You need to allow one host to be permitted to attach dynamically to each switch interface. Which two commands must you configure on your catalyst switch to meet this policy?
Switch(config-if)# ip access-group 10
Switch(config-if)# switchport port-security maximum 1
The
switchport port-security is an important command, and it's super easy with the CNA; however, from the CLI, you can set the maximum number of MAC addresses allowed into the port, and then set the penalty if this maximum has been passed.
More questions
1. Which command will configure a switch port to use the IEEE standard method of inserting VLAN membership information into Ethernet frames?
Options
A. Switch(config)# switchport trunk encapsulation isl
B. Switch(config)# switchport trunk encapsulation ietf
C. Switch(config)# switchport trunk encapsulation dot1q
D. Switch(config-if)# switchport trunk encapsulation isl
E. Switch(config-if)# switchport trunk encapsulation dot1q
If you are on a 2950 switch, then the interface command is just
switchport mode trunk, since the 2950 can only run the IEEE 802.1Q version. However, a 3550 can run both ISL and 802.1Q, so you must use the encapsulation command. The argument to choose 802.1Q for a trunking protocol is
dot1q.
2. To test the IP stack on your local host, which IP address would you ping?
Loopback interfaces are created on a router, and the highest IP address on a loopback (logical) interface becomes the RID of the router but has nothing to do with areas and is optional, so (1) is wrong. The numbers you can create an area with are from 0 to 4,294,967,295 option (2) is wrong. The backbone area is called area 0, so option (3) is correct. All areas must connect to area 0, so option (5) is correct. If you have only one area, it must be called area 0. This leaves option (4), which must be correct; it doesn't make much sense, but it is the best answer.
This is a pretty simple question. A /28 is 255.255.255.240, which means that our block size is 16 in the fourth octet. 0, 16, 32, 48, 64, 80, etc. The host is in the 64 subnet.
8. What does a switch do when a frame is received on an interface and the destination hardware address is unknown or not in the filter table?
Options
A. Forwards the switch to the first available link
B. Drops the frame
C. Floods the network with the frame looking for the device
D. Sends back a message to the originating station asking for a name resolution
Correct Answer: Floods the network with the frame looking for the device
Explanation:
Switches flood all frames that have an unknown destination address. If a device answers the frame, the switch will update the MAC address table to reflect the location of the device.
9. Which of the following types of connections can use full duplex?
Hubs cannot run full-duplex Ethernet. Full duplex must be used on a point-to-point connection between two devices capable of running full duplex. Switches and hosts can run full duplex between each other, but a hub can never run full duplex.
10. What is the maximum distance with maximum data rate for 802.11a?