Q:141-161 Flashcards

1
Q
  1. A student, doing a summer semester of study overseas, has taken hundreds of pictures on a smartphone and wants to back them up in case of loss. What service or technology would support this requirement?

Cisco ACI
cloud services
software defined networking
dedicated servers

A

cloud services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q
  1. Consider the following access list that allows IP phone configuration file transfers from a particular host to a TFTP server:

R1(config)# access-list 105 permit udp host 10.0.70.23 host 10.0.54.5 range 1024 5000
R1(config)# access-list 105 deny ip any any
R1(config)# interface gi0/0
R1(config-if)# ip access-group 105 out

Which method would allow the network administrator to modify the ACL and include FTP transfers from any source IP address?

R1(config)# interface gi0/0
R1(config-if)# no ip access-group 105 out
R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 20
R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 21
R1(config)# interface gi0/0
R1(config-if)# ip access-group 105 out

R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 20
R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 21

R1(config)# interface gi0/0
R1(config-if)# no ip access-group 105 out
R1(config)# no access-list 105
R1(config)# access-list 105 permit udp host 10.0.70.23 host 10.0.54.5 range 1024 5000
R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 20
R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 21
R1(config)# access-list 105 deny ip any any
R1(config)# interface gi0/0
R1(config-if)# ip access-group 105 out

R1(config)# access-list 105 permit udp host 10.0.70.23 host 10.0.54.5 range 1024 5000
R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 20
R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 21
R1(config)# access-list 105 deny ip any any

A

R1(config)# interface gi0/0
R1(config-if)# no ip access-group 105 out
R1(config)# no access-list 105
R1(config)# access-list 105 permit udp host 10.0.70.23 host 10.0.54.5 range 1024 5000
R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 20
R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 21
R1(config)# access-list 105 deny ip any any
R1(config)# interface gi0/0
R1(config-if)# ip access-group 105 out

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q
  1. Which three statements are generally considered to be best practices in the placement of ACLs? (Choose three.)

Filter unwanted traffic before it travels onto a low-bandwidth link.
Place standard ACLs close to the destination IP address of the traffic.
Place standard ACLs close to the source IP address of the traffic.
Place extended ACLs close to the destination IP address of the traffic.
Place extended ACLs close to the source IP address of the traffic.
For every inbound ACL placed on an interface, there should be a matching outbound ACL.

A

Filter unwanted traffic before it travels onto a low-bandwidth link.
Place standard ACLs close to the destination IP address of the traffic.
Place extended ACLs close to the source IP address of the traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q
  1. Match the term to the web link http://www.buycarsfromus.com/2020models/ford/suv.html#Escape component. (Not all options are used.)
Http —-> Protocol
buycarsfromus.com/2020models/ford/suv.html#Escape —-> URN
http://www.buycarsfromus.com/2020models/ford/suv.html —-> URL
http://www.buycarsfromus.com/2020models/ford/suv.html#Escape  —-> URI
#Escape —- Fragment
A
Http —-> Protocol
buycarsfromus.com/2020models/ford/suv.html#Escape —-> URN
http://www.buycarsfromus.com/2020models/ford/suv.html —-> URL
http://www.buycarsfromus.com/2020models/ford/suv.html#Escape  —-> URI
#Escape —- Fragment
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q
  1. What command would be used as part of configuring NAT or PAT to display all static translations that have been configured?

show ip nat translations
show ip pat translations
show ip cache
show running-config

A

show ip nat translations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q
  1. A network administrator modified an OSPF-enabled router to have a hello timer setting of 20 seconds. What is the new dead interval time setting by default?

40 seconds
60 seconds
80 seconds
100 seconds

A

80 seconds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q
  1. Which type of VPN is the preferred choice for support and ease of deployment for remote access?

SSL VPN
GRE over IPsec
dynamic multipoint VPN
IPsec virtual tunnel interface

A

SSL VPN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q
  1. What type of traffic is described as predictable and smooth?

video
data
voice

A

voice

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q
  1. Which queuing mechanism has no provision for prioritizing or buffering but simply forwards packets in the order they arrive?

FIFO
LLQ
CBWFQ
WFQ

A

FIFO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q
  1. Refer to the exhibit. A network administrator has configured OSPFv2 on the two Cisco routers. The routers are unable to form a neighbor adjacency. What should be done to fix the problem on router R2?

Implement the command no passive-interface Serial0/1.
Implement the command network 192.168.2.6 0.0.0.0 area 0 on router R2.
Change the router-id of router R2 to 2.2.2.2.
Implement the command network 192.168.3.1 0.0.0.0 area 0 on router R2.

A

Implement the command no passive-interface Serial0/1.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q
  1. A network administrator is troubleshooting an OSPF problem that involves neighbor adjacency. What should the administrator do?

Make sure that the router priority is unique on each router.
Make sure that the DR/BDR election is complete.
Make sure that the router ID is included in the hello packet.
Make sure that the hello and dead interval timers are the same on all routers.

A

Make sure that the hello and dead interval timers are the same on all routers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q
  1. Refer to the exhibit. Internet privileges for an employee have been revoked because of abuse but the employee still needs access to company resources. What is the best ACL type and placement to use in this situation?

standard ACL inbound on R2 WAN interface connecting to the internet
standard ACL outbound on R2 WAN interface towards the internet
standard ACL inbound on R1 G0/0
standard ACL outbound on R1 G0/0

A

standard ACL outbound on R2 WAN interface towards the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q
  1. An ACL is applied inbound on a router interface. The ACL consists of a single entry:

access-list 100 permit tcp 192.168.10.0 0.0.0.255 172.17.200.0 0.0.0.255 eq www .
If a packet with a source address of 192.168.10.244, a destination address of 172.17.200.56, and a protocol of 80 is received on the interface, is the packet permitted or denied?

denied
permitted

A

permitted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q
  1. A company has contracted with a network security firm to help identify the vulnerabilities of the corporate network. The firm sends a team to perform penetration tests to the company network. Why would the team use applications such as Nmap, SuperScan, and Angry IP Scanner?

to detect installed tools within files and directories that provide threat actors remote access and control over a computer or network

to detect any evidence of a hack or malware in a computer or network

to reverse engineer binary files when writing exploits and when analyzing malware

to probe network devices, servers, and hosts for open TCP or UDP ports

A

to probe network devices, servers, and hosts for open TCP or UDP ports

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q
  1. What command would be used as part of configuring NAT or PAT to display any dynamic PAT translations that have been created by traffic?

show ip pat translations
show ip cache
show running-config
show ip nat translations

A

show ip nat translations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q
  1. An administrator is configuring single-area OSPF on a router. One of the networks that must be advertised is 172.16.91.0 255.255.255.192. What wildcard mask would the administrator use in the OSPF network statement?
  2. 0.31.255
  3. 0.0.63
  4. 0.15.255
  5. 0.7.255
A

0.0.0.63

17
Q
  1. What type of traffic is described as requiring latency to be no more than 400 milliseconds (ms)?

video
data
voice

A

video

18
Q
  1. Refer to the exhibit. Which two configurations would be used to create and apply a standard access list on R1, so that only the 10.0.70.0/25 network devices are allowed to access the internal database server? (Choose two.)
    CCNA 3 v7.0 Final Exam Answers Full - Enterprise Networking, Security, and Automation 34

A.
R1(config)# interface GigabitEthernet0/0
R1(config-if)# ip access-group 5 out

B.
R1(config)# access-list 5 permit 10.0.54.0 0.0.1.255

C.
R1(config)# interface Serial0/0/0
R1(config-if)# ip access-group 5 in

D.
R1(config)# access-list 5 permit 10.0.70.0 0.0.0.127

E.
R1(config)# access-list 5 permit any

A

A.
R1(config)# interface GigabitEthernet0/0
R1(config-if)# ip access-group 5 out

D.
R1(config)# access-list 5 permit 10.0.70.0 0.0.0.127

19
Q
  1. A network administrator is writing a standard ACL that will deny any traffic from the 172.16.0.0/16 network, but permit all other traffic. Which two commands should be used? (Choose two.)

Router(config)# access-list 95 deny 172.16.0.0 255.255.0.0
Router(config)# access-list 95 permit any
Router(config)# access-list 95 host 172.16.0.0
Router(config)# access-list 95 deny 172.16.0.0 0.0.255.255
Router(config)# access-list 95 172.16.0.0 255.255.255.255
Router(config)# access-list 95 deny any

A

Router(config)# access-list 95 permit any

Router(config)# access-list 95 deny 172.16.0.0 0.0.255.255

20
Q
  1. Refer to the exhibit. The company has decided that no traffic initiating from any other existing or future network can be transmitted to the Research and Development network. Furthermore, no traffic that originates from the Research and Development network can be transmitted to any other existing or future networks in the company. The network administrator has decided that extended ACLs are better suited for these requirements. Based on the information given, what will the network administrator do?

One ACL will be placed on the R1 Gi0/0 interface and one ACL will be placed on the R2 Gi0/0 interface.

Only a numbered ACL will work for this situation.

One ACL will be placed on the R2 Gi0/0 interface and one ACL will be placed on the R2 S0/0/0 interface.

Two ACLs (one in each direction) will be placed on the R2 Gi0/0 interface.

A

Two ACLs (one in each direction) will be placed on the R2 Gi0/0 interface.

21
Q
  1. What protocol uses smaller stratum numbers to indicate that the server is closer to the authorized time source than larger stratum numbers?

TFTP
SYSLOG
NTP
MPLS

A

NTP

22
Q
  1. Refer to the exhibit. If no router ID was manually configured, what would router Branch1 use as its OSPF router ID?
  2. 0.0.1
  3. 1.0.1
  4. 168.1.100
  5. 165.201.1
A

192.168.1.100