Describe the Options for Securing Access to a Network Switch NETWORKING-FOUNDATIONS Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following can an ACL on a switch use to restrict management access?

   • AMAC address of the switch's uplink port
   • BThe switch's hostname
   • CThe switch's serial number
   • DSource IP address
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A network administrator needs to remotely manage a Dell switch from a workstation on the 10.10.10.0/24 network. The switch currently has Telnet enabled for remote access. The administrator wants to eliminate the risk of credentials being intercepted on the wire while also restricting management access to only the authorized workstation. Which two actions should the administrator take?

   • AKeep Telnet enabled but add a strong password and an ACL allowing only the workstation's IP address.
   • BEnable HTTPS and configure the switch to allow only HTTPS for web management.
   • CEnable SSH and configure an ACL that permits only the workstation's IP address for management protocols.
   • DDisable Telnet and rely on console access only, since console access is inherently secure.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company has a helpdesk team that needs to view switch configurations but not change them. The network engineering team needs full configuration rights. The company wants to manage user privileges centrally. Which solution should be implemented?

   • ASNMPv3 with different users for read and write access.
   • B802.1X to control which users can access the switch.
   • CTACACS+ with different privilege levels for helpdesk and engineering.
   • DLocal accounts on each switch with different privilege levels.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   How does RBAC improve security on a switch compared to giving all users full administrator privileges?

   • AIt encrypts the switch's configuration file.
   • BIt prevents all remote access to the switch.
   • CIt limits the commands and features each user can access based on their role.
   • DIt automatically logs all user activity to an external server.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company has multiple Dell switches and wants to centralize user authentication and authorization. They require that when a network engineer logs in, the switch sends the credentials to a central server for verification, and then the server determines which commands the engineer is allowed to run. The company also wants to log all configuration changes made by the engineer. Which solution should be implemented?

   • ACreate local user accounts on each switch with role-based access control and enable logging.
   • BConfigure TACACS+ on the switches and the central server, with per-command authorization and accounting enabled.
   • CConfigure RADIUS on the switches and the central server, with accounting enabled.
   • DUse SSH with local accounts and rely on the switch's audit log for changes.
   Reveal Solution Discussion Select an answer first