SANS SEC 301 EXAM STUDY GUIDE
2026/2027 COMPLETE QUESTIONS WITH
VERIFIED CORRECT ANSWERS ||
100% GUARANTEED PASS
<NEWEST VERSION>
1. Everyone can do everything they need to do and nothing more. Bradley
Manning - WikiLeaks Target - HVAC hack - ANSWER ✔ Principle of
Least Privilege
2. The cornerstone of all security: Everyting done in security addresses one or
more of these three things
Confidentiality, Integrity, availability
Confidentiality - Only those who need to access something can; ties into
principle of least privilege
Integrity - data is edited correctly and by the right people. Failure ex.: Delta
$5 tickets round trip tickets to anywhere Delta flies/attach on pricing
database
Availability - If you cannot use it, why do you have it? - ANSWER ✔ CIA
Triad
3. Pharmaceuticals and government, research - ANSWER ✔ Confidentiality
4. Financials maintained in part by confidentiality - ANSWER ✔ Integrity
,5. eCommerce Ex. Amazon make $133,000/per minute thus denial of service is
critical business impact; power company need to keep lights on =
availability issue - ANSWER ✔ Availability
6. Authentication, Authorization, Accountability - ANSWER ✔ AAA
7. Detailed steps to make policy happen - ANSWER ✔ Procedure
8. Policy, Procedure and Training - ANSWER ✔ PPT
9. Users must know what policies and procedures say to follow them. -
ANSWER ✔ Training
10.Broad general statement of management's intent to protect information -
ANSWER ✔ Policy
11.Whats Prunning in VTP - ANSWER ✔ Pruning is a technique where in
VLANs not having any access ports on an end switch
are removed from the trunk to reduce flooded traffic
12.Creating VLANs - ANSWER ✔ SW1#vlan database
SW1(vlan)#vlan 10 name firstvlan
SW1(vlan)#vlan 20 name secondvlan
13.Access Port configuration - ANSWER ✔ SW1(config-if)#switchport mode
access
SW1(config-if)#switchport access vlan 10
SW1(config-if)#switchport access vlan 20
,14.Configure an access port config to a range of interfaces and add a VLAN -
ANSWER ✔ SW1(config)#interface range fa 0/2 - 5
SW1(config-if)#switchport access vlan 10
SW1(config)#interface range fa 0/6 - 10
SW1(config-if)#switchport access vlan 20
15.Trunk Port configuration - ANSWER ✔ SW1(config-if)#switchport mode
trunk
SW1(config-if)#switchport trunk encapsulation dot1q
16.VTP Configuration commands - ANSWER ✔ SW1#vlan database
SW1(vlan)#vtp mode (Server/Client/Transparent)
SW1(vlan)#vtp domain <name>
SW1(vlan)#vtp password <password>
SW1(vlan)#vtp pruning
17.Troubleshooting commands for VLAN - ANSWER ✔ 1. show vlan
2. show vlan-membership
3. show vtp status
4. show interfaces trunk
5. show interface <interface-name> switchport
18.What is Ethernet Channel - ANSWER ✔ EtherChannel is a port link
aggregation technology used primarily on Cisco
networking devices.It allows grouping of several physical Ethernet links to
create one logical Ethernet link for the purpose of providing fault-tolerance
and high-speed links between switches, routers and servers.
19.PagP - ANSWER ✔ Port Aggregation Protocol
, PagP helps in the automatic creation of Fast EtherChannel links. PagP is
protocol is Cisco proprietary link aggregation protocol used in Cisco
switches
routers, and servers.
20.LACP - ANSWER ✔ Link Aggregation Control Protocol
LACP is different from PAgP. LACP is a standards based protocol and
conforms
to IEEE standard 802.3ad, whereas PAgP is a Cisco proprietary protocol.
21.PAgP modes and the corresponding action - ANSWER ✔ 1. ON mode does
not send or receive PAgP packets. Therefore, both ends
should be set to ON mode toform an EtherChannel.
2. Desirable mode tries to ask the other end in order to bring up the
EtherChannel.
3. Auto mode participates in the EtherChannel only if the for end asks for
participation. Two switches in auto mode will not form an EtherChannel.
22.switch# show etherchannel port - ANSWER ✔ Used for verifying the
channel negotiation mode of an EtherChannel.
23.Switch# show etherchannel summary - ANSWER ✔ Shows each port in the
channel along with the status flag.
24.Switch(config)# port-channel load-balance src-ip - ANSWER ✔ Will
configure load balancing on EtherChannel switch links using source IP
address.
2026/2027 COMPLETE QUESTIONS WITH
VERIFIED CORRECT ANSWERS ||
100% GUARANTEED PASS
<NEWEST VERSION>
1. Everyone can do everything they need to do and nothing more. Bradley
Manning - WikiLeaks Target - HVAC hack - ANSWER ✔ Principle of
Least Privilege
2. The cornerstone of all security: Everyting done in security addresses one or
more of these three things
Confidentiality, Integrity, availability
Confidentiality - Only those who need to access something can; ties into
principle of least privilege
Integrity - data is edited correctly and by the right people. Failure ex.: Delta
$5 tickets round trip tickets to anywhere Delta flies/attach on pricing
database
Availability - If you cannot use it, why do you have it? - ANSWER ✔ CIA
Triad
3. Pharmaceuticals and government, research - ANSWER ✔ Confidentiality
4. Financials maintained in part by confidentiality - ANSWER ✔ Integrity
,5. eCommerce Ex. Amazon make $133,000/per minute thus denial of service is
critical business impact; power company need to keep lights on =
availability issue - ANSWER ✔ Availability
6. Authentication, Authorization, Accountability - ANSWER ✔ AAA
7. Detailed steps to make policy happen - ANSWER ✔ Procedure
8. Policy, Procedure and Training - ANSWER ✔ PPT
9. Users must know what policies and procedures say to follow them. -
ANSWER ✔ Training
10.Broad general statement of management's intent to protect information -
ANSWER ✔ Policy
11.Whats Prunning in VTP - ANSWER ✔ Pruning is a technique where in
VLANs not having any access ports on an end switch
are removed from the trunk to reduce flooded traffic
12.Creating VLANs - ANSWER ✔ SW1#vlan database
SW1(vlan)#vlan 10 name firstvlan
SW1(vlan)#vlan 20 name secondvlan
13.Access Port configuration - ANSWER ✔ SW1(config-if)#switchport mode
access
SW1(config-if)#switchport access vlan 10
SW1(config-if)#switchport access vlan 20
,14.Configure an access port config to a range of interfaces and add a VLAN -
ANSWER ✔ SW1(config)#interface range fa 0/2 - 5
SW1(config-if)#switchport access vlan 10
SW1(config)#interface range fa 0/6 - 10
SW1(config-if)#switchport access vlan 20
15.Trunk Port configuration - ANSWER ✔ SW1(config-if)#switchport mode
trunk
SW1(config-if)#switchport trunk encapsulation dot1q
16.VTP Configuration commands - ANSWER ✔ SW1#vlan database
SW1(vlan)#vtp mode (Server/Client/Transparent)
SW1(vlan)#vtp domain <name>
SW1(vlan)#vtp password <password>
SW1(vlan)#vtp pruning
17.Troubleshooting commands for VLAN - ANSWER ✔ 1. show vlan
2. show vlan-membership
3. show vtp status
4. show interfaces trunk
5. show interface <interface-name> switchport
18.What is Ethernet Channel - ANSWER ✔ EtherChannel is a port link
aggregation technology used primarily on Cisco
networking devices.It allows grouping of several physical Ethernet links to
create one logical Ethernet link for the purpose of providing fault-tolerance
and high-speed links between switches, routers and servers.
19.PagP - ANSWER ✔ Port Aggregation Protocol
, PagP helps in the automatic creation of Fast EtherChannel links. PagP is
protocol is Cisco proprietary link aggregation protocol used in Cisco
switches
routers, and servers.
20.LACP - ANSWER ✔ Link Aggregation Control Protocol
LACP is different from PAgP. LACP is a standards based protocol and
conforms
to IEEE standard 802.3ad, whereas PAgP is a Cisco proprietary protocol.
21.PAgP modes and the corresponding action - ANSWER ✔ 1. ON mode does
not send or receive PAgP packets. Therefore, both ends
should be set to ON mode toform an EtherChannel.
2. Desirable mode tries to ask the other end in order to bring up the
EtherChannel.
3. Auto mode participates in the EtherChannel only if the for end asks for
participation. Two switches in auto mode will not form an EtherChannel.
22.switch# show etherchannel port - ANSWER ✔ Used for verifying the
channel negotiation mode of an EtherChannel.
23.Switch# show etherchannel summary - ANSWER ✔ Shows each port in the
channel along with the status flag.
24.Switch(config)# port-channel load-balance src-ip - ANSWER ✔ Will
configure load balancing on EtherChannel switch links using source IP
address.
