QUESTION: 149 Exam Topic: Infrastructure Security

What are two functions of IPv6 Source Guard? (Choose two.)

It works independent from IPv6 neighbor discovery.
It denies traffic from unknown sources or unallocated addresses.
It uses the populated binding table for allowing legitimate traffic.
It denies traffic by inspecting neighbor discovery packets for specific patterns.
It blocks certain traffic by inspecting DHCP packets for specific sources.

Answer(s): B,C

Reveal Solution Next Question

QUESTION: 150 Exam Topic: Infrastructure Security

Refer to the exhibit. Which two actions restrict access to router R1 by SSH? (Choose two.)

Remove class-map ANY from service-policy CoPP.
Configure transport output ssh on line vty and remove sequence 20 from access list 100.
Configure transport input ssh on line vty and remove sequence 30 from access list 100.
Remove sequence 10 from access list 100 and add sequence 20 deny tcp any anyeq telnet to access list 199.
Configure transport output ssh on line vty and remove sequence 10 from access list 199.

Answer(s): A,C

Reveal Solution Next Question

QUESTION: 151 Exam Topic: Infrastructure Security

Refer to the exhibit. Which action resolves intermittent connectivity observed with the SNMP trap rackets?

Decrease the committed burst size of the mgmt class map.
Increase the CIR of the mgmt class map.
Add one new entry in the ACL 120 to permit the UDP port 161.
Add a new class map to match TCP traffic.

Answer(s): B

Reveal Solution Next Question

QUESTION: 152 Exam Topic: Infrastructure Security

DRAG DROP (Drag and Drop is not supported)
Refer to the exhibit.

Drag and drop the credentials from the left onto the remote login information on the right to resolve a failed login attempt to vtys. Not all credentials are used.
Select and Place: