Describe the Options for Securing Access to a Network Switch NETWORKING-FOUNDATIONS Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A network administrator manages Dell switches through their web interfaces. The security team has identified that management sessions are being intercepted, exposing credentials and configuration data. The administrator wants to secure web-based management and also restrict access to the management interface from only the IT department's subnet (192.168.10.0/24). Which configuration should be applied?

   • AEnable SSH and configure an ACL for the IT subnet.
   • BDisable the web interface and use only SNMP for management.
   • CContinue using HTTP but add a strong password and restrict access to the IT subnet.
   • DEnable HTTPS on the switches and configure an ACL that permits only the IT subnet for HTTPS management.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What security feature does SNMPv3 provide that earlier SNMP versions (v1 and v2c) lack?

   • AA graphical user interface for configuring monitoring.
   • BThe ability to monitor switch port statistics in real time.
   • CAuthentication and encryption of SNMP messages.
   • DSupport for IPv6 addressing.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a key difference between local authentication and remote authentication on a switch?

   • ALocal authentication uses accounts stored on the switch, while remote authentication uses a central server.
   • BRemote authentication does not require a network connection to the switch.
   • CLocal authentication is always more secure than remote authentication.
   • DLocal authentication is only available on Dell switches.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company has a Dell switch that is managed remotely. The security team wants to ensure that if the central authentication server is unreachable, the network administrator can still log in to the switch to troubleshoot. However, they also want to ensure that other users cannot log in when the server is down. Which configuration should be used?

   • AConfigure AAA with no local fallback.
   • BConfigure AAA with a local fallback account for the administrator only.
   • CDisable AAA and use only local accounts.
   • DConfigure local accounts for all users and use AAA as a fallback.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A Dell switch's management interface is accessible from any source on the corporate network. The security team wants to restrict SSH management access to only the network operations center (NOC) subnet (172.16.5.0/24). Which configuration should be applied on the switch?

   • AChange the SSH port to a non-default port.
   • BApply an ACL that permits SSH from the NOC subnet and denies all other sources.
   • CDisable SSH and use Telnet with a strong password.
   • DEnable SNMPv3 and use it for management instead of SSH.
   Reveal Solution Discussion Select an answer first