Refer to the exhibit. Dynamic ARP inspection （DAI） is enabled on switch SW_A only. Both Host_A and Host_B acquire their IP addresses from the DHCP server connected to switch SW_A.
What would the outcome be if Host_B initiated an ARP spoof attack toward Host_A ？ （）
A. The spoof packets will be inspected at the ingress port of switch SW_A and will be permitted.
B. The spoof packets will not be inspected at the ingress port of switch SW_A and will be permitted.
C. The spoof packets will not be inspected at the ingress port of switch SW_A and will be dropped.
D. The spoof packets will be inspected at the ingress port of switch SW_A and will be dropped.
您可能感兴趣的试卷
你可能感兴趣的试题
Refer to the exhibit.
What will happen to traffic within VLAN 14 with a source address of 172.16.10.5？ （）
A. The traffic will be forwarded to the router processor for further processing.
B. The traffic will be dropped.
C. The traffic will be forwarded to the TCAM for further processing.
D. The traffic will be forwarded without further processing.
A hacker on the Company network is attempting to hop onto a different VLAN.
Which two statements about VLAN hopping are true？ （）
A. An end station attempts to gain access to all VLANs by transmitting Ethernet frames in the 802.1q encapsulation.
B. Configuring an interface with the "switchport mode dynamic" command will prevent VLAN hopping.
C. Attacks are prevented by utilizing the port-security feature.
D. Configuring an interface with the "switchport mode access" command will prevent VLAN hopping.
E. An end station attempts to redirect VLAN traffic by broadcasting multiple ARP requests.
The Company security administrator wants to prevent VLAN hopping on the network.
What is one method that can be used to do this？ （）
A. Attacks are prevented by utilizing the port-security feature.
B. An end station attempts to gain access to all VLANs by transmitting Ethernet frames in the 802.1q encapsulation.
C. Configuring an interface with the switchport mode dynamic command will prevent VLAN hopping.
D. An end station attempts to redirect VLAN traffic by transmitting Ethernet frames in the 802.1q encapsulation.
E. Configuring an interface with the "switchport mode access" command will prevent VLAN hopping.
The Company security administrator is concerned with VLAN hopping based attacks.
Which two statements about these attacks are true？ （）
A. Attacks are prevented by utilizing the port-security feature.
B. An end station attempts to gain access to all VLANs by transmitting Ethernet frames in the 802.1q encapsulation.
C. Configuring an interface with the switchport mode dynamic command will prevent VLAN hopping.
D. An end station attempts to redirect VLAN traffic by transmitting Ethernet frames in the 802.1q encapsulation.
E. Configuring an interface with the "switchport mode access" command will prevent VLAN hopping.
Refer to the exhibit. PCs in VLAN 2 are not able to communicate with PCs in VLAN 3.
What could be the cause？（）
A. IP routing is not enabled.
B. VTP is not configured correctly on the interfaces.
C. The command mls rp management-interface is missing.
D. The command mls rp ip must be disabled to enable the routing.
You are configuring a Cisco multilayer switch for the Company network.
Which command would you use to configure a port to act as a routed interface？（）
A. ip routing
B. switchport mode trunk
C. no switchport
D. switchport trunk native vlan 1
E. None of the other alternatives apply
Which of the following could be used to provide a Layer 3 data path between separate VLANs？（）
A. VLAN trunking
B. An external router
C. An internal route processor
D. VLAN capable bridge
E. EtherChannel
Inter-VLAN routing has been implemented in the Company network. In VLAN routing，
what are some of the disadvantages of designing a router-on-stick configuration？ （）
A. InterVLAN routing cannot be filtered by the router.
B. The router becomes a single point of failure for the network.
C. Routers will not route STP BPDUs.
D. There is a possibility of inadequate bandwidth for each VLAN.
E. Additional overhead on the router can occur.
F. NetFlow Switching is required for InterVLAN accounting.
The Company network needs to pass traffic between VLANs.
Which device should be used to accomplish this？ （）
A. Hub
B. Switch
C. Router
D. Bridge
E. None of the other alternatives apply
pany has implemented numerous multilayer switches that utilize FIB tables.
Which statement is true about the Forward Information Base （FIB） table？（）
A. The FIB is derived from the IP routing table and is optimized for maximum lookup throughput.
B. The FIB table is derived from the Address Resolution Protocol table， and it contains Layer 2 rewrite （MAC） information for the next hop.
C. When the FIB table is full， a wildcard entry redirects traffic to the Layer 3 engine.
D. The FIB lookup is based on the Layer 2 destination MAC address.
E. None of the other alternatives apply
最新试题
Refer to the exhibit. Initially， LinkA is connected and forwarding traffic. A new LinkB is then attached between SwitchA and HubA. Which two statements are true about the possible result of attaching the second link？（）
Refer to the exhibit. What does the command channel-group 1 mode desirable do？ （）
Which two statements about the various implementations of STP are true？（）
Refer to the exhibit. Which Virtual Router Redundancy Protocol （VRRP） statement is true about the roles of the master virtual router and the backup virtual router？（）
What will occur when a nonedge switch port that is configured for Rapid Spanning Tree does not receive a BPDU from its neighbor for three consecutive hello time intervals？（）
If G1/0/1 on DS1 is shutdown， what will be the current priority value of the Vlan105’s group on DS1 ？（）
Refer to the exhibit. What command was issued on the Layer 3 switch Sw1 between Exhibit #1 and Exhibit #2？（）
Which three statements are true of the Link Aggregation Control Protocol （LACP）？（）
Refer to the exhibit. All network links are FastEthernet. Although there is complete connectivity throughout the network， Front Line users have been complaining that they experience slower network performance when accessing the server farm than the Reception office experiences. Based on the exhibit， which two statements are true？（）
DS2 has not become the active device for Vlan103’s HSRP group even though all interfaces are active. As related to Vlan103’s HSRP group. What can be done to make the group function properly ？ （）