About This Flashcard Deck
This flashcard deck contains 10 cards covering key Security concepts for the CCNA exam. Test your network security knowledge for the CCNA exam. Use active recall by attempting to answer each question before revealing the answer.
Question
What are the three port security violation modes?
Click to reveal answer
Answer
Protect (silent drop), Restrict (drop + log), Shutdown (err-disable port, default).
Click to flip back
All Security Flashcards
Q: What are the three port security violation modes?
A: Protect (silent drop), Restrict (drop + log), Shutdown (err-disable port, default).
Q: What does DHCP snooping protect against?
A: Rogue DHCP servers. Untrusted ports drop DHCP server messages (OFFER, ACK). Builds a binding table.
Q: What is DAI and what does it use?
A: Dynamic ARP Inspection validates ARP packets using the DHCP snooping binding table to prevent ARP spoofing.
Q: What port does TACACS+ use?
A: TCP port 49.
Q: What ports does RADIUS use?
A: UDP 1812 (authentication) and UDP 1813 (accounting).
Q: What is 802.1X?
A: Port-based Network Access Control. Three roles: supplicant (client), authenticator (switch), authentication server (RADIUS).
Q: What is the difference between WPA2 and WPA3?
A: WPA3 uses SAE (stronger handshake), provides forward secrecy, and protects against offline dictionary attacks. WPA2 uses PSK/4-way handshake.
Q: What is a site-to-site VPN?
A: An IPsec tunnel that encrypts traffic between two networks (e.g., headquarters and branch office) over the public internet.
Q: What does the "implicit deny" in an ACL mean?
A: Any traffic not explicitly permitted by an ACL rule is automatically denied (dropped).
Q: Where should you place an extended ACL?
A: As close to the source as possible to prevent unwanted traffic from crossing the network.
Cisco Flashcard Study Strategy
Cisco exams heavily test protocol operations and configuration details. Use these flashcards to drill port numbers, protocol behaviours, and administrative distances. Pair flashcard sessions with Packet Tracer labs — when you encounter a card about OSPF neighbour states, open a lab and verify each state transition on a live topology. This combination of memorisation and practice builds the deep understanding Cisco exams demand.