chapter-5-nilai-100

10
8/18/2019 chapter-5-nilai-100 http://slidepdf.com/reader/full/chapter-5-nilai-100 1/10 Take Assessment - DCompNtwk Chapter 5 - CCNA Discovery: Designing and Supporting Computer Networks (Version !"# Time $emaining: "":":5% Showing & o' Ne)t* +age: , .+rev 1 /hat 0imitations o' the %1" switch prevent it 'rom providing the services needed in the Dis 0ayer3 4t is 0imited to copper connections! 4t does not support oS! 4t does not support voice V6AN capa2i0ity! 4t does not per'orm route summari7ation! 2 $e'er to the e)hi2it! /hich statement is true regarding how the 4S+ router 'i0ters tra''ic3 Tra''ic 'rom the 1!&""!"!& address to any destination on the 4nternet is denied! Tra''ic 'rom any source address entering the 4S+ router inter'ace s"8"8" is permitted! n0y tra''ic with a source address o' 1!&""!"!&89" is a00owed into the 4S+ router inter'a  A00 tra''ic 'rom the 1!&""!"!"8& network can access the 4nternet! Tra''ic 'rom any source address can access the 1!&""!"!"8& network! 3 /hat is a primary 'unction o' a wire0ess 6AN contro00er3 tuning each A+ channe0 'or optima0 coverage providing +o to the wire0ess c0ients distri2uting V6AN in'ormation to the wire0ess c0ients

Transcript of chapter-5-nilai-100

Page 1: chapter-5-nilai-100

8/18/2019 chapter-5-nilai-100

http://slidepdf.com/reader/full/chapter-5-nilai-100 1/10

Take Assessment - DCompNtwk Chapter 5 - CCNA Discovery: Designing andSupporting Computer Networks (Version !"#

Time $emaining: "":":5%

Showing & o' Ne)t* +age:  , .+rev

1 /hat 0imitations o' the %1" switch prevent it 'rom providing the services needed in the Dis0ayer3

4t is 0imited to copper connections!

4t does not support oS!

4t does not support voice V6AN capa2i0ity!

4t does not per'orm route summari7ation!

2

$e'er to the e)hi2it! /hich statement is true regarding how the 4S+ router 'i0ters tra''ic3

Tra''ic 'rom the 1!&""!"!& address to any destination on the 4nternet is denied!Tra''ic 'rom any source address entering the 4S+ router inter'ace s"8"8" is permitted!

n0y tra''ic with a source address o' 1!&""!"!&89" is a00owed into the 4S+ router inter'a

 A00 tra''ic 'rom the 1!&""!"!"8& network can access the 4nternet!

Tra''ic 'rom any source address can access the 1!&""!"!"8& network!

3 /hat is a primary 'unction o' a wire0ess 6AN contro00er3

tuning each A+ channe0 'or optima0 coverage

providing +o to the wire0ess c0ients

distri2uting V6AN in'ormation to the wire0ess c0ients

Page 2: chapter-5-nilai-100

8/18/2019 chapter-5-nilai-100

http://slidepdf.com/reader/full/chapter-5-nilai-100 2/10

serving as the point o' connection 2etween wire0ess c0ients and the wired 6AN

4 A state-'unded co00ege wants to imp0ement Cisco wire0ess 4+ phones 'or emp0oyees to usecampus! The co00ege current0y has on0y wired network device access! /hich two devices mincorporated into the network design to 2est accommodate roaming 'or wire0ess 4+ phones

two!#voice V6AN capa20e switch

autonomous A+

+o switch

Cisco wire0ess 6AN contro00er 

%1" switch with ; &""-<2 ports

0ightweight access points

5 /hen considering converged network designs= it is important to identi'y appropriate service/hat is a concern when preparing a network design to 'it this environment3

2usiness data compensation 'or sensitivity to noise

0ocation and p0acement o' 'irewa00s

voice-0eve0 >ua0ity o' service

security po0icy re>uirements

6/hich two statements are true regarding the 'o00owing e)tended AC63 (Choose two!#

access-list 101 deny tcp 172.16.3.0 0.0.0.255 any eq 20

access-list 101 deny tcp 172.16.3.0 0.0.0.255 any eq 21access-list 101 permit ip any any

?T+ tra''ic originating 'rom network &@!&1!9!"8 is denied!

 A00 tra''ic is imp0icit0y denied!

?T+ tra''ic destined 'or the &@!&1!9!"8 network is denied!

Te0net tra''ic originating on network &@!&1!9!"8 is denied!

/e2 tra''ic originating 'rom &@!&1!9!" is permitted!

7 /hich statement app0ies to a 0arge network with thousands o' nodes3ach wire0ess phone is norma00y in a separate V6AN 'or security reasons!

<u0tip0e 'irewa00s e)ist throughout the access 0ayer 'or ma)imum security protection!

?irewa00s cannot 2e imp0emented in the mu0ti0ayer switches and routers!

4ntrusion detection is more 0ike0y to 2e per'ormed 2y a separate device rather than intega switch or router!

8/hat type o' /AN service is ?rame $e0ay3

dedicated

ce00 switched

packet switched

Page 3: chapter-5-nilai-100

8/18/2019 chapter-5-nilai-100

http://slidepdf.com/reader/full/chapter-5-nilai-100 3/10

circuit switched

9

$e'er to the e)hi2it! /hat is an advantage o' having two 0inks connected 2etween the twoshown3

provides redundancy in case one o' the switches 'ai0s

provides connectivity to Switch& when the 0ink to the server 'ai0s

provides connectivity when one o' the connections 2etween the switches 'ai0s

provides power to the other switch when the other switch has 0ost AC power 

10/hat is integrated into a Cisco 4+ phone to reduce the num2er o' ports needed in the wiri

hu2

router 

switch

'irewa00 app0iance

11 sing e)panda20e= modu0ar network devices is a key e0ement o' what network design crit

avai0a2i0ity

per'ormance

sca0a2i0ity

security

12 A network designer is eva0uating the network security imp0ementation 'or an organi7ation!designer recommends adding network security devices in 'ront o' the server 'arm= a0thougsecurity devices have 2een dep0oyed in the nterprise dge 'or two years! /hat type o' a2e e''ective0y prevented with this recommendation3

virus attack

interna0 attack4nternet attack

phishing attack

13 /hich two 'actors shou0d 2e considered when designing a wire0ess 6AN that provides searoaming capa2i0ities3 (Choose two!#

use o' a wire0ess contro00er to manage 4+ addressing

type o' routing protoco0s

0ocation o' e)isting wired c0ients

coverage

Page 4: chapter-5-nilai-100

8/18/2019 chapter-5-nilai-100

http://slidepdf.com/reader/full/chapter-5-nilai-100 4/10

position o' <D?

14 A company 0ists this e>uipment in their network design:• Two Cata0yst 5"9 6ayer 9 switches

• ne 55"" security app0iance 'irewa00

• Two Cata0yst 15"% switches• Two 0ightweight access points

• Two Cata0yst %1" switches

/hich two types o' devices wou0d 2e appropriate to use at the access 0ayer to provide enconnectivity3 (Choose two!#

Cata0yst 5"9 switches

Cisco &;& router

Cata0yst 15"% switches

0ightweight access points

Cata0yst %1" switches

15 /hich network design process identi'ies the 2est 0ocations to p0ace access points3

site survey

risk assessment

sca0a2i0ity design

network protoco0 ana0ysis

Take Assessment - DCompNtwk Chapter 5 - CCNA Discovery: Designing andSupporting Computer Networks (Version !"#

Time $emaining: "":":5%

Top o' ?orm

Showing & o' Ne)t* +age:  , .+rev

Bottom o' ?orm

1 /hat 0imitations o' the %1" switch prevent it 'rom providing the services needed in the Dis0ayer3

4t is 0imited to copper connections!

4t does not support oS!

4t does not support voice V6AN capa2i0ity!

4t does not per'orm route summari7ation!

2

Page 5: chapter-5-nilai-100

8/18/2019 chapter-5-nilai-100

http://slidepdf.com/reader/full/chapter-5-nilai-100 5/10

$e'er to the e)hi2it! /hich statement is true regarding how the 4S+ router 'i0ters tra''ic3

Tra''ic 'rom the 1!&""!"!& address to any destination on the 4nternet is denied!

Tra''ic 'rom any source address entering the 4S+ router inter'ace s"8"8" is permitted!

n0y tra''ic with a source address o' 1!&""!"!&89" is a00owed into the 4S+ router inter'a

 A00 tra''ic 'rom the 1!&""!"!"8& network can access the 4nternet!

Tra''ic 'rom any source address can access the 1!&""!"!"8& network!

3 /hat is a primary 'unction o' a wire0ess 6AN contro00er3

tuning each A+ channe0 'or optima0 coverage

providing +o to the wire0ess c0ients

distri2uting V6AN in'ormation to the wire0ess c0ients

serving as the point o' connection 2etween wire0ess c0ients and the wired 6AN

4 A state-'unded co00ege wants to imp0ement Cisco wire0ess 4+ phones 'or emp0oyees to usecampus! The co00ege current0y has on0y wired network device access! /hich two devices m

incorporated into the network design to 2est accommodate roaming 'or wire0ess 4+ phonestwo!#

voice V6AN capa20e switch

autonomous A+

+o switch

Cisco wire0ess 6AN contro00er 

%1" switch with ; &""-<2 ports

0ightweight access points

Page 6: chapter-5-nilai-100

8/18/2019 chapter-5-nilai-100

http://slidepdf.com/reader/full/chapter-5-nilai-100 6/10

5 /hen considering converged network designs= it is important to identi'y appropriate service/hat is a concern when preparing a network design to 'it this environment3

2usiness data compensation 'or sensitivity to noise

0ocation and p0acement o' 'irewa00s

voice-0eve0 >ua0ity o' servicesecurity po0icy re>uirements

6/hich two statements are true regarding the 'o00owing e)tended AC63 (Choose two!#

access-list 101 deny tcp 172.16.3.0 0.0.0.255 any eq 20access-list 101 deny tcp 172.16.3.0 0.0.0.255 any eq 21access-list 101 permit ip any any

?T+ tra''ic originating 'rom network &@!&1!9!"8 is denied!

 A00 tra''ic is imp0icit0y denied!

?T+ tra''ic destined 'or the &@!&1!9!"8 network is denied!Te0net tra''ic originating on network &@!&1!9!"8 is denied!

/e2 tra''ic originating 'rom &@!&1!9!" is permitted!

7 /hich statement app0ies to a 0arge network with thousands o' nodes3

ach wire0ess phone is norma00y in a separate V6AN 'or security reasons!

<u0tip0e 'irewa00s e)ist throughout the access 0ayer 'or ma)imum security protection!

?irewa00s cannot 2e imp0emented in the mu0ti0ayer switches and routers!4ntrusion detection is more 0ike0y to 2e per'ormed 2y a separate device rather than intega switch or router!

8/hat type o' /AN service is ?rame $e0ay3

dedicated

ce00 switched

packet switched

circuit switched

9

$e'er to the e)hi2it! /hat is an advantage o' having two 0inks connected 2etween the twoshown3

provides redundancy in case one o' the switches 'ai0s

provides connectivity to Switch& when the 0ink to the server 'ai0s

Page 7: chapter-5-nilai-100

8/18/2019 chapter-5-nilai-100

http://slidepdf.com/reader/full/chapter-5-nilai-100 7/10

provides connectivity when one o' the connections 2etween the switches 'ai0s

provides power to the other switch when the other switch has 0ost AC power 

10/hat is integrated into a Cisco 4+ phone to reduce the num2er o' ports needed in the wiri

hu2router 

switch

'irewa00 app0iance

11 sing e)panda20e= modu0ar network devices is a key e0ement o' what network design crit

avai0a2i0ity

per'ormance

sca0a2i0ity

security

12 A network designer is eva0uating the network security imp0ementation 'or an organi7ation!designer recommends adding network security devices in 'ront o' the server 'arm= a0thougsecurity devices have 2een dep0oyed in the nterprise dge 'or two years! /hat type o' a2e e''ective0y prevented with this recommendation3

virus attack

interna0 attack

4nternet attackphishing attack

13 /hich two 'actors shou0d 2e considered when designing a wire0ess 6AN that provides searoaming capa2i0ities3 (Choose two!#

use o' a wire0ess contro00er to manage 4+ addressing

type o' routing protoco0s

0ocation o' e)isting wired c0ients

coverage

position o' <D?

14 A company 0ists this e>uipment in their network design:• Two Cata0yst 5"9 6ayer 9 switches

• ne 55"" security app0iance 'irewa00

• Two Cata0yst 15"% switches

• Two 0ightweight access points

• Two Cata0yst %1" switches

/hich two types o' devices wou0d 2e appropriate to use at the access 0ayer to provide en

Page 8: chapter-5-nilai-100

8/18/2019 chapter-5-nilai-100

http://slidepdf.com/reader/full/chapter-5-nilai-100 8/10

connectivity3 (Choose two!#

Cata0yst 5"9 switches

Cisco &;& router

Cata0yst 15"% switches

0ightweight access pointsCata0yst %1" switches

15 /hich network design process identi'ies the 2est 0ocations to p0ace access points3

site survey

risk assessment

sca0a2i0ity design

network protoco0 ana0ysis/hat is a 'unction o' the access 0ayer in the Cisco three-0ayer hierarchica0 internetworking mod

to provide oS c0assi'ication and marking

to imp0ement a 'ast-converging routing protoco0

to use routed interconnections 2etween devices

to aggregate tra''ic and per'orm route summari7ation

17/hich ru0e shou0d 2e 'o00owed when imp0ementing the security re>uirements o' a network

 A0ways use a common security p0an 'or a00 2usiness needs!

 As standard practice= 0ower access restrictions 'or users i' cost is too high! Avoid reducing security in order to add additiona0 network capa2i0ities!

/hen possi20e= imp0ement an 4DS to protect users 'rom spam!

18 /hat are three 'eatures o' a Cata0yst %1" switch3 (Choose three!#

network 0ayer 'unctiona0ity

redundant power avai0a2i0ity

route summari7ation

SN<+

switch c0ustering

inter-V6AN routing

19

Page 9: chapter-5-nilai-100

8/18/2019 chapter-5-nilai-100

http://slidepdf.com/reader/full/chapter-5-nilai-100 9/10

$e'er to the e)hi2it! The 2ranch o''ice needs constant access to the servers in the enterprihead>uarters! There'ore= a 2ackup ?rame $e0ay 0ink is added! A network administrator isthe routers in the 2ranch o''ice to make sure that when the 2ackup ?rame $e0ay 0ink is usthe tra''ic to access the enterprise head>uarters is a00owed! /hich statement is true a2outrouting con'iguration on 2ranch o''ice edge routers3

The command ip route "!"!"!" "!"!"!" seria0 "8" 5" shou0d 2e con'igured on B!

The command ip route &;!&"@!"!" 55!55!"!" seria0 "8" 5" shou0d 2e con'igured on

The command ip route &;!&"@!"!" 55!55!"!" seria0 "8" 5" shou0d 2e con'igured on

The command ip route &%!&95!5"!" 55!55!55!" seria0 "8" 5" shou0d 2e con'igure

20  A network designer is se0ecting a /AN techno0ogy 'or connections 2etween the head>uartorgani7ation and its 2ranch o''ices! 4n this conte)t= what is one advantage o' choosing ?raover a T& 0ine3

more secure

'0e)i20e 2andwidth

shared media across the 0ink

e''iciency with 'i)ed 0ength packet si7e

21/hich three design re>uirements are imp0emented at the access 0ayer3 (Choose three!#

+o

V6ANs

high-density routing

packet 'i0tering

rapid0y converging routing protoco0s

oS tra''ic c0assi'ication and marking

Page 10: chapter-5-nilai-100

8/18/2019 chapter-5-nilai-100

http://slidepdf.com/reader/full/chapter-5-nilai-100 10/10

22  An automo2i0e sa0es company is esta20ishing a new= sma00 sa0es showroom in a downtownupdate the inventory data2ase= the new sa0es o''ice wi00 need a /AN connection to the hethat is 0ocated in the su2ur2an area! The /AN connection shou0d 2e around a <28s con/hich /AN service wi00 provide the most economica0 approach to meet the re>uirement3

DS6

 AT<

T& 0ine

?rame $e0ay

23/hat characteristic in a routing protoco0 a00ows it to support the network design criteria 'oravai0a2i0ity3

C4D$ support

'ast convergence

timed updates

V6S< support

24 /hen app0ying network security= what security measure shou0d 2e imp0emented 'irst3

securing the network devices

imp0ementing the 'irewa00s or 'i0ters at the enterprise edge

app0ying security to resources accessed 2y interna0 users

app0ying AC6s to the inter'aces o' the routers in the interna0 network

25/hat characteristic o' a network supports high avai0a2i0ity to provide the %%!%%% uptimere>uirement3

V+Ns

high-2andwidth path to servers

redundancy

wire0ess management