Day 43

1. When configuring SPAN, the following restrictions apply when specifying ports as the source: (choose all that apply)

Source ports must be in the same VLAN.

The port can be any port type, such as FastEthernet, or GigabitEthernet but not EtherChannel.

The local SPAN source port cannot be configured as a destination port.

Source ports can be in the same or different VLANs.

The port can be any port type, such as EtherChannel, FastEthernet, or GigabitEthernet.

The same local port can be monitored in multiple SPAN sessions.

Question 1 of 14

2. You would globally enable AAA services using the ________ command in global configuration mode.

aaa enable

aaa new-model

aaa model

enable aaa

Question 2 of 14

3. Unlike accounting and authorization, there is no search for AV pairs in any kind of database for authentication.

True

False

Question 3 of 14

4. Unlike local SPAN, Remote SPAN (RSPAN) supports source ports and VLANs, as well as destinations on different switches, allowing you to perform remote monitoring of multiple switches across your network.

True

False

Question 4 of 14

5. RADIUS is a Cisco-proprietary protocol that is used in the AAA framework to provide centralized authentication of users who are attempting to gain access to network resources.

True

False

Question 5 of 14

6. Network Access Server (NAS), can be any device—such as a? (choose all which apply)

hub

router

switch

firewall

Question 6 of 14

7. Match the correct statements.

Authentication is valid without	authentication Unselect accounting Unselect authentication Unselect authorization Unselect
Authentication is valid without	authentication Unselect accounting Unselect authentication Unselect authorization Unselect
Authorization is not valid without	authentication Unselect accounting Unselect authentication Unselect authorization Unselect
Accounting is not valid without	authentication Unselect accounting Unselect authentication Unselect authorization Unselect

Question 7 of 14

8. Each local SPAN session can have either ports or VLANs as sources, or both.

True

False

Question 8 of 14

9. (AAA) Authentication also offers additional services, such as challenge and response, messaging support, and even encryption, depending on the security protocol implemented.

True

False

Question 9 of 14

10. An AV pair is simply a secured network object comprised of an attribute, such as a username or password, and a value for that particular attribute.

True

False

Question 10 of 14

11. For AAA, Authentication is used to validate identity (i.e., who the user is); authorization is used to determine what that particular user can do (i.e., the services available to the user); and accounting is used for audit trails (i.e., what that user did).

True

False

Question 11 of 14

12. RADIUS is an open-standard protocol that is distributed in C source code format.

True

False

Question 12 of 14

13. The three independent security functions that offer secure access control and are provided by AAA are as follows:

Authentication

Approval

Accounting

Authorization

Auditing

Question 13 of 14

14. (AAA) Authentication is based on verifying user credentials, which can be any of the following: (choose all which apply)

Something the user possesses

Something the user knows

Something the user is

Something the user does

Something the user was

Question 14 of 14