300-320 試験問題を無料オンラインアクセス

Which two security measures must an engineer follow when implementing Layer 2 and Layer 3 network design? (Choose two.)

• A.Utilize DHCP snooping on a per VLAN basis and apply ip dhcp snooping untrusted on all ports.
• B.Utilize the native VLAN only on trunk ports to reduce the risk of an Double-Tagged 802.1q VLAN hopping attack.
• C.Utilize private VLANs and ensure that all ports of the isolated port group.
• D.Utilize an access list to prevent the use of ARP to modify entries to the table.
• E.Utilize the ARP inspection feature to help prevent the misuse of gARP.

Which STP feature can prevent other switches on the network from becoming the root switch, but still allow that interface to participate in STP otherwise?

• A.UDLD
• B.Root Guard
• C.BPDU Guard
• D.Bridge Assurance

A network engineer must design a full mesh overlay VPN network. The proposed setup must be scalable, support multicast services, and be suitable for deployment over public internet .Which overlay VPN technology must be used?

• A.GRE
• B.DMVPN
• C.IPsec
• D.GETVPN

An engineer must optimize a single-homed connection in a small branch office. Which technology accomplishes this goal?

• A.DMVPN
• B.WAE
• C.MSE
• D.MPLS

A large-scale IP SLA deployment is causing memory and CPU shortages on the routers in an enterprise network. Which solution can be implemented to mitigate these issues?

• A.a shadow router
• B.a CPE device that is managed by the network provider
• C.an offline router for disaster recovery
• D.a standby router for failover operation