Cisco CCNA Network Security Fundamentals Flashcards
6 cards from real Cisco CCNA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Cisco CCNA Network Security Fundamentals flashcards as text
Which command configures a Cisco router login banner that is displayed before authentication?
Answer: banner login # message #
The 'banner login' command displays a message specifically before the username/password prompt, intended for legal warnings.
What does the 'login local' command on a Cisco VTY line configure?
Answer: Authenticates users against the local username database
'login local' requires VTY connections to authenticate using username and password pairs stored in the device's local database.
Which protocol encrypts the entire management session between an administrator and a Cisco device?
Answer: SSH
SSH (Secure Shell) encrypts all traffic between the client and the network device, while Telnet transmits data in plaintext.
What is the purpose of the 'ip dhcp snooping limit rate' command on a Cisco switch port?
Answer: Limits the number of DHCP packets per second to prevent starvation attacks
'ip dhcp snooping limit rate' caps DHCP packet ingress rate on untrusted ports to mitigate DHCP starvation denial-of-service attacks.
Which Cisco IOS command displays port security status including the number of secure MAC addresses on an interface?
Answer: show port-security interface
'show port-security interface ' displays the port security configuration, violation count, and learned secure MAC addresses.
Which feature protects against IP address spoofing by verifying that incoming packets match an entry in the DHCP snooping binding table?
Answer: IP Source Guard
IP Source Guard filters packets on untrusted ports by comparing source IP and MAC against the DHCP snooping binding database.