A MAC address flood attack is occurring on the LAN. During this attack， numerous frames areforwarded to a switch which causes the CAM table to fill to capacity. How does this action benefitthe attacker？（）

A . first B . following control of fire C . following restoration of vital services D . only if a threat exist

A .  network B .  application C .  session D .  data link

A . denial of service B . brute force C . reconnaissance D . Trojan horse

A . Static secure MAC address B . Dynamic secure MAC address C . Pervasive secure MAC address D . Sticky secure MAC addre

A .  Layer 2 mode B .  Layer 3 Edge mode C .  Layer 3 Central mode D .  Layer 3 In-Band mode

A . 具有IP地址172.16.0.1的主机连接在端口GE0/0上 B . 具有MAC地址001c-233d-5695的主机连接在端口GE0/1上 C . 以上表项是由管理员静态配置的 D . 以上表项是由交换机动态生成的

A . NIC B . BIA C . OUI D . VAI

A .  Configure only trusted interfaces with root guard. B .  Implement private VLANs （PVLANs） to carry only user traffic. C .  Implement private VLANs （PVLANs） to carry only DHCP traffic. D .  Configure only untrusted interfaces with root guard. E .  Configure DHCP spoofing on all ports that connect untrusted clients. F .  Configure DHCP snooping only on ports that connect trusted DHCP servers. G .  None of the other alternatives apply

A . No more than one secure MAC address should be set. B . The default will be set. C . The IP phone should use a dedicated port， therefore only one MAC address is needed per port. D . No value is needed if the switchport priority extend command is configured.  E . No more than two secure MAC addresses should be set.

A .  Uplink Ethernet ports or border ports B .  Appliance ports C .  Server ports D .  Fabric ports E .  Backplane ports F .  vEth interfaces G .  A Fabric Interconnect doesn’t learn MAC addresses in End Host mode. Pinning is used instead.

A . 0000.0C07.AC15 B . 0000.5E00.01A3 C . 0007.B400.AE01 D . 0007.5E00.B301

A .  R1 B .  R2 C .  The AVG D .  The AVF E .  None of the other alternatives apply

A . It is a globally unique IP address. B . It is a globally unique 48 bit address C . It is provided by the manufacturer of the NIC. D . It is used as part of the IPX/SPX configuration. E . It is a logical address.

A . The attacking device spoofs a source MAC address of a valid host currently in the CAM table. The switch then forwards frames destined for the valid host to the attacking device. B . Frames with unique， invalid destination MAC addresses flood the switch and exhaust CAM table space. The result is that new entries cannot be inserted because of the exhausted CAM table space， and traffic is subsequently flooded out all ports. C . The attacking device crafts ARP replies intended for valid hosts. The MAC address of the attacking device then becomes the destination address found in the Layer 2 frames sent by the valid network device. D . The attacking device crafts ARP replies intended for valid hosts. The MAC address of the attacking device then becomes the source address found in the Layer 2 frames sent by the valid network device. E . The attacking device spoofs a destination MAC address of a valid host currently in the CAM table. The switch then forwards frames destined for the valid host to the attacking device. F . Frames with unique， invalid source MAC addresses flood the switch and exhaust CAM table space. The result is that new entries cannot be inserted because of the exhausted CAM table space， and traffic is subsequently flooded out all ports. G . None of the other alternatives apply

A . denial of service B . brute force C . reconnaissance D . Trojan horse&e

A .  NX-OS uses a random MAC address from the IEEE OUI block that is assigned to Cisco. B .  The VDC system MAC is pulled from the active supervisor and concatenated through a hash to ensure uniqueness. C .  NX-OS uses a value that is based on a range that is assigned to the SPROM of the system backplane. D .  The VDC system MAC is based on a range that is allocated to the first line card that is installed in the switch.

A . the MAC address of the seiver network interface B . the MAC address of host A C . the MAC address of router interface e 1 D . the MAC address of router interface e0

A .  Enable conversational learning on FabricPath vlans 1-10 for F-Series module B .  Enable FabricPath protocol on VLANs 1–10 C .  No need for this command as conversational learning is enabled by default for all VLANs. D .  Enable conversational learning on Classical Ethernet VLAN for F-Series module

A .  IRDP B .  Proxy ARP C .  GLBP D .  HSRP E .  VRRP F .  IP Redirect

A . Place unused ports in a common VLAN. B . Implement private VLANs. C . Implement DHCP snooping. D . Implement port security. E . Implement VLAN access maps.

A . The port’s violation mode is set to restrict B . The port is shut down C . The MAC address table is cleared and the new MAC address is entered into the table D . The port remains enabled， but bandwidth is throttled until old MAC addresses are aged out

A . The MAC address of the NIC in Host 1 B . The MAC address of the NIC in server 1 C . The MAC address of the Fa0/0 interface of router R1 D . The MAC address of the s0/0/0 interface of the router R2

A. 2345:0:0:8::1 B. 2345:0:0:8:0:FF:FE11:1111 C. FE80::8:0:FF:FE11:1111 D. FE80:0:0:8::1