A network administrator is asked to configure VLANS 2, 3 and 4 for a new implementation. Some ports must be assigned to the new VLANS with unused remaining. Which action should be taken for the unused ports?

• A.configure ports as access ports
• B.configure in a nondefault native VLAN
• C.configure ports in a black hole VLAN
• D.configure port in the native VLAN

Comment: *

Name: *

Email: *

Verification: *

Router A learns the same route from two different neighbors, one of the neighbor routers is an OSPF neighbor and the other is an EIGRP neighbor.
What is the administrative distance of the route that will be installed in the routing table?

• A.20
• B.90
• C.110
• D.115

Comment: *

Name: *

Email: *

Verification: *

Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they mitigate on the right.

Correct Answer:

Explanation:
Double-Tagging attack:

When the packet from the attacker reaches Switch A, Switch A only sees the first VLAN 10 and it matches with its native VLAN 10 so this VLAN tag is removed. Switch A forwards the frame out all links with the same native VLAN 10. Switch B receives the frame with an tag of VLAN 20 so it removes this tag and forwards out to the Victim computer.
Note: This attack only works if the trunk (between two switches) has the same native VLAN as the attacker.
To mitigate this type of attack, you can use VLAN access control lists (VACLs, which applies to all traffic within a VLAN. We can use VACL to drop attacker traffic to specific victims/servers) or implement Private VLANs.
ARP attack (like ARP poisoning/spoofing) is a type of attack in which a malicious actor sends falsified ARP messages over a local area network as ARP allows a gratuitous reply from a host even if an ARP request was not received. This results in the linking of an attacker's MAC address with the IP address of a legitimate computer or server on the network. This is an attack based on ARP which is at Layer 2.
Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network which can be used to mitigate this type of attack.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The network administrator wants VLAN 67 traffic to be untagged between Switch 1 and Switch 2 while all other VLANs are to remain tagged.
Which command accomplishes this task?

• A.switchport trunk allowed vlan 67
• B.switchport private-vlan association host 67
• C.switchport trunk native vlan 67
• D.switchport access vlan 67

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

PC1 is trying to ping PC3 for the first time and sends out an ARP to S1 Which action is taken by S1?

• A.It forwards it out interface G0/2 only.
• B.It is flooded out every port except G0/0.
• C.It drops the frame.
• D.It forwards it out G0/3 only

Comment: *

Name: *

Email: *

Verification: *