350-501 · Question #517
Refer to the exhibit. A multinational corporation with a Cisco-based network wants to leverage Cisco security features to enhance the security of their LAN and protect against eavesdropping and…
The correct answer is A. Implement MACsec on both switches with encryption mode GCM and a shared key. IEEE 802.1AE (MACsec): - This is the IEEE standard for Media Access Control Security. - MACsec ensures secure communication on Ethernet links by providing encryption, integrity, and origin authentication. - It protects against threats such as eavesdropping and man-in-the-middle…
Question
Refer to the exhibit. A multinational corporation with a Cisco-based network wants to leverage Cisco security features to enhance the security of their LAN and protect against eavesdropping and man-in-the-middle attacks. The solution must comply with the IEEE 802.1 AE standard. A network engineer must implement the new security configurations on a pair of interconnected Cisco switches. The engineer already completed the configuration to enable AAA new-model and set up a basic AAA configuration for user authentication. Management VLAN 10 is in place for network administration. Which action must the engineer lake to meet the requirements?
Exhibit
Options
- AImplement MACsec on both switches with encryption mode GCM and a shared key.
- BImplement CTS for role-based access control on both switches.
- CImplement open authentication via the management VLAN on both switches.
- DImplement IPsec on both switches to secure data transmissions.
How the community answered
(21 responses)- A95% (20)
- C5% (1)
Explanation
IEEE 802.1AE (MACsec): - This is the IEEE standard for Media Access Control Security. - MACsec ensures secure communication on Ethernet links by providing encryption, integrity, and origin authentication. - It protects against threats such as eavesdropping and man-in-the-middle attacks. Encryption Mode: - GCM (Galois/Counter Mode) provides confidentiality and integrity protection, meeting the requirements for secure LAN communication. - MACsec is specifically designed for securing Layer 2 communications between directly connected devices, such as the switches in the exhibit. - It is simpler and more efficient for LAN links than alternatives like IPsec, which operates at Layer
Topics
Community Discussion
No community discussion yet for this question.