inserted into a user’s PC cardbus slot. Both the green status LED and the amber activity LED are blinking slowly. 
What is the condition of the adapter? ()

A.The adapter is scanning for the wireless network for which it is configured.
B.The adapter is in power save mode.
C.The adapter is transmitting or receiving data while associated to an access point or another client.
D.The adapter is not receiving power.
E.The adapter is associated to an access point or another client.
F.None of the other alternatives apply

5.單項(xiàng)選擇題

You suspect that a hacker may be performing a MAC address flooding attack somewhere within the    network. 
Which description correctly describes a MAC address flooding attack?()

A.The attacking device spoofs a source MAC address of a valid host currently in the CAM table. The switch then forwards frames destined for the valid host to the attacking device.
B.Frames with unique, invalid destination MAC addresses flood the switch and exhaust CAM table space. The result is that new entries cannot be inserted because of the exhausted CAM table space, and traffic is subsequently flooded out all ports.
C.The attacking device crafts ARP replies intended for valid hosts. The MAC address of the attacking device then becomes the destination address found in the Layer 2 frames sent by the valid network device.
D.The attacking device crafts ARP replies intended for valid hosts. The MAC address of the attacking device then becomes the source address found in the Layer 2 frames sent by the valid network device.
E.The attacking device spoofs a destination MAC address of a valid host currently in the CAM table. The switch then forwards frames destined for the valid host to the attacking device.
F.Frames with unique, invalid source MAC addresses flood the switch and exhaust CAM table space. The result is that new entries cannot be inserted because of the exhausted CAM table space, and traffic is subsequently flooded out all ports.
G.None of the other alternatives apply

最新試題

Refer to the exhibit. Initially, LinkA is connected and forwarding traffic. A new LinkB is then attached between SwitchA and HubA. Which two statements are true about the possible result of attaching the second link?()

題型:多項(xiàng)選擇題

Refer to the exhibit. On the basis of the output of the show spanning-tree inconsistentports command, which statement about interfaces FastEthernet 0/1 and FastEthernet 0/2 is true?()

題型:?jiǎn)雾?xiàng)選擇題

Refer to the exhibit. What command was issued on the Layer 3 switch Sw1 between Exhibit #1 and Exhibit #2?()

題型:?jiǎn)雾?xiàng)選擇題

Which two statements about the various implementations of STP are true?()

題型:多項(xiàng)選擇題

Which two statements are true when the extended system ID feature is enabled? ()

題型:多項(xiàng)選擇題

Refer to the exhibit. Switch 15 is configured as the root switch for VLAN 10 but not for VLAN 20. If the STP configuration is correct, what will be true about Switch 15?()

題型:?jiǎn)雾?xiàng)選擇題

Refer to the exhibit. For what purpose is the command show ip cef used?()

題型:?jiǎn)雾?xiàng)選擇題

If G1/0/1 on DS1 is shutdown, what will be the current priority value of the Vlan105’s group on DS1 ?()

題型:?jiǎn)雾?xiàng)選擇題

How are STP timers and state transitions affected when a topology change occurs in an STP environment?()

題型:?jiǎn)雾?xiàng)選擇題

DS2 has not become the active device for Vlan103’s HSRP group even though all interfaces are active. As related to Vlan103’s HSRP group. What can be done to make the group function properly ? ()

題型:?jiǎn)雾?xiàng)選擇題