Cisco CSI Cisco SAFE Implementation Set 6

NIDS appliance VPN firewall interior firewall VPN Concentrator distribution router

Authenticates individual remote users using XAUTH and terminates their IPSec tunnels. ✘ Tracks the availability of remote site networks across the VPN routers. ✘ Authenticates trusted remote sites and provides connectivity using GRE/IPSec tunnels. ✘ Authenticates trusted remote sites and provides stateful filtering of remote site traffic. ✔

MAC spoofing ✘ CAM table overflow ✘ VTP attacks ✘ VLAN hopping ✔ private VLAN attacks ✔

encrypts private network data when it is being passed through a public network ✘ prevents attacker from creating a routing black hole ✘ helps to prevent information overload from causing a network to melt ✘ prevents attackers from disrupting peering sessions between routers ✔ reduces the change rate in the Internet's routing tables ✔

Use exterior gateway protocols only. Use exterior gateway protocols that operate between routing domains and do not allow administrators tobuild and act on policies. Use exterior gateway protocols because they allow administrators to build and act on policies rather thanjust on reachability information. Do not use autonomous system path filters on every EBGP peering session in network. Use exterior gateway protocols or static routes.

private VLANs ✘ NBAR ✘ CAR ✘ sink-hole routers ✔ NetFlow ✔

900 GHz ✘ 2.4 GHz ✘ 5.7 GHz ✘ 900 MHz ✔

SIP is a transport-layer control protocol that uses IP addresses for transporting multimedia traffic and call management. ✘ SIP is a session-layer control protocol that uses SIP addresses for signal and session management. ✘ SIP is an application-layer control protocol that uses SIP addresses for signal and session management. ✘ SIP is a session-layer control protocol that uses IP addresses for transporting multimedia traffic and sessionmanagement. ✔

BGP ✘ IGRP ✘ EIGRP ✘ OSPF ✔ IS-IS ✔

secure connectivity and management ✘ reliability, performance, and scalability ✘ high availability ✘ authentication of users and devices in the VPN ✔ tuning and reporting ✔