CCNA Practice Exam 1 - Todd Lammle, LLC

How does CAPWAP communicate between an access point in local mode and a WLC?

The access point must not be connected to the wired network, as it would create a loop.

The access point must be connected to the same switch as the WLC.

The access point must directly connect to the WLC using a copper cable.

The access point has the ability to link to any switch in the network, assuming connectivity to the WLC.

Which of the following is not an advantage of a next generation firewall (NGFW)?

Zero-touch deployment

Streamlined architecture

Deep packet inspection

Better throughput rates

What is a characteristic of spine-and-leaf architecture?

Each link between leaf switches allows for higher bandwidth.

It provides greater predictability on STP blocked ports.

It provides variable latency.

Each device is separated by the same number of hops.

Which of the following descriptions are related to the Puppet technology? (Choose two).

Fundamental configuration elements are stored in a manifest.

Uses TCP port 10002 for configuration push jobs.

Uses Ruby for fundamental configuration elements.

Uses TCP port 8140 for communication.

Which two reasons can cause the late collision counter to increment on an Ethernet interface? (Choose two).

When a collision occurs after the 32nd byte of a frame has been transmitted.

When Carrier Sense Multiple Access/Collision Detection (CSMA/CD) is used.

When the cable length limits have been exceeded.

When the sending device waits 15 seconds before sending the frame again.

When one side of the connection is configured for half-duplex.

What are two common TCP applications? (Choose two).

TFTP

SMTP

SNMP

FTP

DNS

What is the difference regarding reliability and communication type between TCP and UDP?

TCP is reliable and is a connectionless protocol; UDP is not reliable and is a connection-oriented protocol.

TCP is not reliable and is a connectionless protocol; UDP is reliable and is a connection-oriented protocol.

TCP is not reliable and is a connection-oriented protocol; UDP is reliable and is a connectionless protocol.

TCP is reliable and is a connection-oriented protocol; UDP is not reliable and is a connectionless protocol.

Given a subnet mask of 255.255.255.224, which of the following addresses can be assigned to network hosts? (Choose three).

201.45.116.159

15.234.118.63

217.63.12.192

92.11.178.93

134.178.18.56

192.168.16.87

Given an IP address of 192.168.1.42 255.255.255.248, what is the subnet address?

192.168.1.8/29

192.168.1.32/27

192.168.1.40/29

192.168.1.16/28

192.168.1.48/29

A network engineer needs to configure a branch office for 82 hosts. What is the most efficient use of a subnet mask?

255.255.255.128

55.255.255.192

255.255.255.224

255.255.255.248

Which three network addresses are reserved for private network use? (Choose three).

10.0.0.0

172.15.0.0

172.31.0.0

192.162.24.0

192.168.255.0

224.192.0.0

An IPv6 multicast address always begins with which Hexadecimal digits?

FF

FE80

F001

EE

Identify the four valid IPv6 addresses. (Choose four).

::

::192:168:0:1

2000::

2001:3452:4952:2837::

2002:c0a8:101::42

2003:dead:beef:4dad:23:46:bb:101

During which lightweight access point operation state does the device poll the wireless LAN controller (WLC) for information such as QoS rules, SSIDs, and security parameters?

WLC Join State

Image Download State

Config Download State

WLC Discovery State

An engineer must configure a WLAN using the strongest encryption type for WPA2-PSK. Which cipher fulfills the configuration requirement?

WEP

RC4

AES

TKIP

Which mode of Wi-Fi protected access (WPA) is also referred to as enterprise mode?

Pre-shared key mode

TKIP mode

802.1x mode

AES mode

What are two fundamentals of virtualization? (Choose two).

It allows logical network devices to move traffic between virtual machines and the rest of the physical network.

It allows multiple operating systems and applications to run independently on one physical server.

It allows a physical router to directly connect NICs from each virtual machine into the network.

It requires that some servers, virtual machines, and network gear reside on the Internet.

The environment must be configured with one hypervisor that serves solely as a network manager to monitor SNMP traffic.

A MAC address is _____ bits long, and expressed in _____?

48, decimal

24, decimal

48, hexadecimal

32, hexadecimal

All 30 users on a single floor of a building are complaining about network slowness. After investigating the access switch, the network administrator notices that the MAC address table is full (10,000 entries) and all traffic is being flooded out of every port. Which action can the administrator take to prevent this from occurring?

Configure port-security to limit the number of mac-addresses allowed on each port.

Upgrade the switch to one that can handle 20,000 entries.

Configure private-vlans to prevent hosts from communicating with one another.

Enable storm-control to limit the traffic rate.

Configure a VACL to block all IP traffic except traffic to and from that subnet.

0

8

9

1

An engineer is asked to protect unused ports that are configured in the default VLAN on a switch. Which two steps will fulfill the request? (Choose two).

Configure the ports as trunk ports.

Enable the Cisco Discovery Protocol.

Configure the port type as access and place in VLAN 99.

Administratively shut down the ports.

Configure the ports in an EtherChannel.

Assuming the default switch configuration, which VLAN range can be added, modified, and removed on a Cisco switch?

2 through 1001

2 through 1005

1 through 1002

1 through 1001

On a corporate network, hosts on the same VLAN can communicate with each other, but they cannot communicate with hosts on different VLANs. What is needed to allow communication between the VLANs?

A router with subinterfaces configured on the physical interface that is connected to the switch.

A router with an IP address on the physical interface connected to the switch.

A switch with an access link that is configured between the switches.

A switch with a trunk link that is configured between the switches.

Refer to the exhibit. A host is connected to switch port fa0/3. The host and switch have been fully configured for IP connectivity as shown. However, the indicator LED on switch port fa0/3 is not on, and the host cannot communicate with any other hosts including those connected to VLAN 2 on the same switch. Based on the given information, what is the problem?

Switch port fa0/3 is not configured as a trunk port.

There is an incorrect cable type.

The switch has been assigned an incorrect subnet mask.

Switch port fa0/3 has been blocked by STP.

The switch and the host must be in the same subnet.

Refer to the exhibit. Given the output shown from this Cisco Catalyst 2950, what is the reason that interface FastEthernet 0/10 is not the root port for VLAN 2?

This switch has more than one interface connected to the root network segment in VLAN 2.

This switch is running RSTP while the elected designated switch is running 802.1d Spanning Tree.

This switch interface has a higher path cost to the root bridge than another in the topology.

This switch has a lower bridge ID for VLAN 2 than the elected designated switch.

Three switches are connected to one another via trunk ports. Assuming the default switch configuration, which switch is elected as the root bridge for the spanning-tree instance of vlan 1?

The switch with the lowest MAC address.

The switch with the highest MAC address.

The switch witch the highest IP address.

The switch with the lowest IP address.

What are three advantages of VLANs? (Choose three).

VLANs establish broadcast domains in switched networks.

VLANs utilize packet filtering to enhance network security.

VLANs provide a method of conserving IP addresses in large networks.

VLANs provide a low-latency internetworking alternative to routed networks.

VLANs allow access to network services based on department, not physical location.

VLANs can greatly simplify adding, moving, or changing hosts on the network.

Which statements accurately describe CDP? (Choose three).

CDP is an IEEE standard protocol.

CDP is a Cisco proprietary protocol.

CDP is a datalink layer protocol.

CDP is a network layer protocol.

CDP can discover directly connected neighboring Cisco devices.

CDP can discover Cisco devices that are not directly connected.

You are the network administrator for your company and have configured Cisco Discovery Protocol (CDP) in your network. You recently noticed that when devices send large numbers of CDP neighbor announcements, some devices are crashing. You decide to disable CDP on the router. Which command should you use to achieve the objective?

no cdp run

set cdp disable

no cdp enable

no cdp advertise-v2

Which command is used to enable LLDP globally on a Cisco IOS ISR?

lldp run

lldp enable

lldp transmit

cdp run

cdp enable

Which command should you enter to configure an LLDP delay time of 5 seconds?

lldp reinit 5

lldp reinit 5000

lldp holdtime 5

lldp timer 5000

Refer to the exhibit. Based on the LACP neighbor status, in which mode is the SW1 port channel configured?

Active

Auto

Mode on

Passive

What is a difference between local AP mode and FlexConnect AP mode?

Local AP mode creates two CAPWAP tunnels per AP to the WLC.

Local AP mode causes the AP to behave as if it were an autonomous AP.

FlexConnect AP mode fails to function if the AP loses connectivity with the WLC.

FlexConnect AP mode bridges the traffic from the AP to the WLC when local switching is configured.

A network administrator cannot connect to a remote router by using SSH. Part of the show interfaces command is shown.

router#show interfaces Serial0/1/0 is up, line protocol is down

At which OSI layer should the administrator begin troubleshooting?

Physical

Data link

Network

Transport

Which QoS Profile is selected in the GUI when configuring a voice over WLAN deployment?

Bronze

Platinum

Silver

Gold

Match the Cisco default administrative distance to the appropriate routing protocol or route.

Sort elements

directly connected
static route referencing IP address of next hop
internal EIGRP route
OSPF
RIP

0

1

90

110

120

What is the default Reference Bandwidth used by OSPF to calculate Cost?

100 kbps

100 Mbps

1 Gbps

10 Gbps

What are two reasons for an engineer to configure a floating static route? (Choose two).

To enable fallback static routing when the dynamic routing protocol fails.

To route traffic differently based on the source IP of the packet.

To automatically route traffic on a secondary path when the primary path goes down.

To support load balancing via static routing.

To control the return path of traffic that is sent from the router.

A network administrator is troubleshooting the OSPF configuration of routers R1 and R2. The routers cannot establish an adjacency relationship on their common Ethernet link. The graphic shows the output of the show ip ospf interface e0 command for routers R1 and R2. Based on the information in the graphic, what is the cause of this problem?

The OSPF area is not configured properly.

The priority on R1 should be set higher.

The cost on R1 should be set higher.

The hello and dead timers are not configured properly.

A backup designated router needs to be added to the network.

The internetwork infrastructure of company XYZ consists of a single OSPF area as shown in the graphic. There is concern that a lack of router resources is impeding internetwork performance. As part of examining the router resources, the OSPF DRs need to be known. All the router OSPF priorities are at the default and the router IDs are shown with each router. Which routers are likely to have been elected as DR? (Choose two).

Corp-4

Branch-1

Corp-2

Corp-1

Branch-2

Corp-3

How does using the service password-encryption command on a router provide additional security?

By encrypting all passwords passing through the router.

By encrypting passwords in the plain text configuration file.

By requiring entry of encrypted passwords for access to the device.

By configuring an MD5 encrypted key to be used by routing protocols to validate routing exchanges.

By automatically suggesting encrypted passwords for use in configuring the router.

If configuring a static default route on the router with the ip route 0.0.0.0 0.0.0.0 10.13.0.1 120 command, how does the router respond?

It starts sending traffic without a specific matching entry in the routing table to GigabitEthernet0/1.

It immediately replaces the existing OSPF route in the routing table with the newly configured static route.

It starts load-balancing traffic between the two default routes.

It ignores the new static route until the existing OSPF default route is removed.

Which protocol is the Cisco proprietary implementation of FHRP?

HSRP

VRRP

GLBP

CARP

Identify the different types of NAT. (Choose three).

Dynamic

Auto-configure

Global

Static

Overload

In a Network Address Translation (NAT) configuration, what command is given (and in what configuration mode is it given) to specify that an interface is on the inside of a network?

Router(config)# ip nat inside

Router(config-if)# ip nat inside

Router(config-nat)# nat [interface-id] inside

Router(config-router)# nat [interface-id] inside

Which of the following commands is used to configure NTP client functionality on a Cisco router?

ntp server

ntp master

ntp host

ntp get

Which of the following displays a JSON representation?

{“response” – { “taskid” – {},
“url’-“string”
},
“version”-“string”

{“response”, { “taskid”, {};
“url’,”string”
},
“version”,”string”

{“response”. { “taskid”. {}, “url’.”string”
},
“version”.”string”

{“response”: { “taskid”: {}; “url’:”string”
},
“version”:”string”

What does the R stand for in CRUD?

Replace

Record

Register

Read

The main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?

SDN controller and the cloud

Management and the SDN controller

Management console and the cloud

SDN controller and the management solution

Order the DHCP message types as they would occur between a DHCP client and a DHCP server.

DHCPREQUEST

DHCPDISCOVER

DHCPACK

DHCPOFFER

View Answers:

DNS servers provide what service?

They map individual hosts to their specific IP addresses.

Given an IP address, they determine the name of the host that is sought,

They run a spell check on host names to ensure accurate routing.

The convert domain names into IP addresses.

Refer to the router output. What does the number 15 represent in this configuration?

snmp-server group SNMP v3 auth access 15

Privilege level for an authorized user to this router.

Access list that identifies the SNMP devices that can access the router.

Interval seconds between SNMPv3 authentication attempts.

Number of possible failed attempts until the SNMPv3 user is locked out.

What are three components that comprise the SNMP framework? (Choose three).

MIB

Agent

Set

AES

Supervisor

Manager

What is the default Syslog facility level?

local4

local5

local6

local7

Which Syslog message code indicates an emergency state where the system is unstable?

Level 0

Level 1

Level 7

Level 8

Under what condition would the DHCP Relay Agent feature be required in order to make sure our network hosts are able to obtain an IP address through DHCP?

The host and DHCP server are in the same broadcast domain.

The hosts and DHCP server are in different broadcast domains.

The hosts and DHCP server are directly connected.

The hosts and DHCP server are not directly connected.

What 8-bit field exists in IP packet for QoS?

Tos Field

DSCP

IP Precedence

Cos

What Cisco WLAN QoS class is designed for normal traffic?

Platinum

Gold

Silver

Bronze

Which QoS mechanism is most appropriate for giving priority treatment to voice or video packets?

cRTP

WRED

CB-WFQ

LLQ

The process of attempting to exploit a weakness in a network after being given permission by the company is known as what?

penetration testing

vulnerability scanning

reconnaissance

social engineering

With a DHCP snooping configuration, which type of port designation would be used on an interface up-linked to a DHCP server?

Allowed

Trusted

DHCP

Dynamic

A network administrator is configuring ACLs on a Cisco router to allow traffic from hosts on networks 192.168.146.0, 192.168.147.0, 192.168.148.0, and 192.168.149.0 only. Which two ACL statements, when combined, would you use to accomplish this task? (Choose two).

access-list 10 permit ip 192.168.146.0 0.0.1.255

access-list 10 permit ip 192.168.147.0 0.0.255.255

access-list 10 permit ip 192.168.148.0 0.0.1.255

access-list 10 permit ip 192.168.149.0 0.0.255.255

access-list 10 permit ip 192.168.146.0 0.0.0.255

access-list 10 permit ip 192.168.146.0 255.255.255.0

Refer to the exhibit. A TFTP server has recently been installed in the Atlanta office. The network administrator is located in the NY office and has made a console connection to the NY router. After establishing the connection, they are unable to backup the configuration file and IOS of the NY router to the TFTP server. What is the cause of this problem?

The NY router has an incorrect subnet mask.

The TFTP server has an incorrect IP address.

The TFTP server has an incorrect subnet mask.

The network administrator computer has an incorrect IP address.

What is the effect of this configuration?

line vty 0 4
password todd
login
transport input ssh

It configures SSH globally for all logins.

It tells the router or switch to try to establish an SSH connection first and if that fails to use Telnet.

It configures a Cisco network device to use the SSH protocol on incoming communications via the VTY lines.

It configures the device to only use only Telnet on the VTY lines.

To prevent users from plugging a host into a Switch port, which command is used to enable port security on a Switch?

Switch#switchport port-security

Switch(config)#switchport port-security

Switch(config-if)#switchport port-security enable

Switch(config-if)#switchport port-security

When a site-to-site VPN is used, which protocol is responsible for the transport of user data?

IPsec

IKEv1

MD5

IKEv2

security-model aaa

set security-model aaa

aaa enable

aaa new-model

What is the primary difference between AAA authentication and authorization?

Authentication identifies and verifies a user who is attempting to access a system, and authorization controls that tasks the user can perform.

Authentication controls the system processes a user can access, and authorization logs the activities the user initiates.

Authentication verifies a username and password, and authorization handles the communication between the authentication agent and the user database.

Authentication identifies a user who is attempting to access a system, and authorization validates the user's password.

What are the two most commonly used authentication factors in multifactor authentication? (Choose two)

Biometric factor

Time factor

Confidentiality factor

Knowledge factor

Encryption factor

On a Cisco router which two router modes can be protected by a password? (Choose two).

user mode

privileged mode

global configuration mode

router configuration mode

interface configuration mode

Which command can you enter to configure a local username with an encrypted password and EXEC mode user privileges?

Router(config)#username jdoe privilege 1 password 7 08314D5D1A48

Router(config)#username jdoe privilege 1 password 7 PASSWORD1

Router(config)#username jdoe privilege 15 password 0 08314D5D1A48

Router(config)#username jdoe privilege 15 password 0 PASSWORD1

What method of data collection used by Cisco DNA Center follows a push-based model?

Telemetry

SNMP

CLI

CRUD

Ansible

How do traditional campus device management and Cisco DNA Center device management differ in regard to deployment?

Traditional campus device management allows a network to scale more quickly than with Cisco DNA Center device management.

Cisco DNA Center device management can deploy a network more quickly than traditional campus device management.

Cisco DNA Center device management can be implemented at a lower cost than most traditional campus device management options.

Traditional campus device management schemes can typically deploy patches and updates more quickly than Cisco DNA Center device management.

What is a benefit of using a Cisco Wireless LAN Controller?

Central AP management requires more complex configurations.

Unique SSIDs cannot use the same authentication method.

It supports autonomous and lightweight APs.

It eliminates the need to configure each access point individually

What statement about Link Aggregation when implemented on a Cisco Wireless LAN controller is true?

The EtherChannel must be configured in "mode active".

One functional physical port is needed to pass client traffic.

To pass client traffic, two or more ports must be configured.

When enabled, the WLC bandwidth drops to 500Mbps.

A network engineer is configuring an OSPFv2 neighbor adjacency. Which of the following parameters must be unique regarding OSPF routers? (Choose two).

Area ID

Netmask

OSPF Process ID

IP Address

Timers

Router ID

A router is running three routing processes: RIP, OSPF, and EIGRP, each configured with default characteristics. Each process learns a route to the same remote network. If there are no static routes to the destination and none of the routes were redistributed, which route will be placed in the IP routing table?

The route learned through EIGRP.

The route learned through OSPF.

The route learned through RIP.

The route with the lowest metric.

All three routes with the router load balancing.

An engineer configured an OSPF neighbor as a designated router. Which state verifies the designated router is in the proper mode?

Init

2-way

Exchange

Full

Which statement about the native VLAN in 802.1Q is false?

The native VLAN should not be changed

The native VLAN defaults to VLAN 1 in Cisco switches

The native VLAN can represent a security vulnerability

The native VLAN must match on each end of a trunk link

What is the primary effect of the spanning-tree portfast command?

It enables BPDU messages.

It immediately enables the port in the listening state.

It immediately puts the port into the forwarding state when the switch boots or the port is connected.

It minimizes spanning tree convergence time.

What does RSTP use for a fast converging backup for the root port in RSTP?

The backup port

The root secondary port

The alternate port

The non-designated port

In a switched environment, what does the IEEE 802.1Q standard describe?

The operation of VTP.

A method of VLAN trunking.

An approach to wireless LAN communication.

The process for root bridge selection.

VLAN pruning

What term is assigned to an untagged VLAN on an IEEE 802.1Q trunk?

Primary VLAN

Management VLAN

Secondary VLAN

Native VLAN

Which of these represents an IPv6 link-local address?

FE08:

2001::

2002::

FE80::

FF02::

Which two endpoint measures are used to minimize the chances of falling victim to phishing and social engineering attacks? (Choose two)

Patch for cross-site scripting.

Perform backups to the private cloud

Protect against input validation and character escapes in the endpoint.

Install a spam and virus email filter.

Protect systems with an up-to-date antimalware program.

A workstation has just resolved a browser URL to the IP address of a server. What protocol will the workstation now use to determine the destination MAC address to be placed into frames directed toward the server?

HTTP

DNS

DHCP

RARP

ARP

An organization has decided to start using cloud-provided services. Which cloud service allows the organization to install its own operating system on a virtual machine?

Platform-as-a-service

Network-as-a-service

Software-as-a-service

Infrastructure-as-a-service

How can you ensure that only the MAC address of a server is allowed by switch port Fa0/1?

Configure port Fa0/1 to accept connections only from the static IP address of the server.

Configure the server MAC address as a static entry of port security.

Use a proprietary connector type on Fa0/1 that is compatible with other host connectors.

Bind the IP address of the server to its MAC address on the switch to prevent other hosts from spoofing the server IP address.

What feature permits the dynamic learning of the static port security addresses?

Lazy learning

Lazy collection

Sticky learning

Overlay collection

Underlay collection

A switch receives a frame on one of its ports. There is no entry in the MAC address table for the destination MAC address. What will the switch do with the frame?

Drop the frame.

Forward it out of all ports except the one that received it.

Forward it out of all ports.

Store it until it learns the correct port.

A host wants to send a message to another host that has the IP address 115.99.80.157. IP does not know the hardware address of the destination device. Which protocol can be used to discover the MAC address?

ARP

DNS

DHCP

ICMP

BOOTP

IGMP

What are two benefits of network automation? (Choose two).

Faster changes with more reliable results.

Fewer network failures.

Increased network security.

Reduced hardware footprint.

Reduced operational costs.

What plane of operation would OSPF belong to in a Cisco DNA Center SDN environment?

Management Plane

Control Plane

Data Plane

Policy Plane

Which of the following commands will enable a global IPv6 address based on the Modified EUI-64 format interface ID?

ipv6 address 5000::2222:1/64

ipv6 address autoconfig

ipv6 address 2001:db8:2222:7272::72/64 link-local

ipv6 enable

Refer to the exhibit. Which default gateway address should be assigned to HostA?

192.168.1.1

192.168.1.65

192.168.1.66

192.168.1.129

10.1.1.1

10.1.1.2

Which command will set the default gateway to 192.168.12.1 on a Cisco switch?

Switch(config)# ip default-network 192.168.12.1

Switch(config)# ip route-default 192.168.12.1

Switch(config)# ip default-gateway 192.168.12.1

Switch(config)# ip route 192.168.12.1 0.0.0.0

Thanks to OSPF. your router has several matches for a destination prefix in its routing table. Which will it use to forward packets?

The longest matching prefix entry

The lowest admin distance

The largest cost

The oldest entry

What are three characteristics of the OSPF routing protocol? (Choose three).

It uses the DUAL algorithm to determine the best route.

OSPF is a classful routing protocol.

It uses cost to determine the best route.

It converges quickly.

OSPF routers discover neighbors before exchanging routing information.

OSPF routers send the complete routing table to all directly attached routers.

What two things will a router do when running a distance vector routing protocol? (Choose two).

Send periodic updates regardless of topology changes.

Send entire routing table to all routers in the routing domain.

Use the shortest-path algorithm to the determine best path.

Update the routing table based on updates from their neighbors.

Maintain the topology of the entire network in its database.

The SP-assigned public IP address

The private IP address of the internal workstation

The private IP address of the WAN interface

The SP-assigned private IP address

What WAN design ensures that your users can still access the internet even in the event of a catastrophic failure at your main ISP?

Dual homed

Remote branch

2 tier

DMVPN

Overlay

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question

21. Question

22. Question

23. Question

24. Question

25. Question

26. Question

27. Question

28. Question

29. Question

30. Question

31. Question

32. Question

33. Question

34. Question

35. Question

36. Question

Sort elements

37. Question

38. Question

39. Question

40. Question

41. Question

42. Question

43. Question

44. Question

45. Question

46. Question

47. Question

48. Question

49. Question

50. Question

51. Question

52. Question

53. Question

54. Question

55. Question

56. Question

57. Question

58. Question

59. Question

60. Question

61. Question

62. Question

63. Question

64. Question

65. Question

66. Question

67. Question

68. Question

69. Question

70. Question

71. Question

72. Question

73. Question

74. Question