IINS 3.0: Attack Mitigation


Overview/Description
Expected Duration
Lesson Objectives
Course Number
Expertise Level



Overview/Description

A security professional must be able to identify common Layer 2 attacks. Explore these common Layer 2 attacks and how to mitigate them, as you prepare for the 210-260: Implementing Cisco Network Security certification exam.



Expected Duration (hours)
1.5

Lesson Objectives

IINS 3.0: Attack Mitigation

  • identify the effects of DHCP starvation
  • identify the syntax used to display the effect of dynamic ARP inspection on a switch
  • identify the syntax used to mitigate a Layer 2 attack in a given scenario
  • recognize common Layer 2 attacks
  • specify characteristics of Layer 2 attacks
  • define how to protect a network against DHCP spoofing
  • identify the syntax used to disable a port in a given scenario
  • identify the type of attack characterized by invalid default gateways
  • recognize the purpose of DHCP spoofing
  • recognize the result of CAM table overflows
  • specify the steps for configuring a port for MAC access in a given scenario
  • define how to avoid sharing Cisco Discovery Protocol data with invalid devices
  • identify methods to avoid spanning-tree vulnerabilities
  • recognize how to avoid double tagging and VLAN hopping
  • recognize methods used to avoid STP attacks
  • recognize the type of attack characterized by access switch traffic forwarding
  • specify how to configure ports to disallow BPDUs
  • specify how to disable CDP on interfaces not connected to a trusted network
  • specify the characteristics of a CAM table overflow
  • Course Number:
    it_ccnastv_24_03_enus

    Expertise Level
    Intermediate