Spanning-Tree Security JN0-364 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the impact of a successful STP topology manipulation attack?

   • AThe attacker becomes the root bridge and can redirect traffic.
   • BThe switch's MAC address table is flooded.
   • CThe switch stops forwarding all traffic permanently.
   • DThe switch loses all configuration.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which statement correctly describes loop guard behavior?

   • AIt disables a port when it receives any BPDU.
   • BIt blocks a port when it receives a superior BPDU.
   • CIt places a port in a loop-inconsistent state when BPDUs are no longer received.
   • DIt prevents the port from becoming a designated port.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which security feature is often recommended to be enabled together with PortFast on edge ports?

   • ALoop guard
   • BBPDU guard
   • CRoot guard
   • DMAC limiting
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A network administrator has configured a port as an edge port for a server that should not participate in STP. However, the server is accidentally configured to send BPDUs. The administrator wants to ensure that if the server sends a BPDU, the port is automatically disabled to prevent any STP issues. What should be configured on this port?

   • AEnable root guard on the port.
   • BEnable loop guard on the port.
   • CEnable BPDU guard on the port.
   • DDisable the edge port setting.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A network administrator has a core switch that is the spanning-tree root. A distribution switch is connected to the core via two links. An attacker connects a rogue switch to one of the distribution switch's access ports, and the rogue switch begins sending superior BPDUs, claiming to be the root. The administrator wants to ensure that the distribution switch's uplink ports to the core remain as root ports and that the rogue switch cannot influence the root election. What should be configured on the distribution switch's uplink ports?

   • AConfigure the uplink ports as edge ports.
   • BEnable loop guard on the uplink ports.
   • CEnable root guard on the uplink ports.
   • DEnable BPDU guard on the uplink ports.
   Reveal Solution Discussion Select an answer first