A. If a port is connected to a foreign device make sure to disable CDP， DTP， RPR， PAgP， UDLP， and any other unnecessary protocols， and enable UplinkFast/BPDU guard on it.
B. Enable root guard feature to prevent a directly or indirectly connected STP-capable device from affecting the location of the root bridge.
C. Configure VTP domains appropriately or turn off VTP altogether to limit or prevent possible undesirable protocol interaction with regards to the network-wide VLAN configuration.
D. Set the native VLAN ID to match the port VLAN ID of any 802.1q trunk to prevent spoofing.
E. Disable all unused ports and place them in an unused VLAN to avoid unauthorized access.
您可能感興趣的試卷
你可能感興趣的試題
A. Smaller companies are at less risk than larger enterprises， so their security needs are not as great.
B. Business strategy should directly relate to the security policy and budget.
C. The designated security expert should report to the IT department， since that is where thesolution will be implemented.
D. Security should be a continuous process.
E. Security solutions should come from multiple vendors to make it easier to coordinate security events from the point of origin.
A. Cisco lOS Matrix Navigator
B. Cisco Feature Navigator
C. Cisco lOS Package Planner
D. Cisco lOS Security Planner
E. Cisco Dynamic Configuration Tool
A. available only in autonomous APs
B. available in autonomous and lightweight APs
C. a feature of WDS in autonomous APs
D. a feature of WDS in lightweight APs
E. requires at least one AP and one Wireless LAN Services Module
A. An 802.11 g access point with a variety of antennas can be used in all standard site surveys.
B. Site surveys can be performed manually or through assisted site survey.
C. Channel power during testing starts at the default minimum and gradually increases to the maximum.
D. Overlapping access points can create performance problems.
E. Surveys should be done after hours in an office building or during reduced inventory levels in warehouses.
A. It provides configuration， monitoring， and troubleshooting capabilities across a wide range of security products.
B. It integrates security device management products and collects events on an "as needed" basis to reduce management overhead.
C. It integrates security management capabilities into the router or switch.
D. It provides a single point of contact for all security configuration tasks thereby enhancing the return on investment.
E. It leverages existing network management systems such as HP OpenView to lower the cost of implementation.
最新試題
A customer needs approximately 15 to 20 wireless APs for RF coverage. Given that the customer is going to use the 1010 light weight AP with the advanced feature set， what other product is required to complete this operational functionality？ （）
The Cisco SDM can configure most， but not all， routing protocols. Which two of these routing protocols can be configured using SDM？ （Choose two.）（）
What is one thing you should be aware of when conducting a wireless site survey？（）
Which of these best describes the Cisco Lifecycle Services approach？ （）
Which Cisco security tool can best determine it a Cisco ISR router is properly secured？ （）
A company wants to connect two new offices to their main office.One building is 2 miles away from the headquarters and the other is 12 miles away. The angle between the buildings is 80 degrees. Which antenna is the best to use in this situation？ （）
What is the purpose of the Dynamic Configuration Tool？ （）
Which of these is a benefit of an integrated security management system？ （）
Which two of these statements best describe the benefits of WPAv2？ （Choose two.）（）
Which network management solution performs configuration， monitoring， and management of Cisco Firewall， VPN router， and IPS devices as well as maintains network device inventory and software distribution features？（）