200-301日本語試験無料問題集「Cisco Certified Network Associate Exam (200-301日本語版) 認定」

Explanation:

Double-Tagging attack:In this attack, the attacking computer generates frames with two 802.1Q tags. The first tag matches the native VLAN of the trunk port (VLAN 10 in this case), and the second matches the VLAN of a host it wants to attack (VLAN 20).When the packet from the attacker reaches Switch A, Switch A only sees the first VLAN 10 and it matches with its native VLAN 10 so this VLAN tag is removed. Switch A forwards the frame out all links with the same native VLAN 10. Switch B receives the frame with an tag of VLAN 20 so it removes this tag and forwards out to the Victim computer.Note: This attack only works if the trunk (between two switches) has the same native VLAN as the attacker.To mitigate this type of attack, you can use VLAN access control lists (VACLs, which applies to all traffic within a VLAN. We can use VACL to drop attacker traffic to specific victims/servers) or implement Private VLANs.ARP attack (like ARP poisoning
/spoofing) is a type of attack in which a malicious actor sends falsified ARP messages over a local area network as ARP allows a gratuitous reply from a host even if an ARP request was not received. This results in the linking of an attacker's MAC address with the IP address of a legitimate computer or server on the network. This is an attack based on ARP which is at Layer 2.Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network which can be used to mitigate this type of attack.

Solution is given below explanation.
Explanation:
To configure an LACP EtherChannel and number it as 44, configure it between switches SW1 and SW2 using interfaces Ethernet0/0 and Ethernet0/1 on both sides, configure the EtherChannel as a trunk link, configure the trunk link with 802.1q tags, and configure VLAN 'MONITORING' as the untagged VLAN of the EtherChannel, you need to follow these steps:
* On both SW1 and SW2, enter the global configuration mode by using the configure terminal command.
* On both SW1 and SW2, select the two interfaces that will form the EtherChannel by using the interface range ethernet 0/0 - 1 command. This will enter the interface range configuration mode.
* On both SW1 and SW2, set the protocol to LACP by using the channel-protocol lacp command.
* On both SW1 and SW2, assign the interfaces to an EtherChannel group number 44 by using the channel-group 44 mode active command. This will create a logical interface named Port-channel44 and set the LACP mode to active on both ends. The LACP mode must match on both ends for the EtherChannel to form.
* On both SW1 and SW2, exit the interface range configuration mode by using the exit command.
* On both SW1 and SW2, enter the Port-channel interface configuration mode by using the interface port- channel 44 command.
* On both SW1 and SW2, configure the Port-channel interface as a trunk link by using the switchport mode trunk command.
* On both SW1 and SW2, configure the Port-channel interface to use 802.1q tags for VLAN identification by using the switchport trunk encapsulation dot1q command.
* On both SW1 and SW2, configure VLAN 'MONITORING' as the untagged VLAN of the Port-channel interface by using the switchport trunk native vlan MONITORING command.
* On both SW1 and SW2, exit the Port-channel interface configuration mode by using the exit command.
* On both SW1 and SW2, save the configuration to NVRAM by using the copy running-config startup- config command.

See the Explanation below.
Explanation:
Answer as below configuration:
On SW1:
conf terminal
vlan 15
exit
interface range eth0/0 - 1
channel-group 1 mode active
exit
interface port-channel 1
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk native vlan 15
end
copy run start
on SW2:
conf terminal
vlan 15
exit
interface range eth0/0 - 1
channel-group 1 mode active
exit
interface port-channel 1
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk native vlan 15
end
copy run start

解説: (GoShiken メンバーにのみ表示されます)

Explanation:

解説: (GoShiken メンバーにのみ表示されます)

Explanation: