JUNOS Enterprise Switching

Chapter Review Questions

1. Which is true regarding MAC limiting?

   1. It is currently not supported because not learning all MAC addresses breaks bridging

   2. It can be based on an allowed list of MACs on a per-port basis

   3. It can be based on an allowed MAC number, per port

   4. It is set on a VLAN basis, not on a port basis

   5. Both B and C

2. Which is true about ARP inspection?

   1. It requires a DHCP snooping database

   2. It can operate without DHCP snooping

   3. It prevents IP address spoofing

   4. It is configured at the port rather than VLAN level

3. True or false: by default, all access links are considered trusted for DHCP.

4. Which of the following are configured on a VLAN basis?

   1. ARP inspection

   2. DHCP snooping

   3. IP Source Guard

   4. All of the above

5. Which of the following EAP methods are certificate-based?

   1. MAC

   2. EAP-MD5

   3. EAP-TLS

   4. All of the above

6. With regard to MAC authentication, which is true?

   1. Setting MAC-based authorization automatically disables EAP

   2. Local authentication is mandatory due to the lack of EAP on a non-responsive client

   3. Local authentication is always based on per-port databases

   4. Local authentication is global and applies to all 802.1X-1X-enabled interfaces unless constrained with the interface keyword

7. Which is the default supplicant mode?

   1. Single

   2. Single-secure

   3. Multiple

   4. None of the above

8. What is the difference between single and multiple supplicant modes?

   1. Single supports only one client at any time

   2. Multiple supports multiple clients but only when each has been authenticated

   3. Multiple supports multiple clients but requires only one to be authenticated

   4. Both ...