Boson Notes Flashcards

1
Q

Differences between “switchport port-security restrict/protect/shutdown”

A

restrict: Interface will remain up if more than the max # of addresses are learned, but traffic from the violating devices is dropped and log entry is generated
protect: same as restrict but no log is generated
shutdown: shuts down the port if more than max allowed MAC addresses are learned on the interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

DIfference between alternate and backup port

A

Alternate: Will become root if root fails

Backup port: When connected to a hub

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What’s the default priority for STP?

A

32786 [0-65535]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

RSTP port types

A

P2P: switch to switch
Shared: connected to a hub (half-duplex)
Edge: connected to hosts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

spanning-tree root primary, what is default priority in this case?

A

Default priority 24576, unless there is a switch with lower priority, then deduct increment of 4096

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Four modes of VTP

A

Client, server, transparent, off

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Requirements for VTP

A

Domain Name must match, they must have a trunk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

ACL Standard and Extended numbers

A

Standard:
1-99
1300-1999

Extended:
100-199
2000-2699

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

IPV4 AND IPV6. Relate them to numbered and named ACLs

A

IPv6 only named ACLs

IPv4 only numbered and named ACLs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is DTP?

A

DTP: dynamic desirable and dynamic auto to actively make trunks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Steps for finding routing order

A
  1. ) Router looks at prefix length (most specific)
  2. ) Lowest AD
  3. ) Metric
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What algorithm does OSPF have?

A

Djakstra

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How does OSPF and EIGRP differ in terms of knowing topology?

A

EIGRP relies on neighbors, OSPF has complete network vision

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Reference bandwidth for EIGRP and OSPF

A

10 Mbps for EIGRP and 100Mbps for OSPF

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

PPP and HDLC differences

A

HDLC is Cisco proprietary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the difference between LCP and NCP? (For PPP)

A

LCP: Takes care of setting up a link

NCP: Makes sure we can send IP and other protocols across our PPP links

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What algorithms are used for encryptions?

A

AES, DES, DES56

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What divides an AS into areas?

A

OSPF

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is path isolation and what technologies can be used to accomplish it?

A

Ensures authenticated users can access the virtual network resources appropriate to their credentials or locations.

GRE tunnel and MPLS VPNs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is access control and what standard is used for it?

A

Prevents unauthorized users from accessing the virtual network at all

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does
RouterA(config-router)#
-and-
RouterA(config-rtr)#

represent?

A

OSPFv2

-and-

OSPFv3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How long does a DHCP server lease IP addresses to Host by default?

A

1 day

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Before a user is authenticated, what type of traffic is allowed through the switch port?

A

EAPOL (Extensible Authentication Protocol over LANs), STP, and CDP (Cisco Discovery Protocol)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What command globally enables 802.1x on a switch?

A

dot1x system-auth-control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What does each of the command ‘dot1x port-control [force-authorized/force-unauthorized/auto]’

A

auto: enables authentication on the port, connection is between switch and host; however, if a host is configured with 802.1x authentication, the host will be authenticated

force-authorized: configures the port to authorize any host that connects to the port, no 802.1x authentication process will take place

force-unauthorized: configures a port to never allow authentication for a connected host

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

How do you configure the OSPF Hello and Dead timers/

A

ip ospf hello-interval

ip ospf dead-interval

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What does …!! mean?

A

An ARP Resolution error

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What does U.U.U mean?

A

ICMP Destination Unreachable error

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is FIB table?

A

Contain all prefixes from the IP routing table & structured in a way that is optimized for forwarding

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is an adjacency table?

A

Maintains Layer 2 addressing info for the FIB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is an ARP table?

A

Contains Layer 3 to Layer 2 address translations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is a CAM table?

A

Used to find the relationship between Layer 2 address and physical port to reach a device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What are serial interfaces most often used for?

A

To connect routes over point-to-point leased lines. Connects a service provider to another serial device at a remote location

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What does “!A” mean in traceroute command?

A

It means there is an ACL applied

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Where should “ip nat outside” and “ip nat inside” be issued?

A

“ip nat outside” should be issued on interface that is on the public side of the network

“ip nat inside” should be on the private side of the network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What does LWAPP protocol do?

A

Provides info exchange and other things between AP and a WLC (Wireless LAN controller)

37
Q

“switchport port-security violation [protect/restrict/shutdown]”

Generates SNMP Trap:
Generates Syslog message:
Increments violation counter:
Places port in error-disabled state:

A
Protect
Generates SNMP Trap: No
Generates Syslog message: No
Increments violation counter: No
Places port in error-disabled state: No
Restrict
Generates SNMP Trap: Yes
Generates Syslog message: Yes
Increments violation counter: Yes
Places port in error-disabled state: No
Shutdown
Generates SNMP Trap: No
Generates Syslog message: Yes
Increments violation counter: Yes
Places port in error-disabled state: Yes
38
Q

What does “switchport nonegotiate” do?

A

To disable DTP

39
Q

What does “switchport mode access” do?

A

Puts port into permanent access mode

40
Q

What does “switchport mode dynamic auto” do?

A

Configures port to become trunk, only of other end of link is configured as a trunk or set to dynamic desirable mode

41
Q

What does “switchport mode dynamic desirable” do?

A

Configures a port to actively negotiate to become a trunk port

42
Q

When does a router send an ICMP destination unreachable error?

A
  • If a gateway of last resort has not been configured on a router
  • The remote network is not listed in the routing table on the router
43
Q

Causes of collision domain slowness

A
  • Malfunctioning NIC on an end-user workstation
  • Duplex mismatches
  • Interface errors
44
Q

Causes of broadcast domain connectivity slowness (slow intra-VLAN)

A
  • CPU is being overutilized
  • Misconfigured default gateway
  • Sluggish application on remote VLAN
45
Q

What devices are on the physical level?

A

Hubs and repeaters

46
Q

What does split horizon do?

A

Prevents routers from advertising a route through the same interface from which the route was learned

47
Q

Where should BPDU guards be enabled on?

A

On PortFast enable ports to prevent STP topology problems

48
Q

What does virtual network services do?

A

To provide centralized access without compromising the security of the individual groups (Policing is a component of architecture)

49
Q

What does a mismatch of MUT values do to two routers?

A

Causes a problem

50
Q

How do you find info about DR and BDR?

A

show ip ospf neighbor

51
Q

What is needed for VTP to synchronize VLAN config info between switches

A
  • Switches must be connected by an ISL or 802.1q trunk link
  • Case-sensitive VTP domain must match
  • VTP version must match
52
Q

How many subinterfaces for VTP

A

Connect a subinterface to each VLAN

53
Q

IPv6 neighbor statuses

A
Incomplete
Reachable
Stale
Delay
Probe
54
Q

What must be specified for the tunnel source? (GRE tunnel)

A

Must be specified as an IP address or an interface #

55
Q

Where is the tunnel interface significant? (GRE tunnel)

A

It is locally significant

56
Q

What must exist on a local router for GRE tunnel?

A

Route to the tunnel destination must exist on local router

57
Q

What are the four steps to create a GRE tunnel?

A
  1. ) Create tunnel interface
  2. ) Assign IP address to tunnel interface
  3. ) Specify a tunnel source interface or IP address
  4. ) Specify a tunnel destination IP address
58
Q

Does RIP carry subnet mask info?

A

No it doesn’t

59
Q

Difference between collision and late collision

A

Collision: interruption before 64th byte

Late collision: interruption after 64th byte

60
Q

What is a Runt, Baby Giant, Jumbo?

A

Runt: frame that is less than 64 bytes and has bad FCS
Baby Giant: frame that is up to 1600 bytes
Jumbo: frame that is up to 9216 bytes in length

61
Q

What will router do if it detects an IP address conflict, in relation to DHCP pool

A

Router will remove the IP address from the DHCP pool

62
Q

What switch will be elected as stack master?

A

Switch with highest priority value

63
Q

How do you enable 802.1x authentication globally and on a single interface?

A

“dot1x system-auth-control”: for globally

“authentication port-control”: on a single interface

64
Q

What is the default data link protocol for Cisco routers?

A

HDLC

65
Q

When does a master switch election occur?

A
  • A stack is reset
  • Anything happens to Stack Master
  • New switch is added to the stack
66
Q

What are routers running BGP identified as?

A

BGP speakers

67
Q

How do you find stratum of reference clock if you are NTP master?
Stratum of NTP client running on router?

A

Reference clock if NTP master: show ntp associations

Stratum of NTP client: show ntp status

68
Q

What is MPLS (Multiprotocol Label Switching)?

A

Used to speed packet delivery over multiple protocols

69
Q

What is the default configuration register value?

A

0x2102

70
Q

How do you prepare a single port to accept traffic from multiple hosts?

A

First issue “authentication port-control auto”

Then, “authentication host-mode multi-host”

71
Q

exec-timeout 3
login delay 5

What does 3 and 5 mean in this case?

A
  • It will configure the login inactivity timer on a router to three minutes
  • Minimum amount of time required between login attempts. 5 seconds in this case
72
Q

What counts as a topology change for STP and RSTP?

What does STP detect as a topology change that RSTP doesn’t?

A
  • A non-edge port moves to forwarding state
  • A new root bridge is manually configured in topology
  • When a switch in topology is powered off

However, only STP detects a port moving to blocking state as a topology change

73
Q

What is a GARP? (Gratuitous ARP)

A

Commonly used to test for IP address conflicts or to prepopulate the ARP tables of adjacent network hosts

74
Q

What is a RARP? (Reverse Address Resolution Protocol)

A

Used to translate hardware interface addresses to protocol addresses

75
Q

How are active routers and standby routers determined?

A

Highest standby priority would be active router. If tied, higher IP address is used. 2nd highest is standby router

76
Q

What are loop guards and with what should it not be used in conjunction?

A

Place inconsistent ports in blocking state. Should not be used in conjunction with PortFast or root guard

77
Q

What are the first 24 bits of a 48-bit multicast MAC address?

A

0100.5E

78
Q

What is the delay value of FastEthernet interfaces?

A

10

79
Q

What do Native VLANs allow in relation to remote switches and 802.1q trunk links?

A

It allows traffic to be sent to remote switches over an 802.1q trunk link untagged

80
Q

How do you configure a logical interface?

A

interface dialer 1
ip address negotiated
encapsulation ppp
pppoe-client dial-pool-number 1

81
Q

Will HDLC work with different routers from various vendors?

A

No

82
Q

Explain a hub-and-spoke technology

A

Every devices or site is directly connected by a single interface to a central device or site

83
Q

Where does Cisco recommend traffic to be classified and marked?

A

As close to the network edge as possible

84
Q

After a host receives a DHPACK packet, how long will a host wait before it attempts to renew?

A

12 hours

85
Q

By how much does Spanning Tree Root Bridge priorities go up by? What’s the third-lowest priority?

A

They go up by 4096.

Third lowest priority would be 8192

86
Q

What is HMAC?

A

Mechanism that uses a hash function to verify the integrity of data transmitted over a VPN

87
Q

What is Diffie-Hellman (DH)?

A

Secure method of exchanging public encryption keys over public network

88
Q

Are link-local unicast addresses routable?

A

No