网友您好, 请在下方输入框内输入要搜索的题目:

题目内容 (请给出正确答案)

By default, each port in a Cisco Catalyst switch is assigned to VLAN1. Which two recommendations are key to avoid unauthorized management access? ()

  • A、Create an additional ACL to block the access to VLAN 1.
  • B、Move the management VLAN to something other than default.
  • C、Move all ports to another VLAN and deactivate the default VLAN.
  • D、Limit the access in the switch using port security configuration.
  • E、Use static VLAN in trunks and access ports to restrict connections.
  • F、Shutdown all unused ports in the Catalyst switch.

参考答案

更多 “By default, each port in a Cisco Catalyst switch is assigned to VLAN1. Which two recommendations are key to avoid unauthorized management access? ()A、Create an additional ACL to block the access to VLAN 1.B、Move the management VLAN to something other than default.C、Move all ports to another VLAN and deactivate the default VLAN.D、Limit the access in the switch using port security configuration.E、Use static VLAN in trunks and access ports to restrict connections.F、Shutdown all unused ports in the Catalyst switch.” 相关考题
考题 An administrator would like to configure a switch over a virtual terminal connection from locations outside of the local LAN. Which of the following are required in order for the switch to be configured from a remote location? (Choose two)A. The switch must be reachable through a port connected to its management VLAN.B. The switch console port must be connected to the Ethernet LAN.C. The switch must be fully configured as an SNMP agent.D. The switch must be configured with an IP address, subnet mask, and default gateway.E. The switch management VLAN must be created and have a membership of at least one switch port.F. The switch must be connected to a router over a VLAN trunk.

考题 将交换机的access端口ethernet0/1加入VLAN4,可用如下方法配置()。A.[Switch]vlan 4[Switch-vlan4]port ethernet0/1B.[Switch]vlan 4[Switch-Ethernet0/1]port access vlan 4C.[Switch]vlan 4[Switch-vlan4]port accesse thernet0/1D.[Switch]vlan 4[Switch-Ethernet0/1]port access vlan pvid 4[Huawei]vlan 3500[Huawei-Gigabit Ethernet0/0/1]disth interface Gigabit Ethernet0/0/1 port link-type access portdefault vlan 3500

考题 A Cisco Catalyst switch is part of the CIS network. As an experienced network administrator, you are thinking of filtering the traffic within VLANI00 with the use of a VACL named test on that switch.Which of the following command will enable that?()A. interface vlan 100 ip access-group test inB. interface vlan 100 ip access-group testC. vlan access-map test 100D. vlan filter test vlan-list 100

考题 On a Cisco Catalyst switch, which configuration command is used to apply a VACL named "test"to filter the traffic within VLAN100? () A. interface vlan 100 ip access-group testB. interface vlan 100 ip access-group test inC. interface vlan 100 ip access-group test outD. vlan filter test vlan-list 100E. vlan access-map test 100

考题 You are configuring a new Catalyst switch that you want to manage remotely from workstations on other network segments within your enterprise.Which of the following are required to allow remote management of the switch over IP?()A. The switch name must match the workgroup name of the local network.B. The switch must be configured with an IP address and default gateway.C. The remote workstations must have access to the management VLAN of the switch.D. CDP must be enabled on the switch so that it can be located by other devices on the network.

考题 Which interface commands would you enter on a Catalyst 2900 switch, if your goal was to bring all VLAN traffic to another directly connected switch?() A. Switch(config-if)# vlan allB. Switch(config-if)# switchport trunk encapsulation dot1qC. Switch(config-if)# switchport access vlan allD. Switch(config-if)# switchport mode trunkE. Switch(config-if)# switchport access vlan 303

考题 Why would a network administrator configure port security on a switch?() A. To prevent unauthorized Telnet access to a switch port.B. To limit the number of Layer 2 broadcasts on a particular switch port.C. To prevent unauthorized hosts from accessing the LAN.D. To protect the IP and MAC address of the switch and associated ports.E. To block unauthorized access to the switch management interfaces over common TCP ports.

考题 By default, each port in a Cisco Catalyst switch is assigned to VLAN1. Which two recommendations are key to avoid unauthorized management access?() A. Create an additional ACL to block the access to VLAN 1.B. Move the management VLAN to something other than default.C. Move all ports to another VLAN and deactivate the default VLAN.D. Limit the access in the switch using port security configuration.E. Use static VLAN in trunks and access ports to restrict connections.F. Shutdown all unused ports in the Catalyst switch.

考题 Which two statements describe the Cisco implementation of VLANs?() A. VLAN 1 is the default Ethernet VLAN.B. CDP advertisements are only sent on VLAN 1002.C. By default, the management VLAN is VLAN 1005.D. By default, the switch IP address is in VLAN 1005.E. VLAN 1002 through 1005 are automatically created and cannot be deleted.

考题 Why would a network administrator configure port security on a switch()。 A.to prevent unauthorized Telnet access to a switch portB.to limit the number of Layer 2 broadcasts on a particular switch portC.to prevent unauthorized hosts from accessing the LAND.to protect the IP and MAC address of the switch and associated portsE.to block unauthorized access to the switch management interfaces over common TCP ports

考题 On a Cisco Catalyst switch, which configuration command is used to apply a VACL named "test"to filter the traffic within VLAN100? ()A、interface vlan 100 ip access-group testB、interface vlan 100 ip access-group test inC、interface vlan 100 ip access-group test outD、vlan filter test vlan-list 100E、vlan access-map test 100

考题 Why would a network administrator configure port security on a switch?()A、to prevent unauthorized Telnet access to a switch portB、to limit the number of Layer 2 broadcasts on a particular switch portC、to prevent unauthorized hosts from accessing the LAND、to protect the IP and MAC address of the switch and associated portsE、to block unauthorized access to the switch management interfaces over common TCP ports

考题 Which interface commands would you enter on a Catalyst 2900 switch, if your goal was to bring all VLAN traffic to another directly connected switch?()A、Switch(config-if)# vlan allB、Switch(config-if)# switchport trunk encapsulation dot1qC、Switch(config-if)# switchport access vlan allD、Switch(config-if)# switchport mode trunkE、Switch(config-if)# switchport access vlan 303

考题 Which two components should be part of a security implementation plan?()A、detailed list of personnel assigned to each task within the planB、a Layer 2 spanning tree design topologyC、rollback guidelinesD、placing all unused access ports in VLAN 1 to proactively manage port securityE、enabling SNMP access to Cisco Discovery Protocol data for logging and forensic analysis

考题 An administrator would like to configure a switch over a virtual terminal connection from locations outside of the local LAN. Which of the following are required in order for the switch to be configured from a remote location? ()A、The switch must be configured with an IP address,subnet mask,and default gateway.B、The switch must be connected to a router over a VLAN trunk.C、The switch must be reachable through a port connected to its management VLAN.D、The switch console port must be connected to the Ethernet LAN.E、The switch management VLAN must be created and have a membership of at least one switch port.F、The switch must be fully configured as an SNMP agent.

考题 An administrator would like to configure a switch over a virtual terminal connection from locations outside of the local LAN. Which of the following are required in order for the switch to be configured from a remote location? ()A、The switch must be configured with an IP address, subnet mask, and default gateway.B、The switch must be connected to a router over a VLAN trunk.C、The switch must be reachable through a port connected to its management VLAN.D、The switch console port must be connected to the Ethernet LAN.E、The switch management VLAN must be created and have a membership of at least one switch

考题 Which two statements about Cisco Security Management Suite are correct?()A、It should be implemented in a management VLAN.B、Its connection to managed devices should be over a data VLAN.C、It is made up of Cisco Security MARS and Clean Access software.D、It should be deployed as close to the edge of the network as possible.E、It delivers policy administration and enforcement for the Cisco Self-Defending Network.

考题 When configuring port security on a Cisco Catalyst switch port, what is the default action taken by the switch if a violation occurs? ()A、protect (drop packets with unknown source addresses)B、restrict (increment SecurityViolation counter)C、shut down (access or trunk port)D、transition (the access port to a trunking port)

考题 You are configuring a new Catalyst switch that you want to manage remotely from workstations on other network segments within your enterprise.Which of the following are required to allow remote management of the switch over IP?()A、The switch name must match the workgroup name of the local network.B、The switch must be configured with an IP address and default gateway.C、The remote workstations must have access to the management VLAN of the switch.D、CDP must be enabled on the switch so that it can be located by other devices on the network.

考题 多选题Which two statements about Cisco Security Management Suite are correct?()AIt should be implemented in a management VLAN.BIts connection to managed devices should be over a data VLAN.CIt is made up of Cisco Security MARS and Clean Access software.DIt should be deployed as close to the edge of the network as possible.EIt delivers policy administration and enforcement for the Cisco Self-Defending Network.

考题 单选题Why would a network administrator configure port security on a switch?()A to prevent unauthorized Telnet access to a switch portB to limit the number of Layer 2 broadcasts on a particular switch portC to prevent unauthorized hosts from accessing the LAND to protect the IP and MAC address of the switch and associated portsE to block unauthorized access to the switch management interfaces over common TCP ports

考题 多选题By default, each port in a Cisco Catalyst switch is assigned to VLAN1. Which two recommendations are key to avoid unauthorized management access? ()ACreate an additional ACL to block the access to VLAN 1.BMove the management VLAN to something other than default.CMove all ports to another VLAN and deactivate the default VLAN.DLimit the access in the switch using port security configuration.EUse static VLAN in trunks and access ports to restrict connections.FShutdown all unused ports in the Catalyst switch.

考题 多选题An administrator would like to configure a switch over a virtual terminal connection from locations outside of the local LAN. Which of the following are required in order for the switch to be configured from a remote location? ()AThe switch must be configured with an IP address, subnet mask, and default gateway.BThe switch must be connected to a router over a VLAN trunk.CThe switch must be reachable through a port connected to its management VLAN.DThe switch console port must be connected to the Ethernet LAN.EThe switch management VLAN must be created and have a membership of at least one switch

考题 单选题A Cisco Catalyst switch is part of the CIS network. As an experienced network administrator, you are thinking of filtering the traffic within VLANI00 with the use of a VACL named "test" on that switch. Which of the following command will enable that?()A interface vlan 100 ip access-group test inB interface vlan 100 ip access-group testC vlan access-map test 100D vlan filter test vlan-list 100

考题 单选题Why would a network administrator configure port security on a switch?()A To prevent unauthorized Telnet access to a switch port.B To limit the number of Layer 2 broadcasts on a particular switch port.C To prevent unauthorized hosts from accessing the LAN.D To protect the IP and MAC address of the switch and associated ports.E To block unauthorized access to the switch management interfaces over common TCP ports.

考题 单选题On a Cisco Catalyst switch, which configuration command is used to apply a VACL named "test"to filter the traffic within VLAN100? ()A interface vlan 100 ip access-group testB interface vlan 100 ip access-group test inC interface vlan 100 ip access-group test outD vlan filter test vlan-list 100E vlan access-map test 100

考题 多选题Which two statements describe the Cisco implementation of VLANs?()AVLAN 1 is the default Ethernet VLAN.BCDP advertisements are only sent on VLAN 1002.CBy default, the management VLAN is VLAN 1005.DBy default, the switch IP address is in VLAN 1005.EVLAN 1002 through 1005 are automatically created and cannot be deleted.