CCNA Q&A - IP-NOC

#1. Assume that you have just entered the configure terminal command. You want to configure the speed and duplex of the first 10/100/1000 twisted-pair Ethernet interface on the first Cisco Catalyst switch stack member to 1-Gbps full-duplex mode. Which one of these commands should you enter first?

speed 1000 mbps

interface gigabitethernet 1/0/1

speed 1000

duplex full

interface gigabit ethernet 1/0/1

#2. What is the maximum number of access layer switches that can connect into a single distribution layer switch?

Limited only by the number of ports on the distribution layer switch

1

2

Limited only by the number of ports on the access layer switch

#3. A Cisco switch is currently in VTP Client mode. You issue the vlan 100 command in global configuration mode to create a new VLAN. What is the result?

The switch reverts to Transparent mode.

The switch configures the VLAN but on the local device only.

The switch produces an error message.

The switch sends VLAN 100 configuration information to the VTP server.

#4. A new Layer 2 switch in its default configuration has just been powered up. In addition to a console connection, there are two Windows hosts and an IP phone (using PoE) connected to its Ethernet ports. Which of the following are true? (Choose two.)

Select all that apply:

The switch would see the two Windows hosts’ directly connected devices from CDP.

If either Windows host has successfully completed an ARP resolution, the switch will have learned the MAC addresses of both Windows hosts.

The switch can be configured with an IPv4 address on interface VLAN 1.

The switch would not know if the IP phone is a Cisco IP phone or a third-party IP phone until a call is initiated from the phone.

#5. Which command displays a quick view of OSPF neighbor status?

show ospf peers

show ip ospf peers

show ip ospf neighbor

show ip ospf routers

#6. Ethernet autonegotiation determines which of the following?

MAC address learning

Duplex mode

Quality of service mode

Spanning-tree mode

#7. Which of the following access-list commands permits packets going to any web client from all web servers whose IP addresses begin with 172.16.5?

access-list 2523 permit tcp any eq www 172.16.5.0 0.0.0.255

access-list 1951 permit ip host 10.1.1.1 172.16.5.0 0.0.0.255 eq www

access-list 2523 permit tcp 172.16.5.0 0.0.0.255 eq www any

access-list 101 permit tcp host 10.1.1.1 172.16.5.0 0.0.0.255 eq www

access-list 2523 permit tcp 172.16.5.0 0.0.0.255 eq www 172.16.5.0 0.0.0.255

#8. Which of the following values can be used to mark a packet for QoS? (Choose two)

Select all that apply:

DSCP

IP Precedence

COS

#9. Which type of Cisco IOS password encryption uses the Vigenere cipher?

Type 4

Type 7

Type 5

Type 0

#10. Some IOS commands store passwords as clear text, but you can then encrypt the passwords with the service password-encryption global command. By comparison, other commands store a computed hash of the password instead of storing the password. Comparing the two options, which one answer is the most accurate about why one method is better than the other?

Using encryption is preferred because it provides stronger password protection.

Using hashes is preferred because of the large CPU effort required for encryption.

Using encryption is preferred because of the large CPU effort required for hashes

Using hashes is preferred because encrypted IOS passwords can be easily decrypted.

#11. How many distribution switches should be built into each switch block?

2

1

8

4

#12. What is the stratum of a Cisco router if you use the command ntp master to configure it to use its internal clock as a time source?

13

1

8

2

0

#13. What is the IPv4 address range 224.0.0.0 to 239.255.255.255 used for?

To send multiple packets to only a single specific system

To send a packet to a single specific system

To send a packet to a group of systems

To send a packet to all systems

#14. When an interface gets congested, it is possible that all TCP connections traversing that interface will experience TCP slow start. Packets will be dropped and then all TCP sessions will revert to a small window size, thus reducing the efficiency of the link. What is this behavior called?

TCP windowing

TCP Global Synchronization

TCP Session Harmonization

Random Early Detection (RED)

#15. What is the purpose of the command service timestamps log datetime msec?

To indicate the time of transference for syslog messages to the server

Not applicable as this command is not valid

To mark syslog messages with the data and time, including the milliseconds

To prevent attackers from manipulating the time in syslog messages

#16. What technology provides multiple default gateways in a redundant manner and automates load sharing?

GLBP

FHRP

HSRP

VRRP

#17. Which VLAN number is never eligible for VTP pruning?

1000

0

1

1001

#18. Which of the following fields cannot be compared based on an extended IP ACL? (Choose two answers.)

Select all that apply:

Source IP address

Protocol

Filename for FTP transfers

URL

Destination IP address

TOS byte

#19. What component does Ansible use to gather plays that perform tasks on a network?

Runbook

Cookbook

Playbook

Inventory

#20. Which of the following procedures describes the correct set of steps to successfully configure a router on a stick? (Choose four)

Select all that apply:

Indicate the VLAN that each subinterface belongs to with the encapsulation dot1q X command where X is the VLAN ID

Configure each subinterface with an IP address in a separate subnet

Create one subinterface for each VLAN allowed on the trunk link

Enable the physical interface on the router and make sure that no encapsulation or IP address is configured on it

Indicate the VLAN that each subinterface belongs to with the InterfaceType X/Y.Z where Z is the VLAN ID

#21. How many different VLANs can an 802.1Q trunk support?

32768

256

4096

1024

#22. Which answer describes multilayer switching with CEF?

The switch supervisor CPU forwards each packet

The switching hardware learns station addresses and builds a routing database.

The first packet is routed and then the flow is cached.

A single database of routing information is built for the switching hardware.

#23. What is smaller and more efficient than a virtual machine (VM)?

API

Cluster node

Container

Bucket

#24. What networking device provides instructions to APs?

Switch

Router

WLC

Firewall

#25. Which of the following correctly describes the Anycast addressing method of IPv6?

Anycast uses IPv6 addresses that begin with FFEE

When multiple Global Unicast IPv6 addresses are assigned to a single device

When one Global Unicast IPv6 address is assigned to multiple devices

When multicast addressing is applied to both source and destination of a communication session

#26. A user has brought this access point from home and connected it to the network. The network sees a single IP as the access point is using NAT to provide IP addresses to its wireless clients. Which of the following could you use to successfully detect and block the use of such a device?

802.1X authentication

Access lists with the IP addresses of the wireless clients

STP in conjunction with CDP

802.3af PoE network protection

Port security with a maximum of MAC address

#27. Which of the following provides a secure method to transfer files in a Cisco network?

FTP

SCP

TELNET

TFTP

#28. At what layer are traditional 10-Mbps Ethernet, Fast Ethernet, and Gigabit Ethernet the same?

Layer 4

Layer 2

Layer 1

Layer 3

#29. Which of the following addresses is a private-use only address

201.92.34.100

12.43.56.120

177.12.34.19

10.123.23.104

#30. End-user PCs should be connected into which of the following hierarchical layers?

Distribution Layer

Access Layer

Core Layer

#31. Which are true ?

NVRAM=show startup-config

All True

RAM=show running-config

Flash & USB= IOS Files

#32. Which of the following are network parameters that can be configured on a client via DHCP? (Choose three)

Select all that apply:

Default Gateway

QOS Levels

DNS

TFTP

Default TCP Port

#33. Which of the following cannot be automatically determined and set if the far end of a connection does not support autonegotiation?

Link speed

Link duplex mode

MAC address

Link media type

#34. Which of the following wildcard masks is most useful for matching all IP packets in subnet 10.1.128.0, mask 255.255.240.0?

0.0.0.240

0.0.0.255

0.0.248.255

0.0.0.0

0.0.15.255

0.0.0.31

#35. A Cisco lightweight wireless access point is connected to switch interface Gigabit Ethernet 1/0/20. Which one of the following commands enables you to configure the interface on the switch?

switchport trunk allowed vlan 1-100 , switchport mode trunk

switchport access vlan 50 , switchport mode access

switchport ap vlan 50

no switchport mode dynamic autonomous

#36. Which of the following are disadvantages of the three-layer hierarchical architecture when applied to datacenters? Choose all that apply.

Select all that apply:

The server-to-server latency for the three-tier model can potentially be very high, especially when the north-south traffic between layers has to go through multiple pods

The three-tier model using vPCs is limited to two active uplinks, resulting in an inefficient use of available bandwidth

The three-tier model is limited to the use of STP, which blocks all L2 links except one, resulting in an inefficient use of available bandwidth

The server-to-server latency for the three-tier model can potentially be very high, especially when the east-west traffic between pods has to go through the distribution and core layers

#37. Which of the following are typical functions of TCP? (Choose four answers.)

Select all that apply:

Multiplexing using port numbers

Routing

Error recovery

Ordered data transfer

Encryption

Flow control (windowing)

#38. Notice the static route at the end of the routing table highlighted with red text. Which of the following types of routes would you consider this to be?

A floating static route

A default gateway

A network route

A host route

#39. An engineer configures an ACL but forgets to save the configuration. At that point, which of the following commands display the configuration of an IPv4 ACL, including line numbers? (Choose two answers.)

Select all that apply:

show access-lists

show startup-config

show ip access-lists

show running-config

#40. Which RF band is used with 802.11ac?

Both 2.4 GHz and 5 GHz

5 GHz

7 GHz

2.4 GHz

#41. The show port-security interface f0/1 command lists a port status of secure-down. Which one of the following answers must be true about this interface at this time?

The show port-security interface command could list a violation counter value of 10.

The show interface status command lists the interface status as err-disabled.

The show interface status command lists the interface status as connected.

The show port-security interface command could list a mode of shutdown or restrict, but not protect.

#42. Examine the topology shown in the figure. If OSPF, EIGRP, and RIPv2 were all enabled on each interface on each router, which routing protocol would R4 use to determine the best route to 10.77.67.0/24?

EIGRP because its metric considers bandwidth and delay

OSPF because its cost is derived from bandwidth and delay

OSPF because it is an advanced distance vector routing protocol

EIGRP because of administrative distance

#43. You are configuring a default route that should direct traffic for unknown networks out of interface Fa 0/0 to a next-hop IP address of 192.168.1.100. Which of the following commands should you use to configure the default route?

ip route 255.255.255.255 255.255.255.255 192.168.1.100

ip route 0.0.0.0 0.0.0.0 192.168.1.100

ip route 0.0.0.0 0.0.0.0 fa 0/0

ip route 255.255.255.255 255.255.255.255 fa 0/0

#44. Which of the following are examples of traffic that can be created as part of an IP Service-Level Agreement operation? (Choose two.)

Select all that apply:

VoIP (RTP)

IPX

SNMP

ICMP Echo

#45. Which of the following types of access lists can you use successfully on an IPv6 network?

Standard named access lists

Standard numbered access lists

Extended named access lists

All of the above

Extended numbered access lists

#46. How many layers are recommended in the hierarchical campus network design model?

1

2

4

3

7

#47. Which one of these commands can enable Power over Ethernet to a switch interface?

inline power on

inline power enable

power inline auto

power inline on

#48. which of the following is not a Catalyst switch VTP mode?

Designated

Server

Client

Transparent

#49. In a reflection attack, the source IP address in the attack packets is spoofed so that it contains which one of the following entities?

The address of the reflector

The address of the router

The address of the attacker

The address of the victim

#50. Which of the following describes the most significant change to SNMP when comparing version 2 with version 3?

SNMPv2 provides three different security levels, whereas SNMPv3 has consolidated these three into a single set of security policies

SNMPv3 no longer uses traps, but implements what are known as SNMP updates

SNMPv3 operates much like SNMPv2 except that it has a completely overhauled security model

#51. How many syslog levels are there with Cisco equipment?

4

6

16

8

#52. Routers R1 and R2 are both running OSPFv2, and they are currently authenticated with one another, using MD5, over their Fa 0/0 interfaces. Interface Fa 0/0 on Router R1 is participating in area 0. However, you notice that the OSPF router configuration on Router R1 does not contain the area 0 authentication message-digest command. What command must have been configured under Router R1’s Fa 0/0 interface?

ip ospf authentication message-digest

ip ospf authentication 0 md5

area 1 authentication message-digest

area 0 authentication md5

#53. In a Catalyst switch, frames can be filtered with access lists for security and QoS purposes. This filtering occurs according to which of the following?

According to how the access lists are configured

Before a CAM table lookup

After a CAM table lookup

Simultaneously with a CAM table lookup

#54. What keyword enables the use of PAT in a NAT configuration?

pool

load

ports

overload

#55. Examine the topology shown in the figure. The PC has sent a ping request to the server. Which devices in the network operate only at the physical layer of the OSI reference model? (Choose two.)

Select all that apply:

Hub A

Router 2

Bridge 1

Switch 3

PC network interface card

Ethernet cabling

#56. Refer to the Above image of an IPv4 header and its various fields: Which field is responsible for verifying that packets that arrive out-of-order are reassembled in the correct order?

Option

TOS

Identification

Fragment Offset

Flags

None of the Above

#57. Imagine that you have configured the enable secret command, followed by the enable password command, from the console. You log out of the switch and log back in at the console. Which command defines the password that you had to enter to access privileged mode?

The password command, if it’s configured

enable secret

Neither

enable password

#58. Which one of the following switch functions is needed to pass data between two PCs, each connected to a different VLAN?

L3 Switch

L2 Switch

Trunk

Tunnel

#59. What command permits you to see your locally used OSPF routes?

show ip ospf database local

show ospf all

show ip route ospf

show ospf routes local

#60. Which of the following does not need to match when configuring OSPF version 2 peering?

Authentication

The local process ID

The area ID

The hello and dead timers

#61. What information is used to forward frames in a Layer 2 switch?

Source switch port

Destination MAC Address

Source MAC address

IP addresses

#62. A switch’s port Gi0/1 has been correctly enabled with port security. The configuration sets the violation mode to restrict. A frame that violates the port security policy enters the interface, followed by a frame that does not. Which of the following answers correctly describe what happens in this scenario? (Choose two answers.)

Select all that apply:

The switch increments the violation counter for Gi0/1 by 1

The switch generates syslog messages about the violating traffic for the first frame

The switch puts the interface into an err-disabled state when the first frame arrives

The switch discards both the first and second frame.

#63. When examining traffic on an IPv6 enabled network using a packet sniffer programme such as Wireshark, you notice several IPv6 packets with destination addresses beginning with FF. What kind of IPv6 traffic is this?

Multicast Traffic

Broadcast traffic

Uniucast traffic

Traffic between Link Local addresses

Anycast Traffic

#64. Select all the parameters that decide whether to accept new VTP information.

Select all that apply:

Configuration revision number

VTP domain name

VTP priority

VTP server name

#65. What device can use a dual-band approach and 802.11 standards for connecting end users to the network?

AP

ROUTER

WLC

Firewall

#66. Which of the following access-list commands matches all packets sent from hosts in subnet 172.16.4.0/23?

access-list 1 permit 172.16.0.5 0.0.255.0

access-list 1 permit 172.16.5.0 0.0.0.127

access-list 1 permit 172.16.4.0 0.0.1.255

access-list 1 permit 172.16.5.0

#67. Two neighboring routers are each configured with a key chain. What element(s) of the key chain must match for the two routers to mutually authenticate? (Choose all that apply.)

Key chain name

Send-lifetime

Accept-lifetime

Key string

Key number

#68. What is the default administrative distance for internal EIGRP?

90

110

20

120

#69. What device protects “internal” networks from “external” networks?

FIREWALLS

AP

Router

WLC

#70. Identify the valid types of OSPFv3 authentication supported in Cisco IOS. (Choose all that apply.)

Select all that apply:

MD5

SHA

PAP

Clear Text

#71. What port security approach is considered a mix of dynamic and static configuration?

Sticky learning

Blocked learning

Violation null

Trunking

#72. How is CDP carried on the network?

Using 802.1Q messages

Using Layer 1

Using Layer 2

Using VTP messages

#73. What must be in place before you can route other devices’ IPv6 traffic through a Cisco router?

A loopback 0 interface with an IPv4 address assigned

The ipv6 unicast-routing global configuration command

IPv4 interfaces

The command dual-stack routing

#74. What are the reasons a duplex mismatch can be difficult to find?

Select all that apply:

Connectivity might be slow.

Users are presented with an error message that varies by operating system.

Users cannot communicate on the network at all.

Connectivity is typically intermittent.

#75. Examine the configuration above. What is the next hop for 10.10.20.0/24?

172.16.1.1

10.10.20.1

0.0.0.0

255.255.255.0

#76. If two switches each support all types of trunk encapsulation on a link between them, which one will be negotiated?

802.1Q

ISL

VTP

DTP

#77. What interface configuration mode command configures a Cisco router as a DHCP client?

ip address dhcp

dhcp address

ip address auto

ip address enable dhcp

#78. Refer to the network topology above. Your senior network administrator is concerned about network security. He has asked you to ensure that the PC-10 device in VLAN 10 does not overflow the switch’s CAM table. How should you respond? (Choose two.)

Select all that apply:

Configure port-security on interface 0/2 of the switch

Configure Router A to route traffic sourced from any device other than PC-10 to Null0.

Configure a static MAC address as part of port-security.

Configure OSPF on all network devices and use MD5 authentication.

Configure the service password-encryption command on the switch.

#79. Which statements are TRUE regarding NTPv4(Choose 2)?

Select all that apply:

NTPv4 can transmit packets through broadcast.

NTPv4 can transmit packets through unicast.

NTPv4 can transmit packets through broadcast.

#80. What is the authentication method used in many RADIUS environments today?

TELNET

MD5

PAP

EAP

#81. How is a bridging loop best described?

A loop formed between switches where frames circulate endlessly

A loop formed between switches for redundancy

The round-trip path a frame takes from source to destination

A loop formed by the Spanning Tree Protocol

#82. The following terms describe various design options for enterprise connectivity to the Internet. Which of the following imply that the enterprise connects to two or more ISPs? (Choose two.)

Select all that apply:

Dual Homed

Dual Multihomed

Single Multihomed

Single Homed

#83. Which of the following features can provide router redundancy?

HSRP

TACACs

AAA

SNMP

#84. Which of these protocols dynamically negotiates trunking parameters?

PAGP

DTP

CDP

STP

#85. What is the maximum cable distance for an Ethernet, Fast Ethernet, and Gigabit Ethernet connection over unshielded twisted pair cabling?

100 m

328 m

500 m

100 feet

#86. Which Catalyst IOS switch command is used to assign a port to a VLAN?

set port vlan vlan-id

vlan vlan-id

access vlan vlan-id

switchport access vlan vlan-id

#87. What is the purpose of breaking a campus network into a hierarchical design?

To facilitate documentation

To follow political or organizational policies

To make the network more redundant and secure

To make the network predictable and scalable

#88. The above output occurs on Router R1. IP SLA operation 1 uses an ICMP echo operation type, with a default frequency of 60 seconds. The operation pings from address 1.1.1.1 to address 2.2.2.2. Which of the following answers is true regarding IP SLA and object tracking on R1?

After moving to a down state, the tracking object moves back to an OK state 45 seconds after the SLA operation moves to an OK state.

After the tracking object fails, the tracking object moves back to an up state 45 seconds later in all cases.

The tracking return code fails immediately after the SLA operation results in an ICMP echo failure three times.

The tracking return code fails immediately after the SLA operation results in an ICMP echo failure one time.

#89. A colleague is attempting to implement IPv6 on the enterprise network for which he is responsible. He asks for your advice and wants to know if IPv6 offers a similar feature to IPv4 private non-routable addresses such as the 192.168.0.0 and 10.0.0.0. What should you answer him?

IPv6 does not have a counterpart to the IPv4 private addresses because there are so many available that such a feature is not required

Yes, IPv6 does have a counterpart to the IPv4 private addresses. Such addresses are called Unique Local addresses.

For private addresses in IPv6 you must continue to use the IPv4 range of private addresses and tunnel them using 4to6 tunneling

Yes, IPv6 does have a counterpart to the IPv4 private addresses. Such addresses are called Link Local addresses.

#90. Which of the following wildcard masks is most useful for matching all IP packets in subnet 10.1.128.0, mask 255.255.255.0?

Select all that apply:

0.0.0.0

0.0.0.240

0.0.15.0

0.0.248.255

0.0.0.255

0.0.0.31

#91. You are examining the interfaces on a Cisco WLAN controller. You observe an interface named Students-VLAN. What is most likely the type of this interface?

Management interface

AP-Manager interface

User-defined dynamic interface

Service port interface

#92. Which one of the following is needed for VTP communication?

A trunk link

A Management VLAN

An access VLAN

An IP address

#93. Which of the following is true about this response to an ICMP echo request?

The ICMP packet is informing the sender that the destination is reachable but traffic to that destination has been blocked using an access list

The ICMP packet is informing the sender that the destination is unreachable because the destination host was not found

The ICMP packet is informing the sender that the destination is unreachable because it has been blocked using an access list

The ICMP packet is informing the sender that the destination is unreachable because the destination network was not found

#94. You have connected to a Cisco IOS device remotely via an SSH connection. You’d like to observe syslog events as they occur in real-time. Which of the following commands can you use to enable any active syslog events to appear on the command line in such a scenario?

show logging real-time

monitor terminal

terminal monitor

show terminal monitor

debug logging

show logging

#95. Which one of the following is an example of a AAA server?

DNS

ISE

DHCP

SNMP

#96. An actual potential to exploit a vulnerability is known as which one of the following terms?

Exploit

Threat

Attack

Vulnerability

#97. What does the IEEE 802.3 standard define?

Token Ring

Spanning Tree Protocol

Ethernet

Switched Ethernet

#98. Which one of the following is a standards-based protocol that can be used to discover and collect information about connected devices?

STP

ICMP

CDP

LLDP

#99. What command would you use on a Cisco Layer 2 switch to verify errors regarding sending or receiving frames?

show collisions

show interface

show version

show controllers

#100. If a VTP server is configured for VTP Version 2, what else must happen for successful VTP communication in a domain?

All other switches must be configured for VTP version 2.

A VTP version 2 password must be set.

All other switches in the domain must be version 2 capable.

The VTP configuration revision number must be reset.

#101. Two hosts are connected to switch interfaces Gigabit Ethernet 1/0/1 and 1/0/33, but they cannot communicate with each other. Their IP addresses are in the 192.168.10.0/24 subnet, which is carried over VLAN 10. The show vlan id 10 command generates the above output, The hosts are known to be up and connected. Which of the following reasons might be causing the problem? (Choose all that apply.)

Select all that apply:

The two hosts are assigned to VLAN 1

Interface Gigabit Ethernet 1/0/33 is a VLAN trunk.

The two hosts are assigned to different VLANs.

The two hosts are using unregistered MAC addresses.

#102. What does a switch do if a MAC address cannot be found in the CAM table?

The switch floods the frame out all ports (except the receiving port).

The switch drops the frame.

The switch generates an ARP request for the address.

The frame is forwarded to the default port.

#103. Which statement about PortFast on Cisco switches is incorrect?

PortFast is used exclusively on trunk ports.

PortFast is designed for use on edge ports.

PortFast speeds convergence.

PortFast is supported in STP and RSTP.

#104. What is the last usable host address, given the IP address and subnet mask 172.16.10.101 with 255.255.224.0?

enter answer here

172.16.31.254

#105. Which of the following header fields identify which TCP/IP application gets data received by the computer? (Choose two answers.)

Select all that apply:

Ethernet Type

SNAP Protocol Type

IP Protocol

UDP Port Number

TCP Port Number

#106. What is the default administrative distance for OSPF?

110

20

120

100

#107. When IPv6 is enabled on the interface of a network device, a Link Local address is assigned to it. Which of the following methods can be used to assign a Link Local address to an IPv6 enabled interface? (Choose three)

Select all that apply:

DHCPv6

Modified EUI-64

MAC Address Conversion

Randomly Assigned

Unmodified EUI-64

Manually Assigned

#108. Which are the most important aspects to consider when designing the core layer in a large network? (Choose all that apply.)

Select all that apply:

High port density of high-speed ports

A low number of Layer 3 routing peers

Low cost

Switches that can efficiently forward traffic, even when every uplink is at 100 percent capacity

#109. What command configures an IP phone to use VLAN 9 for voice traffic?

switchport voip 9

switchport voice-vlan 9

switchport voice 9

switchport voice vlan 9

#110. You are asked by a network administrator for your expertise. You are told that the network requires the use of a discovery protocol that is an open standard and is supported by multiple vendors, but at the same time, must support auto-discovery of LAN policies, automatic VLAN assignments as well as power management for PoE devices. Which of the following would you recommend?

Open-CDP

Media Endpoint Discovery

LLDP-Media Endpoint Discovery

Cisco Discovery Protocol

LLDP

#111. You decided to reduce the size of your existing Layer 2 broadcast domains by creating new VLANs. What network device that forwards packets between those VLANs would be operating (at a minimum), and at which OSI layer?

A router at Layer 3

A router at Layer 2

A switch at Layer 1

A switch at Layer 2

#112. What architectural model is used with Cisco ACI?

3-tier

2-tier collapsed core

Concentric

2-tier spine-leaf

#113. What wireless security standard replaces PSK with SAE?

wpa2

TKIP

wpa3

AES

#114. What device protects “internal” networks from “external” networks?

Internet

Core

Access

Distribution

#115. Examine the switch configuration shown. What problem exists with this suggested configuration change?

A violation mode for port security must be selected.

Port security can be used on trunks (depending on the switch), but it is likely that there will be many more than two learned MAC addresses on that port.

Port security can only be used with 802.1Q trunks.

Port security can only support a single secure MAC address.

#116. What is a potential underlay protocol for a VXLAN EVPN fabric?

Ebgp

VTP

RIP

EIGRP

#117. Which one or more of the following are the components of a typical switch block?

Service provider switches

Distribution layer switches

Access layer switches

E-commerce servers

Core layer switches

#118. Which of the following are common types of core, or backbone, designs? (Choose all that apply.)

Select all that apply:

Multinode core

Collapsed core

Loop-free core

Layered Core

Dual core

#119. Examine the topology shown here. How many collision domains exist between the PC and Router 1?

0

1

3

2

#120. What information for a wireless network can you choose not to broadcast?

SSID

Type

Version

The AP’s MAC address

#121. What technology is used to allow a switch port to carry the traffic of multiple data VLANs from one device to another in a Cisco network?

VTP

Trunking

Port Security

VLAN hopping

#122. What is the standard maximum frame size in a typical Ethernet network (in bytes)?

9000

1500

1800

65000

#123. Examine the following configuration on Router R1 which is the image above. R1’s show ip route 172.16.4.1 command lists a route with outgoing interface S0/1/1. Host 172.16.3.3 uses Telnet to connect to host 172.16.4.1. What will Router R1 do with the packets generated by host 172.16.3.3 because of the Telnet session, assuming that the packets enter R1’s Fa0/0 interface? (Choose two.)

Select all that apply:

The packets will be forwarded out S0/0/1, or not at all.

The packets will be forwarded out S0/0/1 if it is up, or if it is not up, out S0/1/1.

The packets will be forwarded out S0/0/1 if it is up.

The packets will be forwarded out S0/1/1 if it is up.

The packets will be forwarded out S0/1/1 if it is up, or if it is not up, out S0/0/1.

#124. Which of the following statements regarding ICMP is correct?

ICMP functions at the network layer of the OSI model.

ICMP functions at the session layer of the OSI model.

ICMP relies on UDP for efficient packet delivery.

ICMP relies on TCP for reliable packet delivery.

#125. Based on the 802.1Q standard, all frames sent between the two switches will have a VLAN tag and will be placed on the appropriate VLAN once the other end of the trunk is reached. If SW1 sends a frame to SW2 without a tag, what will SW2 do with it? (choose two)

Select all that apply:

The frame will be dropped

The frame will be placed on the allowed VLAN with the lowest number that has been configured on the trunk

The frame will be placed on the configured Native VLAN of the interface

If no Native VLAN is configured, the frame will be placed on the default VLAN

#126. Which of the following is not an HTTP method used with REST APIs?

POST

DELETE

GET

PUT

SEND

#127. Access list rules are compiled as TCAM entries. When a packet is matched against an access list, in what order are the TCAM entries evaluated?

Sequentially in the order of the original access list.

All entries are evaluated in parallel.

Alphabetically by the access list name.

Numerically by the access list number.

#128. What QoS technology is often used for congestion management in VoIP environments?

LLQ

WFQ

CBWFQ

FIFO

#129. A VLAN is which of the following?

Collision domain

Broadcast domain

Spanning-tree domain

VTP domain

#130. A switch in VTP transparent mode can do which one of the following?

Only listen to VTP advertisements

Create a new VLAN

Cannot make VLAN configuration changes

Send its own VTP advertisements

#131. Which of the following incorrectly describes a native VLAN?

Frames can be interpreted by a nontrunking host.

The native VLAN can be configured for each trunking port.

Frames are untagged on an 802.1Q trunk.

Frames are untagged on an ISL trunk.

#132. What advantages does the separation of the data and control planes offer with the implementation of an SDN controller?

The SDN controller has insight into the control plane of the whole network and provides a more comprehensive view of the network

The use of an SDN implements a distributed model for the control plane allowing for a more appropriate distribution of networking resources

Protocols such as RDP, SIP, FTP and Telnet are solely the responsibility of the SDN

Security parameters for the network can be controlled at the controller because all network traffic traverses the SDN

#133. The above output occurs on Router R2. Which of the following statements can be confirmed as true based on the output?

R2 will consider using PBR for all packets entering S0/0/0 per route map RM3.

R2 will forward all packets that enter Fa0/0 per the PBR configuration.

R2 will consider using PBR for all packets exiting S0/0/0 per route map RM3.

R2 will use route map RM2 when determining how to forward packets that exit interface Fa0/1.

#134. In a spoofing attack, which of the following parameters are commonly spoofed? (Choose two answers.)

Select all that apply:

ARP

Source IP address

Destination IP address

MAC address

#135. Which of the following is required when configuring port security with sticky learning?

Enabling port security with the switchport port-security interface subcommand

All the other answers list required commands.

Defining the specific allowed MAC addresses using the switchport port-security mac-address interface subcommand

Setting the maximum number of allowed MAC addresses on the interface with the switchport port-security maximum interface subcommand

#136. What global configuration command allows you to disable CDP on an entire Cisco switch?

no cdp enable

no cdp search

no cdp

no cdp run

#137. At what layer are traditional 10-Mbps Ethernet, Fast Ethernet, and Gigabit Ethernet different?

Layer 4

Layer 3

Layer 1

Layer 2

#138. What is the name of the “database” used with SNMP?

AGENT

MIB

TREE

VARSTORE

#139. Which of the following statements is not true about the default VLAN on a switch?

It is always best practice to never use the default VLAN for live traffic of any kind

It is not possible to change the name of the default VLAN

All ports are assigned to the default VLAN when a switch is first turned on and is in its default configuration

The default VLAN should always be deleted and never used

#140. Which of the following commands list the MAC address table entries for MAC addresses configured by port security? (Choose two answers.)

Select all that apply:

show mac address-table port-security

show mac address-table

show mac address-table static

show mac address-table dynamic

#141. Suppose an attacker sends a series of packets toward a destination IP address with the TCP SYN flag set but sends no other packet types. Which of the following attacks is likely taking place?

Reconnaissance attack

Spoofing attack

Denial-of-service attack

None of the choices are correct.

Reflection attack

#142. Within the framework of SNMPv2, which of the following statements is correct as far as SNMP traps and SNMP Get messages are concerned?

SNMP trap messages can be sent from the SNMP Manager to the Agent as well as from the SNMP Agent to the Manager

SNMP Get messages are used to request the current state of OIDs while SNMP traps are notifications sent by an agent as soon as something occurs

SNMP trap messages are always acknowledged while the SNMP Get messages are never acknowledged

#143. Which Catalyst IOS command can you use to display the addresses in the CAM table?

show mac address-table

show mac

show cam address-table

show cam

#144. Which of the following is not a step for supporting SSH connections on a Cisco router?

Configure the hostname command.

Enable SSH globally.

Generate the SSH key.

Configure a DNS domain.

#145. In a switch, frames are placed in which buffer after forwarding decisions are made?

Ingress queues

TCAM

CAM table

Egress queues

#146. When configuring PVST+, what is true about this topology? (Choose all that apply)

Select all that apply:

PVST+ allows the use of multiple root bridges, one for each VLAN so that Fa0/16 on SW3 is blocked for VLAN 10 and Fa0/17 on SW1 is blocked on VLAN 20 resulting in a more efficient use of available bandwidth

In order to maximize efficiency, when using PVST+ it is always best practice to ensure that the same port is the Alternate port for all VLANs in a topology

The link between SW2 and SW3 will allow traffic on VLAN 20 but not on VLAN 10

PVST+ allows the use of multiple root bridges, one for each VLAN so that Fa0/16 on SW3 is blocked for VLAN 20 and Fa0/17 on SW1 is blocked for VLAN 10 resulting in a more efficient use of available bandwidth

There is a misconfiguration because the topology has two root bridges which could cause layer two loops

#147. A switch block should be sized according to which two of the following parameters? (Choose all that apply.)

Select all that apply:

The amount of rack space available

A maximum of 250 access layer users

The number of servers accessed by users

The number of access layer users

A study of the traffic patterns and flows

#148. What is the term for an API that communicates from a network management station to the SDN controller?

East

West

Southbound

Northbound

#149. Which of the following are considered private IPv4 addresses?

Select all that apply:

192.16.1.1

225.0.0.1

127.0.0.1

10.1.1.1

172.30.1.1

#150. What command does a client use to enable stateless autoconfiguration of IPv6 address information on an interface?

ipv6 address autoconfig

ipv6 enable

ipv6 address dhcp

ipv6 address enable

#151. Create an extended ACE that permits Telnet traffic from a Telnet server on the network 10.10.10.0/24, going to a host on network 192.168.1.0/24. Use ACL 101.

enter answer here

access-list 101 permit tcp 10.10.10.0 0.0.0.255 eq 23 192.168.1.0 0.0.0.255

#152. Which of the following show interface output information can you use to diagnose a switch port problem?

Port speed

Input errors

Port state

All answers are correct

Collisions

#153. What suite of protocols is often found in use with modern VPN connections?

IPsec

PGP

SLA

DNSSEC

#154. Policy-Based Routing (PBR) has been enabled on Router R1’s Fa 0/0 interface. Which of the following are true regarding how PBR works? (Choose two.)

Select all that apply:

Packets exiting Fa 0/0 will be compared based on the PBR route map.

Cisco IOS ignores the PBR forwarding directions when a packet matches a route map deny clause.

Packets entering Fa 0/0 will be compared based on the PBR route map

Cisco IOS ignores the PBR forwarding directions when a packet matches a route map permit clause.

#155. What Cisco wireless controller feature simplifies controller configuration by no longer requiring the setup of primary and secondary ports for each interface?

SNMP

LAG

RSTP

VTP

#156. Given the following address and mask 172.16.10.1 255.255.248.0, what is the broadcast address for the subnet?

172.16.255.255

172.16.15.255

172.16.16.255

172.16.8.0

172.16.10.255

#157. which of the following is essentially a standards based version of HSRP?

SNMP

OSPF

VRRP

GLBP

#158. When configuring syslog logging on a Cisco device, if the logging trap level is not configured, which syslog messages will be recorded?

All levels except for debugging

Only error level events

Emergencies, alerts and errors

#159. What size are the mask and pattern fields in a TCAM entry?

128 bits

168 bits

64 bit

134 bits

#160. Which of the following access-list commands permit packets going from host 10.1.1.1 to all web servers whose IP addresses begin with 172.16.5? (Choose two answers.)

Select all that apply:

access-list 2523 permit tcp host 10.1.1.1 eq www 172.16.5.0 0.0.0.255

access-list 101 permit tcp host 10.1.1.1 172.16.5.0 0.0.0.255 eq www

access-list 2523 permit tcp host 10.1.1.1 172.16.5.0 0.0.0.255 eq www

access-list 1951 permit ip host 10.1.1.1 172.16.5.0 0.0.0.255 eq www

access-list 2523 permit ip host 10.1.1.1 eq www 172.16.5.0 0.0.0.255

#161. What is the privilege level for the user in the command username johns secret cisco123?

1

15

0

8

#162. In which OSI layer should devices in the distribution layer typically operate?

Layer 2

Layer 4

Layer 3

Layer 1

#163. What do you call data that includes the Layer 4 protocol header, and data given to Layer 4 by the upper layers, not including any headers and trailers from Layers 1 to 3? (Choose two answers.)

Select all that apply:

L4PDU

L3PDU

Chunk

Segment

Frame

Packet

#164. Which of the following is not a valid configuration for the trust boundary of the interface of the Access switch connected to the IP phone?

3560Switch(config-if)#mls qos trust phb

3560Switch(config-if)#mls qos trust cos

3560Switch(config-if)#mls qos trust device cisco-phone

3560Switch(config-if)#mls qos trust dscp

#165. Which command configures a Catalyst switch for VTP client mode?

vtp client mode

vtp mode client

vtp client

set vtp mode client

#166. Which of these is not a standard type of gigabit interface converter (GBIC) or small form factor pluggable (SFP) module?

1000BASE-ZX

1000BASE-T

1000BASE-LX/LH

1000BASE-FX

#167. How many VTP management domains can a Catalyst switch participate in?

Unlimited

4096

2

1

#168. What do you use in dynamic NAT configuration in order to identify the traffic you intend to translate?

A NAT list

An interface reference

An access list

A pool

#169. Which of the following are true on a typical Cisco access layer switch? (Choose two.)

Select all that apply:

Ports default to no switchport mode.

It can be used for NAT or PAT.

It can have IP routing enabled.

A default gateway allows the switch to access remote networks.

It can have an IP address configured for management.

#170. Which of the following features prevents a route learned on one interface from being advertised back out of that interface?

Poison Reverse

Convergence

Summarization

Split Horizon

The Split Horizon feature prevents a route learned on one interface from being
advertised back out of that same interface.

#171. How do you configure a Cisco router to use its internal clock as the reference time source and then become an NTP server?

Use the ntp clock command.

Use the ntp server command.

Use the ntp source command.

Use the ntp master command.

#172. What transport layer protocol features the use of sequencing and synchronization methods?

ICMP

UDP

ARP

TCP

#173. Interface Fa 0/0 on your router has obtained an IP address through DHCP. You notice that in addition to an IP address assigned to interface Fa 0/0, your router now has a default static route configured. What is the administrative distance (AD) of that route?

1

254

255

0

#174. A laptop inside your network has an IP address of 10.1.1.241. Using NAT, a router translates the 10.1.1.241 private IP address into 198.51.100.54, a public IP address, as the laptop is connecting to a web server on the Internet. The web server has an IP address of 203.0.113.10. What type of address is 10.1.1.241 in this scenario?

Inside local

Outside global

Inside global

Outside local

An outside global address represents a device outside of a network with a globally
routable address. In this scenario, the web server’s IP address of 203.0.113.10 would be
an outside global address.

An inside local address represents a device inside of a network with an address that
is not routable on the public Internet. In this scenario, the laptop’s IP address of
10.1.1.241 would be an inside local address.

An inside global address represents a device on the inside of our network with an
address that is a globally routable address. In this scenario, the laptop’s translated
address of 198.51.100.54 would be an inside global address.

An outside local address represents a device on the outside of a network that has an
address that is not routable on the public Internet. For example, if NAT were being performed at a remote site, the destination device at the remote site would have an outside
local address. In the scenario presented in this question, there is no outside local address.

#175. Which of the following commands would you implement on R1 in order to statically configure a default route via the S0/0/0 interface?

None of the above because a default route in IPv6 must have a next hop address and not an exit interface

R1(config)#ipv6 route ::/0 Serial 0/0/0

R1(config)#ip route ::/128 Serial 0/0/0

R1(config)#ipv6 route ::/128 Serial 0/0/0

R1(config-if)#ipv6 route ::/0 Serial 0/0/0

#176. Where does a collision domain exist in a switched network?

On a single VLAN

On a single switch port

Across all VLANs

Across all switch ports

#177. Class C network 200.1.1.0/24 was allocated to an ISP that operated primarily in Asia. That ISP then assigned this entire Class C network to one of its Asian customers. Network 200.1.2.0/24 has yet to be assigned to any ISP. Which of the following is most likely to be true?

200.1.2.0/24 will be assigned in the same geography (Asia) as 200.1.1.0/24.

Routers inside North American ISPs increase their routing table size by 1 as a result of the customer with 200.1.1.0/24 connecting to the Internet.

200.1.2.0/24 could be assigned to any registrar or ISP in the world.

200.1.2.0/24 cannot be assigned as public address space.

#178. ACL 1 has three statements, in the following order, with address and wildcard mask values as follows: 1.0.0.0 0.255.255.255, 1.1.0.0 0.0.255.255, and 1.1.1.0 0.0.0.255. If a router tried to match a packet sourced from IP address 1.1.1.1 using this ACL, which ACL statement does a router consider the packet to have matched?

3rd

2nd

1st

Implied deny at the end of the ACL

#179. In the core layer of a hierarchical network, which of the following are aggregated?

Packet filters

Routing tables

Access layer switches

Distribution switches

#180. A laptop inside your network has an IP address of 10.1.1.241. Using NAT, a router translates the 10.1.1.241 private IP address into 198.51.100.54, a public IP address, as the laptop is connecting to a web server on the Internet. The web server has an IP address of 203.0.113.10. What type of address is 203.0.113.10 in this scenario?

Inside global

Inside local

Outside local

Outside global

An outside global address represents a device outside of a network with a globally
routable address. In this scenario, the web server’s IP address of 203.0.113.10 would be
an outside global address.

An inside local address represents a device inside of a network with an address that
is not routable on the public Internet. In this scenario, the laptop’s IP address of
10.1.1.241 would be an inside local address.

An inside global address represents a device on the inside of our network with an
address that is a globally routable address. In this scenario, the laptop’s translated
address of 198.51.100.54 would be an inside global address.

An outside local address represents a device on the outside of a network that has an
address that is not routable on the public Internet. For example, if NAT were being
performed at a remote site, the destination device at the remote site would have an outside
local address. In the scenario presented in this question, there is no outside local address.

#181. What prefix is reserved for IPv6 link-local addresses?

fec0::/8

fec0::/10

fe80::/8

fe80::/10

#182. Which one of the following terms means anything that can be considered to be a weakness that can compromise security?

Attack

Threat

Vulnerability

Exploit

#183. What command allows you to confirm the IP address and mask assigned to an interface?

show interfaces terse

show addresses

show ip interface brief

show ip interface

#184. Examine the figure. What is the Layer 2 destination address?

enter answer here

00:1b:77:12:34:56

#185. On which interface and in which direction should this access list be applied in order to permit traffic from the 192.168.12.0/24 subnet to reach the 2.2.2.0/24 subnet?

On the Fa0/0 interface of R2 in an outbound direction

On the Fa0/1 interface of R2 in an inbound direction

On the Fa0/1 interface of R2 in an outbound direction

On the Fa0/0 interface of R2 in an inbound direction

None of the above, as the access list should be placed on R1, as close as possible to the source of the traffic

#186. Identify the distance-vector routing protocols from the following. (Choose the two best answers.)

Select all that apply:

BGP

EIGRP

OSPF

RIP

IS-IS

#187. You have configured your gi0/1 Cisco switch port as follows:

This configuration prevents the logging of port security violations.

The default violation mode is Restrict.

The mode must be Trunk for port security to be used.

The violation mode in use here is Protect.

The default number of dynamic MAC addresses is one

#188. CSMA/CD technology is critical for what type of Ethernet network?

Star

Half-duplex

Full mesh

Partial mesh

#189. Which of the following statements concerning this output is true?

Gi0/3 is connected to an unmanaged switch, which in turn is connected to at least two additional hosts

The host connected to Gi0/3 was unplugged and over five minutes later, a new host was plugged in to that same port

Gi0/3 is connected to a switch, which has at least two ports with MAC addresses fa16.3ed2.c7c2 and fa16.3ed2.c745 assigned to those ports

Gi0/3 is a trunk port connected to a switch with two VLANs allowed, to which there are two hosts connected, each on a different VLAN

The host on Gi0/3 has two MAC addresses configured

#190. Which of these is one of the parameters used to elect a root bridge?

Root Path Cost

Bridge Priority

BPDU revision number

Path Cost

#191. Which of the following devices performs transparent bridging?

HUB

Router

L3 Switch

L2 Switch

#192. For a Catalyst switch to offer Power over Ethernet to a device, what must occur?

Nothing; power always is enabled on a port.

The switch must detect that the device needs inline power.

The device must send an LLDP message asking for power

The switch is configured to turn on power to the port.

The device must send a CDP message asking for power.

#193. You have configured DHCP snooping on a switch, and have configured the appropriate ports as trusted. However, you are concerned that an attacker may begin bombarding the network with various types of DHCP messages. Which of the following statements is correct about the functionality of DHCP snooping and which would correctly safeguard a network from DHCP related attacks? (Choose two)

Select all that apply:

An untrusted port will restrict only DHCP OFFER messages, so it is best practice to rate limit all DHCP messages on untrusted ports

Rate limiting of DHCP messages can only be applied to an untrusted port

A trusted port should have a DHCP message rate limit much higher than that configured for untrusted ports

An untrusted port should have a DHCP message rate limit much higher than that configured for trusted ports

#194. Which is not a major menu option in Cisco DNA Center?

Policy

Provision

Compliance

Design

#195. Which command configures a switch port to form a trunk without using negotiation?

switchport mode trunk nonegotiate

switchport mode dynamic auto

switchport mode dynamic desirable

switchport mode trunk

#196. What is the Cisco proprietary method for trunk encapsulation?

DSL

EIGRP

CDP

ISL

#197. What is the purpose of VTP pruning?

Limit the number of VLANs in a domain

Limit the extent of broadcast traffic

Stop unnecessary VTP advertisements

Limit the size of the virtual tree

#198. What vty line command causes the local username database to be checked for remote access?

login local

local

aaa login local

login

#199. What mechanisms can be used to defend against IP spoofing? (Choose two.)

Select all that apply:

UrPF

CAR

ACL

AAA

#200. Which one of the following VTP modes does not allow any manual VLAN configuration changes?

Client

Server

Transparent

Designated

#201. Interface Fa 0/0 on your router has obtained an IP address through DHCP. You notice that in addition to an IP address assigned to interface Fa 0/0, your router now has a default static route configured. What command can you issue to prevent a router from automatically installing a default static route based on default gateway information learned through DHCP?

no ip dhcp server response router

ip dhcp suppress gateway

no ip dhcp client request router

ip dhcp route local

#202. What type of modern computer threat involves the use of zombies or botnets?

Trojan horse

DDoS attack

Man-in-the-middle attack

Reconnaissance

#203. What is the default voice VLAN condition for a switch port?

switchport voice vlan untagged

switchport voice vlan none

switchport voice vlan 1

switchport voice vlan dot1p

#204. Which of the following answers list a valid number that can be used with standard numbered IP ACLs? (Choose two answers.)

Select all that apply:

2187

1987

87

187

#205. You are looking at the configuration of several switches in the network. You come across the MAC addresses and the priority configurations of all the switches as listed below. Which of these MAC address and priority combinations will cause a switch to be selected as the root bridge of this network for VLAN 5?

MAC: 5C:78:AA:FA:2D:59, Priority 8192

MAC: 5C:78:AA:FA:2D:65, Priority 16384

MAC: 5C:78:AA:FA:2D:54, Priority 8192

#206. What is a VLAN primarily used for?

To segment a collision domain

To segment a broadcast domain

To segment a spanning-tree domain

To segment an autonomous system

#207. What interface configuration mode command instructs an interface to dynamically obtain its IP address from a DHCP server?

ip address dynamic

ip address 255.255.255.255

ip address bootp

ip address dhcp

#208. Router R1, in ASN 11, learns a BGP route from BGP peer R22 in ASN 22. R1 and then uses BGP to advertise the route to R2, also in ASN 11. What ASNs would you see in the BGP table on R2 for this route?

22

1

11

None

#209. What traditional 802.1D STP port state does not exist in 802.1w RSTP?

Learning

Forwarding

Discarding

Listening

#210. What is the default lease duration for a Cisco DHCP server?

1 Hour

1 Month

1 Day

1 Week

#211. What command can be used to globally enable CEF on a router?

ip flow egress

ip cef

no ip route-cache

ip route-cache cef

#212. Which of the following might present a VTP problem?

A new server with a higher configuration revision number

A server in two domains

Two or more VTP servers in a domain

Two servers with the same configuration revision number

#213. What feature does DAI rely on?

OSPF

ACLs

DHCP snooping

QoS DiffServ

NBAR

#214. Your junior administrator is examining the routing table on a Cisco router and asks you what is the meaning of the D she sees in routing table entries. What does this indicate?

EIGRP

OSPF

RIP

BGP

#215. If a switch port is in the errdisable state, what is the first thing you should do?

Use the shut and no shut interface-configuration commands.

Reload the switch.

Determine the cause of the problem.

Use the clear errdisable port command.

#216. Access list contents can be merged into which of the following?

TCAM table

ARP Table

FIB table

CAM table

#217. Which of the following functions is performed by both TCP and UDP?

Windowing

Multiplexing using port numbers

Routing

Error recovery

#218. When a PC is connected to a Layer 2 switch port, how far does the collision domain spread?

All ports on the switch.

No collision domain exists.

One VLAN.

One switch port.

#219. Which VLANs are allowed on a trunk link by default?

Only negotiated VLANs

Only the native VLAN

None

All active VLANs

#220. In a properly designed hierarchical network, a broadcast from one PC is confined to which one of the following?

The entire campus network

One access layer switch

One switch block

One access layer switch port

#221. What is the default administrative distance of iBGP?

20

90

120

200

#222. Switches provide VLAN connectivity at which layer of the OSI model?

Layer 3

Layer 1

Layer 2

Layer 4

#223. A hierarchical network’s distribution layer aggregates which of the following?

Core switches

Routing updates

Access layer switches

Broadcast domains

#224. What evidence can be seen when a switch block is too large? (Choose all that apply.)

Select all that apply:

You run out of access layer switch ports.

Traffic is throttled at the distribution layer switches.

IP address space is exhausted.

Broadcast traffic becomes excessive.

Network congestion occurs.

#225. Which of the following is a standardized method of trunk encapsulation?

802.3z

802.1Q

802.1a

802.1d

#226. When migrating from a PVST+ to Rapid-PVST+, which PVST+ features can be disabled, because similar features are built into Rapid-PVST+? (Choose the two best answers.)

Select all that apply:

UplinkFast

Loop Guard

PortFast

BackboneFast

#227. What protocol is used with an Integrated Services approach to QoS?

RSVP

VTP

SPAN

ICMP

#228. Multilayer switches using CEF are based on which of these techniques?

Demand-based switching

NetFlow switching

Topology-based switching

Route caching

#229. How is a playbook expressed in Ansible?

JSON

YAML

XML

HTML5

#230. When you enable port security for a switch port, what is the default violation mode?

Protect

Shutdown

Passive

Restrict

#231. What type of Network Address Translation (NAT) allows a collection of inside local addresses to share a single inside global address, for use when communicating on the Internet?

MPAT

SNAT

DNAT

PAT

#232. Which one of the following is a valid VTP advertisement?

Triggered update

VLAN database

Subset

Domain

#233. Examine the access list shown here. What is the issue with this access list?

Standard access lists do not support logging.

The access list permits the traffic before it denies any traffic.

The access list cannot end with a deny statement.

The access list is not named, and naming is required.

#234. Which one of the following statements is true about a Catalyst switch?

CDP is disabled and LLDP is enabled by default.

Neither CDP nor LLDP are enabled by default.

Both CDP and LLDP are enabled by default.

CDP is enabled and LLDP is disabled by default .

#235. Which RSTP port role functions to provide a fast converging replacement for the current root port?

Backup

Disabled

Alternate

Designated