CCNP Switch Flashcards
Refer to the exhibit.
Why are users from VLAN 100 unable to ping users on VLAN 200?
Trunking must be enabled on Fa0/1.
Which statement is true about RSTP topology changes?
Only non-edge ports moving to the forwarding state generate a TC BPDU
Refer to the exhibit.
The link between switch SW1 and switch SW2 is configured as a trunk, but the trunk failed to
establish connectivity between the switches. Based on the configurations and the error messages
received on the console of SW1, what is the cause of the problem?
The two ends of the trunk have different native VLAN configurations.
When you create a network implementation for a VLAN solution, what is one procedure that you
should include in your plan?
Perform an incremental implementation of components.
You have just created a new VLAN on your network. What is one step that you should include in
your VLAN-based implementation and verification plan?
Verify that the VLAN was added on all switches with the use of the show vlan command.
Which two statements describe a routed switch port on a multilayer switch? (Choose two.)
The port is not associated with any VLAN.
The routed switch port is used when a switch has only one port per VLAN or subnet.
On a multilayer Cisco Catalyst switch, which interface command is used to convert a Layer 3
interface to a Layer 2 interface?
switchport
Refer to the exhibit.
All network links are FastEthernet. Although there is complete connectivity throughout the network,
Front Line users report that they experience slower network performance when accessing the
server farm than the Reception office experiences. Which two statements are true? (Choose two.)
Changing the bridge priority of S1 to 36864 would improve network performance.
Changing the bridge priority of S3 to 4096 would improve network performance.
Refer to the exhibit.
#interface FastEthernet 0/13 #channel-group 1 mode desirable
What does the command channel-group 1 mode desirable do?
enables PAgP unconditionally
Refer to the exhibit.
Which two statements are true? (Choose two.)
Interface gigabitethernet 0/1 does not appear in the show vlan output because it is configured
as a trunk interface.
Traffic on VLAN 2 that is sent out gigabitethernet 0/1 will have an 802.1q header applied.
Refer to the exhibit and the partial configuration of switch SW_A and SW_B.
STP is configured on all switches in the network. SW_B receives this error message on the
console port:
00:06:34: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on FastEthernet0/5 (not
half duplex), with SW_A FastEthernet0/4 (half duplex), with TBA05071417 (Cat6K-B) 0/4 (half
duplex).
What is the possible outcome of the problem?
Interface Fa 0/6 on switch SW_B will transition to a forwarding state and create a bridging loop.
What is the result of entering the command port-channel load-balance src-dst-ip on an
EtherChannel link?
Packets are distributed across the ports in the channel based on both the source and
destination IP addresses
Which statement about the Port Aggregation Protocol is true?
Configuration changes made on the port-channel interface apply to all physical ports assigned
to the port-channel interface
Refer to the Exhibit.
For the configuration shown, which is the recommended method of providing interVLAN routing?
configure SVIs on the distribution switches
Under what circumstances should an administrator prefer local VLANs over end-to-end VLANs?
Eighty percent of traffic on the network is destined for Internet sites.
What are some virtues of implementing end-to-end VLANs? (Choose two)
Users are grouped into VLANs independent of a physical location
Each VLAN has a common set of security and resource requirements for all members.
Which of the following statements is true about the 80/20 rule (Select all that apply)?
no more than 20 percent of the network traffic should be able to move across a backbone
80 percent of the traffic on a network segment should be local
What are three results of issuing the switchport host command? (Choose three.) Select 3
response(s).
enables PortFast
disables trunking
disables EtherChannel
Given the configurations on SwitchA and SwitchB, which statement is true?
The link is not a trunk link so both interfaces must be on the same VLAN and only that single
VLAN is transmitted across the link.
Given the configurations on SwitchA and SwitchB, which two statements are true? (Choose two.)
The trunk is currently using the 802.1q trunking protocol.
By default, all VLANs will be transmitted across this trunk.
A network administrator enters the following switch commands:
Switch(config)#interface range fa0/0-5
Switch(config-if-range)#switchport access vlan 2
What is the result of these commands?
One new vlan is created with the vlan number 2
When a VLAN port configured as a trunk receives an untagged frame, what will happen?
The frame will be processed as a native VLAN frame
By default, which statement is correct when an IEEE 802.1Q trunk port receives an untagged
frame?
The frame is considered in the native VLAN and forwarded to the ports associated with that
VLAN.
Refer to the exhibit.
The ping command will be successful without any further configuration changes.
Refer to the exhibit. VLAN 1 and VLAN 2 are configured on the trunked links between Switch A
and Switch B. Port Fa 0/2 on Switch B is currently in a blocking state for both VLANs. What
should be done to load balance VLAN traffic between Switch A and Switch B?
Lower the port priority for VLAN 1 on port 0/2 for Switch A
Refer to the exhibit.
Devices connected to interfaces FastEthernet3/1 and FastEthernet3/2 are sending BPDUs with
a superior root bridge parameter and no traffic is forwarded across the ports. After the inaccurate
BPDUs have been stopped, the interfaces automatically recover and resume normal operation
What are three results of issuing the switchport host command? (Choose three.)
disables EtherChannel
enables PortFast
disables trunking
Refer to the exhibit.
All links in this network are layer 2, fast Ethernet 100 Mb/s and operating as trunks. After a failure,
the link between ASW-1 and DSW-1 has incorrectly come back up at 10Mb/s although it is
connected.
Which one of the following will occur as a result of this failure?
ASW-1 will block Fa0/23 in order to maintain the shortest path to the root bridge DSW-1
What is the result of entering the command spanning-tree loopguard default?
The command changes the status of loop guard from the default of disabled to enabled.
What is the effect of applying the switchport trunk encapsulation dot1q command to a port on a
Cisco Catalyst switch?
The interface supports the reception of tagged and untagged traffic.
Refer to the exhibit.
Switch S1 has been configured with the command spanning-tree mode rapid-pvst. Switch S3 has
been configured with the command spanning-tree mode mst. Switch S2 is running the IEEE
802.1D instance of Spanning Tree. What is the result?
Switches S1, S2, and S3 can pass traffic between themselves.
Which statement about 802.1Q trunking is true?
In 802.1Q trunking, all VLAN packets are tagged on the trunk link, except the native VLAN
Refer to the exhibit.
Which three statements are true? (Choose three.)
A trunk link will be formed.
The native VLAN for switch B is VLAN 1.
DTP packets are sent from switch B
The Company LAN is becoming saturated with broadcasts and multicast traffic. What could you
do to help a network with many multicasts and broadcasts?
Creating smaller broadcast domains by implementing VLANs
You are the network administrator tasked with designing a switching solution for the Company
network. Which of the following statements describing trunk links are INCORRECT? (Select all
that apply)
The trunk link belongs to a specific VLAN.
Multiple trunk links are used to connect multiple end user devices.
A trunk link only supports native VLAN.
Trunk links use 802.10 to identify a VLAN.
Which of the following specifications is a companion to the IEEE 802.1w Rapid Spanning Tree
Protocol (RSTP) algorithm, and warrants the use multiple spanning-trees?
IEEE 802.1s (MST)
Which of the following specification will allow you to: associate VLAN groups to STP instances so
you can provide multiple forwarding paths for data traffic and enable load balancing?
IEEE 802.1s (MST)
Which two statements correctly describe VTP? (Choose two.)
Transparent mode always has a configuration revision number of 0.
Client mode synchronizes its VLAN database from VTP advertisements.
Which two DTP modes permit trunking between directly connected switches? (Choose two.)
dynamic desirable (VTP domain A) to dynamic desirable (VTP domain A)
nonegotiate (VTP domain A) to nonegotiate (VTP domain B)
Which two RSTP port roles include the port as part of the active topology? (Choose two.)
root
designated
Which two statements correctly describe characteristics of the PortFast feature? (Choose two.)
PortFast can also be configured on trunk ports
PortFast is used for STP and RSTP host ports
Which statement correctly describes the Cisco implementation of RSTP?
RSTP is enabled globally and uses existing STP configuration.
You are the administrator of a switch and currently all host-connected ports are configured with the
portfast command. You have received a new directive from your manager that states that, in the
future, any host-connected port that receives a BPDU should automatically disable PortFast and
begin transmitting BPDUs. Which command will support this new requirement?
Switch(config)#spanning-tree portfast bpdufilter default
A port in a redundant topology is currently in the blocking state and is not receiving BPDUs. To
ensure that this port does not erroneously transition to the forwarding state, which command
should be configured?
Switch(config)#spanning-tree loopguard default
Which command can be issued without interfering with the operation of loop guard?
Switch(config-if)#switchport mode trunk
Which statement is a characteristic of multi-VLAN access ports?
The port hardware is set as an 802.1Q trunk.
Which two statements are true about recommended practices that are to be used in a local VLAN
solution design where layer 2 traffic is to be kept to a minimum? (Choose two.)
Routing may be performed at all layers but is most commonly done at the core and distribution
layers.
VLANs should be local to a switch.
Refer to the exhibit.
BPDUGuard is enabled on both ports of SwitchA. Initially, LinkA is connected and forwarding
traffic. A new LinkB is then attached between SwitchA and HubA. Which two statements about the
possible result of attaching the second link are true? (Choose two.)
One or both of the two switch ports attached to the hub goes into the err-disabled state when a
BPDU is received
A heavy traffic load could cause BPDU transmissions to be blocked and leave a switching loop.
What action should a network administrator take to enable VTP pruning on an entire management
domain?
Enable VTP pruning on a VTP server in the management domain
How does VTP pruning enhance network bandwidth?
by reducing unnecessary flooding of traffic to inactive VLANs
Refer to the exhibit.
The network operations center has received a call stating that users in VLAN 107 are unable to
access resources through router 1. What is the cause of this problem?
VTP is pruning VLAN 107.
What two things occur when an RSTP edge port receives a BPDU? (Choose two.)
The switch generates a Topology Change Notification BPDU.
The port becomes a normal STP switch port
What is the effect of configuring the following command on a switch?
Switch(config) # spanning-tree portfast bpdufilter default
If BPDUs are received by a port configured for PortFast, then PortFast is disabled and the
BPDUs are processed normally.
Which statement correctly describes enabling BPDU guard on an access port that is also enabled
for PortFast?
If the port receives a BPDU, it is placed into the error-disable state.
Which three items are configured in MST configuration submode? (Select three)
Region name
Configuration revision number
VLAN instance map
By default, all VLANs will belong to which MST instance when using Multiple STP?
MST00
Which MST configuration statement is correct?
MST configurations can be propagated to other switches using VTP.
Which trunking protocol inserts a four byte tag into the Ethernet frame and recalculates the CRC
value?
802.1Q
Which description correctly describes a MAC address flooding attack?
Frames with unique, invalid source MAC addresses flood the switch and exhaust CAM table
space. The result is that new entries cannot be inserted because of the exhausted CAM table
space, and traffic is subsequently flooded out all ports.
Refer to the exhibit.
An attacker is connected to interface Fa0/11 on switch A-SW2 and attempts to establish a DHCP
server for a man-in-middle attack. Which recommendation, if followed, would mitigate this type of
attack?
All switch ports connecting to hosts in the Building Access block should be configured as DHCP
untrusted ports.
Refer to the exhibit.
The switch ports 3/1 and 3/2 are defined as secondary VLAN isolated ports. The ports
connecting to the two firewalls are defined as primary VLAN promiscuous ports.
What does the command udld reset accomplish?
resets all UDLD enabled ports that have been shutdown
Refer to the exhibit.
Dynamic ARP Inspection is enabled only on switch SW_A. Host_A and Host_B acquire their IP
addresses from the DHCP server connected to switch SW_A. What would the outcome be if
Host_B initiated an ARP spoof attack toward Host_A?
The spoof packets are not inspected at the ingress port of switch SW_A and are permitted.
Which statement is true about Layer 2 security threats?
MAC spoofing attacks allow an attacking device to receive frames intended for a different
network host.
On a Company switch named R1 you configure the following:
ip arp inspection vlan 10-12, 15
What is the purpose of this global configuration command made on R1?
Intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings
Refer to the exhibit.
Which two of the following statements are true? (Choose two)
DHCP snooping is enabled for a single Vlan
Option 82 is enabled for a VLAN 155
Refer to the exhibit.
DHCP snooping is enabled for selected VLANs to provide security on the network. How do the
switch ports handle the DHCP messages?
A DHCP packet received on ports Fa2/1 and Fa2/2 is forwarded without being tested
Refer to the exhibit.
From the configuration shown, what can be determined?
The remaining secure MAC addresses are learned dynamically, converted to sticky secure
MAC addresses, and added to the running configuration.
Refer to the exhibit
What happens when one more user is connected to interface FastEthernet 5/1?
The interface is placed into the error-disabled state immediately, and an SNMP trap notification
is sent.
Refer to the exhibit.
What happens to traffic within VLAN 14 with a source address of 172.16.10.5?
The traffic is dropped
Refer to the exhibit. Which statement is true about the show running-config output?
Interface FastEthernet0/6 is configured for port-based authentication.
Refer to the exhibit.
The show port-security interface fa0/1 command was issued on switch SW1. Given the output
that was generated, which two security statement are true? (Choose two.)
-Interface FastEthernet 0/1 was configured with the switchport port-security protect command.
-When the number of secure MAC addresses reaches 10, packets from unknown MAC
addresses will be dropped.
Refer to the exhibit.
Which statement about the command output is true?
The port is operational and has reached its configured maximum allowed number of MAC
addresses.
Refer to the exhibit.
Which statement is true?
All VLAN traffic in VLANs 5-10 that match access list ABC is forwarded, and all other traffic is
dropped.
Refer to the exhibit.
What can be concluded about VLANs 200 and 202?
VLAN 202 carries traffic from promiscuous ports to isolated, community, and other promiscuous
ports in the same VLAN. VLAN 200 carries traffic from isolated ports to a promiscuous port.
Refer to the exhibit.
Which statement about the private VLAN configuration is true?
VLAN 502 is a secondary VLAN.
Refer to the exhibit.
Which two statements about this Layer 3 security configuration example are true? (Choose two.)
Source IP and MAC filtering on VLANs 10 and 11 will occur.
IP Source Guard is enabled
Refer to the exhibit.
You have configured an interface to be an SVI for Layer 3 routing capabilities. Assuming that all
VLANs have been correctly configured, what can be determined?
The configured port is excluded in the calculation of the status of the SVI.
Refer to the exhibit.
Which statement is true?
SVI VLAN 30 connects directly to the 10.1.30.0/24 network due to a valid glean adjacency
show eigrp neighbors
Refer to exhibit as:
EIGRP-IPV4:(20) neighbors for process 20
Which statement about the EIGRP routing being performed by the switch is true?
The switch has not established any neighbor relationships. Further network testing and
troubleshooting must be performed to determine the cause of the problem.
Refer to the exhibit, which is from a Cisco Catalyst 3560 Series Switch.
Which statement about the Layer 3 routing functionality of the interface is true?
The interface is configured correctly for Layer 3 routing capabilities
Refer to the exhibit.
Host A and Host B are connected to the Cisco Catalyst 3550 switch and have been assigned to
their respective VLANs. The rest of the 3550 configuration is the default configuration. Host A is
able to ping its default gateway, 10.10.10.1, but is unable to ping Host B. Given the output in the
exhibit, which statement is true?
The global configuration command ip routing must be configured on the SW1 switch.
Which three statements about routed ports on a multilayer switch are true? (Choose three.)
A routed port takes an IP address assignment.
A routed port can be configured with routing protocols.
A routed port is a physical interface on the multilayer switch.
This is a drag and drop question which is about the correct sequence of steps that a wireless client
takes during the process of association with an access point (AP). Drag the items to the proper
locations.
Refer to the exhibit.
Assume that Switch_A is active for the standby group and the standby device has only the default
HSRP configuration. Which statement is true?
If port Fa1/1 on Switch_A goes down, the new priority value for the switch would be 190.
Refer to the exhibit.
GLBP has been configured on the network. When the interface serial0/0/1 on router R1 goes
down, how is the traffic coming from Host1 handled?
The traffic coming from Host1 and Host2 is forwarded through router R2 with no disruption
Refer to the exhibit and the partial configuration on routers R1 and R2.
HSRP is configured on the network to provide network redundancy for the IP traffic. The network
administrator noticed that R2 does not become active when the R1 serial0 interface goes down.
What should be changed in the configuration to fix the problem?
The Serial0 interface on router R1 should be configured with a decrement value of 20
Refer to the exhibit.
Which statement best describes first-hop redundancy protocol status?
HSRP is configured for group 11.
Refer to the exhibit.
What can be determined about the HSRP relationship from the displayed debug output?
The preempt feature is not enabled on the 172.16.11.111 router.
Refer to the exhibit.
Based on the debug output, which three statements about HSRP are true? (Choose three.)
The final active router is the router with IP address 172.16.11.111.
The router with IP address 172.16.11.111 has preempt configured.
The IP address 172.16.11.115 is the virtual HSRP IP address.
Refer to the exhibit.
Which two problems are the most likely cause of the exhibited output? (Choose two.)
HSRP misconfiguration
physical layer issues
Refer to the exhibit.
Both routers are configured for the GLBP. Which statement is true?
The default gateway address of each host should be set to the virtual IP address.
Match the HSRP states on the left with the correct definition on the right.
Which command will ensure that External_B will be the primary router for traffic using the gateway
address of 172.16.15.20?
On External_A add the command standby 1 priority 80
Observe the topology in the exhibit. HSRP is configured between RTB and RTC with RTC as the
active router. SW2 is configured as the root bridge for the Spanning Tree Protocol. What will
happen if the serial connection on RTC is down?
RTB and RTC will flap between active and standby because the timers for STP are greater than
the timers for HSRP.
Refer to the exhibit. What statement is true based upon the configuration of router R1 and router
R2?
Router R1 will become the active virtual gateway.
Refer to the exhibit. Routers R1 and R2 are configured in an HSRP group to provide redundancy
for the users on Network A. The T1 link between R1 and Network B has failed. How will HSRP
respond to the failure?
R2 will assume the role of active router and will use its T1 link to forward the traffic to Network
B.
Refer to the exhibit. HSRP has been configured and Link A is the primary route to router R4.
When Link A fails, router R2 (Link B) becomes the active router. Which router will assume the
active role when Link A becomes operational again?
The primary router R1 will reassume the active role when it comes back online.
Refer to the exhibit. Which two sets of procedures are best practices for Layer 2 and 3 failover
alignment? (Choose two.)
Cisco 642-813 Exam
“
-Configure the D-SW1 switch as the active HSRP router and the STP root for VLANs 11 and
110. Configure the D-SW2 switch as the active HSRP router and the STP root for VLANs 12 and
120.
-Configure the D-SW1 switch as the standby HSRP router and the backup STP root for VLANs
12 and 120. Configure the D-SW2 switch as the standby HSRP router and the backup STP root
for VLANs 11 and 110.
Which four statements about this GLBP topology are true? (Choose four.)
-Router A is responsible for answering ARP requests sent to the virtual IP address.
-If router A becomes unavailable, router B forwards packets sent to the virtual MAC address of
router A.
-If another router is added to this GLBP group, there would be two backup AVGs.
-Router A alternately responds to ARP requests with different virtual MAC addresses.
Which VRRP statement about the roles of the master virtual router and the backup virtual router is
true?
Router A is the master virtual router, and Router B is the backup virtual router. When Router A
fails, Router B will become the master virtual router. When Router A recovers, it will regain the
master virtual router role.
Host A has sent an ARP message to the default gateway IP address 10.10.10.1. Which statement
is true?
DSw2 replies with the MAC address of the next AVF
