Describe the Options for Securing Access to a Network Switch NETWORKING-FOUNDATIONS Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A network monitoring system needs to retrieve switch statistics securely. The security team requires that monitoring data be encrypted and that only the monitoring server can query the switches. Which configuration should be used?

   • ASNMPv3 with authentication and privacy, and an ACL permitting only the monitoring server.
   • BSNMPv3 with authentication only, and no ACL.
   • CSNMPv2c with a community string and an ACL permitting only the monitoring server.
   • DUse SSH to retrieve statistics manually.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company wants to enforce that only users in the 'network-admin' group can configure switches, and all configuration commands must be logged with the username and timestamp. The company uses a central identity server. Which AAA feature should be enabled on the switches?

   • ATACACS+ with command authorization and accounting.
   • BRADIUS with authentication only.
   • CLocal authentication with privilege levels.
   • DSNMPv3 with authentication and privacy.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is a potential security advantage of using remote authentication over local authentication for switch management?

   • AIt eliminates the need for any network connectivity.
   • BIt allows for centralized enforcement of password policies and account management.
   • CIt prevents all unauthorized access to the switch.
   • DIt automatically encrypts all management traffic.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the main security risk of using Telnet to manage a network switch?

   • ATelnet is vulnerable to packet sniffing because it transmits data, including passwords, in plaintext.
   • BTelnet is a proprietary protocol that is not supported by most network devices.
   • CTelnet automatically logs all sessions to a remote server, creating a privacy risk.
   • DTelnet can only be used from a directly connected console port, limiting remote access.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company wants to ensure that only corporate laptops can connect to the network through switch ports. Each laptop has a digital certificate installed. The company wants to authenticate the device before granting any network access. Which technology should be implemented on the switch ports?

   • AAn ACL that allows only corporate laptop IP addresses.
   • BSNMPv3 to monitor which devices are connecting.
   • CPort security with sticky MAC addresses.
   • D802.1X with EAP-TLS using the laptop certificates.
   Reveal Solution Discussion Select an answer first