LAN Switching And Wireless - Chapter 2 Exam

The startup configuration is stored in NVRAM (Non-Volatile Random Access Memory). NVRAM is a type of memory that retains data even when the power is turned off. It is used to store the configuration settings of a device, such as a router or switch, and is typically accessed during the boot process to load the saved configuration. Unlike DRAM (Dynamic Random Access Memory) which loses data when power is lost, NVRAM ensures that the startup configuration remains intact even after a reboot or power outage.

The correct answer is "No collisions will occur on this link." This is because the switch and workstation are configured for full-duplex operation, which means that they can transmit and receive data simultaneously on separate channels. In full-duplex mode, collisions are eliminated because each device has its own dedicated channel for transmitting and receiving data.

Global configuration mode is the correct answer because it is the CLI mode that allows users to configure switch parameters, such as the hostname and password. In this mode, users have access to all the configuration commands and can make changes to the switch's global settings. This mode is entered by using the "configure terminal" command from privileged EXEC mode.

After the backoff period has expired, hosts with data to transmit in a network using CSMA/CD will return to a listen-before-transmit mode. This means that they will listen for a clear channel before attempting to transmit their data again. This is done to avoid further collisions and ensure that the network operates efficiently.

The command "banner login 'Authorized personnel Only'" will display the message "Authorized personnel Only" before a user logs in. This command is typically entered in privileged EXEC mode and is used to provide a warning or notification to users before they authenticate and gain access to the switch.

When the transport input ssh command is entered on the switch vty lines, it enables the SSH client on the switch. This allows for encrypted communication between the switch and remote users. It eliminates the need for a username/password combination to establish a secure remote connection to the switch. The switch does not require remote connections via proprietary client software.

The correct answer is to append a space and then "?" to the last parameter. By doing this, the switch will provide a list of available options or parameters for the command, helping the administrator to remember or select the correct one.

When a switch receives a frame and the source MAC address is not found in the switching table, the switch will map the source MAC address to the port on which it was received. This allows the switch to update its switching table with the new MAC address and associate it with the corresponding port. By doing so, the switch can efficiently forward future frames to the correct destination without flooding the network.

Layer 2 switches have multiple collision domains because each port on a Layer 2 switch is a separate collision domain, allowing for simultaneous communication between different devices. Layer 2 switches can send traffic based on the destination MAC address by examining the MAC address table and forwarding the traffic to the appropriate port based on the MAC address.

When the MAC address table of SW1 is empty, it means that SW1 does not have any information about the MAC addresses of the devices connected to its ports. In this scenario, SW1 will flood the frame on all ports on SW1, except port Fa0/1. This means that SW1 will forward the frame to all of its ports except the one it received the frame from, in order to reach the destination PC_C. Flooding the frame ensures that it reaches its destination in case SW1 does not have the necessary information to make a forwarding decision based on the MAC address table.

The exhibit CH2-3 (on flash drive) shows a network with two separate collision domains. A collision domain is a network segment where collisions can occur between devices that are connected to the same network segment. In the exhibit, there are two distinct segments where devices are connected, and collisions within each segment would not affect devices in the other segment. Therefore, the correct answer is 2.

To make a switch less vulnerable to attacks like MAC address flooding, CDP attacks, and Telnet attacks, two effective measures can be taken. Firstly, changing passwords regularly helps to enhance security by ensuring that unauthorized individuals do not gain access to the switch. Regularly updating passwords makes it difficult for attackers to guess or crack the passwords. Secondly, turning off unnecessary services reduces the attack surface and minimizes the potential vulnerabilities that can be exploited. By disabling any services that are not required, the switch becomes less susceptible to attacks targeting those specific services.

When workstation A sends a unicast packet to workstation C, only workstation C will capture a copy of the frame. This is because a unicast packet is intended for a specific destination, in this case, workstation C. The switch will look at its CAM table to determine the port where workstation C is connected and will forward the packet only to that port. Therefore, only workstation C will receive and capture the frame.

The enable secret password command provides better security than the enable password because it stores the password using a stronger encryption algorithm. The enable password and enable secret password both protect access to privileged EXEC mode, as they are both required to authenticate and gain access to this mode.

The most likely problem is that the vty lines are configured to allow only Telnet connections, even though the network administrator intended to allow only Secure Shell connections. This means that the configuration is not properly restricting the type of connections that can be made to Switch1, allowing both Secure Shell and Telnet connections.

not-available-via-ai

The first statement is true because dynamically learned secure MAC addresses are stored in the switch's volatile memory, which is cleared when the switch reboots. Therefore, these addresses are lost.

The second statement is true because if fewer than the maximum number of MAC addresses are configured statically for a port, the switch will add dynamically learned addresses to the Content Addressable Memory (CAM) until the maximum number is reached. This allows for flexibility in the number of MAC addresses that can be learned on a port.

not-available-via-ai

The given commands are used to configure the console port on a switch. The "line console 0" command is used to enter the console line configuration mode. The "password cisco" command is used to set the password for the console port as "cisco". The "login" command is used to enable password checking when logging into the console port. Therefore, the result of entering these commands is to configure the privilege exec password that will be used for remote access.

From the partial output of the show running-config command, it can be determined that any configured line mode passwords will be encrypted in this configuration. This is because the exhibit does not show the enable password in clear text, indicating that it is encrypted. Additionally, the exhibit does not provide any information about the hashing algorithm used or the security level of the privileged EXEC mode password.