Twentythree Zone

1. Which security protocol or measure would provide the greatest protection for a wireless LAN?
WPA2
cloaking SSIDs
shared WEP key
MAC address filtering

2.
CCNA1FinalExamV4.0Answers thumb CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. All trunk links are operational and all VLANs are allowed on all trunk links. An ARP request is sent by computer 5. Which device or devices will receive this message?
only computer 4
computer 3 and RTR-A
computer 4 and RTR-A
computer 1, computer 2, computer 4, and RTR-A
computer 1, computer 2, computer 3, computer 4, and RTR-A
all of the computers and the router


3.
CCNA1FinalExamV4.0Answers2 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. Hosts A and B, connected to hub HB1, attempt to transmit a frame at the same time but a collision occurs. Which hosts will receive the collision jamming signal?
only hosts A and B
only hosts A, B, and C
only hosts A, B, C, and D
only hosts A, B, C, and E

4.
CCNA1FinalExamV4.0Answers3 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. Router RA receives a packet with a source address of 192.168.1.65 and a destination address of 192.168.1.161. What will the router do with this packet?
The router will drop the packet.
The router will forward the packet out interface FastEthernet 0/1.1.
The router will forward the packet out interface FastEthernet 0/1.2.
The router will forward the packet out interface FastEthernet 0/1.3.
The router will forward the packet out interface FastEthernet 0/1.2 and interface FastEthernet 0/1.3.

5.
CCNA1FinalExamV4.0Answers4 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. Which two settings show the default value of VTP configuration on a Cisco 2960 switch? (Choose two.)
revision number
existing VLANs
operating mode
domain name
pruning mode

6. Which value determines if a switch becomes the central point of reference in the spanning tree topology?
lowest bridge ID
highest revision number
lowest numeric IP address
highest numeric MAC address

7. What is the purpose of the Spanning Tree algorithm?
It propagates VLAN configurations to other switches.
It restricts broadcast packets to a single VLAN.
It segments a network into multiple broadcast domains.
It prevents loops in a switched network with redundant paths.

8. What are two benefits of the IEEE 802.11n standard over the IEEE 802.11G? (Choose two.)
requires less equipment
provides improved range
permits increased data rates
has a single-input and a single-output
needs no hardware upgrade for compatibility

9. Which configuration changes will increment the configuration revision number on the VTP server?
configuring trunk links on the VTP server
configuring or changing the VTP password
configuring or changing the VTP domain name
configuring or changing the VTP version number
configuring or deleting a VLAN or creating a VLAN name

10.
CCNA1FinalExamV4.0Answers5 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. A company has acquired a new office in a campus environment. Switches in the existing office and the new office are directly connected by a trunk link. The VLANs and IP addressing are setup as shown in the exhibit. The computers in each office are not able to ping each other. What will fix the problem?
Use an access link between S2 and S3.
Connect S2 and S3 to a common router.
Set the subnet mask in the new office to /24.
Configure the new office default gateway to 172.17.10.1
Change the port assignments in the new office to a different VLAN.

11. What is a possible impact of setting too short an aging time in the MAC address table of a switch?
overly large address table
unnecessary flooding of packets
excessive timeouts of static addresses
impaired ability to dynamically learn new addresses

12.
CCNA1FinalExamV4.0Answers6 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. The network administrator has just added VLAN 50 to Switch1 and Switch2. Hosts A, B, C, and D are correctly configured with IP addresses in the subnet range for VLAN 50. Host A can communicate with host B, but cannot communicate with host C or host D. What is the cause of this problem?
There is a native VLAN mismatch.
The Fa0/11 interface of Switch1 is not configured as a trunk.
The link between Switch1 and Switch2 is up but not trunked.
VLAN 50 is not allowed on the trunk link between Switch1 and Switch2.

13.
CCNA1FinalExamV4.0Answers7 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. Users complain that they do not have connectivity to the web server that is connected to SW1. What should be done to remedy the problem?
Allow all VLANs on the trunk link.
Configure VLAN 100 as the native VLAN for SW1.
Configure the trunk port in trunk mode on SW1.
Attach the web server to a router and configure inter-VLAN routing.

14. What VLANs are allowed across a trunk when the range of allowed VLANs is set to the default value?
only the management VLAN
all VLANs except the extended range VLANs
all VLANs except 1 and 1002-1005
all VLANs

15.
CCNA1FinalExamV4.0Answers8 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. A new host needs to be connected to VLAN 1. Which IP address should be assigned to this new host?
192.168.1.11 /28
192.168.1.22 /28
192.168.1.33 /28
192.168.1.44 /28
192.168.1.55 /28

16. Using the command copy tftp:backup.cfg startup-config, an administrator downloaded a saved configuration from a TFTP server to a switch. Why does the administrator not detect any changes in the switch configuration after the download completes?
The command should have been copy startup-config tftp:backup.cfg.
A backup configuration from a TFTP server cannot be copied directly into the startup-config.
The command copy running-config startup-config should be used to save the changes on the switch.
Downloading to the startup-config requires the switch to be reloaded in order for the configuration to take effect.

17. What two methods can be used to remove MAC address table entries from a switch? (Choose two.)
Power cycle the switch to clear all dynamically learned addresses.
The clear switching-tables command will remove statically configured entries.
The clear mac-address-table command will remove statically and dynamically configured table entries.
The erase flash command will clear all statically configured table entries.
Statically configured MAC addresses will automatically be removed from the address table 300 minutes after the last activity on a switch port.

18. Which type of traffic can still be received on a switch interface that is in STP blocking mode?
BPDU frames
multicast frames
broadcast frames
Layer 3 packets

19. Which method establishes an administrative connection for configuring the Linksys WRT300N wireless access point?
Associate with the access point and then open a HyperTerminal session with the access point.
Physically connect to the access point and then reboot the computer to launch the configuration software.
From a computer in the same IP subnet as the access point, enter the default IP address of the access point in a web browser.
Modify the TCP/IP properties of the computer connected to the access point so that it exists on the same network, and then reboot your computer to establish a connection.

20.
CCNA1FinalExamV4.0Answers9 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. All edge ports are configured with the spanning-tree portfast command. Host1 is recently connected to port Fa0/1 on switch SW1 . Which statement is true about the status of port Fa0/1?
The port will transition into blocking state.
The port will transition immediately into forwarding state.
The port will transition into blocking state and then immediately into forwarding state.
The port will transition into blocking state and immediately transition through the listening and learning states.

21.
CCNA1FinalExamV4.0Answers10 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. What is true of the configuration of switch S1?
A Cisco proprietary protocol is in use for ports Fa0/1 and Fa0/3.
Switch ports Fa0/1 and Fa0/3 have been configured with the switchport mode access command.
Untagged frames received on ports Fa0/1 and Fa0/3 will be placed on VLAN 1.
Switch ports Fa0/1 and Fa0/3 are configured to carry data from multiple VLANs.

22.
CCNA1FinalExamV4.0Answers11 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. The configuration steps that are listed in the exhibit have been entered in switch S1 via the console. Subsequent attempts to telnet to the switch are not successful. What is causing the problem?
The switch must be configured with SSH version 1.
The transport input command must specify Telnet access.
The RSA keys must be returned to zero before SSH will permit Telnet access.
The ip domain-name command must also be entered in line configuration mode for the vty lines.

23.
CCNA1FinalExamV4.0Answers12 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. Which switch will be elected as the root bridge of the spanning tree topology?
Cat-A
Cat-B
Cat-C
Cat-D

24.
CCNA1FinalExamV4.0Answers13 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. VTP has been configured with VTP pruning enabled on all switches. If HostA sends a broadcast frame to SW1, which devices will receive the frame?
SW1, SW3, HostF
SW1, HostB, HostC
SW1, SW2, SW3, SW4, HostF
SW1, SW2, SW3, SW4, all hosts

25.
CCNA1FinalExamV4.0Answers14 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. Which two statements are true about the operation of the interfaces? (Choose two.)
Incoming traffic with VLAN ID 0 is processed by interface fa0/0.
Incoming traffic that has a VLAN ID of 2 is processed by subinterface fa0/0.2.
Both subinterfaces remain up with line protocol up, even if fa0/0 line protocol is down.
Subinterfaces use unique MAC addresses by adding the 802.1Q VLAN ID to the hardware address.
Traffic inbound on this router is processed by different subinterfaces, depending on the VLAN from which the traffic originated.

26. The network administrator wants to configure a switch to pass VLAN update information to other switches in the domain but not update its own local VLAN database. Which two steps should the administrator perform to achieve this? (Choose two.)
Reset the VTP counters.
Configure VTP version 1 on the switch.
Configure the VTP mode of the switch to transparent.
Verify that the switch has a higher configuration revision number.
Configure the switch with the same VTP domain name as other switches in the network.

27.
CCNA1FinalExamV4.0Answers15 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. The devices in the network are operational and configured as indicated in the exhibit. However, hosts B and D cannot ping each other. What is the most likely cause of this problem?
The link between the switches is up but not trunked.
The Fa0/11 interface of Switch1 is not configured as a trunk.
Hosts B and D are configured with IP addresses from different subnets.
VLAN 20 and VLAN 30 are not allowed on the trunk between the switches.

28.
 CCNA1FinalExamV4.0Answers16 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. Users A and B are reporting intermittent connectivity problems. Pre-installation surveys showed strong signal strength from the AP locations to the client locations. Outside electrical interference has been eliminated. What will fix the problem?
Relocate the APs closer to each other.
Increase the distance between the clients.
Change the channel on AP-B to 6 or 11.
Place AP-A and AP-B on the same wireless channel.

29. Why is it advisable that a network administrator use SSH instead of Telnet when managing switches?
SSH uses TCP whereas Telnet does not.
SSH encrypts only the username and password when logging in.
SSH encrypts all remote management communications whereas Telnet does not.
SSH sends a clear text message steam which reduces the bandwidth use for management.

30.
CCNA1FinalExamV4.0Answers17 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. The teacher host is connected to port Fa0/7 on switch STW. A student has decided to share access to the Internet by attaching a hub and laptop to STW as shown. What will be the result of the student making this connection?
The Fa0/7 port of STW will be shutdown.
The student will gain full access to the Internet.
Both the teacher and student will be able to receive data but only the teacher will be able to send.
The frames from the laptop will be dropped, but the teacher host will maintain connectivity with the network.

31. A network administrator configures a switch port with the command switchport mode dynamic auto. What is the resulting behavior of the switch port?
The switch port is able to trunk if the remote switch port is set to auto.
The switch port is able to trunk if the remote switch port is set to desirable.
The switch port will be disabled if it is unable to successfully negotiate trunking.
A successful trunk will be established if the remote switch is non-Cisco but the port is configured for trunking.

32. Which STP port type can only appear once on a segment, and must be present in order for traffic to flow on that segment?
non-root port
disabled port
designated port
non-designated port

33.
CCNA1FinalExamV4.0Answers18 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. What would happen if the network administrator moved the network cable of Host A from interface Fa0/1 to Fa0/3 on switch SW1?
Host A remains a member of VLAN 10, because the router is routing traffic between VLANs.
Host A is no longer a member of VLAN 10, because port Fa0/3 has been manually assigned to VLAN 30.
Host A remains a member of VLAN 10, because the switch provides dynamic VLAN assignment for the port.
Host A maintains connectivity to all members of VLAN 10, because it is connected to the same physical network.
Host A is no longer a member of VLAN 10, but because port Fa0/3 was unused, it is now a member of VLAN 1.

34.
CCNA1FinalExamV4.0Answers19 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. VLAN 10 has been configured on the VTP server. Users who are assigned to VLAN 10 are connected as shown in the exhibit. On the basis of the outputs that are provided, which group of users will be able to communicate with the users on VLAN 10 on SW1?
all the users who are connected only to SW2
users on VLAN 10 who are connected only to SW3
users on VLAN 10 who are connected only to SW4
users on VLAN 10 who are connected to both SW3 and SW4

35.
CCNA1FinalExamV4.0Answers20 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. Which three options correctly identify information that could be associated with this output?(Choose three.)
Interface FastEthernet3/0/0 is subinterfaced.
A non-proprietary trunking protocol is in use.
The configuration is appropriate for a router-on-a-stick network design.
A shutdown command has been applied to interface FastEthernet3/0/0.
Interface FastEthernet3/0/0.3 is mapped to the default management VLAN.
An IP address should be applied to FastEthernet3/0/0 for correct data routing.

36.
CCNA1FinalExamV4.0Answers21 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. The Layer 2 switching design that is shown has been implemented in a campus environment that is using Spanning Tree Protocol. All inter-switch links that are shown are trunks. Whenever an inter-switch link fails, the network takes nearly a minute to completely converge. How can the convergence time be reduced?
Increase the capacity of the distribution and core trunk links to 10 Gb/s.
Add a trunk link that directly connects D1 and D2.
Use Layer 3 switching on the core switch.
Implement Rapid Spanning Tree Protocol.

37.
CCNA1FinalExamV4.0Answers22 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. Each switch is configured to participate in STP for VLANs 1, 10, 20, and 30. Which switch will become the root for VLAN 20?
A
B
C
D

38.
CCNA1FinalExamV4.0Answers23 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. Switches S2 and S3 are properly connected using an ethernet cable. A network administrator has configured both switches with VTP, but S3 is unable to propagate VLANs to S2. What could be the reason for this?
The VTP configuration revision is different on both switches.
The VTP domains are different on both switches.
VTP pruning is disabled.
VTP v2 is disabled.

39. In a three-layer hierarchical network design, which distribution layer function delineates broadcast domains?
routing between VLANs
aggregating traffic flows
providing redundant links
reducing the network diameter

40. Which parameter is used to uniquely identify one wireless network from another?
SSID
OFDM
WEP
DSSS

41. What is one disadvantage that 802.11a wireless has compared to 802.11g?
Use of the 5GHz band requires much larger antennas.
The OFDM modulation technique results in a slower data rate.
There are fewer non-overlapping channels available to help reduce RF interference.
The use of higher frequencies means that signals are more likely to be obstructed.

42. Which three statements are correct concerning the default configuration of a new switch? (Choose three.)
It is configured in VTP server mode.
STP is automatically enabled.
The first VTY line is automatically configured to allow remote connections.
VLAN1 is configured with a management IP address.
All switch ports are assigned to VLAN1.
The enable password is configured as cisco.

43.
CCNA1FinalExamV4.0Answers24 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. How is port Gi1/1 on SWT-A functioning in the spanning-tree topology?
It is sending and receiving data frames.
It is receiving BPDUs, but not sending data frames.
It is participating in the election process by forwarding the BPDUs it receives.
It is receiving BPDUs and populating the MAC address table, but not sending data.

44. While configuring a new switch, a network administrator configures the switch as an HTTP server. What benefits does this configuration provide?
This allows the switch to host web pages for the network.
This allows remote VPN connections to the switch over the Internet.
This is required if a web server or web farm is attached to the switch.
This allows web-based configuration tools to be used with the switch.

45. Which statement describes the use of voice VLANs in Cisco IP telephony?
The voice VLAN carries both tagged and untagged traffic.
The voice VLAN carries untagged traffic having special QoS markings.
The voice VLAN must be configured on the switch port to which the IP phone attaches.
Data and voice frames are tagged with same VLAN ID between the IP phone and the switch when a voice VLAN is configured.

46.
CCNA1FinalExamV4.0Answers25 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. If switch SW1 is configured with the four VLANs as shown in the exhibit, how many physical interfaces are needed on router R1 to configure inter-VLAN routing using subinterfaces?
zero
one
two
four

47.
CCNA1FinalExamV4.0Answers26 thumb1 CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. What does the term DYNAMIC indicate in the output that is shown?
This entry can only be removed from the MAC address table by a network administrator.
When forwarding a frame to the device with address 0060.5c5b.cd23, the switch does not have to perform a lookup to determine the final destination port.
Only the device with MAC address 0060.5c5b.cd23 will be allowed to connect to port Fa0/18.
The switch learned this MAC address from the source address in a frame received on Fa0/18.

48.
CCNA1FinalExamV4.0Answers27 thumb CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. The VTP domain has been configured as shown in the exhibit. The network technician accidentally configured the VTP server as a VTP client. After the technician reloaded the switches, all users in the VTP domain started to complain that they lost connectivity to the users on the same VLANs that are connected to other switches. What should be done in the future to prevent losing all VLAN configurations in a VTP domain?
Configure all switches in VTP transparent mode and copy the VLAN configuration into flash.
Configure all switches in the network as VTP clients and copy the VLAN configuration into NVRAM.
Create a new domain and configure a second switch as a VTP server to take over in case of a primary VTP server failure.
In the same domain, configure a second switch as a VTP server to take over in case of a primary VTP server failure.

49.
CCNA1FinalExamV4.0Answers28 thumb CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. How does SW1 manage traffic coming from Host A?
SW1 drops the traffic because it is untagged.
SW1 leaves the traffic untagged and forwards it over the trunk.
SW1 tags the traffic with the lowest VLAN ID value and forwards it over the trunk link.
SW1 encapsulates the traffic with 802.1Q encapsulation and forwards it over the trunk link.

50. An administrator is troubleshooting a PC on the network which is suffering from slow and intermittent connectivity. The PC has a ping success rate to the default gateway of less than half the ping attempts. Other PCs on the switch can consistently ping the default gateway. The switch port is configured for auto duplex and the PC is configured for full duplex. What will commonly cause this problem?
The PC is set to full duplex. The switch port fails to autonegotiate the duplex setting and defaults to half duplex, which causes a duplex mismatch.
The switch traffic is exceeding available frame buffers. The result is that frames are being dropped.
The PC and the default gateway have different bandwidth Ethernet ports.
The default gateway is not on the same switch that the PC is.

51.
CCNA1FinalExamV4.0Answers29 thumb CCNA 3 Final Exam V4.0 Answers
Refer to the exhibit. A network administrator has segmented the network into two VLANs and configured Router1 for inter-VLAN routing. A test of the network, however, shows that hosts on each VLAN can only access local resources and not resources on the other VLAN. What is the most likely cause of this problem?
Switch port Fa0/1 is not trunking.
Router interface Fa0/0 is possibly down.
No routing protocol is configured on Router1.
One of the router subinterfaces is possibly down.

52. What impact does the use of the mdix auto configuration command have on an Ethernet interface on a switch?
automatically detects duplex settings
automatically detects interface speed
automatically detects copper cable type
automatically assigns the first detected MAC address to an interface
Read More …

An employee called the help desk to report a laptop that could not access a web-based application on the Internet. The help desk technician asked the employee to open a Windows command prompt and type the ipconfig /all command. Which problem-solving technique did the technician choose?

top-down

bottom-up

substitution

divide-and-conquer



http://ev-iip.netacad.net/assessment/images/i152297n1v1.jpg
Refer to the exhibit. Given the output generated by the debug ppp negotiation command, which statement is true?

The line protocol of the local router is now up.

The hostname of the local router is Goleta.

The command ppp authentication pap is configured on both routers.

The local router requested to terminate the session.



http://ev-iip.netacad.net/assessment/images/11444.jpg
Refer to the exhibit. A network administrator has implemented subnetting using the network 192.168.25.0 and a /28 mask. Workstation 1 is not able to ping with Workstation 2. What is a possible cause for this lack of communication?

Workstation 1 and Workstation 2 are on the same subnet.

The serial connections are using addresses from the LAN subnets.

All hosts in the network must be in the same subnet to communicate.

Workstation 1 is not on the same network that the RTA router LAN interface is on.



http://ev-iip.netacad.net/assessment/images/17957.jpg
Refer to the exhibit. A lab technician connects two routers together via a serial cable using the default interface configuration values. The interfaces are up; however, the technician is unable to ping between the two devices. What is the most likely problem?

The lab technician used the wrong cable to connect the serial ports.

There is an IP mismatch between the serial ports.

There is an encapsulation mismatch between the serial ports.

No clock rate has been set on the DCE interface.



http://ev-iip.netacad.net/assessment/images/i131904n1v1.jpg
Refer to the exhibit. A network administrator is doing proactive network maintenance. The administrator pings 192.168.1.100 and compares the results to the baseline data. Based on the comparison of the two pings, what is one possibility?

There is an ACL applied, making the destination host unreachable.

There is a malfunctioning NIC on the destination host.

The sending host is unable to access the network.

There are congestion problems on the network.



http://ev-iip.netacad.net/assessment/images/19512.jpg
Refer to the exhibit. Host 192.168.1.14 is unable to download email from 192.168.2.200. After reviewing the output of the show running-config command, what problem is discovered?

Access to the SMTP server is denied.

The destination host address in an ACL statement is incorrect.

The ACL is applied to the interface in the wrong direction.

The implicit deny any any is blocking all access to email.



http://ev-iip.netacad.net/assessment/images/16499.jpg
Refer to the exhibit. An ACL is configured to prevent access by network 192.168.1.0 to network 192.168.2.0, but it is not working properly. What problem is discovered after observing the output of the show running-config command?

The protocol type specified in the ACL should be TCP, not IP.

The source and destination addresses are reversed in the statement.

The ACL is applied to the wrong interface, but the right direction.

The ACL is applied to the wrong interface and the wrong direction.

The permit ip any any statement allows network 192.168.1.0 access.



http://ev-iip.netacad.net/assessment/images/36219.png
Refer to the exhibit. Based on the network diagram and the output shown, which statement is true?

The command was entered on router R1.

The command was entered on router R2.

The command was entered on router R3.

The command could have been entered on either R1 or R2.



http://ev-iip.netacad.net/assessment/images/16337.jpg
Refer to the exhibit. ABC Company is using the 172.16.0.0/18 network. It is standard company practice to use the first 50 addresses for switches and servers and assign the last usable address to the router. The remaining addresses are assigned to the hosts. After assigning the addresses, the network technician tests connectivity from the host above and is not able to ping the router. What could be the problem?

The router was assigned the broadcast address.

The host is not in the same subnet as the switch and router.

The router interface is in the wrong subnet.

The host was assigned a network address.



http://ev-iip.netacad.net/assessment/images/16382.jpg
Refer to the exhibit. Based on the output shown, why is VTP information unable to propagate the network?

One of the two client mode switches must be reconfigured to Transparent mode.

Each switch must be synchronized to the network time server.

The VTP domain names are different.

VTP passwords must be set.

The configuration revision numbers are all the same.



http://ev-iip.netacad.net/assessment/images/17037.jpg
Refer to the exhibit. Based on the output shown, to which IP network should the workstations in the Support department belong?

192.168.1.0

172.16.1.0

172.16.3.0

172.16.5.0



http://ev-iip.netacad.net/assessment/images/16413.jpg
Refer to the exhibit. Users are reporting that they cannot access the Internet. Routers R1 and R2 are configured with RIP version 2 as shown. If R2 receives a packet with a destination address on the Internet, how is the packet routed?

The packet is routed to the ISP router and then to network 10.1.1.0/24.

The packet is routed to the ISP router and then to the Internet.

The packet is routed to R1 and then forwarded out Fa0/0 on R1.

The packet will not be routed because R2 does not have a valid default route.



http://ev-iip.netacad.net/assessment/images/i131839n1v1.jpg
Refer to the exhibit. The network administrator is unable to ping from the console of router R3 to host 10.10.4.63. What is the problem?

RIPv1 does not support VLSM.

Router R2 does not have RIP correctly configured.

Router R3 is missing a network statement for network 10.0.0.0.

There is an addressing problem on the link between routers R2 and R3.


What is important to consider while configuring the subinterfaces of a router when implementing inter-VLAN routing?

The subinterface numbers must match the VLAN ID number.

The physical interface must have an IP address configured.

The IP address of each subinterface must be the default gateway address for each VLAN subnet.

The no shutdown command must be given on each subinterface.


A network at a large building failed, causing a severe disruption in business activities. The problem was eventually detected and resolved by replacing a piece of failed network equipment. Investigation led to the conclusion that a network design problem was the main cause of the disruption. Loss of a single piece of equipment should not have been able to cause such a large problem. What two terms best describe this type of design weakness? (Choose two.)

bottleneck

limited availability

limited scalability

large failure domain

single point of failure

limited staff capabilities


Which two statements describe when a network administrator should perform a network baseline? (Choose two.)

It should be done monthly as a minimum standard.

It should be performed when all switch Cisco IOS versions are upgraded.

It should be done when all network printers are upgraded to a new model.

It should be done when the network is performing at normal activity levels.

It should be done whenever an SLA has been signed with a new service provider.



http://ev-iip.netacad.net/assessment/images/17045.jpg
Refer to the exhibit. A network administrator is troubleshooting a problem. No users are able to access the 10.10.2.0/24 network, but are able to access all other networks. Assuming R3 is configured correctly and based on the output shown, what is most likely the problem?

There is congestion on the 10.10.2.0 network.

The EIGRP process number on R2 is incorrect.

The Fa0/0 interface on R2 is shut down.

The Fa0/0 interface on R2 has an incorrect IP address or subnet mask.



http://ev-iip.netacad.net/assessment/images/i121302n1v1.jpg
Refer to the exhibit. Both routers are configured using RIPv1. Both routers are sending updates about the directly connected routes. R1 can successfully ping the serial interface of R2. The routing table on R1 does not contain any dynamically learned routes from R2, and the routing table on R2 shows no dynamically learned routes from R1. What is the problem?

Subnetting is not supported by RIPv1.

One of the routers needs a clock rate on the serial interface.

The serial link between the two routers is unstable.

VLSM is not supported by RIPv1.


The enterprise mail server software recently went through a minor update. A network administrator notices an excessive amount of traffic between a database server and the newly updated mail server, compared to the baseline data. What is the first action the administrator should do to investigate the problem?

Wait to see if the recent update will stabilize after a while.

Redo the baseline data to include the minor upgrade.

Check the log to see what software components are producing the excess traffic.

Check for viruses and spyware on the database server.



http://ev-iip.netacad.net/assessment/images/18896.jpg
Although all networks are reachable, the network administrator notices abnormal routing behavior after configuring OSPF on each router. According to the partial output from the debug ip ospf events command, which statement is true about the contents of the routing table in RA?

It will show network 172.16.3.0 learned from RB.

It will show network 172.16.3.0 learned from RC.

It will show two equal routes to network 192.168.1.4/30.

It will show two equal routes to network 192.168.1.8/30.



http://ev-iip.netacad.net/assessment/images/18282.jpg
Refer to the exhibit. The network administrator is troubleshooting the connectivity issue between RA and RB. According to the partial configuration, what is the cause of the problem?

password mismatch for PPP authentication

username mismatch for PPP authentication

encapsulation method mismatch for PPP authentication

authentication method mismatch for PPP authentication



http://ev-iip.netacad.net/assessment/images/i131840n1v1.jpg
Refer to the exhibit. The network administrator correctly configures RTA to perform inter-VLAN routing. Using the show vlan command, the administrator verifies that port Fast Ethernet 0/4 is the first available port in the default VLAN on SW2. The administrator connects RTA to port 0/4 on SW2, but inter-VLAN routing does not work. What could be the possible cause of the problem with the SW2 configuration?

Port 0/4 is not active.

Port 0/4 must be a member of VLAN1.

Port 0/4 is configured in access mode.

Port 0/4 is configured as a trunk port.

Read More …

Which wildcard mask would match the host range for the subnet 192.16.5.32 /27?

0.0.0.32

0.0.0.63

0.0.63.255

0.0.0.31



http://ev-iip.netacad.net/assessment/images/7985.jpg
Refer to the exhibit. The new security policy for the company allows all IP traffic from the Engineering LAN to the Internet while only web traffic from the Marketing LAN is allowed to the Internet. Which ACL can be applied in the outbound direction of Serial 0/1 on the Marketing router to implement the new security policy?

access-list 197 permit ip 192.0.2.0 0.0.0.255 any
access-list 197 permit ip 198.18.112.0 0.0.0.255 any eq www

access-list 165 permit ip 192.0.2.0 0.0.0.255 any
access-list 165 permit tcp 198.18.112.0 0.0.0.255 any eq www
access-list 165 permit ip any any

access-list 137 permit ip 192.0.2.0 0.0.0.255 any
access-list 137 permit tcp 198.18.112.0 0.0.0.255 any eq www

access-list 89 permit 192.0.2.0 0.0.0.255 any
access-list 89 permit tcp 198.18.112.0 0.0.0.255 any eq www



http://ev-iip.netacad.net/assessment/images/i131838n1v1.jpg
Refer to the exhibit. Hosts from 172.19.123.0 are not allowed access to 192.0.2.0 but should be able to access the Internet. Which set of commands will create a standard ACL that will apply to traffic outbound on the Shannon router interface Fa0/0 implementing this security?

access-list 142 deny ip 172.19.123.0 0.0.0.255 192.0.2.0 0.0.0.255
access-list 142 permit ip any any

access-list 56 deny 172.19.123.0 0.0.0.255
access-list 56 permit any

access-list 61 deny 172.19.123.0 0.0.0.0
access-list 61 permit any

access-list 87 deny 192.0.2.0 0.0.0.255
access-list 87 permit any



http://ev-iip.netacad.net/assessment/images/18895.jpg
Refer to the exhibit. An administrator notes a significant increase in the amount of traffic that is entering the network from the ISP. The administrator clears the counters. After a few minutes, the administrator again checks the access-list table. What can be concluded from the output that is shown?

A small amount of HTTP traffic is an indication that the web server was not configured correctly.

A larger amount of POP3 traffic, compared with SMTP traffic, indicates that there are more POP3 e-mail clients than SMTP clients in the enterprise.

A large amount of ICMP traffic is being denied at the interface, which can be an indication of a DoS attack.

A larger amount of e-mail traffic, compared with web traffic, is an indication that attackers mainly targeted the e-mail server.



http://ev-iip.netacad.net/assessment/images/16623.jpg
Refer to the exhibit. A network administrator needs to add the command deny ip 10.0.0.0 0.255.255.255 any log to R3. After adding the command, the administrator verifies the change using the show access-list command. What sequence number does the new entry have?

0

10, and all other items are shifted down to the next sequence number

50

60


A security administrator wants to secure password exchanges on the vty lines on all routers in the enterprise. What option should be implemented to ensure that passwords are not sent in clear text across the public network?

Use Telnet with an authentication server to ensure effective authentication.

Apply an access list on the router interfaces to allow only authorized computers.

Apply an access list on the vty line to allow only authorized computers.

Use only Secure Shell (SSH) on the vty lines.

What is the best option an administrator can choose to ensure that ICMP DoS attacks from the outside are contained as much as possible, without restricting connectivity tests initiated from the inside out?

Create an access list that permits only echo reply and destination unreachable packets from the outside.

Create an access list that denies all TCP traffic coming from the outside.

Permit TCP traffic from only known external sources.

Create an access list with the established keyword at the end of the line.


Traffic from the 64.104.48.0 to 64.104.63.255 range must be denied access to the network. What wildcard mask would the network administrator configure in the access list to cover this range?

0.0.15.255

0.0.47.255

0.0.63.255

255.255.240.0


A network administrator enters the following commands on router RTB.

RTB(config)# access-list 4 deny 192.168.20.16 0.0.0.15
RTB(config)# access-list 4 permit any
RTB(config)# interface serial 0/0/0
RTB(config-if)# ip access-group 4 in

Which addresses are blocked from entering RTB?

192.168.20.17 to 192.168.20.31

192.168.20.16 to 192.168.20.31

192.168.20.16 to 192.168.20.32

192.168.20.17 to 192.168.20.32


Why are inbound ACLs more efficient for the router than outbound ACLs?

Inbound ACLs deny packets before routing lookups are required.

Inbound ACL operation requires less network bandwidth than outbound.

Inbound ACLs permit or deny packets to LANs, which are typically more efficient than WANs.

Inbound ACLs are applied to Ethernet interfaces, while outbound ACLs are applied to slower serial interfaces.


http://ev-iip.netacad.net/assessment/images/17036.jpg
Refer to the exhibit. The network administrator of a company needs to configure the router RTA to allow its business partner (Partner A) to access the web server located in the internal network. The web server is assigned a private IP address, and a static NAT is configured on the router for its public IP address. Finally, the administrator adds the ACL. However, Partner A is denied access to the web server. What is the cause of the problem?

Port 80 should be specified in the ACL.

The public IP address of the server, 209.165.201.5, should be specified as the destination.

The ACL should be applied on the s0/0 outbound interface.

The source address should be specified as 198.133.219.0 255.255.255.0 in the ACL.


ACL logging generates what type of syslog message?

unstable network

warning

informational

critical situation



http://ev-iip.netacad.net/assessment/images/17001.jpg
Refer to the exhibit. Company policy for the network that is shown indicates the following guidelines:

1) All hosts on the 192.168.3.0/24 network, except host 192.168.3.77, should be able to reach the 192.168.2.0/24 network.
2) All hosts on the 192.168.3.0/24 network should be able to reach the 192.168.1.0/24 network.
3) All other traffic originating from the 192.168.3.0 network should be denied.

Which set of ACL statements meets the stated requirements when they are applied to the Fa0/0 interface of router R2 in the inbound direction?

access-list 101 deny ip any any
access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255

access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255

access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255

access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255
access-list 101 permit ip any any

access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.255.255


Which ACL statement permits host 10.220.158.10 access to the web server 192.168.3.224?

access-list 101 permit tcp host 10.220.158.10 eq 80 host 192.168.3.224

access-list 101 permit tcp 10.220.158.10 0.0.0.0 host 192.168.3.224 0.0.0.0 eq 80

access-list 101 permit host 10.220.158.10 0.0.0.0 host 192.168.3.224 0.0.0.0 eq 80

access-list 101 permit tcp 10.220.158.10 0.0.0.0 host 192.168.3.224 eq 80


Which two statements are true about standard and extended ACLs? (Choose two.)

Extended ACLs filter only on source addresses and must be placed near the destination address.

Standard ACLs are usually placed so that all packets go through the network and are filtered at the destination.

Standard ACLs are used when filtering complex requirements, such as specific protocols.

Extended ACLs filter with many possible factors, and are placed near the source address to reduce traffic across the network.

Properly designed ACLs have a negative impact on network availability and performance.



http://ev-iip.netacad.net/assessment/images/17865.jpg
Refer to the exhibit. What happens if the network administrator issues the exhibited commands when an ACL named Managers already exists on the router?

The new commands overwrite the current Managers ACL.

The new commands are added to the end of the current Managers ACL.

The new commands are added to the beginning of the current Managers ACL.

An error appears stating that the ACL already exists.


What effect does the command reload in 30 have when entered into a router?

If a router process freezes, the router reloads automatically.

If a packet from a denied source attempts to enter an interface where an ACL is applied, the router reloads in 30 minutes.

If a remote connection lasts for longer than 30 minutes, the router forces the remote user off.

A router automatically reloads in 30 minutes.



http://ev-iip.netacad.net/assessment/images/18847.jpg
Refer to the exhibit. Which two host addresses from the 172.16.31.64/27 subnet are able to telnet into the router to make configuration changes? (Choose two.)

172.16.31.33

172.16.31.64

172.16.31.77

172.16.31.92

172.16.31.95

172.16.31.96


ACLs are used primarily to filter traffic. What are two additional uses of ACLs? (Choose two.)

specifying source addresses for authentication

specifying internal hosts for NAT

identifying traffic for QoS

reorganizing traffic into VLANs

filtering VTP packets



http://ev-iip.netacad.net/assessment/images/17207.jpg
Refer to the exhibit. A network administrator needs to configure an access list that will allow the management host with an IP address of 192.168.10.25/24 to be the only host to remotely access and configure router RTA. All vty and enable passwords are configured on the router. Which group of commands will accomplish this task?

Router(config)# access-list 101 permit tcp any 192.168.10.25 0.0.0.0 eq telnet
Router(config)# access-list 101 deny ip any any
Router(config)# int s0/0
Router(config-if)# ip access-group 101 in
Router(config-if)# int fa0/0
Router(config-if)#ip access-group 101 in

Router(config)# access-list 10 permit 192.168.10.25 eq telnet
Router(config)# access-list 10 deny any
Router(config)# line vty 0 4
Router(config-line)#access-group 10 in

Router(config)# access-list 86 permit host 192.168.10.25
Router(config)# line vty 0 4
Router(config-line)# access-class 86 in

Router(config)# access-list 125 permit tcp 192.168.10.25 any eq telnet
Router(config)# access-list 125 deny ip any any
Router(config)# int s0/0
Router(config-if)# ip access-group 125 in


What are two possible uses of access control lists in an enterprise network? (Choose two.)

limiting debug outputs

reducing the processing load on routers

allowing Layer 2 traffic to be filtered by a router

controlling virtual terminal access to routers

controlling the physical status of router interfaces



http://ev-iip.netacad.net/assessment/images/19141.jpg
Refer to the exhibit. The access list has been applied inbound to interface S0/0/0 on R2. Which two traffic types will reach the server?(Choose two.)

IP traffic from host 10.1.1.20

web traffic from HostA

IP traffic from host 192.168.1.1

UDP traffic from network 10.1.2.0

HTTP traffic from network 10.1.1.0


If the established keyword is appended to a line in an extended ACL, what will determine if packets are sent between the source and destination specified by the line?

if authentication is enabled via CHAP

if MD5 encryption algorithm is in effect

if a TCP three-way handshake was successfully completed

if HTML packets are specifically allowed within the ACL
Read More …