Week 7 Checkpoint

Covers Lessons 1 through 4

Spans all four Week 7 lessons — filtering the data path, securing the management plane, hardening the access-layer switch, and the human layer around all of it.

Topics covered

• ACL type, order, direction, and placement
• Management-plane hardening and SSH
• AAA and centralized authentication
• Port security, DHCP snooping, DAI
• STP protection
• The security program

Every question here is answerable from the first-party notes of the lessons above. You commit to an answer before you see whether it was right.

This quiz is a Week 7 milestone in its own right. Passing it does not change the completion state of any individual lesson, and you do not need it to finish the lessons it covers.

Weekly checkpoint

Week 7 Checkpoint

12 questions covering Lessons 1 through 4. Answer each one before you see whether you were right.

Question 1 of 12

1. Which number ranges identify a standard IPv4 ACL?

2. What is the correct wildcard mask to match exactly the /24 subnet 10.1.1.0?

3. What is the efficiency advantage of applying an ACL inbound rather than outbound?

4. Which command restricts which source addresses may open a management session to the router itself?

5. Which single command actually stops Telnet from being accepted on the VTY lines?

6. Which statement correctly distinguishes RADIUS from TACACS+?

7. What must you do after sticky learning captures a MAC address?

8. On what kind of port is port security supported?

9. Which control specifically mitigates a rogue DHCP server on a user VLAN?

10. Why do statically addressed hosts need special handling under DAI?

11. Where should BPDU Guard be applied, and why not elsewhere?

12. Where does the security program sit relative to the technical controls covered this week?

Back to Lesson 4 Continue to Week 8

Back to Week 7