Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

WAN Concepts > WAN Concepts > Flashcards

WAN Concepts Flashcards

1
Q

Which two statements accurately describe an advantage or a disadvantage when deploying NAT for IPv4 in a network? (Choose two.)
NAT improves packet handling.
NAT adds authentication capability to IPv4.
NAT will impact negatively on switch performance.
NAT causes routing tables to include more information.
NAT provides a solution to slow down the IPv4 address depletion.
NAT introduces problems for some applications that require end-to-end connectivity.

A
  • NAT provides a solution to slow down the IPv4 address depletion.
  • NAT introduces problems for some applications that require end-to-end connectivity.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

A network administrator wants to examine the active NAT translations on a border router. Which command would perform the task?

Router# show ip nat translations
Router# show ip nat statistics
Router# clear ip nat translations
Router# debug ip nat translations

A

*Router# show ip nat translations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are two tasks to perform when configuring static NAT? (Choose two.)

Configure a NAT pool.
Create a mapping between the inside local and outside local addresses.
Identify the participating interfaces as inside or outside interfaces.
Define the inside global address on the server
Define the outside global address.

A
  • Create a mapping between the inside local and outside local addresses.
  • Identify the participating interfaces as inside or outside interfaces.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a disadvantage of NAT?

There is no end-to-end addressing.
The router does not need to alter the checksum of the IPv4 packets.​
The internal hosts have to use a single public IPv4 address for external communication.
The costs of readdressing hosts can be significant for a publicly addressed network.​

A

*There is no end-to-end addressing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Refer to the exhibit. From the perspective of R1, the NAT router, which address is the inside global address?

  1. 168.0.10
  2. 168.0.1
  3. 165.200.225
  4. 165.200.254
A

*209.165.200.225

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Refer to the exhibit. Given the commands as shown, how many hosts on the internal LAN off R1 can have simultaneous NAT translations on R1?

244
10
1
255

A

*1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Refer to the exhibit. A network administrator has just configured address translation and is verifying the configuration. What three things can the administrator verify? (Choose three.)

A standard access list numbered 1 was used as part of the configuration process.
Three addresses from the NAT pool are being used by hosts.
Address translation is working.
One port on the router is not participating in the address translation.
The name of the NAT pool is refCount.
Two types of NAT are enabled.

A
  • A standard access list numbered 1 was used as part of the configuration process.
  • Address translation is working.
  • Two types of NAT are enabled.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Refer to the exhibit. NAT is configured on RT1 and RT2. The PC is sending a request to the web server. What IPv4 address is the source IP address in the packet between RT2 and the web server?

  1. 168.1.5
  2. 0.113.10
  3. 16.1.254
  4. 16.1.10
  5. 165.200.245
  6. 0.2.2
A

*209.165.200.245

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Refer to the exhibit. Based on the output that is shown, what type of NAT has been implemented?

dynamic NAT with a pool of two public IP addresses
PAT using an external interface
static NAT with a NAT pool
static NAT with one entry

A

*PAT using an external interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Refer to the exhibit. From the perspective of users behind the NAT router, what type of NAT address is 209.165.201.1?

inside global
outside global
outside local
inside local

A

*inside global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Refer to the exhibit. Static NAT is being configured to allow PC 1 access to the web server on the internal network. What two addresses are needed in place of A and B to complete the static NAT configuration? (Choose two.)

A = 209.165.201.2
A = 10.1.0.13
B = 209.165.201.7
B = 10.0.254.5
B = 209.165.201.1
A
  • A = 10.1.0.13

* B = 209.165.201.1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the purpose of the overload keyword in the ip nat inside source list 1 pool NAT_POOL overload command?

It allows many inside hosts to share one or a few inside global addresses.
It allows a list of internal hosts to communicate with a specific group of external hosts.
It allows external hosts to initiate sessions with internal hosts.
It allows a pool of inside global addresses to be used by internal hosts.

A

*It allows many inside hosts to share one or a few inside global addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Refer to the exhibit. Which source address is being used by router R1 for packets being forwarded to the Internet?

  1. 6.15.2
  2. 165.202.141
  3. 51.100.3
  4. 165.200.225
A

*209.165.200.225

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Refer to the exhibit. The NAT configuration applied to the router is as follows:

ERtr(config)# access-list 1 permit 10.0.0.0 0.255.255.255
ERtr(config)# ip nat pool corp 209.165.201.6 209.165.201.30 netmask 255.255.255.224
ERtr(config)# ip nat inside source list 1 pool corp overload
ERtr(config)# ip nat inside source static 10.10.10.55 209.165.201.4
ERtr(config)# interface gigabitethernet 0/0
ERtr(config-if)# ip nat inside
ERtr(config-if)# interface serial 0/0/0
ERtr(config-if)# ip nat outside
Based on the configuration and the output shown, what can be determined about the NAT status within the organization?

Static NAT is working, but dynamic NAT is not.
Dynamic NAT is working, but static NAT is not.
Not enough information is given to determine if both static and dynamic NAT are working.
NAT is working.

A

*Not enough information is given to determine if both static and dynamic NAT are working.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which situation describes data transmissions over a WAN connection?

A network administrator in the office remotely accesses a web server that is located in the data center at the edge of the campus.
A manager sends an email to all employees in the department with offices that are located in several buildings.
An employee prints a file through a networked printer that is located in another building.
An employee shares a database file with a co-worker who is located in a branch office on the other side of the city.

A

*An employee shares a database file with a co-worker who is located in a branch office on the other side of the city.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which two technologies are categorized as private WAN infrastructures? (Choose two.)

Frame Relay
VPN
MetroE
DSL
cabl
A
  • Frame Relay

* MetroE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which network scenario will require the use of a WAN?

Employees need to connect to the corporate email server through a VPN while traveling.
Employees need to access web pages that are hosted on the corporate web servers in the DMZ within their building.
Employee workstations need to obtain dynamically assigned IP addresses.
Employees in the branch office need to share files with the headquarters office that is located in a separate building on the same campus network.

A

*Employees need to connect to the corporate email server through a VPN while traveling.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are two hashing algorithms used with IPsec AH to guarantee authenticity? (Choose two.)

SHA
RSA
DH
MD5
AES
A
  • SHA

* MD5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What two algorithms can be part of an IPsec policy to provide encryption and hashing to protect interesting traffic? (Choose two.)

SHA
RSA
AES
DH
PSK
A
  • SHA

* AES

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which VPN solution allows the use of a web browser to establish a secure, remote-access VPN tunnel to the ASA?

client-based SSL
site-to-site using an ACL
clientless SSL
site-to-site using a preshared key

A

*clientless SSL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Which IPsec security function provides assurance that the data received via a VPN has not been modified in transit?

integrity
authentication
confidentiality
secure key exchange

A

*integrity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Which two types of VPNs are examples of enterprise-managed remote access VPNs? (Choose two.)

clientless SSL VPN
client-based IPsec VPN
IPsec VPN
IPsec Virtual Tunnel Interface VPN
GRE over IPsec VPN
A
  • clientless SSL VPN

* client-based IPsec VPN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Which is a requirement of a site-to-site VPN?

It requires hosts to use VPN client software to encapsulate traffic.
It requires the placement of a VPN server at the edge of the company network.
It requires a VPN gateway at each end of the tunnel to encrypt and decrypt traffic.
It requires a client/server architecture.

A

*It requires a VPN gateway at each end of the tunnel to encrypt and decrypt traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the function of the Diffie-Hellman algorithm within the IPsec framework?

guarantees message integrity
allows peers to exchange shared keys
provides authentication
provides strong data encryption

A

*allows peers to exchange shared keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What does NAT overloading use to track multiple internal hosts that use one inside global address?

port numbers
IP addresses
autonomous system numbers
MAC addresses

A

*port numbers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Refer to the exhibit. R1 is configured for static NAT. What IP address will Internet hosts use to reach PC1?

  1. 168.0.1
  2. 168.0.10
  3. 165.201.1
  4. 165.200.225
A

*209.165.200.225

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Refer to the exhibit. A network administrator is viewing the output from the command show ip nat translations. Which statement correctly describes the NAT translation that is occurring on router RT2?​

The traffic from a source IPv4 address of 192.168.254.253 is being translated to 192.0.2.88 by means of static NAT.
The traffic from a source IPv4 address of 192.0.2.88 is being translated by router RT2 to reach a destination IPv4 address of 192.168.254.253.
The traffic from a source IPv4 public address that originates traffic on the internet would be able to reach private internal IPv4 addresses​.
The traffic from a source IPv4 address of 192.168.2.20 is being translated by router RT2 to reach a destination IPv4 address of 192.0.2.254.

A

*The traffic from a source IPv4 address of 192.168.254.253 is being translated to 192.0.2.88 by means of static NAT.

28
Q

Which two WAN infrastructure services are examples of private connections? (Choose two.)

cable
DSL
Frame Relay
T1/E1
wireless
A
  • Frame Relay

* T1/E1

29
Q

Which two statements about the relationship between LANs and WANs are true? (Choose two.)

Both LANs and WANs connect end devices.
WANs are typically operated through multiple ISPs, but LANs are typically operated by single organizations or individuals.
WANs must be publicly-owned, but LANs can be owned by either public or private entities.
WANs connect LANs at slower speed bandwidth than LANs connect their internal end devices.​
LANs connect multiple WANs together.

A
  • WANs are typically operated through multiple ISPs, but LANs are typically operated by single organizations or individuals.
  • WANs connect LANs at slower speed bandwidth than LANs connect their internal end devices.​
30
Q

Which statement describes an important characteristic of a site-to-site VPN?

It must be statically set up.
It is ideally suited for use by mobile workers.
It requires using a VPN client on the host PC.
After the initial connection is established, it can dynamically change connection information.
It is commonly implemented over dialup and cable modem networks.

A

*It must be statically set up.

31
Q

How is “tunneling” accomplished in a VPN?

New headers from one or more VPN protocols encapsulate the original packets.
All packets between two hosts are assigned to a single physical medium to ensure that the packets are kept private.
Packets are disguised to look like other types of traffic so that they will be ignored by potential attackers.
A dedicated circuit is established between the source and destination devices for the duration of the connection.

A

*New headers from one or more VPN protocols encapsulate the original packets.

32
Q

. Which statement describes a VPN?

VPNs use open source virtualization software to create the tunnel through the Internet.
VPNs use logical connections to create public networks through the Internet.
VPNs use dedicated physical connections to transfer data between remote users.
VPNs use virtual connections to create a private network through a public network.

A

*VPNs use virtual connections to create a private network through a public network

33
Q

Open the PT Activity. Perform the tasks in the activity instructions and then answer the question.

CCNA 3 v7 Modules 6 – 8: WAN Concepts Exam Answers
CCNA 3 v7 Modules 6 – 8: WAN Concepts Exam Answers

What problem is causing PC-A to be unable to communicate with the Internet?

The ip nat inside source command refers to the wrong interface.
The NAT interfaces are not correctly assigned.
The static route should not reference the interface, but the outside address instead.
The access list used in the NAT process is referencing the wrong subnet.
This router should be configured to use static NAT instead of PAT.

A

*The NAT interfaces are not correctly assigned.

34
Q

What type of address is 64.100.190.189?

public
private

A

*public

35
Q

Which type of VPN routes packets through virtual tunnel interfaces for encryption and forwarding?

MPLS VPN
IPsec virtual tunnel interface
dynamic multipoint VPN
GRE over IPsec

A

*IPsec virtual tunnel interface

36
Q

a company has headquarters and four remote locations. the headquarters site will require more bandwidth then the four remote sites

A

frame relay

37
Q

a company requires higher download speeds then upload speeds and wants to use existing phone line

A

dsl

38
Q

a company would like guaranteed band-witch using a point-point link that requires minimal expertise to install and maintain.

A

T1

39
Q

A multi site college wants to connect using Ethernet technology between free sites

A

MeTroE

40
Q

inside global

A

192.0.2.1

41
Q

outside global

A

203.0.113.5

42
Q

insdie local

A

10.130.5.76

43
Q

Refer to the exhibit. What has to be done in order to complete the static NAT configuration on R1?

Interface Fa0/0 should be configured with the command no ip nat inside.
Interface S0/0/0 should be configured with the command ip nat outside.
R1 should be configured with the command ip nat inside source static 209.165.200.200 192.168.11.11.
R1 should be configured with the command ip nat inside source static 209.165.200.1 192.168.11.11.

A

*Interface S0/0/0 should be configured with the command ip nat outside.

44
Q

In NAT terms, what address type refers to the globally routable IPv4 address of a destination host on the Internet?

outside global
inside global
outside local
inside local

A

*outside global

45
Q

Refer to the exhibit. Which two statements are correct based on the output as shown in the exhibit? (Choose two.)

The output is the result of the show ip nat translations command.
The host with the address 209.165.200.235 will respond to requests by using a source address of 192.168.10.10.
The output is the result of the show ip nat statistics command.
Traffic with the destination address of a public web server will be sourced from the IP of 192.168.1.10.
The host with the address 209.165.200.235 will respond to requests by using a source address of 209.165.200.235.

A
  • The output is the result of the show ip nat translations command.
  • The host with the address 209.165.200.235 will respond to requests by using a source address of 192.168.10.10.
46
Q

Which circumstance would result in an enterprise deciding to implement a corporate WAN?

when the enterprise decides to secure its corporate LAN
when its employees become distributed across many branch locations
when the number of employees exceeds the capacity of the LAN
when the network will span multiple buildings

A

*when its employees become distributed across many branch locations

47
Q

What is the function of the Hashed Message Authentication Code (HMAC) algorithm in setting up an IPsec VPN?

protects IPsec keys during session negotiation
authenticates the IPsec peers
creates a secure channel for key negotiation
guarantees message integrity

A

*guarantees message integrity

48
Q

What algorithm is used with IPsec to provide data confidentiality?

Diffie-Hellman
SHA
MD5
RSA
AES
A

*AES

49
Q

Which two technologies provide enterprise-managed VPN solutions? (Choose two.)

remote access VPN
Frame Relay
Layer 2 MPLS VPN
site-to-site VPN
Layer 3 MPLS VPN
A
  • remote access VPN

* site-to-site VPN

50
Q

Refer to the exhibit. A network administrator is viewing the output from the command show ip nat translations. Which statement correctly describes the NAT translation that is occurring on router RT2?​

The traffic from a source IPv4 address of 192.168.254.253 is being translated to 192.0.2.88 by means of static NAT.
The traffic from a source IPv4 address of 192.0.2.88 is being translated by router RT2 to reach a destination IPv4 address of 192.168.254.253.
The traffic from a source IPv4 public address that originates traffic on the internet would be able to reach private internal IPv4 addresses​.
The traffic from a source IPv4 address of 192.168.2.20 is being translated by router RT2 to reach a destination IPv4 address of 192.0.2.254.

A

*The traffic from a source IPv4 address of 192.168.254.253 is being translated to 192.0.2.88 by means of static NAT.

51
Q

What type of address is 10.100.126.126?

private
public

A

*private

52
Q

Which type of VPN connects using the Transport Layer Security (TLS) feature?

SSL VPN
MPLS VPN
IPsec virtual tunnel interface
dynamic multipoint VPN

A

*SSL VPN

53
Q

Which two end points can be on the other side of an ASA site-to-site VPN configured using ASDM? (Choose two.)

DSL switch
ISR router
another ASA
multilayer switch
Frame Relay switch
A
  • ISR router

* another ASA

54
Q

Which protocol creates a virtual point-to-point connection to tunnel unencrypted traffic between Cisco routers from a variety of protocols?

IKE
IPsec
OSPF
GRE

A

*GRE

55
Q

What is a disadvantage when both sides of a communication use PAT?

End-to-end IPv4 traceability is lost.
The flexibility of connections to the Internet is reduced.
The security of the communication is negatively impacted.
Host IPv4 addressing is complicated.

A

*End-to-end IPv4 traceability is lost.

56
Q

What two addresses are specified in a static NAT configuration?

the outside global and the outside local
the inside local and the outside global
the inside global and the outside local
the inside local and the inside global

A

*the inside local and the inside global

57
Q

A company is considering updating the campus WAN connection. Which two WAN options are examples of the private WAN architecture? (Choose two.)

municipal Wi-Fi
digital subscriber line
leased line
Ethernet WAN
cable
A
  • leased line

* Ethernet WAN

58
Q

What type of address is 128.107.240.239?

Public
Private

A

*Public

59
Q

Which type of VPN has both Layer 2 and Layer 3 implementations?

IPsec virtual tunnel interface
dynamic multipoint VPN
GRE over IPsec
MPLS VPN

A

*MPLS VPN

60
Q

Refer to the exhibit. A network administrator has configured R2 for PAT. Why is the configuration incorrect?

NAT-POOL2 is bound to the wrong ACL
The ACL does not define the list of addresses to be translated.
The overload keyword should not have been applied.
The static NAT entry is missing

A

*NAT-POOL2 is bound to the wrong ACL

61
Q

Match each component of a WAN connection to its description. (Not all options are used.)

devices and inside wiring located on the enterprise edge and which connect to a carrier link. –> customer premises equipment

a point that is established in a building or complex to separate customer equipment from service provider equipment. –> demarcation point

customer devices that pass the data from customer network or host computer for transmission over the WAN. –> data terminal equipment

devices that put data on the local loop. –> data communications equipment
—
59. Which type of VPN allows multicast and broadcast traffic over a secure site-to-site VPN?

dynamic multipoint VPN
SSL VPN
IPsec virtual tunnel interface
GRE over IPsec

A

*dynamic multipoint VPN

62
Q 
the host sends packet that request a connection to a server at the address 209.165.200.254
step 1
step 2
step 3
step 4
step 5
A

step 1

63
Q

R1 checks the NAT configuration to determine if this packet should be translated

step 1
step 2
step 3
step 4
step 5
A

step 2

64
Q

if there is no translation entry for this ip address R1 determines that the source address 192.168.1.0.10 most be translatd.

step 1
step 2
step 3
step 4
step 5
A

step 3

65
Q

R1 selects an available global address from the dynamic address pool.

step 1
step 2
step 3
step 4
step 5
A

step 4

66
Q

R1 replaces the address 1982.168.10.10 with a translated inside global address

step 1
step 2
step 3
step 4
step 5
A

step 5

67
Q

Which type of VPN involves passenger, carrier, and transport protocols?

GRE over IPsec
dynamic multipoint VPN
MPLS VPN
IPsec virtual tunnel interface

A

*GRE over IPsec

WAN Concepts (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions