TestOut Security Pro, Lab Practice Questions With
Complete Solutions
5.11.11 Secure Access to a Switch 2
You are the IT security administrator for a small corporate
network. You need to increase the security on the switch in the
Networking Closet by creating an access control list. You have
been asked to prevent video game consoles from connecting to
the switch.
In this lab, your task is to:
Create a MAC-based ACL named GameConsoles.
Configure the GameConsoles MAC-based access control entry
(ACE) settings as follows:PriorityActionDestinationMAC
AddressSource MAC Address1DenyAnyValue:
00041F111111Mask: 0000001111112DenyAnyValue:
005042111111Mask: 0000001111113DenyAnyValue:
000D3A111111Mask: 0000001111114DenyAnyValue:
001315111111Mask: 0000001111115DenyAnyValue:
0009BF111111Mask: 0000001111116DenyAnyValue:
00125A111111Mask: 000000111111
Bind the GameConsoles ACL to all of the GE1-GE30
interfaces.Use Copy Settings to apply the binding to multiple
interfaces
Save the changes to the switc Correct Answers 1.) Create the
GameConsoles ACL.
From the Getting Started page, under Quick Access, select
Create MAC-Based ACL.
Select Add.
In the ACL Name field, enter GameConsoles
Click Apply and then click Close.
,2.) Create MAC-based access control.
Select MAC-Based ACE Table.
Select Add.
Enter the priority.
Select the action.
For Destination MAC Address, make sure Any is selected.
For Source MAC Address, select User Defined.
Enter the source MAC address value.
Enter the source MAC address mask.
Click Apply.
Repeat steps 2c-2i for additional ACE entries.
Click Close.
3.) Bind the GameConsoles ACL to all of the interfaces.
From the left pane, under Access Control, select ACL Binding
(Port).
Select GE1.
At the bottom of the window, select Edit.
Click Select MAC-Based ACL.
Select Apply and then select Close.
Select Copy Settings.
In the Copy configuration's to field, enter 2-30.
Click Apply.
4.) Save the Configuration.
From the top of the window, select Save.
Under Source File Name, make sure Running configuration is
selected.
Under Destination File Name, make sure Startup configuration
is selected.
,Click Apply.
Click OK.
5.12.4 Explore VLANs
You are the IT security administrator for a small corporate
network. You need to increase the networking closet's security
by implementing a CCTV system with IP cameras. As part of
this task, you need to separate the CCTV data traffic on the
network using a separate VLAN on the switch.
The patch panel connections for the networking closet, lobby,
and IT administration office are installed and ready for use
(ports 18-20). A DHCP server is already configured to provide
the IP cameras and the laptop in the IT administration office
with the correct TCP/IP settings (port 21). For an easier
implementation, create the logical VLAN first and then establish
the physical connections of the IP cameras and the laptop.
Correct Answers 1.) From the ITAdmin computer, log into the
CISCO switch.
-From the taskbar, open Google Chrome.
-Maximize the window for easier viewing.
-In the URL field, enter 192.168.0.2 and press Enter.
-For Username, enter ITSwitchAdmin.
-For Password, enter Admin$only (password is case-sensitive).
-Select Log In.
2.) Create a VLAN.
-From the Getting Started pane, under Initial Setup, select
Create VLAN.
-Select Add.For VLAN ID, enter 2.
-For VLAN Name, enter IPCameras.
, -Select Apply.
-Select Close.
3.) Configure a VLAN.
-From the left pane, under VLAN Management, select Port to
VLAN.
-From the the VLAN ID equals to drop-down menu, select 2.
-Select Go.
-For ports GE18, GE19, GE20, and GE21, select Untagged.
-Select Apply.
4.) Connect the IP camera in the lobby to the VLAN and mount
the IP cameras.
-From the top navigation area, select Floor 1.
-Under Lobby, select Hardware.
-Under Shelf, expand CCTV Cameras.
-Drag the IP Camera (Lobby) to the workspace.
-Under Workspace for the IP camera, select Back to switch to
the back view of the IP camera.
-Under Shelf, expand Cables and then select a Cat5e Cable,
RJ45.
-Under Selected Component, drag a RJ45 Connector to the RJ-
45 port on the IP Camera wall mount plate.
-From the wall plate's Partial Connections list, drag the other
connector to the RJ-45 port on the back of the IP camera.
-Drag the IP camera to the IP camera wall plate.
5.) Connect the IP camera in the networking closet to the VLAN
and mount the IP cameras.
-From the top navigation area, select Floor 1.
-Under Networking Closet, select Hardware.
Complete Solutions
5.11.11 Secure Access to a Switch 2
You are the IT security administrator for a small corporate
network. You need to increase the security on the switch in the
Networking Closet by creating an access control list. You have
been asked to prevent video game consoles from connecting to
the switch.
In this lab, your task is to:
Create a MAC-based ACL named GameConsoles.
Configure the GameConsoles MAC-based access control entry
(ACE) settings as follows:PriorityActionDestinationMAC
AddressSource MAC Address1DenyAnyValue:
00041F111111Mask: 0000001111112DenyAnyValue:
005042111111Mask: 0000001111113DenyAnyValue:
000D3A111111Mask: 0000001111114DenyAnyValue:
001315111111Mask: 0000001111115DenyAnyValue:
0009BF111111Mask: 0000001111116DenyAnyValue:
00125A111111Mask: 000000111111
Bind the GameConsoles ACL to all of the GE1-GE30
interfaces.Use Copy Settings to apply the binding to multiple
interfaces
Save the changes to the switc Correct Answers 1.) Create the
GameConsoles ACL.
From the Getting Started page, under Quick Access, select
Create MAC-Based ACL.
Select Add.
In the ACL Name field, enter GameConsoles
Click Apply and then click Close.
,2.) Create MAC-based access control.
Select MAC-Based ACE Table.
Select Add.
Enter the priority.
Select the action.
For Destination MAC Address, make sure Any is selected.
For Source MAC Address, select User Defined.
Enter the source MAC address value.
Enter the source MAC address mask.
Click Apply.
Repeat steps 2c-2i for additional ACE entries.
Click Close.
3.) Bind the GameConsoles ACL to all of the interfaces.
From the left pane, under Access Control, select ACL Binding
(Port).
Select GE1.
At the bottom of the window, select Edit.
Click Select MAC-Based ACL.
Select Apply and then select Close.
Select Copy Settings.
In the Copy configuration's to field, enter 2-30.
Click Apply.
4.) Save the Configuration.
From the top of the window, select Save.
Under Source File Name, make sure Running configuration is
selected.
Under Destination File Name, make sure Startup configuration
is selected.
,Click Apply.
Click OK.
5.12.4 Explore VLANs
You are the IT security administrator for a small corporate
network. You need to increase the networking closet's security
by implementing a CCTV system with IP cameras. As part of
this task, you need to separate the CCTV data traffic on the
network using a separate VLAN on the switch.
The patch panel connections for the networking closet, lobby,
and IT administration office are installed and ready for use
(ports 18-20). A DHCP server is already configured to provide
the IP cameras and the laptop in the IT administration office
with the correct TCP/IP settings (port 21). For an easier
implementation, create the logical VLAN first and then establish
the physical connections of the IP cameras and the laptop.
Correct Answers 1.) From the ITAdmin computer, log into the
CISCO switch.
-From the taskbar, open Google Chrome.
-Maximize the window for easier viewing.
-In the URL field, enter 192.168.0.2 and press Enter.
-For Username, enter ITSwitchAdmin.
-For Password, enter Admin$only (password is case-sensitive).
-Select Log In.
2.) Create a VLAN.
-From the Getting Started pane, under Initial Setup, select
Create VLAN.
-Select Add.For VLAN ID, enter 2.
-For VLAN Name, enter IPCameras.
, -Select Apply.
-Select Close.
3.) Configure a VLAN.
-From the left pane, under VLAN Management, select Port to
VLAN.
-From the the VLAN ID equals to drop-down menu, select 2.
-Select Go.
-For ports GE18, GE19, GE20, and GE21, select Untagged.
-Select Apply.
4.) Connect the IP camera in the lobby to the VLAN and mount
the IP cameras.
-From the top navigation area, select Floor 1.
-Under Lobby, select Hardware.
-Under Shelf, expand CCTV Cameras.
-Drag the IP Camera (Lobby) to the workspace.
-Under Workspace for the IP camera, select Back to switch to
the back view of the IP camera.
-Under Shelf, expand Cables and then select a Cat5e Cable,
RJ45.
-Under Selected Component, drag a RJ45 Connector to the RJ-
45 port on the IP Camera wall mount plate.
-From the wall plate's Partial Connections list, drag the other
connector to the RJ-45 port on the back of the IP camera.
-Drag the IP camera to the IP camera wall plate.
5.) Connect the IP camera in the networking closet to the VLAN
and mount the IP cameras.
-From the top navigation area, select Floor 1.
-Under Networking Closet, select Hardware.
