Describe the Options for Securing Access to a Network Switch NETWORKING-FOUNDATIONS Practice Questions (Page 7)

Questions 31–34

1. 31foundation · easy

   Which statement best describes why SSH is preferred over Telnet for remote management of a network switch?

   • ASSH uses a connectionless protocol, making it faster and more reliable than Telnet over unreliable links.
   • BSSH automatically blocks all unauthorized IP addresses, while Telnet requires manual ACL configuration.
   • CSSH is a proprietary protocol developed by Dell, while Telnet is an open standard that lacks vendor support.
   • DSSH encrypts all management traffic, including passwords and commands, while Telnet sends them in plaintext.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What does port security on a switch use to restrict which devices can connect to a port?

   • AEncryption of all traffic on the port
   • BMAC address filtering
   • CIP address filtering
   • DUsername and password authentication
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the primary purpose of the encryption provided by SSH when managing a switch remotely?

   • ATo ensure that management sessions are not intercepted or read by unauthorized parties
   • BTo authenticate the switch to the network administrator
   • CTo compress management traffic and reduce bandwidth usage
   • DTo prevent denial-of-service attacks on the switch's management interface
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Why is Telnet considered insecure for switch management even if a strong password is used?

   • ATelnet does not support password authentication at all.
   • BTelnet uses weak encryption that can be easily broken with modern computers.
   • CThe password is sent in plaintext and can be intercepted during transmission.
   • DTelnet is vulnerable to brute-force attacks because it does not lock out after failed attempts.
   Reveal Solution Discussion Select an answer first