ICND1 - GRATIS EXAM · PDF fileICND1 QUESTION 1 IPv6 unicast routing is running on the Corp...

ICND1

Number: 100-101Passing Score: 800Time Limit: 120 minFile Version: 1.0

http://www.gratisexam.com/

This exam is a collection of questions from todd lammle book and various other question

Created By A.Ghieth

[email protected]

if you have any questions please feel free to contact me :-D

Sections1. General2. Internetworking3. Ethernet Networking and Data4. Introduction to TCP/IP5. Easy Subnetting6. VLSMs, Summarization, and7. Cisco’s Internetworking Operating8. Managing a Cisco Internetwork9. IP Routing10.Open Shortest Path First (OSPF)11.Layer 2 Switching12.VLANs and InterVLAN Routing13.Security14.Network Address Translation15. Internet Protocol Version 6 (IPv6)16.Operation of IP Data Networks17.LAN Switching Technologies18. IP addressing (IPv4 / IPv6)19. IP Routing Technologies20. IP Services21.Network Device Security22.Troubleshooting

ICND1

QUESTION 1IPv6 unicast routing is running on the Corp router. Which of the following addresses would showup with the show ipv6 int brief command?Corp#sh int f0/0FastEthernet0/0 is up, line protocol is upHardware is AmdFE, address is 000d.bd3b.0d80 (bia 000d.bd3b.0d80)[output cut]

A. FF02::3c3d:0d:bdff:fe3b:0d80B. FE80::3c3d:2d:bdff:fe3b:0d80C. FE80::3c3d:0d:bdff:fe3b:0d80D. FE80::3c3d:2d:ffbd:3bfe:0d80

Correct Answer: BSection: GeneralExplanation

Explanation/Reference:This can be a hard question if you don’t remember to invert the 7th bit of the first octet in theMAC address! Always look for the 7th bit when studying for the CCENT/CCNA and when using EUI-64, invert it. The EUI-64 autoconfiguration then inserts an FF:FE in the middle of the 48-bit MACaddress to create a unique IPv6 address.

QUESTION 2A host sends a type of NDP message providing the MAC address that was requested.Which typeof NDP was sent?

A. NAB. RSC. RAD. NS

Correct Answer: ASection: GeneralExplanation

Explanation/Reference:The NDP neighbor advertisement (NA) contains the MAC address.A neighbor solicitation(NS)was initially sent asking for the MAC address

QUESTION 3Each field in an IPv6 address is how many bits long?


A. 4B. 8C. 16

D. 32E. 128

Correct Answer: CSection: GeneralExplanation

Explanation/Reference:Each field in an IPv6 address is 16 bits long. An IPv6 address is a total of 128 bits

QUESTION 4To enable OSPFv3, which of the following would you use?

A. Router(config-if)#ipv6 ospf 10 area 0.0.0.0B. Router(config-if)#ipv6 router rip 1C. Router(config)#ipv6 router eigrp 10D. Router(config-rtr)#no shutdownE. Router(config-if)#ospf ipv6 10 area 0


Explanation/Reference:A. To enable OSPFv3, you enable the protocol at the interface level, as with RIPng. Thecommandstring is ipv6 ospf process-id area area-id.

QUESTION 5What does the command routerA(config)#linecons0 allow you to perform next?

A. Set the Telnet passwordB. Shut down the router.C. Set your console password.D. Disable console connections.


Explanation/Reference:C. The command line console 0 places you at a prompt where you can then set yourconsole user-mode password. See Chapter 6 for more information.

QUESTION 6Which two statements describe the IP address 10.16.3.65/23? (Choose two.)

A. The subnet address is 10.16.3.0 255.255.254.0.B. The lowest host address in the subnet is 10.16.2.1 255.255.254.0.C. The last valid host address in the subnet is 10.16.2.254 255.255.254.0.D. The broadcast address of the subnet is 10.16.3.255 255.255.254.0.E. The network is not subnetted

Correct Answer: BD

Section: GeneralExplanation

Explanation/Reference:B, D. The mask 255.255.254.0 (/23) used with a Class A address means that there are15 subnetbits and 9 host bits. The block size in the third octet is 2 (256 – 254). So this makes thesubnets in theinteresting octet 0, 2, 4, 6, etc., all the way to 254. The host 10.16.3.65 is in the 2.0subnet. The nextsubnet is 4.0, so the broadcast address for the 2.0 subnet is 3.255. The valid hostaddresses are 2.1through 3.254.

QUESTION 7On which interface do you configure an IP address for a switch?

A. int fa0/0B. int vty 0 15C. int vlan 1D. int s/0/0


Explanation/Reference:C. The IP address is configured under a logical interface, called a management domainor VLAN 1.

QUESTION 8Which of the following is the valid host range for the subnet on which the IP address192.168.168.188 255.255.255.192 resides?

A. 192.168.168.129–190B. 192.168.168.129–191C. 192.168.168.128–190D. 192.168.168.128–192


Explanation/Reference:A. 256 – 192 = 64, so 64 is our block size. Just count in increments of 64 to find oursubnet: 64 +64 = 128. 128 + 64 = 192. The subnet is 128, the broadcast address is 191, and thevalid host range isthe numbers in between, or 129–190.

QUESTION 9Which of the following is considered to be the inside host’s address after translation?

A. Inside localB. Outside local

C. Inside globalD. Outside global


Explanation/Reference:C. An inside global address is considered to be the IP address of the host on the privatenetworkafter translation.

QUESTION 10Your inside locals are not being translated to the inside global addresses. Which of thefollowing commands will show you if your inside globals are allowed to use the NATpool?

ip nat pool Corp 198.18.41.129 198.18.41.134 netmask 255.255.255.248ip nat inside source list 100 int pool Corp overload

A. debug ip natB. show access-listC. show ip nat translationD. show ip nat statistics


Explanation/Reference:B. Once you create your pool, the command ip nat inside source must be used to saywhichinside locals are allowed to use the pool. In this question, we need to see if access list100 isconfigured correctly, if at all, so show access-list is the best answer.

QUESTION 11How many collision domains are created when you segment a network with a 12-portswitch?

A. 1B. 5C. 12D. 2


Explanation/Reference:C. Layer 2 switching creates individual collision domains per port.

QUESTION 12Which of the following commands will allow you to set your Telnet password on a Ciscorouter?

A. line telnet 0 4B. line aux 0 4C. line vty 0 4D. line con 0


Explanation/Reference:C. The command line vty 0 4 places you in a prompt that will allow you to set or changeyourTelnet password

QUESTION 13Which router command allows you to view the entire contents of all access lists?

A. show all access-listsB. show access-listsC. show ip interfaceD. show interface


Explanation/Reference:B. To see the contents of all access lists, use the show access-lists command.

QUESTION 14What does a VLAN do?

A. Acts as the fastest port to all serversB. Provides multiple collision domains on one switch portC. Breaks up broadcast domains in a layer 2 switch internetworkD. Provides multiple broadcast domains within a single collision domain


Explanation/Reference:C. VLANs break up broadcast domains at layer 2

QUESTION 15If you wanted to delete the configuration stored in NVRAM, what would you type?

A. erase startupB. erase nvramC. delete nvramD. erase running

Correct Answer: A

Section: GeneralExplanation

Explanation/Reference:A. The command erase startup-config deletes the configuration stored in NVRAM

QUESTION 16Which protocol is used to send a destination network unknown message back tooriginatinghosts?

A. TCPB. ARPC. ICMPD. BootP


Explanation/Reference:C. ICMP is the protocol at the Network layer that is used to send messages back to anoriginatingrouter.

QUESTION 17Which class of IP address provides 15 bits available for subnetting?

A. AB. BC. CD. D


Explanation/Reference:A. Class A addressing provides 22 bits for host addressing, Class B provides 16 bits, butonly 14are available for subnetting, Class C provides only 6 bits for subnetting.

QUESTION 18There are three possible routes for a router to reach a destination network. The firstroute isfrom OSPF with a metric of 782. The second route is from RIPv2 with a metric of 4. Thethird isfrom EIGRP with a composite metric of 20514560. Which route will be installed by therouter in itsrouting table?

A. RIPv2B. EIGRPC. OSPFD. All three

E. None


Explanation/Reference:B. Only the EIGRP route will be placed in the routing table because EIGRP has thelowestadministrative distance (AD), and that is always used before metrics.

QUESTION 19Which one of the following is true regarding VLANs?

A. Two VLANs are configured by default on all Cisco switches.B. VLANs only work if you have a complete Cisco switched internetwork. No off-brand

switches are allowed.C. You should not have more than 10 switches in the same VTP domain.D. VTP is used to send VLAN information to switches in a configured VTP domain.

Correct Answer: DSection: GeneralExplanation

Explanation/Reference:D. Switches do not propagate VLAN information by default; you must configure the VTPdomainfor this to occur. VLAN Trunking Protocol (VTP) is used to propagate VLAN informationacross atrunk link.

QUESTION 20Which two of the following commands will place network 10.2.3.0/24 into area 0?(Choosetwo.)

A. router eigrp 10B. router ospf 10C. router ripD. network 10.0.0.0E. network 10.2.3.0 255.255.255.0 area 0F. network 10.2.3.0 0.0.0.255 area0G. network 10.2.3.0 0.0.0.255 area 0

Correct Answer: BGSection: GeneralExplanation

Explanation/Reference:B, G. To enable OSPF, you must first start OSPF using a process ID. The number isirrelevant;just choose a number from 1 to 65,535 and you’re good to go. After you start the OSPFprocess, you

must configure interfaces on which to activate OSPF using the network command withwildcards andspecification of an area. Option F is wrong because there must be a space after theparameter areaand before you list the area number

QUESTION 21How many broadcast domains are created when you segment a network with a 12-portswitch?

A. 1B. 2C. 4D. 8E. 12F. 32


Explanation/Reference:A. By default, switches break up collision domains on a per-port basis but are one largebroadcast domain.

QUESTION 22If routers in a single area are configured with the same priority value, what value does arouteruse for the OSPF router ID in the absence of a loopback interface?

A. The lowest IP address of any physical interfaceB. The highest IP address of any physical interfaceC. The lowest IP address of any logical interfaceD. The highest IP address of any logical interface


Explanation/Reference:B. At the moment of OSPF process startup, the highest IP address on any activeinterface will bethe router ID (RID) of the router. If you have a loopback interface configured (logicalinterface), thenthat will override the interface IP address and become the RID of the routerautomatically.

QUESTION 23What protocols are used to configure trunking on a switch? (Choose two.)


A. VLAN Trunking ProtocolB. VLANC. 802.1QD. ISL

Correct Answer: CDSection: GeneralExplanation

Explanation/Reference:C, D. VTP is not right because it has nothing to do with trunking except that it sendsVLANinformation across a trunk link. 802.1q and ISL encapsulations are used to configuretrunking on aport

QUESTION 24What is a stub network?

A. A network with more than one exit pointB. A network with more than one exit and entry pointC. A network with only one entry and no exit pointD. A network that has only one entry and exit point

Correct Answer: DSection: GeneralExplanation

Explanation/Reference:D. Stub networks have only one connection to an internetwork. Default routes should beset on astub network or network loops may occur; however, there are exceptions to this rule

QUESTION 25Where is a hub specified in the OSI model?

A. Session layerB. Physical layerC. Data Link layerD. Application layer


Explanation/Reference:

B. Hubs regenerate electrical signals, which are specified at the Physical layer.

QUESTION 26What are the two main types of access control lists (ACLs)? (Choose two.)

A. StandardB. IEEEC. ExtendedD. Specialized

Correct Answer: ACSection: GeneralExplanation

Explanation/Reference:A, C. Standard and extended access control lists (ACLs) are used to configure securityon arouter

QUESTION 27Which of the following is the best summarization of the following networks:192.168.128.0through 192.168.159.0?

A. A. 192.168.0.0/24B. B. 192.168.128.0/16C. C. 192.168.128.0/19D. D. 192.168.128.0/20


Explanation/Reference:C. If you start at 192.168.128.0 and go through 192.168.159.0, you can see this is ablock of 32 inthe third octet. Since the network address is always the first one in the range, thesummary address is192.168.128.0. What mask provides a block of 32 in the third octet? The answer is255.255.224.0, or/19.

QUESTION 28What command is used to create a backup configuration?

A. A. copy running backupB. B. copy running-config startup-configC. C. config memD. D. wr net



B. The command to back up the configuration on a router is copy running-configstartupconfig.

QUESTION 291000Base-T is which IEEE standard?

A. A. 802.3FB. B. 802.3zC. C. 802.3abD. D. 802.3ae


Explanation/Reference:C. IEEE 802.3ab is the standard for 1 Gbps on twisted-pair.

QUESTION 30Which protocol does DHCP use at the Transport layer?

A. A. IPB. B. TCPC. C. UDPD. D. ARP


Explanation/Reference:C. User Datagram Protocol is a connection network service at the Transport layer, andDHCPuses this connectionless service

QUESTION 31If your router is facilitating a CSU/DSU, which of the following commands do you need touse toprovide the router with a 64000 bps serial link?

A. A. RouterA(config)#bandwidth 64B. B. RouterA(config-if)#bandwidth 64000C. C. RouterA(config)#clockrate 64000D. D. RouterA(config-if)#clock rate 64E. E. RouterA(config-if)#clock rate 64000

Correct Answer: ESection: GeneralExplanation

Explanation/Reference:E. The clock rate command is two words, and the speed of the line is in bits per second(bps).

QUESTION 32

Which command is used to determine if an access list is enabled on a particularinterface?

A. A. show access-listsB. B. show interfaceC. C. show ip interfaceD. D. show interface access-lists


Explanation/Reference:C. The show ip interface command will show you if any interfaces have an outbound orinbound access list set.

QUESTION 33Which of the following statements is true with regard to ISL and 802.1q?

A. 802.1q encapsulates the frame with control information; ISL inserts an ISL field alongwith tag control information.

B. 802.1q is Cisco proprietary.C. ISL encapsulates the frame with control information; 802.1q inserts an 802.1q field

along with tag control information.D. ISL is a standard.


Explanation/Reference:C. Unlike ISL, which encapsulates the frame with control information, 802.1q inserts an802.1qfield along with tag control information.

QUESTION 34The protocol data unit (PDU) encapsulation is completed in which order?

A. A. Bits, frames, packets, segments, dataB. B. Data, bits, segments, frames, packetsC. C. Data, segments, packets, frames, bitsD. D. Packets, frames, bits, segments, data


Explanation/Reference:C. The PDU encapsulation method defines how data is encoded as it goes through eachlayer ofthe TCP/IP model. Data is segmented at the Transport later, packets created at theNetwork layer,frames at the Data Link layer, and finally, the Physical layer encodes the 1s and 0s into adigital

signal.

QUESTION 35Based on the configuration shown below, what statement is true?

S1(config)#ip routingS1(config)#int vlan 10S1(config-if)#ip address 192.168.10.1 255.255.255.0S1(config-if)#int vlan 20S1(config-if)#ip address 192.168.20.1 255.255.255.0

A. A. This is a multilayer switch.B. B. The two VLANs are in the same subnet.C. C. Encapsulation must be configured.D. D. VLAN 10 is the management VLAN.


Explanation/Reference:A. With a multilayer switch, enable IP routing and create one logical interface for eachVLANusing the interface vlan number command and you’re now doing inter-VLAN routing onthebackplane of the switch!

QUESTION 36Which of the following statements is/are true with regard to the device HUB? (Choose allthat apply.)

A. It includes one collision domain and one broadcast domainB. It includes one collision domain and 10 broadcast domainsC. It includes 10 collision domains and one broadcast domainD. It includes one collision domain and 10 broadcast domainsE. It includes 10 collision domains and 10 broadcast domains

Correct Answer: ASection: InternetworkingExplanation

Explanation/Reference:A. hub and hubs place all ports in the same broadcast domain and thesame collision domain.

QUESTION 37With respect to the OSI model, which of the following are correct statements about PDUs?

A. A segment contains IP addresses.B. A packet contains IP addresses.C. A segment contains MAC addresses.D. A packet contains MAC addresses.

Correct Answer: BSection: InternetworkingExplanation

Explanation/Reference:B. The contents of a protocol data unit (PDU) depend on the PDU as they are created inaspecific order and their contents are based on that order. A packet will contain IPaddresses but notMAC addresses as MAC addresses are not present until the PDU becomes a frame.

QUESTION 38You are the Cisco administrator for your company. A new branch office is opening and you are selecting thenecessary hardware to support the network. There will be two groups of computers, each organized bydepartment. The Sales group computers will be assigned IP addresses ranging from 192.168.1.2 to192.168.1.50. The Accounting group will be assigned IP addresses ranging from 10.0.0.2 to 10.0.0.50.What type of device should you select to connect the two groups of computers so that data communicationcan occur?

A. HubB. SwitchC. RouterD. Bridge

Correct Answer: CSection: InternetworkingExplanation

Explanation/Reference:C. You should select a router to connect the two groups. When computers are indifferentsubnets, as these two groups are, you will require a device that can make decisionsbased on IPaddresses. Routers operate at layer 3 of the Open Systems Interconnect (OSI) modeland makedata-forwarding decisions based on layer 3 networking information, which are IPaddresses. Theycreate routing tables that guide them in forwarding traffic out of the proper interface tothe propersubnet.

QUESTION 39The most effective way to mitigate congestion on a LAN would be to__________________?

A. Upgrade the network cardsB. Change the cabling to CAT 6C. Replace the hubs with switchesD. Upgrade the CPUs in the routers


Explanation/Reference:C. Replacing the hub with a switch would reduce collisions and retransmissions whichwouldhave the most impact on reducing congestion.

QUESTION 40You need to provide network connectivity to 150 client computers that will reside in the same subnetwork, and each client computer must be allocated dedicated bandwidth. Which device should you

use to accomplish the task?



Explanation/Reference:B. You should use a switch to accomplish the task in this scenario. A switch is used toprovidededicated bandwidth to each node by eliminating the possibility of collisions on theswitch portwhere the node resides. Switches work at layer 2 in the Open System Interconnection(OSI) modeland perform the function of separating collision domains.

QUESTION 41Which of the following is an example of a routed protocol?

A. EIGRPB. IPC. OSPFD. BGP


Explanation/Reference:B. Protocols used to support data traffic are called routed protocols and some keyexamples of them include IP and IPv6.

QUESTION 42Which of the following is NOT a function carried out on the Application layer of the OSImodel?

A. emailB. data translation and code formattingC. file transfersD. client/server processes


Explanation/Reference:B. Data translation and code formatting occur on the Presentation layer of the OSImodel.

QUESTION 43Which of the following layers of the OSI model was later subdivided into two layers?

A. PresentationB. Transport

C. Data LinkD. Physical


Explanation/Reference:C. The IEEE Ethernet Data Link layer has two sublayers, the Media Access Control(MAC)and the Logical Link Control (LLC).

QUESTION 44An example of a device that operates on the physical layer is a ____________.



Explanation/Reference:A. Hubs operate on the Physical Layer as they have no intelligence and send all traffic inalldirections

QUESTION 45Which of the following is NOT a benefit of using a reference model?

A. divides the network communication process into smaller and simpler componentsB. encourages industry standardizationC. enforces consistency across vendorsD. allows various types of network hardware and software to communicate


Explanation/Reference:C. While it is true that the OSI model’s primary purpose is to allow different vendors’networks to interoperate, there is no requirement that any vendor follows the model.

QUESTION 46Which of the following statements is not true with regard to routers?

A. They forward broadcasts by defaultB. They can filter the network based on Network layer informationC. They perform path selectionD. They perform packet switching



A. Routers by default do NOT forward broadcasts.

QUESTION 47Switches break up _______________ domains and routers break up _____________ domains.

A. broadcast, broadcastB. collision, collisionC. collision, broadcastD. broadcast, collision


Explanation/Reference:C. Switches create separate collision domains within a single broadcast domain. Routersprovide a separate broadcast domain for each interface.

QUESTION 48Which of the following layers of the OSI model is not involved in defining how the applicationswithin the end stations will communicate with each other as well as with users?

A. TransportB. ApplicationC. PresentationD. Session


Explanation/Reference:A. The top three layers define how the applications within the end stations willcommunicatewith each other as well as with users.

QUESTION 49Which if the following is the ONLY device that operates at all layers of the OSI model?

A. Network hostB. SwitchC. RouterD. Bridge


Explanation/Reference:A. The following network devices operate at all seven layers of the OSI model: networkmanagement stations (NMSs), gateways (not default gateways), servers and networkhosts.

QUESTION 50_____________on an Ethernet network is the retransmission delay that’s enforced when acollision occurs.

A. Backoff

B. Carrier senseC. Forward delayD. Jamming

Correct Answer: ASection: Ethernet Networking and DataExplanation

Explanation/Reference:A. Back-off on an Ethernet network is the retransmission delay that’s enforced when acollisionoccurs. When that happens, a host will only resume transmission after the forced timedelay hasexpired. Keep in mind that after the backoff has elapsed, all stations have equal priorityto transmitdata.

QUESTION 51In the Ethernet frame, what is the function of the section labeled “FCS”?

A. Allows the receiving devices to lock the incoming bit stream.B. Error detectionC. Identifies the upper-layer protocolD. Identifies the transmitting device

Correct Answer: BSection: Ethernet Networking and DataExplanation

Explanation/Reference:B. FCS is a field at the end of the frame that’s used to store the cyclic redundancy check(CRC)answer. The CRC is a mathematical algorithm that’s run when each frame is built basedon the datain the frame. When a receiving host receives the frame and runs the CRC, the answershould be thesame. If not, the frame is discarded, assuming errors have occurred.

QUESTION 52The contention method used by Ethernet is called ____________.

A. Token passingB. CSMA/CDC. PollingD. CSMA/CA


Explanation/Reference:B. Ethernet networking uses a protocol called Carrier Sense Multiple Access withCollisionDetection (CSMA/CD), which helps devices share the bandwidth evenly, whilepreventing twodevices from transmitting simultaneously on the same network medium

QUESTION 53In which if the following situations can you not use full-duplex?

A. With a connection from a switch to a switchB. With a connection from a router to a routerC. With a connection from a host to a hostD. With a connection from a host to a hub

Correct Answer: DSection: Ethernet Networking and DataExplanation

Explanation/Reference:D. Hubs are not capable of providing a full-duplex connection.

QUESTION 54When the I/G bit in a MAC address is set to 1 the transmission is ____________. (Choose all thatapply.)

A. UnicastB. BroadcastC. MulticastD. Anycast

Correct Answer: BCSection: Ethernet Networking and DataExplanation

Explanation/Reference:B, C. The high-order bit is the Individual/Group (I/G) bit. When it has a value of 0, we canassume that the address is the MAC address of a device and that it may well appear inthe sourceportion of the MAC header. When it’s a 1, we can assume that the address representseither abroadcast or multicast address in Ethernet.

QUESTION 55When configuring a terminal emulation program which of the following is an incorrect setting?

A. Bit rate: 9600B. Parity: NoneC. Flow control: NoneD. Data bits: 1


Explanation/Reference:D. When you set up the connection, use these settings:Bits per sec: 9600Data bits: 8Parity: noneStop bits: 1Flow control: none

QUESTION 56Which part of a MAC address indicates whether the address is a locally or globally

administered address?

A. FCSB. I/G bitC. OUID. U/L bit


Explanation/Reference:D. When set to 0, this bit represents a globally administered address, as by the IEEE,but whenit’s a 1, it represents a locally governed and administered address.

QUESTION 57Which of the following is not one of the actions taken in the operation of CSMA/CD when acollision occurs?

A. A jam signal informs all devices that a collision occurred.B. The collision invokes a random backoff algorithm on the systems involved in the collision.C. Each device on the Ethernet segment stops transmitting for a short time until their backoff

timers expire.D. All hosts have equal priority to transmit after the timers have expired.


Explanation/Reference:B. The collision will invoke a back-off algorithm on all systems, not just the ones involvein thecollision.

QUESTION 58Which of the following statements is false with regard to Ethernet?

A. There are very few (No) collisions in full-duplex mode.B. A dedicated switch port is required for each full-duplex node.C. The host network card and the switch port must be capable of operating in full-duplex mode

to use full-duplex.D. The default behavior of 10Base-T and 100Base-T hosts is 10 Mbps half-duplex if the

autodetect mechanism fails.


Explanation/Reference:A. There are no collisions in full-duplex mode.

QUESTION 59The cable used to connect to the console port on a router or switch is called a __________cable.

A. CrossoverB. Rollover

C. Straight-throughD. Full-duplex


Explanation/Reference:B. Although rolled cable isn’t used to connect any Ethernet connections together, youcan use arolled Ethernet cable to connect a host EIA-TIA 232 interface to a router console serialcommunication (COM) port.

QUESTION 60Which of the following items comprise a socket?

A. IP address and MAC addressB. IP address and port numberC. Port number and MAC addressD. MAC address and DLCI


Explanation/Reference:B. If you’re using TCP, the virtual circuit is defined by the source and destination portnumberplus the source and destination IP address and called a socket.

QUESTION 61Which of the following hexadecimal numbers converts to 28 in decimal?

A. 1cB. 12C. 15D. ab


Explanation/Reference:A. The hex value 1C is converted as 28 in decimal.

QUESTION 62What must happen if a DHCP IP conflict occurs?

A. Proxy ARP will fix the issue.B. The client uses a gratuitous ARP to fix the issue.C. The administrator must fix the conflict by hand at the DHCP server.D. The DHCP server will reassign new IP addresses to both computers.

Correct Answer: CSection: Introduction to TCP/IPExplanation


C. If a DHCP conflict is detected, either by the server sending a ping and getting aresponse orby a host using a gratuitous ARP (arp’ing for its own IP address and seeing if a hostresponds), thenthe server will hold that address and not use it again until it is fixed by an administrator.

QUESTION 63Which of the following Application layer protocols sets up a secure session that’s similar toTelnet?

A. FTPB. SSHC. DNSD. DHCP

Correct Answer: BSection: Introduction to TCP/IPExplanation

Explanation/Reference:B. Secure Shell (SSH) protocol sets up a secure session that’s similar to Telnet over astandardTCP/IP connection and is employed for doing things like logging into systems, runningprograms onremote systems, and moving files from one system to another.

QUESTION 64Which of the following mechanisms is used by the client to avoid a duplicate IP address duringthe DHCP process?

A. pingB. tracerouteC. gratuitous arpD. pathping


Explanation/Reference:C. A host uses something called a gratuitous ARP to help avoid a possible duplicateaddress.The DHCP client sends an ARP broadcast out on the local LAN or VLAN using its newlyassignedaddress to solve conflicts before they occur.

QUESTION 65What protocol is used to find the hardware address of a local device?

A. RARPB. ARPC. IPD. ICMPE. BootP

Correct Answer: BSection: Introduction to TCP/IP

Explanation

Explanation/Reference:B. Address Resolution Protocol (ARP) is used to find the hardware address from aknown IPaddress.

QUESTION 66Which of the following are layers in the TCP/IP model? (Choose three.)

A. ApplicationB. SessionC. TransportD. InternetE. Data LinkF. Physical

Correct Answer: ACDSection: Introduction to TCP/IPExplanation

Explanation/Reference:A, C, D. The listed answers are from the OSI model and the question asked about theTCP/IPprotocol stack (DoD model). Yes, it is normal for the objectives to have this type ofquestion.However, let’s just look for what is wrong. First, the Session layer is not in the TCP/IPmodel;neither are the Data Link and Physical layers. This leaves us with the Transport layer(Host-to-hostin the DoD model), Internet layer (Network layer in the OSI), and Application layer(Application/Process in the DoD). Remember, the CCENT objectives can list the layersas OSIlayers or DoD layer at any time, regardless of what the question is asking.

QUESTION 67Which class of IP address provides a maximum of only 254 host addresses per network ID?

A. Class AB. Class BC. Class CD. Class DE. Class E


Explanation/Reference:C. A Class C network address has only 8 bits for defining hosts: 28 – 2 = 256.

QUESTION 68Which of the following describe the DHCP Discover message? (Choose two.)

A. It uses FF:FF:FF:FF:FF:FF as a layer 2 broadcast.B. It uses UDP as the Transport layer protocol.C. It uses TCP as the Transport layer protocol.

D. It does not use a layer 2 destination address.

Correct Answer: ABSection: Introduction to TCP/IPExplanation

Explanation/Reference:A, B. A client that sends out a DHCP Discover message in order to receive an IPaddress sendsout a broadcast at both layer 2 and layer 3. The layer 2 broadcast is all Fs in hex, orFF:FF:FF:FF:FF:FF. The layer 3 broadcast is 255.255.255.255, which means anynetworks and allhosts. DHCP is connectionless, which means it uses User Datagram Protocol (UDP) attheTransport layer, also called the Host-to-host layer.

QUESTION 69Which layer 4 protocol is used for a Telnet connection?

A. IPB. TCPC. TCP/IPD. UDPE. ICMP


Explanation/Reference:B. Although Telnet does use TCP and IP (TCP/IP), the question specifically asks aboutlayer 4,and IP works at layer 3. Telnet uses TCP at layer 4.

QUESTION 70Private IP addressing was specified in RFC __________.

A. RFC 1918B. RFC 2223C. RFC 2322D. RFC 2323

Correct Answer: ASection: Introduction to TCP/IPExplanation

Explanation/Reference:RFC 1918 These addresses can be used on a private network, but they’re not routablethroughthe Internet.

QUESTION 71Which of the following services use TCP? (Choose three.)

A. DHCPB. SMTP

C. SNMPD. FTPE. HTTPF. TFTP

Correct Answer: BDESection: Introduction to TCP/IPExplanation

Explanation/Reference:B, D, E. SMTP, FTP, and HTTP use TCP.

QUESTION 72Which of the following is an example of a multicast address?

A. 10.6.9.1B. 192.168.10.6C. 224.0.0.10D. 172.16.9.5


Explanation/Reference:C. The range of multicast addresses starts with 224.0.0.0 and goes through239.255.255.255

QUESTION 73If you use either Telnet or FTP, what layer are you using to generate the data?

A. ApplicationB. PresentationC. SessionD. Transport

Correct Answer: ASection: Introduction to TCP/IPExplanation

Explanation/Reference:A. Both FTP and Telnet use TCP at the Transport layer; however, they both areApplicationlayer protocols, so the Application layer is the best answer for this question.

QUESTION 74The DoD model (also called the TCP/IP stack) has four layers. Which layer of the DoD model isequivalent to the Network layer of the OSI model?

A. ApplicationB. Host-to-HostC. InternetD. Network Access


Explanation/Reference:C. The four layers of the DoD model are Application/Process, Host-to-Host, Internet, andNetwork Access. The Internet layer is equivalent to the Network layer of the OSI model.

QUESTION 75Which two of the following are private IP addresses?

A. 12.0.0.1B. 168.172.19.39C. 172.20.14.36D. 172.33.194.30E. 192.168.24.43

Correct Answer: CESection: Introduction to TCP/IPExplanation

Explanation/Reference:C, E. The Class A private address range is 10.0.0.0 through 10.255.255.255. The ClassBprivate address range is 172.16.0.0 through 172.31.255.255, and the Class C privateaddress rangeis 192.168.0.0 through 192.168.255.255.17. B. The four layers of the TCP/IP stack

QUESTION 76What layer in the TCP/IP stack is equivalent to the Transport layer of the OSI model?

A. ApplicationB. Host-to-HostC. InternetD. Network Access


Explanation/Reference:B. The four layers of the TCP/IP stack (also called the DoD model) are Application/Process,Host-to-host, Internet, and Network Access. The Host-to-host layer is equivalent to theTransportlayer of the OSI model.

QUESTION 77Which statements are true regarding ICMP packets? (Choose two).

A. ICMP guarantees datagram delivery.B. ICMP can provide hosts with information about network problems.C. ICMP is encapsulated within IP datagrams.D. ICMP is encapsulated within UDP datagrams.

Correct Answer: BCSection: Introduction to TCP/IPExplanation


B, C. ICMP is used for diagnostics and destination unreachable messages. ICMP isencapsulated within IP datagrams, and because it is used for diagnostics, it will providehosts withinformation about network problems.

QUESTION 78What is the address range of a Class B network address in binary?

A. 01xxxxxxB. 0xxxxxxxC. 10xxxxxxD. 110xxxxx


Explanation/Reference:C. The range of a Class B network address is 128–191. This makes our binary range10xxxxxx

QUESTION 79What is the maximum number of IP addresses that can be assigned to hosts on a local subnet thatuses the 255.255.255.224 subnet mask?

A. 14B. 15C. 16D. 30E. 31F. 62

Correct Answer: DSection: Easy SubnettingExplanation

Explanation/Reference:D. A /27 (255.255.255.224) is 3 bits on and 5 bits off. This provides 8 subnets, each with30hosts. Does it matter if this mask is used with a Class A, B, or C network address? Not atall. Thenumber of host bits would never change.

QUESTION 80You have a network that needs 29 subnets while maximizing the number of host addressesavailable on each subnet. How many bits must you borrow from the host field to provide the correctsubnet mask?

A. 2B. 3C. 4D. 5E. 6F. 7

Correct Answer: DSection: Easy Subnetting

Explanation

Explanation/Reference:D. A 240 mask is 4 subnet bits and provides 16 subnets, each with 14 hosts. We needmoresubnets, so let’s add subnet bits. One more subnet bit would be a 248 mask. Thisprovides 5 subnetbits (32 subnets) with 3 host bits (6 hosts per subnet). This is the best answer.

QUESTION 81What is the subnetwork address for a host with the IP address 200.10.5.68/28?

A. 200.10.5.56B. 200.10.5.32C. 200.10.5.64D. 200.10.5.0

Correct Answer: CSection: Easy SubnettingExplanation

Explanation/Reference:C. This is a pretty simple question. A /28 is 255.255.255.240, which means that ourblock size is16 in the fourth octet. 0, 16, 32, 48, 64, 80, etc. The host is in the 64 subnet.

QUESTION 82The network address of 172.16.0.0/19 provides how many subnets and hosts?

A. 7 subnets, 30 hosts eachB. 7 subnets, 2,046 hosts eachC. 7 subnets, 8,190 hosts eachD. 8 subnets, 30 hosts eachE. 8 subnets, 2,046 hosts eachF. 8 subnets, 8,190 hosts each

Correct Answer: FSection: Easy SubnettingExplanation

Explanation/Reference:F. A CIDR address of /19 is 255.255.224.0. This is a Class B address, so that is only 3subnetbits, but it provides 13 host bits, or 8 subnets, each with 8,190 hosts.


A. The subnet address is 10.16.3.0 255.255.254.0.B. The lowest host address in the subnet is 10.16.2.1 255.255.254.0.C. The last valid host address in the subnet is 10.16.2.254 255.255.254.0.D. The broadcast address of the subnet is 10.16.3.255 255.255.254.0.E. The network is not subnetted.

Correct Answer: BDSection: Easy SubnettingExplanation

Explanation/Reference:B,D The mask 255.255.254.0 (/23) used with a Class A address means that there are 15subnetbits and 9 host bits. The block size in the third octet is 2 (256 – 254). So this makes thesubnets inthe interesting octet 0, 2, 4, 6, etc., all the way to 254. The host 10.16.3.65 is in the 2.0subnet. Thenext subnet is 4.0, so the broadcast address for the 2.0 subnet is 3.255. The valid hostaddressesare 2.1 through 3.254.

QUESTION 84If a host on a network has the address 172.16.45.14/30, what is the subnetwork this host belongsto?

A. 172.16.45.0B. 172.16.45.4C. 172.16.45.8D. 172.16.45.12E. 172.16.45.16


Explanation/Reference:D. A /30, regardless of the class of address, has a 252 in the fourth octet. This meanswe have ablock size of 4 and our subnets are 0, 4, 8, 12, 16, etc. Address 14 is obviously in the 12subnet.

QUESTION 85Which mask should you use on point-to-point WAN links in order to reduce the waste of IPaddresses?

A. /27B. /28C. /29D. /30E. /31


Explanation/Reference:D. A point-to-point link uses only two hosts. A /30, or 255.255.255.252, mask providestwohosts per subnet

QUESTION 86What is the subnetwork number of a host with an IP address of 172.16.66.0/21?

A. 172.16.36.0B. 172.16.48.0C. 172.16.64.0

D. 172.16.0.0


Explanation/Reference:C. A /21 is 255.255.248.0, which means we have a block size of 8 in the third octet, sowe justcount by 8 until we reach 66. The subnet in this question is 64.0. The next subnet is72.0, so thebroadcast address of the 64 subnet is 71.255.

QUESTION 87You have an interface on a router with the IP address of 192.168.192.10/29. Including the routerinterface, how many hosts can have IP addresses on the LAN attached to the router interface?

A. 6B. 8C. 30D. 62E. 126

Correct Answer: ASection: Easy SubnettingExplanation

Explanation/Reference:A. A /29 (255.255.255.248), regardless of the class of address, has only 3 host bits. Sixhostsare the maximum number of hosts on this LAN, including the router interface.

QUESTION 88You need to configure a server that is on the subnet 192.168.19.24/29. The router has the firstavailable host address. Which of the following should you assign to the server?

A. 192.168.19.0 255.255.255.0B. 192.168.19.33 255.255.255.240C. 192.168.19.26 255.255.255.248D. 192.168.19.31 255.255.255.248E. 192.168.19.34 255.255.255.240


Explanation/Reference:C. A /29 is 255.255.255.248, which is a block size of 8 in the fourth octet. The subnetsare 0, 8,16, 24, 32, 40, etc. 192.168.19.24 is the 24 subnet, and since 32 is the next subnet, thebroadcastaddress for the 24 subnet is 31. 192.168.19.26 is the only correct answer

QUESTION 89You have an interface on a router with the IP address of 192.168.192.10/29. What is thebroadcast address the hosts will use on this LAN?

A. 192.168.192.15

B. 192.168.192.31C. 192.168.192.63D. 192.168.192.127E. 192.168.192.255


Explanation/Reference:A. A /29 (255.255.255.248) has a block size of 8 in the fourth octet. This means thesubnets are0, 8, 16, 24, etc. 10 is in the 8 subnet. The next subnet is 16, so 15 is the broadcastaddress

QUESTION 90You need to subnet a network that has 5 subnets, each with at least 16 hosts. Which classfulsubnet mask would you use?

A. 255.255.255.192B. 255.255.255.224C. 255.255.255.240D. 255.255.255.248

Correct Answer: BSection: Easy SubnettingExplanation

Explanation/Reference:B. You need 5 subnets, each with at least 16 hosts. The mask 255.255.255.240 provides16subnets with 14 hosts—this will not work. The mask 255.255.255.224 provides 8subnets, eachwith 30 hosts. This is the best answer.

QUESTION 91You configure a router interface with the IP address 192.168.10.62 255.255.255.192 andreceive the following error:Bad mask /26 for address 192.168.10.62Why did you receive this error?

A. You typed this mask on a WAN link and that is not allowed.B. This is not a valid host and subnet mask combination.C. ip subnet-zero is not enabled on the router.D. The router does not support IP.


Explanation/Reference:C. First, you cannot answer this question if you can’t subnet. The 192.168.10.62 with amask of255.255.255.192 is a block size of 64 in the fourth octet. The host 192.168.10.62 is inthe zerosubnet, and the error occurred because ip subnet-zero is not enabled on the router.

QUESTION 92

If an Ethernet port on a router were assigned an IP address of 172.16.112.1/25, what would bethe valid subnet address of this interface?

A. 172.16.112.0B. 172.16.0.0C. 172.16.96.0D. 172.16.255.0E. 172.16.128.0


Explanation/Reference:A. A /25 mask is 255.255.255.128. Used with a Class B network, the third and fourthoctets areused for subnetting with a total of 9 subnet bits, 8 bits in the third octet and 1 bit in thefourth octet.Since there is only 1 bit in the fourth octet, the bit is either off or on—which is a value of0 or 128.The host in the question is in the 0 subnet, which has a broadcast address of 127 since112.128 isthe next subnet.

QUESTION 93Using the following illustration, what would be the IP address of E0 if you were using the eighthsubnet? The network ID is 192.168.10.0/28 and you need to use the last available IP address in therange. The zero subnet should not be considered valid for this question.

A. 192.168.10.142B. 192.168.10.66C. 192.168.100.254D. 192.168.10.143E. 192.168.10.126


Explanation/Reference:A. A /28 is a 255.255.255.240 mask. Let’s count to the ninth subnet (we need to find thebroadcast address of the eighth subnet, so we need to count to the ninth subnet).Starting at 16(remember, the question stated that we will not use subnet zero, so we start at 16, not0), 16, 32,48, 64, 80, 96, 112, 128, 144 etc.. The eighth subnet is 128 and the next subnet is 144,so ourbroadcast address of the 128 subnet is 143. This makes the host range 129–142. 142 isthe lastvalid host.

QUESTION 94Which configuration command must be in effect to allow the use of 8 subnets if the Class Csubnet mask is 255.255.255.224?

A. Router(config)#ip classlessB. Router(config)#ip version 6

C. Router(config)#no ip classfulD. Router(config)#ip unnumberedE. Router(config)#ip subnet-zeroF. Router(config)#ip all-nets

Correct Answer: ESection: Easy SubnettingExplanation

Explanation/Reference:E. A Class C subnet mask of 255.255.255.224 is 3 bits on and 5 bits off (11100000) andprovides 8 subnets, each with 30 hosts. However, if the command ip subnet-zero is notused,then only 6 subnets would be available for use.

QUESTION 95You have a network with a subnet of 172.16.17.0/22. Which is the valid host address?

A. 172.16.17.1 255.255.255.252B. 172.16.0.1 255.255.240.0C. 172.16.20.1 255.255.254.0D. 172.16.16.1 255.255.255.240E. 172.16.18.255 255.255.252.0F. 172.16.0.1 255.255.255.0

Correct Answer: ESection: Easy SubnettingExplanation

Explanation/Reference:E. A Class B network ID with a /22 mask is 255.255.252.0, with a block size of 4 in thethirdoctet. The network address in the question is in subnet 172.16.16.0 with a broadcastaddress of172.16.19.255. Only option E has the correct subnet mask listed, and 172.16.18.255 is avalid host

QUESTION 96Your router has the following IP address on Ethernet0: 172.16.2.1/23. Which of the followingcan be valid host IDs on the LAN interface attached to the router? (Choose two.)

A. 172.16.0.5B. 172.16.1.100C. 172.16.1.198D. 172.16.2.255E. 172.16.3.0F. 172.16.3.255

Correct Answer: DESection: Easy SubnettingExplanation

Explanation/Reference:D,E The router’s IP address on the E0 interface is 172.16.2.1/23, which is255.255.254.0. Thismakes the third octet a block size of 2. The router’s interface is in the 2.0 subnet, andthe broadcast

address is 3.255 because the next subnet is 4.0. The valid host range is 2.1 through3.254. Therouter is using the first valid host address in the range.

QUESTION 97To test the IP stack on your local host, which IP address would you ping?

A. 172.0.0.1B. 1.0.0.127C. 127.0.0.1D. 127.255.255.255E. 255.255.255.255


Explanation/Reference:C. To test the local stack on your host, ping the loopback interface of 127.0.0.1.

QUESTION 98On a VLSM network, which mask should you use on point-to-point WAN links in order to reducethe waste of IP addresses?

A. /27B. /28C. /29D. /30E. /31

Correct Answer: DSection: VLSMs, Summarization, andExplanation

Explanation/Reference:D. A point-to-point link uses only two hosts. A /30, or 255.255.255.252, mask providestwohosts per subnet.

QUESTION 99To use VLSM, what capability must the routing protocols in use possess?

A. Support for multicastB. Multiprotocol supportC. Transmission of subnet mask informationD. Support for unequal load balancing

Correct Answer: CSection: VLSMs, Summarization, andExplanation

Explanation/Reference:C. To use VLSM, the routing protocols in use possess the capability to transmit subnetmaskinformation

QUESTION 100If Host A is configured with an incorrect default gateway and all other computers and the router

are known to be configured correctly, which of the following statements is TRUE?

A. Host A can communicate with the router.B. Host A can communicate with other hosts in the same subnet.C. Host A can communicate with hosts in other subnets.D. Host A can communicate with no other systems.

Correct Answer: BSection: VLSMs, Summarization, andExplanation

Explanation/Reference:B. With an incorrect gateway, Host A will not be able to communicate with the router orbeyondthe router but will be able to communicate within the subnet.

QUESTION 101Which of the following troubleshooting steps, if completed successfully, also confirms the othersteps will succeed as well?

A. ping a remote computerB. ping the loopback addressC. ping the NICD. ping the default gateway

Correct Answer: ASection: VLSMs, Summarization, andExplanation

Explanation/Reference:A. Pinging the remote computer would fail if any of the other tests fail.

QUESTION 102When a ping to the local host IP address fails, what can you assume?

A. The IP address of the local host is incorrect.B. The IP address of the remote host is incorrect.C. The NIC is not functional.D. The IP stack has failed to initialize.


Explanation/Reference:C. When a ping to the local host IP address fails, you can assume the NIC is notfunctional.

QUESTION 103When a ping to the local host IP address succeeds but a ping to the default gateway IP addressfails, what can you rule out? (Choose all that apply.)

A. The IP address of the local host is incorrect.B. The IP address of the gateway is incorrect.C. The NIC is not functional.D. The IP stack has failed to initialize.

Correct Answer: CD

Section: VLSMs, Summarization, andExplanation

Explanation/Reference:C, D. If a ping to the local host succeeds, you can rule out IP stack or NIC failure.

QUESTION 104What network service is the most likely problem if you can ping a computer by IP address butnot by name?

A. DNSB. DHCPC. ARPD. ICMP


Explanation/Reference:A. The most likely problem if you can ping a computer by IP address but not by name isafailure of DNS

QUESTION 105When you issue the ping command, what protocol are you using?

A. DNSB. DHCPC. ARPD. ICMP

Correct Answer: DSection: VLSMs, Summarization, andExplanation

Explanation/Reference:D. When you issue the ping command, you are using the ICMP protocol.

QUESTION 106Which of the following commands displays the networks traversed on a path to a networkdestination?

A. pingB. tracerouteC. pingrouteD. pathroute

Correct Answer: BSection: VLSMs, Summarization, andExplanation

Explanation/Reference:B. The traceroute command displays the networks traversed on a path to a networkdestination

QUESTION 107What command generated the output shown below?Reply from 172.16.10.2: bytes=32 time<1ms TTL=128

Reply from 172.16.10.2: bytes=32 time<1ms TTL=128Reply from 172.16.10.2: bytes=32 time<1ms TTL=128Reply from 172.16.10.2: bytes=32 time<1ms TTL=128

A. tracerouteB. show ip routeC. pingD. pathping


Explanation/Reference:C. The ping command tests connectivity to another station. The full command is shownbelow.C:\>ping 172.16.10.2Pinging 172.16.10.2 with 32 bytes of data:Reply from 172.16.10.2: bytes=32 time<1ms TTL=128Reply from 172.16.10.2: bytes=32 time<1ms TTL=128Reply from 172.16.10.2: bytes=32 time<1ms TTL=128Reply from 172.16.10.2: bytes=32 time<1ms TTL=128Ping statistics for 172.16.10.2:Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),Approximate round trip times in milli-seconds:Minimum = 0ms, Maximum = 0ms, Average = 0ms

QUESTION 108What command displays the ARP table on a Cisco router?

A. show ip arpB. tracerouteC. arp -aD. tracert


Explanation/Reference:A. The command that displays the ARP table on a Cisco router is show ip arp.

QUESTION 109What switch must be added to the ipconfig command on a PC to verify DNS configuration?

A. /dnsB. -dnsC. /allD. showall


Explanation/Reference:C. The /all switch must be added to the ipconfig command on a PC to verify DNSconfiguration.

QUESTION 110Which of the following is the best summarization of the following networks: 192.168.128.0through 192.168.159.0

A. 192.168.0.0/24B. 192.168.128.0/16C. 192.168.128.0/19D. 192.168.128.0/21.


Explanation/Reference:C. If you start at 192.168.128.0 and go through 192.168.159.0, you can see this is ablock of 32in the third octet. Since the network address is always the first one in the range, thesummaryaddress is 192.168.128.0. What mask provides a block of 32 in the third octet? Theanswer is255.255.224.0, or /19.

QUESTION 111You type show interfaces fa0/1 and get this output:275496 packets input, 35226811 bytes, 0 no bufferReceived 69748 broadcasts (58822 multicasts)0 runts, 0 giants, 0 throttles111395 input errors, 511987 CRC, 0 frame, 0 overrun, 0 ignored0 watchdog, 58822 multicast, 0 pause input0 input packets with dribble condition detected2392529 packets output, 337933522 bytes, 0 underruns0 output errors, 0 collisions, 1 interface resets0 babbles, 0 late collision, 0 deferred0 lost carrier, 0 no carrier, 0 PAUSE output0 output buffer failures, 0 output buffers swapped outWhat could the problem possibly be with this interface?

A. Speed mismatch on directly connected interfacesB. Collisions causing CRC errorsC. Frames received are too largeD. Interference on the Ethernet cable

Correct Answer: DSection: Cisco’s Internetworking OperatingExplanation

Explanation/Reference:D. Typically we’d see the input errors and CRC statistics increase with a duplex error, butitcould be another Physical layer issue such as the cable might be receiving excessiveinterferenceor the network interface cards might have a failure. Typically you can tell if it isinterference whenthe CRC and input errors output grow but the collision counters do not, which is the casewith thisquestion.

QUESTION 112The output of the show running-config command comes from ___________.

A. NVRAMB. FlashC. RAMD. Firmware

Correct Answer: CSection: Cisco’s Internetworking OperatingExplanation

Explanation/Reference:C. Once the IOS is loaded and up and running, the startup-config will be copied fromNVRAMinto RAM and from then on, referred to as the running-config.

QUESTION 113Which two of the following commands are required when configuring SSH on your router?(Choose two.)

A. enable secret passwordB. exec-timeout 0 0C. ip domain-name nameD. username name password passwordE. ip ssh version 2

Correct Answer: CDSection: Cisco’s Internetworking OperatingExplanation

Explanation/Reference:C, D. To configure SSH on your router, you need to set the username command, the ipdomainname,login local, and the transport input ssh under the VTY lines and the crypto keycommand. However, SSH version 2 is suggested but not required.

QUESTION 114Which command will show you whether a DTE or a DCE cable is plugged into serial 0/0 on yourrouter’s WAN port?

A. sh int s0/0B. sh int serial 0/0C. show controllers s 0/0D. show serial 0/0 controllers


Explanation/Reference:C. The show controllers serial 0/0 command will show you whether either a DTE orDCE cable is connected to the interface. If it is a DCE connection, you need to addclocking withthe clock rate command.

QUESTION 115Using the given output, what type of interface is f0/0?

[output cut]Hardware is MV96340 Ethernet, address is 001a.2f55.c9e8 (bia 001a.2f55.c9e8)Internet address is 192.168.1.33/27MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,reliability 255/255, txload 1/255, rxload 1/255

A. 10 MBB. 100 MBC. 1000 MBD. 1000 MB

Correct Answer: BSection: Cisco’s Internetworking OperatingExplanation

Explanation/Reference:B. We can see that the bandwidth is 100000 Kbit, which is 100,000,000. Kbit means toaddthree zeros, which is 100 Mbits per second, or FastEthernet.

QUESTION 116Which of the following commands will configure all the default VTY ports on a switch?

A. Switch#line vty 0 4B. Switch(config)#line vty 0 4C. Switch(config-if)#line console 0D. Switch(config)#line vty all


Explanation/Reference:B. From global configuration mode, use the line vty 0 4 command to set all five defaultVTYlines. However, you would typically always set all lines, not just the defaults.

QUESTION 117Which of the following commands sets the privileged mode password to Cisco and encrypts thepassword?

A. enable secret password CiscoB. enable secret ciscoC. enable secret CiscoD. enable password Cisco


Explanation/Reference:C. The enable secret password is case sensitive, so the second option is wrong. To settheenable secret password, use the enable secret password command from globalconfigurationmode. This password is automatically encrypted

QUESTION 118

If you wanted administrators to see a message when logging into the switch, which commandwould you use?

A. message banner motdB. banner message motdC. banner motdD. message motd


Explanation/Reference:C. The typical banner is a message of the day (MOTD) and is set by using the globalconfiguration mode command banner MOTD.

QUESTION 119Which of the following prompts indicates that the switch is currently in privileged mode?

A. Switch(config)#B. Switch>C. Switch#D. Switch(config-if)


Explanation/Reference:C. The prompts offered as options indicate the following modes:Switch(config)# is global configuration mode.Switch> is user mode.Switch# is privileged mode.Switch(config-if)# is interface configuration mode.

QUESTION 120What command do you type to save the configuration stored in RAM to NVRAM?

A. Switch(config)#copy current to startingB. Switch#copy starting to runningC. Switch(config)#copy running-config startup-configD. Switch#copy run start


Explanation/Reference:D. To copy the running-config to NVRAM so that it will be used if the router is restarted,usethe copy running-config startup-config command in privileged mode (copy run start forshort).

QUESTION 121You try to telnet into SF from router Corp and receive this message:Corp#telnet SFTrying SF (10.0.0.1)…OpenPassword required, but none set

[Connection to SF closed by foreign host]Corp#Which of the following sequences will address this problem correctly?

A. Corp(config)#line console 0Corp (config-line)#password passwordCorp (config-line)#login

B. SF (config)#line console 0SF(config-line)#enable secret passwordSF(config-line)#login

C. Corp(config)#line vty 0 4Corp (config-line)#password passwordCorp (config-line)#login

D. SF (config)#line vty 0 4SF(config-line)#password passwordSF(config-line)#login


Explanation/Reference:D. To allow a VTY (Telnet) session into your router, you must set the VTY password.OptionC is wrong because it is setting the password on the wrong router. Notice that you haveto set thepassword before you set the login command. Remember, Cisco may have you set thepasswordbefore the login command.

QUESTION 122Which command will delete the contents of NVRAM on a switch?

A. delete NVRAMB. delete startup-configC. erase flashD. erase startup-configE. erase start


Explanation/Reference:D. The erase startup-config command erases the contents of NVRAM and will put you insetup mode if the switch is restarted. Option E is wrong because you must type in the fullcommand!

QUESTION 123What is the problem with an interface if you type show interface g0/1 and receive thefollowing message?Gigabit 0/1 is administratively down, line protocol is down

A. The keepalives are different times.B. The administrator has the interface shut down.C. The administrator is pinging from the interface.D. No cable is attached.


Explanation/Reference:B. If an interface is shut down, the show interface command will show the interface asadministratively down. (It is possible that no cable is attached, but you can’t tell that fromthismessage.)

QUESTION 124Which of the following commands displays the configurable parameters and statistics of allinterfaces on a switch?

A. show running-configB. show startup-configC. show interfacesD. show versions


Explanation/Reference:C. With the show interfaces command, you can view the configurable parameters, getstatistics for the interfaces on the switch, check for input and CRC errors, and verify iftheinterfaces are shut down.

QUESTION 125If you delete the contents of NVRAM and reboot the switch, what mode will you be in?

A. Privileged modeB. Global modeC. Setup modeD. NVRAM loaded mode


Explanation/Reference:C. If you delete the startup-config and reload the switch, the device will automaticallyentersetup mode. You can also type setup from privileged mode at any time.

QUESTION 126You type the following command into the switch and receive the following output:Switch#show fastethernet 0/1^% Invalid input detected at ‘^’ marker.Why was this error message displayed?

A. You need to be in privileged mode.B. You cannot have a space between fastethernet and 0/1.C. The switch does not have a Fastethernet 0/1 interface.D. Part of the command is missing.


Explanation/Reference:D. You can view the interface statistics from user mode, but the command is showinterfacefastethernet 0/0.

QUESTION 127You type Switch#sh r and receive a % ambiguous command error. Why did you receive thismessage?

A. The command requires additional options or parameters.B. There is more than one show command that starts with the letter r.C. There is no show command that starts with r.D. The command is being executed from the wrong mode.


Explanation/Reference:B. The % ambiguous command error means that there is more than one possible showcommand that starts with r. Use a question mark to find the correct command.

QUESTION 128Which of the following commands will display the current IP addressing and the layer 1 and 2status of an interface? (Choose two.)

A. show versionB. show interfacesC. show controllersD. show ip interfaceE. show running-config

Correct Answer: BDSection: Cisco’s Internetworking OperatingExplanation

Explanation/Reference:B, D. The commands show interfaces and show ip interface will show you the layer 1and 2 status and the IP addresses of your router’s interfaces.

QUESTION 129At which layer of the OSI model would you assume the problem is if you type show interfaceserial 1 and receive the following message?Serial1 is down, line protocol is down

A. Physical layerB. Data Link layerC. Network layerD. None; it is a router

Correct Answer: ASection: Cisco’s Internetworking OperatingExplanation


A. If you see that a serial interface and the protocol are both down, then you have aPhysicallayer problem. If you see serial1 is up, line protocol is down, then you are not receiving(Data Link) keepalives from the remote end.

QUESTION 130Which of the following is a standards-based protocol that works much like CDP?

A. DHCPB. LLDPC. DDNSD. SSTP

Correct Answer: BSection: Managing a Cisco InternetworkExplanation

Explanation/Reference:B. The IEEE created a new standardized discovery protocol called 802.1AB for StationandMedia Access Control Connectivity Discovery. We’ll just call it Link Layer DiscoveryProtocol(LLDP).

QUESTION 131Which command can be used to determine a router’s capacity to generate debug output?

A. show versionB. show controllersC. show processes cpuD. show memory

Correct Answer: CSection: Managing a Cisco InternetworkExplanation

Explanation/Reference:C. The show processes (or show processes cpu) is a good tool for determining a givenrouter’s CPU utilization. When it is high, it is not a good time to execute a debugcommand

QUESTION 132You are troubleshooting a connectivity problem in your corporate network and want to isolate theproblem. You suspect that a router on the route to an unreachable network is at fault. What IOS userexec command should you issue?

A. Router>pingB. Router>traceC. Router>show ip routeD. Router>show interfaceE. Router>show cdp neighbors

Correct Answer: BSection: Managing a Cisco InternetworkExplanation

Explanation/Reference:B. The command traceroute (trace for short), which can be issued from user mode or

privileged mode, is used to find the path a packet takes through an internetwork and willalso showyou where the packet stops because of an error on a router.

QUESTION 133You copy a configuration from a network host to a router’s RAM. The configuration lookscorrect, yet it is not working at all. What could the problem be?

A. You copied the wrong configuration into RAM.B. You copied the configuration into flash memory instead.C. The copy did not override the shutdown command in running-config.D. The IOS became corrupted after the copy command was initiated.


Explanation/Reference:C. Since the configuration looks correct, you probably didn’t screw up the copy job.However,when you perform a copy from a network host to a router, the interfaces areautomatically shutdown and need to be manually enabled with the no shutdown command.

QUESTION 134In the following command, what does the IP address 10.10.10.254 refer to?Router#config tRouter(config)#interface fa0/0Router(config-if)#ip helper-address 10.10.10.254

A. IP address of the ingress interface on the routerB. IP address of the egress interface on the routerC. IP address of the next hop on the path to the DHCP serverD. IP address of the DHCP server

Correct Answer: DSection: Managing a Cisco InternetworkExplanation

Explanation/Reference:D. Specifying the address of the DHCP server allows the router to relay broadcast trafficdestined for a DHCP server to that server.

QUESTION 135The corporate office sends you a new router to connect, but upon connecting the console cable,you see that there is already a configuration on the router. What should be done before a newconfiguration is entered in the router?

A. RAM should be erased and the router restarted.B. Flash should be erased and the router restarted.C. NVRAM should be erased and the router restarted.D. The new configuration should be entered and saved.



C. Before you start to configure the router, you should erase the NVRAM with the erasestartup-config command and then reload the router using the reload command.

QUESTION 136What command can you use to determine the IP address of a directly connected neighbor?

A. show cdpB. show cdp neighborsC. show cdp neighbors detailD. show neighbor detail


Explanation/Reference:C. This command can be run on both routers and switches and it displays detailedinformationabout each device connected to the device you’re running the command on, includingthe IPaddress.

QUESTION 137According to the output, what interface does SW-2 use to connect to SW-3?SW-3#sh cdp neighborsCapability Codes: R - Router, T - Trans Bridge, B - Source Route BridgeS -Switch, H - Host, I - IGMP, r - Repeater, P - Phone, D - Remote, C - CVTA, M- Two-port Mac Relay Device IDLocal Intrfce Holdtme Capability Platform Port IDSW-1 Fas 0/1 170 S I WS-C3560- Fas 0/15SW-1 Fas 0/2 170 S I WS-C3560- Fas 0/16SW-2 Fas 0/5 162 S I WS-C3560- Fas 0/2

A. Fas 0/1B. Fas 0/16C. Fas 0/2D. Fas 0/5


Explanation/Reference:C. The Port ID column describes the interfaces on the remote device end of theconnection.

QUESTION 138What command can you use to determine the IP address of a directly connected neighbor?

A. show cdpB. show cdp neighborsC. show cdp neighbors detailD. show neighbor detail



C. This command can be run on both routers and switches, and it displays detailedinformationabout each device connected to the device you’re running the command on, includingthe IPaddress

QUESTION 139You save the configuration on a router with the copy running-config startup-configcommand and reboot the router. The router, however, comes up with a blank configuration. Whatcan the problem be?

A. You didn’t boot the router with the correct command.B. NVRAM is corrupted.C. The configuration register setting is incorrect.D. The newly upgraded IOS is not compatible with the hardware of the router.E. The configuration you saved is not compatible with the hardware.


Explanation/Reference:C. If you save a configuration and reload the router and it comes up either in setup modeor as ablank configuration, chances are you have the configuration register setting incorrect.

QUESTION 140If you want to have more than one Telnet session open at the same time, what keystrokecombination would you use?

A. Tab+spacebarB. Ctrl+X, then 6C. Ctrl+Shift+X, then 6D. Ctrl+Shift+6, then X


Explanation/Reference:D. To keep open one or more Telnet sessions, use the Ctrl+Shift+6 and then Xkeystrokecombination.

QUESTION 141You are unsuccessful in telnetting into a remote device from your switch, but you could telnet tothe router earlier. However, you can still ping the remote device. What could the problem be?(Choose two.)

A. IP addresses are incorrect.B. Access control list is filtering Telnet.C. There is a defective serial cable.D. The VTY password is missing.

Correct Answer: BDSection: Managing a Cisco InternetworkExplanation

Explanation/Reference:B, D. The best answers, the ones you need to remember, are that either an accesscontrol list isfiltering the Telnet session or the VTY password is not set on the remote device.

QUESTION 142What information is displayed by the show hosts command? (Choose two.)

A. Temporary DNS entriesB. The names of the routers created using the hostname commandC. The IP addresses of workstations allowed to access the routerD. Permanent name-to-address mappings created using the ip host commandE. The length of time a host has been connected to the router via Telnet

Correct Answer: ADSection: Managing a Cisco InternetworkExplanation

Explanation/Reference:A, D. The show hosts command provides information on temporary DNS entries andpermanent name-to-address mappings created using the ip host command.

QUESTION 143Which three commands can be used to check LAN connectivity problems on a switch? (Choosethree.)

A. show interfacesB. show ip routeC. tracertD. pingE. dns lookups

Correct Answer: ABDSection: Managing a Cisco InternetworkExplanation

Explanation/Reference:A, B, D. The tracert command is a Windows command and will not work on a router orswitch! IOS uses the traceroute command.

QUESTION 144You telnet to a router and make your necessary changes; now you want to end the Telnet session.What command do you type in?

A. closeB. disableC. disconnectD. exit


Explanation/Reference:D. Since the question never mentioned anything about a suspended session, you canassume thatthe Telnet session is still open, and you would just type exit to close the session.

QUESTION 145You telnet into a remote device and type debug ip icmp, but no output from the debugcommand is seen. What could the problem be?

A. You must type the show ip icmp command first.B. IP addressing on the network is incorrect.C. You must use the terminal monitor command.D. Debug output is sent only to the console.


Explanation/Reference:C. To see console messages through your Telnet session, you must enter the terminalmonitor command.

QUESTION 146You need to view console messages on a device to which you have connected through telnet.The command you need to execute to see these is ___________.

A. terminal monitorB. show console messagesC. console line messagesD. NA

Correct Answer: ASection: Managing a Cisco InternetworkExplanation

Explanation/Reference:terminal monitor: When you telnet into a remote device, you will not see consolemessagesby default. For example, you will not see debugging output. To allow console messagesto be sentto your Telnet session, use the terminal monitor command.

QUESTION 147You need to gather the IP address of a remote switch that is located in Hawaii. What can you doto find the address?

A. Fly to Hawaii, console into the switch, then relax and have a drink with an umbrella in it.B. Issue the show ip route command on the router connected to the switch.C. Issue the show cdp neighbor command on the router connected to the switch.D. Issue the show ip arp command on the router connected to the switch.E. Issue the show cdp neighbors detail command on the router connected to the switch.

Correct Answer: ESection: Managing a Cisco InternetworkExplanation

Explanation/Reference:E. Although option A is certainly the “best” answer, unfortunately option E will work justfineand your boss would probably prefer you to use the show cdp neighbors detailcommand.

QUESTION 148

You need to configure all your routers and switches so they synchronize their clocks from onetime source. What command will you type for each device?

A. clock synchronizationip_addressB. ntp master ip_addressC. sync ntp ip_addressD. ntp server ip_address version number


Explanation/Reference:D. To enable a device to be an NTP client, use the ntp serverIP_addressversion versioncommand at global configuration mode. That’s all there is to it! Assuming your NTPserver isworking of course.

QUESTION 149What two commands can you use to verify your NTP client?

A. show ntp serverB. show ntp statusC. show vtp statusD. show ntp associationsE. show clock source

Correct Answer: BDSection: Managing a Cisco InternetworkExplanation

Explanation/Reference:B, D. You can verify your NTP client with the show ntp status and show ntpassociations commands.

QUESTION 150What command was used to generate the following output?Codes: L - local, C - connected, S - static,[output cut]10.0.0/8 is variably subnetted, 6 subnets, 4 masksC 10.0.0.0/8 is directly connected, FastEthernet0/3L 10.0.0.1/32 is directly connected, FastEthernet0/3C 10.10.0.0/16 is directly connected, FastEthernet0/2L 10.10.0.1/32 is directly connected, FastEthernet0/2C 10.10.10.0/24 is directly connected, FastEthernet0/1L 10.10.10.1/32 is directly connected, FastEthernet0/1S* 0.0.0.0/0 is directly connected, FastEthernet0/0

A. show ip routeB. routeC. ip natD. show cdp

Correct Answer: ASection: IP RoutingExplanation

Explanation/Reference:show ip routeThe ip route command is used to display the routing table of a router.

QUESTION 151You are viewing the routing table and you see an entry 10.1.1.1/32. What legend code would youexpect to see next to this route?

A. CB. LC. SD. D

Correct Answer: BSection: IP RoutingExplanation

Explanation/Reference:B. In the new 15 IOS code, Cisco defines a different route called a local route. Each hasa /32prefix defining a route just for the one address.

QUESTION 152Which of the following statements are true regarding the command ip route 172.16.4.0255.255.255.0 192.168.4.2? (Choose two.)

A. The command is used to establish a static route.B. The default administrative distance is used.C. The command is used to configure the default route.D. The subnet mask for the source address is 255.255.255.0.E. The command is used to establish a stub network.

Correct Answer: ABSection: IP RoutingExplanation

Explanation/Reference:A, B. Although option D almost seems right, it is not; the mask is the mask used on theremotenetwork, not the source network. Since there is no number at the end of the static route,it is usingthe default administrative distance of 1.

QUESTION 153Using the output shown, what protocol was used to learn the MAC address for172.16.10.1?Interface: 172.16.10.2 --- 0x3Internet Address Physical Address Type172.16.10.1 00-15-05-06-31-b0 dynamic

A. A. ICMPB. B. ARPC. C. TCPD. D. UDP


Explanation/Reference:B. This mapping was learned dynamically which means it was learned through ARP.

QUESTION 154Which of the following is called an advanced distance-vector routing protocol?

A. OSPFB. EIGRPC. BGPD. RIP


Explanation/Reference:B. Hybrid protocols use aspects of both distance vector and link state—for example,EIGRP.Although be advised that Cisco typically just calls EIGRP an advanced distance vectorroutingprotocol. Do not be mislead by the way the question is worded. Yes, I know that MACaddressesare not in a packet. You must read the question for understanding of what they are reallyasking.

QUESTION 155When a packet is routed across a network, the ______________ in the packet changes at everyhop while the ____ does not.

A. MAC address, IP addressB. IP address, MAC addressC. Port number, IP addressD. IP address, port number


Explanation/Reference:A. Since the destination MAC address is different at each hop, it must keep changing.The IPaddress which is used for the routing process does not.

QUESTION 156Which statement is true regarding classless routing protocols? (Choose two.)

A. The use of discontiguous networks is not allowed.B. The use of variable length subnet masks is permitted.C. RIPv1 is a classless routing protocol.D. IGRP supports classless routing within the same autonomous system.E. RIPv2 supports classless routing.

Correct Answer: BESection: IP RoutingExplanation

Explanation/Reference:B, E. Classful routing means that all hosts in the internetwork use the same mask and

that onlydefault masks are in use. Classless routing means that you can use variable lengthsubnet masks(VLSMs).

QUESTION 157Which two of the following are true regarding the distance-vector and link-state routingprotocols? (Choose two.)

A. Link state sends its complete routing table out of all active interfaces at periodic timeintervals.

B. Distance vector sends its complete routing table out of all active interfaces at periodic timeintervals.

C. Link state sends updates containing the state of its own links to all routers in the internetwork.D. Distance vector sends updates containing the state of its own links to all routers in the

internetwork.

Correct Answer: BCSection: IP RoutingExplanation

Explanation/Reference:B, C. The distance-vector routing protocol sends its complete routing table out of allactiveinterfaces at periodic time intervals. Link-state routing protocols send updates containingthe stateof their own links to all routers in the internetwork.

QUESTION 158When a router looks up the destination in the routing table for every single packet it is called_____________ .

A. dynamic switchingB. fast switchingC. process switchingD. Cisco Express Forwarding

Correct Answer: CSection: IP RoutingExplanation

Explanation/Reference:C. This is how most people see routers, and certainly they could do this type of plain ol’packetswitching in 1990 when Cisco released their very first router and traffic was seriouslyslow, butnot in today’s networks! This process involves looking up every destination in the routingtable andfinding the exit interface for every packet.

QUESTION 159What type(s) of route is the following? Choose all that apply.S* 0.0.0.0/0 [1/0] via 172.16.10.5

A. DefaultB. SubnettedC. Static

D. Local

Correct Answer: ACSection: IP RoutingExplanation

Explanation/Reference:A, C. The S* shows that this is a candidate for default route and that it was configuredmanually.

QUESTION 160A network administrator views the output from the show ip route command. A network that isadvertised by both RIP and EIGRP appears in the routing table flagged as an EIGRP route. Why isthe RIP route to this network not used in the routing table?

A. EIGRP has a faster update timer.B. EIGRP has a lower administrative distance.C. RIP has a higher metric value for that route.D. The EIGRP route has fewer hops.E. The RIP path has a routing loop.


Explanation/Reference:B. RIP has an administrative distance (AD) of 120, while EIGRP has an administrativedistance of 90, so the router will discard any route with a higher AD than 90 to that samenetwork.

QUESTION 161Which of the following is NOT an advantage of static routing?

A. Less overhead on the router CPUB. No bandwidth usage between routersC. Adds securityD. Recovers automatically from lost routes

Correct Answer: DSection: IP RoutingExplanation

Explanation/Reference:D. Recovery from a lost route requires manual intervention by a human to replace thelost route.

QUESTION 162What metric does RIPv2 use to find the best path to a remote network?

A. Hop countB. MTUC. Cumulative interface delayD. LoadE. Path bandwidth value


Explanation/Reference:A. RIPv1 and RIPv2 only use the lowest hop count to determine the best path to aremotenetwork

QUESTION 163The Corporate router receives an IP packet with a source IP address of 192.168.214.20 and adestination address of 192.168.22.3. Looking at the output from the Corp router, what will the routerdo with this packet?Corp#sh ip route[output cut]R 192.168.215.0 [120/2] via 192.168.20.2, 00:00:23, Serial0/0R 192.168.115.0 [120/1] via 192.168.20.2, 00:00:23, Serial0/0R 192.168.30.0 [120/1] via 192.168.20.2, 00:00:23, Serial0/0C 192.168.20.0 is directly connected, Serial0/0C 192.168.214.0 is directly connected, FastEthernet0/0

A. The packet will be discarded.B. The packet will be routed out of the S0/0 interface.C. The router will broadcast looking for the destination.D. The packet will be routed out of the Fa0/0 interface.


Explanation/Reference:A. Since the routing table shows no route to the 192.168.22.0 network, the router willdiscardthe packet and send an ICMP destination unreachable message out of interfaceFastEthernet 0/0,which is the source LAN from which the packet originated.

QUESTION 164If your routing table has a static, an RIP, and an EIGRP route to the same network, which routewill be used to route packets by default?

A. Any available routeB. RIP routeC. Static routeD. EIGRP routeE. They will all load-balance.


Explanation/Reference:C. Static routes have an administrative distance of 1 by default. Unless you change this,a staticroute will always be used over any other dynamically learned route. EIGRP has anadministrativedistance of 90, and RIP has an administrative distance of 120, by default.

QUESTION 165Which of the following is an EGP?

A. RIPv2B. EIGRPC. BGPD. RIP


Explanation/Reference:C. BGP is the only EGP listed.

QUESTION 166Which of the following is an NOT True about of static routing?

A. Less overhead on the router CPUB. No bandwidth usage between routersC. Adds securityD. Recovers automatically from lost routes

Correct Answer: DSection: IP RoutingExplanation

Explanation/Reference:D. Recovery from a lost route requires manual intervention by a human to replace thelost route.The advantages are less overhead on the router and network, as well as more security.

QUESTION 167What command produced the following output?Interface IP-Address OK? Method Status ProtocolFastEthernet0/0 192.168.10.1 YES manual up upFastEthernet0/1 unassigned YES unset administratively down downSerial0/0/0 172.16.10.2 YES manual up upSerial0/0/1 unassigned YES unset administratively down down

A. show ip routeB. show interfacesC. show ip interface briefD. show ip arp


Explanation/Reference:C. The show ip interface brief command displays a concise summary of the interfaces

QUESTION 168In the following command what does the 150 at the end of the command mean?Router(config)#ip route 172.16.3.0 255.255.255.0 192.168.2.4 150

A. MetricB. Administrative distanceC. Hop countD. Cost


Explanation/Reference:B. The 150 at the end changes the default administrative distance (AD) of 1 to 150.

QUESTION 169There are three possible routes for a router to reach a destination network. The first route is fromOSPF with a metric of 782. The second route is from RIPv2 with a metric of 4. The third is fromEIGRP with a composite metric of 20514560. Which route will be installed by the router in itsrouting table?

A. RIPv2B. EIGRPC. OSPFD. All three

Correct Answer: BSection: Open Shortest Path First (OSPF)Explanation

Explanation/Reference:B. Only the EIGRP routes will be placed in the routing table because it has the lowestadministrative distance (AD), and that is always used before metrics.

QUESTION 170Which of the following describe the process identifier that is used to run OSPF on a router?(Choose two.)

A. It is locally significant.B. It is globally significant.C. It is needed to identify a unique instance of an OSPF database.D. It is an optional parameter required only if multiple OSPF processes are running on the

router.E. All routes in the same OSPF area must have the same process ID if they are to exchange

routing information.

Correct Answer: ACSection: Open Shortest Path First (OSPF)Explanation

Explanation/Reference:A, C. The process ID for OSPF on a router is only locally significant and you can use thesamenumber on each router, or each router can have a different number—it just doesn’tmatter. Thenumbers you can use are from 1 to 65,535. Don’t get this confused with area numbers,which can befrom 0 to 4.2 billion.

QUESTION 171All of the following must match for two OSPF routers to become neighbors except which?

A. Area IDB. Router IDC. Stub area flagD. Authentication password if using one


Explanation/Reference:B. The router ID (RID) is an IP address used to identify the router. It need not and shouldnotmatch.

QUESTION 172You get a call from a network administrator who tells you that he typed the following into hisrouter:Router(config)#router ospf 1Router(config-router)#network 10.0.0.0 255.0.0.0 area 0He tells you he still can’t see any routes in the routing table. What configuration error did theadministrator make?

A. The wildcard mask is incorrect.B. The OSPF area is wrong.C. The OSPF process ID is incorrect.D. The AS configuration is wrong.

Correct Answer: ASection: Open Shortest Path First (OSPF)Explanation

Explanation/Reference:A. The administrator typed in the wrong wildcard mask configuration. The wildcardshould havebeen 0.0.0.255 or even 0.255.255.255.

QUESTION 173Which of the following statements is true with regard to the output shown?Corp#sh ip ospf neighborNeighbor ID Pri State Dead Time Address Interface172.31.1.4 1 FULL/BDR 00:00:34 10.10.10.2 FastEthernet0/0192.168.20.1 0 FULL/ - 00:00:31 172.16.10.6 Serial0/1192.168.10.1 0 FULL/ - 00:00:32 172.16.10.2 Serial0/0

A. There is no DR on the link to 192.168.20.1.B. The Corp router is the BDR on the link to 172.31.1.4.C. The Corp router is the DR on the link to 192.168.20.1D. The link to 192.168.10.1 is Active.


Explanation/Reference:A. A dash (-) in the State column indicates no DR election, because they are notrequired on apoint-to-point link such as a serial connection.

QUESTION 174What is the administrative distance of OSPF?

A. 90B. 100C. 120D. 110

Correct Answer: DSection: Open Shortest Path First (OSPF)Explanation

Explanation/Reference:D. By default the administrative distance of OSPF is 110.

QUESTION 175In OSPF, Hellos are sent to what IP address?

A. 224.0.0.5B. 224.0.0.9C. 224.0.0.10D. 224.0.0.1


Explanation/Reference:A. Hello packets are addressed to multicast address 224.0.0.5.

QUESTION 176What command generated the following output?172.31.1.4 1 FULL/BDR 00:00:34 10.10.10.2 FastEthernet0/0192.168.20.1 0 FULL/ - 00:00:31 172.16.10.6 Serial0/1192.168.10.1 0 FULL/ - 00:00:32 172.16.10.2 Serial0/0

A. show ip ospf neighborB. show ip ospf databaseC. show ip routeD. show ip ospf interface


Explanation/Reference:A. The show ip ospf neighbor command displays all interface-related neighborinformation. This output shows the DR and BDR (unless your router is the DR or BDR),the RID ofall directly connected neighbors and the IP address and name of the directly connectedinterface.

QUESTION 177Updates addressed to 224.0.0.6 are destined for which type of OSPF router?

A. DRB. ASBRC. ABRD. All OSPF routers


Explanation/Reference:A. 224.0.0.6 is used on broadcast networks to reach the DR and BDR.

QUESTION 178For some reason, you cannot establish an adjacency relationship on a common Ethernet linkbetween two routers. Looking at this output, what is the cause of the problem?RouterA#Ethernet0/0 is up, line protocol is upInternet Address 172.16.1.2/16, Area 0Process ID 2, Router ID 172.126.1.2, Network Type BROADCAST, Cost: 10Transmit Delay is 1 sec, State DR, Priority 1Designated Router (ID) 172.16.1.2, interface address 172.16.1.1No backup designated router on this networkTimer intervals configured, Hello 5, Dead 20, Wait 20, Retransmit 5RouterB#Ethernet0/0 is up, line protocol is upInternet Address 172.16.1.1/16, Area 0Process ID 2, Router ID 172.126.1.1, Network Type BROADCAST, Cost: 10Transmit Delay is 1 sec, State DR, Priority 1Designated Router (ID) 172.16.1.1, interface address 172.16.1.2No backup designated router on this networkTimer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5

A. The OSPF area is not configured properly.B. The priority on RouterA should be set higher.C. The cost on RouterA should be set higher.D. The Hello and Dead timers are not configured properly.E. A backup designated router needs to be added to the network.F. The OSPF process ID numbers must match.

Correct Answer: DSection: Open Shortest Path First (OSPF)Explanation

Explanation/Reference:D. The Hello and Dead timers must be set the same on two routers on the same link orthey willnot form an adjacency (relationship). The default timers for OSPF are 10 seconds for theHellotimer and 40 seconds for the Dead timer.

QUESTION 179Which two of the following commands will place network 10.2.3.0/24 into area 0?(Choosetwo.)

A. A. router eigrp 10B. B. router ospf 10C. C. router ripD. D. network 10.0.0.0E. E. network 10.2.3.0 255.255.255.0 area 0

F. F. network 10.2.3.0 0.0.0.255 area0G. G. network 10.2.3.0 0.0.0.255 area 0

Correct Answer: BGSection: Open Shortest Path First (OSPF)Explanation

Explanation/Reference:B, G. To enable OSPF, you must first start OSPF using a process ID. The number isirrelevant;just choose a number from 1 to 65,535 and you’re good to go. After you start the OSPFprocess,you must configure interfaces on which to activate OSPF using the network commandwithwildcards and specification of an area. Option F is wrong because there must be a spaceafter theparameter area and before you list the area number.

QUESTION 180Given the following output, which statement or statements can be determined to be true?(Choose all that apply.)RouterA2# show ip ospf neighborNeighbor ID Pri State Dead Time Address Interface192.168.23.2 1 FULL/BDR 00:00:29 10.24.4.2 FastEthernet1/0192.168.45.2 2 FULL/BDR 00:00:24 10.1.0.5 FastEthernet0/0192.168.85.1 1 FULL/- 00:00:33 10.6.4.10 Serial0/1192.168.90.3 1 FULL/DR 00:00:32 10.5.5.2 FastEthernet0/1192.168.67.3 1 FULL/DR 00:00:20 10.4.9.20 FastEthernet0/2192.168.90.1 1 FULL/BDR 00:00:23 10.5.5.4 FastEthernet0/1<<output omitted>>

A. The DR for the network connected to Fa0/0 has an interface priority higher than 2.B. This router (A2) is the BDR for subnet 10.1.0.0.C. The DR for the network connected to Fa0/1 has a router ID of 10.5.5.2.D. The DR for the serial subnet is 192.168.85.1.


Explanation/Reference:A. The default OSPF interface priority is 1, and the highest interface priority determinesthedesignated router (DR) for a subnet. The output indicates that the router with a router IDof192.168.45.2 is currently the backup designated router (BDR) for the segment, whichindicates thatanother router became the DR. It can be then be assumed that the DR router has aninterface priorityhigher than 2. (The router serving the DR function is not present in the truncated sampleoutput.)

QUESTION 181What are three reasons for creating OSPF in a hierarchical design? (Choose three.)

A. To decrease routing overheadB. To speed up convergenceC. To confine network instability to single areas of the networkD. To make configuring OSPF easier

Correct Answer: ABCSection: Open Shortest Path First (OSPF)Explanation

Explanation/Reference:A, B, C. OSPF is created in a hierarchical design, not a flat design like RIP. Thisdecreasesrouting overhead, speeds up convergence, and confines network instability to a singlearea of thenetwork.

QUESTION 182 A(n) ____________is an OSPF data packet containing link-state and routing informationthat areshared among OSPF routers.

A. LSAB. TSAC. HelloD. SPF


Explanation/Reference:A. LSA packets are used to update and maintain the topological database

QUESTION 183If routers in a single area are configured with the same priority value, what value does a routeruse for the OSPF router ID in the absence of a loopback interface?

A. The lowest IP address of any physical interfaceB. The highest IP address of any physical interfaceC. The lowest IP address of any logical interfaceD. The highest IP address of any logical interface


Explanation/Reference:B. At the moment of OSPF process startup, the highest IP address on any activeinterface willbe the router ID (RID) of the router. If you have a loopback interface configured (logicalinterface),then that will override the interface IP address and become the RID of the routerautomatically.

QUESTION 184Which of the following statements is not true with regard to layer 2 switching?

A. Layer 2 switches and bridges are faster than routers because they don’t take up time lookingat the Data Link layer header information.

B. Layer 2 switches and bridges look at the frame’s hardware addresses before deciding toeither forward, flood, or drop the frame.

C. Switches create private, dedicated collision domains and provide independent bandwidth oneach port.

D. Switches use application-specific integrated circuits (ASICs) to build and maintain theirMAC filter tables.

Correct Answer: ASection: Layer 2 SwitchingExplanation

Explanation/Reference:A. Layer 2 switches and bridges are faster than routers because they don’t take up timelookingat the Network Layer header information. They do make use of the Data Link layerinformation.

QUESTION 185What statement(s) is/are true about the output shown below? (Choose all that apply.)S3#sh port-security int f0/3Port Security : EnabledPort Status : Secure-shutdownViolation Mode : ShutdownAging Time : 0 minsAging Type : AbsoluteSecureStatic Address Aging : DisabledMaximum MAC Addresses : 1Total MAC Addresses : 2Configured MAC Addresses : 0Sticky MAC Addresses : 0Last Source Address:Vlan : 0013:0ca69:00bb3:00ba8:1Security Violation Count : 1

A. The port light for F0/3 will be amber in color.B. The F0/3 port is forwarding frames.C. This problem will resolve itself in a few minutes.D. This port requires the shutdown command to function.

Correct Answer: ADSection: Layer 2 SwitchingExplanation

Explanation/Reference:A, D. In the above output, you can see that the port is in Secure-shutdown mode and thelightfor the port would be amber. To enable the port again you’d need to do the following:S3(config-if)#shutdownS3(config-if)#no shutdown

QUESTION 186Which of the following commands in the configuration, is a prerequisite for the other commandsto function?S3#config tS(config)#int fa0/3S3(config-if#switchport port-security

S3(config-if#switchport port-security maximum 3S3(config-if#switchport port-security violation restrictS3(config-if#Switchport mode-security aging time 10

A. switchport mode-security aging time 10B. switchport port-securityC. switchport port-security maximum 3D. switchport port-security violation restrict

Correct Answer: BSection: Layer 2 SwitchingExplanation

Explanation/Reference:B. The switchport port-security command enables port security, which is a prerequisitefor the other commands to function

QUESTION 187Which if the following is not an issue addressed by STP?

A. Broadcast stormsB. Gateway redundancyC. A device receiving multiple copies of the same frameD. Constant updating of the MAC filter table


Explanation/Reference:B. Gateway redundancy is not an issue addressed by STP.

QUESTION 188What issue that arises when redundancy exists between switches is shown in the figure?

A. Broadcast stormB. Routing loopC. Port violationD. Loss of gateway

Correct Answer: ASection: Layer 2 SwitchingExplanation

Explanation/Reference:A. If no loop avoidance schemes are put in place, the switches will flood broadcastsendlesslythroughout the internetwork. This is sometimes referred to as a broadcast storm.

QUESTION 189Which two of the following switch port violation modes will alert you via SNMP that aviolation has occurred on a port?

A. RestrictB. ProtectC. ShutdownD. Err-disable

Correct Answer: BCSection: Layer 2 SwitchingExplanation

Explanation/Reference:B, C. Shutdown and protect mode will alert you via SNMP that a violation has occurredon aport.

QUESTION 190On which interface have you configured an IP address for a switch?

A. int fa0/0B. int vty 0 15C. int vlan 1D. int s/0/0

Correct Answer: CSection: Layer 2 SwitchingExplanation

Explanation/Reference:C. The IP address is configured under a logical interface, called a management domainorVLAN 1.

QUESTION 191Which Cisco IOS command is used to verify the port security configuration of a switch port?

A. show interfaces port-securityB. show port-security interfaceC. show ip interfaceD. show interfaces switchport


Explanation/Reference:B. The show port-security interface command displays the current port security andstatus of a switch port, as in this sample output:Switch# show port-security interface fastethernet0/1Port Security: EnabledPort status: SecureUpViolation mode: ShutdownMaximum MAC Addresses: 2Total MAC Addresses: 2Configured MAC Addresses: 2Aging Time: 30 minsAging Type: InactivitySecureStatic address aging: EnabledSecurity Violation count: 0

QUESTION 192Which of the following methods will ensure that only one specific host can connect to port F0/3on a switch? (Choose two. Each correct answer is a separate solution.)

A. Configure port security on F0/3 to accept traffic other than that of the MAC address of thehost.

B. Configure the MAC address of the host as a static entry associated with port F0/3.C. Configure an inbound access control list on port F0/3 limiting traffic to the IP address of the

host.D. Configure port security on F0/3 to accept traffic only from the MAC address of the host.

Correct Answer: BDSection: Layer 2 SwitchingExplanation

Explanation/Reference:B, D. To limit connections to a specific host, you should configure the MAC address ofthe hostas a static entry associated with the port, although be aware that this host can stillconnect to anyother port, but no other port can connect to f0/3, in this example. Another solution wouldbe toconfigure port security to accept traffic only from the MAC address of the host. Bydefault, anunlimited number of MAC addresses can be learned on a single switch port, whether it isconfigured as an access port or a trunk port. Switch ports can be secured by definingone or morespecific MAC addresses that should be allowed to connect and by defining violationpolicies (suchas disabling the port) to be enacted if additional hosts try to gain a connection.

QUESTION 193What will be the effect of executing the following command on port F0/1?switch(config-if)# switchport port-security mac-address 00C0.35F0.8301

A. The command configures an inbound access control list on port F0/1, limiting traffic to the IPaddress of the host.

B. The command expressly prohibits the MAC address of 00c0.35F0.8301 as an allowed host onthe switch port.

C. The command encrypts all traffic on the port from the MAC address of 00c0.35F0.8301.D. The command statically defines the MAC address of 00c0.35F0.8301 as an allowed host on

the switch port.

Correct Answer: DSection: Layer 2 SwitchingExplanation

Explanation/Reference:D. The command statically defines the MAC address of 00c0.35F0.8301 as an allowedhost onthe switch port. By default, an unlimited number of MAC addresses can be learned on asingleswitch port, whether it is configured as an access port or a trunk port. Switch ports canbe securedby defining one or more specific MAC addresses that should be allowed to connect andviolationpolicies (such as disabling the port) if additional hosts try to gain a connection.

QUESTION 194The conference room has a switch port available for use by the presenter during classes, andeach presenter uses the same PC attached to the port. You would like to prevent other PCs from

using that port. You have completely removed the former configuration in order to start anew. Whichof the following steps is not required to prevent any other PCs from using that port?

A. Enable port security.B. Assign the MAC address of the PC to the port.C. Make the port an access port.D. Make the port a trunk port.

Correct Answer: DSection: Layer 2 SwitchingExplanation

Explanation/Reference:D. You would not make the port a trunk. In this example, this switchport is a member ofoneVLAN. However, you can configure port security on a trunk port, but again, not valid forthisquestion.

QUESTION 195Which of the following statements is true with regard to VLANs?

A. VLANs greatly reduce network security.B. VLANs increase the number of collision domains while decreasing their size.C. VLANs decrease the number of broadcast domains while decreasing their size.D. Network adds, moves, and changes are achieved with ease by just configuring a port into the

appropriate VLAN.

Correct Answer: DSection: VLANs and InterVLAN RoutingExplanation

Explanation/Reference:.D. Here’s a list of ways VLANs simplify network management:Network adds, moves, and changes are achieved with ease by just configuring a portinto theappropriate VLAN.A group of users that need an unusually high level of security can be put into its ownVLANso that users outside of the VLAN can’t communicate with them.As a logical grouping of users by function, VLANs can be considered independent fromtheirphysical or geographic locations.VLANs greatly enhance network security if implemented correctly.VLANs increase the number of broadcast domains while decreasing their size.

QUESTION 196What is the only type of second VLAN of which an access port can be a member?

A. SecondaryB. VoiceC. PrimaryD. Trunk

Correct Answer: BSection: VLANs and InterVLAN RoutingExplanation

Explanation/Reference:B. While in all other cases access ports can be a member of only one VLAN, mostswitches willallow you to add a second VLAN to an access port on a switch port for your voice traffic;it’scalled the voice VLAN. The voice VLAN used to be called the auxiliary VLAN, whichallowed itto be overlaid on top of the data VLAN, enabling both types of traffic through the sameport.

QUESTION 197In the following configuration, what command is missing in the creation of the VLAN interface?2960#config t2960(config)#int vlan 12960(config-if)#ip address 192.168.10.2 255.255.255.02960(config-if)#exit2960(config)#ip default-gateway 192.168.10.1

A. no shutdown under int vlan 1B. encapsulation dot1q 1 under int vlan 1C. switchport access vlan 1D. passive-interface

Correct Answer: ASection: VLANs and InterVLAN RoutingExplanation

Explanation/Reference:A. Yes, you have to do a no shutdown on the VLAN interface

QUESTION 198Which of the following statements is true with regard to ISL and 802.1q?

A. 802.1q encapsulates the frame with control information; ISL inserts an ISL field along withtag control information.

B. 802.1q is Cisco proprietary.C. ISL encapsulates the frame with control information; 802.1q inserts an 802.1q field along

with tag control information.D. ISL is a standard.

Correct Answer: CSection: VLANs and InterVLAN RoutingExplanation

Explanation/Reference:C. Unlike ISL which encapsulates the frame with control information, 802.1q inserts an802.1qfield along with tag control information.

QUESTION 199Write the command that generated the following output:VLAN Name Status Ports---- ------------------------- --------- ------------------------1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4Fa0/5, Fa0/6, Fa0/7, Fa0/8Fa0/9, Fa0/10, Fa0/11, Fa0/12Fa0/13, Fa0/14, Fa0/19, Fa0/20Fa0/21, Fa0/22, Fa0/23, Gi0/1

Gi0/22 Sales active3 Marketing active4 Accounting active[output cut]

A. show vlanB. show interfacesC. show ip interfaceD. show run


Explanation/Reference:show vlan After you create the VLANs that you want, you can use the show vlan commandtocheck them out.

QUESTION 200Based on the configuration shown below, what statement is true?S1(config)#ip routingS1(config)#int vlan 10S1(config-if)#ip address 192.168.10.1 255.255.255.0S1(config-if)#int vlan 20S1(config-if)#ip address 192.168.20.1 255.255.255.0

A. This is a multilayer switch.B. The two VLANs are in the same subnet.C. Encapsulation must be configured.D. VLAN 10 is the management VLAN.


Explanation/Reference:A. With a multilayer switch, enable IP routing and create one logical interface for eachVLANusing the interface vlan number command and you’re now doing inter-VLAN routing onthebackplane of the switch!

QUESTION 201What is true of the output shown below?S1#sh vlanVLAN Name Status Ports---- ---------------------- --------- -------------------------------1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4Fa0/5, Fa0/6, Fa0/7, Fa0/8Fa0/9, Fa0/10, Fa0/11, Fa0/12Fa0/13, Fa0/14, Fa0/19, Fa0/20,Fa0/22, Fa0/23, Gi0/1, Gi0/22 Sales active3 Marketing Fa0/214 Accounting active[output cut]

A. Interface F0/15 is a trunk port.

B. Interface F0/17 is an access port.C. Interface F0/21 is a trunk port.D. VLAN 1 was populated manually.


Explanation/Reference:A. Ports Fa0/15–18 are not present in any VLANs. They are trunk ports.

QUESTION 202802.1q untagged frames are members of the _________ VLAN.

A. AuxiliaryB. VoiceC. NativeD. Private


Explanation/Reference:C. Untagged frames are members of the native VLAN, which by default is VLAN 1.

QUESTION 203Write the command that generated the following output. Write only the command and not theprompt:Name: Fa0/15Switchport: EnabledAdministrative Mode: dynamic desirableOperational Mode: trunkAdministrative Trunking Encapsulation: negotiateOperational Trunking Encapsulation: islNegotiation of Trunking: OnAccess Mode VLAN: 1 (default)Trunking Native Mode VLAN: 1 (default)Administrative Native VLAN tagging: enabledVoice VLAN: none[output cut]

A. sh interfaces fastEthernet 0/15 switchport B. sh interfaces fastEthernet 0/15 C. sh fastEthernet 0/15 switchport D. sh interfaces 0/15 switchport


Explanation/Reference:sh interfaces fastEthernet 0/15 switchport

This show interfacesinterfaceswitchport command shows us the administrative mode ofdynamic desirable and that the port is a trunk port, DTP was used to negotiate the frametagging method of ISL, and the native VLAN is the default of 1.

QUESTION 204

Which statement is true regarding virtual local area networks (VLANs)?

A. VLANs are location dependent.B. VLANs are limited to a single switch.C. VLANs may be subnets of major networks.D. VLANs define collision domains.


Explanation/Reference:C. VLANs are not location dependent and can span to multiple switches using trunk links.Moreover, they can be subnets of major networks.

QUESTION 205What is the purpose of frame tagging in virtual LAN (VLAN) configurations?


A. Inter-VLAN routingB. Encryption of network packetsC. Frame identification over trunk linksD. Frame identification over access links


Explanation/Reference:C. Frame tagging is used when VLAN traffic travels over a trunk link. Trunk links carryframesfor multiple VLANs. Therefore, frame tags are used for identification of frames fromdifferentVLANs.

QUESTION 206Write the command to create VLAN 2 on a layer 2 switch. Write only the command and not theprompt.

A. vlan 2B. int vlan 2C. line vlan 2D. con vlan 2


Explanation/Reference:vlan 2 To configure VLANs on a Cisco Catalyst switch, use the global config vlan

command

QUESTION 207Which statement is true regarding 802.1q frame tagging?

A. 802.1q adds a 26-byte trailer and 4-byte header.B. 802.1q uses a native VLAN.C. The original Ethernet frame is not modified.D. 802.1q only works with Cisco switches.

Correct Answer: BSection: VLANs and InterVLAN RoutingExplanation

Explanation/Reference:B. 802.1q uses the native VLAN

QUESTION 208Write the command that prevents an interface from generating DTP frames. Write only thecommand and not the prompt.

A. switchport nonegotiate B. NAC. NAD. NA


Explanation/Reference:switchport nonegotiate You can use this command only when the interface switchport mode is access or trunk.You must manually configure the neighboring interface as a trunk interface to establish atrunk link.

QUESTION 209Which of the following statements is false when a packet is being compared to an access list?

A. It’s always compared with each line of the access list in sequential order.B. Once the packet matches the condition on a line of the access list, the packet is acted upon and

no further comparisons take place.C. There is an implicit “deny” at the end of each access list.D. Until all lines have been analyzed, the comparison is not over.

Correct Answer: DSection: SecurityExplanation

Explanation/Reference:D. It’s compared with lines of the access list only until a match is made. Once the packetmatches the condition on a line of the access list, the packet is acted upon and nofurthercomparisons take place - NOTE: Question requested FALSE STATEMENT, THEOTHER THREE ARE CORRECT !

QUESTION 210You need to create an access list that will prevent hosts in the network range of 192.168.160.0 to

192.168.191.0. Which of the following lists will you use?

A. access-list 10 deny 192.168.160.0 255.255.224.0B. access-list 10 deny 192.168.160.0 0.0.191.255C. access-list 10 deny 192.168.160.0 0.0.31.255D. access-list 10 deny 192.168.0.0 0.0.31.255

Correct Answer: CSection: SecurityExplanation

Explanation/Reference:C. The range of 192.168.160.0 to 192.168.191.0 is a block size of 32. The networkaddress is192.168.160.0 and the mask would be 255.255.224.0, which for an access list must be awildcardformat of 0.0.31.255. The 31 is used for a block size of 32. The wildcard is always oneless thanthe block size.

QUESTION 211You have created a named access list called Blocksales. Which of the following is a validcommand for applying this to packets trying to enter interface Fa0/0 of your router?

A. (config)#ip access-group 110 inB. (config-if)#ip access-group 110 inC. (config-if)#ip access-group Blocksales inD. (config-if)#Blocksales ip access-list in


Explanation/Reference:C. Using a named access list just replaces the number used when applying the list to therouter’sinterface. ip access-group Blocksales in is correct.

QUESTION 212Which access list statement will permit all HTTP sessions to network 192.168.144.0/24containing web servers?

A. access-list 110 permit tcp 192.168.144.0 0.0.0.255 any eq 80B. access-list 110 permit tcp any 192.168.144.0 0.0.0.255 eq 80C. access-list 110 permit tcp 192.168.144.0 0.0.0.255 192.168.144.0 0.0.0.255

any eq 80D. access-list 110 permit udp any 192.168.144.0 eq 80

Correct Answer: BSection: SecurityExplanation

Explanation/Reference:B. The list must specify TCP as the Transport layer protocol and use a correct wildcardmask (inthis case 0.0.0.255), and it must specify the destination port (80). It also should specifyall as the

set of computers allowed to have this access.

QUESTION 213Which of the following access lists will allow only HTTP traffic into network 196.15.7.0?

A. access-list 100 permit tcp any 196.15.7.0 0.0.0.255 eq wwwB. access-list 10 deny tcp any 196.15.7.0 eq wwwC. access-list 100 permit 196.15.7.0 0.0.0.255 eq wwwD. access-list 110 permit ip any 196.15.7.0 0.0.0.255E. access-list 110 permit www 196.15.7.0 0.0.0.255

Correct Answer: ASection: SecurityExplanation

Explanation/Reference:A. The first thing to check in a question like this is the access-list number. Right away,you cansee that the second option is wrong because it is using a standard IP access-list number.Thesecond thing to check is the protocol. If you are filtering by upper-layer protocol, then youmust beusing either UDP or TCP; this eliminates the fourth option. The third and last answershave thewrong syntax.

QUESTION 214What router command allows you to determine whether an IP access list is enabled on aparticular interface?

A. show ip portB. show access-listsC. show ip interfaceD. show access-lists interface


Explanation/Reference:C. Of the available choices, only the show ip interface command will tell you whichinterfaces have access lists applied. show access-lists will not show you which interfaceshavean access list applied.

QUESTION 215If you wanted to deny all Telnet connections to only network 192.168.10.0, which commandcould you use?

A. access-list 100 deny tcp 192.168.10.0 255.255.255.0 eq telnetB. access-list 100 deny tcp 192.168.10.0 0.255.255.255 eq telnetC. access-list 100 deny tcp any 192.168.10.0 0.0.0.255 eq 23D. access-list 100 deny 192.168.10.0 0.0.0.255 any eq 23


Explanation/Reference:C. The extended access list ranges are 100–199 and 2000–2699, so the access-listnumber of100 is valid. Telnet uses TCP, so the protocol TCP is valid. Now you just need to look forthesource and destination address. Only the third option has the correct sequence ofparameters.Option B may work, but the question specifically states “only” to network 192.168.10.0,and thewildcard in option B is too broad.

QUESTION 216If you wanted to deny FTP access from network 200.200.10.0 to network 200.199.11.0 but alloweverything else, which of the following command strings is valid?

A. access-list 110 deny 200.200.10.0 to network 200.199.11.0 eq ftpaccess-list 111 permit ip any 0.0.0.0 255.255.255.255

B. access-list 1 deny ftp 200.200.10.0 200.199.11.0 any anyC. access-list 100 deny tcp 200.200.10.0 0.0.0.255 200.199.11.0 0.0.0.255 eq

ftpD. access-list 198 deny tcp 200.200.10.0 0.0.0.255 200.199.11.0 0.0.0.255 eq

ftpaccess-list 198 permit ip any 0.0.0.0 255.255.255.255


Explanation/Reference:D. Extended IP access lists use numbers 100–199 and 2000–2699 and filter based onsource anddestination IP address, protocol number, and port number. The last option is correctbecause of thesecond line that specifies permit ip any any. (I used 0.0.0.0 255.255.255.255, which isthesame as the any option.) The third option does not have this, so it would deny accessbut not alloweverything else.

QUESTION 217You want to create an extended access list that denies the subnet of the following host: 172.16.50.172/20.Which of the following would you start your list with?

A. access-list 110 deny ip 172.16.48.0 255.255.240.0 anyB. access-list 110 udp deny 172.16.0.0 0.0.255.255 ip anyC. access-list 110 deny tcp 172.16.64.0 0.0.31.255 any eq 80D. access-list 110 deny ip 172.16.48.0 0.0.15.255 any


Explanation/Reference:D. First, you must know that a /20 is 255.255.240.0, which is a block size of 16 in thethirdoctet. Counting by 16s, this makes our subnet 48 in the third octet, and the wildcard for

the thirdoctet would be 15 since the wildcard is always one less than the block size.

QUESTION 218Which of the following is the wildcard (inverse) version of a /27 mask?

A. 0.0.0.7B. 0.0.0.31C. 0.0.0.27D. 0.0.31.255


Explanation/Reference:B. To find the wildcard (inverse) version of this mask, the zero and one bits are simplyreversed as follows:11111111.11111111.11111111.11100000 (27 one bits, or /27)00000000.00000000.00000000.00011111 (wildcard/inverse mask)

QUESTION 219You want to create an extended access list that denies the subnet of the following host: 172.16.198.94/19.Which of the following would you start your list with?

A. access-list 110 deny ip 172.16.192.0 0.0.31.255 anyB. access-list 110 deny ip 172.16.0.0 0.0.255.255 anyC. access-list 10 deny ip 172.16.172.0 0.0.31.255 anyD. access-list 110 deny ip 172.16.188.0 0.0.15.255 any

Correct Answer: ASection: SecurityExplanation

Explanation/Reference:A. First, you must know that a /19 is 255.255.224.0, which is a block size of 32 in thethirdoctet. Counting by 32s, this makes our subnet 192 in the third octet, and the wildcard forthe thirdoctet would be 31 since the wildcard is always one less than the block size.

QUESTION 220The following access list has been applied to an interface on a router:access-list 101 deny tcp 199.111.16.32 0.0.0.31 host 199.168.5.60Which of the following IP addresses will be blocked because of this single rule in the list? (Chooseall that apply.)

A. 199.111.16.67B. 199.111.16.38C. 199.111.16.65D. 199.111.16.54.14


Explanation/Reference:B. The scope of an access list is determined by the wildcard mask and the network

address towhich it is applied. For example, in this case the starting point of the list of addressesaffected bythe mask is the network ID 192.111.16.32. The wildcard mask is 0.0.0.31. Adding thevalue of thelast octet in the mask to the network address (32 + 31 = 63) tells you where the effects oftheaccess list ends, which is 192.111.16.63. Therefore, all addresses in the range192.111.16.32–192.111.16.63 will be denied by this list.

QUESTION 221Which of the following commands connects access list 110 inbound to interface Ethernet0?

A. Router(config)#ip access-group 110 inB. Router(config)#ip access-list 110 inC. Router(config-if)#ip access-group 110 inD. Router(config-if)#ip access-list 110 in


Explanation/Reference:C. To place an access list on an interface, use the ip access-group command in interfaceconfiguration mode.

QUESTION 222What is the effect of this single-line access list?access-list 110 deny ip 172.16.10.0 0.0.0.255 host 1.1.1.1

A. Denies only the computer at 172.16.10B. Denies all trafficC. Denies the subnet 172.16.10.0/26D. Denies the subnet 172.16.10.0/25


Explanation/Reference:B. With no permit statement, the ACL will deny all traffic.

QUESTION 223You configure the following access list. What will the result of this access list be?access-list 110 deny tcp 10.1.1.128 0.0.0.63 any eq smtpaccess-list 110 deny tcp any any eq 23int ethernet 0ip access-group 110 out

A. Email and Telnet will be allowed out E0.B. Email and Telnet will be allowed in E0.C. Everything but email and Telnet will be allowed out E0.D. No IP traffic will be allowed out E0.


Explanation/Reference:D. If you add an access list to an interface and you do not have at least one permitstatement,then you will affectively shut down the interface because of the implicit deny any at theend ofevery list.

QUESTION 224Which of the following series of commands will restrict Telnet access to the router?

A. Lab_A(config)#access-list 10 permit 172.16.1.1Lab_A(config)#line con 0Lab_A(config-line)#ip access-group 10 in

B. Lab_A(config)#access-list 10 permit 172.16.1.1Lab_A(config)#line vty 0 4Lab_A(config-line)#access-class 10 out

C. Lab_A(config)#access-list 10 permit 172.16.1.1Lab_A(config)#line vty 0 4Lab_A(config-line)#access-class 10 in

D. Lab_A(config)#access-list 10 permit 172.16.1.1Lab_A(config)#line vty 0 4Lab_A(config-line)#ip access-group 10 in


Explanation/Reference:C. Telnet access to the router is restricted by using either a standard or extended IPaccess listinbound on the VTY lines of the router. The command access-class is used to apply theaccesslist to the VTY lines.

QUESTION 225Which of the following is true regarding access lists applied to an interface?

A. You can place as many access lists as you want on any interface until you run out of memory.B. You can apply only one access list on any interface.C. One access list may be configured, per direction, for each layer 3 protocol configured on an

interface.D. You can apply two access lists to any interface.


Explanation/Reference:C. A Cisco router has rules regarding the placement of access lists on a router interface.Youcan place one access list per direction for each layer 3 protocol configured on aninterface.

QUESTION 226What is the most common attack on a network today?

A. Lock picking

B. NaggleC. DoSD. auto secure


Explanation/Reference:C. The most common attack on a network today is a denial of service (DoS) becausethey arethe easiest attack to achieve.

QUESTION 227You need to stop DoS attacks in real time and have a log of anyone who has tried to attack yournetwork. What should you do your network?

A. Add more routers.B. Use the auto secure command.C. Implement IDS/IPS.D. Configure Naggle.


Explanation/Reference:C. Implementing intrusion detection services and intrusion prevention services will helpnotifyyou and stop attacks in real time.

QUESTION 228Which of the following are disadvantages of using NAT? (Choose three.)

A. Translation introduces switching path delays.B. NAT conserves legally registered addresses.C. NAT causes loss of end-to-end IP traceability.D. NAT increases flexibility when connecting to the Internet.E. Certain applications will not function with NAT enabled.F. NAT reduces address overlap occurrence.

Correct Answer: ACESection: Network Address TranslationExplanation

Explanation/Reference:A, C, E. NAT is not perfect and can cause some issues in some networks, but mostnetworkswork just fine. NAT can cause delays and troubleshooting problems, and someapplications justwon’t work.

QUESTION 229Which of the following are advantages of using NAT? (Choose three.)

A. Translation introduces switching path delays.B. NAT conserves legally registered addresses.

C. NAT causes loss of end-to-end IP traceability.D. NAT increases flexibility when connecting to the Internet.E. Certain applications will not function with NAT enabled.F. NAT remedies address overlap occurrence.

Correct Answer: BDFSection: Network Address TranslationExplanation

Explanation/Reference:B, D, F. NAT is not perfect, but there are some advantages. It conserves globaladdresses, whichallow us to add millions of hosts to the Internet without “real” IP addresses. This providesflexibility in our corporate networks. NAT can also allow you to use the same subnetmore thanonce in the same network without overlapping networks.

QUESTION 230Which command will allow you to see real-time translations on your router?

A. show ip nat translationsB. show ip nat statisticsC. debug ip natD. clear ip nat translations *

Correct Answer: CSection: Network Address TranslationExplanation

Explanation/Reference:C. The command debug ip nat will show you in real time the translations occurring onyourrouter

QUESTION 231Which command will show you all the translations active on your router?


Correct Answer: ASection: Network Address TranslationExplanation

Explanation/Reference:A. The command show ip nat translations will show you the translation table containingall the active NAT entries.

QUESTION 232Which command will clear all the translations active on your router?


Correct Answer: DSection: Network Address TranslationExplanation

Explanation/Reference:D. The command clear ip nat translations * will clear all the active NAT entries in yourtranslation table

QUESTION 233Which command will show you the summary of the NAT configuration?


Correct Answer: BSection: Network Address TranslationExplanation

Explanation/Reference:B. The show ip nat statistics command displays a summary of the NAT configuration aswell as counts of active translation types, hits to an existing mapping, misses (causing anattempt tocreate a mapping), and expired translations

QUESTION 234Which command will create a dynamic pool named Todd that will provide you with 30 globaladdresses?

A. ip nat pool Todd 171.16.10.65 171.16.10.94 net 255.255.255.240B. ip nat pool Todd 171.16.10.65 171.16.10.94 net 255.255.255.224C. ip nat pool todd 171.16.10.65 171.16.10.94 net 255.255.255.224D. ip nat pool Todd 171.16.10.1 171.16.10.254 net 255.255.255.0


Explanation/Reference:B. The command ip nat poolname creates the pool that hosts can use to get onto theglobalInternet. What makes option B correct is that the range 171.16.10.65 through171.16.10.94 includes30 hosts, but the mask has to match 30 hosts as well, and that mask is255.255.255.224. Option C iswrong because there is a lowercase t in the pool name. Pool names are case sensitive.

QUESTION 235Which of the following are methods of NAT? (Choose three.)

A. StaticB. IP NAT poolC. DynamicD. NAT double-translationE. Overload

Correct Answer: ACESection: Network Address TranslationExplanation

Explanation/Reference:A, C, E. You can configure NAT three ways on a Cisco router: static, dynamic, and NATOverload (PAT).

QUESTION 236When creating a pool of global addresses, which of the following can be used instead of thenetmask command?

A. / (slash notation)B. prefix-lengthC. no maskD. block-size


Explanation/Reference:B. Instead of the netmask command, you can use the prefix-lengthlength statement

QUESTION 237Which of the following would be a good starting point for troubleshooting if your router is nottranslating?

A. RebootB. Call CiscoC. Check your interfaces for the correct configurationD. Run the debug all command


Explanation/Reference:C. In order for NAT to provide translation services, you must have ip nat inside and ipnat outside configured on your router’s interfaces.

QUESTION 238Which of the following would be good reasons to run NAT? (Choose three.)

A. You need to connect to the Internet and your hosts don’t have globally unique IP addresses.B. You change to a new ISP that requires you to renumber your network.C. You don’t want any hosts connecting to the Internet.D. You require two intranets with duplicate addresses to merge.

Correct Answer: ABDSection: Network Address TranslationExplanation

Explanation/Reference:A, B, D. The most popular use of NAT is if you want to connect to the Internet and youdon’twant hosts to have global (real) IP addresses, but options B and D are correct as well.

QUESTION 239

Which of the following is considered to be the inside host’s address after translation?

A. Inside localB. Outside localC. Inside globalD. Outside global


Explanation/Reference:C. An inside global address is considered to be the IP address of the host on the privatenetwork after translation

QUESTION 240Which of the following is considered to be the inside host’s address before translation?

A. Inside localB. Outside localC. Inside globalD. Outside global


Explanation/Reference:A. An inside local address is considered to be the IP address of the host on the privatenetworkbefore translation

QUESTION 241By looking at the following output, which of the following commands would allow dynamictranslations?Router#show ip nat transPro Inside global Inside local Outside local Outside global--- 1.1.128.1 10.1.1.1 --- ------ 1.1.130.178 10.1.1.2 --- ------ 1.1.129.174 10.1.1.10 --- ------ 1.1.130.101 10.1.1.89 --- ------ 1.1.134.169 10.1.1.100 --- ------ 1.1.135.174 10.1.1.200 --- ---

A. ip nat inside source pool todd 1.1.128.1 1.1.135.254 prefix-length 19B. ip nat pool todd 1.1.128.1 1.1.135.254 prefix-length 19C. ip nat pool todd 1.1.128.1 1.1.135.254 prefix-length 18D. ip nat pool todd 1.1.128.1 1.1.135.254 prefix-length 21

Correct Answer: DSection: Network Address TranslationExplanation

Explanation/Reference:D. What we need to figure out for this question is only the inside global pool. Basicallywestart at 1.1.128.1 and end at 1.1.135.174; our block size is 8 in the third octet, or /21.Always look

for your block size and the interesting octet and you can find your answer every time

QUESTION 242Your inside locals are not being translated to the inside global addresses. Which of thefollowing commands will show you if your inside globals are allowed to use the NAT pool?ip nat pool Corp 198.18.41.129 198.18.41.134 netmask 255.255.255.248ip nat inside source list 100 int pool Corp overload

A. debug ip natB. show access-listC. show ip nat translationD. show ip nat statistics


Explanation/Reference:B. Once you create your pool, the command ip nat inside source must be used to saywhich inside locals are allowed to use the pool. In this question we need to see if access-list 100is configured correctly, if at all, so show access-list is the best answer.

QUESTION 243Which command would you place on the interface of a private network?

A. ip nat insideB. ip nat outsideC. ip outside globalD. ip inside local


Explanation/Reference:A. You must configure your interfaces before NAT will provide any translations. On theinsidenetwork interfaces, you would use the command ip nat inside. On the outside networkinterfaces, you will use the command ip nat outside.

QUESTION 244Which command would you place on an interface connected to the Internet?

A. ip nat insideB. ip nat outsideC. ip outside globalD. ip inside local


Explanation/Reference:B. You must configure your interfaces before NAT will provide any translations. On theinsidenetworks you would use the command ip nat inside. On the outside network interfaces,you will

use the command ip nat outside.

QUESTION 245Port Address Translation is also called what?

A. NAT FastB. NAT StaticC. NAT OverloadD. Overloading Static


Explanation/Reference:C. Another term for Port Address Translation is NAT Overload because that is the keywordused to enable port address translation.

QUESTION 246What does the asterisk (*) represent in the following output?NAT*: s=172.16.2.2, d=192.168.2.1->10.1.1.1 [1]

A. The packet was destined for a local interface on the router.B. The packet was translated and fast-switched to the destination.C. The packet attempted to be translated but failed.D. The packet was translated but there was no response from the remote host.


Explanation/Reference:B. Fast-switching is used on Cisco routers to create a type of route cache in order toquicklyforward packets through a router without having to parse the routing table for everypacket. Aspackets are processed-switched (looked up in the routing table), this information isstored in thecache for later use if needed for faster routing processing.

QUESTION 247Which of the following needs to be added to the configuration to enable PAT?ip nat pool Corp 198.18.41.129 198.18.41.134 netmask 255.255.255.248access-list 1 permit 192.168.76.64 0.0.0.31

A. ip nat pool inside overloadB. ip nat inside source list 1 pool Corp overloadC. ip nat pool outside overloadD. ip nat pool Corp 198.41.129 net 255.255.255.0 overload


Explanation/Reference:B. Once you create a pool for the inside locals to use to get out to the global Internet,you mustconfigure the command to allow them access to the pool. The ip nat inside source

listnumberpool-name overload command has the correct sequence for this question

QUESTION 248Which of the following is true when describing a global unicast address?

A. Packets addressed to a unicast address are delivered to a single interface.B. These are your typical publicly routable addresses, just like a regular publicly routable

address in IPv4.C. These are like private addresses in IPv4 in that they are not meant to be routed over the

Internet.D. These addresses are meant for nonrouting purposes, but they are almost globally unique, so it

is unlikely they will have an address overlap.

Correct Answer: BSection: Internet Protocol Version 6 (IPv6)Explanation

Explanation/Reference:B. Unlike unicast addresses, global unicast addresses are meant to be routed.

QUESTION 249Which of the following is true when describing a unicast address?

A. Packets addressed to a unicast address are delivered to a single interface.B. These are your typical publicly routable addresses, just like a regular publicly routable

address in IPv4.C. These are like private addresses in IPv4 in that they are not meant to be routed.D. These addresses are meant for nonrouting purposes, but they are almost globally unique, so it


Correct Answer: ASection: Internet Protocol Version 6 (IPv6)Explanation

Explanation/Reference:A. Packets addressed to a unicast address are delivered to a single interface. For loadbalancing,multiple interfaces can use the same address.

QUESTION 250Which of the following is true when describing a link-local address?

A. Packets addressed to a broadcast address are delivered to a single interface.B. These are your typical publicly routable addresses, just like a regular publicly routable

address in IPv4.C. These are like private addresses in IPv4 in that they are not meant to be routed over the

Internet.D. These addresses are meant for nonrouting purposes, but they are almost globally unique, so it


Correct Answer: CSection: Internet Protocol Version 6 (IPv6)Explanation

Explanation/Reference:C. Link-local addresses are meant for throwing together a temporary LAN for meetingsor asmall LAN that is not going to be routed but needs to share and access files and

services locally

QUESTION 251Which of the following is true when describing a unique local address?

A. Packets addressed to a unique local address are delivered to a single interface.B. These are your typical publicly routable addresses, just like a regular publicly routable

address in IPv4.C. These are like private addresses in IPv4 in that they are not meant to be routed.D. These addresses are not meant for Internet routing purposes, but they are unique, so it is

unlikely they will have an address overlap.

Correct Answer: DSection: Internet Protocol Version 6 (IPv6)Explanation

Explanation/Reference:D. These addresses are meant for nonrouting purposes like link-local, but they arealmostglobally unique, so it is unlikely they will have an address overlap. Unique localaddresses weredesigned as a replacement for site-local addresses.

QUESTION 252Which of the following is true when describing a multicast address?

A. Packets addressed to a multicast address are delivered to a single interface.B. Packets are delivered to all interfaces identified with the address. This is also called a oneto-

many address.C. A multicast address identifies multiple interfaces and is delivered to only one address. This

address can also be called one-to-one-of-many.D. These addresses are meant for nonrouting purposes, but they are almost globally unique, so it


Correct Answer: BSection: Internet Protocol Version 6 (IPv6)Explanation

Explanation/Reference:B. Packets addressed to a multicast address are delivered to all interfaces identified withthemulticast address, the same as in IPv4. It is also called a one-to-many address. You canalways tella multicast address in IPv6 because multicast addresses always start with FF

QUESTION 253Which of the following is true when describing an anycast address?

A. Packets addressed to an anycast address are delivered to a single interface.B. Packets are delivered to all interfaces identified by the address. This is also called a one-tomany

address.C. This address identifies multiple interfaces and the anycast packet is only delivered to one

device. This address can also be called one-to-one-of-many.D. These addresses are meant for nonrouting purposes, but they are almost globally unique, so it


Correct Answer: CSection: Internet Protocol Version 6 (IPv6)

Explanation

Explanation/Reference:C. Anycast addresses identify multiple interfaces, which is somewhat similar to multicastaddresses; however, the big difference is that the anycast packet is only delivered to oneaddress,the first one it finds defined in the terms of routing distance. This address can also becalled oneto-one-of-many, or one-to-nearest

QUESTION 254You want to ping the loopback address of your IPv6 local host. What will you type?

A. ping 127.0.0.1B. ping 0.0.0.0C. ping ::1D. trace 0.0.::1


Explanation/Reference:C. The loopback address with IPv4 is 127.0.0.1. With IPv6, that address is ::1.

QUESTION 255What two multicast addresses does OSPFv3 use? (Choose two.)

A. FF02::AB. FF02::9C. FF02::5D. FF02::6

Correct Answer: CDSection: Internet Protocol Version 6 (IPv6)Explanation

Explanation/Reference:C, D. Adjacencies and next-hop attributes now use link-local addresses, and OSPFv3still usesmulticast traffic to send its updates and acknowledgments with the addresses FF02::5for OSPFrouters and FF02::6 for OSPF designated routers. These are the replacements for224.0.0.5 and224.0.0.6, respectively.

QUESTION 256An IPv6 hostname Host A is trying to connect to a web page on a remote server. Which of thefollowing is true? (Choose two.)

A. A RA would be used by R1 to communicate its layer 2 MAC address to Host A.B. OSPFv2 is used for the routers to share IPv6 routes.C. IPv6 uses a two-part addressing scheme, similar to the way IPv4 uses a network and host

portion of an IPv4 address.D. Host A would send the server’s link-local address to the router.

Correct Answer: AC

Section: Internet Protocol Version 6 (IPv6)Explanation

Explanation/Reference:A, C. Host A would send an RS to R1, which would respond with an RA, if the hosthasn’talready learned this information previously. The host now has the default gatewayinformation itneeds to send packets to a remote network. IPv6, like IPv4, has both a network portionand hostportion in the IPv6 packet

QUESTION 257A host sends a router solicitation (RS) on the data link. What destination address is sent withthis request?

A. FF02::AB. FF02::9C. FF02::2D. FF02::1E. FF02::5


Explanation/Reference:C. A router solicitation is sent out using the all-routers multicast address of FF02::2. Theroutercan send a router advertisement to all hosts using the FF02::1 multicast address.

QUESTION 258A host sends a type of NDP message providing the MAC address that was requested. Whichtype of NDP was sent?

A. NAB. RSC. RAD. NS


Explanation/Reference:A. The NDP neighbor advertisement (NA) contains the MAC address. A neighborsolicitation(NS) was initially sent asking for the MAC address.

QUESTION 259To enable OSPFv3, which of the following would you use?

A. Router(config-if)#ipv6 ospf 10 area 0.0.0.0B. Router(config-if)#ipv6 router rip 1C. Router(config)#ipv6 router eigrp 10D. Router(config-rtr)#no shutdownE. Router(config-if)#ospf ipv6 10 area 0


Explanation/Reference:A. To enable OSPFv3, you enable the protocol at the interface level as with RIPng. Thecommand string is ipv6 ospfprocess-idareaarea-id.

QUESTION 260Which of the following statements about IPv6 addresses are true? (Choose two.)

A. Leading zeros are required.B. Two colons (::) are used to represent successive hexadecimal fields of zeros.C. Two colons (::) are used to separate fields.D. A single interface will have multiple IPv6 addresses of different types.

Correct Answer: BDSection: Internet Protocol Version 6 (IPv6)Explanation

Explanation/Reference:B, D. To shorten the written length of an IPv6 address, successive fields of zeros may bereplaced by double colons. In trying to shorten the address further, leading zeros mayalso beremoved. Just as with IPv4, a single device’s interface can have more than one address;with IPv6there are more types of addresses and the same rule applies. There can be link-local,globalunicast, multicast, and anycast addresses all assigned to the same interface.

QUESTION 261What two statements about IPv4 and IPv6 addresses are true? (Choose two.)

A. An IPv6 address is 32 bits long, represented in hexadecimal.B. An IPv6 address is 128 bits long, represented in decimal.C. An IPv4 address is 32 bits long, represented in decimal.D. An IPv6 address is 128 bits long, represented in hexadecimal.

Correct Answer: CDSection: Internet Protocol Version 6 (IPv6)Explanation

Explanation/Reference:C, D. IPv4 addresses are 32 bits long and are represented in decimal format. IPv6addressesare 128 bits long and represented in hexadecimal format

QUESTION 262Which of the following descriptions about IPv6 is correct?

A. Addresses are not hierarchical and are assigned at random.B. Broadcasts have been eliminated and replaced with multicasts.C. There are 2.7 billion addresses.D. An interface can only be configured with one IPv6 address.

Correct Answer: BSection: Internet Protocol Version 6 (IPv6)

Explanation

Explanation/Reference:B. There are no broadcasts with IPv6. Unicast, multicast, anycast, global, and link-localunicastare used.

QUESTION 263How many bits are in an IPv6 address field?

A. 24B. 4C. 3D. 16E. 32F. 128

Correct Answer: DSection: Internet Protocol Version 6 (IPv6)Explanation

Explanation/Reference:D. There are 16 bits (four hex characters) in an IPv6 field.

QUESTION 264Which of the following correctly describe characteristics of IPv6 unicast addressing? (Choosetwo.)

A. A. Global addresses start with 2000::/3.B. B. Link-local addresses start with FF00::/10.C. C. Link-local addresses start with FE00:/12.D. D. There is only one loopback address and it is ::1.

Correct Answer: ADSection: Internet Protocol Version 6 (IPv6)Explanation

Explanation/Reference:A, D. Global addresses start with 2000::/3, link-locals start with FE80::/10, loopback is::1,and unspecified is just two colons (::). Each interface will have a loopback addressautomaticallyconfigured

QUESTION 265Which of the following statements are true of IPv6 address representation? (Choose two.)

A. The first 64 bits represent the dynamically created interface ID.B. A single interface may be assigned multiple IPv6 addresses of any type.C. Every IPv6 interface contains at least one loopback address.D. Leading zeroes in an IPv6 16-bit hexadecimal field are mandatory.

Correct Answer: BCSection: Internet Protocol Version 6 (IPv6)Explanation

Explanation/Reference:B, C. If you verify your IP configuration on your host, you’ll see that you have multipleIPv6addresses, including a loopback address. The last 64 bits represent the dynamicallycreatedinterface ID, and leading zeros are not mandatory in a 16-bit IPv6 field.

QUESTION 266Which of the following is true regarding OSPFv3? (Choose three.)

A. Uses a wildcard to define interfacesB. Uses a network command under global configuration modeC. Uses a 32-bit router IDD. Uses link-state advertisementsE. Uses an interface command to enable OSPF on an

Correct Answer: CDESection: Internet Protocol Version 6 (IPv6)Explanation

Explanation/Reference:C, D, E. OSPFv2 does not use the network command under global configuration mode,nor doesit use wildcard masks as IPv4 does. However, they can both use the interface commandtoconfigure OSPF, use a 32-bit RID, and both use LSAs.

QUESTION 267Which two statements describe the operation of the CSMA/CD access method? (Choose two.)

A. In a CSMA/CD collision domain, multiple stations can successfully transmit data simultaneously.B. In a CSMA/CD collision domain, stations must wait until the media is not in use before transmitting.C. The use of hubs to enlarge the size of collision domains is one way to improve the operation of the

CSMA/CD access method.D. After a collision, the station that detected the collision has first priority to resend the lost data.E. After a collision, all stations run a random backoff algorithm. When the backoff delay period has

expired, all stations have equal priority to transmit data.F. After a collision, all stations involved run an identical backoff algorithm and then synchronize with each

other prior to transmitting data.

Correct Answer: BESection: LAN Switching TechnologiesExplanation

Explanation/Reference:Explanation:Ethernet networking uses Carrier Sense Multiple Access with Collision Detect (CSMA/CD), a

protocol that helps devices share the bandwidth evenly without having two devices transmit at the sametime on the network medium. CSMA/CD was created to overcome the problem of those collisions thatoccur when packets are transmitted simultaneously from different nodes. And trust me, good collisionmanagement is crucial, because when a node transmits in a CSMA/CD network, all the other nodes on thenetwork receive and examine that transmission. Only bridges and routers can effectively prevent atransmission from propagating throughout the entire network! So, how does the CSMA/CD protocol work?Like this: when a host wants to transmit over the network, it first checks for the presence of a digital signalon the wire. If all is clear (no other host is transmitting), the host will then proceed with its transmission. Butit doesn't stop there. The transmitting host constantly monitors the wire to make sure no other hosts begin

transmitting. If the host detects another signal on the wire, it sends out an extended jam signal that causesall nodes on the segment to stop sending data (think, busy signal). The nodes respond to that jam signal bywaiting a while before attempting to transmit again. Backoff algorithms determine when the collidingstations can retransmit. If collisions keep occurring after 15 tries, the nodes attempting to transmit will thentime out.

QUESTION 268Which address type does a switch use to make selective forwarding decisions?

A. source IP addressB. destination IP addressC. source and destination IP addressD. source MAC addressE. destination MAC address

Correct Answer: ESection: LAN Switching TechnologiesExplanation

Explanation/Reference:Explanation:Switches analyze the destination MAC to make its forwarding decision since it is a layer 2 device. Routersuse the destination IP address to make forwarding decisions.

QUESTION 269On a Cisco switch, which protocol determines if an attached VoIP phone is from Cisco or from anothervendor?

A. RTPB. TCPC. CDPD. UDP

Correct Answer: CSection: Operation of IP Data NetworksExplanation

Explanation/Reference:Cisco Discovery Protocol (CDP)

Reference:http://computernetworkingnotes.com/cisco-devices-administration-and-configuration/cisco-discovery-protocol.html

Explanation:

The Cisco Unified IP Phone uses CDP to communicate information such as auxiliary VLAN ID, per portpower management details, and Quality of Service (QoS) configuration information with the Cisco Catalystswitch.

Cisco Discovery Protocol (CDP) is a proprietary protocol designed by Cisco to help administrators collectinformation about both locally attached and remote devices. By using CDP, you can gather hardware andprotocol information about neighbor devices, which is useful info for troubleshooting the network.CDP messages are generated every 60 seconds as multicast messages on each of its active interfaces. The information shared in a CDP packet about a Cisco device includes the following:

Name of the device configured with the hostname command IOS software version

Hardware capabilities, such as routing, switching, and/or bridging Hardware platform, such as 2600, 2950, or 1900 The layer-3 address(es) of the device The interface the CDP update was generated on

QUESTION 270A switch receives a frame on one of its ports. There is no entry in the MAC address table for the destinationMAC address. What will the switch do with the frame?

A. drop the frameB. forward it out of all ports except the one that received itC. forward it out of all portsD. store it until it learns the correct port

Correct Answer: BSection: LAN Switching TechnologiesExplanation


QUESTION 271At which layer of the OSI model does the protocol that provides the information that is displayed by theshow cdp neighbors command operate?

A. applicationB. transportC. networkD. physicalE. data link

Correct Answer: ESection: Operation of IP Data NetworksExplanation

Explanation/Reference:Cisco Discovery Protocol (CDP)

Reference:http://computernetworkingnotes.com/cisco-devices-administration-and-configuration/cisco-discovery-protocol.html

Explanation:

CDP is a device discovery protocol that runs over Layer 2 (the data link layer) on all Cisco- manufactureddevices (routers, bridges, access servers, and switches) and allows network management applications todiscover Cisco devices that are neighbors of already known devices. With CDP, network managementapplications can learn the device type and the Simple Network Management Protocol (SNMP) agentaddress of neighboring devices running lower-layer, transparent protocols.

CDP allows devices to share basic configuration information without even configuring any protocol specificinformation and is enabled by default on all interfaces. CDP is a Datalink Protocol occurring at Layer 2 of the OSI model. CDP is not routable and can only go over to directly connected devices.CDP is enabled, by default, on all Cisco devices. CDP updates are generated as multicasts every 60seconds with a hold-down period of 180 seconds for a missing neighbor. The no cdp run command globallydisables CDP, while the no cdp enable command disables CDP on an interface. Use show cdp neighbors tolist out your directly connected Cisco neighboring devices. Adding the detail parameter will display the layer-3 addressing configured on the neighbor.

QUESTION 272Which two characteristics apply to Layer 2 switches? (Choose two.)

A. increases the number of collision domainsB. decreases the number of collision domainsC. implements VLAND. decreases the number of broadcast domainsE. uses the IP address to make decisions for forwarding data packets

Correct Answer: ACSection: Operation of IP Data NetworksExplanation

Explanation/Reference:Explanation:Layer 2 switches offer a number of benefits to hubs, such as the use of VLANs and each switch port is in itsown separate collision domain, thus eliminating collisions on the segment.

QUESTION 273Which two commands will display the current IP address and basic Layer 1 and 2 status of an interface?(Choose two.)

A. router#show versionB. router#show ip interfaceC. router#show protocolsD. router#show controllersE. router#show running-config

Correct Answer: BCSection: IP Routing TechnologiesExplanation

Explanation/Reference:Explanation:

Show protocols command displays the status of configured Layer 2 and 3 protocols while show controllersdisplays statistics for interface hardware layer 1.

QUESTION 274Which two characteristics describe the access layer of the hierarchical network design model? (Choosetwo.)

A. layer 3 supportB. port securityC. redundant componentsD. VLANsE. PoE

Correct Answer: ABSection: Operation of IP Data NetworksExplanation


Original answer was "A" and "B"

The Hierarchical Network Model

Reference 1:http://www.ciscopath.com/content/61/

Reference 2:http://www.mcmcse.com/cisco/guides/hierarchical_model.shtml

Explanation:

Access layer

The main purpose of the access layer is to provide direct connection to devices on the network andcontrolling which devices are allowed to communicate over it. The access layer interfaces with end devices,such as PCs, printers, and IP phones, to provide access to the rest of the network. The access layer caninclude routers, switches, bridges, hubs, and wireless access points (AP).

Switch features in the Access layer:

Port securityVLANsFast Ethernet/Gigabit EthernetPower over Ethernet (PoE)Link aggregationQuality of Service (QoS)

QUESTION 275What is the purpose of assigning an IP address to a switch?

A. provides local hosts with a default gateway addressB. allows remote management of the switchC. allows the switch to respond to ARP requests between two hostsD. ensures that hosts on the same LAN can communicate with each other

Correct Answer: BSection: IP addressing (IPv4 / IPv6)Explanation


Switch is a layer 2 device and doesn't use network layer for packet forwarding. The IP address may beused only for administrative purposes such as Telnet access or for network management purposes.

QUESTION 276Which three statements are true about the operation of a full-duplex Ethernet network? (Choose three.)

A. There are no collisions in full-duplex mode.B. A dedicated switch port is required for each full-duplex node.C. Ethernet hub ports are preconfigured for full-duplex mode.D. In a full-duplex environment, the host network card must check for the availability of the network media

before transmitting.E. The host network card and the switch port must be capable of operating in full-duplex mode.

Correct Answer: ABE

Section: Operation of IP Data NetworksExplanation


Half-duplex Ethernet is defined in the original 802.3 Ethernet and Cisco says you only use one wire pair witha digital signal running in both directions on the wire. It also uses the CSMA/CD protocol to help preventcollisions and to permit retransmitting if a collision does occur. If a hub is attached to a switch, it mustoperate in half-duplex mode because the end stations must be able to detect collisions. Half-duplexEthernet--typically 10BaseT--is only about 30 to 40 percent efficient as Cisco sees it, because a large10BaseT network will usually only give you 3- to 4Mbps--at most. Full-duplex Ethernet uses two pairs ofwires, instead of one wire pair like half duplex. Also, full duplex uses a point-to-point connection betweenthe transmitter of the transmitting device and the receiver of the receiving device, which means that withfull-duplex data transfer, you get a faster data transfer compared to half duplex. And because thetransmitted data is sent on a different set of wires than the received data, no collisions occur. The reasonyou don't need to worry about collisions is because now Full-duplex Ethernet is like a freeway with multiplelanes instead of the single-lane road provided by half duplex. Full-duplex Ethernet is supposed to offer 100percent efficiency in both directions; this means you can get 20Mbps with a 10Mbps Ethernet running fullduplex, or 200Mbps for FastEthernet.

QUESTION 277What is the subnet address for the IP address 172.19.20.23/28?

A. 172.19.20.0B. 172.19.20.15C. 172.19.20.16D. 172.19.20.20E. 172.19.20.32

Correct Answer: CSection: IP addressing (IPv4 / IPv6)Explanation


QUESTION 278What is the subnet address of 172.16.159.159/22?

A. 172.16.0.0B. 172.16.128.0C. 172.16.156.0D. 172.16.159.0E. 172.16.159.128F. 172.16.192.0


Explanation/Reference:Explanation:Converting to binary format it comes to11111111.11111111.11111100.00000000 or 255.255.252.0Starting with 172.16.0.0 and having increment of 4 we get.172.16.0-3172.16.4-7 etc.

QUESTION 279An administrator is working with the 192.168.4.0 network, which has been subnetted with a /26 mask.Which two addresses can be assigned to hosts within the same subnet? (Choose two.)

A. 192.168.4.61B. 192.168.4.63C. 192.168.4.67D. 192.168.4.125E. 192.168.4.128F. 192.168.4.132

Correct Answer: CDSection: IP addressing (IPv4 / IPv6)Explanation


Only the values of host with 67 and 125 fall within the range of /26 CIDR subnet mask, all others lie beyondit.

QUESTION 280Refer to the exhibit.

The internetwork is using subnets of the address 192.168.1.0 with a subnet mask of 255.255.255.224. Therouting protocol in use is RIP version 1. Which address could be assigned to the FastEthernet interface onRouterA?

A. 192.168.1.31B. 192.168.1.64C. 192.168.1.127D. 192.168.1.190E. 192.168.1.192

Correct Answer: DSection: IP addressing (IPv4 / IPv6)Explanation


QUESTION 281What is the network address for the host with IP address 192.168.23.61/28?

A. 192.168.23.0B. 192.168.23.32C. 192.168.23.48D. 192.168.23.56E. 192.168.23.60



Convert bit-length prefix to quad-dotted decimal representation, then from it find the number of bits used forsubnetting you can find previously calculated number of subnets by separating subnets each having valueof last bit used for subnet masking Find that your IP address is in which subnet, that subnet's first addressis network address and last address is broadcast address. Based on above steps the answer is option C.

QUESTION 282What is the best practice when assigning IP addresses in a small office of six hosts?

A. Use a DHCP server that is located at the headquarters.B. Use a DHCP server that is located at the branch office.C. Assign the addresses by using the local CDP protocol.D. Assign the addresses statically on each node.

Correct Answer: DSection: IP ServicesExplanation


Its best to use static addressing scheme where the number of systems is manageable rather than usedynamic protocol as it is easy to operate and manage.


A. The subnet address is 10.16.3.0 255.255.254.0.B. The lowest host address in the subnet is 10.16.2.1 255.255.254.0.C. The last valid host address in the subnet is 10.16.2.254 255.255.254.0D. The broadcast address of the subnet is 10.16.3.255 255.255.254.0.E. The network is not subnetted.

Correct Answer: BDSection: IP addressing (IPv4 / IPv6)Explanation


The mask 255.255.254.0 (/23) used with a Class A address means that there are 15 subnet bits and 9 hostbits. The block size in the third octet is 2 (256 - 254). So this makes the subnets in 0, 2, 4, 6, etc., all the

way to 254. The host 10.16.3.65 is in the 2.0 subnet. The next subnet is 4.0, so the broadcast address forthe 2.0 subnet is 3.255. The valid host addresses are 2.1 through 3.254

QUESTION 284Given a Class C IP address subnetted with a /30 subnet mask, how many valid host IP addresses areavailable on each of the subnets?

A. 1B. 2C. 4D. 8E. 252F. 254



/30 CIDR corresponds to mask 55.255.255.252 whose binary is 11111100 which means 6 subnet bits and 2host bits which means 62 subnets and 2 hosts per subnet.

QUESTION 285Which one of the following IP addresses is the last valid host in the subnet using mask 255.255.255.224?

A. 192.168.2.63B. 192.168.2.62C. 192.168.2.61D. 192.168.2.60E. 192.168.2.32



With the 224 there are 8 networks with increments of 32 One of these is 32 33 62 63 where 63 is broadcastso 62 is last valid host out of given choices.

QUESTION 286An administrator is in the process of changing the configuration of a router. What command will allow theadministrator to check the changes that have been made prior to saving the new configuration?

A. Router# show startup-configB. Router# show current-configC. Router# show running-configD. Router# show memoryE. Router# show flashF. Router# show processes

Correct Answer: CSection: IP Routing TechnologiesExplanation


This command followed by the appropriate parameter will show the running configuration hence the adminwill be able to see what changes have been made, and then they can be saved.

QUESTION 287Which statements accurately describe CDP? (Choose three.)

A. CDP is an IEEE standard protocol.B. CDP is a Cisco proprietary protocol.C. CDP is a datalink layer protocol.D. CDP is a network layer protocol.E. CDP can discover directly connected neighboring Cisco devices.F. CDP can discover Cisco devices that are not directly connected.

Correct Answer: BCESection: Operation of IP Data NetworksExplanation


CDP (Cisco Discovery Protocol) is a proprietary protocol designed by Cisco to help administrators collectinformation about both locally attached and remote devices. By using CDP, you can gather hardware andprotocol information about neighbor devices containing useful info for troubleshooting and documenting thenetwork.

QUESTION 288On a live network, which commands will verify the operational status of router interfaces? (Choose two.)

A. Router# show interfacesB. Router# show ip protocolsC. Router# debug interfaceD. Router# show ip interface briefE. Router# show start

Correct Answer: ADSection: IP Routing TechnologiesExplanation

Explanation/Reference:Explanation:Both these commands will show the current status of the interfaces, either in show or debug mode both willdisplay the information.

QUESTION 289Which router command will configure an interface with the IP address 10.10.80.1/19?

A. router(config-if)# ip address 10.10.80.1/19

B. router(config-if)# ip address 10.10.80.1 255.255.0.0C. router(config-if)# ip address 10.10.80.1 255.255.255.0D. router(config-if)# ip address 10.10.80.1 255.255.224.0E. router(config-if)# ip address 10.10.80.1 255.255.240.0F. router(config-if)# ip address 10.10.80.1 255.255.255.240

Correct Answer: DSection: IP Routing TechnologiesExplanation


255.255.224 equal /19 in CIDR format hence the answer.


The two routers have had their startup configurations cleared and have been restarted. At a minimum, whatmust the administrator do to enable CDP to exchange information between R1 and R2?

A. Configure the router with the cdp enable command.B. Enter no shutdown commands on the R1 and R2 fa0/1 interfaces.C. Configure IP addressing and no shutdown commands on both the R1 and R2 fa0/1 interfaces.D. Configure IP addressing and no shutdown commands on either of the R1 or R2 fa0/1 interfaces.

Correct Answer: BSection: IP Routing TechnologiesExplanation


If the shut down commands are not entered, then CDP can exchange information between the two routers,else it would fail.

QUESTION 291What two things does a router do when it forwards a packet? (Choose two.)

A. switches the packet to the appropriate outgoing interfacesB. computes the destination host addressC. determines the next hop on the pathD. updates the destination IP addressE. forwards ARP requests

Correct Answer: ACSection: IP Routing TechnologiesExplanation


Explanation:

Without following these two processes namely switching the packet to appropriate interface and telling thepacket where to go by providing it with a destination IP address, the purpose of the same would not besolved.

QUESTION 292Which two of these functions do routers perform on packets? (Choose two.)

A. examine the Layer 2 headers of inbound packets and use that information to determine the next hopsfor the packets

B. update the Layer 2 headers of outbound packets with the MAC addresses of the next hopsC. examine the Layer 3 headers of inbound packets and use that information to determine the next hops

for the packetsD. examine the Layer 3 headers of inbound packets and use that information to determine the complete

paths along which the packets will be routed to their ultimate destinationsE. update the Layer 3 headers of outbound packets so that the packets are properly directed to valid next

hopsF. update the Layer 3 headers of outbound packets so that the packets are properly directed to their

ultimate destinations



This is the basic function of the router to receive incoming packets and then forward them to their requireddestination. This is done by reading layer 3 headers of inbound packets and update the info to layer 2 forfurther hopping.

QUESTION 293Which statements are true regarding ICMP packets? (Choose two.)

A. They acknowledge receipt of TCP segments.B. They guarantee datagram delivery.C. TRACERT uses ICMP packets.D. They are encapsulated within IP datagrams.E. They are encapsulated within UDP datagrams.

Correct Answer: CDSection: Operation of IP Data NetworksExplanation


QUESTION 294The command ip route 192.168.100.160 255.255.255.224 192.168.10.2 was issued on a router. No routingprotocols or other static routes are configured on the router. Which statement is true about this command?

A. The interface with IP address 192.168.10.2 is on this router.B. The command sets a gateway of last resort for the router.C. Packets that are destined for host 192.168.100.160 will be sent to 192.168.10.2.

D. The command creates a static route for all IP traffic with the source address 192.168.100.160.


Explanation/Reference:Explanation:160 it's actually network address of /27 so any address within the range of 160 network will be sent to192.168.10.2

QUESTION 295What does administrative distance refer to?

A. the cost of a link between two neighboring routersB. the advertised cost to reach a networkC. the cost to reach a network that is administratively setD. a measure of the trustworthiness of a routing information source


Explanation/Reference:What Is Administrative Distance?

Reference:http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080094195.shtml

Explanation:

Administrative distance is the feature that routers use in order to select the best path when there are two ormore different routes to the same destination from two different routing protocols. Administrative distancedefines the reliability of a routing protocol. Each routing protocol is prioritized in order of most to leastreliable (believable) with the help of an administrative distance value.

Explanation 2:

Administrative distance is the first criterion that a router uses to determine which routing protocol to use iftwo protocols provide route information for the same destination. Administrative distance is a measure ofthe trustworthiness of the source of the routing information. The smaller the administrative distance value,the more reliable the protocol.

QUESTION 296Which IOS command is used to initiate a login into a VTY port on a remote router?

A. router# loginB. router# telnetC. router# traceD. router# pingE. router(config)# line vty 0 5F. router(config-line)# login


Explanation/Reference:Explanation:VTY ports are telnet ports hence command B will initiate login or connection to the telnet port.

QUESTION 297In the configuration of NAT, what does the keyword overload signify?

A. When bandwidth is insufficient, some hosts will not be allowed to access network translation.B. The pool of IP addresses has been exhausted.C. Multiple internal hosts will use one IP address to access external network resources.D. If the number of available IP addresses is exceeded, excess traffic will use the specified address pool.

Correct Answer: CSection: IP ServicesExplanation

Explanation/Reference:Configuring Basic NAT with overloading

Reference:http://evilrouters.net/2009/07/09/configuring-basic-nat-with-overloading/

Explanation:

Overloading (having multiple clients all NAT’d to the same IP address) is probably the most commonimplementation (especially for those of us who run NAT on a Cisco box at home!).

QUESTION 298What happens when computers on a private network attempt to connect to the Internet through a Ciscorouter running PAT?


A. The router uses the same IP address but, a different TCP source port number for each connection.B. An IP address is assigned based on the priority of the computer requesting the connection.C. The router selects an address from a pool of one-to-one address mappings held in the lookup table.D. The router assigns a unique IP address from a pool of legally registered addresses for the duration of

the connection.

Correct Answer: ASection: IP ServicesExplanation

Explanation/Reference:Configuring Static PAT

Reference:http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/nat_staticpat.html

Explanation:

Static PAT translations allow a specific UDP or TCP port on a global address to be translated to a specificport on a local address. That is, both the address and the port numbers are translated.

Static PAT is the same as static NAT, except that it enables you to specify the protocol (TCP or UDP) andport for the real and mapped addresses. Static PAT enables you to identify the same mapped addressacross many different static statements, provided that the port is different for each statement. You cannotuse the same mapped address for multiple static NAT statements.

Explanation 2:Port Address Translation makes the PC connect to the Internet but using different TCP source port.

QUESTION 299When configuring NAT, the Internet interface is considered to be what?

A. localB. insideC. globalD. outside

Correct Answer: DSection: IP ServicesExplanation

Explanation/Reference:Explanation:Network address translation or NAT requires the Internet to be considered as an outside interface else itwon't serve the purpose it intends to.

QUESTION 300The ip helper-address command does what?

A. assigns an IP address to a hostB. resolves an IP address from a DNS serverC. relays a DHCP request across networksD. resolves an IP address overlapping issue

Correct Answer: CSection: IP ServicesExplanation

Explanation/Reference:Reference:http://cisconet.com/tcpip/dhcp/107-how-to-use-ip-helper-address-to-connect-remote-dhcp-server.html

Explanation:When the DHCP client sends the DHCP request packet, it doesn't have an IP address. So it uses the all-zeroes address, 0.0.0.0, as the IP source address. And it doesn't know how to reach the DHCP server, so ituses a general broadcast address, 255.255.255.255, for the destination. So the router must replace thesource address with its own IP address, for the interface that received the request. And it replaces thedestination address with the address specified in the ip helper- address command. The client device's MACaddress is included in the payload of the original DHCP request packet, so the router doesn't need to doanything to ensure that the server receives this information.


The network administrator made the entries that are shown and then saved the configuration. From a

console connection, what password or password sequence is required for the administrator to accessprivileged mode on Router1?

A. ciscoB. sanfranC. sanjoseD. either cisco or sanfranE. either cisco or sanjoseF. sanjose and sanfran

Correct Answer: BSection: Network Device SecurityExplanation


The enable secret password takes precedence over the enable password, so sanfran will be used.

QUESTION 302The following commands are entered on the router:

Burbank(config)# enable secret fortressBurbank(config)# line con 0Burbank(config-line)# loginBurbank(config-line)# password n0way1nBurbank(config-line)# exitBurbank(config)# service password-encryption

What is the purpose of the last command entered?

A. to require the user to enter an encrypted password during the login processB. to prevent the vty, console, and enable passwords from being displayed in plain text in the configuration

filesC. to encrypt the enable secret passwordD. to provide login encryption services between hosts attached to the router



QUESTION 303What is the effect of using the service password-encryption command?

A. Only the enable password will be encrypted.B. Only the enable secret password will be encrypted.C. Only passwords configured after the command has been entered will be encrypted.D. It will encrypt the secret password and remove the enable secret password from the configuration.E. It will encrypt all current and future passwords.

Correct Answer: ESection: Network Device SecurityExplanation


Encryption further adds a level of security to the system as anyone having access to the database ofpasswords cannot reverse the process of encryption to know the actual passwords which isn't the case ifthe passwords are stored simply.

QUESTION 304An administrator has connected devices to a switch and for security reasons, wants the dynamically learnedMAC addresses from the address table added to the running configuration.What must be done to accomplish this?

A. Enable port security and use the keyword sticky.B. Set the switchport mode to trunk and save the running configuration.C. Use the switchport protected command to have the MAC addresses added to the configuration.D. Use the no switchport port-security command to allow MAC addresses to be added to the configuration.

Correct Answer: ASection: Network Device SecurityExplanation

Explanation/Reference:Port Security with Sticky MAC Addresses

Reference:http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/port_sec.pdf

Explanation:

Port security with sticky MAC addresses provides many of the same benefits as port security with staticMAC addresses, but sticky MAC addresses can be learned dynamically. Port security with sticky MACaddresses retains dynamically learned MAC addresses during a link-down condition.

If you enter a write memory or copy running-config startup-config command, then port security withsticky MAC addresses saves dynamically learned MAC addresses in the startup-config file and the portdoes not have to learn addresses from ingress traffic after bootup or a restart.

Explanation2:One can configure MAC addresses to be sticky. These can be dynamically learned or manually configured,stored in the address table, and added to the running configuration. If these addresses are saved in theconfiguration file, the interface does not need to dynamically relearn them when the switch restarts, henceenabling security as desired.

QUESTION 305A company has placed a networked PC in a lobby so guests can have access to the corporate directory. Asecurity concern is that someone will disconnect the directory PC and re-connect their laptop computer andhave access to the corporate network. For the port servicing the lobby, which three configuration stepsshould be performed on the switch to prevent this? (Choose three.)

A. Enable port security.B. Create the port as a trunk port.C. Create the port as an access port.D. Create the port as a protected port.E. Set the port security aging time to 0.F. Statically assign the MAC address to the address table.G. Configure the switch to discover new MAC addresses after a set time of inactivity.

Correct Answer: ACFSection: Network Device SecurityExplanation


If port security is enabled and the port is only designated as access port, and finally static MAC address isassigned, it ensures that even if a physical connection is done by taking out the directory PC and insertingpersonal laptop or device, the connection cannot be made to the corporate network, hence ensuring safety.

QUESTION 306Why would a network administrator configure port security on a switch?

A. to prevent unauthorized Telnet access to a switch portB. to prevent unauthorized hosts from accessing the LANC. to limit the number of Layer 2 broadcasts on a particular switch portD. block unauthorized access to the switch management interfaces


Explanation/Reference:Explanation:You can use the port security feature to restrict input to an interface by limiting and identifying MACaddresses of the stations allowed to access the port. When you assign secure MAC addresses to a secureport, the port does not forward packets with source addresses outside the group of defined addresses. Ifyou limit the number of secure MAC addresses to one and assign a single secure MAC address, theworkstation attached to that port is assured the full bandwidth of the port. If a port is configured as a secureport and the maximum number of secure MAC addresses is reached, when the MAC address of a stationattempting to access the port is different from any of the identified secure MAC addresses, a securityviolation occurs. Also, if a station with a secure MAC address configured or learned on one secure portattempts to access another secure port, a violation is flagged.

QUESTION 307How can you ensure that only the MAC address of a server is allowed by switch port Fa0/1?

A. Configure port Fa0/1 to accept connections only from the static IP address of the server.B. Configure the server MAC address as a static entry of port security.C. Use a proprietary connector type on Fa0/1 that is incomputable with other host connectors.D. Bind the IP address of the server to its MAC address on the switch to prevent other hosts from spoofing

the server IP address.


Explanation/Reference:Explanation:When the MAC address is configured as static entry, no other address is allowed.

QUESTION 308Which IP addresses are valid for hosts belonging to the 10.1.160.0/20 subnet? (Choose three.)

A. 10.1.168.0B. 10.1.176.1C. 10.1.174.255D. 10.1.160.255E. 10.1.160.0F. 10.1.175.255

Correct Answer: ACDSection: IP addressing (IPv4 / IPv6)Explanation


All IP address in IP ranges between : 10.1.160.1 and 10.1.175.254 are valid as shown below Address:10.1.160.0 00001010.00000001.1010 0000.00000000 Netmask:255.255.240.0 =2011111111.11111111.1111 0000.00000000 Wildcard:0.0.15.25500000000.00000000.00001111.11111111 Which implies thatNetwork: 10.1.160.0/20 00001010.00000001.1010 0000.00000000HostMin:10.1.160.100001010.00000001.1010 0000.00000001HostMax:10.1.175.25400001010.00000001.1010 1111.11111110Broadcast:10.1.175.25500001010.00000001.1010 1111.11111111

QUESTION 309If a host experiences intermittent issues that relate to congestion within a network while remainingconnected, what could cause congestion on this LAN?

A. half-duplex operationB. broadcast stormsC. network segmentationD. multicasting

Correct Answer: BSection: TroubleshootingExplanation

Explanation/Reference:Explanation:A broadcast storm can consume sufficient network resources so as to render the network unable totransport normal traffic.

QUESTION 310Given an IP address of 192.168.1.42 255.255.255.248, what is the subnet address?

A. 192.168.1.8/29B. 192.168.1.32/27C. 192.168.1.40/29

D. 192.168.1.16/28E. 192.168.1.48/29



248 mask uses 5 bits (1111 1000)42 IP in binary is (0010 1010)

The base subnet therefore is the lowest binary value that can be written without changing the output of anAND operation of the subnet mask and IP ...1111 1000 AND0010 1010 equals0010 1000 - which is .40/24 is standard class C mask.adding the 5 bits from the .248 mask gives /29

QUESTION 311Which OSI layer header contains the address of a destination host that is on another network?

A. applicationB. sessionC. transportD. networkE. data linkF. physical

Correct Answer: DSection: Operation of IP Data NetworksExplanation


Only network address contains this information. To transmit the packets the sender uses network addressand datalink address. But the layer 2 address represents just the address of the next hop device on the wayto the sender. It is changed on each hop. Network address remains the same.

QUESTION 312Which layer of the TCP/IP stack combines the OSI model physical and data link layers?

A. Internet layerB. transport layerC. application layerD. network access layer



The Internet Protocol Suite, TCP/IP, is a suite of protocols used for communication over the internet. TheTCP/IP model was created after the OSI 7 layer model for two major reasons. First, the foundation of theInternet was built using the TCP/IP suite and through the spread of the World Wide Web and Internet, TCP/IP has been preferred. Second, a project researched by the Department of Defense (DOD) consisted ofcreating the TCP/IP protocols. The DOD's goal was to bring international standards which could not be metby the OSI model. Since the DOD was the largest software consumer and they preferred the TCP/IP suite,most vendors used this model rather then the OSI. Below is a side by side comparison of the TCP/IP andOSI models.

QUESTION 313Which protocol uses a connection-oriented service to deliver files between end systems?

A. TFTPB. DNSC. FTPD. SNMPE. RIP



QUESTION 314Which network device functions only at Layer 1 of the OSI model?

A.

B.

C.

D.

E.

Correct Answer: ASection: Operation of IP Data NetworksExplanation

Explanation/Reference:Explanation:Most hubs are amplifying the electrical signal; therefore, they are really repeaters with several ports. Hubsand repeaters are Layer 1 (physical layer) devices.

QUESTION 315Which transport layer protocol provides best-effort delivery service with no acknowledgment receiptrequired?

A. HTTPB. IPC. TCPD. TelnetE. UDP

Correct Answer: ESection: Operation of IP Data NetworksExplanation

Explanation/Reference:Explanation:UDP provides a connectionless datagram service that offers best-effort delivery, which means that UDPdoes not guarantee delivery or verify sequencing for any datagrams. A source host that needs reliablecommunication must use either TCP or a program that provides its own sequencing and acknowledgmentservices.

QUESTION 316Which layer of the OSI model controls the reliability of communications between network devices using flowcontrol, sequencing and acknowledgments?

A. Physical

B. Data-linkC. TransportD. Network



QUESTION 317Drag and Drop Question

Drag the appropriate command on the left to the configuration task it accomplishes. (Not all options areused)

Select and Place:

Correct Answer:

Section: Network Device SecurityExplanation



Various protocols are listed to the left. On the right are applications for the use of those protocols. Drag theprotocol on the left to an associated function for that protocol on the right. (Not all options are used)

Select and Place:

Correct Answer:

Section: IP ServicesExplanation



Move a protocol or service on the left to a situation on the right where it would be used. (Not all options areused)

Select and Place:

Correct Answer:




Drag the definition the left to the correct term on the right. (Not all options are used)

Select and Place:

Correct Answer:




On the left are various network protocols. On the right are the layers of the TCP/IP model. Assuming areliable connection is required, move the protocols on the left to the TCP/IP layers on the right to show theproper encapsulation for an email message sent by a host on the LAN. (Not all options are used)

Select and Place:

Correct Answer:



QUESTION 322An administrator must assign static IP addresses to the servers in a network. For network192.168.20.24/29, the router is assigned the first usable host address while the sales server is given thelast usable host address. Which of the following should be entered into the IP properties box for the salesserver?

A. IP address: 192.168.20.14Subnet Mask: 255.255.255.248Default Gateway: 192.168.20.9

B. IP address: 192.168.20.254Subnet Mask: 255.255.255.0Default Gateway: 192.168.20.1

C. IP address: 192.168.20.30

Subnet Mask: 255.255.255.248Default Gateway: 192.168.20.25

D. IP address: 192.168.20.30Subnet Mask: 255.255.255.240Default Gateway: 192.168.20.17

E. IP address: 192.168.20.30Subnet Mask: 255.255.255.240Default Gateway: 192.168.20.25



QUESTION 323What is the default administrative distance of the OSPF routing protocol?

A. 90B. 100C. 110D. 120E. 130F. 170


Explanation/Reference:Default Distance Value Table

This table lists the administrative distance default values of the protocols that Cisco supports:

* If the administrative distance is 255, the router does not believe the source of that route and does notinstall the route in the routing table.

QUESTION 324After the network has converged, what type of messaging, if any, occurs between R3 and R4?

A. No messages are exchangedB. Hellos are sent every 10 seconds.C. The full database from each router is sent every 30 seconds.D. The routing table from each router is sent every 60 seconds.



HELLO messages are used to maintain adjacent neighbors so even when the network is converged, hellosare still exchanged. On broadcast and point-to-point links, the default is 10 seconds, on NBMA the default is30 seconds.

Although OSPF is a link-state protocol the full database from each router is sent every 30 minutes (notseconds) therefore, C and D are not correct.

QUESTION 325R1 is configured with the default configuration of OSPF. From the following list of IP addresses configuredon R1, which address will the OSPF process select as the router ID?

A. 192.168.0.1B. 172.16.1.1C. 172.16.2.1D. 172.16.2.225

Correct Answer: ASection: IP Routing TechnologiesExplanation


The Router ID (RID) is an IP address used to identify the router and is chosen using the followingsequence:+ The highest IP address assigned to a loopback (logical) interface. + If a loopback interface is not defined,the highest IP address of all active router's physical interfaces will be chosen.+ The router ID can be manually assignedIn this case, because a loopback interface is not configured so the highest active IP address 192.168.0.1 ischosen as the router ID.

QUESTION 326R1 is unable to establish an OSPF neighbor relationship with R3. What are possible reasons for thisproblem? (Choose two)

A. All of the routers need to be configured for backbone Area 1.B. R1 and R2 are the DR and BDR, so OSPF will not establish neighbor adjacency with R3.C. A static route has been configured from R1 to R3 and prevents the neighbor adjacency from being

established.D. The hello and dead interval timers are not set to the same values on R1 and R3.E. EIGRP is also configured on these routers with a lower administrative distance.F. R1 and R3 are configured in different areas.

Correct Answer: DFSection: TroubleshootingExplanation

Explanation/Reference:Same as Q105

Explanation:

To become OSPF neighbors, routers must meet these requirements: Hello interval, Dead interval andAREA number -> D and F are correct.

QUESTION 327What information does a router running a link-state protocol use to build and maintain its topologicaldatabase? (Choose two)

A. hello packetsB. SAP messages sent by other routersC. LSAs from other routersD. beacons received on point-to-point linksE. routing tables received from other link-state routersF. TTL packets from designated routers


Explanation/Reference:Link State Routing Protocols

Reference 1:http://www.ciscopress.com/articles/article.asp?p=24090&seqNum=4

Explanation:

Link state protocols, sometimes called shortest path first or distributed database protocols, are built arounda well-known algorithm from graph theory, E. W. Dijkstra'a shortest path algorithm. Examples of link staterouting protocols are:

Open Shortest Path First (OSPF) for IP

The ISO's Intermediate System to Intermediate System (IS-IS) for CLNS and IP

DEC's DNA Phase V

Novell's NetWare Link Services Protocol (NLSP)

Although link state protocols are rightly considered more complex than distance vector protocols, the basicfunctionality is not complex at all:

1. Each router establishes a relationship—an adjacency—with each of its neighbors.

2. Each router sends link state advertisements (LSAs), some

3. Each router stores a copy of all the LSAs it has seen in a database. If all works well, the databases in allrouters should be identical.

4. The completed topological database, also called the link state database, describes a graph of theinternetwork. Using the Dijkstra algorithm, each router calculates the shortest path to each network andenters this information into the route table.

OSPF Tutorial

Reference 2:http://www.9tut.com/ospf-routing-protocol-tutorial

QUESTION 328ROUTER# show ip route

192.168.12.0/24 is variably subnetted, 9 subnets, 3 masks

C 192.168.12.64 /28 is directly connected, Loopback1C 192.168.12.32 /28 is directly connected, Ethernet0C 192.168.12.48 /28 is directly connected, Loopback0O 192.168.12.236 /30 [110/128] via 192.168.12.233, 00:35:36, Serial0C 192.168.12.232 /30 is directly connected, Serial0O 192.168.12.245 /30 [110/782] via 192.168.12.233, 00:35:36, Serial0O 192.168.12.240 /30 [110/128] via 192.168.12.233, 00:35:36, Serial0O 192.168.12.253 /30 [110/782] via 192.168.12.233, 00:35:37, Serial0O 192.168.12.249 /30 [110/782] via 192.168.12.233, 00:35:37, Serial0O 192.168.12.240/30 [110/128] via 192.168.12.233, 00:35:36, Serial 0

To what does the 128 refer to in the router output above?

A. OSPF costB. OSPF priorityC. OSPF hop count

D. OSPF ID numberE. OSPF administrative distance


Explanation/Reference:Explanation:The first parameter is the Administrative Distance of OSPF (110) while the second parameter is the cost ofOSPF.

QUESTION 329Which of the following describe the process identifier that is used to run OSPF on a router? (Choose two)

A. It is locally significant.B. It is globally significant.C. It is needed to identify a unique instance of an OSPF database.D. It is an optional parameter required only if multiple OSPF processes are running on the router.E. All routers in the same OSPF area must have the same process ID if they are to exchange routing

information.


Explanation/Reference:Reference:https://learningnetwork.cisco.com/thread/6248

They are locally significant only, and have no bearing on the structure of any OSPF packet or LSA update.So you can have a separate process-id on every single router in your network if you so desire!

QUESTION 330Open Shortest Path First (OSPF) is a routing protocol developed for Internet Protocol (IP) networks by theInterior Gateway Protocol (IGP) working group of the Internet Engineering Task Force (IETF). What is thedefault administrative distance of the OSPF routing protocol?

A. 90B. 100C. 110D. 20E. 130F. 170


Explanation/Reference:Default Distance Value Table

This table lists the administrative distance default values of the protocols that Cisco supports:

* If the administrative distance is 255, the router does not believe the source of that route and does notinstall the route in the routing table.

QUESTION 331Which address are OSPF hello packets addressed to on point-to-point networks?

A. 224.0.0.5B. 172.16.0.1C. 192.168.0.5D. 223.0.0.1E. 254.255.255.255


Explanation/Reference:Why Does the show ip ospf neighbor Command Reveal N eighbors in the Init State?

Reference:http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080093f11.shtml

Explanation:

OSPF hello packets have a destination address of 224.0.0.5 (the all ospf routers multicast address).

QUESTION 332Which statements describe the routing protocol OSPF? (Choose three)

A. It supports VLSM.B. It is used to route between autonomous systems.C. It confines network instability to one area of the network.

D. It increases routing overhead on the network.E. It allows extensive control of routing updates.F. It is simpler to configure than RIP v2.

Correct Answer: ACESection: IP Routing TechnologiesExplanation

Explanation/Reference:OSPF Tutorial

Reference:http://www.9tut.com/ospf-routing-protocol-tutorial

Explanation:

Routing overhead is the amount of information needed to describe the changes in a dynamic networktopology. All routers in an OSPF area have identical copies of the topology database and the topologydatabase of one area is hidden from the rest of the areas to reduce routing overhead because fewerrouting updates are sent and smaller routing trees are computed and maintained (allow extensive control ofrouting updates and confine network instability to one area of the network).

QUESTION 333How does a switch differ from a hub?

A. A switch does not induce any latency into the frame transfer time.B. A switch tracks MAC addresses of directly-connected devices.C. A switch operates at a lower, more efficient layer of the OSI model.D. A switch decreases the number of broadcast domains.E. A switch decreases the number of collision domains.

Correct Answer: BSection: Operation of IP Data NetworksExplanation


Some of the features and functions of a switch include:

A switch is essentially a fast, multi-port bridge, which can contain dozens of ports. Rather than creating twocollision domains, each port creates its own collision domain. In a network of twenty nodes, twenty collisiondomains exist if each node is plugged into its own switch port. If an uplink port is included, one switchcreates twenty-one single-node collision domains. A switch dynamically builds and maintains a Content-Addressable Memory (CAM) table, holding all of the necessary MAC information for each port. For adetailed description of how switches operate, and their key differences to hubs.

QUESTION 334What must occur before a workstation can exchange HTTP packets with a web server?

A. A UDP connection must be established between the workstation and its default gateway.B. A UDP connection must be established between the workstation and the web server.C. A TCP connection must be established between the workstation and its default gateway.D. A TCP connection must be established between the workstation and the web server.E. An ICMP connection must be established between the workstation and its default gateway.F. An ICMP connection must be established between the workstation and the web server.


Explanation/Reference:Common TCP/IP Ports

Reference:http://pentestlab.wordpress.com/2012/03/05/common-tcpip-ports/

Explanation:

HTTP uses TCP port 80.

QUESTION 335How does TCP differ from UDP? (Choose two.)

A. TCP provides best effort delivery.B. TCP provides synchronized communication.C. TCP segments are essentially datagrams.D. TCP provides sequence numbering of packets.E. TCP uses broadcast delivery.

Correct Answer: BDSection: Operation of IP Data NetworksExplanation


TCP differs from UDP in the following ways: UDP provides best effort delivery. TCP provides synchronizedcommunication. UDP segments are essentially datagrams. TCP provides sequence numbering of packets.UDP uses broadcast delivery.

+-------------+----------------------------------+| Application | Telnet, FTP, etc |+-------------+----------------------------------+| Transport | TCP, UDP |+-------------+----------------------------------+| Network | IP, ICMP |+-------------+----------------------------------+| Physical | drivers, interface card | +-------------+----------------------------------+

QUESTION 336A workstation has just resolved a browser URL to the IP address of a server. What protocol will theworkstation now use to determine the destination MAC address to be placed into frames directed towardthe server?

A. HTTPB. DNSC. DHCPD. RARPE. ARP

Correct Answer: E

Section: Operation of IP Data NetworksExplanation

Explanation/Reference:Explanation:The RARP protocol is used to translate hardware interface addresses to protocol addresses. The RARPmessage format is very similar to the ARP format. When the booting computer sends the broadcast ARPrequest, it places its own hardware address in both the sending and receiving fields in the encapsulatedARP data packet. The RARP server will fill in the correct sending and receiving IP addresses in itsresponse to the message. This way the booting computer will know its IP address when it gets themessage from the RARP server.

QUESTION 337The network manager has requested a 300-workstation expansion of the network. The workstations are tobe installed in a single broadcast domain, but each workstation must have its own collision domain. Theexpansion is to be as cost-effective as possible while still meeting the requirements. Which three items willadequately fulfill the request? (Choose three).

A. one IP subnet with a mask of 255.255.254.0B. two IP subnets with a mask of 255.255.255.0C. seven 48-port hubsD. seven 48-port switchesE. one router interfaceF. seven router interfaces

Correct Answer: ADESection: IP addressing (IPv4 / IPv6)Explanation


of 255.255.254.0 can absorb 510 hosts being 23 bits mask and also 7*48 port switches can handle thismuch hosts and router interface is required to be minimum to avoid unnecessary wastage hence theanswers.

QUESTION 338What are two common TCP applications? (Choose two.)

A. TFTPB. SMTPC. SNMPD. FTPE. DNS

Correct Answer: BDSection: Operation of IP Data NetworksExplanation

Explanation/Reference:Common TCP/IP Ports

Reference:http://pentestlab.wordpress.com/2012/03/05/common-tcpip-ports/

Explanation:SMTP uses TCP port 25, while FTP uses TCP ports 20 and 21.

QUESTION 339Which two options will help to solve the problem of a network that is suffering a broadcast storm? (Choosetwo.)

A. a bridgeB. a routerC. a hubD. a Layer 3 switchE. an access point

Correct Answer: BDSection: LAN Switching TechnologiesExplanation

Explanation/Reference:Explanation:Routers and layer 3 switches will not propagate broadcast traffic beyond the local segment, so the use ofthese devices is the best method for eliminating broadcast storms.

QUESTION 340What does a host on an Ethernet network do when it is creating a frame and it does not have thedestination address?

A. drops the frameB. sends out a Layer 3 broadcast messageC. sends a message to the router requesting the addressD. sends out an ARP request with the destination IP address

Correct Answer: DSection: LAN Switching TechnologiesExplanation

Explanation/Reference:Explanation:Understanding this concept is prime for understanding that when switch receives the data frame from thehost not having the MAC address already in the MAC table, it will add the MAC address to the source porton the MAC address table and sends the data frame. If the switch already has the MAC address in it's tablefor the destination, it will forward the frame directly to the destination port. If it was not already in it's MACtable, then they frame would have been flooded out all ports except for the port that it came from.

QUESTION 341A switch has 48 ports and 4 VLANs. How many collision and broadcast domains exist on the switch(collision, broadcast)?

A. 4, 48B. 48, 4C. 48, 1D. 1, 48E. 4, 1


Explanation/Reference:Explanation:A switch uses a separate collision domain for each port, and each VLAN is a separate broadcast domain.

QUESTION 342Some routers have been configured with default routes. What are some of the advantages of using defaultroutes? (Choose two)

A. They establish routes that will never go down.B. They keep routing tables small.C. They require a great deal of CPU power.D. They allow connectivity to remote networks that are not in the routing tableE. They direct traffic from the internet into corporate networks.

Correct Answer: BDSection: IP Routing TechnologiesExplanation

Explanation/Reference:Cisco administration 101: What you need to know abo ut default routes

Reference:http://www.techrepublic.com/article/cisco-administration-101-what-you-need-to-know-about-default-routes/


After the power-on-self test (POST), the system LED of a Cisco 2950 switch turns amber. What is thestatus of the switch?

A. The POST was successful.B. The switch has a problem with the internal power supply and needs an external power supply to be

attached.C. POST failed and there is a problem that prevents the operating system from being loaded.D. The switch has experienced an internal problem but data can still be forwarded at a slower rate.E. The switch passed POST, but all the switch ports are busy.

Correct Answer: CSection: TroubleshootingExplanation

Explanation/Reference:Troubleshoot and Understand POST Failure Messages

Reference:http://www.cisco.com/en/US/products/hw/switches/ps607/products_tech_note09186a0080125913.shtml

Explanation:

Each time you power up the switch, eight Power-On Self Tests (POSTs) run automatically. POSTs checkthe most important system components before the switch begins to forward packets. When the switchbegins the POST, the port status LEDs display amber for two seconds, and then display green. As eachtest runs, the port status LEDs go out. 1x is the first to go out. The port status LEDs for ports 2x through 8xgo out sequentially as the system completes a test.

When the POST completes successfully, the port status LEDs go out. This indicates that the switch isoperational. If a test fails, the port status LED associated with the test displays amber. The system LEDalso displays amber.

Note: From Cisco IOS Software Release 11.2(8.5)SA6 onwards, the port and system LEDs both remainamber after a POST failure. In the earlier Cisco IOS Software Releases, only the LEDs of failed linked portsremained amber.


PC1 pings PC2. What three things will CORE router do with the data that is received from PC1? (Choosethree.)

A. The data frames will be forwarded out interface FastEthernet0/1 of CORE router.B. The data frames will be forwarded out interface FastEthernet1/0 of CORE router.

C. CORE router will replace the destination IP address of the packets with the IP address of PC2.D. CORE router will replace the MAC address of PC2 in the destination MAC address of the frames.E. CORE router will put the IP address of the forwarding FastEthernet interface in the place of the source

IP address in the packets.F. CORE router will put the MAC address of the forwarding FastEthernet interface in the place of the

source MAC address.

Correct Answer: BDFSection: IP Routing TechnologiesExplanation


QUESTION 345Which three statements are correct about RIP version 2? (Choose three)

A. It uses broadcast for its routing updates.B. It supports authentication.C. It is a classless routing protocol.D. It has a lower default administrative distance then RIP version 1.E. It has the same maximum hop count as RIP version 1.F. It does not send the subnet mask any updates.

Correct Answer: BCESection: IP Routing TechnologiesExplanation


QUESTION 346To what type of port would a cable with a DB-60 connector attach?

A. Serial portB. Console portC. Ethernet portD. Fibre optic port

Correct Answer: ASection: Operation of IP Data NetworksExplanation


QUESTION 347Which IP address is a private address?

A. 12.0.0.1B. 168.172.19.39C. 172.20.14.36D. 172.33.194.30E. 192.169.42.34

Correct Answer: C

Section: IP addressing (IPv4 / IPv6)Explanation


QUESTION 348How many simultaneous Telnet sessions does a Cisco router support by default?

A. 1B. 2C. 3D. 4E. 5F. 6

Correct Answer: ESection: LAN Switching TechnologiesExplanation

Explanation/Reference:line vty 0 4


What two things can the technician determine by successfully pinging from this computer to the IP address172.16.236.1? (Choose two)

A. The network card on the computer is functioning correctly.B. The default static route on the gateway router is correctly configured.C. The correct default gateway IP address is configured on the computer.

D. The device with the IP address 172.16.236.1 is reachable over the network.E. The default gateway at 172.16.236.1 is able to forward packets to the internet.

Correct Answer: ADSection: LAN Switching TechnologiesExplanation


The source and destination addresses are on the same network therefore, a default gateway is notnecessary for communication between these two addresses.


Why did the device return this message?

A. The command requires additional options or parametersB. There is no show command that starts with ru.C. The command is being executed from the wrong router mode.D. There is more than one show command that starts with the letters ru.

Correct Answer: DSection: TroubleshootingExplanation


QUESTION 351What is the purpose of flow control?

A. To ensure data is retransmitted if an acknowledgement is not received.B. To reassemble segments in the correct order at the destination device.C. To provide a means for the receiver to govern the amount of data sent by the sender.D. To regulate the size of each segment.

Correct Answer: CSection: LAN Switching TechnologiesExplanation

Explanation/Reference:Flow Control

Reference:http://whatis.techtarget.com/definition/flow-control

Explanation:

Flow control is the management of data flow between computers or devices or between nodes in a networkso that the data can be handled at an efficient pace. Too much data arriving before a device can handle itcauses data overflow, meaning the data is either lost or must be retransmitted. For serial data transmissionlocally or in a network, the Xon/Xoff protocol can be used. For modem connections, either Xon/Xoff or CTS/RTS (Clear to Send/Ready to Send) commands can be used to control data flow.

In a network, flow control can also be applied by refusing additional device connections until the flow oftraffic has subsided.

QUESTION 352OSPF routing uses the concept of areas. What are the characteristics of OSPF areas? (Chose three)

A. Each OSPF area requires a loopback interface to be configuredB. Areas may be assigned any number from 0 to 65535C. Area 0 is called the backbone areaD. Hierarchical OSPF networks do not require multiple areasE. Multiple OSPF areas must connect to area 0F. Single area OSPF networks must be configured in area 1

Correct Answer: BCESection: IP Routing TechnologiesExplanation


I used to think the answers should be C D E and here is my explanation:OSPF can use an active interface for its router ID, so a loopback interface is not a must -> A is incorrect.OSPF Area is a 32-bit number so we can use up to 232 – 1 = 4294967296 – 1 (since Area 0 is the firstarea). Remember that only process ID is a 16-bit number and ranges from 1 to 65535 -> B is incorrect.F is incorrect too because single area OSPF netwoks must be configured in Area 0, which is called thebackbone area.For answer D, it is a bit hard to guess what they want to say about “hierarchical” but we should understand“Hierarchical OSPF networks” as “OSPF networks”. D is correct bercause we can only have one area (area0 – the backbone area) for our networks.

But TT commented on 01-11-2010:

Especially to note on choice B, D, and E:Choice B: we all know that The areas can be any number from 0 to 4.2 billion and 1 to 65,535 for theProcess ID. As choice B specifies ‘area’ (be aware, it’s not saying ‘process id), there is no reason to saythat we cannot assign numbers from 0 to 65535 for area # (it is using ‘may be’, not ‘have to be’ or ‘ought tobe’). Hence, we do not worry about assigning ’0′.Choice E: as Area 0 is the backbone, we all understand that any areas in a OSPF network have to beconnected to it. And actually this is implicitly saying that multiple areas form a hierarchical OSPF network,as Area 0 being a root and others being its leaves.Choice D: when it specifies ‘Hierarchical’, at least 2 areas should be required to form such topology (ofcourse that includes Area 0)Although Choice B is not an absolutely accurate statement since it not only can be assigned up to 65535, itis still a correct answer. And again, it specifies ‘area’, not ‘process id’, so ’0′ can be included. Finally, itwould be meaningless to call OSPF a hierarchical network if no more than one area is present.—————————————————————————————————-I reviewed the question and think it is a more suitable solution with choice B than choice D, surely it is a

tricky question!

QUESTION 353Part of the OSPF network is shown below:

Configuration exhibit:

R1 routing commands:

ip route 0.0.0.0 0.0.0.0 serial0/0router ospf 1network 172.16.100.0 0.0.0.3 area 0network 172.16.100.64 0.0.0.63 area 0network 172.16.100.128 0.0.0.31 area 0default-information originate

You work as a network technician, study the exhibits carefully. Assume that all router interfaces areoperational and correctly configured. In addition, assume that OSPF has been correctly configured onrouter R2. How will the default route configured on R1 affect the operation of R2?

A. Any packet destined for a network that is not directly connected to router R2 will be droppedimmediately.

B. Any packet destined for a network that is not directly connected to router R1 will be dropped.C. Any packet destined for a network that is not directly connected to router R2 will be dropped

immediately because of the lack of a gateway on R1.D. The network directly connected to a router R2 will not be able to communicate with the 172.16.100.0,

172.16.100.28 and 172.16.100.64 subnetworks.E. Any packet destined for a network that is not referenced in the routing table of router R2 will be directed

to R1. R1 will then send that packet back to R2 and a routing loop will occur.

Correct Answer: ESection: IP Routing TechnologiesExplanation


First, notice that the more-specific routes will always be favored over less-specific routes regardless of theadministrative distance set for a protocol. In this case, because we use OSPF for three networks(172.16.100.0 0.0.0.3, 172.16.100.64 0.0.0.63, 172.16.100.128 0.0.0.31) so the packets destined for thesenetworks will not be affected by the default route.The default route configured on R1 “ip route 0.0.0.0 0.0.0.0 serial0/0″ will send any packet whose

destination network is not referenced in the routing table of router R1 to R2, it doesn’t drop anything soanswers A, B and C are not correct. D is not correct too because these routes are declared in R1 and thequestion says that “OSPF has been correctly configured on router R2″, so network directly connected torouter R2 can communicate with those three subnetworks.As said above, the default route configured on R1 will send any packet destined for a network that is notreferenced in its routing table to R2; R2 in turn sends it to R1 because it is the only way and a routing loopwill occur.


Which two statements are true about the loopback address that is configured on RouterB? (Choose two)

A. It ensures that data will be forwarded by RouterB.B. It provides stability for the OSPF process on RouterB.C. It specifies that the router ID for RouterB should be 10.0.0.1.D. It decreases the metric for routes that are advertised from RouterB.E. It indicates that RouterB should be elected the DR for the LAN.



A loopback interface never comes down even if the link is broken so it provides stability for the OSPFprocess (for example we use that loopback interface as the router-id) -> B is correct.The router-ID is chosen in the order below:+ The highest IP address assigned to a loopback (logical) interface.+ If a loopback interface is not defined, the highest IP address of all active router’s physical interfaces willbe chosen.-> The loopback interface will be chosen as the router ID of RouterB -> C is correct.

QUESTION 355Which characteristics are representative of a link-state routing protocol? (Choose three)

A. provides common view of entire topologyB. exchanges routing tables with neighbors

C. calculates shortest pathD. utilizes event-triggered updatesE. utilizes frequent periodic updates

Correct Answer: ACDSection: IP Routing TechnologiesExplanation


Each of the routers running link-state routing protocol learns the paths to all the destinations in its “area” sowe can say A is correct although it is a bit unclear.

Link-state routing protocols generate routing updates only (not the whole routing table) when a changeoccurs in the network topology so B is not correct.

Link-state routing protocol like OSPF uses Dijkstra algorithm to calculate the shortest path -> C is correct.

Unlike Distance vector routing protocol (which utilizes frequent periodic updates), link-state routing protocolutilizes event-triggered updates (only sends update when a change occurs) -> D is correct but E is notcorrect.

QUESTION 356

A network associate has configured OSPF with the command:

City(config-router)# network 192.168.12.64 0.0.0.63 area 0After completing the configuration, the associate discovers that not all the interfaces are participating inOSPF.Which three of the interfaces shown in the exhibit will participate in OSPF according to this configurationstatement? (Choose three)

A. FastEthernet0/0B. FastEthernet0/1C. Serial0/0D. Serial0/1.102E. Serial0/1.103F. Serial0/1.104

Correct Answer: BCDSection: IP addressing (IPv4 / IPv6)Explanation


The “network 192.168.12.64 0.0.0.63″ equals to network 192.168.12.64/26. This network has:

+ Increment: 64 (/26= 1111 1111.1111 1111.1111 1111.1100 0000)+ Network address: 192.168.12.64+ Broadcast address: 192.168.12.127

Therefore all interface in the range of this network will join OSPF -> B C D are correct.

QUESTION 357When running OSPF, what would cause router A not to form an adjacency with router B?

A. The loopback addresses are on different subnets.B. The values of the dead timers on the routers are different.C. Route summarization is enabled on both routers.D. The process identifier on router A is different than the process identifier on router.



To form an adjacency (become neighbor), router A & B must have the same Hello interval, Dead intervaland AREA number.


The network is converged. After link-state advertisements are received from Router_A, what informationwill Router_E contain in its routing table for the subnets 208.149.23.64 and 208.149.23.96?

A. 208.149.23.64[110/13] via 190.173.23.10, 00:00:00:07, FastEthernet0/0208.149.23.96[110/13] via 190.173.23.10, 00:00:00:16, FastEthernet0/0

B. 208.149.23.64[110/1] via 190.173.23.10, 00:00:00:07, Serial1/0208.149.23.96[110/3] via 190.173.23.10, 00:00:00:16, FastEthernet0/0

C. 208.149.23.64[110/13] via 190.173.23.10, 00:00:00:07, Serial1/0208.149.23.96[110/13] via 190.173.23.10, 00:00:00:16, Serial1/0 208.149.23.96[110/13] via 190.173.23.10, 00:00:00:16, FastEthernet0/0

D. 208.149.23.64[110/13] via 190.173.23.10, 00:00:00:07, Serial1/0208.149.23.96[110/13] via 190.173.23.10, 00:00:00:16, Serial1/0



Router_E learns two subnets, subnets 208.149.23.64 and 208.149.23.96 via Router_A throughFastEthernet interface. The interface cost is calculated with the formula 108 / Bandwidth. For FastEthernetit is 108 / 100 Mbps = 108 / 100,000,000 = 1. Therefore the cost is 12 (learned from Router_A) + 1 = 13 forboth subnets -> B is not correct.

The cost through T1 link is much higher than through T3 link (T1 cost = 108 / 1.544 Mbps = 64; T3 cost =108 / 45 Mbps = 2) so surely OSPF will choose the path through T3 link -> Router_E will choose the pathfrom Router_A through FastEthernet0/0, not Serial1/0 -> C & D are not correct.

In fact, we can quickly eliminate answers B, C and D because they contain at least one subnet learned fromSerial1/0 -> they are surely incorrect.

QUESTION 359Which commands are required to properly configure a router to run OSPF and to add network192.168.16.0/24 to OSPF area 0? (Choose two)

A. Router(config)#router ospf 1B. Router(config)#router ospf 0C. Router(config)#router ospf area 0D. Router(config-router)#network 192.168.16.0 0.0.0.255 area 0E. Router(config-router)#network 192.168.16.0 0.0.0.255 0F. Router(config-router)#network 192.168.16.0 255.255.255.0 area 0

Correct Answer: ADSection: IP Routing TechnologiesExplanation

Explanation/Reference:Enabling OSPF

Reference:http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/12-4t/iro-cfg.html#GUID-588D1301-F63C-4DAC-BF1C-C3735EB13673

Explanation:

In the router ospf process-id ranges from 1 to 65535 so, 0 is an invalid process-id number -> A is correctbut, B is not correct.

To configure OSPF, we need a wildcard in the “network” statement, not a subnet mask. We also need toassign an area to this process -> D is correct.

QUESTION 360Which parameter or parameters are used to calculate OSPF cost in Cisco routers?

A. Bandwidth, Delay and MTUB. BandwidthC. Bandwidth and MTUD. Bandwidth, MTU, Reliability, Delay and Load



The well-known formula to calculate OSPF cost isCost = 108 / Bandwidthso B is the correct answer.


Why are two OSPF designated routers identified on Core-Router?

A. Core-Router is connected to more than one multi-access network.B. The router at 208.149.23.130 is a secondary DR in case the primary fails.C. Two router IDs have the same OSPF priority and are therefore tied for DR electionD. The DR election is still underway and there are two contenders for the role.



OSPF elects one DR per multi-access network. In the exhibit there are two DR so there must have morethan one multi-access network.

QUESTION 362What is the default maximum number of equal-cost paths that can be placed into the routing of a CiscoOSPF router?

A. 16B. 2C. UnlimitedD. 4

Correct Answer: DSection: LAN Switching TechnologiesExplanation

Explanation/Reference:Reference:http://www.cisco.com/en/US/docs/ios_xr_sw/iosxr_r3.7/routing/configuration/guide/rc37ospf.html

Explanation:

The default number of equal-cost paths that can be placed into the routing of a Cisco OSPF router is 4. Wecan change this default value by using “maximum-paths” command:

Router(config-router)#maximum-paths 2

Note: Cisco routers support up to 16 equal-cost paths. In detail, the default number of maximum paths is 32for Cisco CRS-1 routers and 16 for Cisco XR 12000 Series Routers. The range is from 1 to 32 for CiscoCRS-1 routers and 1 to 16 for Cisco XR 12000 Series Routers.

QUESTION 363What is the OSPF default frequency, in seconds, at which a Cisco router sends hello packets on amultiaccess network?

A. 10B. 40C. 30D. 20



Explanation:

On broadcast multiacess and point-to-point links, the default is 10 seconds. On NBMA, the default is 30seconds.


The two connected ports on the switch are not turning orange or green. What would be the most effectivesteps to troubleshoot this physical layer problem? (Choose three.)

A. Ensure that the Ethernet encapsulations match on the interconnected router and switch ports.B. Ensure that cables A and B are straight-through cables.C. Ensure cable A is plugged into a trunk port.D. Ensure the switch has power.E. Reboot all of the devices.F. Reseat all cables.

Correct Answer: BDFSection: TroubleshootingExplanation


QUESTION 365Which command can you use to manually assign a static IPV6 address to a router interface?

A. ipv6 address PREFIX_1::1/64B. ipv6 autoconfig 2001:db8:2222:7272::72/64C. ipv6 autoconfigD. ipv6 address 2001:db8:2222:7272::72/64



QUESTION 366The network administrator is using a Windows PC application that is called putty.exe for remotecommunication to a switch for network troubleshooting. Which two protocols could be used during thiscommunication? (Choose two.)

A. SNMPB. HTTPC. TelnetD. RMONE. SSH

Correct Answer: CESection: IP ServicesExplanation


QUESTION 367What should be part of a comprehensive network security plan?

A. Allow users to develop their own approach to network security.B. Physically secure network equipment from potential access by unauthorized individuals.C. Encourage users to use personal information in their passwords to minimize the likelihood of passwords

being forgotten.D. Delay deployment of software patches and updates until their effect on end-user equipment is well

known and widely reported.E. Minimize network overhead by deactivating automatic antivirus client updates.



QUESTION 368Which two of these statements are true of IPv6 address representation? (Choose two.)

A. There are four types of IPv6 addresses: unicast, multicast, anycast, and broadcast.B. A single interface may be assigned multiple IPv6 addresses of any type.C. Every IPv6 interface contains at least one loopback address.D. The first 64 bits represent the dynamically created interface ID.E. Leading zeros in an IPv6 16 bit hexadecimal field are mandatory.

Correct Answer: BCSection: IP addressing (IPv4 / IPv6)Explanation

Explanation/Reference:IPv6 Addressing

Reference:http://www.cisco.com/en/US/technologies/tk648/tk872/technologies_white_paper0900aecd8026003d.pdf

Explanation:

A single interface may be assigned multiple addresses of any type (unicast, anycast, multicast).Every IPv6-enabled interface must contain at least one loopback and one link-local address.Optionally, every interface can have multiple unique local and global addresses.

IPv6 host addresses can be assigned in multiple ways:

Static configurationStateless autoconfigurationDHCPv6

When IPv6 is used over Ethernet networks, the Ethernet MAC address can be used to generate the 64-bitinterface ID for the host. This is called the EUI-64 address.Since MAC addresses use 48 bits, additional bits must be inserted to fill the 64 bits required.

QUESTION 369A network administrator cannot connect to a remote router by using SSH. Part of the show interfacescommand is shown.

router#show interfacesSerial0/1/0 is up, line protocol is down

At which OSI layer should the administrator begin troubleshooting?

A. physicalB. data linkC. networkD. transport

Correct Answer: BSection: IP ServicesExplanation

Explanation/Reference:Serial 0 is up, line protocol is down

Reference:https://learningnetwork.cisco.com/thread/12389

Explanation:

I think the indication here is "Serial 0 is up, line protocol is down". What causes this indication? Correct meif I am wrong. When you have this indication, a cable unplugged is not a correct answer. If you check theoutput of your "show interface serial 0" comand again, you should notice it as "Serial 0 is down, line protocolis down. Under the "show ip int brief" you should see status = down and protocol = down as oppossed toup, down. Becuase you disconnected the cable, layer 1 will go down, which is indicated by the serial 0down status. The line protocol status is for layer 2. So, a cable unplugged is not a correct answer to "Serial0 is up, line protocol is down". Hope this helps.

QUESTION 370Which option is a valid IPv6 address?

A. 2001:0000:130F::099a::12aB. 2002:7654:A1AD:61:81AF:CCC1C. FEC0:ABCD:WXYZ:0067::2A4D. 2004:1:25A4:886F::1



Reference:http://www.ipv6.com/articles/general/IPv6-Addressing.htm

Explanation:

IPv6 Address Notation

IPv6 addresses are denoted by eight groups of hexadecimal quartets separated by colons in between them.

Following is an example of a valid IPv6 address: 2001:cdba:0000:0000:0000:0000:3257:9652

Any four-digit group of zeroes within an IPv6 address may be reduced to a single zero or altogether omitted.Therefore, the following IPv6 addresses are similar and equally valid:

2001:cdba:0000:0000:0000:0000:3257:96522001:cdba:0:0:0:0:3257:96522001:cdba::3257:9652

The URL for the above address will be of the form:

http://[2001:cdba:0000:0000:0000:0000:3257:9652]/

QUESTION 371What is the purpose of the switchport command?

Switch(config-if)# switchport port-security maximum 1Switch(config-if)# switchport port-security mac-address 0018.DE8B.4BF8

A. It ensures that only the device with the MAC address 0018.DE8B.4BF8 will be able to connect to theport that is being configured.

B. It informs the switch that traffic destined for MAC address 0018.DE8B.4BF8 should only be sent to theport that is being configured.

C. It will act like an access list and the port will filter packets that have a source or destination MAC of0018.DE8B.4BF8.

D. The switch will shut down the port of any traffic with source MAC address of 0018.DE8B.4BF8.

Correct Answer: ASection: Network Device SecurityExplanation


QUESTION 372How many bits are contained in each field of an IPv6 address?

A. 24B. 4C. 8D. 16




Explanation:

One of the key advantages IPv6 brings is the exponentially larger address space. The following will outlinethe basic address architecture of IPv6.

128-bit-long addressesRepresented in hexadecimal format:

Uses CIDR principles: prefix/prefix lengthx:x:x:x:x:x:x:x, where x is a 16-bit hex fieldThe last 64 bits are used for the interface ID

QUESTION 373Which three approaches can be used while migrating from an IPv4 addressing scheme to an IPv6 scheme(Choose three)

A. static mapping of IPv4 address to IPv6 addresses

B. configuring IPv4 tunnels between IPv6 islandsC. use DHCPv6 to map IPv4 addresses to IPv6 addressesD. use proxying and translation (NAT-PT) to translate IPv6 packets into IPv4 packetsE. configure IPv6 directlyF. enable dual-stack routing

Correct Answer: BDFSection: IP addressing (IPv4 / IPv6)Explanation

Explanation/Reference:The IPv6 Transition

Reference 1:http://www.opus1.com/ipv6/howdoitransitiontoipv6.html

Explanation:

Connecting IPv6 islands with tunnelsAn IPv6 island is a network made of IPv6 links directly connected by IPv6 routers. In the early days of IPv6deployment, there are many IPv6 islands. IPv6 in IPv4 tunnels are used to connect those islands together.In each island, one (or more) dual stack routers are designated to encapsulate and decapsulate IPv6packets within IPv4 packets. Different mechanisms have been developed to manage tunnels: automatictunnels3, configured tunnels3, tunnel brokers3, 6over43, 6to43,...

Reference 2:http://www.petri.co.il/ipv6-transition.htm

Network Address Translation - Protocol Translation (NAT-PT)The NAT-PT method enables the ability to either statically or dynamically configure a translation of a IPv4network address into an IPv6 network address and vice versa. For those familiar with more typically NATimplementations, the operation is very similar but includes a protocol translation function. NAT-PT also tiesin an Application Layer Gateway (ALG) functionality that converts Domain Name System (DNS) mappingsbetween protocols.

Dual StackThe simplest approach when transitioning to IPv6 is to run IPv6 on all of the devices that are currentlyrunning IPv4. If this is something that is possible within the organizational network, it is very easy toimplement. However, for many organizations, IPv6 is not supported on all of the IPv4 devices; in thesesituations other methods must be considered.

QUESTION 374Which statement about IPv6 is true?

A. Addresses are not hierarchical and are assigned at random.B. Only one IPv6 address can exist on a given interface.C. There are 2.7 billion addresses available.D. Broadcasts have been eliminated and replaced with multicasts.


Explanation/Reference:IPv6 Address Types

Reference:http://technet.microsoft.com/en-us/library/cc757359(v=ws.10).aspx

Explanation:

IPv6 has three types of addresses, which can be categorized by type and scope:Unicast addresses. A packet is delivered to one interface.

Multicast addresses. A packet is delivered to multiple interfaces.

Anycast addresses. A packet is delivered to the nearest of multiple interfaces (in terms of routingdistance).

IPv6 does not use broadcast messages.Unicast and anycast addresses in IPv6 have the following scopes (for multicast addresses, the scope isbuilt into the address structure):

Link-local. The scope is the local link (nodes on the same subnet).

Site-local. The scope is the organization (private site addressing).

Global. The scope is global (IPv6 Internet addresses).

In addition, IPv6 has special addresses such as the loopback address. The scope of a special addressdepends on the type of special address.Much of the IPv6 address space is unassigned.

QUESTION 375What are two recommended ways of protecting network device configuration files from outside networksecurity threats? (Choose two.)

A. Allow unrestricted access to the console or VTY ports.B. Use a firewall to restrict access from the outside to the network devices.C. Always use Telnet to access the device command line because its data is automatically encrypted.D. Use SSH or another encrypted and authenticated transport to access device configurations.E. Prevent the loss of passwords by disabling password encryption.

Correct Answer: BDSection: Network Device SecurityExplanation


QUESTION 376A receiving host has failed to receive all of the segments that it should acknowledge. What can the host doto improve the reliability of this communication session?

A. decrease the window sizeB. use a different source port for the sessionC. decrease the sequence numberD. obtain a new IP address from the DHCP serverE. start a new session using UDP

Correct Answer: ASection: TroubleshootingExplanation


QUESTION 377

Which command enables IPv6 forwarding on a cisco router?

A. ipv6 hostB. ipv6 unicast-routingC. ipv6 localD. ipv6 neighbor


Explanation/Reference:Enabling IPv6 on Cisco IOS Software Technology

Reference:http://www.ciscopress.com/articles/article.asp?p=31948&seqNum=4

Explanation:

The first step of enabling IPv6 on a Cisco router is the activation of IPv6 traffic forwarding to forward unicastIPv6 packets between network interfaces. By default, IPv6 traffic forwarding is disabled on Cisco routers.

The ipv6 unicast-routing command is used to enable the forwarding of IPv6 packets between interfaces onthe router. The syntax for this command is as follows:

Router(config)#ipv6 unicast-routing

The ipv6 unicast-routing command is enabled on a global basis.

QUESTION 378Identify the four valid IPv6 addresses. (Choose four.)

A. ::B. ::192:168:0:1C. 2000::D. 2001:3452:4952:2837::E. 2002:c0a8:101::42F. 2003:dead:beef:4dad:23:46:bb:101

Correct Answer: ABEFSection: IP addressing (IPv4 / IPv6)Explanation

Explanation/Reference:IPv6 Address Validation

Reference 1:http://www.intermapper.com/ipv6validator

Reference 2:http://www.ripe.net/lir-services/new-lir/ipv6_reference_card.pdf

Explanation:

QUESTION 379Which two statements describe characteristics of IPv6 unicast addressing? (Choose two.)

A. Global addresses start with 2000::/3.B. Link-local addresses start with FE00:/12.C. Link-local addresses start with FF00::/10.D. There is only one loopback address and it is ::1.E. If a global address is assigned to an interface, then that is the only allowable address for the interface.

Correct Answer: ADSection: IP addressing (IPv4 / IPv6)Explanation

Explanation/Reference:IPv6 Address Validation

Explanation:

QUESTION 380A network administrator is trying to add a new router into an established OSPF network. The networksattached to the new router do not appear in the routing tables of the other OSPF routers. Given theinformation in the partial configuration shown below, what configuration error is causing this problem?

Router(config)# router ospf 1Router(config-router)# network 10.0.0.0 255.0.0.0 area 0

A. The process id is configured improperly.B. The OSPF area is configured improperly.C. The network wildcard mask is configured improperly.D. The network number is configured improperly.E. The AS is configured improperly.F. The network subnet mask is configured improperly.



QUESTION 381Which statement is true?

A. An IPv6 address is 64 bits long and is represented as hexadecimal characters.B. An IPv6 address is 32 bits long and is represented as decimal digits.

C. An IPv6 address is 128 bits long and is represented as decimal digits.D. An IPv6 address is 128 bits long and is represented as hexadecimal characters.




Explanation:

One of the key advantages IPv6 brings is the exponentially larger address space. The following will outlinethe basic address architecture of IPv6.

128-bit-long addressesRepresented in hexadecimal format:

Uses CIDR principles: prefix/prefix lengthx:x:x:x:x:x:x:x, where x is a 16-bit hex fieldThe last 64 bits are used for the interface ID

QUESTION 382A network administrator is connecting PC hosts A and B directly through their Ethernet interfaces as shown in the graphic. Ping attempts between the hosts are unsuccessful. What can be done to provideconnectivity between the hosts? (choose two.)

A. A crossover cable should be used in place of the straight-through cable.B. A rollover cable should be used in place of the straight-through cable.C. The subnet masks should be set to 255.255.255.192D. A default gateway needs to be set on each host.E. The hosts must be reconfigured to use private IP addresses for direct connections of this type.F. The subnet masks should be set to 255.255.255.0

Correct Answer: AFSection: Operation of IP Data NetworksExplanation



A technician pastes the configurations in the exhibit into the two new routers shown. Otherwise, the routersare configured with their default configurations.

A ping from Host1 to Host 2 fails, but the technician is able to ping the S0/0 interface of R2 from Host 1.The configurations of the hosts have been verified as correct. What could be the cause of the problem?

A. The serial cable on R1 needs to be replaced.B. The interfaces on R2 are not configured properlyC. R1 has no route to the 192.168.1.128 network.D. The IP addressing scheme has overlapping subnetworks.E. The ip subnet-zero command must be configured on both routers.

Correct Answer: CSection: TroubleshootingExplanation


Without a static route pointing to host 2 network the router is unaware of the path to take to reach thatnetwork and reply traffic cannot be sent.


Serial 0/0 does not respond to a ping request from a host on the FastEthernet 0/0 LAN. How can thisproblem be corrected?

A. Enable the Serial 0/0 interface.B. Correct the IP address for Serial 0/0.

C. Correct the IP address for FastEthernet 0/0D. Change the encapsulation type on Serial 0/0E. Enable autoconfiguration on the Serial 0/0 interface



Serial 0/0 interface is administratively down therefore, you will have to run the "no shutdown" command toenable the interface for data.


What kind of cable should be used to make each connectionthat is identified by the numbers shown?

A. 1 - Ethernet Crossover cable2 - Ethernet straight-through cable3 - Fiber Optic cable4 - Rollover cable

B. 1 - Ethernet straight-through cable2 - Ethernet straight-through cable3 - Serial cable4 - Rollover cable

C. 1 - Ethernet rollover cable2 - Ethernet crossover cable3 - Serial cable4 - Null-modem cable

D. 1 - Ethernet straight-through cable2 - Ethernet Crossover cable3 - Serial cable4 - Rollover cable

E. 1 - Ethernet straight-through cable2 - Ethernet Crossover cable3 - Serial cable4 - Ethernet Straight-through cable

Correct Answer: BSection: Operation of IP Data NetworksExplanation


QUESTION 386Which of the following are types of flow control? (choose three.)

A. bufferingB. cut-throughC. windowingD. congestion avoidanceE. load balancing

Correct Answer: ACDSection: Operation of IP Data NetworksExplanation

Explanation/Reference:Flow Control Types (Transmission Control over netwo rks)

Reference:http://www.info-it.net/cisco/ccna/exam-tips/flow-control.php

Explanation:

Congestion

During Transfer of data, a high speed computer is generating data traffic a lot faster than the networkdevice can handle in transferring to destination, so single gateway or destination device can not handlemuch amount of traffic that is called "Congestion" .

Buffering

The Technie is used to control the data transfer when we have congestion, when a network device receivea data it stores in memory section and then transfer to next destination this process called "Buffering" .

Windowing

Whereas Windowing is used for flow control by the Transport layer.

Say the sender device is sending segments and the receiver device can accommodate only a fixed numberof segments before it can accept more, the two devices negotiate the window size during the connectionsetup. This is done so that the sending device doesn't overflow the receiving device's buffer.

Also the receiving device can send a single acknowledgement for the segments it has received instead ofsending an acknowledgement after every segment received.

Also, this window size is dynamic meaning, the devices can negotiate and change the window size in themiddle of a session. So if initially the window size is three and the receiving device thinks that it can acceptmore number of segments in its buffer it can negotiate with the sending device and it increase it to say 5 forexample.

Windowing is used only by TCP since UDP doesn't use or allow flow control.

QUESTION 387If an ethernet port on a router was assigned an IP address of 172.16.112.1/20, what is the maximumnumber of hosts allowed on this subnet?

A. 1024B. 2046

C. 4094D. 4096E. 8190



Each octet represents eight bits. The bits, in turn, represent (from left to right):

128, 64, 32 , 16 , 8, 4, 2, 1

Add them up and you get 255. Add one for the all zeros option, and the total is 256.

Now take away one of these for the network address (all zeros) and another for the broadcast address (allones). Each octet represents 254 possible hosts. Or 254 possible networks. Unless you have subnet zeroset on your network gear, in which case you could conceivably have 255.

The CIDR addressing format (/20) tells us that 20 bits are used for the network portion, so the maximumnumber of networks are 2^20 minus one if you have subnet zero enabled, or minus 2 if not.

You asked about the number of hosts. That will be 32 minus the number of network bits, minus two. Socalculate it as (2^(32-20))-2, or (2^12)-2 = 4094


Why was this message received?

A. No VTY password has been set.B. No enable password has been set.C. No console password has been set.D. No enable secret password has been set.E. The login command has not been set on CON 0F. The login command has not been set on the VTY ports.




How many collision domains are shown?

A. oneB. twoC. threeD. fourE. sixF. twelve



Hubs create single collision and broadcast domains.


After configuring two interfaces on the HQ router, the network administrator notices an error message.What must be done to fix this error?

A. The serial interface must be configured first.B. The serial interface must use the address 192.168.1.2C. The subnet mask of the serial interface should be changed to 255.255.255.0D. The subnet mask of the FastEthernet interface should be changed to 255.255.255.240E. The address of the FastEthernet interface should be changed to 192.168.1.66

Correct Answer: DSection: TroubleshootingExplanation


QUESTION 391What does the "Inside Global" address represent in the configuration of NAT?

A. the summarized address for all of the internal subnetted addressesB. the MAC address of the router used by inside hosts to connect to the InternetC. a globally unique, private IP address assigned to a host on the inside networkD. a registered address that represents an inside host to an outside network


Explanation/Reference:NAT: Local and Global Definitions

Reference:http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094837.shtml

Explanation:

Cisco defines these terms as:

Inside local address —The IP address assigned to a host on the inside network. This is the addressconfigured as a parameter of the computer OS or received via dynamic address allocation protocolssuch as DHCP. The address is likely not a legitimate IP address assigned by the Network InformationCenter (NIC) or service provider.

Inside global address —A legitimate IP address assigned by the NIC or service provider thatrepresents one or more inside local IP addresses to the outside world.

Outside local address —The IP address of an outside host as it appears to the inside network. Notnecessarily a legitimate address, it is allocated from an address space routable on the inside.

Outside global address —The IP address assigned to a host on the outside network by the host owner.The address is allocated from a globally routable address or network space.

These definitions still leave a lot to be interpreted. For this example, this document redefines these termsby first defining local address and global address. Keep in mind that the terms inside and outside are NATdefinitions. Interfaces on a NAT router are defined as inside or outside with the NAT configurationcommands, ip nat inside destination and ip nat outside source . Networks to which these interfaces connectcan then be thought of as inside networks or outside networks, respectively.

Local address —A local address is any address that appears on the inside portion of the network.

Global address —A global address is any address that appears on the outside portion of the network.

QUESTION 392Two routers named Atlanta and Brevard are connected by their serial interfaces as shown in the exhibit, butthere is no data connectivity between them. The Atlanta router is known to have a correct configuration.Given the partial configurations shown in the exhibit, what is the problem on the Brevard router that iscausing the lack of connectivity?

A. A loopback is not set.B. The IP address is incorrect.C. The subnet mask is incorrect.D. The serial line encapsulations are incompatible.E. The maximum transmission unit (MTU) size is too large.F. The bandwidth setting is incompatible with the connected interface.

Correct Answer: BSection: TroubleshootingExplanation


The IP address of routers are in different networks.

QUESTION 393Which of the following statements are TRUE regarding Cisco access lists? (Choose two.)

A. In an inbound access list, packets are filtered as they enter an interface.B. In an inbound access list, packets are filtered before they exit an interface.C. Extended access lists are used to filter protocol-specific packets.D. You must specify a deny statement at the end of each access list to filter unwanted traffic.E. When a line is added to an existing access list, it is inserted at the beginning of the access list.

Correct Answer: ACSection: IP ServicesExplanation


In an inbound access list, packets are filtered as they enter an interface. Extended access lists are used tofilter protocol specific packets. Access lists can be used in a variety of situations when the router needs tobe given guidelines for decision-making. These situations include:

Filtering traffic as it passes through the router To control access to the VTY lines (Telnet) To identify "interesting" traffic to invoke Demand Dial Routing (DDR) calls To filter and control routing updates from one router to another

There are two types of access lists, standard and extended. Standard access lists are applied as close tothe destination as possible (outbound), and can only base their filtering criteria on the source IP address.The number used while creating an access list specifies the type of access list created. The range used forstandard access lists is 1 to 99 and 1300 to 1999. Extended access lists are applied as close to the sourceas possible (inbound), and can base their filtering criteria on the source or destination IP address, or on thespecific protocol being used. The range used for extended access lists is 100 to 199 and 2000 to 2699. Other features of access lists include:

Inbound access lists are processed before the packet is routed. Outbound access lists are processed after the packet has been routed to an exit interface. An "implicit deny" is at the bottom of every access list, which means that if a packet has not matchedany preceding access list condition, it will be filtered (dropped). Access lists require at least one permit statement, or all packets will be filtered (dropped). One access list may be configured per direction for each Layer 3 protocol configured on an interface

The option stating that in an inbound access list, packets are filtered before they exit an interface isincorrect. Packets are filtered as they exit an interface when using an outbound access list.

The option stating that a deny statement must be specified at the end of each access list in order to filterunwanted traffic is incorrect. There is an implicit deny at the bottom of every access list.

When a line is added to an existing access list, it is not inserted at the beginning of the access list. It isinserted at the end. This should be taken into consideration. For example, given the following access list,executing the command access-list 110 deny tcp 192.168.5.0 0.0.0.255 any eq www would have NO effecton the packets being filtered because it would be inserted at the end of the list, AFTER the line that allowsall traffic.

access-list 110 permit ip host 192.168.5.1 anyaccess-list 110 deny icmp 192.168.5.0 0.0.0.255 any echoaccess-list 110 permit any any

QUESTION 394Which statements are TRUE regarding Internet Protocol version 6 (IPv6) addresses? (Choose three.)

A. An IPv6 address is divided into eight 16-bit groups.B. A double colon (::) can only be used once in a single IPv6 address.C. IPv6 addresses are 196 bits in length.D. Leading zeros cannot be omitted in an IPv6 address.E. Groups with a value of 0 can be represented with a single 0 in IPv6 address.

Correct Answer: ABESection: IP addressing (IPv4 / IPv6)Explanation


IPv6 addresses are divided into eight 16-bit groups, a double colon (::) can only be used once in an IPv6address, and groups with a value of 0 can be represented with a single 0 in an IPv6 address.

The following statements are also true regarding IPv6 address:

IPv6 addresses are 128 bits in length. Eight 16-bit groups are divided by a colon (:). Multiple groups of 16-bit 0s can be represented with double colon (::). Double colons (::) represent only 0s. Leading zeros can be omitted in an IPv6 address .

The option stating that IPv6 addresses are 196 bits in length is incorrect. IPv6 addresses are 128 bits inlength.

The option stating that leading zeros cannot be omitted in an IPv6 address is incorrect. Leading zeros canbe omitted in an IPv6 address.

QUESTION 395Which of the following IP addresses are valid Class B host addresses if a default Class B mask is in use?(Choose two.)

A. 10.6.8.35B. 133.6.5.4C. 192.168.5.9D. 127.0.0.1E. 190.6.5.4

Correct Answer: BESection: IP addressing (IPv4 / IPv6)Explanation


The IP addresses 133.6.5.4 and 190.6.5.4 are both valid Class B addresses when a default mask is in use.The Class B default mask is 255.255.0.0 and the range of valid addresses is 128.0.0.0-191.255.255.255.

The IP address 10.6.8.35 is a Class A address. The Class A default mask is 255.0.0.0 and the range ofvalid addresses is 1.0.0.0 - 127.255.255.255, with the exception of the range 127.0.0.1 - 127.255.255.255,which is reserved and cannot be assigned.

The IP address 192.168.5.9 is a Class C address. The Class C default mask is 255.255.255.0 and therange of valid addresses is 192.0.0.0 - 223.255.255.255.

The IP address 127.0.0.1 is a Class A address, but it comes from a reserved portion that cannot beassigned. The range 127.0.0.1 - 127.255.255.255 is used for diagnostics, and although any address in therange will work as a diagnostic address, 127.0.0.1 is known as the loopback address. If you can ping thisaddress, or any address in the 127.0.0.1 - 127.255.255.255 range, then the NIC is working and TCP/IP isinstalled. The Class A default mask is 255.0.0.0 and the range of valid addresses is 1.0.0.0 -127.255.255.255, with the exception of the range 127.0.0.1 - 127.255.255.255, which is reserved andcannot be assigned.

QUESTION 396From which of the following attacks can Message Authentication Code (MAC) shield your network?

A. DoSB. DDoSC. spoofingD. SYN floods

Correct Answer: CSection: Network Device SecurityExplanation


Message Authentication Code (MAC) can shield your network from spoofing attacks. Spoofing, also knownas masquerading, is a popular trick in which an attacker intercepts a network packet, replaces the sourceaddress of the packets header with the address of the authorized host, and reinserts fake information whichis sent to the receiver. This type of attack involves modifying packet contents. MAC can prevent this type ofattack and ensure data integrity by ensuring that no data has changed. MAC also protects againstfrequency analysis, sequence manipulation, and ciphertext-only attacks.

MAC is a secure message digest that requires a secret key shared by the sender and receiver, making itimpossible for sniffers to change both the data and the MAC as the receiver can detect the changes.

A denial-of-service (DoS) attack floods the target system with unwanted requests, causing the loss ofservice to users. One form of this attack generates a flood of packets requesting a TCP connection with thetarget, tying up all resources and making the target unable to service other requests. MAC does not preventDoS attacks. Stateful packet filtering is the most common defense against a DoS attack.

A Distributed Denial of Service attack (DDoS) occurs when multiple systems are used to flood the networkand tax the resources of the target system. Various intrusion detection systems, utilizing stateful packetfiltering, can protect against DDoS attacks.

In a SYN flood attack, the attacker floods the target with spoofed IP packets and causes it to either freezeor crash. A SYN flood attack is a type of denial of service attack that exploits the buffers of a device thataccept incoming connections and therefore cannot be prevented by MAC. Common defenses against aSYN flood attack include filtering, reducing the SYN-RECEIVED timer, and implementing SYN cache orSYN cookies.


A company wants to use NAT in the network shown. Which commands will apply the NAT configuration tothe proper interfaces? (Choose two.)

A. R1(config)# interface serial0/1 R1(config-if)# ip nat inside

B. R1(config)# interface serial0/1 R1(config-if)# ip nat outside

C. R1(config)# interface fastethernet0/0

R1(config-if)# ip nat insideD. R1(config)# interface fastethernet0/0

R1(config-if)# ip nat outsideE. R1(config)# interface serial0/1

R1(config-if)# ip nat outside source pool 200.2.2.18 255.255.255.252F. R1(config)# interface fastethernet0/0

R1(config-if)# ip nat inside source 10.10.0.0 255.255.255.0



QUESTION 398How many addresses will be available for dynamic NAT translation when a router is configured with thefollowing commands?

Router(config)#ip nat pool TAME 209.165.201.23 209.165.201.30 netmask 255.255.255.224 Router(config)#ip nat inside source list 9 pool TAME


A. 7B. 8C. 9D. 10E. 24F. 32



209.165.201.23 to 209.165.201.30 provides for 8 addresses.

QUESTION 399Read the scenario and sort the the appropriate commands in order to configure the router.On the real simulation during the exam you will be required to type the actual commands in order toconfigure the router.

Build List and Reorder:

Correct Answer:

Section: IP Routing TechnologiesExplanation


ICND1 - GRATIS EXAM · PDF fileICND1 QUESTION 1 IPv6 unicast routing is running on the Corp...

Documents

Transcript of ICND1 - GRATIS EXAM · PDF fileICND1 QUESTION 1 IPv6 unicast routing is running on the Corp...