Practice Questions Flashcards
- Which two statements correctly describe ARP? (Choose two.)
A. resolves IP addresses to MAC addresses
B. resolves MAC addresses to IP addresses
C. has an expiration period for entries in the ARP table, usually 300 seconds for PCs
D. is turned off by default on Cisco switches
A and C
3. TCP is best for which two applications? (Choose two.) email uploading downloading video streaming
Email and downloading
Which CLI prompt indicates the correct way to set the port duplex operation to full? SwitchX(config-if)#duplex half SwitchX>duplex full SwitchX(config-if)#duplex full SwitchX(config)#full duplex
SwitchX(config-if)#duplex full
Which three IPv4 header fields were present in the IPv4 header but not in the IPv6 header? (Choosethree.) IHL type of service header checksum flags flow label
IHL
header checksum
flags
The extension headers serve which important function in IPv6 networks?
Carry optional internet layer information.
CDP neighbor discovery is used for which two of these functions? (Choose two.)
a. discover Layer 2 addresses of on-link IPv6 peers
b. discover the global unicast address of the other host on the subnet
c. discover the Layer 2 address of the other host on the subnet
d. discover the link-local IPv6 addresses of on-link neighbors
a and c
What are three possible benefits of multi area design in OSPF?
- reduced amount of LSA flooding
- reduced number of SPF calculations
- reduced size of the routing table
Which two commands are required for a basic OSPF configuration? (Choose two.)
a. network ip-address mask area area-id
b. network ip-address wildcard-mask area area-id
c. router ospf process-id
d. ip router ospf
b and c
Show connected OSPF devices:
show IP OSPF neighbor
What is the main difference between VRRP and HSRP?
HSRP is Cisco proprietary, VRRP is industry standard
Which management protocol could you use to discover which host generates the highest volume of traffic?
NetFlow
A system administrator wants to configure an IPv4 standard numbered ACL that will allow only packets from hosts on subnet 10.1.1.0/24 to enter an interface on a router. Which ACL configuration accomplishes this goal?
A. access-list 1 permit 10.1.1.0
B. access-list 1 permit 10.1.1.0 host
C. access-list 99 permit 10.1.1.0 0.0.0.255
D. access-list 100 permit 10.1.1.0 0.0.0.255
C: for a standard IP ACL, #’s are 1-99 and 1300-1999 (extended = 100-199 and 2000-2699)
Which command would you use to identify the current IPv6 paths to remote networks stored on a router?
show ipv6 route
Which command would you use to investigate which interfaces are enabled for the EIGRP routingprocess?
show ip interfaces brief
Which two interfaces will have the lowest OSPF cost by default? Fast Ethernet T1 Gigabit Ethernet E1
FastEthernet
Gigabit Ethernet
Which characteristic of Frame Relay can cause reachability issues when a single interface is used tointerconnect multiple sites? intermittent point-to-point error-correcting NBMA
NBMA
Which VC status on a Cisco router indicates that the local connection to the Frame Relay switch isworking, but the remote router connection to the Frame Relay switch is not working? LMI state active state deleted state inactive state
Inactive state
What are two types of VPNs? (Choose two.) remote-access remote-to-site remote-to-remote site-to-site
Remote access and site-to-site
Which command syntax correctly configures a default route?
ip default-route 172.16.0.1
ip default-route 0.0.0.0 0.0.0.0 172.16.0.1
ip route 0.0.0.0 0.0.0.0 172.16.0.1
ip route 172.16.0.1
ip route 0.0.0.0 0.0.0.0 172.16.0.1
Which command is used to configure the static IPv6 default route?
ipv6 route ::/0 interface next_hop
ipv6 route default interface next_hop
ipv6 route 0.0.0.0/0 interface next_hop
ip route 0.0.0.0/0 interface next_hop
ipv6 route ::/0 interface next_hop
Which command correctly assigns a subinterface to VLAN 50 using 802.1Q trunking?
Router(config)# encapsulation 50 dot1Q
Router(config)# encapsulation trunk dot1Q 50
Router(config-if)# encapsulation dot1Q 50
Router(config-if)# encapsulation 802.1Q vlan 50
Router(config-if)# encapsulation dot1Q 50
Which two statements correctly describe NAT? (Choose two.)
A. The total number of internal addresses that NAT can translate into one external address is 128.
B. PAT uses unique source port numbers on the inside global IPv4 address to distinguish between translations.
C. Static, dynamic, and automatic are three NAT types.
D. Private users can access the Internet by sharing one or more public IP addresses.
B and D
Create a DHCP pool named testpool that assigns addresses on the 172.94.0.0 network
#ip DHCP pool testpool (DHCP-config)#network 172.94.0.0 /16
During DHCP a configuration, assign a DNS server with IP address 206.67.222.222
Router1(dhcp-config)#dns-server 206.67.222.223
Create a nat pool called natpool that translates inside addresses to addresses 172.94.1.10 - .20 with a /24 mask
ip nat pool natpool 172.94.1.10 172.94.1.20 255.255.255.0 (or “prefix 24”)
What is an ICMP message with a 0 in the type field? When would a host receive this message?
An echo reply. When ping or traceroute has been used to test connectivity.
What is an ICMP type 4 message? Why might this message be sent and what does this message do?
A source quench message. It’s sent as a result of network congestion - if a gateway’s buffer is full and it’s being forced to discard packets as a result. It tells the source to reduce the rate at which traffic is being sent.
Source quench messages are now deprecated
What is an ICMP message with a 5 in the type field? When might this message be sent?
A redirect message. When there’s another gateway (on the same network as the source host) that’s closer to the destination.
What is a ICMP message with a 3 in the type field? When might this message be sent?
A destination unreachable message. If a destination has a distance of “infinity” ( > the maximum # of hops) in the gateway’s routing table or if a link has gone down, rendering the destination unreachable.
Compare and contrast the following aspects of TACACS+ and RADIUS:
- protocol used (include possible port #’s)
- portion of the packet encrypted
TACACS+ uses TCP, port 49
RADIUS uses UDP, ports 1656 - 1657 and 1812 - 1813
TACACS+ encrypts the entire packet
RADIUS only encrypts the password
If you want to encapsulate all the passwords - current and future) associated with your cisco device, what command should you use?
service password-encryption
What is a virtual circuit?
A means of transporting data over a packet-switched computer network in such a way that it appears as though there is a dedicated physical layer link between the source and destination end systems of this data (even though there is not; the endpoints could be states or countries away from each other and connected by a public medium like the Internet)
What is a Non-broadcast multiple-access network (NBMA)?
A computer network to which multiple hosts are attached, But data is transmitted only directly from one computer to another single host over a virtual circuit or across a switched fabric. NBMA networks do support multicast or broadcast traffic manually (pseudo-broadcasts). Some common examples of non-broadcast network technologies include asynchronous transfer mode (ATM), Frame Relay, X.25 and home powerline networking.
You have downloaded a new version of the iOS onto your router’s flash memory with the filename of “newios”. There is another version of the iOS on the flash memory before the new version but you want to boot up using the new version – what command would you use to accomplish this?
Router(config)#boot system flash:newios
Which command produced the same output as “show cdp neighbors detail”?
show cdp entry *
When using the ip route command to create a static route what are the two ways you can define a route?
The IP address of the next-hop device or the outgoing local interface.
Which command requires privileged EXEC mode access?
show ip
show interfaces
show running-config
show version
show running-config - because it displays enable password information, which password is needed to enter privileged exec mode.
Create a static entry that associates router HQ’s host name with ip address 192.168.10.1.
R1>en
R1#conf t
R1(config)#ip host HQ 192.168.10.1
Configure R1 to NOT search for typed “domain names” that aren’t present in its local dns table.
R1>en
R1#conf t
R1(config)#no ip domain-lookup
