Home > CCNA – Security Questions

CCNA – Security Questions

March 23rd, 2015 Go to comments

Question 1

Explanation

We only enable PortFast feature on access ports (ports connected to end stations). But if someone does not know he can accidentally plug that port to another switch and a loop may occur when BPDUs are being transmitted and received on these ports.

With BPDU Guard, when a PortFast receives a BPDU, it will be shut down to prevent a loop -> D is correct.

Question 2

Explanation

We can verify whether port security has been configured by using the “show running-config” or “show port-security interface ” for more detail. An example of the output of “show port-security interface ” command is shown below:

show_port-security_interface.jpg

Question 3

Explanation

The full syntax of the second command is:

switchport port-security mac-address sticky [MAC]

If we don’t specify the MAC address (like in this question) then the switch will dynamically learn the attached MAC Address and place it into your running-configuration -> B is correct.

Question 4

Explanation

Please read the explanation at http://www.9tut.net/icnd2/icnd2-operations

Question 5

Explanation

Port security is only used on access port (which connects to hosts) so we need to set that port to “access” mode, then we need to specify the maximum number of hosts which are allowed to connect to this port -> C is correct.

Note: If we want to allow a fixed MAC address to connect, use the “switchport port-security mac-address ” command.

Question 6

Explanation

As we see in the output, the “Port Security” is in “Disabled” state (line 2 in the output). To enable Port security feature, we must enable it on that interface first with the command:

SwitchA(config-if)#switchport port-security

-> B is correct.

Also from the output, we learn that the switch is allowing 2 devices to connect to it (switchport port-security maximum 2) but the question requires allowing only PC_A to access the network so we need to reduce the maximum number to 1 -> D is correct.

Question 7

Explanation

Follow these guidelines when configuring port security:
+ Port security can only be configured on static access ports, trunk ports, or 802.1Q tunnel ports. -> A is not correct.
+ A secure port cannot be a dynamic access port.
+ A secure port cannot be a destination port for Switched Port Analyzer (SPAN).
+ A secure port cannot belong to a Fast EtherChannel or Gigabit EtherChannel port group. -> D is not correct
+ You cannot configure static secure or sticky secure MAC addresses on a voice VLAN. -> B is not correct.
+ When you enable port security on an interface that is also configured with a voice VLAN, you must set the maximum allowed secure addresses on the port to at least two.
+ If any type of port security is enabled on the access VLAN, dynamic port security is automatically enabled on the voice VLAN.
+ When a voice VLAN is configured on a secure port that is also configured as a sticky secure port, all addresses seen on the voice VLAN are learned as dynamic secure addresses, and all addresses seen on the access VLAN (to which the port belongs) are learned as sticky secure addresses.
+ The switch does not support port security aging of sticky secure MAC addresses.
+ The protect and restrict options cannot be simultaneously enabled on an interface.

(Reference: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3550/software/release/12-1_19_ea1/configuration/guide/3550scg/swtrafc.html#wp1038546)

Note: Dynamic access port or Dynamic port VLAN membership must be connected to an end station. This type of port can be configured with the “switchport access vlan dynamic” command in the interface configuration mode. Please read more about Dynamic access port here: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3550/software/release/12-1_19_ea1/configuration/guide/3550scg/swvlan.html#wp1103064

Question 8

Explanation

One of the most widely deployed network security technologies today is IPsec over VPNs. It provides high levels of security through encryption and authentication, protecting data from unauthorized access.

Comments (23) Comments
Comment pages
1 13 14 15 1768
  1. achim
    May 3rd, 2018

    Hello Everyone,
    Please send me CCNA Security dumps at {{email not allowed}}

    Thanks

  2. achim
    May 3rd, 2018

    Hello Everyone,
    Please send me CCNA Security dumps at (achim.keuper(web.de))

    Thanks

  3. Dumps4free
    May 15th, 2018

    We offer the first class Cisco 210-260 Free Dumps Questions Answers in the form of PDF and VCE files along with 210-260 Test Engine. All the Cisco 210-260 Free Braindumps are latest and verified by professional experts to guarantee your success.

  4. Kakashi
    May 15th, 2018

    Hello
    Please send me CCNA Security dumps at {email not allowed}
    Thanks.

  5. Kakashi
    May 15th, 2018

    Hello
    Please send me CCNA Security dumps at mu 349919 @ gmail . com
    Thanks

  6. cibo
    May 15th, 2018

    Is there any CCNA CyberSecurity blog available ?

  7. TM27
    May 21st, 2018

    Hi,
    anyone with the pdf book of Pearson official cert for CCNA CyberOps SECFND?
    Thanks

  8. Maaz
    May 25th, 2018

    hello plz send me Dumps
    {email not allowed}

  9. Maaz
    May 25th, 2018

    maazshaikh437 @ gmail . com

  10. CACL
    May 25th, 2018

    hello plz send me Dumps
    cesar_famous_93 @ hotmail . com

  11. skim
    May 26th, 2018

    Regarding the D&D questions with encryption algorithms here is a link which will clear it out
    https://www.cisco.com/c/en/us/about/security-center/next-generation-cryptography.html

  12. gray
    May 29th, 2018

    please send CCNA security dumps to grayeric @ hotmail . com

  13. jaber
    May 30th, 2018

    Hello Everyone,
    Please send me CCNA Security 210-260 dumps at {{{email not allowed}}}

    Thanks

  14. jaber-omar
    May 30th, 2018

    Hello Everyone,
    Please send me CCNA Security 210-260 dumps at {{{jaber-omar @ hotmail . com}}}

    Thanks

  15. jaber-omar
    May 30th, 2018

    thank u Saleh al-aujan

  16. john
    June 2nd, 2018

    please send latest CCNA Security dump to j_0235 @ yahoo . com
    thanks!

  17. Muhammad Salahuddin
    June 6th, 2018

    Hello Everyone, I need CCNA security Drag and Drop please anyone can help me. Thanks

  18. Richardson
    June 9th, 2018

    HELLO EVERYONE, PLS I NEED CCNA SECURITY DUMPS
    CAN ANYONE HELP ME OUT. KINDLY SEND ME AT {{email not allowed}}

  19. kakashi
    June 10th, 2018

    Hello plase send me CCNA Security 210-260 dumps at mu 349919 @ gmail . com
    Thanks!

  20. Joe
    June 11th, 2018

    Hello please send me CCNA Security 210-260 dumps @ mumra5577@ gmail.com

  21. Mustafe
    June 12th, 2018

    Hello Everyone,
    Please send me CCNA Security 210-260 dumps at {email not allowed}

    Thanks

  22. Anonymous
    June 12th, 2018

    Hello Everyone,
    Please send me CCNA Security 210-260 dumps at C14704291 @ mydit. ie

    Thanks

  23. Cooldude
    June 13th, 2018

    Please send me latest DUMPS to Jistower1 at geemale dot com

Comment pages
1 13 14 15 1768
Add a Comment