FINAL Exam Answers V.4- CCNA Discovery 3 - #6-10

6. A sales representative is preparing to send sensitive information to corporate headquarters from a hotel room using the Internet. Prior to the trip, the IT staff made the necessary provisions to allow secure Internet access. What solution was implemented for the sales representative?
• VPN
• Frame Relay
• PPP with CHAP authentication
• PPP with PAP authentication

7.

Refer to the exhibit. A network administrator noticed that the VLAN configuration changes at SW2 did not propagate to SW3. On the basis of the partial output of the show vtp status command, what is the possible cause of the problem?
• VTP V2 mode is disabled.
• SW3 is configured as transparent mode.
• The number of existing VLANs does not match.
• The configuration revision number does not match.

8.

Refer to the exhibit. Because of continuing instability of one of the serial links in the OSPF network, a network administrator configures router ASBR as shown. Which two statements will be a result of this configuration? (Choose two.)
• Traffic intended for destinations across unstable serial links will be forwarded by ASBR even when the links are down
• A summary route of 192.168.0.0/22 will be advertised to the ISP router.
• Serial links in range 192.168.0.0 255.255.252.0 will be forced into a passive state.
• Networks connected to the unstable serial links will be placed in an unreachable state.
• Negative effects of route flapping will be reduced.

9. Which two criteria are used by STP to select a root bridge? (Choose two.)
• memory size
• bridge priority
• number of ports
• switch location
• switching speed
• base MAC address

10. A company is using a Class B IP addressing scheme and expects to need as many as 150 networks. What is the correct subnet mask to use with the network configuration?
• 255.255.0.0
• 255.255.240.0
• 255.255.254.0
• 255.255.255.0
• 255.255.255.128
• 255.255.255.192

Protecting Against an IP Spoofing Attack

The following approaches can be used to mitigate IP spoofing attacks:



¦ Use access control lists (ACL) on router interfaces. As traffic comes into a router from

an outside network, an ACL could be used to deny any outside traffic claiming to be

addressed with IP addressing used internally on the local network. Conversely, ACLs

should be used to prevent traffic leaving the local network from participating in a

DDoS attack. Therefore, an ACL could deny any traffic leaving the local network that

claimed to have a source address that was different from the internal network’s IP

address space.



¦ Encrypt traffic between devices (for example, between two routers, or between an end

system and a router) via an IPsec tunnel. In Figure 1-7, notice that the topology is now

protected with an IPsec tunnel. Even though the attacker can still capture packets via

his rogue hub, the captured packets are unreadable, because the traffic is encrypted

inside the IPsec tunnel.



Figure 1-7 Protecting Traffic in a Tunnel

Routing ? Distance Vector Routing

Tip: ?show run | begin router rip? scrolls to line beginning with router rip in running config.