CCNA Flashcards

Question

AAA stands for authentication, authorization, and accounting ## Footnote A. False B. True

Answer 1

A. Enable the allow AAA Override

Answer 2

A. deploy load balancers E. configure additional security policies

Answer 3

D. Enable the Protected Management Frame service and set the Comeback timer to 10

Answer 4

D. user awareness Explanation/Reference: This is a training program which simulates an attack, not a real attack (as it says “The webpage that opens reports that it was safe”) so we believed it should be called a “user awareness” program. Therefore the best answer here should be “user awareness”. This is the definition of “User awareness” from CCNA 200- 301 Offical Cert Guide Book: “User awareness: All users should be made aware of the need for data confidentiality to protect corporate information, as well as their own credentials and personal information. They should also be made aware of potential threats, schemes to mislead, and proper procedures to report security incidents. ” Note: Physical access control means infrastructure locations, such as network closets and data centers, should remain securely locked.

Answer 5

D. 172.23.104.4

Answer 6

A. Enable LLDP globally Explanation: LDDP-MED is used only between network devices (such as switches) and endpoint devices (such as phones). For network-to-network connections, LLDP is used.

Answer 7

B. Administratively shut down the ports. C. Configure the port type as access and place in VLAN 99.

Answer 8

A) interface fastethernet0/1 switchport priority extend cos 7

Answer 9

C. enable configure terminal ip nat pool mypool 192.168.3.1 192.168.3.3 prefix-length 30 access-list 1 permit 10.10.0.0 0.0.0.255 ip nat inside source list 1 pool mypool interface g1/1 ip nat inside interface g1/2 ip nat outside

Answer 10

C. AES Explanation/Reference: Many routers provide WPA2-PSK (TKIP), WPA2-PSK (AES), and WPA2-PSK (TKIP/AES) as options. TKIP is actually an older encryption protocol introduced with WPA to replace the very-insecure WEP encryption at the time. TKIP is actually quite similar to WEP encryption. TKIP is no longer considered secure, and is now deprecated. In other words, you shouldn’t be using it. AES is a more secure encryption protocol introduced with WPA2 and it is currently the strongest encryption type for WPA2-PSK/

Answer 11

D. interface e0/0 description to HQ-A370:98968 ip address 209.165.201.2 255.255.255.252 Explanation/Reference: A /30 subnet means subnet mask of 255.255.255.252. But 10.2.1.3 255.255.255.252 is a broadcast IP address; only 209.165.201.2/30 is the usable IP address.

Answer 12

A. configure the hello and dead timers to match on both sides E. configure both interfaces with the same area ID

Answer 13

B. configure IEEE 802.1q

Answer 14

A. ipv6 address 2001:db8::700:3:400F:572B

Answer 15

B. switchport trunk native vlan 10

Answer 16

C. configure switchport mode dynamic auto

Answer 17

A. Add the switch in the VTP domain with a lower revision number

Answer 18

B. switch(config)#lldp port-description

Answer 19

D. Client Band Select

Answer 20

B. switchport mode dynamic desirable

Answer 21

C. logging trap 4

Answer 22

A. hypervisor

Answer 23

Permitted: – source IP:207.16.32.14, destination application: http – source IP:207.16.15.9, destination port: 23 – source IP:207.16.16.14, destination port: 53 Denied: – source IP:207.16.14.7, destination port: 80 – source IP:207.16.13.14, destination application: http

Answer 24

B. ip address 192.168.0.0 255.255.254.0 explanation 8 floors and 40 user per floor means 320 users (approx.). How many bits do you need to have 320 IP addresses? 8 bits = (2^8 – 2) =254 IP addresses, and it’s not enough. 9 bits = (2^9 – 2) = 510 IP addresses, and this is enough. You have a class C subnet (192.168.0.0). This means a subnet mask like this: 255.255.255.0 But you need 9 bits for the hosts, so you’ve got left with a subnet mask like this: 255.255.1111111x.xxxxxxxx =255.255.254.0 This means you will use VLSM subnetting. Answer B is correct.

Answer 25

D. infrastructure-as-a-service Explanation/Reference: Below are the 3 cloud supporting services cloud providers provide to customer: + SaaS (Software as a Service): SaaS uses the web to deliver applications that are managed by a thirdparty vendor and whose interface is accessed on the clients’ side. Most SaaS applications can be run directly from a web browser without any downloads or installations required, although some require plugins. + PaaS (Platform as a Service): are used for applications, and other development, while providing cloud components to software. What developers gain with PaaS is a framework they can build upon to develop or customize applications. PaaS makes the development, testing, and deployment of applications quick, simple, and cost-effective. With this technology, enterprise operations, or a thirdparty provider, can manage OSes, virtualization, servers, storage, networking, and the PaaS software itself. Developers, however, manage the applications. + IaaS (Infrastructure as a Service): self-service models for accessing, monitoring, and managing remote datacenter infrastructures, such as compute (virtualized or bare metal), storage, networking, and networking services (e.g. firewalls). Instead of having to purchase hardware outright, users can purchase IaaS based on consumption, similar to electricity or other utility billing. In general, IaaS provides hardware so that an organization can install their own operating system.

Answer 26

A. The application requires the user to enter a PIN before it provides the second factor

Answer 27

B. cloud services

Answer 28

C. forwarding D. learning

Answer 29

A. it uses the bandwidth and delay values of the path to calculate the route metric

Answer 30

Authentication: – verifies the password associated with a user – identifies the user Authorization: – controls the actions that a user can perform – restricts the services that are available to a user Accounting: – provides analytical Information for the network administrator – records user activities

Answer 31

802.1q double-tagging VLAN-hopping attack: configure the native VLAN with a nondefault VLAN ID MAC flooding attack: configure 802.1x authenticate man-in-the-middle spoofing attack: configure DHCP snooping switch-spoofing VLAN-hopping attack: disable DTP

Answer 32

Controller-Based Networking - Focused on Network - User input is a policy - Uses white list security model Traditional Networking - Focused on devices - User input is a configuration - Uses black list security model

Answer 33

Layer 2 Security Mechanisms: – WPA+WPA2 – 802.1X Layer 3 Security Mechanisms (for WLAN): – web policy – Passthrough Explanation/Reference: Layer 2 Security Mechanism includes WPA+WPA2, 802.1X, Static WEP, CKIP while Layer 3 Security Mechanisms (for WLAN) includes IPSec, VPN Pass-Through, Web Passthrough

Answer 34

FTP: – provides reliability when loading an IOS image upon boot up – uses ports 20 and 21 – uses TCP TFTP: – does not require user authentication – uses port 69 – uses UDP

Answer 35

Cache –\> Local database of address mappings that improves name resolution performance. DNS –\> service that maps hostnames to IP addresses. no ip domain-lookup –\> disables DNS services on a Cisco device. name resolver –\> in response to client requests, queries a name server for IP address information. domain –\> components of a URL that indicates the location or organization type

Answer 36

DHCP Server: – assigns a default gateway to a client – holds the TCP/IP settings to be distributed to the clients – assigns IP addresses to enabled clients DNS Server: – resolves web URLs to IP addresses – stores a list of IP addresses mapped to names

Answer 37

172. 28.228.144/21 –\> 172.28.224.1 – 172.28.231.254 172. 28.228.144/29 –\> 172.28.228.145 – 172.28.228.150 172. 28.228.144/23 –\> 172.28.228.1 – 172.28.229.254 172. 28.228.144/25 –\> 172.28.228.129 – 172.28.228.254 172. 28.228.144/18 –\> 172.28.192.1 – 172.28.255.254 Explanation/Reference: This subnet question requires us to grasp how to subnet very well. To quickly find out the subnet range, we have to find out the increment and the network address of each subnet. Let’s take an example with the subnet 172.28.228.144/18: From the /18 (= 1100 0000 in the 3rd octet), we find out the increment is 64. Therefore the network address of this subnet must be the greatest multiple of the increment but not greater than the value in the 3rd octet (228). We can find out the 3rd octet of the network address is 192 (because 192 = 64 \* 3 and 192 \< 228) -\> The network address is 172.28.192.0. So the first usable host should be 172.28.192.1 and it matches with the 5th answer on the right. In this case we don’t need to calculate the broadcast address because we found the correct answer. Let’s take another example with subnet 172.28.228.144/23 -\> The increment is 2 (as /23 = 1111 1110 in 3rd octet) -\> The 3rd octet of the network address is 228 (because 228 is the multiply of 2 and equal to the 3rd octet) -\> The network address is 172.28.228.0 -\> The first usable host is 172.28.228.1. It is not necessary but if we want to find out the broadcast address of this subnet, we can find out the next network address, which is 172.28.(228 + the increment number).0 or 172.28.230.0 then reduce 1 bit -\> 172.28.229.255 is the broadcast address of our subnet. Therefore the last usable host is 172.28.229.254.

Answer 38

Explanation/Reference: “A link-local address is a unicast address that is confined to a single link, a single subnet.” “There can be only one link-local address per interface.” “ULA addresses are for devices that never need access to the Internet and never need to be accessible from the Internet.”

Answer 39

Connection Oriented: – FTP – SMTP – SSH Connectionless: – SNMP – VoIP – TFTP Explanation/Reference: SSH uses TCP port 22 while SNMP uses UDP port 161 and 162

Answer 40

CBWGQ : provides guaranteed bandwidth to a specified class of traffic CQ : services a specified number of bytes in one queue before continuing to the next queue FIFO : uses store-and-forward queuing PQ : places packets into one of four priority-based queues WFQ : provides minimum guaranteed bandwidth to one or more flows

Answer 41

Explanation: MIB: collection of variables that can be monitored SNMP agent: responds to status requests and requests for information about a device SNMP manager: The SNMP manager is part of an NMS SNMP trap: unsolicited messages that are sent by the SNMP agent and alert the NMS to a condition on the network

Answer 42

Configure VACL. –\> 802.1q double tagging Configure dynamic ARP inspection. –\> ARP spoofing Configure root guard. –\> unwanted superior BPDUs Configure BPDU guard. –\> unwanted BPDUs on PortFast-enabled interfaces

Answer 43

wireless LAN controller –\> device that manages access points access point –\> device that provides Wi-Fi devices with a connection to a wired network service port –\> used for out of band management of a WLC virtual interface –\> used to support mobility management of the WLC dynamic interface –\> applied to the WLAN for wireless client communication Explanation/Reference: The service port can be used management purposes, primarily for out-of-band management. However, AP management traffic is not possible across the service port. In most cases, the service port is used as a “last resort” means of accessing the controller GUI for management purposes. For example, in the case where the system distribution ports on the controller are down or their communication to the wired network is otherwise degraded. A dynamic interface with the Dynamic AP Management option enabled is used as the tunnel source for packets from the controller to the access point and as the destination for CAPWAP packets from the access point to the controller. The virtual interface is used to support mobility management, Dynamic Host Configuration Protocol (DHCP) relay, and embedded Layer 3 security such as guest web authentication. It also maintains the DNS gateway host name used by Layer 3 security and mobility managers to verify the source of certificates when Layer 3 web authorization is enabled.

Answer 44

Ansible: – uses SSH for remote device communication – uses YAML for fundamental configuration elements Chef: – uses TCP port 10002 for configuration push jobs – uses Ruby for fundamental configuration elements Puppet: – fundamental configuration elements are stored in a manifest – uses TCP 8140 for communication Explanation/Reference: The focus of Ansible is to be streamlined and fast, and to require no node agent installation. Thus, Ansible performs all functions over SSH. Ansible is built on Python, in contrast to the Ruby foundation of Puppet and Chef. TCP port 10002 is the command port. It may be configured in the Chef Push Jobs configuration file . This port allows Chef Push Jobs clients to communicate with the Chef Push Jobs server. Puppet is an open-source configuration management solution, which is built with Ruby and offers custom Domain Specific Language (DSL) and Embedded Ruby (ERB) templates to create custom Puppet language files, offering a declarative-paradigm programming approach. A Puppet piece of code is called a manifest, and is a file with .pp extension.

Answer 45

Cisco DNA Center Device Management 3. Monitor the cloud for software update 5. Uses CLI templates to apply a consistent configuration to multiple devices at an individual location 6. Uses NetFlow to analyse potential security threats throughout the network and take appropriate action on that traffic Traditional device management 1. Implements changes via an SSH terminal 2. Manages device configuration on a per-device basis 4. Security is managed near the perimeter of the network with firewalls, VPNs, and IPS

Answer 46

TCP 1. Sends tranmissions in sequence 3. Transmits packets as a stream 6. Uses a lower transmission rate to ensure relability UDP 2. Transmissions include an 8-byte header 4. Transmits packets individually 5. Uses a higher transmission rate to support latency-sensitive application

Answer 47

A. to uniquely identify devices at Layer 2 E. to allow communication between different devices on the same network

Answer 48

C. Each leaf switch is connected to each spine switch.

Answer 49

B. manually implement trunk ports and disable DTP

Answer 50

D. all of the above

Answer 51

B. Authentication identifies users and accounting tracks user services

Answer 52

D. a software switch on a hypervisor that is physically connected to the network

Answer 53

D. TCP uses the three-way handshake and UDP does not guarantee message delivery.

Answer 54

A. TCP uses checksum, acknowledgement, and retransmissions, and UDP uses checksums only.

Answer 55

C. TCP provides flow control to avoid overwhelming a receiver by sending too many packets at once, UDP sends packets to the receiver in a continuous stream without checking for sequencing

Answer 56

A. Cisco DNA Center device management can deploy a network more quickly than traditional campus device management

Answer 57

A. It alternates automatically between 2.4 GHz and 5 GHz on adjacent access points

Answer 58

C. It floods the frame to all interfaces except Fa0/1.

Answer 59

D. The access point has the ability to link to any switch in the network, assuming connectivity to the WLC

Answer 60

A. Network devices use different services like SNMP, syslog, and streaming telemetry to send data to the controller

Answer 61

D. It uses a shared virtual MAC and a virtual IP address to a group of routers that serve as the default gateway for hosts on a LAN.

Answer 62

C. by differentiating voice and video traffic

Answer 63

D. Port blocking

Answer 64

C. It forwards only the VTP advertisements that it receives on its trunk ports. Explanation/Reference: The VTP mode of SW2 is transparent so it only forwards the VTP updates it receives to its trunk links without processing them.

Answer 65

A. The CAM table is empty until ingress traffic arrives at each port

Answer 66

A. It uses SAE for authentication.

Answer 67

A. separate from other VLANs within the administrative domain

Answer 68

C. A routing instance has flapped. Explanation/Reference: Usually no action is required when a route flaps so it generates the notification syslog level message (level 5).

Answer 69

C. 38443 Explanation/Reference: Both the line “O 172.16.0.128/25” and “S 172.16.0.0/24” cover the host 172.16.0.202 but with the “longest (prefix) match” rule the router will choose the first route.

Answer 70

C. The new frame is placed in a queue for transmission after the previous frame.

Answer 71

C. the highest IP address among its active interfaces

Answer 72

C. CDP operates normally,but it cannot provide IP address information for that neighbor Explanation/Reference: Although CDP is a Layer 2 protocol but we can check the neighbor IP address with the “show cdp neighbor detail” command. If the neighbor does not has an IP address then CDP still operates without any problem. But the IP address of that neighbor is not provided.

Answer 73

D. low-latency queuing

Answer 74

D. data plane

Answer 75

A. There is limited unique address space, and traffic on the new subnet will stay local within the organization.

Answer 76

A. fd15:0db8:0000:0000:700:3:400F:527B E. fd15:db8::700:3:400F:572B

Answer 77

C. It protects against keystroke logging on a compromised device or web site. E. It encourages users to create stronger passwords.

Answer 78

D. A leaf switch can be added with connections to every spine switch. Explanation/Reference: Spine-leaf architecture is typically deployed as two layers: spines (such as an aggregation layer), and leaves (such as an access layer). Spine-leaf topologies provide high-bandwidth, low-latency, nonblocking server-to-server connectivity. Leaf (aggregation) switches are what provide devices access to the fabric (the network of spine and leaf switches) and are typically deployed at the top of the rack. Generally, devices connect to the leaf switches. Devices can include servers, Layer 4-7 services (firewalls and load balancers), and WAN or Internet routers. Leaf switches do not connect to other leaf switches. In spine-and-leaf architecture, every leaf should connect to every spine in a full mesh. Spine (aggregation) switches are used to connect to all leaf switches and are typically deployed at the end or middle of the row. Spine switches do not connect to other spine switches.

Answer 79

access layer: provides network access to the user, represents the network edge distribution layer: implements network access policy, establishes Layer 3 routing boundaries core layer: provides high-speed backbone connectivity, functions as an aggregator for all the campus blocks Not use: implements personal firewalls on the client computers

Answer 80

A. a router with subinterfaces configured on the physical interface that is connected to the switch Explanation: Different VLANs can’t communicate with each other , they can communicate with the help of Layer3 router. Hence , it is needed to connect a router to a switch , then make the sub-interface on the router to connect to the switch, establishing Trunking links to achieve communications of devices which belong to different VLANs.

Answer 81

D. route with the lowest administrative distance

Answer 82

C. Internal EIGRP Explanation/Reference: With the same route (prefix), the router will choose the routing protocol with lowest Administrative Distance (AD) to install into the routing table. The AD of Internal EIGRP (90) is lowest so it would be chosen. The table below lists the ADs of popular routing protocols. Note: The AD of IS-IS is 115. The “EIGRP” in the table above is “Internal EIGRP”. The AD of “External EIGRP” is 170. An EIGRP external route is a route that was redistributed into EIGRP.

Answer 83

A. ipv6 router 2000::1/128 2012::1 E. ipv6 router 2000::1/128 2023::3 5 Explanation/Reference: Floating static routes are static routes that have an administrative distance greater than the administrative distance (AD) of another static route or dynamic routes. By default a static route has an AD of 1 then floating static route must have the AD greater than 1. Floating static route has a manually configured administrative distance greater than that of the primary route and therefore would not be in the routing table until the primary route fails.

Answer 84

A. ipv6 route 2000::1/128 2012::1 B. ipv6 route 2000::3/128 2023::3

Answer 85

B. The trunk forms but the mismatched native VLANs are merged into a single broadcast domain. Explanation/Reference: The trunk still forms with mismatched native VLANs and the traffic can actually flow between mismatched switches. But it is absolutely necessary that the native VLANs on both ends of a trunk link match; otherwise a native VLAN mismatch occurs, causing the two VLANs to effectively merge. For example with the above configuration, SW1 would send untagged frames for VLAN 999. SW2 receives them but would think they are for VLAN 99 so we can say these two VLANs are merged.

Answer 86

D. Option D

Answer 87

B. It discards the packets. Explanation: Referring to routing table, 10.10.10.0/28 supports network from 10.10.10.0-10.10.10.15. Gateway of last resort is not set So traffic destined to 10.10.10.16 will be discarded.

Answer 88

D. VLSM is misconfigured between the router interface and the DHCP pool.

Answer 89

B. The source and destination MAC addresses remain the same

Answer 90

C. native VLAN mismatches Explanation: Untagged frames are encapsulated with the native VLAN. In this case, the native VLANs are different so although S1 will tag it as VLAN 1 it will be received by S2.

Answer 91

B. Add VLAN 13 to the trunk links on Switch A and Switch B for VLAN propagation

Answer 92

A. access-list 101 permit tcp 10.1.10 0.0.0.255 172.16.10 0.0.0.255 eq ssh

Answer 93

C. interface FastEthernet 0/1 channel-group 1 mode desirable switchport trunk encapsulation dot1q switchport mode trunk interface FastEthernet 0/2 channel-group 1 mode desirable switchport trunk encapsulation dot1q switchport mode trunk Explanation: If the etherchannel was configured with mode “auto”, it was using PagP, so, we need to configure the other switch with “desirable” mode. PagP modes: auto | Desirable LACP modes: active | passive

Answer 94

D. no access-list 2699 deny ip any 10.20.1.0 0.0.0.255 Explanation: Already a statement is there in last to allow SSH Traffic for network 10.20.1.0 0.0.0.127, but Second statement says deny ip any 10.20.1.0 0.0.0.255, so how it will work once it is denied. So the right answer is remove the — no access-list 2699 deny ip any 10.20.1.0 0.0.0.255.

Answer 95

B. FastEthernet0 /1 C. Serial0/0 D. Serial0/1.102 Explanation/Reference: The “network 192.168.12.64 0.0.0.63 equals to network 192.168.12.64/26. This network has: + Increment: 64 (/26= 1111 1111.1111 1111.1111 1111.1100 0000) + Network address: 192.168.12.64 + Broadcast address: 192.168.12.127 Therefore all interface in the range of this network will join OSPF.

Answer 96

B. Option B

Answer 97

C. Switchport trunk allowed vlan add 13

Answer 98

C. The router will not accept the addressing scheme. Explanation/Reference: Each interface on a router must be in a different network. If two interfaces are in the same network, the router will not accept it and show error when the administrator assigns it.

Answer 99

C. 207.165.200.254 via Serial0/0/1

Answer 100

C. OSPF route 10.0.0.0/30 D. EIGRP route 10.0.0.1/32

Answer 101

D. Use the JSON library to parse the data returned by the NETCONF server for the interface’s configuration.

Answer 102

C. Switch 3 Explanation: The root bridge is determined by the lowest bridge ID, which consists of the priority value and the MAC address. Because the priority values of all of the switches are not avalable, the MAC address is used to determine the root bridge. Because S3 has the lowest MAC address, S3 becomes the root bridge.

Answer 103

A. There is a native VLAN mismatch. Explanation/Reference: From the output we see the native VLAN of Switch1 on Gi0/1 interface is VLAN 1 while that of Switch2 is VLAN 99 so there would be a native VLAN mismatch.

Answer 104

A. The area numbers on R1 and R2 are mismatched

Answer 105

D. configure the default gateway

Answer 106

A. Add the access-list 10 permit any command to the configuration

Answer 107

A. Option A

Answer 108

A. inbound on router A Fa0/0

Answer 109

B. The phone sends and receives data in VLAN 50, but a workstation connected to the phone sends and receives data in VLAN 1.

Answer 110

C. Option C

Answer 111

A. interface gi0/1 no cdp enable A. interface gi0/1 no cdp enable Disables CDP on a specified interface. Correct answer. B. interface gi0/1 clear cdp table Clears the table that contains CDP information about neighbours, but CDP remains active on the interface. Wrong answer. C. interface gi0/0 no cdp advertise-v2 Ref: Cisco IOS Cisco Discovery Protocol Command Reference – cdp advertise-v2 through show cdp traffic [Support & Learn] – Cisco Disables advertising Cisco Discovery Protocol Version 2 functionality on a device. Wrong answer. D. interface gi0/0 no cdp run

Answer 112

D. R1(config)#username admin privilege 15 secret p@ss1234 R1(config-if)#line vty 0 4 R1(config-line)#login local

Answer 113

C. ipv6 route ::/0 Serial 0/0/0

Answer 114

B. R2(config)# interface gi0/0 R2(config-if)# ip helper-address 198.51.100.100 C. R1(config)# interface fa0/0 R1(config-if)# ip address dhcp R1(config-if)# no shutdown

Answer 115

B. Route 10.10.13.0/25 is updated in the routing table as being learned from interface Gi0/1.

Answer 116

D. Route 10.10.13.0/25 learned via the Gi0/0 interface remains in the routing table

Answer 117

A. Option A

Answer 118

B. Add a “permit ip any any” statement at the end of ACL 101 for allowed traffic. C. The source and destination IPs must be swapped in ACL 101.

Answer 119

D. active Explanation/Reference: From the neighbor status, we notice the “Flags” are SP. “P” here means the neighbor is in Passive mode. In order to create an Etherchannel interface, the (local) SW1 ports should be in Active mode. Moreover, the “Port State” in the exhibit is “0x3c” (which equals to “00111100 in binary format). Bit 3 is “1” which means the ports are synchronizing -\> the ports are working so the local ports should be in Active mode.

Answer 120

D. No further routing configuration is required. Explanation/Reference: Since all the same router (C-router) is the default gateway for all three VLANs, all traffic destined to a different VLAN will be sent to the C-router. The C-router will have knowledge of all three networks since they will appear as directly connected in the routing table. Since the C-router already knows how to get to all three networks, no routing protocols need to be configured.

Answer 121

C. 172.16.5.1 Explanation/Reference: The highest IP address of all loopback interfaces will be chosen -\> Loopback 0 will be chosen as the router ID.

Answer 122

D. It selects the RIP route because it has the longest prefix inclusive of the destination address.

Answer 123

A. It selects the RIP route because it has the longest prefix inclusive of the destination address.

Answer 124

A. Option A

Answer 125

B. It sends the traffic to VLAN 100. Explanation/Reference: Since SW-1 is configured native VLAN is VLAN10, so traffic coming out of VLAN-10 is untagged, & goes directly to SW-2 Native VLAN: VLAN100, due to VLAN mismatch.

Answer 126

C. The router will forward the packet via Serial2.

Answer 127

A. It ignores the new static route until the existing OSPF default route is removed. Explanation/Reference: Our new static default route has the Administrative Distance (AD) of 120, which is bigger than the AD of OSPF External route (O\*E2) so it will not be pushed into the routing table until the current OSPF External route is removed. For your information, if you don’t type the AD of 120 (using the command “ip route 0.0.0.0 0.0.0.0 10.13.0.1”) then the new static default route would replace the OSPF default route as the default AD of static route is 1. You will see such line in the routing table: S\* 0.0.0.0/0 [1/0] via 10.13.0.1

Answer 128

C. It cannot send packets to 10.10.13.128/25. Explanation/Reference: Router2 does not have an entry for the subnet 10.10.13.128/25. It only has an entry for 10.10.13.0/25, which ranges from 10.10.13.0 to 10.10.13.127

Answer 129

B. It is unreachable and discards the traffic.

Answer 130

A. 192.168.14.4

Answer 131

A. 192.168.2.0 C. 10.0.0.0 D. 172.16.0.0

Answer 132

A. Router R3 will become the DR and router R1 will become the BDR. Explanation: OSPF elections of a DR are based on the following in order of precedence: highest pritority from 1 -255 (0 = never a DR) highest router ID highest IP address of a loopback or active interface in the absence of a manually configured router ID. Loopback IP addresses take higher precedence than other interfaces. In this case routers R1 and R3 have the highest router priority. Between the two, R3 has the higher router ID. Therefore, R3 will become the DR and R1 will become the BDR.

Answer 133

C. Branch-3

Answer 134

B. It is flooded out every port except G0/0.

Answer 135

D. Option D

Answer 136

B. Router2 is using the default hello timer.

Answer 137

D. 10.10.225.32 255.255.255.224 A. 10.10.225.48 255.255.255.240 This is a /28 subnet. 4 bits in the host ID. You have (2^4 – 2) = 14 addresses. Wrong answer. B. 10.10.225.32 255.255.255.240 This is a /28 subnet. 4 bits in the host ID. You have (2^4 – 2) = 14 addresses. Wrong answer. C. 10.10.225.48 255.255.255.224 This looks like a /27 subnet. 5 bits in the host ID. You have (2^5 – 2) = 30 addresses. Could be the right answer, but there’s a mismatch between the subnet ID and the subnet mask. If you perform the logical AND between the subnet ID and the subnet mask, you should obtain the subnet ID: Subnet ID 00001010.00001010.11111111.00110000 Subnet mask 11111111.11111111.11111111.11100000 Result 00001010.00001010.11111111.00100000 Decimal 10.10.255.32 This is not the subnet ID. Wrong answer. D. 10.10.225.32 255.255.255.224 This is a /27 subnet. 5 bits in the host ID. You have (2^5 – 2) = 30 addresses. No mismatches between subnet ID and subnet mask. Correct answer.

Answer 138

D. configure a static route with 10.10.10.2 as the next hop to reach the 20.20.20.0/24 network

Answer 139

A. The router NAT configuration has an incorrect inside local address.

Answer 140

A. longest prefix

Answer 141

C. the path through R2 because the EBGP administrative distance is 20

Answer 142

A. Interface errors are incrementing Explanation: reliability 255/255: When the input and output errors increase, they affect the reliability counter. This indicates how likely it is that a packet can be delivered or received succesfully. Reliability is calculated like this: reliability = number of packets / number of total frames. The value of 255 is the highest value meaning that the interface is very reliable at the moment. The calculation above is done every 5 minutes.

Answer 143

C. Configure the ip route 0.0.0.0 0.0.0.0 10.10.10.18 command on R1.

Answer 144

D. The frame will be forwarded out of all the active switch ports except for port fa0/0. E. The MAC address of 0000.00aa.aaaa will be added to the MAC Address Table.

Answer 145

D. switchport trunk native vlan 67

Answer 146

D. Configure the ipv6 route 2023::/126 2012::2 command on the Atlanta router. E. Configure the ipv6 route 2012::/126 2023::2 command on the Washington router. Explanation/Reference: The short syntax of static IPv6 route is: ipv6 route {next-hop-IPv6-address | exit-interface}

Answer 147

C. Router2(config)#ntp master 4

Answer 148

C. The default Hello and Dead timers are in use. ## Footnote Explanation/Reference: From the output we can see there are Designated Router & Backup Designated Router for this OSPF domain so this is a broadcast network (point-to-point and point-to multipoint networks do not elect DR & BDR) -\> Answer B is not correct. By default, the timers on a broadcast network (Ethernet, point-to-point and point-to-multipoint) are 10 seconds hello and 40 seconds dead (therefore answer C is correct). The timers on a non- broadcast network are 30 seconds hello 120 seconds dead. From the line “Neighbor Count is 3”, we learn there are four OSPF routers in this OSPF domain -\> Answer D is not correct.

Answer 149

B. Router3 Explanation First check the exhibit and see which routes are valid and the destination IP address comes under which range of valid network There are total 5 routes 10. 10.13.0/25 10. 10.13.128/28 10. 10.13.144/28 10. 10.13.160/29 10. 10.13.208/29 10.10.13.160/29 Only this route allows to forward to the destination 10.10.13.165 Now you will ask why? Subnetting logic The increment for /29 is 8 And 160 to 168 Range allows the 4th Octet in the destination IP which is 165 So now check the exhibit, this 10.10.13.160/29 is routed VIA 10.10.10.5 And this 10.10.10.5 comes under the Router 3. Because the network between R1 and R3 is configured as 10.10.10.4/30 Again use subnetting logic for this network 10.10.10.4/30. The increment is 4 So range is 10.10.10.4 to 10.10.10.8 And 10.10.10.5 comes under this range ONLY Therefore Router 1 choose Router 3 to send packets to destination 10.10.13.165

Answer 150

C. modify hello interval

Answer 151

B. R1(config)#interface ethernet0/0.20 R1(config)#encapsulation dot1q 20 R1(config)#ip address 10.20.20.1 255.255.255.0

Answer 152

C. 172.16.15.10 Explanation/Reference: OSPF uses the following criteria to select the router ID: 1. Manual configuration of the router ID (via the “router-id x.x.x.x” command under OSPF router configuration mode). 2. Highest IP address on a loopback interface. 3. Highest IP address on a non-loopback and active (no shutdown) interface.

Answer 153

C. 10.0.1.50

Answer 154

D. The port goes into error-disable state

Answer 155

C. The spanning-tree mode is Rapid PVST+ E. The root port is FastEthernet 2/1

Answer 156

C. source 192.168.10.10 and destination 192.168.20.10 Explanation/Reference: The source and destination IP addresses of the packets are unchanged on all the way. Only source and destination MAC addresses are changed.

Answer 157

A. AS numbers must be changed to match on all the routers Explanation/Reference: This question is to examine the understanding of the interaction between EIGRP routers. The following information must be matched so as to create neighborhood. EIGRP routers to establish, must match the following information: 1. AS Number; 2. K value.

Answer 158

A. The frame is processed in VLAN 5.

Answer 159

C. 192.168.25.16 255.255.255.240 Explanation/Reference: The binary version of 20 is 10100. The binary version of 16 is 10000. The binary version of 24 is 11000. The binary version of 28 is 11100. The subnet mask is /28. The mask is 255.255.255.240. Note: From the output above, EIGRP learned 4 routes and we need to find out the summary of them: + 192.168.25.16 + 192.168.25.20 + 192.168.25.24 + 192.168.25.28 -\> The increment should bE. 28 ?16 = 12 but 12 is not an exponentiation of 2 so we must choose 16 (24). Therefore the subnet mask is /28 (=1111 1111.1111 1111.1111 1111.11110000) = 255.255.255.240 So the best answer should be 192.168.25.16 255.255.255.240

Answer 160

B. Change the LACP mode to active

Answer 161

D. ip route 209.165.200.224 255.255.255.224 209.165.202.129 254

Answer 162

A. Network 172.16.1.32 mask 255.255.255.224

Answer 163

C. switchport mode dynamic auto

Answer 164

D. show cdp neighbor

Answer 165

B. router1(config)#ip route 192.168.202.0 255.255.255.0 192.168.201.2 5 Explanation/Reference: The default AD of static route is 1 so we need to configure another number for the static route.

Answer 166

D. R1 interface Gi1/0 has a larger MTU size

Answer 167

B. access-list 100 deny tcp host 172.16.1.33 any eq 22 access-list 100 permit ip any any ``` line vty 0 15 access-class 100 in ```

Answer 168

C. a dynamic NAT address pool

Answer 169

C. testing1234 Explanation/Reference: If neither the enable password command nor the enable secret command is configured, and if there is a line password configured for the console, the console line password serves as the enable password for all VTY sessions -\> The “enable secret” will be used first if available, then “enable password” and line password.

Answer 170

C. 0.0.0.0/0

Answer 171

D. 10.10.13.208/29 Explanation/Reference: Host A address fall within the address range. However, if more than one route to the same subnet exist (router will use the longest stick match, which match more specific route to the subnet). If there are route 10.10.13.192/26 and 10.10.13.208/29, the router will forward the packet to /29 rather than /28.

Answer 172

D. route learned through EIGRP

Answer 173

C. default route

Answer 174

A. The address is removed from the pool until the conflict is resolved. Explanation/Reference: An address conflict occurs when two hosts use the same IP address. During address assignment, DHCP checks for conflicts using ping and gratuitous ARP. If a conflict is detected, the address is removed from the pool. The address will not be assigned until the administrator resolves the conflict.

Answer 175

C. One secure MAC address is manually configured on the interface.

Answer 176

B. Switch 2

Answer 177

A. int range g0/0-1 channel-group 10 mode active C. int range g0/0-1 channel-group 10 mode passive

Answer 178

B. Ipv6 route 2001:db8:23::14/128 fd00:13::3 D. Ipv6 route 2001:db8:23::/64 fd00:12::2 Explanation/Reference: We choose option B instead of option D because the destination is a host. Therefore, we use a host route meaning that all bits of the ipv6 destination address must match (prefix-length of /128). Also, the next hop address should be that of R3 (fd00:13::3) since the question asks that packets for the host must be forwarded through it.

Answer 179

A. R1(config)# interface GigabitEthernet0/0 R1(config-if)# ip access-group 5 out D. R1(config)# access-list 5 permit 10.0.70.0 0.0.0.127

Answer 180

A. The security violation counter does not increment E. The interface drops traffic from unknown MAC address

Answer 181

A. 192.168.1.17 B. 192.168.1.61

Answer 182

A. learned MAC addresses are deleted after five minutes of inactivity C. it has dynamically learned two secure MAC addresses

Answer 183

C. The interface is error-disabled. D. The interface dynamically learned two secure MAC addresses.

Answer 184

A. there are 20 different network masks within the 10.0.0.0/8 network C. Ten routes are equally load-balanced between Te0/1/0.100 and Te0/2/0.100

Answer 185

B. It provides stability for the OSPF process on RouterB. C. It specifies that the router ID for RouterB should be 10.0.0.1. Explanation: A loopback interface never comes down even if the link is broken so it provides stability for the OSPF process (for example we use that loopback interface as the router-id) – The router-ID is chosen in the order below: + The highest IP address assigned to a loopback (logical) interface. + If a loopback interface is not defined, the highest IP address of all active router’s physical interfaces will be chosen. -\> The loopback interface will be chosen as the router ID of RouterB ?

Answer 186

D. network route Explanation/Reference: From the output, we see R1 will use the entry “O 10.10.13.0/25 [110/4576] via 10.10.10.1, …” to reach host 10.10.13.10. This is a network route. Note: “B\* 0.0.0.0/0 …” is a default route.

Answer 187

A. Option A C. Option C

Answer 188

B. Insert the source MAC address and port into the forwarding table and forward the frame to Sales-1.

Answer 189

A: router source B: administrative distance C: metric D: timestamp E: outbound intercace

Answer 190

NIC vendor OUI –\> 00:0C:22 NIC MAC address –\> 00:0C:22:83:79:A3 default gateway –\> 192.168.1.193 host IP address –\> 192.168.1.200 subnet mask –\> 255.255.255.192 Explanation/Reference: The “ip route” and “ip addr show eth1” are Linux commands. + “ip route”: display the routing table + “ip addr show eth1”: get depth information (only on eth1 interface) about your network interfaces like IP Address, MAC Address information

Answer 191

D. The hello and dead interval timers are not set to the same values on R1 and R3. F. R1 and R3 are configured in different areas. Explanation/Reference: This question is to examine the conditions for OSPF to create neighborhood. So as to make the two routers become neighbors, each router must be matched with the following items: 1. The area ID and its types; 2. Hello and failure time interval timer; 3. OSPF Password (Optional);

Answer 192

B. 90 Explanation/Reference: The Administrative distance (AD) of EIGRP is 90 while the AD of OSPF is 110 so EIGRP route will be chosen to install into the routing table.

Answer 193

C. R1# config t R1(config)# ip routing R1(config)# ip route 0.0.0.0 0.0.0.0 192.168.1.1

Answer 194

C. Cells that overlap one another are configured to use nonoverlapping channels. E. For maximum throughput, the WLC is configured to dynamically set adjacent access points to the channel.

Answer 195

C. It provides dynamic neighbor discovery. F. It maintains neighbor relationships

Answer 196

A. It provides dynamic neighbor discovery. C. It maintains neighbor relationships.

Answer 197

A. restricts unauthorized users from viewing clear-text passwords in the running configuration

Answer 198

B. There is a speed mismatch E. The interface is error-disabled

Answer 199

D. The link becomes a trunk port.

Answer 200

B. a threat to the network if they are compromised

Answer 201

C. Controller-based reduces network configuration complexity, while traditional increases the potential for errors D. Controller-based provides centralization of key IT functions. While traditional requires distributes management function

Answer 202

D. They enable automatic failover of the default gateway. E. They allow multiple devices to serve as a single virtual gateway for clients in the network

Answer 203

A. reduced operational costs C. faster changes with more reliable results

Answer 204

B. Enabled interfaces come up and move to the forwarding state immediately C. Enabled interfaces never generate topology change notifications. Explanation/Reference: “A switch will never generate a topology change notification for an interface that has portfast enabled.” “Another major benefit of the STP portfast feature is that the access ports bypass the earlier 802.1D STP states (learning and listening) and forward traffic immediately.”

Answer 205

C. It maintains VLAN consistency across a switched network. E. It allows VLAN information to be automatically propagated throughout the switching environment.

Answer 206

B. It uses northbound and southbound APIs to communicate between architectural layers. C. It moves the control plane to a central point.

Answer 207

C. It provides services that are accessed over the Internet. E. It supports network resources from a centralized third-party provider and privately-owned virtual resources

Answer 208

A. It can be hidden or broadcast in a WLAN D. It is at most 32 characters long.

Answer 209

A. serves as the network aggregation point B. provides a boundary between Layer 2 and Layer 3 communications Explanation/Reference: The distribution layer aggregates the data received from the access layer switches before it is transmitted to the core layer for routing to its final destination.

Answer 210

C. The network core is designed to maintain continuous connectivity when devices fail. E. The distribution layer runs Layer 2 and Layer 3 technologies

Answer 211

A. Light is transmitted through the core of the fiber C. The glass core component is encased in a cladding

Answer 212

B. It can support multiple IPv6 subnets on a single link. D. It routes over links rather than over networks.

Answer 213

C. moves packets within a VLAN E. makes forwarding decisions based on the MAC address of a packet

Answer 214

B. runs applications that send and retrieve data for workstations that make requests C. handles requests from multiple workstations at the same time

Answer 215

B. coordinating VTNs D. managing the topology

Answer 216

B. It allows logical network devices to move traffic between virtual machines and the rest of the physical network C. It allows multiple operating systems and applications to run independently on one physical server.

Answer 217

B. Artificial intelligence identifies and prevents potential design failures. E. Proprietary Cisco APIs leverage multiple network management tools.

Answer 218

C. to gather information about the network and devices D. to scan for accessibility Explanation: Gathering information about a network and scanning for access is a reconnaissance attack. Preventing other users from accessing a system is a denial of service attack. Attempting to retrieve and modify data, and attempting to escalate access privileges are types of access attacks.

Answer 219

D. to verify Layer 2 connectivity between two devices when Layer 3 fails E. to obtain the IP address of a connected device in order to telnet to the device

Answer 220

A. to automatically route traffic on a secondary path when the primary path goes down C. to enable fallback static routing when the dynamic routing protocol fails

Answer 221

B. when the cable length limits are exceeded C. when one side of the connection is configured for half-duplex Explanation/Reference: A late collision is defined as any collision that occurs after the first 512 bits (or 64th byte) of the frame have been transmitted. The usual possible causes are full-duplex/half-duplex mismatch, exceeded Ethernet cable length limits, or defective hardware such as incorrect cabling, noncompliant number of hubs in the network, or a bad NIC. Late collisions should never occur in a properly designed Ethernet network. They usually occur when Ethernet cables are too long or when there are too many repeaters in the network.

Answer 222

C. implement port-based authentication E. shut down unused ports

Answer 223

A. exactly one active router B. one or more standby routers Explanation: A: exactly one active router: Only one Active Router per HSRP group will be elected based on highest priority. In case of equal priority, Highest IP address will be elected as Active Router. B: one or more standby routers : There can be one or more Standby Routers. C, D And E are incorrect: Wrong terminology.

Answer 224

D. enables applications to identify resources by name instead of IP address E. allows a single host name to be shared across more than one IP address

Answer 225

A. The DHCP server offers the ability to exclude specific IP addresses from a pool of IP addresses D. The DHCP server leases client IP addresses dynamically.

Answer 226

C. Both support runs of up to 100 meters. D. Both support speeds of at least 1 Gigabit.

Answer 227

A. OpenFlow B. NETCONF Explanation/Reference: OpenFlow is a well-known southbound API. OpenFlow defines the way the SDN Controller should interact with the forwarding plane to make adjustments to the network, so it can better adapt to changing business requirements. The Network Configuration Protocol (NetConf) uses Extensible Markup Language (XML) to install, manipulate and delete configuration to network devices. Other southbound APIs are: + onePK: a Cisco proprietary SBI to inspect or modify the network element configuration without hardware upgrades. + OpFlex: an open-standard, distributed control system. It send “summary policy” to network elements.

Answer 228

C. allows configuration and monitoring of the network from one centralized point

Answer 229

B. port security violation Explanation: This mode is the default violation mode; when in this mode, the switch will automatically force the switchport into an error disabled (err-disable) state when a violation occurs. While in this state, the switchport forwards no traffic. The switchport can be brought out of this error disabled state by issuing the errdisable recovery cause CLI command or by disabling and reenabling the switchport.

Answer 230

B. lowest path cost to the root bridge

Answer 231

D. Virtual machines are operating system instances that are decoupled from server hardware

Answer 232

D. sends a broadcast message in an attempt to resolve the URL

Answer 233

D. ingress traffic

Answer 234

A. OpenFlow

Answer 235

D. access to networking equipment and facilities

Answer 236

C. An interface line has changed status

Answer 237

B. DNS lookup

Answer 238

D. It eliminates the need to configure each access point individually.

Answer 239

B. It provides the default gateway redundancy on a LAN using two or more routers.

Answer 240

B. enables multiple users to share a single broadband connection

Answer 241

C. services are provided by a public, private, or hybrid deployment

Answer 242

D. used without tracking or registration

Answer 243

A. Each device is separated by the same number of hops

Answer 244

D. most widely used API for web services

Answer 245

B. a host that is configured to request an IP address automatically

Answer 246

A. Local AP mode creates two CAPWAP tunnels per AP to the WLC

Answer 247

C. TACACS+ separates authentication and authorization, and RADIUS merges them

Answer 248

D. responds to a request for IP address to domain name resolution to the DNS server

Answer 249

D. allows the users to access company internal network resources through a secure tunnel

Answer 250

D. transfers IOS images from a server to a router for firmware upgrades

Answer 251

A. It provides a summary of the top 10 global issues.

Answer 252

C. send LWAPP packets to access points. Explanation/Reference: Lightweight APs (LAPs) is devices require no initial configuration. LAPs use the Lightweight Access Point Protocol (LWAPP) to communicate with a WLAN controller (WLC), as shown in the below figure. Controller-based APs are useful in situations where many APs are required in the network. As more APs are added, each AP is automatically configured and managed by the WLC.

Answer 253

C. firewall

Answer 254

C. Change native VLAN to an unused VLAN ID

Answer 255

A. different nonoverlapping channels

Answer 256

A. connect wireless devices to a wired network

Answer 257

A. centralize the management of access points in an enterprise network

Answer 258

A. Both have a 50 micron core diameter

Answer 259

A. Both use the same data-link header and trailer formats

Answer 260

C. group of log messages associated with the configured severity level

Answer 261

A. It supports numerous extensibility options including cross-domain adapters and third-party SDKs.

Answer 262

D. on hosts that communicates only with other internal hosts

Answer 263

B. configure the first three access points to use Channels 1, 6, and 11

Answer 264

D. B514 : 82C3 :: 0029 : EC7A : 0 : EC72 Explanation: There are two ways that an IPv6 address can be additionally compressed: compressing leading zeros and substituting a group of consecutive zeros with a single double colon(::). Both of these can be used in any number of combinations to notate the same address. It is important to note that the double colon (::) can only be used once within a single IPv6 address notation. So, the extra 0’s can only be compressed once.

Answer 265

B. After the cable is connected, the interface is available faster to send and receive user data

Answer 266

C. higher degree of availability

Answer 267

B. 11111100 Explanation/Reference: A IPv6 Unique Local Address is an IPv6 address in the block FC00::/7, which means that IPv6 Unique Local addresses begin with 7 bits with exact binary pattern as 1111 110 -\> Answer B is correct. Note: IPv6 Unique Local Address is the approximate IPv6 counterpart of the IPv4 private address. It is not routable on the global Internet.

Answer 268

B. The Layer 2 switch floods packets to all ports except the receiving port in the given VLAN. Explanation/Reference: If the destination MAC address is not in the CAM table (unknown destination MAC address), the switch sends the frame out all other ports that are in the same VLAN as the received frame. This is called flooding. It does not flood the frame out the same port on which the frame was received.

Answer 269

B. ff:ff:ff:ff:ff:ff

Answer 270

D. TCP requires the connection to be established before transmitting data. UDP transmits data at a higher rate without ensuring packet delivery.

Answer 271

A. TCP is reliable and is a connection-oriented protocol; UDP is not reliable and is a connectionless protocol

Answer 272

D. The switch discard all ingress ARP traffic with invalid MAC-to-IP address bindings. Explanation/Reference: Dynamic ARP inspection is an ingress security feature; it does not perform any egress checking.

Answer 273

B. The highest up/up physical interface IP address is selected as the router ID.

Answer 274

A. The seventh bit of the original MAC address of the interface is inverted

Answer 275

A. It serves as the centralized management point of an SDN architecture.

Answer 276

B. provides direct connections between subscribers

Answer 277

B. It provides shared applications to end users.

Answer 278

A. 1.544 Mbps Explanation: Point to Point T1 A Point to Point T1 service is a private data connection securely connecting two or more locations with T1 data speeds (1.54Mbps).

Answer 279

D. access -distribution – core – distribution – access

Answer 280

C. Authentication identifies and verifies a user who is attempting to access a system, and authorization controls the tasks the user can perform. Explanation/Reference: AAA stands for Authentication, Authorization and Accounting. + Authentication: Specify who you are (usually via login username & password) + Authorization: Specify what actions you can do, what resource you can access + Accounting: Monitor what you do, how long you do it (can be used for billing and auditing) An example of AAA is shown below: + Authentication: “I am a normal user. My username/password is user\_tom/learnforever” + Authorization: “user\_tom can access LearnCCNA server via HTTP and FTP” + Accounting: “user\_tom accessed LearnCCNA server for 2 hours”. This user only uses “show” commands.

Answer 281

B. It minimizes spanning-tree convergence time

Answer 282

C. to pass traffic between different networks

Answer 283

D. It reduces routing failures by allowing more than one router to represent itself, as the default gateway of a network.

Answer 284

B. Facilities communication between the controller and the networking hardware Explanation: The Southbound Interface In a controller-based network architecture, the controller needs to communicate to the networking devices. In most network drawings and architecture drawings, those network devices typically sit below the controller, as shown in Figure 16-5. There is an interface between the controller and those devices, and given its location at the bottom part of drawings, the interface came to be known as the southbound interface, or SBI, as labeled in Figure 16-5.

Answer 285

D. It identifies a WLAN

Answer 286

A. displaying OSPF-related interface information

Answer 287

B. to provide fair queuing for buffered flows Explanation: Traffic shaping retains excess packets in a queue and then schedules the excess for later transmission over increments of time.

Answer 288

D. forwards multicast hello messages between routers

Answer 289

C. determines which packets are allowed to cross from unsecured to secured networks

Answer 290

B. They provide minimal interruption to services by being hot-swappable

Answer 291

C. It abstracts policy from the actual device configuration.

Answer 292

B. GRE over iPsec

Answer 293

B. It is used in place of 802 11b/g when many nonoverlapping channels are required Explanation/Reference: 802.11a and 802.11b are not compatible since 802.11a operates at the 5GHz frequency band and 802.11b operates at the 2.4GHz band. The 2.4 GHz frequency band with a channel width of 22 MHz only has 3 non-overlapping channels (1, 6 and 11) whereas the 5 GHz band has 23 non-overlapping channels with a 20 MHz channel width. Therefore, 802.11a is preferred over 802.11b and 802.11g when many non-overlapping channels are required since they both operate at 2.4GHz unlike 802.11a.

Answer 294

C. Frames are sent to every port on the switch in the same VLAN except from the originating port.

Answer 295

C. Users experience poor wireless network performance.

Answer 296

C. control and distribution of physical resources Explanation/Reference: The hypervisor creates and manages virtual machines on a host computer and allocates physical system resources to them.

Answer 297

B. control plane

Answer 298

C. It causes the router to send all messages to the syslog server

Answer 299

A. The switch port interface trust state becomes untrusted. Explanation/Reference: Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network. It intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. This capability protects the network from certain man-in-the-middle attacks. After enabling DAI, all ports become untrusted ports.

Answer 300

A. DHCP relay agent

Answer 301

A. The floating static route must have a higher administrative distance than the primary route so it is used as a backup.

Answer 302

C. IPsec tunnel mode with ESP

Answer 303

C. IPsec Explanation/Reference: A site-to-site VPN allows offices in multiple fixed locations to establish secure connections with each other over a public network such as the Internet. A site-to-site VPN means that two sites create a VPN tunnel by encrypting and sending data between two devices. One set of rules for creating a siteto-site VPN is defined by IPsec.

Answer 304

A. sent to the port identified for the known MAC address Explanation/Reference: A switch builds its MAC address table by recording the MAC address of each device connected to each of its ports. The switch uses the information in the MAC address table to send frames destined for a specific device out the port, which has been assigned to that device.

Answer 305

A. ASCII E. hexadecimal Explanation/Reference: When configuring a WLAN with WPA2 Preshared Key (PSK), we can choose the encryption key format as either ASCII or HEX.

Answer 306

A. Passive Explanation/Reference: The LACP is Link Aggregation Control Protocol. LACP is an open protocol, published under the 802.3ad. The modes of LACP are active, passive or on. The side configured as “pasive” will waiting the other side that should an Active for the Etherchannel to be established. PAgP is Port-Aggregation Protocol. It is Cisco proprietary protocol. The mode are On, Desirable or Auto. Desirable – Auto will establish a EtherChannel. An example of how to configure an Etherchannel: SwitchFormula1\>enable SwitchFormula1#configure terminal SwitchFormula1(config)# interface range f0/5 -14 SwitchFormula1(config-if-range)# channel-group 13 mode ? active Enable LACP unconditionally auto Enable PAgP only if a PAgP device is detected desirable Enable PAgP unconditionally on Enable Etherchannel only passive Enable LACP only if a LACP device is detected

Answer 307

D. FF02::1 E. FF02::2 Explanation/Reference: When an interface is configured with IPv6 address, it automatically joins the all nodes (FF02::1) and solicited-node (FF02::1:FFxx:xxxx) multicast groups. The all-node group is used to communicate with all interfaces on the local link, and the solicited-nodes multicast group is required for link-layer address resolution. Routers also join a third multicast group, the all-routers group (FF02::2).

Answer 308

A. default-router

Answer 309

B. database agent C. address pool

Answer 310

C. It divides a reference bandwidth of 100 Mbps by the actual bandwidth of the existing interface to calculate the router with the lowest cost.

Answer 311

C. standby

Answer 312

C. spanning -tree vlan 200 priority 0

Answer 313

B. spanning -tree vlan 200 priority 0

Answer 314

C. in the binding database

Answer 315

B. on the router closest to the client

Answer 316

D. Layer 2

Answer 317

A. control layer and the infrastructure layer

Answer 318

A. management Explanation/Reference: There are three main types of 802.11 frames: the Data Frame, the Management Frame and the Control Frame. Association Response belongs to Management Frame. Association response is sent in response to an association request.

Answer 319

B. management

Answer 320

A. Reassociation Request

Answer 321

C. The router replaces the original source and destination MAC addresses with the sending router MAC address as the source and neighbor MAC address as the destination

Answer 322

D. If a monitored port exceeds the maximum administrative value for power, the port is shutdown and err disabled. Explanation/Reference: PoE monitoring and policing compares the power consumption on ports with the administrative maximum value (either a configured maximum value or the port’s default value). If the power consumption on a monitored port exceeds the administrative maximum value, the following actions occur: – A syslog message is issued. – The monitored port is shut down and error-disabled. – The allocated power is freed.

Answer 323

B. enable SLAAC on an interface

Answer 324

D. southbound

Answer 325

C. administrative distance Explanation/Reference: Administrative distance is the feature used by routers to select the best path when there are two or more different routes to the same destination from different routing protocols. Administrative distance defines the reliability of a routing protocol.

Answer 326

D. show ip interface GigabitEthernet 0/0

Answer 327

C. ipv6 address autoconfig Explanation/Reference: The “ipv6 address autoconfig” command causes the device to perform IPv6 stateless address autoconfiguration to discover prefixes on the link and then to add the EUI-64 based addresses to the interface. Addresses are configured depending on the prefixes received in Router Advertisement (RA) messages. The device will listen for RA messages which are transmitted periodically from the router (DHCP Server). This RA message allows a host to create a global IPv6 address from: + Its interface identifier (EUI-64 address) + Link Prefix (obtained via RA) Note: Global address is the combination of Link Prefix and EUI-64 address

Answer 328

A. transport input telnet ssh

Answer 329

C. Show ip DHCP binding.

Answer 330

A. ip address dhcp Explanation/Reference: If we want to get an IP address from the DHCP server on a Cisco device, we can use the command “ip address dhcp”. Note: The command “ip helper-address” enables a router to become a DHCP Relay Agent.

Answer 331

C. ipv6 unicast-routing Explanation: To enable IPv6 routing on the Cisco router use the following command: ipv6 unicast-routing If this command is not recognized, your version of IOS does not support IPv6.

Answer 332

A. ipv6 route ::/0 interface next-hop5

Answer 333

D. show ip ospf database Explanation/Reference: The “show ip ospf database” command displays the link states. Here is an example: Here is the lsa database on R2. R2#show ip ospf database OSPF Router with ID (2.2.2.2) (Process ID 1) Router Link States (Area 0) Link ID ADV Router Age Seq# Checksum Link count2.2.2.2 2.2.2.2 793 0x80000003 0x004F85 210.4.4.4 10.4.4.4 776 0x80000004 0x005643 1111.111.111.111 111.111.111.111 755 0x80000005 0x0059CA 2133.133.133.133 133.133.133.133 775 0x80000005 0x00B5B1 2 Net Link States (Area 0) Link ID ADV Router Age Seq# Checksum10.1.1.1 111.111.111.111 794 0x80000001 0x001E8B10.2.2.3 133.133.133.133 812 0x80000001 0x004BA910.4.4.1 111.111.111.111 755 0x80000001 0x007F1610.4.4.3 133.133.133.133 775 0x80000001 0x00C31F

Answer 334

A. lldp run Explanation/Reference: Link Layer Discovery Protocol (LLDP) is a industry standard protocol that allows devices to advertise, and discover connected devices, and there capabilities (same as CDP of Cisco). To enable it on Cisco devices, we have to use this command under global configuration mode: Sw(config)# lldp run

Answer 335

C. lldp reinit Explanation/Reference: + lldp holdtime seconds: Specify the amount of time a receiving device should hold the information from your device before discarding it + lldp reinit delay: Specify the delay time in seconds for LLDP to initialize on an interface + lldp timer rate: Set the sending frequency of LLDP updates in seconds

Answer 336

A. ip helper-address

Answer 337

D. ntp master Explanation/Reference: To configure a Cisco device as an Authoritative NTP Server, use the ntp master [stratum] command. To configure a Cisco device as a NTP client, use the command ntp server . For example: Router(config)#ntp server 192.168.1.1. This command will instruct the router to query 192.168.1.1 for the time.

Answer 338

A. standby 10 preempt Explanation/Reference: The “preempt” command enables the HSRP router with the highest priority to immediately become the active router.

Answer 339

C. switch(config-if)#spanning-tree portfast trunk

Answer 340

B. service password-encryption

Answer 341

D. lldp reinit 5 Explanation/Reference: + lldp holdtime seconds: Specify the amount of time a receiving device should hold the information from your device before discarding it + lldp reinit delay: Specify the delay time in seconds for LLDP to initialize on an interface + lldp timer rate: Set the sending frequency of LLDP updates in seconds

Answer 342

D. show standby Explanation/Reference: The following is sample output from the show standby command:

Answer 343

D. show ipv6 eigrp events

Answer 344

C. show ipv6 access-list

Answer 345

B. between the SON controller and switches and routers on the network

Answer 346

C. preamble

Answer 347

A. The NMS software must be loaded with the MIB associated with the trap.

Answer 348

A. no additional config is required Explanation/Reference: Simply because that will be the default behavior routers would follow in the event all other routers in the HSRP group fail, then it would not keep attributes such as priority or preemption. What preemption does in summary is to make sure that the configured Priority on all routers within the same HSRP group is always respected. That is, if R1 is configured on the HSRP group with a priority of 150 but he stands as active since all other routers currently subscribed to that group have a priority 150, then will router will preempt the current active router and will take over hence becoming the new active router. With preemption disabled, the new router does not preempt the current active router, unless routers in the group have to renegotiate their roles based on each router’s priority at the time of negotiation.

Answer 349

D. Switch(config)#spanning-tree vlan 750 priority 0 Explanation/Reference: Although the spanning-tree vlan 10 root primary command will ensure a switch will have a bridge priority value lower than other bridges introduced to the network, the spanning-tree vlan 10 priority 0 command ensures the bridge priority takes precedence over all other priorities.

Answer 350

D. Assign a DNS domain name

Answer 351

D. Assign a DNS domain name. Explanation/Reference: In order to generate an RSA key for SSH, we need to configure the hostname and a DNS domain name on the router (a username and password is also required). Therefore in fact both answer C and answer D are correct.

Answer 352

A. Ansible

Answer 353

A. read Explanation: GET: This method retrieves the information identified by the request URI. In the context of the RESTful web services, this method is used to retrieve resources. This is the method used for read operations (the R in CRUD).

Answer 354

C. allocating nonoverlapping channels to access points that are in close physical proximity to one another

Answer 355

D. wireless LAN controller

Answer 356

A. firewall

Answer 357

B. firewall

Answer 358

A. It enables AAA services on the device

Answer 359

A. CPU ACL Explanation/Reference: Whenever you want to control which devices can talk to the main CPU, a CPU ACL is used. Note: CPU ACLs only filter traffic towards the CPU, and not any traffic exiting or generated by the CPU.

Answer 360

C. IP SLA Explanation/Reference: IP SLA allows an IT professional to collect information about network performance in real time. Therefore it helps determine whether the QoS on the network is sufficient for IP services or not. Cisco IOS Embedded Event Manager (EEM) is a powerful and flexible subsystem that provides realtime network event detection and onboard automation. It gives you the ability to adapt the behavior of your network devices to align with your business needs.

Answer 361

A. it sends information about MIB variables in response to requests from the NMS

Answer 362

A. allows multiple companies to each use the same addresses without conflicts

Answer 363

A. allow multiple companies to each use the same address without conflicts

Answer 364

D. rate-limits certain traffic

Answer 365

A. enforcing routing policies

Answer 366

D. service password-encryption

Answer 367

D. provides an added level of protection against Internet exposure

Answer 368

A. WPA2 + AES

Answer 369

D. FF00::/12

Answer 370

D. FF00::/8 Explanation/Reference: FF00::/8 is used for IPv6 multicast and this is the IPv6 type of address the question wants to ask. FE80::/10 range is used for link-local addresses. Link-local addresses only used for communications within the local subnetwork (automatic address configuration, neighbor discovery, router discovery, and by many routing protocols). It is only valid on the current subnet. It is usually created dynamically using a link-local prefix of FE80::/10 and a 64-bit interface identifier (based on 48-bit MAC address).

Answer 371

A. : :1 Explanation: In IPv6 the loopback address is written as, ::1 This is a 128bit number, with the first 127 bits being ‘0’ and the 128th bit being ‘1’. It’s just a single address, so could also be written as ::1/128.

Answer 372

D. 2031:0:130F::9C0:876A:130B Explanation: An IPv6 address is represented as eight groups of four hexadecimal digits, each group representing 16 bits (two octets). The groups are separated by colons (:). An example of an IPv6 address is 2001:0db8:85a3:0000:0000:8a2e:0370:7334. The leading O’s in a group can be collapsed using ::, but this can only be done once in an IP address.

Answer 373

B. unique local A IPv6 Unique Local Address is an IPv6 address in the block FC00::/7. It is the approximate IPv6 counterpart of the IPv4 private address. It is not routable on the global Internet. Note: In the past, Site-local addresses (FEC0::/10) are equivalent to private IP addresses in IPv4 but now they are deprecated. Link-local addresses only used for communications within the local subnet. It is usually created dynamically using a link-local prefix of FE80::/10 and a 64-bit interface identifier (based on 48-bit MAC address).

Answer 374

D. overload Explanation/Reference: By adding the keyword “overload” at the end of a NAT statement, NAT becomes PAT (Port Address Translation). This is also a kind of dynamic NAT that maps multiple private IP addresses to a single public IP address (many-to-one) by using different ports. Static NAT and Dynamic NAT both require a one-to-one mapping from the inside local to the inside global address. By using PAT, you can have thousands of users connect to the Internet using only one real global IP address. PAT is the technology that helps us not run out of public IP address on the Internet. This is the most popular type of NAT. An example of using “overload” keyword is shown below: R1(config)# ip nat inside source list 1 interface ethernet1 overload

Answer 375

D. debug Explanation/Reference: Specifying a level causes messages at that level and numerically lower levels to be displayed at the destination. From Table 3 : informational level = 6, debugging level = 7, notice/notifications level = 5

Answer 376

A. 0000.5E00.010a Explanation/Reference: With VRRP, the virtual router’s MAC address is 0000.5E00.01xx , in which xx is the VRRP group.

Answer 377

B. lightweight Explanation/Reference: A Lightweight Access Point (LAP) is an AP that is designed to be connected to a wireless LAN (WLAN) controller (WLC). APs are “lightweight,” which means that they cannot act independently of a wireless LAN controller (WLC). The WLC manages the AP configurations and firmware. The APs are “zero touch” deployed, and individual configuration of APs is not necessary.

Answer 378

D. lightweight

Answer 379

A. on Explanation/Reference: The Static Persistence (or “on” mode) bundles the links unconditionally and no negotiation protocol is used. In this mode, neither PAgP nor LACP packets are sent or received.

Answer 380

A. NAT pool

Answer 381

A. compare the destination IP address to the IP routing table.

Answer 382

B. 172.28.0.0/16 Explanation/Reference: This question asks about the private ranges of IPv4 addresses. The private ranges of each class of IPv4 are listed below: Class A private IP address ranges from 10.0.0.0 to 10.255.255.255 Class B private IP address ranges from 172.16.0.0 to 172.31.255.255 Class C private IP address ranges from 192.168.0.0 to 192.168.255.255 Only the network 172.28.0.0/16 belongs to the private IP address (of class B).

Answer 383

C. control plane

Answer 384

A. forwarding remote client/server traffic

Answer 385

B. EIGRP E. RIP

Answer 386

A. {“key”:”value”}

Answer 387

B. used to describe structured data that includes arrays Explanation/Reference: JSON data is written as name/value pairs. A name/value pair consists of a field name (in double quotes), followed by a colon, followed by a value: “name”:”Mark” JSON can use arrays. Array values must be of type string, number, object, array, boolean or null.. For example: { “name”:”John”, “age”:30, “cars”:[“Ford”, “BMW”, “Fiat”] }

Answer 388

A. A contract that describes how various components communicate and exchange data with each other.

Answer 389

D. 2004:1:25A4:886F::1 Explanation: An IPv6 address is represented as eight groups of four hexadecimal digits, each group representing 16 bits (two octets). The groups are separated by colons (:). An example of an IPv6 address is 2001:0db8:85a3:0000:0000:8a2e:0370:7334. The leading 0’s in a group can be collapsed using ::, but this can only be done once in an IP address.

Answer 390

C. Option C Explanation/Reference: JSON data is written as name/value pairs. A name/value pair consists of a field name (in double quotes), followed by a colon, followed by a value: “name”:”Mark” JSON can use arrays. Array values must be of type string, number, object, array, boolean or null. For example: { “name”:”John”, “age”:30, “cars”:[“Ford”, “BMW”, “Fiat”] } JSON can have empty object like “taskId”:{}

Answer 391

B. control-plane

Answer 392

A. access ports

Answer 393

C. Cisco Discovery Protocol

Answer 394

D. facilitates communication between the controller and the applications

Answer 395

B. Platinum Explanation/Reference: Cisco Unified Wireless Network solution WLANs support four levels of QoS: Platinum/Voice, Gold/Video, Silver/Best Effort (default), and Bronze/Background.

Answer 396

A. Spanning tree may fail to detect a switching loop in the network that causes broadcast storms. Explanation/Reference: Enabling the PortFast feature causes a switch or a trunk port to enter the STP forwarding-state immediately or upon a linkup event, thus bypassing the listening and learning states. Note: To enable portfast on a trunk port you need the trunk keyword “spanning-tree portfast trunk”

Answer 397

D. 192.168.16.0/27 Explanation/Reference: The destination IP addresses match all four entries in the routing table but the 192.168.16.0/27 has the longest prefix so it will be chosen. This is called the “longest prefix match” rule.

Answer 398

D. physical access control

Answer 399

B. The user enters a user name and password, and then clicks a notification in an authentication app on a mobile device. Explanation/Reference: This is an example of how two-factor authentication (2FA) works: 1. The user logs in to the website or service with their username and password. 2. The password is validated by an authentication server and, if correct, the user becomes eligible for the second factor. 3. The authentication server sends a unique code to the user’s second-factor method (such as a smartphone app). 4. The user confirms their identity by providing the additional authentication for their second-factor method.

Answer 400

B. PortFast Explanation/Reference: PortFast Spanning Tree Portfast causes layer 2 switch interfaces to enter forwarding state immediately, bypassing the listening and learning states. It should be used on ports connected directly to end hosts like servers or workstations. Note: If portfast isn’t enabled, DHCP timeouts can occur while STP converges, causing more problems

Answer 401

A. forwarding

Answer 402

B. forwarding

Answer 403

A. It is a Cisco-proprietary protocol.

Answer 404

D. One functional physical port is needed to pass client traffic. Explanation/Reference: Link aggregation (LAG) is a partial implementation of the 802.3ad port aggregation standard. It bundles all of the controller’s distribution system ports into a single 802.3ad port channel. Restriction for Link aggregation: – LAG requires the EtherChannel to be configured for `mode on’ on both the controller and the Catalyst switch -\> Answer B is not correct. – If the recommended load-balancing method cannot be configured on the Catalyst switch, then configure the LAG connection as a single member link or disable LAG on the controller -\> Answer A is not correct while answer D is correct.

Answer 405

B. Static routes are manually configured by a network administrator, while dynamic routes are automatically learned and adjusted by a routing protocol.

Answer 406

A. applies a one-to-many relationship to internal IP addresses

Answer 407

A. The switch must be in VTP server or transparent mode before you can configure a VLAN

Answer 408

D. Only controller-based networks decouple the control plane and the data plane. Explanation/Reference: Most traditional devices use a distributed architecture, in which each control plane is resided in a networking device. Therefore they need to communicate with each other via messages to work correctly. In contrast to distributed architecture, centralized (or controller-based) architectures centralizes the control of networking devices into one device, called SDN controller -\> Answer D is correct.

Answer 409

A. It is a broadcast IP address.

Answer 410

B. The hypervisor can virtualize physical components including CPU, memory, and storage.

Answer 411

A. It supports VLSM. C. It confines network instability to one area of the network. E. It allows extensive control of routing updates. Explanation/Reference: The OSPF protocol is based on link-state technology, which is a departure from the Bellman-Ford vector based algorithms used in traditional Internet routing protocols such as RIP. OSPF has introduced new concepts such as authentication of routing updates, Variable Length Subnet Masks (VLSM), route summarization, and so forth. OSPF uses flooding to exchange link-state updates between routers. Any change in routing information is flooded to all routers in the network. Areas are introduced to put a boundary on the explosion of link-state updates. Flooding and calculation of the Dijkstra algorithm on a router is limited to changes within an area.

Answer 412

B. establishing neighbor adjacencies

Answer 413

C. UplinkFast

Answer 414

B. 6to4 tunneling

Answer 415

D. Server Virtualization

Answer 416

B. REST API

Answer 417

B. one-to-nearest communication model E. the same address for multiple devices in the group F. delivery of packets to the group interface that is closest to the sending device Explanation: A new address type made specifically for IPv6 is called the Anycast Address. These IPv6 addresses are global addresses, these addresses can be assigned to more than one interface unlike an IPv6 unicast address. Anycast is designed to send a packet to the nearest interface that is a part of that anycast group. The sender creates a packet and forwards the packet to the anycast address as the destination address which goes to the nearest router. The nearest router or interface is found by using the metric of a routing protocol currently running on the network. However in a LAN setting the nearest interface is found depending on the order the neighbors were learned. The anycast packet in a LAN setting forwards the packet to the neighbor it learned about first.

Answer 418

A. to speed up convergence B. to reduce routing overhead E. to confine network instability to single areas of the network.

Answer 419

A. To communicate with other devices on a network, a network device must have a unique MAC address. D. A MAC address contains two main components, the first of which identifies the manufacturer of the hardware and the second of which uniquely identifies the hardware. E. An example of a MAC address is 0A:26:B8:D6:65:90.

Answer 420

A. Speed is a measure of the data rate in bits per second of a given link in the network. D. Availability is a measure of the probability that the network will be available for use when it is required. E. Reliability indicates the dependability of the components that make up the network.

Answer 421

B. Connectivity between VLANs requires a Layer 3 device. D. Each VLAN uses a separate address space. E. A switch maintains a separate bridging table for each VLAN.

Answer 422

A. It drops lower-priority packets before it drops higher-priority packets. D. It can mitigate congestion by preventing the queue from filling up. Explanation/Reference: Weighted Random Early Detection (WRED) is just a congestion avoidance mechanism. WRED drops packets selectively based on IP precedence. Edge routers assign IP precedences to packets as they enter the network. When a packet arrives, the following events occur: 1. The average queue size is calculated. 2. If the average is less than the minimum queue threshold, the arriving packet is queued. 3. If the average is between the minimum queue threshold for that type of traffic and the maximum threshold for the interface, the packet is either dropped or queued, depending on the packet drop probability for that type of traffic. 4. If the average queue size is greater than the maximum threshold, the packet is dropped. WRED reduces the chances of tail drop (when the queue is full, the packet is dropped) by selectively dropping packets when the output interface begins to show signs of congestion (thus it can mitigate congestion by preventing the queue from filling up). By dropping some packets early rather than waiting until the queue is full, WRED avoids dropping large numbers of packets at once and minimizes the chances of global synchronization. Thus, WRED allows the transmission line to be used fully at all times. WRED generally drops packets selectively based on IP precedence. Packets with a higher IP precedence are less likely to be dropped than packets with a lower precedence. Thus, the higher the priority of a packet, the higher the probability that the packet will be delivered (-\> answer A is correct).

Answer 423

B. The router calculates the best backup path to the destination route and assigns it as the feasible successor. C. The router calculates the feasible distance of all paths to the destination route. Explanation/Reference: The reported distance (or advertised distance) is the cost from the neighbor to the destination. It is calculated from the router advertising the route to the network.

Answer 424

A. anycast C. multicast Explanation: IPv6 addresses are classified by the primary addressing and routing methodologies common in networking: unicast addressing, anycast addressing, and multicast addressing. A unicast address identifies a single network interface. The Internet Protocol delivers packets sent to a unicast address to that specific interface. An anycast address is assigned to a group of interfaces, usually belonging to different nodes. A packet sent to an anycast address is delivered to just one of the member interfaces, typically the nearest host, according to the routing protocol’s definition of distance. Anycast addresses cannot be identified easily, they have the same format as unicast addresses, and differ only by their presence in the network at multiple points. Almost any unicast address can be employed as an anycast address. A multicast address is also used by multiple hosts, which acquire the multicast address destination by participating in the multicast distribution protocol among the network routers. A packet that is sent to a multicast address is delivered to all interfaces that have joined the corresponding multicast group.

Answer 425

B. SDKs that support interaction with third-party network equipment D. REST APIs that allow for external applications to interact natively with Cisco DNA Center Explanation/Reference: Cisco DNA Center offers 360-degree extensibility through four distinct types of platform capabilities: + Intent-based APIs leverage the controller and enable business and IT applications to deliver intent to the network and to reap network analytics and insights for IT and business innovation. + Process adapters, built on integration APIs, allow integration with other IT and network systems to streamline IT operations and processes. + Domain adapters, built on integration APIs, allow integration with other infrastructure domains such as data center, WAN, and security to deliver a consistent intent-based infrastructure across the entire IT environment. + SDKs allow management to be extended to third-party vendor’s network devices to offer support for diverse environments.

Answer 426

D. mismatched hello timers and dead timers E. use of the same router ID on both devices

Answer 427

B. interface GigabitEthernet0/0/1 channel-group 10 mode active E. interface port-channel 10 no switchport ip address 172.16.0.1.255.255.255.0

Answer 428

D. channel-group 10 mode desirable E. channel-group 10 mode active

Answer 429

B. task C. playbook

Answer 430

B. JSON E. XML Explanation/Reference: The Application Policy Infrastructure Controller (APIC) REST API is a programmatic interface that uses REST architecture. The API accepts and returns HTTP (not enabled by default) or HTTPS messages that contain JavaScript Object Notation (JSON) or Extensible Markup Language (XML) documents.

Answer 431

A. The device Is assigned to the Global site. B. The device Is placed into the Unmanaged state.

Answer 432

A. Provide uninterrupted forwarding service. D. Ensure timely data transfer between layers. Explanation: Cisco is very clear about the purpose of this layer. Its only role is to forward traffic, the fastest it can. Here you don’t apply any policy, as you must try to reduce the load of the core so it can focus on routing.

Answer 433

A. OSPF area D. OSPf process ID

Answer 434

A. The switch must be running a k9 (crypto) IOS image. B. The ip domain-name command must be configured on the switch.

Answer 435

A. to enable intra-enterprise communication D. to conserve global address space

Answer 436

A. The two routers share a virtual IP address that is used as the default gateway for devices on the LAN. B. The two routers negotiate one router as the active router and the other as the standby router.

Answer 437

A. the native VLAN C. the VTP domain

Answer 438

B. the IP address of the peer to which the clock is synchronized D. whether the clock is synchronized Explanation/Reference: Below is the output of the “show ntp status” command. From this output we learn that R1 has a stratum of 10 and it is getting clock from 10.1.2.1.

Answer 439

C. whether the administrative distance was manually or dynamically configured E. the length of time that a route has been known

Answer 440

C. Policy-derived provisioning of resources D. Providing a ship entry point for resource provisioning

Answer 441

D. Telnet E. SSH

Answer 442

A. Telnet C. HTTP

Answer 443

B. CBWFQ C. PQ Explanation: Type of queuing methods are available:\* First-In-First-Out (FIFO)\* Priority Queuing (PQ)\* Custom Queuing (CQ)\* Weighted Fair Queuing (WFQ)\* Class-Based Weighted Fair Queuing (CBWFQ)\* LowLatency Queuing (LLQ)

Answer 444

A. The two devices must reside in different autonomous systems B. Neighbors must be specifically declared in the configuration of each device

Answer 445

A. EtherChannel provides increased bandwidth by bundling existing FastEthernet or Gigabit Ethernet interfaces into a single EtherChannel. E. EtherChannel allows redundancy in case one or more links in the EtherChannel fail.

Answer 446

B. They determine the optimal path between autonomous systems. C. BGP is the current standard exterior routing protocol.

Answer 447

A. NTP uses UDP over IP. B. Cisco routers can act as both NTP authoritative servers and NTP clients.

Answer 448

A. Defines the network functions that occur at each layer B. Facilitates an understanding of how information travels throughout a network

Answer 449

A. All switches must be configured with the same VTP domain name E. All switches must use the same VTP version.

Answer 450

A. It establishes a static route to the 172.16.3.0 network. E. It uses the default administrative distance.

Answer 451

A. Global addresses start with 2000::/3. D. There is only one loopback address and it is ::1. Explanation: Below is the list of common kinds of IPv6 addresses: Loopback address::1 Link-local addressFE80::/10 Site-local addressFEC0::/10 Global address2000::/3 Multicast addressFF00::/8

Answer 452

A. Enable NTP authentication. D. Specify the IP address of the NTP server. Explanation/Reference: To configure authentication, perform this task in privileged mode: Step 1: Configure an authentication key pair for NTP and specify whether the key will be trusted or untrusted. Step 2: Set the IP address of the NTP server and the public key. Step 3: Enable NTP client mode. Step 4: Enable NTP authentication. Step 5: Verify the NTP configuration.

Answer 453

D. SSID E. Profile name

Answer 454

B. 1 C. 1005 Explanation/Reference: VLAN 1 is a system default VLAN, you can use this VLAN but you cannot delete it. By default VLAN 1 is use for every port on the switch. Standard VLAN range from 1002-1005 it’s Cisco default for FDDI and Token Ring. You cannot delete VLANs 1002-1005. mostly we don’t use VLAN in this range.

Answer 455

A. asychronous routing C. dual-homed branches

Answer 456

D. The root port

Answer 457

C. inside global Explanation/Reference: NAT use four types of addresses: \* Inside local address – The IP address assigned to a host on the inside network. The address is usually not an IP address assigned by the Internet Network Information Center (InterNIC) or service provider. This address is likely to be an RFC 1918 private address. \* Inside global address – A legitimate IP address assigned by the InterNIC or service provider that represents one or more inside local IP addresses to the outside world. \* Outside local address – The IP address of an outside host as it is known to the hosts on the inside network. \* Outside global address – The IP address assigned to a host on the outside network. The owner of the host assigns this address.

Answer 458

D. private

Answer 459

D. man-in-the-middle

Answer 460

A. a list of the available IP addresses in a pool

Answer 461

D. global unicast

Answer 462

C. physical access control

Answer 463

D. unicast messages from a host at a remote site lo a server at headquarters

Answer 464

B. dynamic multipoint VPN

Answer 465

D. AES-256 Explanation/Reference: We can see in this picture we have to type 64 hexadecimal characters (256 bit) for the WPA2 passphrase so we can deduce the encryption is AES-256, not AES-128.

Answer 466

C. flexconnect

Answer 467

C. flexconnect Explanation/Reference: In previous releases, whenever a FlexConnect access point disassociates from a controller, it moves to the standalone mode. The clients that are centrally switched are disassociated. However, the FlexConnect access point continues to serve locally switched clients. When the FlexConnect access point rejoins the controller (or a standby controller), all clients are disconnected and are authenticated again. This functionality has been enhanced and the connection between the clients and the FlexConnect access points are maintained intact and the clients experience seamless connectivity. When both the access point and the controller have the same configuration, the connection between the clients and APs is maintained.

Answer 468

B. The port priority

Answer 469

B. Router IP address Explanation/Reference: In the case of an equal priority, the router with the highest IP address for the respective group is elected as active. Furthermore, if there are more than two routers in the group, the second highest IP address determines the standby router and the other router/routers are in the listen state.

Answer 470

C. 0000.5E00.0101

Answer 471

A. broadband cable access

Answer 472

C. point-to-point

Answer 473

C. distribution system

Answer 474

D. SAE encryption

Answer 475

B. A matching permit statement is too high in the access test C. A matching permit statement is too broadly defined

Answer 476

D. The destination MAC address of the frame is unknown.

Answer 477

A. conserve public IPv4 addressing

Answer 478

D. Accept: application/json Explanation: Accept header is a way for a client to specify the media type of the response content it is expecting and Content-type is a way to specify the media type of request being sent from the client to the server.

Answer 479

D. ip address dhcp

Answer 480

A. Reload the OSPF process. Explanation/Reference: Once an OSPF Router ID selection is done, it remains there even if you remove it or configure another OSPF Router ID. So the least disruptive way is to correct it using the command “clear ip ospf process”.

Answer 481

B. Change the configuration so they both have the same feasible distance C. Change the variance for the path that has a feasible distance of 3072 to 2

CCNA Flashcards

(562 cards)