Quiz
CCNA Part 2
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (94)
1Which parameter or parameters are used to calculate OSPF cost in Cisco routers?
- ABandwidth
- BBandwidth and Delay
- CBandwidth, Delay, and MTU
- DBandwidth, MTU, Reliability, Delay, and Load
2Why do large OSPF networks use a hierarchical design? (Choose three.)
- ATo decrease latency by increasing bandwidth
- BTo reduce routing overhead
- CTo speed up convergence
- DTo confine network instability to single areas of the network
- ETo reduce the complexity of router configuration
- FTo lower costs by replacing routers with distribution layer switches
3Which command encrypts all plaintext passwords?
- ARouter# service password-encryption
- BRouter(config)# password-encryption
- CRouter(config)# service password-encryption
- DRouter# password-encryption
4Which two are advantages of static routing when compared to dynamic routing? (Choose two.)
- AConfiguration complexity decreases as network size increases.
- BSecurity increases because only the network administrator may change the routing table.
- CRoute summarization is computed automatically by the router.
- DRouting tables adapt automatically to topology changes.
- EAn efficient algorithm is used to build routing tables, using automatic updates.
- FRouting updates are automatically sent to neighbors.
- GRouting traffic load is reduced when used in stub network links.
5A network administrator needs to allow only one Telnet connection to a router. For anyone viewing the configuration and issuing the show run command, the password for Telnet access should be encrypted. Which set of commands will accomplish this task?
- Aservice password-encryption
access-list 1 permit 192.168.1.0 0.0.0.255
line vty 0 4
login
password cisco
access-class 1 - Benable password secret
line vty 0
login
password cisco - Cservice password-encryption
line vty 1
login
password cisco - Dservice password-encryption
line vty 0 4
login
password cisco
- Aservice password-encryption
6What is the effect of using the service password-encryption command?
- AOnly the enable password will be encrypted.
- BOnly the enable secret password will be encrypted.
- COnly passwords configured after the command has been entered will be encrypted.
- DIt will encrypt the secret password and remove the enable secret password from the
configuration. - EIt will encrypt all current and future passwords.
7What is the effect of the configuration that is shown?
- AIt configures SSH globally for all logins.
- BIt tells the router or switch to try to establish an SSh connection first and if that fails to use Telnet.
- CIt configures the virtual terminal lines with the password 030752180500.
- DIt configures a Cisco network device to use the SSH protocol on incoming communications via the virtual terminal ports.
- EIt allows seven failed login attempts before the VTY lines are temporarily shutdown.
8What is the reason that the interface status is "administratively down, line protocol down"?
- AThere is no encapsulation type configured.
- BThere is a mismatch in encapsulation types.
- CThe interface is not receiving any keepalives.
- DThe interface has been configured with the shutdown command.
- EThe interface needs to be configured as a DTE device.
- FThe wrong type of cable is connected to the interface.
9A router has learned three possible routes that could be used to reach a destination network. One route is from EIGRP and has a composite metric of 20514560. Another route is from OSPF with a metric of 782. The last is from RIPv2 and has a metric of 4. Which route or routes will the router install in the routing table?
- AThe OSPF route
- BThe EIGRP route
- CThe RIPv2 route
- DAll three routes
- EThe OSPF and RIPv2 routes
10A network administrator is troubleshooting an EIGRP problem on a router and needs to confirm the IP addresses of the devices with which the router has established adjacency. The retransmit interval and the queue counts for the adjacent routers also need to be checked. What command will display the required information?
- ARouter# show ip eigrp adjacency
- BRouter# show ip eigrp topology
- CRouter# show ip eigrp interfaces
- DRouter# show ip eigrp neighbors
11R1 is unable to establish an OSPF neighbor relationship with R3. What are possible reasons for this problem? (Choose two.)
- AAll of the routers need to be configured for backbone Area 1.
- BR1 and R2 are the DR and BDR, so OSPF will not establish neighbor adjacency with R3.
- CA static route has been configured from R1 to R3 and prevents the neighbor adjacency from being established.
- DThe hello and dead interval timers are not set to the same values on R1 and R3.
- EEIGRP is also configured on these routers with a lower administrative distance.
- FR1 and R3 are configured in different areas.
12What is a global command?
- AA command that is set once and affects the entire router
- BA command that is implemented in all foreign and domestic IOS versions
- CA command that is universal in application and supports all protocols
- DA command that is available in every release of IOS, regardless of the version or deployment status
- EA command that can be entered in any configuration mode
13A Cisco router is booting and has just completed the POST process. It is now ready to find and load an IOS image. What function does the router perform next?
- AIt checks the configuration register.
- BIt attempts to boot from a TFTP server.
- CIt loads the first image file in flash memory.
- DIt inspects the configuration file in NVRAM for boot instructions.
14What is the meaning of the output MTU 1500 bytes?
- AThe maximum number of bytes that can traverse this interface per second is 1500.
- BThe minimum segment size that can traverse this interface is 1500 bytes.
- CThe maximum segment size that can traverse this interface is 1500 bytes.
- DThe minimum packet size that can traverse this interface is 1500 bytes.
- EThe maximum packet size that can traverse this interface is 1500 bytes.
- FThe maximum frame size that can traverse this interface is 1500 bytes.
15On a corporate network, hosts on the same VLAN can communicate with each other, but they are unable to communicate with hosts on different VLANs. What is needed to allow communication between the VLANs?
- AA router with subinterfaces configured on the physical interface that is connected to the switch
- BA router with an IP address on the physical interface connected to the switch
- CA switch with an access link that is configured between the switches
- DA switch with a trunk link that is configured between the switches
16Which command displays CPU utilization?
- Ashow protocols
- Bshow process
- Cshow system
- Dshow version
17What two things will a router do when running a distance vector routing protocol? (Choose two.)
- ASend periodic updates regardless of topology changes.
- BSend entire routing table to all routers in the routing domain.
- CUse the shortest-path algorithm to the determine best path.
- DUpdate the routing table based on updates from their neighbors.
- EMaintain the topology of the entire network in its database.
18Which command is used to display the collection of OSPF link states?
- Ashow ip ospf link-state
- Bshow ip ospf lsa database
- Cshow ip ospf neighbors
- Dshow ip ospf database
19The technician wants to upload a new IOS in the router while keeping the existing IOS. What is the maximum size of an IOS file that could be loaded if the original IOS is also kept in flash?
- A3MB
- B4MB
- C5MB
- D7MB
- E8MB
20The two exhibited devices are the only Cisco devices on the network. The serial network between the two devices has a mask of 255.255.255.252. Given the output that is shown, what three statements are true of these devices? (Choose three.)
- AThe Manchester serial address is 10.1.1.1
- BThe Manchester serial address is 10.1.1.2
- CThe London router is a Cisco 2610.
- DThe Manchester router is a Cisco 2610.
- EThe CDP information was received on port Serial0/0 of the Manchester router.
- FThe CDP information was sent by port Serial0/0 of the London router.
21If IP routing is enabled, which two commands set the gateway of last resort to the default gateway? (Choose two.)
- Aip default-gateway 0.0.0.0
- Bip route 172.16.2.1 0.0.0.0 0.0.0.0
- Cip default-network 0.0.0.0
- Dip default-route 0.0.0.0 0.0.0.0 172.16.2.1
- Eip route 0.0.0.0 0.0.0.0 172.16.2.1
22Which parameter would you tune to affect the selection of a static route as a backup, when a dynamic protocol is also being used?
- Ahop count
- Badministrative distance
- Clink bandwidth
- Dlink delay
- Elink cost
23A network associate has configured OSPF with the command:
City(config-router)# network 192.168.12.64 0.0.0.63 area 0
After completing the configuration, the associate discovers that not all the interfaces are participating in OSPF. Which three of the interfaces shown in the exhibit will participate in OSPF according to this configuration statement? (Choose three.)
- AFastEthernet0 /0
- BFastEthernet0 /1
- CSerial0/0
- DSerial0/1.102
- ESerial0/1.103
- FSerial0/1.104
24The Lakeside Company has the internetwork in the exhibit. The administrator would like to reduce the size of the routing table on the Central router. Which partial routing table entry in the Central router represents a route summary that represents the LANs in Phoenix but no additional subnets?
- A10.0.0.0/22 is subnetted, 1 subnets
D 10.0.0.0 [90/20514560] via 10.2.0.2, 6w0d, Serial0/1 - B10.0.0.0/28 is subnetted, 1 subnets
D 10.2.0.0 [90/20514560] via 10.2.0.2, 6w0d, Serial0/1 - C10.0.0.0/30 is subnetted, 1 subnets
D 10.2.2.0 [90/20514560] via 10.2.0.2, 6w0d, Serial0/1 - D10.0.0.0/22 is subnetted, 1 subnets
D 10.4.0.0 [90/20514560] via 10.2.0.2, 6w0d, Serial0/1 - E10.0.0.0/28 is subnetted, 1 subnets
D 10.4.4.0 [90/20514560] via 10.2.0.2, 6w0d, Serial0/1 - F10.0.0.0/30 is subnetted, 1 subnets
D 10.4.4.4 [90/20514560] via 10.2.0.2, 6w0d, Serial0/1
- A10.0.0.0/22 is subnetted, 1 subnets
25A static route to the 10.5.6.0/24 network is to be configured on the HFD router. Which commands will accomplish this? (Choose two.)
- AHFD(config)# ip route 10.5.6.0 0.0.0.255 fa0/0
- BHFD(config)# ip route 10.5.6.0 0.0.0.255 10.5.4.6
- CHFD(config)# ip route 10.5.6.0 255.255.255.0 fa0/0
- DHFD(config)# ip route 10.5.6.0 255.255.255.0 10.5.4.6
- EHFD(config)# ip route 10.5.4.6 0.0.0.255 10.5.6.0
- FHFD(config)# ip route 10.5.4.6 255.255.255.0 10.5.6.0
26Before installing a new, upgraded version of the IOS, what should be checked on the router, and which command should be used to gather this information? (Choose two.)
- AThe amount of available ROM
- BThe amount of available flash and RAM memory
- CThe version of the bootstrap software present on the router
- Dshow version
- Eshow processes
- Fshow running-config
27Which command reveals the last method used to powercycle a router?
- Ashow reload
- Bshow boot
- Cshow running-config
- Dshow version
28Which command would you use on a Cisco router to verify the Layer 3 path to a host?
- Atracert address
- Btraceroute address
- Ctelnet address
- Dssh address
29What information does a router running a link-state protocol use to build and maintain its topological database? (Choose two.)
- Ahello packets
- BSAP messages sent by other routers
- CLSAs from other routers
- Dbeacons received on point-to-point links
- Erouting tables received from other link-state routers
- FTTL packets from designated routers
30Which statements describe the routing protocol OSPF? (Choose three.)
- AIt supports VLSM
- BIt is used to route between autonomous systems.
- CIt confines network instability to one area of the network.
- DIt increases routing overhead on the network.
- EIt allows extensive control of routing updates.
- FIt is simpler to configure than RIP v2.
31A network administrator configures a new router and enters the copy startup-config running-config command on the router. The network administrator powers down the router and sets it up at a remote location. When the router starts, it enters the system configuration dialog as shown. What is the cause of the problem?
- AThe network administrator failed to save the configuration.
- BThe configuration register is set to 0x2100.
- CThe boot system flash command is missing from the configuration.
- DThe configuration register is set to 0x2102.
- EThe router is configured with the boot system startup command.
32What is the default administrative distance of OSPF?
- A90
- B100
- C110
- D120
33Which characteristics are representative of a link-state routing protocol? (Choose three.)
- AProvides common view of entire topology
- BExchanges routing tables with neighbors
- CCalculates shortest path
- DUtilizes event-triggered updates
- EUtilizes frequent periodic updates
34Based on the exhibited routing table, how will packets from a host within the 192.168.10.192/26 LAN be forwarded to 192.168.10.1?
- AThe router will forward packets from R3 to R2 to R1.
- BThe router will forward packets from R3 to R1 to R2.
- CThe router will forward packets from R3 to R2 to R1 AND from R3 to R1.
- DThe router will forward packets from R3 to R1.
35C-router is to be used as a "router-on-a-stick" to route between the VLANs. All the interfaces have been properly configured and IP routing is operational. The hosts in the VLANs have been configured with the appropriate default gateway. What is true about this configuration?
- AThese commands need to be added to the configuration:
C-router(config)# router eigrp 123
C-router(config-router)# network 172.19.0.0 - BThese commands need to be added to the configuration:
C-router(config)# router ospf 1
C-router(config-router)# network 172.19.0.0 0.0.3.255 area 0 - CThese commands need to be added to the configuration:
C-router(config)# router rip
C-router(config-router)# network 172.19.0.0 - DNo further routing configuration is required.
- AThese commands need to be added to the configuration:
36Why is flash memory erased prior to upgrading the IOS image from the TFTP server?
- AThe router cannot verify that the Cisco IOS image currently in flash is valid.
- BFlash memory on Cisco routers can contain only a single IOS image.
- CErasing current flash content is requested during the copy dialog.
- DIn order for the router to use the new image as the default, it must be the only IOS image in
flash.
37The speed of all serial links is E1 and the speed of all Ethernet links is 100 Mb/s. A static route will be established on the Manchester router to direct traffic toward the Internet over the most direct path available. What configuration on the Manchester router will establish a route toward the Internet for traffic that originates from workstations on the Manchester LAN?
- Aip route 0.0.0.0 255.255.255.0 172.16.100.2
- Bip route 0.0.0.0 0.0.0.0 128.107.1.1
- Cip route 0.0.0.0 255.255.255.252 128.107.1.1
- Dip route 0.0.0.0 0.0.0.0 172.16.100.1
- Eip route 0.0.0.0 0.0.0.0 172.16.100.2
- Fip route 0.0.0.0 255.255.255.255 172.16.100.2
38The network administrator must establish a route by which London workstations can forward traffic to the Manchester workstations. What is the simplest way to accomplish this?
- AConfigure a dynamic routing protocol on London to advertise all routes to Manchester.
- BConfigure a dynamic routing protocol on London to advertise summarized routes to Manchester.
- CConfigure a dynamic routing protocol on Manchester to advertise a default route to the London router.
- DConfigure a static default route on London with a next hop of 10.1.1.1.
- EConfigure a static route on London to direct all traffic destined for 172.16.0.0/22 to 10.1.1.2.
- FConfigure Manchester to advertise a static default route to London.
39The network administrator requires easy configuration options and minimal routing protocol traffic. What two options provide adequate routing table information for traffic that passes between the two routers and satisfy the requests of the network administrator? (Choose two.)
- Aa dynamic routing protocol on InternetRouter to advertise all routes to CentralRouter.
- Ba dynamic routing protocol on InternetRouter to advertise summarized routes to CentralRouter.
- Ca static route on InternetRouter to direct traffic that is destined for 172.16.0.0/16 to CentralRouter.
- Da dynamic routing protocol on CentralRouter to advertise all routes to InternetRouter.
- Ea dynamic routing protocol on CentralRouter to advertise summarized routes to InternetRouter.
- Fa static, default route on CentralRouter that directs traffic to InternetRouter.
40When running OSPF, what would cause router A not to form an adjacency with router B?
- AThe loopback addresses are on different subnets.
- BThe values of the dead timers on the routers are different.
- CRoute summarization is enabled on both routers.
- DThe process identifier on router A is different than the process identifier on router B.
41The company uses EIGRP as the routing protocol. What path will packets take from a host on the 192.168.10.192/26 network to a host on the LAN attached to router R1?
- AThe path of the packets will be R3 to R2 to R1.
- BThe path of the packets will be R3 to R1 to R2.
- CThe path of the packets will be both R3 to R2 to R1 AND R3 to R1.
- DThe path of the packets will be R3 to R1.
42When running EIGRP, what is required for RouterA to exchange routing updates with RouterC?
- AAS numbers must be changed to match on all the routers
- BLoopback interfaces must be configured so a DR is elected
- CThe no auto-summary command is needed on Router A and Router C
- DRouter B needs to have two network statements, one for each connected network
43Which command would you configure globally on a Cisco router that would allow you to view directly connected Cisco devices?
- Aenable cdp
- Bcdp enable
- Ccdp run
- Drun cdp
44According to the routing table, where will the router send a packet destined for 10.1.5.65?
- A10.1.1.2
- B10.1.2.2
- C10.1.3.3
- D10.1.4.4
45Which address and mask combination represents a summary of the routes learned by EIGRP?
- A192.168.25.0 255.255.255.240
- B192.168.25.0 255.255.255.252
- C192.168.25.16 255.255.255.240
- D192.168.25.16 255.255.255.252
- E192.168.25.28 255.255.255.240
- F192.168.25.28 255.255.255.252
46Assuming that the entire network topology is shown, what is the operational status of the interfaces of R2 as indicated by the command output shown?
- AOne interface has a problem.
- BTwo interfaces have problems.
- CThe interfaces are functioning correctly.
- DThe operational status of the interfaces cannot be determined from the output shown.
47Which two locations can be configured as a source for the IOS image in the boot system command? (Choose two.)
- ARAM
- BNVRAM
- Cflash memory
- DHTTP server
- ETFTP server
- FTelnet server
48Given the output for this command, if the router ID has not been manually set, what router ID will OSPF use for this router?
- A10.1.1.2
- B10.154.154.1
- C172.16.5.1
- D192.168.5.3
49What commands must be configured on the 2950 switch and the router to allow communication between host 1 and host 2? (Choose two.)
- ARouter(config)# interface fastethernet 0/0
Router(config-if)# ip address 192.168.1.1 255.255.255.0
Router(config-if)# no shut down - BRouter(config)# interface fastethernet 0/0
Router(config-if)# no shut down
Router(config)# interface fastethernet 0/0.1
Router(config-subif)# encapsulation dot1q 10
Router(config-subif)# ip address 192.168.10.1 255.255.255.0
Router(config)# interface fastethernet 0/0.2
Router(config-subif)# encapsulation dot1q 20
Router(config-subif)# ip address 192.168.20.1 255.255.255.0 - CRouter(config)# router eigrp 100
Router(config-router)# network 192.168.10.0
Router(config-router)# network 192.168.20.0 - DSwitch1(config)# vlan database
Switch1(config-vlan)# vtp domain XYZ
Switch1(config-vlan)# vtp server - ESwitch1(config)# interface fastethernet 0/1
Switch1(config-if)# switchport mode trunk - FSwitch1(config)# interface vlan 1
Switch1(config-if)# ip default-gateway 192.168.1.1
- ARouter(config)# interface fastethernet 0/0
50Which two statements describe the process identifier that is used in the command to configure OSPF on a router? (Choose two.)
Router(config)# router ospf 1- AAll OSPF routers in an area must have the same process ID.
- BOnly one process number can be used on the same router.
- CDifferent process identifiers can be used to run multiple OSPF processes
- DThe process number can be any number from 1 to 65,535.
- EHello packets are sent to each neighbor to determine the processor identifier.
51For what two reasons has the router loaded its IOS image from the location that is shown?
(Choose two.)
- ARouter1 has specific boot system commands that instruct it to load IOS from a TFTP server.
- BRouter1 is acting as a TFTP server for other routers.
- CRouter1 cannot locate a valid IOS image in flash memory.
- DRouter1 defaulted to ROMMON mode and loaded the IOS image from a TFTP server.
- ECisco routers will first attempt to load an image from TFTP for management purposes.
52What can be determined about the router from the console output?
- ANo configuration file was found in NVRAM.
- BNo configuration file was found in flash.
- CNo configuration file was found in the PCMCIA card.
- DConfiguration file is normal and will load in 15 seconds.
53Which three elements must be used when you configure a router interface for VLAN trunking?
(Choose three.)- Aone physical interface for each subinterface
- Bone IP network or subnetwork for each subinterface
- Ca management domain for each subinterface
- Dsubinterface encapsulation identifiers that match VLAN tags
- Eone subinterface per VLAN
- Fsubinterface numbering that matches VLAN tags
54Which commands are required to properly configure a router to run OSPF and to add network 192.168.16.0/24 to OSPF area 0? (Choose two.)
- ARouter(config)# router ospf 0
- BRouter(config)# router ospf 1
- CRouter(config)# router ospf area 0
- DRouter(config-router)# network 192.168.16.0 0.0.0.255 0
- ERouter(config-router)# network 192.168.16.0 0.0.0.255 area 0
- FRouter(config-router)# network 192.168.16.0 255.255.255.0 area 0
55A router receives information about network 192.168.10.0/24 from multiple sources. What will the router consider the most reliable information about the path to that network?
- Aa directly connected interface with an address of 192.168.10.254/24
- Ba static route to network 192.168.10.0/24
- Ca RIP update for network 192.168.10.0/24
- Dan OSPF update for network 192.168.0.0/16
- Ea default route with a next hop address of 192.168.10.1
- Fa static route to network 192.168.10.0/24 with a local serial interface configured as the next hop
56What is the default maximum number of equal-cost paths that can be placed into the routing table of a Cisco OSPF router?
- A2
- B8
- C16
- DUnlimited
57What is the default maximum number of equal-cost paths that can be placed into the routing table of a Cisco OSPF router?
- A2
- B8
- C16
- DUnlimited
58Which command shows your active Telnet connections?
- Ashow cdp neigbors
- Bshow session
- Cshow users
- Dshow vty logins
59Which type of EIGRP route entry describes a feasible successor?
- Aa backup route, stored in the routing table
- Ba primary route, stored in the routing table
- Ca backup route, stored in the topology table
- Da primary route, stored in the topology table
60The network administrator cannot connect to Switch1 over a Telnet session, although the hosts attached to Switch1 can ping the interface Fa0/0 of the router. Given the information in the graphic and assuming that the router and Switch2 are configured properly, which of the following commands should be issued on Switch1 to correct this problem?
- ASwitch1(config)# line con0
Switch1(config-line)# password cisco
Switch1(config-line)#login - BSwitch1(config)# interface fa0/1
Switch1(config-if)# ip address 192.168.24.3 255.255.255.0 - CSwitch1(config)# ip default-gateway 192.168.24.1
- DSwitch1(config)# interface fa0/1
Switch1(config-if)# duplex full
Switch1(config-if)# speed 100 - ESwitch1(config)# interface fa0/1
Switch1(config-if)# switchport mode trunk
- ASwitch1(config)# line con0
61Which of these statements correctly describes the state of the switch once the boot process has been completed?
- AAs FastEthernet0/12 will be the last to come up, it will be blocked by STP.
- BRemote access management of this switch will not be possible without configuration change.
- CMore VLANs will need to be created for this switch.
- DThe switch will need a different IOS code in order to support VLANs and STP.
62Two routers named Atlanta and Brevard are connected via their serial interfaces as illustrated, but they are unable to communicate. The Atlanta router is known to have the correct configuration.
Given the partial configurations, identify the fault on the Brevard router that is causing the lack of connectivity.
- Aincompatible IP address
- Binsufficient bandwidth
- Cincorrect subnet mask
- Dincompatible encapsulation
- Elink reliability too low
- FIPCP closed
63Users on the 172.17.22.0 network cannot reach the server located on the 172.31.5.0 network. The network administrator connected to router Coffee via the console port, issued the show ip route command, and was able to ping the server.
Based on the output of the show ip route command and the topology shown in the graphic, what is the cause of the failure?
- AThe network has not fully converged.
- BIP routing is not enabled.
- CA static route is configured incorrectly.
- DThe FastEthernet interface on Coffee is disabled.
- EThe neighbor relationship table is not correctly updated.
- FThe routing table on Coffee has not updated
64A network administrator is trying to add a new router into an established OSPF network. The networks attached to the new router do not appear in the routing tables of the other OSPF routers. Given the information in the partial configuration shown below, what configuration error is causing this problem?
Router(config)# router ospf 1
Router(config-router)# network 10.0.0.0 255.0.0.0 area 0- AThe process id is configured improperly.
- BThe OSPF area is configured improperly.
- CThe network wildcard mask is configured improperly.
- DThe network number is configured improperly.
- EThe AS is configured improperly.
- FThe network subnet mask is configured improperly.
65A network administrator is trying to add a new router into an established OSPF network. The networks attached to the new router do not appear in the routing tables of the other OSPF routers. Given the information in the partial configuration shown below, what configuration error is causing this problem?
Router(config)# router ospf 1
Router(config-router)# network 10.0.0.0 255.0.0.0 area 0- AThe process id is configured improperly.
- BThe OSPF area is configured improperly.
- CThe network wildcard mask is configured improperly.
- DThe network number is configured improperly.
- EThe AS is configured improperly.
- FThe network subnet mask is configured improperly.
66Which statement is correct regarding the operation of DHCP?
- AA DHCP client uses a ping to detect address conflicts.
- BA DHCP server uses a gratuitous ARP to detect DHCP clients.
- CA DHCP client uses a gratuitous ARP to detect a DHCP server.
- DIf an address conflict is detected, the address is removed from the pool and an administrator must resolve the conflict.
- EIf an address conflict is detected, the address is removed from the pool for an amount of time configurable by the administrator.
- FIf an address conflict is detected, the address is removed from the pool and will not be reused until the server is rebooted.
67What statement is true of the configuration for this network?
- AThe configuration that is shown provides inadequate outside address space for translation of the number of inside addresses that are supported.
- BBecause of the addressing on interface FastEthernet0/1, the Serial0/0 interface address will not support the NAT configuration as shown.
- CThe number 1 referred to in the ip nat inside source command references access-list number 1.
- DExternalRouter must be configured with static routes to networks 172.16.1.0/24 and 172.16.2.0/24.
68Which statement describes the process of dynamically assigning IP addresses by the DHCP server?
- AAddresses are allocated after a negotiation between the server and the host to determine the length of the agreement.
- BAddresses are permanently assigned so that the hosts uses the same address at all times.
- CAddresses are assigned for a fixed period of time, at the end of the period, a new request for an address must be made.
- DAddresses are leased to hosts, which periodically contact the DHCP server to renew the lease.
69What are two benefits of using NAT? (Choose two.)
- ANAT facilitates end-to-end communication when IPsec is enabled.
- BNAT eliminates the need to re-address all hosts that require external access.
- CNAT conserves addresses through host MAC-level multiplexing.
- DDynamic NAT facilitates connections from the outside of the network.
- ENAT accelerates the routing process because no modifications are made on the packets.
- FNAT protects network security because private networks are not advertised.
70What are two benefits of using NAT? (Choose two.)
- ANAT facilitates end-to-end communication when IPsec is enabled.
- BNAT eliminates the need to re-address all hosts that require external access.
- CNAT conserves addresses through host MAC-level multiplexing.
- DDynamic NAT facilitates connections from the outside of the network.
- ENAT accelerates the routing process because no modifications are made on the packets.
- FNAT protects network security because private networks are not advertised.
71On which options are standard access lists based?
- Adestination address and wildcard mask
- Bdestination address and subnet mask
- Csource address and subnet mask
- Dsource address and wildcard mask
72A network engineer wants to allow a temporary entry for a remote user with a specific username and password so that the user can access the entire network over the Internet. Which ACL can be used?
- Astandard
- Bextended
- Cdynamic
- Dreflexive
73How does a DHCP server dynamically assign IP addresses to hosts?
- AAddresses are permanently assigned so that the host uses the same address at all times.
- BAddresses are assigned for a fixed period of time. At the end of the period, a new request for an address must be made, and another address is then assigned.
- CAddresses are leased to hosts. A host will usually keep the same address by periodically contacting the DHCP server to renew the lease.
- DAddresses are allocated after a negotiation between the server and the host to determine the length of the agreement.
74Which rule does the DHCP server use when there is an IP address conflict?
- AThe address is removed from the pool until the conflict is resolved.
- BThe address remains in the pool until the conflict is resolved.
- COnly the IP detected by Gratuitous ARP is removed from the pool.
- DOnly the IP detected by Ping is removed from the pool.
- EThe IP will be shown, even after the conflict is resolved.
75The Bigtime router is unable to authenticate to the Littletime router. What is the cause of the problem?
- AThe usernames are incorrectly configured on the two routers.
- BThe passwords do not match on the two routers.
- CCHAP authentication cannot be used on a serial interface.
- DThe routers cannot be connected from interface S0/0 to interface S0/0.
- EWith CHAP authentication, one router must authenticate to another router. The routers cannot be configured to authenticate to each other.
76Which two tasks does the Dynamic Host Configuration Protocol perform? (Choose two.)
- ASet the IP gateway to be used by the network.
- BPerform host discovery used DHCPDISCOVER message.
- CConfigure IP address parameters from DHCP server to a host.
- DProvide an easy management of layer 3 devices.
- EMonitor IP performance using the DHCP server.
- FAssign and renew IP address from the default pool.
77When a DHCP server is configured, which two IP addresses should never be assignable to hosts?
(Choose two.)- Anetwork or subnetwork IP address
- Bbroadcast address on the network
- CIP address leased to the LAN
- DIP address used by the interfaces
- Emanually assigned address to the clients
- Fdesignated IP address to the DHCP server
78Which two statements about static NAT translations are true? (Choose two.)
- AThey allow connections to be initiated from the outside.
- BThey require no inside or outside interface markings because addresses are statically defined.
- CThey are always present in the NAT table.
- DThey can be configured with access lists, to allow two or more connections to be initiated from the outside.
79A network administrator needs to configure port security on a switch. Which two statements are true? (Choose two.)
- AThe network administrator can apply port security to dynamic access ports.
- BThe network administrator can apply port security to EtherChannels.
- CWhen dynamic MAC address learning is enabled on an interface, the switch can learn new addresses, up to the maximum defined.
- DThe sticky learning feature allows the addition of dynamically learned addresses to the running configuration.
- EThe network administrator can configure static secure or sticky secure MAC addresses in the voice VLAN.
80A junior network administrator was given the task of configuring port security on SwitchA to allow only PC_A to access the switched network through port fa0/1. If any other device is detected, the port is to drop frames from this device. The administrator configured the interface and tested it with successful pings from PC_A to RouterA, and then observes the output from these two show commands.
Which two of these changes are necessary for SwitchA to meet the requirements? (Choose two.)
- APort security needs to be globally enabled.
- BPort security needs to be enabled on the interface.
- CPort security needs to be configured to shut down the interface in the event of a violation.
- DPort security needs to be configured to allow only one learned MAC address.
- EPort security interface counters need to be cleared before using the show command.
- FThe port security configuration needs to be saved to NVRAM before it can become active.
81Which set of commands is recommended to prevent the use of a hub in the access layer?
- Aswitch(config-if)#switchport mode trunk
switch(config-if)#switchport port-security maximum 1 - Bswitch(config-if)#switchport mode trunk
switch(config-if)#switchport port-security mac-address 1 - Cswitch(config-if)#switchport mode access
switch(config-if)#switchport port-security maximum 1 - Dswitch(config-if)#switchport mode access
switch(config-if)#switchport port-security mac-address 1
- Aswitch(config-if)#switchport mode trunk
82How does using the service password-encryption command on a router provide additional security?
- Aby encrypting all passwords passing through the router
- Bby encrypting passwords in the plain text configuration file
- Cby requiring entry of encrypted passwords for access to the device
- Dby configuring an MD5 encrypted key to be used by routing protocols to validate routing exchanges
- Eby automatically suggesting encrypted passwords for use in configuring the router
83Statements A, B, C, and D of ACL 10 have been entered in the shown order and applied to interface E0 inbound, to prevent all hosts (except those whose addresses are the first and last IP of subnet 172.21.1.128/28) from accessing the network. But as is, the ACL does not restrict anyone from the network. How can the ACL statements be re-arranged so that the system works as intended?
- AACDB
- BBADC
- CDBAC
- DCDBA
84An attempt to deny web access to a subnet blocks all traffic from the subnet. Which interface command immediately removes the effect of ACL 102?
- Ano ip access-class 102 in
- Bno ip access-class 102 out
- Cno ip access-group 102 in
- Dno ip access-group 102 out
- Eno ip access-list 102 in
85Which Cisco Catalyst feature automatically disables the port in an operational PortFast upon receipt of a BPDU?
- ABackboneFast
- BUplinkFast
- CRoot Guard
- DBPDU Guard
- EBPDU Filter
86When you are troubleshooting an ACL issue on a router, which command would you use to verify which interfaces are affected by the ACL?
- Ashow ip access-lists
- Bshow access-lists
- Cshow interface
- Dshow ip interface
- Elist ip interface
87A network administrator cannot establish a Telnet session with the indicated router. What is the cause of this failure?
- AA Level 5 password is not set.
- BAn ACL is blocking Telnet access.
- CThe vty password is missing.
- DThe console password is missing.
88Which statement about access lists that are applied to an interface is true?
- AYou can place as many access lists as you want on any interface.
- BYou can apply only one access list on any interface.
- CYou can configure one access list, per direction, per Layer 3 protocol.
- DYou can apply multiple access lists with the same protocol or in different directions.
89Which item represents the standard IP ACL?
- Aaccess-list 110 permit ip any any
- Baccess-list 50 deny 192.168.1.1 0.0.0.255
- Caccess list 101 deny tcp any host 192.168.1.1
- Daccess-list 2500 deny tcp any host 192.168.1.1 eq 22
90A network administrator is configuring ACLs on a Cisco router, to allow traffic from hosts on networks 192.168.146.0, 192.168.147.0, 192.168.148.0, and 192.168.149.0 only. Which two ACL statements, when combined, would you use to accomplish this task? (Choose two.)
- Aaccess-list 10 permit ip 192.168.146.0 0.0.1.255
- Baccess-list 10 permit ip 192.168.147.0 0.0.255.255
- Caccess-list 10 permit ip 192.168.148.0 0.0.1.255
- Daccess-list 10 permit ip 192.168.149.0 0.0.255.255
- Eaccess-list 10 permit ip 192.168.146.0 0.0.0.255
- Faccess-list 10 permit ip 192.168.146.0 255.255.255.0
91What can be done to secure the virtual terminal interfaces on a router? (Choose two.)
- AAdministratively shut down the interface.
- BPhysically secure the interface.
- CCreate an access list and apply it to the virtual terminal interfaces with the access-group command.
- DConfigure a virtual terminal password and login process.
- EEnter an access list and apply it to the virtual terminal interfaces using the access-class command.
92Which two commands correctly verify whether port security has been configured on port FastEthernet 0/12 on a switch? (Choose two.)
- ASW1#show port-secure interface FastEthernet 0/12
- BSW1#show switchport port-secure interface FastEthernet 0/12
- CSW1#show running-config
- DSW1#show port-security interface FastEthernet 0/12
- ESW1#show switchport port-security interface FastEthernet 0/12
93The following commands are executed on interface fa0/1 of 2950Switch.
2950Switch(config-if)# switchport port-security
2950Switch(config-if)# switchport port-security mac-address sticky
2950Switch(config-if)# switchport port-security maximum 1
The Ethernet frame that is shown arrives on interface fa0/1. What two functions will occur when this frame is received by 2950Switch? (Choose two.)
- AThe MAC address table will now have an additional entry of fa0/1 FFFF.FFFF.FFFF.
- BOnly host A will be allowed to transmit frames on fa0/1.
- CThis frame will be discarded when it is received by 2950Switch.
- DAll frames arriving on 2950Switch with a destination of 0000.00aa.aaaa will be forwarded out fa0/1.
- EHosts B and C may forward frames out fa0/1 but frames arriving from other switches will not be forwarded out fa0/1.
- FOnly frames from source 0000.00bb.bbbb, the first learned MAC address of 2950Switch, will be forwarded out fa0/1.
94What will be the result if the following configuration commands are implemented on a Cisco switch?
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security mac-address sticky- AA dynamically learned MAC address is saved in the startup-configuration file.
- BA dynamically learned MAC address is saved in the running-configuration file.
- CA dynamically learned MAC address is saved in the VLAN database.
- DStatically configured MAC addresses are saved in the startup-configuration file if frames from that address are received.
- EStatically configured MAC addresses are saved in the running-configuration file if frames from that address are received.
Informações
- Descrição
- Practice exam for 200-120 exam Questions for the following Topics Topic 4: IP Routing Technologies Topic 5: IP Services Topic 6: Network Device Security
- Autor
- Axiom42
- Idioma
- English
- Visualizações
- 519
- Etiquetas
- Avaliação
- 5,0 de 5 · 2 avaliações Avalie este quiz