First hop redundancy protocol packets layer 2 control

  • No School
  • AA 1
  • 457

This preview shows page 335 - 338 out of 457 pages.

• First-hop redundancy protocol packets • Layer 2 control packets • Management packets (telnet, Secure Shell [SSH] Protocol, Simple Network ManagementProtocol [SNMP]) <--- C and D are not correct. • Multicast control packets Cisco 400-101 Exam "Pass Any Exam. Any Time." - 335
Image of page 335
• Routing protocol packets • Packets with IP options • Packets with time to live (TTL) set to 1 • Packets that require ACL logging • Packets that require an initial lookup (first packet in a flow: FIB miss) • Packets that have don't support hardware switching/routing ReferencE. - switches/white_paper_c11_553261.html QUESTION NO: 413 Which two statements are true about AAA? (Choose two.) A. AAA can use RADIUS, TACACS+, or Windows AD to authenticate users. B. If RADIUS is the only method configured in AAA, and the server becomes unreachable, the user will be able to log in to the router using a local username and password. C. If the local keyword is not included and the AAA server does not respond, then authorization will never be possible and the connection will fail. D. AAA can be used to authenticate the enable password with a AAA server. Answer: C,DExplanation: AAA can be used to authenticate user login and the enable passwords. Example 1: Same Exec Authentication Methods for All Users Once authenticated with: aaa authentication login default group radius local All users who want to log in to the access server have to be authorized using Radius (first method)or local database (second method). We configure: aaa authorization exec default group radius local NotE. On the AAA server, Service-Type=1 (login) must be selected. NotE. With this example, if the local keyword is not included and the AAA server does notrespond, then authorization will never be possible and the connection will fail. ReferencE. - access-control-system-tacacs-/10384-security.html Cisco 400-101 Exam "Pass Any Exam. Any Time." - 336
Image of page 336
QUESTION NO: 414 Which three types of traffic are allowed by IEEE 802.1X access control prior to getting authenticated? (Choose three.) A. EAPOL B. VTP C. STP D. ARP E. CDP F. HTTP Answer: A,C,EExplanation: Until the client is authenticated, IEEE 802.1x access control allows only Extensible AuthenticationProtocol over LAN (EAPOL), Cisco Discovery Protocol (CDP), and Spanning Tree Protocol (STP)traffic through the port to which the client is connected. After authentication, normal traffic passesthrough the port. ReferencE. -0_2_se/configuration/guide/scg3750/sw8021x.pdf Answer: A,DExplanation: QUESTION NO: 415 Which two statements about MAC ACLs are true? (Choose two.) A. They support only inbound filtering. B. They support both inbound and outbound filtering. C. They are configured with the command mac access-list standard. D. They can filter non-IP traffic on a VLAN and on a physical interface.
Image of page 337
Image of page 338

You've reached the end of your free preview.

Want to read all 457 pages?

  • Fall '19

What students are saying

  • Left Quote Icon

    As a current student on this bumpy collegiate pathway, I stumbled upon Course Hero, where I can find study resources for nearly all my courses, get online help from tutors 24/7, and even share my old projects, papers, and lecture notes with other students.

    Student Picture

    Kiran Temple University Fox School of Business ‘17, Course Hero Intern

  • Left Quote Icon

    I cannot even describe how much Course Hero helped me this summer. It’s truly become something I can always rely on and help me. In the end, I was not only able to survive summer classes, but I was able to thrive thanks to Course Hero.

    Student Picture

    Dana University of Pennsylvania ‘17, Course Hero Intern

  • Left Quote Icon

    The ability to access any university’s resources through Course Hero proved invaluable in my case. I was behind on Tulane coursework and actually used UCLA’s materials to help me move forward and get everything together on time.

    Student Picture

    Jill Tulane University ‘16, Course Hero Intern

Stuck? We have tutors online 24/7 who can help you get unstuck.
A+ icon
Ask Expert Tutors You can ask You can ask ( soon) You can ask (will expire )
Answers in as fast as 15 minutes
A+ icon
Ask Expert Tutors