A switch has been configured with PVLANs. With what type of PVLAN port should the default
gateway be configured?

Refer to the exhibit.

Which statement about the private VLAN configuration is true?

Which Cisco IOS command globally enables port-based authentication on a switch?

CORRECT TEXT
AAAdot1x Lab
Acme is a small shipping company that has an existing enterprise network comprised of 2
switches;DSW1 and
ASW2. The topology diagram indicates their layer 2 mapping. VLAN 40 is a new VLAN that will be
used to provide the shipping personnel access to the server. For security reasons, it is necessary
to restrict access to
VLAN 20 in the following manner:
– Users connecting to ASW1’s port must be authenticate before they are given access to the
network.
-Authentication is to be done via a Radius server:
– Radius server host: 172.120.39.46
– Radius key: rad123
– Authentication should be implemented as close to the host device possible.
– Devices on VLAN 20 are restricted to in the address range of 172.120.40.0/24.
– Packets from devices in the address range of 172.120.40.0/24 should be passed on VLAN 20.
– Packets from devices in any other address range should be dropped on VLAN 20.
– Filtering should be implemented as close to the server farm as possible.
The Radius server and application servers will be installed at a future date. You have been tasked
with implementing the above access control as a pre-condition to installing the servers. You must
use the available
IOS switch features.

Private VLANS can be configured as which three of these port types? (Choose three.)

What is the method used to filter traffic being bridged within a VLAN?

Which statement about when standard access control lists are applied to an interface to control
inbound or outbound traffic is true?

Refer to the exhibit.

Which two statements about this Layer 3 security configuration example are true? (Choose two.)

DRAG DROP
Capabilities of SNMP are dependent on the version implemented.
Drag the feature description on the left to the respective SNMP version on the right.

A network administrator wants to configure 802.1x port-based authentication, however, the client
workstation is not 802.1x compliant. What is the only supported authentication server that can be
used?