Home > CCNA – Security Questions

CCNA – Security Questions

March 23rd, 2015 Go to comments

Question 1

Explanation

We only enable PortFast feature on access ports (ports connected to end stations). But if someone does not know he can accidentally plug that port to another switch and a loop may occur when BPDUs are being transmitted and received on these ports.

With BPDU Guard, when a PortFast receives a BPDU, it will be shut down to prevent a loop -> D is correct.

Question 2

Explanation

We can verify whether port security has been configured by using the “show running-config” or “show port-security interface ” for more detail. An example of the output of “show port-security interface ” command is shown below:

show_port-security_interface.jpg

Question 3

Explanation

The full syntax of the second command is:

switchport port-security mac-address sticky [MAC]

If we don’t specify the MAC address (like in this question) then the switch will dynamically learn the attached MAC Address and place it into your running-configuration -> B is correct.

Question 4

Explanation

Please read the explanation at http://www.9tut.net/icnd2/icnd2-operations

Question 5

Explanation

Port security is only used on access port (which connects to hosts) so we need to set that port to “access” mode, then we need to specify the maximum number of hosts which are allowed to connect to this port -> C is correct.

Note: If we want to allow a fixed MAC address to connect, use the “switchport port-security mac-address ” command.

Question 6

Explanation

As we see in the output, the “Port Security” is in “Disabled” state (line 2 in the output). To enable Port security feature, we must enable it on that interface first with the command:

SwitchA(config-if)#switchport port-security

-> B is correct.

Also from the output, we learn that the switch is allowing 2 devices to connect to it (switchport port-security maximum 2) but the question requires allowing only PC_A to access the network so we need to reduce the maximum number to 1 -> D is correct.

Question 7

Explanation

Follow these guidelines when configuring port security:
+ Port security can only be configured on static access ports, trunk ports, or 802.1Q tunnel ports. -> A is not correct.
+ A secure port cannot be a dynamic access port.
+ A secure port cannot be a destination port for Switched Port Analyzer (SPAN).
+ A secure port cannot belong to a Fast EtherChannel or Gigabit EtherChannel port group. -> D is not correct
+ You cannot configure static secure or sticky secure MAC addresses on a voice VLAN. -> B is not correct.
+ When you enable port security on an interface that is also configured with a voice VLAN, you must set the maximum allowed secure addresses on the port to at least two.
+ If any type of port security is enabled on the access VLAN, dynamic port security is automatically enabled on the voice VLAN.
+ When a voice VLAN is configured on a secure port that is also configured as a sticky secure port, all addresses seen on the voice VLAN are learned as dynamic secure addresses, and all addresses seen on the access VLAN (to which the port belongs) are learned as sticky secure addresses.
+ The switch does not support port security aging of sticky secure MAC addresses.
+ The protect and restrict options cannot be simultaneously enabled on an interface.

(Reference: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3550/software/release/12-1_19_ea1/configuration/guide/3550scg/swtrafc.html#wp1038546)

Note: Dynamic access port or Dynamic port VLAN membership must be connected to an end station. This type of port can be configured with the “switchport access vlan dynamic” command in the interface configuration mode. Please read more about Dynamic access port here: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3550/software/release/12-1_19_ea1/configuration/guide/3550scg/swvlan.html#wp1103064

Question 8

Explanation

One of the most widely deployed network security technologies today is IPsec over VPNs. It provides high levels of security through encryption and authentication, protecting data from unauthorized access.

Comments (47) Comments
Comment pages
1 9 10 11 1768
  1. Alex32
    February 20th, 2017

    achaino_85 @ hotmail dot com

  2. Leaked
    February 21st, 2017

    New Update, My student passed today. Latest 100% VALID CCNA Security 210-260 Exam Questions Dumps at below page including all labs in Packet Tracer format. Working VCE player also included in package
    INSTANT Download at below page:

    https://anon.click/bijus95

  3. Mian
    February 23rd, 2017

    Anyone having CCNA security best tutorials from basic to advance level??

  4. Anonymous
    February 25th, 2017

    Hello, please sent me the latest ccna sec dumbs to
    Dumspirospero79 @ web. de

    Thank you.

  5. Ali Raza
    February 28th, 2017

    Please send me the latest CCNA Security 210-260 dumps at {email not allowed}
    Thanks

  6. Ali Raza
    February 28th, 2017

    Please send me the latest CCNA Security 210-260 dumps at (s.ali 312 @ hotmail . com)
    Thanks

  7. Moran
    March 1st, 2017

    Please send me the latest CCNA Security 210-260 dumps at (eng.mkhoja@ Hotmail . com) Thanks

  8. hello friends ,
    March 4th, 2017

    I am planning to write ccna security 210-260 on this week , any one have new dumps questions plz share with me ,
    My email : {email not allowed}

  9. hello friends ,
    March 4th, 2017

    {email not allowed}

  10. my regards
    March 7th, 2017

    Looking for 210-260 dump please email me : halekyish at gmail dot com

  11. latest dumps
    March 7th, 2017

    Hello Coldplay,
    Can you (or anyone) send me the latest CCNA Security 210-260 dumps at osaamaaa at hotmail dot com
    thanks in advance

  12. Anonymous
    March 9th, 2017

    Looking for 210-260 dump please email me : {email not allowed} or {email not allowed}

  13. Anonymous
    March 9th, 2017

    Looking for 210-260 dump please email me : sjunaidali83 at gmail dot com or sjunaid_ali83 at hotmail dot com

  14. Anonymous
    March 9th, 2017

    updated CCNA Security 210-260 Latest Dump 250 Question Required Please on sjunaid_ali83 @ hotmail.com

  15. KukaBoa
    March 13th, 2017

    Need the latest CCNA 310-260 urgently…Will be trying again in a few days. {email not allowed}

  16. AUSTIN@@@@@@@@@@@@@@@00003
    March 15th, 2017

    Please can someone give links l can use to practice some or all the configurations in CCNA SECURITY please l need to practice and know them for real please and please

  17. Anonymous
    March 15th, 2017

    Hello
    Can someone please send me latest CCNA security dumps at {email not allowed}

  18. Anonymous
    March 15th, 2017

    Hello
    Can someone please send me latest CCNA security dumps at ramandeepkaurcheema@gmaildotcom

  19. 200-260 dumps
    March 23rd, 2017

    dumps from https://www.examgood.com/210-260.html is perfect. PASS IT .

  20. Anonymous
    March 29th, 2017

    could you send me a copy of ccna security dump plz? mvp8044 @ gmail . com

  21. JayW
    March 31st, 2017

    Can a kind stranger email the updated CCNA Security 210-260 dump to Gwy0215 at gmail . com?
    Thanks in advance!

  22. dumps
    April 4th, 2017

    Can someone send me the latest dumps? I need to pass this for my job or ill lose it! mikeb5479 at gmail .com

  23. faizi
    April 9th, 2017

    can any one send me dumps of 9tut.thanks in advance ( faizan.shaukat(at)yahoo.com)

  24. faizi
    April 9th, 2017

    can any one send me dumps of ccna security 210-260 of 9tut.thanks in advance ( faizan.shaukat(at)yahoo.com)

  25. lezzzgeriron
    April 11th, 2017

    what are the lab simulation exams? where i can find tutorials? thanks

  26. Anonymous
    April 12th, 2017

    Can anyone send me latest ccna security dumps too?

    {email not allowed}

  27. zalsaeedi@gmail.com
    April 12th, 2017

    Can anyone send me latest ccna security dumps too?

  28. zalsaeedi@gmail.com
    April 12th, 2017

    Hello,
    I need the latest dump for CCNA Security 210-26. I will take the exam next week, thank you!

    zalsaeedi @ gmail dot com

  29. rindanam
    April 13th, 2017

    Please send me the latest CCNA Security 210-260 dumps at a l i r i n d 8 5 at Gmail.com.

    Thanks
    Ali

  30. Anonymous
    April 15th, 2017

    please send the dumps to my veeravel1994 @ gmail dot com

  31. datsmyaggro@yahoo.com
    April 15th, 2017

    i would also like to request the latest dumps. please send to datsmyaggro at yahoo dot com

  32. robedilo
    April 17th, 2017

    Please send me dumps to my robedilo@gmail dot com?
    Thanks so much

  33. Hello
    April 19th, 2017

    Can someone please send me latest CCNA security dumps at {email not allowed} please?

  34. Hello
    April 19th, 2017

    Can anyone send me latest ccna security dumps too devon172013 @ gmail.com

  35. Andy
    April 19th, 2017

    Hi guys, can someone share relevant dumps for CCNA 210-260 Security?
    Send please to:
    hellriser2007 @ gmail . com

  36. Anonymous
    April 19th, 2017

    coldplay please send me the 210-260 dump if you have devon172013 (@gmail.com)

  37. Sunil
    April 27th, 2017

    If anyone can have CCNA security dumps, please share me. {email not allowed}

  38. Laila
    April 30th, 2017

    Can someone send me the latest CCNA Security 210-260 latest questions please. {email not allowed}

  39. Laila
    April 30th, 2017

    amysoliman8969(@gmail.com)

  40. Moataz
    May 2nd, 2017

    Hello Everyone,
    I just noticed that many guys complained about the CCNA SECURITY EXAM, I just want to know if these problems still exist or not.
    https://learningnetwork.cisco.com/thread/96699

  41. Anonymous
    May 7th, 2017

    Hi plz send me 210-260 latest dump to email {email not allowed}

  42. hamassa
    May 7th, 2017

    Hi plz send me 210-260 latest dump to email en/./m/./essamm/@/gmail

  43. CCNA 200-125
    May 8th, 2017

    Can someone email me the 210-260 recent dumps {email not allowed}

  44. security
    May 9th, 2017

    PLease email me security valid dumps

  45. Anonymous
    May 11th, 2017

    please send me valid security dump mustafa_ghoniem (@yahoo.com)

  46. Sean
    May 22nd, 2017

    Coldpay or anyone else please send me the 210-260 dumps seon(@grr.la)

  47. neckcraker
    May 24th, 2017

    hi guys any new questions in the exam?
    thank you in advanced

Comment pages
1 9 10 11 1768