CISCO 2 - Chapter 5 bis Chapter 9

Bitte warte - es wird geladen…

Frage 1 von 107

Which statement describes the port speed LED on the Cisco Catalyst 2960 switch?

Wähle eine der folgenden:

If the LED is amber, the port is operating at 1000 Mb/s.
If the LED is blinking green, the port is operating at 10 Mb/s.
If the LED is off, the port is not operating.
If the LED is green, the port is operating at 100 Mb/s.

Erklärung

Frage 2 von 107

Which command is used to set the BOOT environment variable that defines where to find the IOS image file on a switch?

Wähle eine der folgenden:

confreg
boot loader
boot system
config-register

Erklärung

Frage 3 von 107

What is a function of the switch boot loader?

Wähle eine der folgenden:

to provide an environment to operate in when the switch operating system cannot be found
to control how much RAM is available to the switch during the boot process
to provide security for the vulnerable state when the switch is booting
to speed up the boot process

Erklärung

Frage 4 von 107

Which interface is the default location that would contain the IP address used to manage a 24-port Ethernet switch?

Wähle eine der folgenden:

VLAN 99
interface connected to the default gateway
Fa0/1
Fa0/0
VLAN 1

Erklärung

Frage 5 von 107

A production switch is reloaded and finishes with a Switch> prompt. What two facts can be determined? (Choose two.)

Wähle eine oder mehr der folgenden:

The switch did not locate the Cisco IOS in flash, so it defaulted to ROM.
A full version of the Cisco IOS was located and loaded.
There is not enough RAM or flash on this router.
The boot process was interrupted.
POST occurred normally.

Erklärung

Frage 6 von 107

Which two statements are true about using full-duplex Fast Ethernet? (Choose two.)

Wähle eine oder mehr der folgenden:

Full-duplex Fast Ethernet offers 100 percent efficiency in both directions.
Performance is improved because the NIC is able to detect collisions.
Nodes operate in full-duplex with unidirectional data flow.
Latency is reduced because the NIC processes frames faster.
Performance is improved with bidirectional data flow.

Erklärung

Frage 7 von 107

In which situation would a technician use the show interfaces switch command?

Wähle eine der folgenden:

to determine the MAC address of a directly attached network device on a particular interface
when an end device can reach local devices, but not remote devices
when packets are being dropped from a particular directly attached host
to determine if remote access is enabled

Erklärung

Frage 8 von 107

Refer to the exhibit. A network technician is troubleshooting connectivity issues in an Ethernet network with the command show interfaces fastEthernet 0/0. What conclusion can be drawn based on the partial output in the exhibit?

Wähle eine der folgenden:

All hosts on this network communicate in full-duplex mode.
A malfunctioning NIC can cause frames to be transmitted that are longer than the allowed maximum length.
There are collisions in the network that cause frames to occur that are less than 64 bytes in length.
Some workstations might use an incorrect cabling type to connect to the network.

Erklärung

Frage 9 von 107

Refer to the exhibit. What media issue might exist on the link connected to Fa0/1 based on the show interface command?

Wähle eine der folgenden:

The bandwidth parameter on the interface might be too high.
The interface might be configured as half-duplex.
The cable attaching the host to port Fa0/1 might be too long.
There could be too much electrical interference and noise on the link.
There could be an issue with a faulty NIC.

Erklärung

Frage 10 von 107

If one end of an Ethernet connection is configured for full duplex and the other end of the connection is configured for half duplex, where would late collisions be observed?

Wähle eine der folgenden:

on the half-duplex end of the connection
only on serial interfaces
on the full-duplex end of the connection
on both ends of the connection

Erklärung

Frage 11 von 107

What is one difference between using Telnet or SSH to connect to a network device for management purposes?

Wähle eine der folgenden:

Telnet sends a username and password in plain text, whereas SSH encrypts the username and password.
Telnet supports a host GUI whereas SSH only supports a host CLI.
Telnet does not provide authentication whereas SSH provides authentication.
Telnet uses UDP as the transport protocol whereas SSH uses TCP.

Erklärung

Frage 12 von 107

Refer to the exhibit. The network administrator wants to configure Switch1 to allow SSH connections and prohibit Telnet connections. How should the network administrator change the displayed configuration to satisfy the requirement?

Wähle eine der folgenden:

Use SSH version 1.
Modify the transport input command.
Configure SSH on a different line.
Reconfigure the RSA key.

Erklärung

Frage 13 von 107

What is the effect of using the switchport port-security command?

Wähle eine der folgenden:

detects the first MAC address in a frame that comes into a port and places that MAC address in the MAC address table
automatically shuts an interface down if applied to a trunk port
enables port security globally on the switch
enables port security on an interface

Erklärung

Frage 14 von 107

Where are dynamically learned MAC addresses stored when sticky learning is enabled with the switchport port-security mac-address sticky command?

Wähle eine der folgenden:

flash
NVRAM
RAM
ROM

Erklärung

Frage 15 von 107

A network administrator configures the port security feature on a switch. The security policy specifies that each access port should allow up to two MAC addresses. When the maximum number of MAC addresses is reached, a frame with the unknown source MAC address is dropped and a notification is sent to the syslog server. Which security violation mode should be configured for each access port?

Wähle eine der folgenden:

shutdown
warning
protect
restrict

Erklärung

Frage 16 von 107

Which two statements are true regarding switch port security? (Choose two.)

Wähle eine oder mehr der folgenden:

If fewer than the maximum number of MAC addresses for a port are configured statically, dynamically learned addresses are added to CAM until the maximum number is reached.
After entering the sticky parameter, only MAC addresses subsequently learned are converted to secure MAC addresses.
The three configurable violation modes all require user intervention to re-enable ports.
Dynamically learned secure MAC addresses are lost when the switch reboots.
The three configurable violation modes all log violations via SNMP.

Erklärung

Frage 17 von 107

Which action will bring an error-disabled switch port back to an operational state?

Wähle eine der folgenden:

Issue the shutdown and then no shutdown interface commands.
Clear the MAC address table on the switch.
Issue the switchport mode access command on the interface.
Remove and reconfigure port security on the interface.

Erklärung

Frage 18 von 107

Refer to the exhibit. Port Fa0/2 has already been configured appropriately. The IP phone and PC work properly. Which switch configuration would be most appropriate for port Fa0/2 if the network administrator has the following goals?

No one is allowed to disconnect the IP phone or the PC and connect some other wired device.
If a different device is connected, port Fa0/2 is shut down.
The switch should automatically detect the MAC address of the IP phone and the PC and add those addresses to the running configuration.

Wähle eine der folgenden:

SWA(config-if)# switchport port-security
SWA(config-if)# switchport port-security mac-address sticky
SWA(config-if)# switchport port-security mac-address sticky
SWA(config-if)# switchport port-security maximum 2
SWA(config-if)# switchport port-security
SWA(config-if)# switchport port-security maximum 2
SWA(config-if)# switchport port-security mac-address sticky
SWA(config-if)# switchport port-security
SWA(config-if)# switchport port-security maximum 2
SWA(config-if)# switchport port-security mac-address sticky
SWA(config-if)# switchport port-security violation restrict

Erklärung

Frage 19 von 107

Refer to the exhibit. What can be determined about port security from the information that is shown?

Wähle eine der folgenden:

The port has been shut down.
The port has the maximum number of MAC addresses that is supported by a Layer 2 switch port which is configured for port security.
The port violation mode is the default for any port that has port security enabled.
The port has two attached devices.

Erklärung

Frage 20 von 107

Refer to the exhibit. Which event will take place if there is a port security violation on switch S1 interface Fa0/1?

Wähle eine der folgenden:

A notification is sent.
The interface will go into error-disabled state.
Packets with unknown source addresses will be dropped.
A syslog message is logged.

Erklärung

Frage 21 von 107

What are three primary benefits of using VLANs? (Choose three.)

Wähle eine oder mehr der folgenden:

no required configuration
improved IT staff efficiency
end user satisfaction
cost reduction
a reduction in the number of trunk links
security

Erklärung

Frage 22 von 107

Which type of VLAN is used to designate which traffic is untagged when crossing a trunk port?

Wähle eine der folgenden:

management
native
default
data

Erklärung

Frage 23 von 107

A network administrator is determining the best placement of VLAN trunk links. Which two types of point-to-point connections utilize VLAN trunking? (Choose two.)

Wähle eine oder mehr der folgenden:

between two switches that share a common VLAN
between a switch and a network printer
between a switch and a server that has an 802.1Q NIC
between a switch and a client PC
between two switches that utilize multiple VLANs

Erklärung

Frage 24 von 107

What must the network administrator do to remove Fast Ethernet port fa0/1 from VLAN 2 and assign it to VLAN 3?

Wähle eine der folgenden:

Enter the no shutdown command in interface configuration mode to return it to the default configuration and then configure the port for VLAN 3.
Enter the switchport trunk native vlan 3 command in interface configuration mode.
Enter the switchport access vlan 3 command in interface configuration mode.
Enter the no vlan 2 and the vlan 3 commands in global configuration mode.

Erklärung

Frage 25 von 107

When a Cisco switch receives untagged frames on a 802.1Q trunk port, which VLAN ID is the traffic switched to by default?

Wähle eine der folgenden:

management VLAN ID
data VLAN ID
native VLAN ID
unused VLAN ID

Erklärung

Frage 26 von 107

Port Fa0/11 on a switch is assigned to VLAN 30. If the command no switchport access vlan 30 is entered on the Fa0/11 interface, what will happen?

Wähle eine der folgenden:

VLAN 30 will be deleted.
Port Fa0/11 will be returned to VLAN 1.
An error message would be displayed.
Port Fa0/11 will be shutdown.

Erklärung

Frage 27 von 107

Which command is used to remove only VLAN 20 from a switch?

Wähle eine oder mehr der folgenden:

no switchport access vlan 20
no vlan 20
delete flash:vlan.dat
delete vlan.dat

Erklärung

Frage 28 von 107

What happens to a port that is associated with VLAN 10 when the administrator deletes VLAN 10 from the switch?

Wähle eine der folgenden:

The port creates the VLAN again.
The port automatically associates itself with the native VLAN.
The port goes back to the default VLAN.
The port becomes inactive.

Erklärung

Frage 29 von 107

Which two characteristics match extended range VLANs? (Choose two.)

Wähle eine oder mehr der folgenden:

They are commonly used in small networks.
VLANs are initialized from flash memory.
They are saved in the running-config file by default.
VLAN IDs exist between 1006 to 4094.
CDP can be used to learn and store these VLANs.

Erklärung

Frage 30 von 107

A Cisco switch currently allows traffic tagged with VLANs 10 and 20 across trunk port Fa0/5. What is the effect of issuing a switchport trunk allowed vlan 30 command on Fa0/5?

Wähle eine der folgenden:

It allows a native VLAN of 30 to be implemented on Fa0/5.
It allows only VLAN 30 on Fa0/5.
It allows VLANs 10, 20, and 30 on Fa0/5.
It allows VLANs 1 to 30 on Fa0/5.

Erklärung

Frage 31 von 107

Refer to the exhibit. PC-A and PC-B are both in VLAN 60. PC-A is unable to communicate with PC-B. What is the problem?

Wähle eine der folgenden:

The native VLAN should be VLAN 60.
The VLAN that is used by PC-A is not in the list of allowed VLANs on the trunk.
The trunk has been configured with the switchport nonegotiate command.
The native VLAN is being pruned from the link.

Erklärung

Frage 32 von 107

Refer to the exhibit. DLS1 is connected to another switch, DLS2, via a trunk link. A host that is connected to DLS1 is not able to communicate to a host that is connected to DLS2, even though they are both in VLAN 99. Which command should be added to Fa0/1 on DLS1 to correct the problem?

Wähle eine oder mehr der folgenden:

switchport nonegotiate
switchport trunk allowed vlan add 99
switchport trunk native vlan 66
switchport mode dynamic auto

Erklärung

Frage 33 von 107

What is a characteristic of legacy inter-VLAN routing?

Wähle eine der folgenden:

Inter-VLAN routing must be performed on a switch instead of a router.
The user VLAN must be the same ID number as the management VLAN.
The router requires one Ethernet link for each VLAN.
Only one VLAN can be used in the topology.

Erklärung

Frage 34 von 107

What is a disadvantage of using router-on-a-stick inter-VLAN routing?

Wähle eine der folgenden:

requires the use of multiple router interfaces configured to operate as access links
does not scale well beyond 50 VLANs
requires the use of more physical interfaces than legacy inter-VLAN routing
does not support VLAN-tagged packets

Erklärung

Frage 35 von 107

Refer to the exhibit. Router RA receives a packet with a source address of 192.168.1.35 and a destination address of 192.168.1.85. What will the router do with this packet?

Wähle eine oder mehr der folgenden:

The router will drop the packet.
The router will forward the packet out interface FastEthernet 0/1.2 and interface FastEthernet 0/1.3.
The router will forward the packet out interface FastEthernet 0/1.3.
The router will forward the packet out interface FastEthernet 0/1.2.
The router will forward the packet out interface FastEthernet 0/1.1.

Erklärung

Frage 36 von 107

Refer to the exhibit. In what switch mode should port G0/1 be assigned if Cisco best practices are being used?

Wähle eine oder mehr der folgenden:

access
auto
native
trunk

Erklärung

Frage 37 von 107

A small college uses VLAN 10 for the classroom network and VLAN 20 for the office network. What is needed to enable communication between these two VLANs while using legacy inter-VLAN routing?

Wähle eine oder mehr der folgenden:

A switch with a port that is configured as trunk is needed to connect to a router.
A router with one VLAN interface is needed to connect to the SVI on a switch.
Two groups of switches are needed, each with ports that are configured for one VLAN.
A router with at least two LAN interfaces should be used.

Erklärung

Frage 38 von 107

Refer to the exhibit. A network administrator needs to configure router-on-a-stick for the networks that are shown. How many subinterfaces will have to be created on the router if each VLAN that is shown is to be routed and each VLAN has its own subinterface?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 39 von 107

When configuring a router as part of a router-on-a-stick inter-VLAN routing topology, where should the IP address be assigned?

Wähle eine oder mehr der folgenden:

to the VLAN
to the SVI
to the subinterface
to the interface

Erklärung

Frage 40 von 107

A high school uses VLAN15 for the laboratory network and VLAN30 for the faculty network. What is required to enable communication between these two VLANs while using the router-on-a-stick approach?

Wähle eine oder mehr der folgenden:

A switch with a port that is configured as a trunk is needed when connecting to the router.
Two groups of switches are needed, each with ports that are configured for one VLAN.
A router with at least two LAN interfaces is needed.
A multilayer switch is needed.

Erklärung

Frage 41 von 107

Refer to the exhibit. A router-on-a-stick configuration was implemented for VLANs 15, 30, and 45, according to the show running-config command output. PCs on VLAN 45 that are using the 172.16.45.0 /24 network are having trouble connecting to PCs on VLAN 30 in the 172.16.30.0 /24 network. Which error is most likely causing this problem?

Wähle eine oder mehr der folgenden:

The wrong VLAN has been configured on GigabitEthernet 0/0.45.
There is an incorrect IP address configured on GigabitEthernet 0/0.30.
The GigabitEthernet 0/0 interface is missing an IP address.
The command no shutdown is missing on GigabitEthernet 0/0.30.

Erklärung

Frage 42 von 107

A network administrator issues the show VLAN brief command while troubleshooting a user support ticket. What output will be displayed?

Wähle eine oder mehr der folgenden:

the VLAN assignment and native VLAN
the VLAN assignment and membership for all switch ports
the VLAN assignment and trunking encapsulation
the VLAN assignment and membership for device MAC addresses

Erklärung

Frage 43 von 107

Which four steps are needed to configure a voice VLAN on a switch port? (Choose four).

Wähle eine oder mehr der folgenden:

Configure the interface as an IEEE 802.1Q trunk.
Configure the switch port interface with subinterfaces.
Ensure that voice traffic is trusted and tagged with a CoS priority value.
Activate spanning-tree PortFast on the interface.
Assign the voice VLAN to the switch port.
Add a voice VLAN.
Assign a data VLAN to the switch port.
Configure the switch port in access mode.

Erklärung

Frage 44 von 107

In which configuration would an outbound ACL placement be preferred over an inbound ACL placement?

Wähle eine oder mehr der folgenden:

when an interface is filtered by an outbound ACL and the network attached to the interface is the source network being filtered within the ACL
when an outbound ACL is closer to the source of the traffic flow
when a router has more than one ACL
when the ACL is applied to an outbound interface to filter packets coming from multiple inbound interfaces before the packets exit the interface

Erklärung

Frage 45 von 107

Which address is required in the command syntax of a standard ACL?

Wähle eine oder mehr der folgenden:

destination IP address
source IP address
destination MAC address
source MAC address

Erklärung

Frage 46 von 107

Which statement describes a difference between the operation of inbound and outbound ACLs?

Wähle eine oder mehr der folgenden:

On a network interface, more than one inbound ACL can be configured but only one outbound ACL can be configured.
Inbound ACLs are processed before the packets are routed while outbound ACLs are processed after the routing is completed.
Inbound ACLs can be used in both routers and switches but outbound ACLs can be used only on routers.
In contrast to outbound ALCs, inbound ACLs can be used to filter packets with multiple criteria.

Erklärung

Frage 47 von 107

Which three statements describe ACL processing of packets? (Choose three.)

Wähle eine oder mehr der folgenden:

Each packet is compared to the conditions of every ACE in the ACL before a forwarding decision is made.
Each statement is checked only until a match is detected or until the end of the ACE list.
A packet that does not match the conditions of any ACE will be forwarded by default.
A packet that has been denied by one ACE can be permitted by a subsequent ACE.
A packet can either be rejected or forwarded as directed by the ACE that is matched.
An implicit deny any rejects any packet that does not match any ACE.

Erklärung

Frage 48 von 107

What single access list statement matches all of the following networks?
192.168.16.0
192.168.17.0
192.168.18.0
192.168.19.0

Wähle eine oder mehr der folgenden:

access-list 10 permit 192.168.16.0 0.0.3.25
access-list 10 permit 192.168.0.0 0.0.15.255
access-list 10 permit 192.168.16.0 0.0.15.255
access-list 10 permit 192.168.16.0 0.0.0.255

Erklärung

Frage 49 von 107

A network administrator needs to configure a standard ACL so that only the workstation of the administrator with the IP address 192.168.15.23 can access the virtual terminal of the main router. Which two configuration commands can achieve the task? (Choose two.)

Wähle eine oder mehr der folgenden:

Router1(config)# access-list 10 permit 192.168.15.23 255.255.255.255
Router1(config)# access-list 10 permit 192.168.15.23 255.255.255.0
Router1(config)# access-list 10 permit 192.168.15.23 0.0.0.255
Router1(config)# access-list 10 permit 192.168.15.23 0.0.0.0
Router1(config)# access-list 10 permit host 192.168.15.23

Erklärung

Frage 50 von 107

If a router has two interfaces and is routing both IPv4 and IPv6 traffic, how many ACLs could be created and applied to it?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 51 von 107

Which three statements are generally considered to be best practices in the placement of ACLs? (Choose three.)

Wähle eine oder mehr der folgenden:

For every inbound ACL placed on an interface, there should be a matching outbound ACL.
Place standard ACLs close to the destination IP address of the traffic.
Place extended ACLs close to the source IP address of the traffic.
Filter unwanted traffic before it travels onto a low-bandwidth link.
Place extended ACLs close to the destination IP address of the traffic.
Place standard ACLs close to the source IP address of the traffic.

Erklärung

Frage 52 von 107

Refer to the exhibit. Which command would be used in a standard ACL to allow only devices on the network attached to R2 G0/0 interface to access the networks attached to R1?

Wähle eine oder mehr der folgenden:

access-list 1 permit 192.168.10.0 0.0.0.63
access-list 1 permit 192.168.10.128 0.0.0.63
access-list 1 permit 192.168.10.0 0.0.0.255
access-list 1 permit 192.168.10.96 0.0.0.31

Erklärung

Frage 53 von 107

If the network administrator created a standard ACL that allows only devices that connect to the R2 G0/0 network access to the devices on the R1 G0/1 interface, how should the ACL be applied?

Wähle eine oder mehr der folgenden:

outbound on the R2 S0/0/1 interface
inbound on the R1 G0/1 interface
outbound on the R1 G0/1 interface
inbound on the R2 G0/0 interface

Erklärung

Frage 54 von 107

Refer to the following output. What is the significance of the 4 match(es) statement?
R1# <output omitted>
10 permit 192.168.1.56 0.0.0.7
20 permit 192.168.1.64 0.0.0.63 (4 match(es))
30 deny any (8 match(es))

Wähle eine oder mehr der folgenden:

Four packets have been denied that have been sourced from any IP address.
Four packets have been allowed through the router to reach the destination network of 192.168.1.64/26.
Four packets have been allowed through the router from PCs in the network of 192.168.1.64.
Four packets have been denied that are destined for the 192.168.1.64 network.

Erklärung

Frage 55 von 107

On which router should the show access-lists command be executed?

Wähle eine oder mehr der folgenden:

on the router that has the ACL configured
on any router through which the packet referenced in the ACL travels
on the router that routes the packet referenced in the ACL from the source network
on the router that routes the packet referenced in the ACL to the final destination network

Erklärung

Frage 56 von 107

What is the quickest way to remove a single ACE from a named ACL?

Wähle eine oder mehr der folgenden:

Create a new ACL with a different number and apply the new ACL to the router interface.
Copy the ACL into a text editor, remove the ACE, then copy the ACL back into the router.
Use the no access-list command to remove the entire ACL, then recreate it without the ACE.
Use the no keyword and the sequence number of the ACE to be removed.

Erklärung

Frage 57 von 107

Which feature will require the use of a named standard ACL rather than a numbered standard ACL?

Wähle eine oder mehr der folgenden:

the ability to add additional ACEs in the middle of the ACL without deleting and re-creating the list
the ability to specify source and destination addresses to use when identifying traffic
the ability to filter traffic based on an entire protocol suite and destination
the ability to filter traffic based on a specific protocol

Erklärung

Frage 58 von 107

An administrator has configured an access list on R1 to allow SSH administrative access from host 172.16.1.100. Which command correctly applies the ACL?

Wähle eine oder mehr der folgenden:

R1(config-line)# access-class 1 out
R1(config-line)# access-class 1 in
R1(config-if)# ip access-group 1 out
R1(config-if)# ip access-group 1 in

Erklärung

Frage 59 von 107

Which type of router connection can be secured by the access-class command?

Wähle eine oder mehr der folgenden:

Ethernet
serial
console
vty

Erklärung

Frage 60 von 107

Consider the following output for an ACL that has been applied to a router via the access-class in command. What can a network administrator determine from the output that is shown?
R1# <output omitted>
Standard IP access list 2
10 permit 192.168.10.0, wildcard bits 0.0.0.255 (2 matches)
20 deny any (1 match)

Wähle eine oder mehr der folgenden:

Two devices connected to the router have IP addresses of 192.168.10.x.
Traffic from two devices was allowed to enter one router port and be routed outbound to a different router port.
Two devices were able to use SSH or Telnet to gain access to the router.
Traffic from one device was not allowed to come into one router port and be routed outbound a different router port.

Erklärung

Frage 61 von 107

Refer to the exhibit. A router has an existing ACL that permits all traffic from the 172.16.0.0 network. The administrator attempts to add a new ACE to the ACL that denies packets from host 172.16.0.1 and receives the error message that is shown in the exhibit. What action can the administrator take to block packets from host 172.16.0.1 while still permitting all other traffic from the 172.16.0.0 network?

Wähle eine oder mehr der folgenden:

Manually add the new deny ACE with a sequence number of 5.
Add a deny any any ACE to access-list 1.
Create a second access list denying the host and apply it to the same interface.
Manually add the new deny ACE with a sequence number of 15.

Erklärung

Frage 62 von 107

Refer to the exhibit. An ACL was configured on R1 with the intention of denying traffic from subnet 172.16.4.0/24 into subnet 172.16.3.0/24. All other traffic into subnet 172.16.3.0/24 should be permitted. This standard ACL was then applied outbound on interface Fa0/0. Which conclusion can be drawn from this configuration?

Wähle eine oder mehr der folgenden:

Only traffic from the 172.16.4.0/24 subnet is blocked, and all other traffic is allowed.
The ACL should be applied outbound on all interfaces of R1.
All traffic will be blocked, not just traffic from the 172.16.4.0/24 subnet.
An extended ACL must be used in this situation.
The ACL should be applied to the FastEthernet 0/0 interface of R1 inbound to accomplish the requirements.

Erklärung

Frage 63 von 107

Refer to the exhibit. What will happen to the access list 10 ACEs if the router is rebooted before any other commands are implemented?

Wähle eine oder mehr der folgenden:

The ACEs of access list 10 will be deleted.
The ACEs of access list 10 wildcard masks will be converted to subnet masks.
The ACEs of access list 10 will be renumbered.
The ACEs of access list 10 will not be affected.

Erklärung

Frage 64 von 107

What is the effect of configuring an ACL with only ACEs that deny traffic?

Wähle eine oder mehr der folgenden:

The ACL must be applied outbound only.
The ACL must be applied inbound only.
The ACL will permit any traffic that is not specifically denied.
The ACL will block all traffic.

Erklärung

Frage 65 von 107

Which type of ACL statements are commonly reordered by the Cisco IOS as the first ACEs?

Wähle eine oder mehr der folgenden:

lowest sequence number
permit any
range
host

Erklärung

Frage 66 von 107

A network administrator is configuring an ACL to restrict access to certain servers in the data center. The intent is to apply the ACL to the interface connected to the data center LAN. What happens if the ACL is incorrectly applied to an interface in the inbound direction instead of the outbound direction?

Wähle eine oder mehr der folgenden:

The ACL will analyze traffic after it is routed to the outbound interface.
The ACL does not perform as designed.
All traffic is permitted.
All traffic is denied.

Erklärung

Frage 67 von 107

When would a network administrator use the clear access-list counters command?

Wähle eine oder mehr der folgenden:

when troubleshooting an ACL and needing to know how many packets matched
when an ACE is deleted from an ACL
when buffer memory is low
when obtaining a baseline

Erklärung

Frage 68 von 107

What is the result of a network technician issuing the command ip dhcp excluded-address 10.0.15.1 10.0.15.15 on a Cisco router?

Wähle eine oder mehr der folgenden:

The ip dhcp excluded-address command is followed by the first and the last addresses to be excluded from being leased to DHCP clients.
The Cisco router will exclude 15 IP addresses from being leased to DHCP clients.
The Cisco router will allow only the specified IP addresses to be leased to clients.
The Cisco router will automatically create a DHCP pool using a /28 mask.
The Cisco router will exclude only the 10.0.15.1 and 10.0.15.15 IP addresses from being leased to DHCP clients.

Erklärung

Frage 69 von 107

Which DHCPv4 message will a client send to accept an IPv4 address that is offered by a DHCP server?

Wähle eine oder mehr der folgenden:

broadcast DHCPREQUEST
unicast DHCPREQUEST
broadcast DHCPACK
unicast DHCPACK

Erklärung

Frage 70 von 107

A company uses DHCP servers to dynamically assign IPv4 addresses to employee workstations. The address lease duration is set as 5 days. An employee returns to the office after an absence of one week. When the employee boots the workstation, it sends a message to obtain an IP address. Which Layer 2 and Layer 3 destination addresses will the message contain?

Wähle eine oder mehr der folgenden:

FF-FF-FF-FF-FF-FF and IPv4 address of the DHCP server
MAC address of the DHCP server and 255.255.255.255
both MAC and IPv4 addresses of the DHCP server
FF-FF-FF-FF-FF-FF and 255.255.255.255

Erklärung

Frage 71 von 107

Which is a DHCPv4 address allocation method that assigns IPv4 addresses for a limited lease period?

Wähle eine oder mehr der folgenden:

dynamic allocation
automatic allocation
pre-allocation
manual allocation

Erklärung

Frage 72 von 107

Which address does a DHCPv4 server target when sending a DHCPOFFER message to a client that makes an address request?

Wähle eine oder mehr der folgenden:

broadcast MAC address
gateway IP address
client hardware address
client IP address

Erklärung

Frage 73 von 107

As a DHCPv4 client lease is about to expire, what is the message that the client sends the DHCP server?

Wähle eine oder mehr der folgenden:

DHCPACK
DHCPREQUEST
DHCPOFFER
DHCPDISCOVER

Erklärung

Frage 74 von 107

What is an advantage of configuring a Cisco router as a relay agent?

Wähle eine oder mehr der folgenden:

It reduces the response time from a DHCP server.
It can provide relay services for multiple UDP services.
It can forward both broadcast and multicast messages on behalf of clients.
It will allow DHCPDISCOVER messages to pass without alteration.

Erklärung

Frage 75 von 107

An administrator issues the commands:
Router(config)# interface g0/1
Router(config-if)# ip address dhcp
What is the administrator trying to achieve?

Wähle eine oder mehr der folgenden:

configuring the router to resolve IP address conflicts
configuring the router to act as a relay agent
configuring the router to obtain IP parameters from a DHCPv4 server
configuring the router to act as a DHCPv4 server

Erklärung

Frage 76 von 107

Under which two circumstances would a router usually be configured as a DHCPv4 client? (Choose two.)

Wähle eine oder mehr der folgenden:

The router has a fixed IP address.
This is an ISP requirement.
The router is meant to provide IP addresses to the hosts.
The administrator needs the router to act as a relay agent.
The router is intended to be used as a SOHO gateway.

Erklärung

Frage 77 von 107

A company uses the SLAAC method to configure IPv6 addresses for the employee workstations. Which address will a client use as its default gateway?

Wähle eine oder mehr der folgenden:

the global unicast address of the router interface that is attached to the network
the unique local address of the router interface that is attached to the network
the all-routers multicast address
the link-local address of the router interface that is attached to the network

Erklärung

Frage 78 von 107

A network administrator configures a router to send RA messages with M flag as 0 and O flag as 1. Which statement describes the effect of this configuration when a PC tries to configure its IPv6 address?

Wähle eine oder mehr der folgenden:

It should contact a DHCPv6 server for the prefix, the prefix-length information, and an interface ID that is both random and unique.
It should use the information that is contained in the RA message and contact a DHCPv6 server for additional information.
It should contact a DHCPv6 server for all the information that it needs.
It should use the information that is contained in the RA message exclusively.

Erklärung

Frage 79 von 107

A company implements the stateless DHCPv6 method for configuring IPv6 addresses on employee workstations. After a workstation receives messages from multiple DHCPv6 servers to indicate their availability for DHCPv6 service, which message does it send to a server for configuration information?

Wähle eine oder mehr der folgenden:

DHCPv6 INFORMATION-REQUEST
DHCPv6 ADVERTISE
DHCPv6 REQUEST
DHCPv6 SOLICIT

Erklärung

Frage 80 von 107

An administrator wants to configure hosts to automatically assign IPv6 addresses to themselves by the use of Router Advertisement messages, but also to obtain the DNS server address from a DHCPv6 server. Which address assignment method should be configured?

Wähle eine oder mehr der folgenden:

RA and EUI-64
stateful DHCPv6
stateless DHCPv6
SLAAC

Erklärung

Frage 81 von 107

How does an IPv6 client ensure that it has a unique address after it configures its IPv6 address using the SLAAC allocation method?

Wähle eine oder mehr der folgenden:

It sends an ICMPv6 Neighbor Solicitation message with the IPv6 address as the target IPv6 address.
It contacts the DHCPv6 server via a special formed ICMPv6 message.
It sends an ARP message with the IPv6 address as the destination IPv6 address.
It checks with the IPv6 address database that is hosted by the SLAAC server.

Erklärung

Frage 82 von 107

What is used in the EUI-64 process to create an IPv6 interface ID on an IPv6 enabled interface?

Wähle eine oder mehr der folgenden:

an IPv4 address that is configured on the interface
an IPv6 address that is provided by a DHCPv6 server
a randomly generated 64-bit hexadecimal address
the MAC address of the IPv6 enabled interface

Erklärung

Frage 83 von 107

What two methods can be used to generate an interface ID by an IPv6 host that is using SLAAC? (Choose two.)

Wähle eine oder mehr der folgenden:

ARP
DAD
stateful DHCPv6
random generation
EUI-64

Erklärung

Frage 84 von 107

Refer to the exhibit. Based on the output that is shown, what kind of IPv6 addressing is being configured?

Wähle eine oder mehr der folgenden:

stateless DHCPv6
static link-local
stateful DHCPv6
SLAAC

Erklärung

Frage 85 von 107

Refer to the exhibit. What should be done to allow PC-A to receive an IPv6 address from the DHCPv6 server?

Wähle eine oder mehr der folgenden:

Configure the ipv6 nd managed-config-flag command on interface Fa0/1.
Add the IPv6 address 2001:DB8:1234:5678::10/64 to the interface configuration of the DHCPv6 server.
Change the ipv6 nd managed-config-flag command to ipv6 nd other-config-flag.
Add the ipv6 dhcp relay command to interface Fa0/0.

Erklärung

Frage 86 von 107

Refer to the exhibit. A network administrator is implementing stateful DHCPv6 operation for the company. However, the clients are not using the prefix and prefix-length information that is configured in the DHCP pool. The administrator issues a show ipv6 interface command. What could be the cause of the problem?

Wähle eine oder mehr der folgenden:

No virtual link-local address is configured.
The router is configured for stateless DHCPv6 operation
The router is configured for SLAAC DHCPv6 operation.
The Duplicate Address Detection feature is disabled.

Erklärung

Frage 87 von 107

Refer to the exhibit. A network administrator is implementing the stateless DHCPv6 operation for the company. Clients are configuring IPv6 addresses as expected. However, the clients are not getting the DNS server address and the domain name information configured in the DHCP pool. What could be the cause of the problem?

Wähle eine oder mehr der folgenden:

The GigabitEthernet interface is not activated.
The clients cannot communicate with the DHCPv6 server, evidenced by the number of active clients being 0.
The DNS server address is not on the same network as the clients are on.
The router is configured for SLAAC operation.

Erklärung

Frage 88 von 107

Which method is used by a PAT-enabled router to send incoming packets to the correct inside hosts?

Wähle eine oder mehr der folgenden:

It uses the destination TCP or UDP port number on the incoming packet.
It uses the source IP address on the incoming packet.
It uses the source TCP or UDP port number on the incoming packet.
It uses a combination of the source TCP or UDP port number and the destination IP address on the incoming packet

Erklärung

Frage 89 von 107

Refer to the exhibit. Which address or addresses represent the inside global address?

Wähle eine oder mehr der folgenden:

10.1.1.2
209.165.20.25
192.168.0.100
any address in the 10.1.1.0 network

Erklärung

Frage 90 von 107

A network administrator is configuring a static NAT on the border router for a web server located in the DMZ network. The web server is configured to listen on TCP port 8080. The web server is paired with the internal IP address of 192.168.5.25 and the external IP address of 209.165.200.230. For easy access by hosts on the Internet, external users do not need to specify the port when visiting the web server. Which command will configure the static NAT?

Wähle eine oder mehr der folgenden:

R1(config)# ip nat inside source static tcp 209.165.200.230 8080 192.168.5.25 80
R1(config)# ip nat inside source static tcp 209.165.200.230 80 192.168.5.25 8080
R1(config)# ip nat inside source static tcp 192.168.5.25 8080 209.165.200.230 80
R1(config)# ip nat inside source static tcp 192.168.5.25 80 209.165.200.230 8080

Erklärung

Frage 91 von 107

What is defined by the ip nat pool command when configuring dynamic NAT?

Wähle eine oder mehr der folgenden:

the pool of global address
the range of internal IP addresses that are translated
the range of external IP addresses that internal hosts are permitted to access
the pool of available NAT servers

Erklärung

Frage 92 von 107

Refer to the exhibit. Based on the output that is shown, what type of NAT has been implemented?

Wähle eine oder mehr der folgenden:

dynamic NAT with a pool of two public IP addresses
static NAT with a NAT pool
static NAT with one entry
PAT using an external interface

Erklärung

Frage 93 von 107

What is the primary purpose of NAT?

Wähle eine oder mehr der folgenden:

enhance network performance
allow peer-to-peer file sharing
increase network security
conserve IPv4 addresses

Erklärung

Frage 94 von 107

What is the major benefit of using NAT with Port Address Translation?

Wähle eine oder mehr der folgenden:

It provides a pool of public addresses that can be assigned to internal hosts.
It allows many internal hosts to share the same public IPv4 address.
It improves network performance for real-time protocols.
It allows external hosts access to internal servers.

Erklärung

Frage 95 von 107

What is a characteristic of unique local addresses?

Wähle eine oder mehr der folgenden:

They are defined in RFC 3927.
Their implementation depends on ISPs providing the service.
They are designed to improve the security of IPv6 networks.
They allow sites to be combined without creating any address conflicts.

Erklärung

Frage 96 von 107

A network administrator configures the border router with the command R1(config)# ip nat inside source list 4 pool corp. What is required to be configured in order for this particular command to be functional?

Wähle eine oder mehr der folgenden:

a VLAN named corp to be enabled and active and routed by R1
ip nat outside to be enabled on the interface that connects to the LAN affected by the NAT
an access list numbered 4 that defines the starting and ending public IP addresses
an access list named corp that defines the private addresses that are affected by NAT
a NAT pool named corp that defines the starting and ending public IP addresses

Erklärung

Frage 97 von 107

Which statement describes IPv6 ULAs?

Wähle eine oder mehr der folgenden:

They are assigned by an ISP.
They are not routable across the internet.
They begin with the fe80::/10 prefix.
They conserve IPv6 address space.

Erklärung

Frage 98 von 107

What is the purpose of port forwarding?

Wähle eine oder mehr der folgenden:

Port forwarding allows an internal user to reach a service on a public IPv4 address that is located outside a LAN.
Port forwarding allows for translating inside local IP addresses to outside local addresses.
Port forwarding allows an external user to reach a service on a private IPv4 address that is located inside a LAN.
Port forwarding allows users to reach servers on the Internet that are not using standard port numbers.

Erklärung

Frage 99 von 107

When dynamic NAT without overloading is being used, what happens if seven users attempt to access a public server on the Internet when only six addresses are available in the NAT pool?

Wähle eine oder mehr der folgenden:

The first user gets disconnected when the seventh user makes the request.
All users can access the server.
The request to the server for the seventh user fails.
No users can access the server.

Erklärung

Frage 100 von 107

A network engineer has configured a router with the command ip nat inside source list 4 pool corp overload. Why did the engineer use the overload option?

Wähle eine oder mehr der folgenden:

The company has a small number of servers that should be accessible by clients from the Internet.
The company router must throttle or buffer traffic because the processing power of the router is not enough to handle the normal load of external-bound Internet traffic.
The company needs to have more public IP addresses available to be used on the Internet.
The company has more private IP addresses than available public IP addresses.

Erklärung

Frage 101 von 107

What is a disadvantage of NAT?

Wähle eine oder mehr der folgenden:

The costs of readdressing hosts can be significant for a publicly addressed network.
The internal hosts have to use a single public IPv4 address for external communication.
The router does not need to alter the checksum of the IPv4 packets.
There is no end-to-end addressing.

Erklärung

Frage 102 von 107

Refer to the exhibit. What is the purpose of the command marked with an arrow shown in the partial configuration output of a Cisco broadband router?

Wähle eine oder mehr der folgenden:

defines which addresses can be translated
defines which addresses are allowed out of the router
defines which addresses are assigned to a NAT pool
defines which addresses are allowed into the router

Erklärung

Frage 103 von 107

What are two of the required steps to configure PAT? (Choose two.)

Wähle eine oder mehr der folgenden:

Define the hello and interval timers to match the adjacent neighbor router.
Identify the inside interface.
Define the range of source ports to be used.
Create a standard access list to define applications that should be translated.
Define a pool of global addresses to be used for overload translation.

Erklärung

Frage 104 von 107

Refer to the exhibit. A technician is configuring R2 for static NAT to allow the client to access the web server. What is a possible reason that the client PC cannot access the web server?

Wähle eine oder mehr der folgenden:

Interface S0/0/0 should be identified as the outside NAT interface.
The configuration is missing a valid access control list
The IP NAT statement is incorrect.
Interface Fa0/1 should be identified as the outside NAT interface.

Erklärung

Frage 105 von 107

What are two benefits of NAT? (Choose two.)

Wähle eine oder mehr der folgenden:

It makes troubleshooting routing issues easier.
It makes tunneling with IPsec less complicated.
It increases routing performance. It makes troubleshooting routing issues easier.
It adds a degree of privacy and security to a network.
It saves public IP addresses.

Erklärung

Frage 106 von 107

What is an advantage of deploying IPv4 NAT technology for internal hosts in an organization?

Wähle eine oder mehr der folgenden:

enables the easy deployment of applications that require end-to-end traceability
increases the performance of packet transmission to the Internet
provides flexibility in designing the IPv4 addressing scheme
makes internal network access easy for outside hosts using UDP

Erklärung

Frage 107 von 107

A technician is required to configure an edge router to use a different TCP port number for each session with a server on the Internet. What type of Network Address Translation (NAT) should be implemented?

Wähle eine oder mehr der folgenden:

a many-to-one address mapping between local and global addresses
a one-to-many address mapping between local and global addresses
a one-to-one address mapping between local and global addresses
a many-to-many address mapping between local and global addresses

Erklärung

["https://examtimeassets.s3.amazonaws.com/uploads/media/image/24685785/desktop_7967d29b-831f-473e-bdfa-17bf638a8c87.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/24685788/desktop_53e16e2d-9593-4721-bd9b-95da2764a1b8.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/24685791/desktop_5bc0b8ab-9076-466e-a22c-faed452b1ef2.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/24685800/desktop_5848c6f5-b2f4-46e8-8ab6-a02a7de9c913.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/24685804/desktop_8cdb2865-5526-4624-8762-083d93df5daf.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/24685808/desktop_0cbb7948-7b33-47f2-a204-50c58db846a9.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/24871424/desktop_d7024f39-8e7f-4377-a38f-4f9df3fcc6c2.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/24871444/desktop_72b40c20-b791-41f2-911e-94c42248c282.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/24871478/desktop_732fe3e8-b694-4987-80b5-05f8b642b7b2.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/24871494/desktop_03bb9dfd-6f70-4353-880d-6362bc2c1ee5.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/24871525/desktop_3ea67240-869d-4aba-9fdd-c9c5b1f8df0b.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/24871555/desktop_e1acf95b-6eed-4c41-8d68-9c36a392173b.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/25171980/desktop_3b4ef40f-b364-407f-a22f-59c8057fa365.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/25172062/desktop_adb76b62-98f4-4d61-af6a-7d854302db35.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/25172232/desktop_c2b62bd1-1148-4808-aa86-e2f5c96a7919.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/25172270/desktop_c6a51cd9-59ea-4dfd-bc09-2aabe898f3a9.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/25172317/desktop_65a0c31f-9dbf-4497-a7e4-84d78dff7d5f.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/25706562/desktop_e19a62b9-4771-4d98-a9b6-3a0c6052bbe7.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/25706591/desktop_bd85f1a0-dc1f-4126-a6ff-622128ac7932.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/25706628/desktop_da6a4a68-c716-47c1-b5dd-9ec9c903df34.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/25706678/desktop_7739de2d-d220-4c5b-ac93-34f4c45de9a8.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/26003577/desktop_608c83c3-2e43-48c0-a346-63acae6f2d8a.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/26003272/desktop_f65d0ab4-213c-4fdd-a0dc-5f2d84c4b657.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/26003198/desktop_901b4683-af9b-4281-adb4-c6e5cede83b9.png","https://examtimeassets.s3.amazonaws.com/uploads/media/image/26003681/desktop_5837a469-39bf-481a-8260-2608e2a3e65d.png"]

	Erstellt von Leona W. vor mehr als 6 Jahre

CISCO vom Sommersemester 2020 CSDC

CISCO 2 - Chapter 5 bis Chapter 9

CISCO 2 - Chapter 5 bis Chapter 9

Frage 1 von 107

Which statement describes the port speed LED on the Cisco Catalyst 2960 switch?

Wähle eine der folgenden:

Erklärung

Frage 2 von 107

Which command is used to set the BOOT environment variable that defines where to find the IOS image file on a switch?

Wähle eine der folgenden:

Erklärung

Frage 3 von 107

What is a function of the switch boot loader?

Wähle eine der folgenden:

Erklärung

Frage 4 von 107

Which interface is the default location that would contain the IP address used to manage a 24-port Ethernet switch?

Wähle eine der folgenden:

Erklärung

Frage 5 von 107

A production switch is reloaded and finishes with a Switch> prompt. What two facts can be determined? (Choose two.)

Wähle eine oder mehr der folgenden:

Erklärung

Frage 6 von 107

Which two statements are true about using full-duplex Fast Ethernet? (Choose two.)

Wähle eine oder mehr der folgenden:

Erklärung

Frage 7 von 107

In which situation would a technician use the show interfaces switch command?

Wähle eine der folgenden:

Erklärung

Frage 8 von 107

Refer to the exhibit. A network technician is troubleshooting connectivity issues in an Ethernet network with the command show interfaces fastEthernet 0/0. What conclusion can be drawn based on the partial output in the exhibit?

Wähle eine der folgenden:

Erklärung

Frage 9 von 107

Refer to the exhibit. What media issue might exist on the link connected to Fa0/1 based on the show interface command?

Wähle eine der folgenden:

Erklärung

Frage 10 von 107

If one end of an Ethernet connection is configured for full duplex and the other end of the connection is configured for half duplex, where would late collisions be observed?

Wähle eine der folgenden:

Erklärung

Frage 11 von 107

What is one difference between using Telnet or SSH to connect to a network device for management purposes?

Wähle eine der folgenden:

Erklärung

Frage 12 von 107

Refer to the exhibit. The network administrator wants to configure Switch1 to allow SSH connections and prohibit Telnet connections. How should the network administrator change the displayed configuration to satisfy the requirement?

Wähle eine der folgenden:

Erklärung

Frage 13 von 107

What is the effect of using the switchport port-security command?

Wähle eine der folgenden:

Erklärung

Frage 14 von 107

Where are dynamically learned MAC addresses stored when sticky learning is enabled with the switchport port-security mac-address sticky command?

Wähle eine der folgenden:

Erklärung

Frage 15 von 107

Wähle eine der folgenden:

Erklärung

Frage 16 von 107

Which two statements are true regarding switch port security? (Choose two.)

Wähle eine oder mehr der folgenden:

Erklärung

Frage 17 von 107

Which action will bring an error-disabled switch port back to an operational state?

Wähle eine der folgenden:

Erklärung

Frage 18 von 107

Wähle eine der folgenden:

Erklärung

Frage 19 von 107

Refer to the exhibit. What can be determined about port security from the information that is shown?

Wähle eine der folgenden:

Erklärung

Frage 20 von 107

Refer to the exhibit. Which event will take place if there is a port security violation on switch S1 interface Fa0/1?

Wähle eine der folgenden:

A network administrator is determining the best placement of VLAN trunk links. Which two types of point-to-point connections utilize VLAN trunking? (Choose two.)