Describe the Options for Securing Access to a Network Switch NETWORKING-FOUNDATIONS Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company has a team of network technicians who need to monitor switch status and view configurations, but they should not be able to change any settings. The network engineers need full configuration rights. The company wants to enforce this separation without maintaining separate local accounts on each switch. Which approach should be used?

   • AUse SNMPv3 with different community strings for read and write access.
   • BConfigure TACACS+ with different privilege levels for technicians and engineers.
   • CCreate local accounts on each switch with different privilege levels.
   • DImplement 802.1X for network access and assume technicians have read-only access.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Why is SNMPv3 preferred over SNMPv2c for monitoring a switch in a production network?

   • ASNMPv3 uses a different port number that is more secure.
   • BSNMPv3 is the only version that can monitor Dell switches.
   • CSNMPv3 is faster and uses less bandwidth than SNMPv2c.
   • DSNMPv3 provides authentication and encryption, while SNMPv2c sends community strings in plaintext.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the purpose of 802.1X on a switch port?

   • ATo filter traffic based on MAC addresses.
   • BTo provide a backup power source for the port.
   • CTo authenticate a device before it is allowed to access the network through the port.
   • DTo encrypt all traffic on the port.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company wants to ensure that only authorized users can connect their laptops to the network via switch ports. Each user has a username and password. The company wants to authenticate the user before granting any network access. Which technology should be implemented on the switch ports?

   • APort security with sticky MAC addresses.
   • B802.1X with a RADIUS server for authentication.
   • CSNMPv3 to monitor which devices are connecting.
   • DAn ACL that allows only corporate laptop IP addresses.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the purpose of an access control list (ACL) applied to a switch's management interface?

   • ATo encrypt all traffic to and from the management interface.
   • BTo increase the speed of the management interface.
   • CTo restrict which source IP addresses are allowed to access the management interface.
   • DTo automatically block all traffic from the internet.
   Reveal Solution Discussion Select an answer first