Spanning-Tree Security JN0-364 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which combination of features is considered a best practice for securing spanning-tree operation?

   • ARoot guard on all ports and MAC limiting on trunk ports
   • BPortFast on all ports and loop guard on edge ports
   • CBPDU guard on edge ports and root guard on ports that should not become root ports
   • DLoop guard on edge ports and BPDU guard on root ports
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which statement is true about root guard?

   • AIt disables the port when a BPDU is received.
   • BIt prevents the port from sending BPDUs.
   • CIt automatically re-enables the port after a timeout.
   • DIt places the port in a root-inconsistent state when a superior BPDU is received.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is a common STP attack vector?

   • ASending spoofed BPDUs to manipulate the root bridge election
   • BSending excessive unicast frames to fill the MAC table
   • CSending DHCP requests to exhaust IP addresses
   • DSending ARP replies to redirect traffic
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is a recommended best practice when configuring spanning-tree security?

   • AEnable loop guard on all edge ports
   • BDisable spanning-tree protocol on all edge ports
   • CEnable BPDU guard on all ports, including trunk ports
   • DUse root guard on ports that should never become root ports
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the purpose of PortFast (edge port) on a switch port?

   • ATo limit the number of MAC addresses learned on the port
   • BTo immediately transition the port to forwarding state, bypassing listening and learning
   • CTo prevent the port from receiving BPDUs
   • DTo prevent the port from becoming a root port
   Reveal Solution Discussion Select an answer first