单项选择题

You are implementing basic switch security best practic……

You are implementing basic switch security best practices.
Which of these is a tactic that you can use to mitigate compromises from being launched through the switch？（）

A.Make all ports private VLAN ports.
B.Place all unused ports in native VLAN 1 until needed.
C.Proactively configure unused switch ports as access ports.
D.Disable Cisco Discovery Protocol globally.

<上一题目录下一题>

热门试题

单项选择题Three Cisco Catalyst switches have been configured with a first-hop redundancy protocol. While reviewing some show commands， debug output， and the syslog， you discover the following information： What conclusion can you infer from this information？（）

A.VRRP is initializing and operating correctly.
B.HSRP is not properly exchanging three hello messages.
C.VRRP is not properly exchanging three hello messages.
D.HSRP is initializing and operating correctly.
E.GLBP is not properly exchanging three hello messages.
F.GLBP is initializing and operating correctly.

单项选择题You work as a network engineer for . You study the exhibit carefully. Three switches are configured for HSRP. Switch1 remains in the HSRP listen state. What is the most likely cause of this status？（）

A.this is normal operation
B.IP addressing is incorrect
C.standby group number does not match VLAN number
D.incorrect standby timers
E.incorrect priority commands

多项选择题hostname Switch1 interface Vlan10 ip address 172.16.10.32 255.255.255.0 no ip redirects standby 1 ip 172.16.10.110 standby 1 timers 1 5 standby 1 priority 130 hostname Switch2 interface Vlan10 ip address 172.16.10.33 255.255.255.0 no ip redirects standby 1 ip 172.16.10.110 standby 1 timers 1 5 standby 1 priority 120 HSRP was implemented and configured on two switches while scheduled network maintenance was performed. After the two switches have finished rebooting， you notice via show commands that Switch2 is the HSRP active router. Which two items are most likely the cause of Switch1 not becoming the active router？（）

A.premption is disabled
B.standby group number does not match VLAN number
C.IP addressing is incorrect
D.IP redirect is disabled
E.incorrect standby timers
F.booting delays

单项选择题You work as a network engineer for . You study the exhibit carefully. From the configuration shown， what can be determined？（） Exhibit:

A.The remaining secure MAC addresses will be dynamically learned， converted to sticky secure MAC addresses， and added to the running configuration.
B.Since a voice VLAN is configured in this example， port security should be set for a maximum of 2.
C.The sticky addresses will only be those manually configured MAC addresses enabled with the sticky keyword.
D.A security violation will restrict the number of addresses to a maximum of 10 addresses per access VLAN and voice VLAN. The port will be shut down if more than 10 devices per VLAN attempt to access the port.

单项选择题When you enable port security on an interface that is also configured with a voice VLAN， what is the maximum number of secure MAC addresses that should be set on the port？（）

A.No more than one secure MAC address should be set.
B.The default will be set.
C.The IP phone should use a dedicated port， therefore only one MAC address is needed per port.
D.No value is needed if the switchport priority extend command is configured.
E.No more than two secure MAC addresses should be set.