Session 4 Flashcards

1
Q

What is UDP specifically used for in DNS?

Choices:

A - DNS lookup
B - DNS security
C - DNS requests
D - DNS connections

A

C - DNS requests

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

In a UDP header sent to a client from a DNS server, what will be the destination port?

Choices:

A - 53
B - 1024
C - The source port of the UDP header on the clients request
D - The destination port of the UDP header on the clients request

A

C - The source port of the UDP header on the clients request

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

When DNS is not working on a client machine, what is the best first option for troubleshooting on the
client machines?

Choices:

A - Reset the DNS server
B - Restart the DNS service
C - Set the DNS address manually
D - Make sure DNS is configured properly

A

D - Make sure DNS is configured properly

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

When multiple users get an error message stating that DNS cannot resolve an address, which first steps
can be taken to attempt to fix the problem? Choose two answers.

Choices:

A - Reboot the DNS server
B - Reboot each client machine
C - Restart the DNS service on the server
D - Restart the DNS service on each client machine

A

A - Reboot the DNS server

C - Restart the DNS service on the server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which command will exclude the first 25 assignable IP addresses in a 192.168.1.0/24 network from a
DHCP pool?

Choices:

A - ip dhcp excluded address 192.168.0.0 192.168.0.24
B - ip dhcp excluded address 192.168.0.1 192.168.0.25
C - ip dhcp excluded-address 192.168.0.0 192.168.0.24
D - ip dhcp excluded-address 192.168.0.1 192.168.0.25

A

D - ip dhcp excluded-address 192.168.0.1 192.168.0.25

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which command is used to start the setup of a DHCP pool?

Choices:

A - network
B - dhcp server
C - ip dhcp pool
D - ip excluded-address

A

C - ip dhcp pool

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which command will set an IP address range for a DHCP server to include the addresses of 192.168.0.21
to 192.168.0.254?

Choices:

A - network 192.168.0.0 192.168.0.255
B - network 192.168.0.0 255.255.255.0
C - network 192.168.0.21 192.168.0.254
D - network 192.168.0.21 255.255.255.0

A

B - network 192.168.0.0 255.255.255.0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which optional IP addresses can be set up as part of a DHCP server configuration? Choose two answers.

Choices:

A - DNS server
B - DHCP server
C - Default gateway
D - Machine IP address

A

A - DNS server

C - Default gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which command sets up a router as a DHCP relay agent?

Choices:

A - ip dhcp relay
B - ip dhcp-relay
C - ip helper address
D - ip helper-address

A

D - ip helper-address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which command sets a default gateway in a DHCP pool?

Choices:

A - default router
B - default-router
C - default gateway
D - default-gateway

A

B - default-router

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which command is entered before the command to change the DNS server address within a DHCP pool?

Choices:

A - ip dhcp pool
B - change dhcp pool
C - change dns-server
D - change dns-address

A

A - ip dhcp pool

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

A Windows machine is reporting an IP address of 169.254.200.201. What type of IP address does this
machine have?

Choices:

A - DHCP
B - Static
C - Dynamic
D - Automatic Private IP Address

A

D - Automatic Private IP Address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which is a common step missed in setting up DHCP on a Cisco router?

Choices:

A - Not starting a pool
B - Not setting an IP address range
C - Not setting an excluded address range
D - Not setting the proper subnet for the pool

A

C - Not setting an excluded address range

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

A router is set with the NTP protocol to get its time from another NTP router and be able set the time on
devices connected to it. Which roles does this router have? Choose two answers.

Choices:

A - NTP Relay
B - NTP Agent
C - NTP Client
D - NTP Server

A

C - NTP Client

D - NTP Server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which command will set the time on a Cisco router?

Choices:

A - NTP
B - time
C - clock
D - set time

A

C - clock

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the purpose of setting a stratum number when adding the NTP server role to a router?

Choices:

A - To set the time zone
B - To find the nearest atomic clock
C - To set multiple routers up to use the same time zone
D - To set priority on which router’s clock should be used

A

D - To set priority on which router’s clock should be used

17
Q

Which command adds the NTP client role to a Cisco device?

Choices:

A - ntp
B - ntp client
C - ntp server
D - ntp master

A

C - ntp server

18
Q

Router1 has been set up as an NTP client. The same router needs to relay the NTP information from the
NTP server (Router2) to the router’s connected clients. Which command needs to be entered on
Router1 to fulfill this need?

Choices:

A - ntp
B - ntp client
C - ntp server
D - ntp master

A

D - ntp master

19
Q

Which number sets are usable for standard ACLs? Choose two answers.

Choices:

A - 1-99
B - 100-199
C - 1300-1399
D - 2600-2699

A

A - 1-99

C - 1300-1399

20
Q
Which command accurately denies a class C subnet with a subnet ID of 10.1.34.0 access to a router on
an ACL with a number of 12?

Choices:

A - access-list 12 deny 10.1.34.0 0.0.0.255
B - access-group 12 deny 10.1.34.0 0.0.0.255
C - access-list 12 deny 10.1.34.0 255.255.255.0
D - access-group 12 deny 10.1.34.0 255.255.255.0

A

A - access-list 12 deny 10.1.34.0 0.0.0.255

21
Q

An administrator wants to make sure devices not denied using an ACL can access a router. Which
command should be used at the end of the ACL?

Choices:
A - deny none
B - permit all
C - permit any
D - permit explicit
A

C - permit any

22
Q

A standard ACL with a number of 12 has been configured. Which command will enable the ACL on an
interface for inbound connections?

Choices:

A - ip access group 12
B - ip access-group 12
C - ip access group 12 in
D - ip access-group 12 in

A

D - ip access-group 12 in

23
Q

Which command will show any access groups enabled on interface s0/1?

Choices:
A - show ip access-list int s0/1
B - show startup-config int s0/1
C - show running-config int s0/1
D - show ip access-groups int s0/1
A

C - show running-config int s0/1

24
Q

Which command will show the access list(s) enabled on interface s0/1?

Choices:

A - show ip int s0/1
B - show ip int brief s0/1
C - show ip access-list int s0/1
D - show ip access-groups int s0//1

A

A - show ip int s0/1

25
Q

A named standard ACL is being configured. An administrator wants to make sure the server at 10.1.11.1
on this Class C subnet is permitted no matter the what the rest of the ACL does. Which command should
be entered to ensure this?

Choices:

A - permit 10.1.11.1 0.0.0.0
B - permit 10.1.11.1 0.0.0.255
C - permit 10.1.11.1 255.255.255.0
D - permit 10.1.11.1 255.255.255.255

A

A - permit 10.1.11.1 0.0.0.0

26
Q

Which command will enable an ACL named block_sales for inbound connections on an interface?

Choices:

A - ip access group block_sales
B - ip access-group block_sales
C - ip access group block_sales in
D - ip access-group block_sales in

A

D - ip access-group block_sales in

27
Q

Which command will show the line numbers for the names standard ACL block_sales while one is in
interface config mode?

Choices:

A - show ip access list block_sales
B - show ip access lists block_sales
C - do show ip access lists block_sales
D - do show ip access-group block_sales

A

C - do show ip access lists block_sales

28
Q

Line number 10 of a standard named ACL has the permit 10.1.11.1 255.255.255.255 entry. Which
command will remove this entry from the ACL?

Choices:
A - no 10
B - no permit 10.1.11.1
C - no 10 permit host 10.1.11.1
D - no 10 permit 10.1.11.1 255.255.255.255
A

C - no 10 permit host 10.1.11.1

29
Q

What is the proper syntax for creating a numbered extended ACL?

Choices:

A - ip access-list 112
B - ip access-list extended
C - ip access-list extended 112
D - ip access-list extended 212

A

C - ip access-list extended 112

30
Q

What is the proper syntax for creating an ACL entry which limits SMTP traffic on a 10.1.12.0 subnet to an
SMTP server at 10.1.2.11?

Choices:

A - permit smtp 10.1.2.11 0.0.0.0
B - permit 10.1.12.0 0.0.0.255 host 10.1.2.11 eq smtp
C - permit smtp 10.1.12.0 0.0.0.255 host 10.1.2.11
D - permit tcp 10.1.12.0 0.0.0.255 host 10.1.2.11 eq smtp

A

D - permit tcp 10.1.12.0 0.0.0.255 host 10.1.2.11 eq smtp

31
Q

When configuring an extended ACL, the ACL should be enabled as close to the ___________ as possible.

Choices:

A - source
B - router
C - interface
D - destination

A

A - source

32
Q

Which command in an ACL will deny web traffic from the 10.1.12.0 subnet to the 10.1.3.0 subnet?

Choices:

A - deny tcp 10.1.12.0 10.1.3.0 0.0.0.255 eq www
B - deny tcp 10.1.12.0 0.0.0.255 10.1.3.0 eq www
C - deny tcp 10.1.3.0 0.0.0.255 10.1.12.0 0.0.0.255 eq www
D - deny tcp 10.1.12.0 0.0.0.255 10.1.3.0 0.0.0.255 eq www

A

D - deny tcp 10.1.12.0 0.0.0.255 10.1.3.0 0.0.0.255 eq www

33
Q

Which command in an ACL will permit all inbound and outbound traffic on an ACL?

Choices:

A - permit any
B - permit any any
C - permit ip any any
D - permit tcp any any

A

C - permit ip any any

34
Q

When a step needs to be changed in a standard numbered ACL, what usually needs to take place?

Choices:

A - The step is edited
B - The ACL needs to be rebuilt
C - The line number is changed
D - The step is deleted and then added back into the list

A

B - The ACL needs to be rebuilt

35
Q

An administrator has just configured and implemented an ACL. What will happen to any traffic not
accounted for in the ACL?

Choices:

A - It will be denied
B - It will be allowed
C - It depends on whether another ACL is set on the router
D - It depends on whether another ACL is set on the interface

A

A - It will be denied

36
Q

Which IP addresses are used to map a private IP address to Internet traffic when NAT is enabled?

Choices:

A - inside local
B - inside global
C - outside local
D - inside global

A

B - inside global

37
Q

A NAT pool is set up on a network. Several, but not all devices are having trouble connecting to the
Internet. What is the most likely cause of the problem?

Choices:

A - The configuration is in correct
B - The port numbers are incorrect
C - Not enough IP addresses in the pool
D - The NAT service needs to be restarted

A

C - Not enough IP addresses in the pool

38
Q

Theoretically, how many requests can NAT hold at once?

Choices:
A - 34,000
B - 60,000
C - 30,000
D - 64,000
A

D - 64,000

39
Q

When setting up the access lists for dynamic NAT and PAT, IP addresses need to be inside __________.

Choices:

A - reversed
B - global
C - routed
D - local

A

D - local