CCN A 4 Raspunsuri

1
1. What are two main components of data confidentiality? (Choose two.)

checksum
digital certificates
encapsulation
encryption
hashing

2. Which network component has the primary function of detecting and logging attacks made against the network?
Cisco Security Agent
antivirus software scanner
intrusion detection system
intrusion prevention system

3.Refer to the exhibit. A network
administrator has issued the
commands that are shown on Router1
and Router2. A later review of the
routing tables reveals that neither
router is learning the LAN network of
the neighbor router. What is most
likely the problem with the RIPng
configuration?
The serial interfaces are in different subnets.
The RIPng process is not enabled on interfaces.
The RIPng network command is not configured.
The RIPng processes do not match between Router1 and Router2

4. Which three guidelines would help contribute to creating a strong password policy? (Choose three.)
Once a good password is created, do not change it.
Deliberately misspell words when creating passwords.
Create passwords that are at least 8 characters in length.
Use combinations of upper case, lower case, and special characters.
Write passwords in locations that can be easily retrieved to avoid being locked out.
Use long words found in the dictionary to make passwords that are easy to remember

5.Refer to the exhibit. Headquarters is connected through
the Internet to branch office A and branch office B. Which
WAN technology would be best suited to provide secure
connectivity between headquarters and both branch
offices?
ATM
VPN
ISDN
Frame Relay
broadband DSL

6. Which combination of authentication and Layer 2 protocol should be used to establish a link between a Cisco and a non-
Cisco router without sending authentication information in plain text?
CHAP and HDLC
CHAP and PPP
PAP and HDLC
PAP and PPP

2

7. A technician is talking to a colleague at a rival company and comparing DSL transfer rates between the two companies.
Both companies are in the same city, use the same service provider, and have the same rate/service plan. What is the
explanation for why company 1 reports higher download speeds than company 2 reports?
Company 2 downloads larger files than company 1 downloads.
Company 2 must share the connection to the DSLAM with more clients than company 1 shares.
Company 1 is closer to the service provider than is company 2.
Company 1 has a lower volume of POTS traffic than company 2 has.

8. An administrator is configuring a dual stack router with IPv6 and IPv4 using RIPng. The administrator receives an error
message when trying to enter the IPv4 routes into RIPng. What is the cause of the problem?
When IPv4 and IPv6 are configured on the same interface, all IPv4 addresses are over-written in favor of the newer
technology.
Incorrect IPv4 addresses are entered on the router interfaces.
RIPng is incompatible with dual-stack technology.
IPv4 is incompatible with RIPng.

9. What component of VPN technology combines message text with a key to make the message unreadable by
unauthorized receivers?
message hash
user password
RSA signature
encryption algorithm

10. Which variable is permitted or denied by a standard access control list?
protocol type
source IP address
source MAC address
destination IP address
destination MAC address

11. What name is given to the location where a customer network interfaces with a network that is owned by another
organization?
CPE
DCE
local loop
demarcation point

12. What will be the result of adding the command ip dhcp excluded-address 10.10.4.1 10.10.4.5 to the configuration of a
local router that has been configured as a DHCP server?
Traffic that is destined for 10.10.4.1 and 10.10.4.5 will be dropped by the router.
Traffic will not be routed from clients with addresses between 10.10.4.1 and 10.10.4.5.
The DHCP server will not issue the addresses ranging from 10.10.4.1 to 10.10.4.5.
The router will ignore all traffic that comes from the DHCP servers with addresses 10.10.4.1 and 10.10.4.5

13. What functionality do access control lists provide when implementing dynamic NAT on a Cisco router?
which addresses are allowed to be accessed from the inside network
which addresses are allowed out of the router
which addresses are assigned to a NAT pool
which addresses are to be translated

3

14. Which statement about a VPN is true?
VPN link establishment and maintenance is provided by LCP.
DLCI addresses are used to identify each end of the VPN tunnel.
VPNs use virtual Layer 3 connections that are routed through the Internet.
Only IP packets can be encapsulated by a VPN for tunneling through the Internet
15. An administrator is unable to receive e-mail. While troubleshooting the problem, the administrator is able to ping the
local mail server IP address successfully from a remote network and can also successfully ping using the mail server name.
At which layer of the OSI model is the problem most likely to be found?
physical layer
network layer
data link layer
application layer

16. Which data link layer encapsulation protocol is used by default for serial connections between two Cisco routers?
ATM
Frame Relay
HDLC
PPP
SDLC

17. A network administrator has changed the VLAN configurations on his network switches over the past weekend. How
can the administrator determine if the additions and changes improved performance and availability on the company
intranet?
Conduct a performance test and compare with the baseline that was established previously.
Interview departmental secretaries and determine if they think load time for web pages has improved.
Determine performance on the intranet by monitoring load times of company web pages from remote sites.
Compare the hit counts on the company web server for the current week to the values that were recorded in previous
weeks.

18. Which statement accurately describes a role that is played in establishing a WAN connection?
ISDN and ATM are circuit-switched technologies that are used to establish on demand a path through the service provider
network.
Data link layer protocols like PPP and HDLC define how data is encapsulated for transmission across a WAN link.
A packet-switching network establishes a dedicated circuit between nodes for the duration of the communication session.
Frame Relay switches are normally considered to be customer premises equipment (CPE) and are maintained by local
administrators.

19. What is an accurate description of CHAP when used with PPP on a serial connection between two routers?
A username and password are sent to the peer router, which replies with an accept or reject message.
A username and password are sent to the peer router. If these match the configuration in the peer, the peer in turn provides
a username and password to the initiating router.
A challenge message is sent to the peer router, which responds with its username and a calculated value based on a
shared secret. This value is then compared by the challenger to its own calculations.
An encrypted password is sent to the peer router, which decrypts it and compares it to a shared secret. If the decrypted
passwords match, the peer sends the encrypted password back to the initiating router.

20. Which technology is used to dynamically map next hop, network layer addresses to virtual circuits in a Frame Relay
network?
Inverse ARP
LMI
DLCI

4

21. A DHCP server is configured with a block of excluded addresses. What two devices would be assigned static addresses
from the excluded address range? (Choose two.)
a protocol analyzer
DNS server for the network
network printer that is used by many different users
a laptop that will get a different address each time it boots up

22. Compared with IDS systems, what can IPS systems do to provide further protection of computer systems?
detect potential attacks
stop the detected attack from executing
update OS patches for computer systems
scan computer systems for viruses and spyware

23. A company has its headquarters office in Dallas and five branch offices located in New York, Chicago, Los Angeles,
Seattle, and Atlanta. WAN links are used for communications among offices in six sites. In planning the WAN links, the
network designer is given two requirements: (1) minimize cost and (2) provide a certain level of WAN link reliability with
redundant links. Which topology should the network designer recommend?
star
full mesh
hierarchical
partial mesh

24. An administrator issues the command show interfaces s0/1/0 on a router that is configured for Frame Relay. Which
console output may indicate an LMI mismatch?
Serial0/1/0 is administratively down
Serial0/1/0 is up, line protocol is up
Serial0/1/0 is up, line protocol is down
Serial0/1/0 is down, line protocol is down

25. Which IP address and wildcard mask combination can be used in an ACL statement to match the 172.16.0.0/30
network?
172.16.0.0 0.0.0.1
172.16.0.0 0.0.0.3
172.16.0.0 0.0.0.7
172.16.0.0 255.255.255.252

26. A company is looking for a WAN solution to connect its headquarters site to four remote sites. What are two
advantages that dedicated leased lines provide compared to a shared Frame Relay solution? (Choose two.)
reduced jitter
reduced costs
reduced latency
the ability to burst above guaranteed bandwidth
the ability to borrow unused bandwidth from the leased lines of other customers

27. What function does LCP perform in the establishment of a PPP session?
LCP brings the network layer protocols up and down.
It carries packets from several network layer protocols.
It encapsulates and negotiates options for IP and IPX.
It negotiates and sets up control options on the WAN data link.

28. An employee of XYZ corporation will begin working from home. The employee has a choice of DSL or cable technology
for WAN connectivity. Which connectivity characteristic is accurately described?
Cable transfer rates are dependent on the length of the local loop.
5

DSL provides a high-speed connection over existing copper phone wires.
DSL download speeds are affected by high usage in the area.
DSL service shares the same frequency range as voice calls.
Cable connectivity usually requires new fiber installed for the local loop.

29. Which option represents a best practice for applying ACLs?
Named ACLs are less efficient than numbered ACLs.
Standard ACLs should be applied inside the core layer.
ACLs applied to outbound interfaces use fewer router resources.
Extended ACLs should be applied closest to the source that is specified by the ACL.

30. While troubleshooting a problem with an e-mail server, an administrator observes that the switch port used by the
server shows up, line protocol up. The administrator cannot ping the server. At which layer of the OSI model is the
problem most likely to be found?
application layer
network layer
data link layer
physical layer

31. Which two configurations must be completed before an RSA key can be generated on a router? (Choose two.)
a hostname
a domain name
the SSH version
the SSH timeouts
local authentication on the VTY lines

32. What type of ACL can be used to force a user to authenticate to the router before accessing a network?
standard
dynamic
reflexive
time-based

33. What is the result when the command security passwords min-length 8 is entered into a router?
All new passwords are required to be a minimum of 8 characters in length.
All current passwords are now required to be a minimum of 8 characters in length.
Enable passwords must be at least 8 characters but line passwords are unaffected.
Nothing will happen until the command service password-encryption is entered. Then all future passwords must have a
minimum of 8 characters.

34. Because of a remote-procedure call failure, a user is unable to access an NFS server. At what layer of the TCP/IP model
does this problem occur?
network layer
data link layer
physical layer
application layer

35. What is the result when the command permit tcp 10.25.132.0 0.0.0.255 any eq smtp is added to a named access
control list and applied on the inbound interface of a router?
TCP traffic with a destination to the 10.25.132.0/24 is permitted.
Only Telnet traffic is permitted to the 10.24.132.0/24 network
Ttraffic from 10.25.132.0/24 is permitted to anywhere on using any port.
Traffic using port 25 from the 10.25.132.0/24 is permitted to all destinations.

6

36.Refer to the exhibit. R1 is performing NAT overload for the
10.1.1.0/24 inside network. Host A has sent a packet to the web
server. What is the destination IP address of the return packet
from the web server?
10.1.1.2:1234
172.30.20.1:1234
172.30.20.1:3333
192.168.1.2:80

37.Refer to the exhibit. Communication between two peers has failed.
Based on the output that is shown, what is the most likely cause?
interface reset
unplugged cable
improper LMI type
PPP negotiation failure

38.Refer to the exhibit. Partial results of the show access-
lists and show ip interface FastEthernet 0/1 commands for
router Router1 are shown. There are no other ACLs in
effect. Host A is unable to telnet to host B. Which action will
correct the problem but still restrict other traffic between
the two networks?
Apply the ACL in the inbound direction.
Apply the ACL on the FastEthernet 0/0 interface.
Reverse the order of the TCP protocol statements in the
ACL.
Modify the second entry in the list to permit tcp host
172.16.10.10 any eq telnet .

39.Refer to the exhibit. The link between the CTRL and BR_1
routers is configured as shown in the exhibit. Why are the routers
unable to establish a PPP session?
The clock rate must be 56000.
The usernames are misconfigured.
The IP addresses are on different subnets.
The clock rate is configured on the wrong end of the link.
The CHAP passwords must be different on the two routers.
Interface serial 0/0/0 on CTRL must connect to interface serial 0/0/1 on BR_1.

40.Refer to the exhibit. A network administrator is trying to
backup the IOS software on R1 to the TFTP server. He
receives the error message that is shown in the exhibit, and
cannot ping the TFTP server from R1. What is an action that
can help to isolate this problem?
Use correct source file name in the command.
7

Verify that the TFTP server software is running.
Make sure that there is enough room on the TFTP server for the backup.
Check that R1 has a route to the network where the TFTP server resides.

41.Refer to the exhibit. RIPv2 has been configured on all
routers in the network. Routers R1 and R3 have not
received any RIP routing updates. What will fix the issue?
Enable RIP authentication on R2.
Issue the ip directed-broadcast command on R2.
Change the subnet masks to 10.11.12.0/8 and
172.16.40.0/16 on R2.
Enable CDP on R2 so that the other routers will receive
routing updates.

42.Refer to the exhibit. What is placed in the address field in the
header of a frame that will travel from the Orlando router to the
DC router?
DLCI 123
DLCI 321
10.10.10.25
10.10.10.26
MAC address of the DC router

44.Refer to the exhibit. A network administrator is trying to connect R1 remotely to
make configuration changes. Based on the exhibited command output, what will be
the result when attempting to connect to R1?
failure to connect due to Telnet not being enabled
failure to connect due to incomplete configuration for Telnet
a successful connection and ability to make configuration changes
a successful connection but inability to make configuration changes because of the
absence of an enable secret password

45.Refer to the exhibit. The corporate network that is shown has been
assigned network 172.16.128.0/19 for use at branch office LANs. If VLSM
is used, what mask should be used for addressing hosts at Branch4 with
minimal waste from unused addresses?
/19
/20
/21
/22
/23
/24

8

46.Refer to the exhibit. Every time the administrator reboots this
router, the boot process ends in setup mode. What is a possible
problem?
There is insufficient RAM for the IOS to load on this router.
A password recovery process should be done on this router.
The bootstrap version and the version of the IOS are different.
The IOS image is damaged and must be reloaded using tftpdnld.
The configuration register is set to ignore the startup
configuration

47.Refer to the exhibit. Users who are connected to R1 report
that they are unable to establish connectivity to the users who
are connected to router R2. A network administrator tests the
link with the debug ppp authentication command. Based on the
output shown, which statement correctly defines the problem on
the link?
R1 uses PAP as a method of authentication, and R2 uses CHAP.
R1 uses CHAP as a method of authentication, and R2 uses PAP.
R1 uses an incorrect user name or password for CHAP authentication.
R2 uses an incorrect user name or password for PAP authentication.

48.Refer to the exhibit. The network administrator creates a standard access control list to prohibit traffic from the
192.168.1.0/24 network from reaching the Internet. The access list must still permit the 192.168.1.0/24 network access to
the 192.168.2.0 network. On which router interface and in which direction should the access control list be applied?
interface Fa0/0, inbound
interface Fa0/0, outbound
interface S0/0/0, inbound
interface S0/0/0, outbound

49. Refer to the exhibit. A host connected to Fa0/0 is unable to acquire an IP address from the DHCP server. The output of
the debug ip dhcp server command shows DHCPD: there is no address pool for 192.168.3.17. What is the problem?
The address 192.168.3.17 address is already in use by Fa0/0.
The pool of addresses for the 192Network pool is configured incorrectly.
The ip helper-address command should be used on the Fa0/0 interface.
The 192.168.3.17 address has not been excluded from the 192Network pool.

50. Refer to the exhibit. Which VLAN will carry untagged traffic on FastEthernet
0/1?
VLAN 1
VLAN 2
VLAN 11
VLAN 12
VLAN 30
VLAN 999

9

51. Refer to the exhibit. A network administrator is tasked with
completing the Frame Relay topology that interconnects two
remote sites. How should the point-to-point subinterfaces be
configured on HQ to complete the topology?
frame-relay interface-dlci 103 on Serial 0/0/0.1
frame-relay map ip 192.168.1.1 103 broadcast on Serial 0/0/0.1

52. Refer to the exhibit. Company ABC expanded its business and
recently opened a new branch office in another country. IPv6
addresses have been used for the company network. The data
servers Server1 and Server2 run applications which require end-
to-end functionality, with unmodified packets that are forwarded
from the source to the destination. The edge routers R1 and R2 support dual stack configuration. What solution should be
deployed at the edge of the company network in order to successfully interconnect both offices?
a new WAN service supporting only IPv6
NAT overload to map inside IPv6 addresses to outside IPv4 address
a manually configured IPv6 tunnel between the edge routers R1 and R2
static NAT to map inside IPv6 addresses of the servers to an outside IPv4 ddress and dynamic NAT for the rest of the inside
IPv6 addresses

53. Which three statements accurately describe a security policy? (Choose three.)
It creates a basis for legal action if necessary.
It defines a process for managing security violations.
It defines acceptable and unacceptable use of network resources.
The remote access policy is a component of the security policy that governs acceptable use of e-mail systems.
It is kept private from users to prevent the possibility of circumventing security measures.
It provides step-by-step procedures to harden routers and other network devices.

54. A company is deciding which WAN connection type it should
implement between its main office and branch offices. The
company wants to use a cost-effective service that provides
virtual circuits between each office. The company also wants to
be able to transmit variable-length packets on these circuits.
Which solution best meets these requirements?
ATM
HDLC
ISDN
Frame Relay

55. Refer to the exhibit. This router is being configured to use SDM, but the
SDM interface of the router cannot be accessed. What is the cause of the
problem?
The VTY lines are not configured correctly.
The HTTP timeout policy is not configured correctly.
The authentication method is not configured correctly.
The username and password are not configured correctly.
10

56. Which two devices can be used by teleworkers who need to connect to the company network across the PSTN for a
few hours a day? (Choose two.)
router
CSU/DSU
DSL modem
cable modem
access server
dialup modem

57. What is the function of an intrusion detection system on a network?
to restrict access to only authorized users
to detect attacks against a network and send logs to a management console
to prevents attack against the network and provide active defense mechanisms
to detect and prevent most viruses and many Trojan horse applications from spreading in the network

58. Refer to the exhibit. All devices are configured as
shown in the exhibit. PC1 is unable to ping the default
gateway. What is the cause of the problem?
The default gateway is in the wrong subnet.
STP has blocked the port that PC1 is connected to.
Port Fa0/2 on S2 is assigned to the wrong VLAN.
S2 has the wrong IP address assigned to the VLAN30
interface.

59. When Frame Relay encapsulation is used, what feature provides flow control and exchanges information about the
status of virtual circuits?
LCP
LMI
DLCI
Inverse ARP

60. A system administrator must provide Internet connectivity for ten hosts in a small remote office. The ISP has assigned
two public IP addresses to this remote office. How can the system administrator configure the router to provide Internet
access to all ten users at the same time?
Configure DHCP and static NAT.
Configure dynamic NAT for ten users.
Configure static NAT for all ten users.
Configure dynamic NAT with overload.

61. Refer to the exhibit. From the output of the show interfaces and ping
commands, at which layer of the OSI model is a fault indicated?
application
transport
network
data link
physical

11

62. What three questions can be answered using data gathered from a baseline on a new network? (Choose three.)
Are areas of the network experiencing high error rates?
Will the disaster recovery procedures work correctly?
What parts of the network have the highest volume?
Does the organization require more network technicians?
How does the network perform during peak periods?
Are there any devices working at top capacity?
What networks are the most susceptible to security attacks?

63. Which type of ACL will permit traffic inbound into a private network only if an outbound session has already been
established between the source and destination?
extended
reflexive
standard
time-based

68. A recently patched application server is experiencing response
time problems. The network on which the application server is
located has been experiencing occasional outages that the network
team believes may be related to recent routing changes. Network
and application teams have been notified to work on their
respective issues. Which statement applies to this situation?
Only results from the software package should be tested as the
network is designed to accommodate the proposed software
platform.
Scheduling will be easy if the network and software teams work
independently.
It will be difficult to isolate the problem if two teams are implementing changes independently.
Results from changes will be easier to reconcile and document if each team works in isolation.

69.Refer to the exhibit. Branch A has a non-Cisco router that is using IETF
encapsulation and Branch B has a Cisco router. After the commands that
are shown are entered, R1 and R2 fail to establish the PVC. The R2 LMI is
Cisco, and the R1 LMI is ANSI. The LMI is successfully established at both
locations. Why is the PVC failing?
The PVC to R1 must be point-to-point.
LMI types must match on each end of a PVC.
The frame relay PVCs cannot be established between Cisco and non-Cisco
routers.
The IETF parameter is missing from the frame-relay map ip 10.10.10.1 201
command

70. Where does a service provider assume responsibility from a customer for a WAN connection?
local loop
DTE cable on router
demarcation point
demilitarized zone

12

71. Refer to the exhibit. An ACL called Managers already exists on this router. What happens if the network administrator
issues the commands as shown in the exhibit?
The commands are added to the end of the existing ACL.
The existing Managers ACL will be overwritten by the new ACL.
The router will output an error message and no changes will be made.
A duplicate Managers ACL will be created that will contain only the new commands.

72. Which statement is true about PAP in the authentication of a PPP session?
PAP uses a two-way handshake.
The password is unique and random.
PAP conducts periodic password challenges.
PAP uses MD5 hashing to keep the password secure.

73. Which combination of Layer 2 protocol and authentication should be used to establish a link without sending
authentication information in plain text between a Cisco and a non-Cisco router?
PPP with PAP
PPP with CHAP
HDLC with PAP
HDLC with CHAP

74. Which option correctly defines the capacity through the local loop guaranteed to a customer by the service provider?
BE
DE
CIR
CBIR

75. Which wireless solution can provide mobile users with non line-of-sight broadband Internet access at speeds
comparable to DSL or cable?
Wi-Fi
WiMAX
satellite
Metro Ethernet

76. Refer to the exhibit. EIGRP has been configured as a routing
protocol on the network. Users on the 192.168.1.0/24 network
should have full access to the web server that is connected to
192.168.3.0/24 but should not be allowed to telnet to router R3.
Verifying the configuration, the network administrator realizes
that users on network 192.168.1.0/24 can successfully telnet to
the router. What should be done to remedy the problem?
The ACL 101 statements 10 and 20 should be reversed.
The ACL 101 should be applied on R3 VTY lines 0 4 in the inbound
direction.
The ACL 101 should be applied on R3 VTY lines 0 4 in the outbound direction.
The ACL 101 should be applied on R3 Serial0/0/1 interface in the outbound direction.
The ACL 101 statement 10 should be changed to: permit ip 192.168.1.0 0.0.0.255 any

77. What does an access control list determine when used with NAT on a Cisco router?
addresses that are to be translated
addresses that are assigned to a NAT pool
13

addresses that are allowed out of the router
addresses that are accessible from the inside network

78. Which security solution has the responsibility of monitoring suspicious processes that are running on a host and that
might indicate infection of Trojan horse applications?
antivirus application
operating system patches
intrusion prevention system
Cisco Adaptive Security Appliance

79. Refer to the exhibit. Results of the show vlan and show vtp
status commands for switches S1 and S2 are displayed in the
exhibit. VLAN 11 was created on S1. Why is VLAN 11 missing from
S2?
There is a Layer 2 loop.
The VTP domain names do not match.
Only one switch can be in server mode.
S2 has a higher spanning-tree priority for VLAN 11 than S1 does.

80. A technician has been asked to run the Cisco SDM one-step lockdown on a customer router. What will be the result of
this process?
Traffic is only accepted from and forwarded to SDM-trusted Cisco routers.
Security testing is performed and the results are saved as a text file stored in NVRAM.
All traffic that enters the router is quarantined and checked for viruses before being forwarded.
The router is tested for any potential security problems and all recommended security-related configuration changes will
be automatically applied.
81. Refer to the exhibit. Which data transmission technology is
being represented?
TDM
PPP
HDLC
SLIP

82. A network administrator is instructing a technician on best practices for applying ACLs. Which two suggestions should
the administrator provide? (Choose two.)
Standard ACLs should be applied inside the core layer.
Place standard ACLs as close to the destination as possible.
ACLs applied to outbound interfaces require fewer router resources.

83.Refer to the exhibit. Which configuration command would
result in the output in the exhibit?
ip nat inside source static 10.1.200.254 172.16.76.3
14

84. What are three important reasons to establish a network baseline? (Choose three.)
to determine the time it takes for the network to self recover from a failure
to determine which areas in the network are underutilized or overutilized
to determine the performance of the network during the normal hours of operation
to determine what thresholds should be set for the devices that need to be monitored
to determine the areas in the network which should not be included in the monitoring process
to determine the number of users whose access to network resources should be restricted

85. Which two statements are true about creating and applying access lists? (Choose two.)
There is an implicit deny at the end of all access lists.
One access list per port, per protocol, per direction is permitted.
Access list entries should filter in the order from general to specific.
The term inbound refers to traffic that enters the network from the router interface where the ACL is applied.
Standard ACLs should be applied closest to the source while extended ACLs should be applied closest to the destination.

86. Refer to the exhibit. Router RT is not receiving routing
updates from router RTA. What is causing the problem?
The ip rip authentication key-chain command specifies exam rather
than test.
The name of the keystring is not the name of the neighboring
router.
The key chains are given the same name on both routers.
The passive-interface command was issued for RTA.

87. Which functions are provided by LCP and NCP as part of the PPP layered architecture?
LCP sets up the PPP connection and its parameters. NCP terminates the PPP connection.
LCP sets up the PPP connection and its parameters. NCP handles higher layer protocol configurations.
LCP includes the link-establishment phase. NCP includes link-maintenance and link-termination phases.
LCP negotiates options for multiple network layer protocols. NCP agrees automatically on encapsulation formats.

88.Refer to the exhibit. EIGRP has been configured on routers R1 and R2.
Connectivity across the Frame Relay switch between routers R1 and R2 is
successfully verified using the ping command. However, no EIGRP routes
are appearing in the routing table. What could be a cause for this
failure?
The Frame Relay switch has failed.
The frame-relay map statement is incorrect.
The S0/0/0 interface of router R1 is administratively down.
The S0/0/0 interface of router R2 has an incorrect IP address.

89.Refer to the exhibit. A network administrator is considering
updating the IOS on Router1. What version of IOS is currently
installed on Router1?
1
12.4
15 1841
15

90. Which statement is true about wildcard masks?
A wildcard mask must be created by inverting the subnet mask.
A wildcard mask performs the same function as a subnet mask.
A wildcard mask of 0.0.0.0 means the address should match exactly.
A wildcard mask uses a 1 to identify IP address bits that must be checked.

91.Refer to the exhibit. ACL 120 is configured to allow traffic coming from 192.168.10.0/24 network to go to any
destination limited to ports 80 and 443. ACL 130 should allow only requested HTTP traffic to flow back into the network.
What additional configuration is needed in order for the access lists to fulfill the requirements?

(1)

92.Refer to the exhibit. Which statement about the configuration is
true?
10.10.10.1 is most likely assigned to the local LAN interface.
10.10.10.1 through 10.10.10.255 is available to be assigned to users.
All DHCP clients looking for an IP address will use 10.10.10.1 and
10.10.10.2.
All DHCP clients in the 10.10.10.0/24 network will use 10.10.10.2 as the default gateway.

93. Which statement is true about an interface that is configured with the IPv6 address command?
IPv6 traffic-forwarding is enabled on the interface.
A link-local IPv6 address is automatically configured on the interface.
A global unicast IPv6 address is dynamically configured the interface.
Any IPv4 addresses that are assigned to the interface are replaced with an IPv6 address.

94. What can a network administrator do to recover from a lost router password?
use the copy tftp: flash: command
boot the router to bootROM mode and enter the b command to load the IOS manually
telnet from another router and issue the show running-config command to view the password
boot the router to ROM monitor mode and configure the router to ignore the startup configuration when it initializes

95. Which statement is true about the PPP authentication phase?
CHAP uses a 2-way handshake to exchange the credentials.
PAP can perform continuous authentication after a link is established.
CHAP sends an encrypted username and password during the authentication process.
The authentication phase takes place before the NCP configuration phase begins.

16

96.Refer to the exhibit. A network administrator is configuring Frame Relay on router HQ. It is desired that each Frame
Relay PVC between the routers be in a separate subnet. Which two commands on HQ will accomplish this task for the
connection to R1? (Choose two.)
HQ(config)# interface S0/0/0
HQ(config)# interface S0/0/0.1 multipoint
HQ(config)# interface S0/0/0.1 point-to-point
HQ(config-subif)# frame-relay interface dlci 103
HQ(config-subif)# frame-relay interface dlci 301
HQ(config-if)# frame-relay map ip 172.16.1.1 255.255.255.0 301 broadcast

97. Which wildcard mask would specify all IP addresses from 192.168.8.0 through 192.168.15.255?
0.0.0.7
0.0.7.255
0.0.8.255
0.0.15.255
0.0.255.255

98.Refer to the exhibit. WestSW is supposed to send VLAN
information to EastSW, but that did not occur. What will force
WestSW to send a VLAN update to EastSW?
Change EastSW to be a VTP server.
Reload both WestSW and EastSW at the same time.
Erase the VLAN database on EastSW and reload the switch.
Reset the configuration revision number on EastSW to zero.
Reload EastSW.

99. Which additional functionality is available on an interface when the encapsulation is changed from HDLC to PPP?
flow control
error control
authentication
synchronous communication

100. Which three physical network problems should be checked when a bottom-up troubleshooting approach has been
chosen to troubleshoot network performance? (Choose three.)
cable connectivity
high collision counts
STP failures and loops
address mapping errors
high CPU utilization rates
excess packets that are filtered by the firewall

1. What is the result when the command permit tcp 192.168.4.0 0.0.3.255 any eq telnet is entered in an access control list
and applied on the inbound interface of a router?
All traffic that originates from 192.168.4.0/24 is permitted.
All TCP traffic is permitted, and all other traffic is denied.
All Telnet traffic from the 192.168.0.0/16 network is permitted.
All traffic from the 192.168.4.0/22 network is permitted on TCP port 23.

2. Which encapsulation protocol when deployed on a Cisco router over a serial interface is only compatible with another
Cisco router?
PPP
SLIP
HDLC
Frame Relay

17

3. What translation method will allow a server to always keep the same public address?
static NAT
dynamic NAT
static NAT with overload
dynamic NAT with overload

4. A light manufacturing company wishes to replace its DSL service with a non-line-of-sight broadband wireless solution
that offers comparable speeds. Which solution should the customer choose?
Wi-Fi
satellite
WiMAX
Metro Ethernet

5.Refer to the exhibit. Which statement correctly
describes how Router1 processes an FTP request packet
that enters interface S0/0/0, and is destined for an FTP
server at IP address 172.16.1.5?
The router matches the incoming packet to the statement
that is created by access-list 201 permit ip any
any command and allows the packet into the router.
The router reaches the end of ACL 101 without matching a
condition and drops the packet because there is no
statement that was created by access-list 101 permit ip
any any command.
The router matches the incoming packet to the
statement that was created by the access-list 101 permit
ip any 172.16.1.0 0.0.0.255 command, ignores the remaining statements in ACL 101, and allows the packet into the router.
The router matches the incoming packet to the statement that was created by the access-list 201 deny icmp 172.16.1.0
0.0.0.255 any command, continues comparing the packet to the remaining statements in ACL 201 to ensure that no
subsequent statements allow FTP, and then the router drops the packet.

6. Which characteristic of VPN technology prevents the contents of data communications from being read by
unauthorized parties?
QoS
latency
reliability
confidentiality

7.Refer to the exhibit. A technician is teaching a
trainee to interpret the results of various Frame Relay
troubleshooting commands. What conclusion can be
drawn from the output that is shown?
Neighboring routers should use DLCI 177 to reach the
Branch router.
DLCI 177 will be used to identify all broadcasts that are
sent out the Branch router.
The Branch router has the address 192.168.3.1 configured for the S0/0/0 interface.
To reach 192.168.3.1, the Branch router will use the virtual circuit that is identified by DLCI 177.

8.Refer to the exhibit. A system administrator must provide
connectivity to a foreign network for ten hosts in a small remote
office. The commands that are listed in the exhibit were entered
into the router that connects the foreign network. The users in
the remote office report occasional failure to connect to resources
in the foreign network. What is the likely problem?
The source addresses are not correctly designated.
The translated address pool is not correctly sized.
18

The access-list command is referencing the wrong addresses.
The wrong interface is designated as the source for translations.

9. An issue of response time has recently arisen on an application server. The new release of a software package has also
been installed on the server. The configuration of the network has changed recently. To identify the problem, individuals
from both teams responsible for the recent changes begin to investigate the source of the problem. Which statement
applies to this situation?
Scheduling will be easy if the network and software teams work independently.
It will be difficult to isolate the problem if two teams are implementing changes independently.
Results from changes will be easier to reconcile and document if each team works in isolation.
Only results from the software package should be tested as the network is designed to accommodate the proposed software
platform.

10.Which method is most effective in protecting the routing information that is propagated between routers on the
network?
Disable IP source routing.
Configure passive interfaces.
Configure routing protocol authentication.
Secure administrative lines with Secure Shell.

11.When NAT is in use, what is used to determine the addresses that can be translated on a Cisco router?
access control list
routing protocol
inbound interface
ARP cache

12. A network administrator can ping the Perth router, but gets a Password Required but None Set message when trying
to connect remotely via Telnet. Which command sequence must be applied to the Perth router to allow remote access?
Router(config)# line console 0 Router(config-line)# login Router(config-line)# password cisco
Router(config)# line vty 0 4 Router(config-line)# login Router(config-line)# password cisco
Router(config)# line virtual terminal Router(config-line)# enable login Router(config-line)# password cisco
Router(config)# line vty 0 4 Router(config-line)# enable secret Router(config-line)# password cisco
Router(config)# enable secret cisco Router(config)# enable cisco

13. A router does not load its configuration after a power failure. After running the show startup-configuration command,
the administrator finds that the original configuration is intact. What is the cause of this problem?
The configuration register is set for 02100.
The configuration register is set for 02142. Boot system commands are not configured.
Flash memory is empty causing the router to bypass the configuration in NVRAM

14. A network administrator is asked to design a system to allow simultaneous access to the Internet for 250 users. The ISP
for this network can only supply five public IPs. What can be used to accomplish this task?
routable translation
dynamic translation
static translation
port address translation

15. The LAN attached to the Ethernet interface of the Raleigh router shown in the graphic is addressed with private IP
addresses. If one public IP is assigned to the company, which commands could be used in a configuration that allows all
devices with private IPs in this network to access the Internet? (Choose two.)
ip nat inside source list 1 interface serial0 overload
ip nat outside source list 1 interface serial0 overload
ip nat inside serial0
ip nat inside source list 1 pool Raleigh overload
ip nat inside Raleigh overload
ip inside nat source list 1 interface serial0 Raleigh

16. The command output shown in the graphic was taken from a Cisco 806 broadband router. Which kind of address
translation is in effect on this router?
static
dynamic
overload
19

private
public

17. Which of the following IP addresses are defined by RFC 1918 as private addresses? (Choose three.)
192.168.146.0/22
172.10.25.0/16
172.31.0.0/16
20.0.0.0/8
10.172.92.8/29

18. How will data be transmitted from the router to the ISP if the router has the two links shown in the graphic?
Both links will transmit data at the same rate.
1544 bits can be transmitted simultaneously from the router over the T1 line.
Both links will transmit bits one by one.
The 56K link will transmit a maximum of 53 bits at the same time.

19. Which statements about DHCP are true? (Choose three.)
DHCP uses TCP.
DHCP uses UDP.
DHCP sends messages to the server on port 67.
DHCP sends messages to the server on port 68.
DHCP sends messages to the client on port 67.
DHCP sends messages to the client on port 68.

20. Which command would be used to exclude the IP address 192.168.24.5 from the DHCP address pool on a router?
Router(dhcp-config)# ip dhcp excluded-address 192.168.24.5
Router# ip dhcp excluded-address 192.168.24.5
Router(config-excluded)# ip dhcp excluded-address 192.168.24.5
Router(config)# ip dhcp excluded-address 192.168.24.5
Router(config)# excluded-address 192.168.24.5
Router(dhcp-config)# excluded-address 192.168.24.5

21. The WAN connection for a nationwide company with 250 offices must support constant connections to core layer
services for file sharing, and occasional Internet access. Which combination of WAN technologies will meet these needs
with minimum expense?
Frame Relay PVC for Internet access and ATM for file server access
Frame Relay PVC for Internet access and ISDN for file server access
ISDN for Internet access and X.25 for file server access
ISDN for Internet access and Frame Relay PVC for file server access

22. Which command would produce the output shown in the graphic?
show ip dhcp server statistics
show ip dhcp binding
debug ip dhcp server events
debug ip dhcp binding

23. Which of the following devices is used to establish the communications link between the customer equipment and the
local loop for digital lines?
terminal adapter
modem
CSU/DSU
PBX switch
ISDN switch
Frame Relay Switch

24. Which of the following statements are true about Frame Relay? (Choose three.)
Frame Relay operation is defined by a series of ISO standards.
Frame Relay is a packet switched, connection-oriented, wide area network service.
Frame Relay only supports point-to-point connections.
A router can be considered as data terminal equipment (DTE) in a frame relay system.
20

Frame Relay is a cell switched, connection-oriented, wide area network service.
Frame Relay networks use a subset of the HDLC protocol to carry information.

25. ITU-T Q.921 specifies the use of which protocol for sending control and signaling messages between the router and the
ISDN switch?
HDLC
IPCP
LAPB
LAPD
NCP
SS7

26. A company needs a WAN connection that is capable of transferring voice, video, and data at a minimum data rate of
155 Mbps. Which WAN connection is the best choice?
X.25
DSL
ATM
ISDN BRI
ISDN PRI

27. Which statement explains why basic DSL is an unpopular WAN connectivity choice for
enterprisecomputer departments that support home users?
DSL offers insufficient bandwidth to home users.
DSL requires the installation of new cables, which is not always possible for home users.
DSL dialup connection time is too slow for business use.
DSL has limited geographical availability.

28. When planning simple WAN connections for a small company, which feature of the three layer hierarchical model
makes it a good choice for the WAN topology.
It provides for redundancy.
It allows for easy WAN expansion in case of company growth.
It is less expensive.
It provides faster connection time.
It provides less latency and jitter.

29. Which of the following terms describes a device that will put data on the local loop?
DLCI
CO
DCE
DTE
PRI
BRI

30. Which of the following are supported by a BRI interface on a router? (Choose two.)
Two independent channels that can carry analog data with a bandwidth of 64 KHz.
A single 128 Kbps digital bearer channel.
Two multiplexed channels carrying digital data.
A single 64 Kbps signaling channel.
A multiplexed data channel that can only handle SS7 information.
A 16 Kbps delta channel used for signaling purposes.

31. A network administrator has been asked to provide the network in the United States with an ISDN WAN link. The
router available to provide the WAN connection is a non-modular Cisco router with two serial connections. What must be
done to adapt one of the serial interfaces of this router for the ISDN connection?
Nothing. The router is already suitable.
Purchase a BRI WAN interface card to install in the router.
Purchase a U interface to install in the router.
Purchase a TA/NT1 device to install on the router.

21

32. (NEED ANSWERS!!!)Which of the following is a function of a DCE device?
determines the next-hop address for a packet
multiplexes signals from several sources
adapts information for use on a service providers network
used to directly connect two DTEs to simulate a WAN network

33. Why would data frames be discarded in a Frame Relay network? (Choose two.)
The frame contains an incorrect IP address.
An error has been detected in computing the frame check sequence.
There is not enough bandwidth dedicated for the data contained in the frame.
Data is transmitted at a rate greater than the access speed.
The frame contains an incorrect DLCI.

34. Which of the following are commonly used as Data Communications Equipment? (Choose two.)
modem
router
CSU/DSU
ISDN Switch
Frame Relay Switch

35. Which of the following LCP options can be configured for PPP? (Choose three.)
CHAP
Stacker
IPCP
CDPCP
Multilink

36. Which command will provide for CHAP authentication if the hostname on a challenging router is tampa with a
password of florida?
username tampa password florida
username tampa florida
hostname tampa password florida
hostname tampa florida

37. Which of the following describes the PAP protocol? (Choose two.)
sends unencrypted authentication passwords
performs a three-way handshake
allows repeated login attempts
uses the remote router hostname to verify identity
sends a random challenge throughout the session

38. Why was NAT created? (Choose two.)
to create firewalls on routers
to conserve IP addresses
to translate domain names into IP addresses
to map network addresses to the corresponding data link address
to hide internal addresses from external devices

39. An ISDN router is configured for DDR as shown in the graphic to provide Internet connectivity for the company.
Immediately after a user in the company attempts opens a web browser to connect to the Internet, another user in the
company tries to download a file using FTP. What will happen? (Choose two.)
The user that opened the browser will connect to the Internet because the DDR link will consider this traffic interesting.
The Internet user will be disconnected because the FTP data will cause the DDR link to shut down.
The DDR link will allow the FTP traffic because it is interesting.
The DDR link will not allow the FTP traffic because it is not interesting.
The FTP connection will fail because the DDR link is already in use for the Internet connection.
The FTP connection will succeed because the web user already opened the DDR link.

40. Which command configures the SPID on the first B channel of an ISDN interface?
Router(config)# isdn spid0 spid-number [ldn]
Router(config)# isdn spid1 spid-number [ldn]
22

Router(config-if)# isdn spid0 spid-number [ldn]
Router(config-if)# isdn spid1 spid-number [ldn]

41. What does the command debug isdn q921 display?
exchange of call setup and teardown messages
PAP and CHAP authentication traffic
Layer 2 messages on the D channel
protocol errors and statistics
Layer 2 messages on the B channel

42. When PPP authentication is enabled, which of the following may be checked before establishing a PPP link between
two devices? (Choose two.)
the enable password on the remote device
the ip host configuration on the remote device
the security server database for the username and password of the remote device
the hostname and enable password on the local device
the local database for the username and password of the remote device

43. How many separate B channel circuits can be provisioned on a PRI interface that uses a T1 line for connectivity?
2
16
23
24
30
128

44. Which operating systems support multiuser capability? (Choose three.)
Linux
Windows 98
Windows ME
Windows XP
Windows 2000

45. What does a DLCI of 0 indicate about a frame? (Choose two.)
This is the first data frame sent by the router.
This is a management frame.
The encapsulation type is Cisco.
The encapsulation type is IETF.
The LMI type is Ansi or q933a.
The LMI type is Cisco.

46. Which of the following protocols can be used to encapsulate data traffic sent from a router BRI interface? (Choose
two.)
Link Access Protocol Data
High-Level Data Link Control
Logical Link Control
Serial Data Link Control
Point to Point protocol
Binary Synchronous Control protocol

47. An administrator consoled into the Jelly router needs to telnet to the Butter router. What DLCI will the Jelly router
place in the frame to perform this operation?
110
115
220
225

48. Which commands can be used to identify which DLCIs are active? (Choose two.)
show frame-relay map
show frame-relay lmi
show frame-relay pvc
23

show frame-relay interface
show interfaces
show ip route

49. A technician is testing the functionality of a recently installed router. The technician is unable to ping the serial
interface of a remote router. The technician executes the show interface serial0/0 command on the local router and sees
the following line in the output: Serial0/0 is up, line protocol is down. What are possible causes for this command
output? (Choose three.)
remote CSU/DSU failure
serial cable missing
interface shutdown
keepalives not being sent
clocking signal missing

50. A router needs to forward a message received from a host. How does the router identify the correct VC to forward the
message? (Choose two.)
The router forwards the frame to all ports in the network and learns the address from the reply frame.
The destination host IP address is embedded in the DLCI.
The router searches Inverse ARP tables for maps of DLCIs to IP addresses.
A table of static mappings can be searched.
The router broadcasts a request for the required IP address.

51. Which of the following statements regarding point-to-point subinterfaces are true? (Choose two.)
A point-to-point subinterface on one router must be connected to a similar subinterface on a remote router.
Each point-to-point subinterface connection is configured with its own subnet.
The DLCIs configured on the remote and local routers must be the same for the PVC.
LMI frames are not transmitted through a subinterface.
Routing updates in point-to-point networks are not subject to the split-horizon rule.

52. Which of the following can be concluded from the router output displayed in the graphic? (Choose two.)
The local DLCI number of this PVC is 100.
The interface has been configured for subinterfaces and this map is for subinterface 0.
Inverse ARP has determined the remote ip address as 10.140.1.1.
The LMI type is ANSI (064).
There is currently no congestion on the link.

53. Which of the following are functions of the Local Management Interface used in Frame Relay networks? (Choose
three.)
exchange information about the status of virtual circuits
map DLCIs to network addresses
provide flow control
provide error notification
provide congestion notification
send keepalive packets to verify operation of the PVC

54. Which of the following describe functions of the Point-to-Point protocol with regards to the OSI model? (Choose
three.)
PPP uses Layer 3 of the OSI model to establish and maintain a session between devices.
PPP operates at all layers of the OSI model.
PPP uses the data link layer to configure such options as error detection and compression.
PPP provides a mechanism to multiplex several network layer protocols.
PPP uses Network Control Protocols (NCP) to test and maintain connectivity between devices.
PPP can be configured on both synchronous and asynchronous serial interfaces.

43. Which of the following describes the CHAP protocol? (Choose three.)
exchanges a random challenge number during the session to verfiy identity
sends authentication password to verify identity
prevents transmission of login information in plain text
disconnects the PPP session if authentication fails
initiates a two-way handshake
24

55. Which of the following switching types will allow the communication devices in the providers network to be shared
and only allocated to an individual subscriber during data transfer?
circuit-switched
packet-switched
frame-switched
dedicated-switched lines
lease-switched

56. How does Frame Relay technology process frames that contain errors? (Choose two.)
Frame Relay services depend on the upper layer protocols to handle error recovery.
It requires the receiving device to request that the sender retransmit erroneous frames.
FECN, BECN, and DE bits are set in the frames to minimize errors.
The receiving device drops any frames that contain errors without notifying the sender.
The frame relay switch notifies the sender that errors were detected.

57. Which of the following describes the WAN devices and cabling shown in the graphic? (Choose two.)
A null-modem cable is used between RouterD and DeviceC for connectivity.
A DB-25 or DB-9 serial cable is connected to interface S0/0 of RouterA.
DeviceB and DeviceC are DCE devices.
The same encoding scheme must be used by DeviceB and DeviceC.
A synchronous serial connection exists between DeviceB and DeviceC.

58. Which Frame Relay flow control mechanism is used to signal routers that they should reduce the flow rate of frames?
DE
BE
CIR
FECN
CBIR

59. An administrator issues the command confreg 02142 at the rommon 1> prompt. What is the effect when this router
is rebooted?
Contents in RAM will be erased.
Contents in RAM will be ignored.
Contents in NVRAM will be erased.
Contents in NVRAM will be ignored.

60. Which type of network attack exploits vulnerabilities in the compromised system with the intent of propagating itself
across a network?
virus
worm
Trojan horse
man-in-the-middle

61. Which important piece of troubleshooting information can be discovered about a serial interface using the show
controllers command?
queuing strategy
serial cable type
interface IP address
encapsulation method

62.
25

Refer to the exhibit. Which statement is true about the Frame Relay connection?
The Frame Relay connection is in the process of negotiation.
A congestion control mechanism is enabled on the Frame Relay connection.
The ACTIVE status of the Frame Relay connection indicates that the network is experiencing congestion.
Only control FECN and BECN bits are sent over the Frame Relay connection. No data traffic traverses the link.

63. Refer to the exhibit. Computers on the internal
network need access to all servers in the external
network. The only traffic that is permitted from the
external network must be responses to requests
that are initiated on the internal network. Which
security measure would satisfy this requirement?
a numbered extended ACL
a named standard ACL
a reflexive ACL
a dynamic ACL

64. Refer to the exhibit. A network administrator is
attempting to configure a Frame Relay network. The
administrator enters the commands as shown in the
exhibit on R2, but the Frame Relay PVCs are inactive.
What is the problem?
The incorrect DLCI numbers are being configured on R2.
The S0/0/0 interface on R2 needs to be point-to-point.
The frame-relay map commands are missing the cisco
keyword at the end.
A single router interface cannot connect to more than one
Frame Relay peer at a time.

65. Which configuration on the vty lines provides the best security measure for network administrators to remotely access
the core routers at headquarters?

26

66.Refer to the exhibit. In the partial router configuration that is shown,
what is the purpose of access list BLOCK_XYZ?
to prevent source IP address spoofing by hosts on the Fa0/0 LAN
to block access by Fa0/0 LAN hosts to all network services beyond the
router
to prevent users on the Fa0/0 LAN from opening Telnet sessions on the
router
to secure Fa0/0 hosts by allowing only locally sourced traffic into the
Fa0/0 LAN

67.Refer to the exhibit. A
network administrator notices
that three VLANs created on
SW1 do not show in SW3.
Based on output from the
show vtp status and show
running-config commands,
what is the cause of the
problem in the SW3
configuration?
VTP version 2 is disabled.
The VTP mode is
misconfigured.
The configure revision number
for VTP does not match.
Trunk mode is not configured
on FastEthernet 0/1 and 0/2.

27

68.Refer to the exhibit. What statement is
true about the core router devices?
They use multiport internetworking
devices to switch traffic such as Frame
Relay, ATM, or X.25 over the WAN.
They provide internetworking and WAN
access interface ports that are used to
connect to the service provider network.
They provide termination for the digital
signal and ensure connection integrity
through error correction and line
monitoring.
They support multiple
telecommunications interfaces of the highest speed and are able to forward IP packets at full speed on all of those
interfaces.

69. When would the multipoint keyword be used in Frame Relay PVCs configuration?
when global DLCIs are in use
when using physical interfaces
when multicasts must be supported
when participating routers are in the same subnet

70. A light manufacturing company wishes to replace its DSL service with a non-line-of-sight broadband wireless solution
that offers comparable speeds. Which solution should the customer choose?
Wi-Fi
satellite
WiMAX
Metro Ethernet

71. A network technician wants to implement SSH as the means by which a router may be managed remotely. What are
two procedures that the technician should use to successfully complete this task? (Choose two.)
Configure the login banner.
Configure authentication.
Define the asymmetrical keys.
Configure the console password.
Enter the service password-encryption command.

72. What are the symptoms when the s0/0/0 interface on a router is attached to an operational CSU/DSU that is
generating a clock signal, but the far end router on the point-to-point link has not been activated?
show controllers indicates cable type DCE V.35. show interfaces s0/0/0 indicates serial down, line protocol down.
show controllers indicates cable type DCE V.35. show interfaces s0/0/0 indicates serial up, line protocol down.
show controllers indicates cable type DTE V.35. show interfaces s0/0/0 indicates serial up, line protocol down.
show controllers indicates cable type DTE V.35. show interfaces s0/0/0 indicates serial down, line protocol down.

73. Which characteristic of VPN technology prevents the contents of data communications from being read by
unauthorized parties?
QoS
latency
reliability
confidentiality

74. Which address provides an example of an IPv6 link-local address?
FE80::1324:ABCD
2001:2345:AB12:1935::FEFF
2001:1234:0000:9CA::0876/64
1234:ABCD:5678:EF00:9234:AA22:5527:FC35
75. What major benefit does Cisco HDLC provide that ISO standard HDLC lacks?
flow control
error control
multiprotocol support
cyclic redundancy checks
28

administrator has issued the commands that
are shown on Router1 and Router2. A later
review of the routing tables reveals that
neither router is learning the LAN network of
the neighbor router. What is most likely the
problem with the RIPng configuration?
The serial interfaces are in different subnets.
The RIPng process is not enabled on
interfaces.
The RIPng network command is not configured.
The RIPng processes do not match between
Router1 and Router2.

77. At what physical location does the responsibilty for a WAN connection change from the user to the service provider?
demilitarized zone (DMZ)
demarcation point
local loop
cloud

78. Which IP address and wildcard mask would be used in an ACL to block traffic from all hosts on the same subnet as host
192.168.16.43/28?
access-list 10 deny 192.168.16.0 0.0.0.31
access-list 10 deny 192.168.16.16 0.0.0.31
access-list 10 deny 192.168.16.32 0.0.0.16
access-list 10 deny 192.168.16.32 0.0.0.15
access-list 10 deny 192.168.16.43 0.0.0.16

79.Refer to the exhibit. How is the TCP/IP configuration
information specified by the default-router and dns-server
commands made available?
The TCP/IP information is forwarded to a 10.0.1.3 to be supplied to
DHCP clients.
The TCP/IP information is used by DNS clients to forward all data to
the default gateway on R1 of 10.0.1.3.
The TCP/IP information is supplied to any DHCP client on the
network connected to the FastEthernet 0/0 interface of R1.
The TCP/IP information is applied to each packet that enters R1 through the FastEthernet 0/0 interface that are hosts on the
10.0.1.0 /24 network except packets from addresses 10.0.1.2, 10.0.1.16, and 10.0.1.254.

80.Refer to the exhibit. Based on the output as shown, which two
statements correctly define how the router will treat Telnet traffic that
comes into interface FastEthernet 0/1? (Choose two).
Telnet to 172.16.10.0/24 is denied.
Telnet to 172.16.20.0/24 is denied.
Telnet to 172.16.0.0/24 is permitted.

81. While troubleshooting a PPP link that uses PAP authentication, a network administrator notices an incorrectly
configured password in the running configuration. The administrator corrects the error by entering the command ppp pap
sent-username ROUTER_NAME password NEW_PASSWORD, but the link still does not come up.
Assuming that the rest of the configuration is correct and that the link has no physical layer problems, what should the
administrator do?
29

Save the configuration to NVRAM.
Shut down the interface then re-enable it.
Generate traffic by pinging the remote router.
Use CHAP to ensure compatibility with the remote router.

82. A network administrator determines that falsified routing information is propagating through the network. What
action can be used to address this threat?
Update the IOS images.
Change console passwords.
Employ end-user authentication.
Configure routing protocol authentication.

83. What is tunneling?
using digital certificates to ensure that data endpoints are authentic
creating a hash to ensure the integrity of data as it traverses a network
using alternate paths to avoid access control lists and bypass security measures
encapsulating an entire packet within another packet for transmission over a network

administrator has been asked to configure
PPP with CHAP authentication over the
serial link between routers R1 and R2.
What additional configuration should be
included on both routers to complete the
task?

network administrator is
creating a prototype to verify
the new WAN design.
However, the communication
between the two routers
cannot be established. Based
on the output of the
commands, what can be
done to solve the problem?
Replace the serial cable .
Replace the WIC on RA.
Configure RA with a clock
rate command.
Issue a no shutdown interface
command on RB.

86.Refer to the exhibit. A network technician
has been called in to resolve a problem with
this network segment. The symptoms include
a loss of connectivity throughout the network
segment, high link utilization, and syslog
messages that indicate constant MAC address
relearning. What is the likely cause of these
symptoms?
cable fault
30

faulty NIC card
IP addressing error
spanning tree problem
NAT configuration error

87.Refer to the exhibit. To reach R2, and for configuring Frame Relay on
the point-to-point interfaces shown in the graphic, which DLCI should
be used in the frame-relay interface-dlci command that is issued on R1?
100
101
200
201

88.Refer to the exhibit. Which two actions are
described by the output of the debug ip nat
command? (Choose two.)
A packet from 192.168.1.2 has been translated
using NAT overload.
The * indicates that the NAT translation was
unsuccessful and the packet was dropped.
A packet from 192.31.7.2 has been translated by NAT and forwarded to a destination address of 198.133.219.2.
A packet from 192.31.7.2 has been sent to 198.133.219.2, which was then translated to the destination 192.168.1.2
A packet from 192.168.1.2 has been translated by NAT to a source address of 198.133.219.2 and forwarded to the
destination 192.31.7.2.

89 Which Layer 2 access method separates traffic into time slots and is specified by DOCSIS for use with cable high speed
Internet service?
TDMA
FDMA
CDMA
S-CDMA

90 What is a common use of a TFTP server?
to allow access to restricted system resources
to provide active defense mechanisms that prevent attacks against the network
to perform IOS image and configuration uploads and downloads over the network

91 After troubleshooting a LAN, a network technician has determined that network performance has been severely
impacted by the attenuation of the bit stream. Which physical layer condition led the technician to this conclusion?
There is an excessive amount of EMI on the physical media.
The amplitude of the physical layer data has been significantly reduced.
There is an open conductor between the endpoints on the physical media.
The maximum allowed clock rate on the physical media has been exceeded.

92 A network technician wants to implement SSH as the means by which a router may be managed remotely. What are
two procedures that the technician should use to successfully complete this task? (Choose two.)
Configure the login banner.
Configure authentication.
Define the asymmetrical keys.
Configure the console password.
Enter the service password-encryption command.

31

93 Which two protocols in combination should be used to establish a link with secure authentication between a Cisco and
a non-Cisco router? (Choose two.)
HDLC
PPP
SLIP
PAP
CHAP

94 An administrator attempts to telnet into a remote device and receives the error Password required but none set.
How can the administrator resolve this issue?
Set the enable secret command on the remote router.
Set the login command on the vty lines on the remote router.
Set the password command on the vty lines on the remote router.
Enable the service password-encryption command on the remote router.

95 Which additional functionality is available on an interface when the encapsulation is changed from HDLC to PPP?
flow control
error control
authentication
synchronous communication

96 A network administrator uses the 3DES algorithm to encrypt traffic that crosses a VPN. Which VPN characteristic is
being configured?
authentication
authorization
data integrity
data confidentiality
97.Refer to the exhibit. What
statement is true about the core router
devices?
They use multiport internetworking
devices to switch traffic such as Frame
Relay, ATM, or X.25 over the WAN.
They provide internetworking and WAN
access interface ports that are used to
connect to the service provider
network.
They provide termination for the digital
signal and ensure connection integrity through error correction and line monitoring.
They support multiple telecommunications interfaces of the highest speed and are able to forward IP packets at full speed
on all of those interfaces.

98 A network administrator is instructing a technician on best practices for applying ACLs. Which suggestion should the
administrator provide?
Standard ACLs should be applied closest to the core layer.
ACLs applied to outbound interfaces are the most efficient.

99 When configuring a Frame Relay connection, what is the purpose of Inverse ARP?
to assign a DLCI to a remote peer
to disable peer requests from determining local Layer 3 addresses
to negotiate LMI encapsulations between local and remote Frame Relay peers
to create a mapping of DLCI to Layer 3 addresses that belong to remote peers

100 An administrator learns of an e-mail that has been received by a number of users in the company. This e-mail appears
to come from the office of the administrator. The e-mail asks the users to confirm their account and password
information. Which type of security threat does this e-mail represent?
cracking
phishing
32

phreaking
spamming

1 Which encapsulation protocol when deployed on a Cisco router over a serial interface is only compatible with another
Cisco router?
PPP
SLIP
HDLC
Frame Relay
2.Refer to the exhibit. Which option
displays the correct ACL that would need
to be applied inbound on the S0/0/0
interface on R2 in order to permit any
type of network traffic and block all FTP
traffic coming from hosts on the
172.16.10.0/24 network going to the
Internet?

3 Which characteristic of VPN technology prevents the contents of data communications from being read by unauthorized
parties?
QoS
latency
reliability
confidentiality
4 Which configuration on the vty lines provides the best security measure for
network administrators to remotely access the core routers at headquarters?

33

5 . What are two characteristics of DSL technology? (Choose two.)
Uploads typically offer larger transfer rates than downloads.
Service providers deploy DSL in the local loop of the telephone network.
DSL download rates are reduced by large volumes of POTS voice traffic.
Filters and splitters allow POTS and DSL traffic to share the same medium.
DSL is a shared medium that allows many users to share bandwidth available from the DSLAM.

6.Refer to the exhibit. What is the
effect of the extended ACL when
applied inbound on the S0/0/0
interface on R2?
All IP traffic will be permitted during the
specified days and time range.
Both IP and Telnet traffic will be
permitted during the specified days and
time range.
Only Telnet traffic destined for
172.16.10.0/24 will be permitted during
the specified days and time range.
Telnet traffic will be permitted only
during the specified days and time
range. All other network traffic will be
permitted any time.

7.Refer to the exhibit. Branch A has a Cisco router.
Branch B has a non-Cisco router set for IETF
encapsulation. After the commands that are shown
are entered, R2 and R3 fail to establish the PVC. The
R2 LMI is Cisco, and the R3 LMI is ANSI. The LMI is
successfully established at both locations. Why is
the PVC failing?
The PVC to R3 must be point-to-point.
LMI types must match on each end of a PVC.
The ietf parameter is missing from
the frame-relay map ip 10.10.10.3 203command.
The PVCs at R2 use different encapsulation
types. A single port can only support one
encapsulation type.

8. At what physical location does the responsibility
for a WAN connection change from the service provider to the user?
DMZ
local loop
CSU/DSU
demarcation point

34

9.Refer to the exhibit. What
can be concluded from the
exhibited output of the
debug ip nat command?
The 10.1.1.225 host is
exchanging packets with the
192.168.0.10 host.
The native 10.1.200.254
address is being translated
to 192.168.0.10.
The 192.168.0.0/24
network is the inside
network.
Port address translation is in
effect.

10.Refer to the exhibit. Which two statements
correctly describe how Router1 processes an FTP
request that enters interface S0/0/0 and is
destined for an FTP server at IP address
192.168.1.5? (Choose two.)
The packet does not match an access list condition.
statement that is created from the access-list 201
permit ip any any command.
permit ip any 192.168.1.0 0.0.0.255 command.
deny icmp 192.168.1.0 0.0.0.255 any command.
The packet is allowed into Router1.

11.Refer to the exhibit. Which statement is true about the WAN switch device?
It uses a multiport internetworking device to switch traffic such as Frame Relay, ATM or X.25 over the WAN.
It provides internetworking and WAN access interface ports that are used to connect to the service provider network.
It provides termination for the digital signal and ensures connection integrity through error correction and line monitoring.
It converts the digital signals produced by a computer into voice frequencies that can be transmitted over the analog lines of
the public telephone network.

35

12.Refer to the exhibit. Which statement is true about the status of the Frame Relay connection?
The Frame Relay connection is in the process of negotiation.
Only packets with control bit DE set are sent over the PVC. No data traffic traverses the link.
Packets marked as FECN and BECN indicate that a congestion control mechanism is enabled on the Frame Relay PVC.
The DLCI USAGE = LOCAL status indicates that the PVC link is not established between the interface S0/0/0.1 and the Frame
Relay switch.

13. An administrator is configuring a dual stack router with IPv6 and IPv4 using RIPng. The administrator receives an error
message when trying to enter the IPv4 routes into RIPng. What is the cause of the problem?
RIPng is incompatible with dual-stack technology.
All interfaces have been configured with the incorrect IPv4 addresses.
RIPv1 or RIPv2 needs to be configured in addition to RIPng to successfully use IPv4.
When IPv4 and IPv6 are configured on the same interface, all IPv4 addresses are shut down in favor of the newer technology.

14. Refer to the exhibit. A network administrator is using two routers to test a WAN connection . What can be concluded
based on the output of the show running-config commands?
The WAN link is using PPP encapsulation.
The WAN link speed is faster than a T1 line.
The router R2 serves as the DCE for the WAN link.
The WAN link is configured with the Cisco default encapsulation protocol.

15. An administrator learns of an e-mail that has been received by a number of users in the company. This e-mail appears
to come from the office of the administrator. The e-mail asks the users to confirm their account and password
information. Which type of security threat does this e-mail represent?
cracking
phishing
phreaking
spamming

16. What effect would the Router1(config-ext-nacl)# permit tcp 172.16.4.0 0.0.0.255 any eq www command have when
implemented inbound on the f0/0 interface?
All TCP traffic is permitted, and all other traffic is denied.
36

The command is rejected by the router because it is incomplete.
All traffic from 172.16.4.0/24 is permitted anywhere on any port.
Traffic originating from 172.16.4.0/24 is permitted to all TCP port 80 destinations.

17. What is a common use of a TFTP server?
to allow access to restricted system resources
to provide active defense mechanisms that prevent attacks against the network
to perform IOS image and configuration uploads and downloads over the network

18.Refer to the exhibit. PC1, PC2, and PC3 are
configured with dynamic address assignments.
PC2 is assigned an IP address from the DHCP
server. What would account for the IP
addresses that are currently assigned to PC1
and PC3?
Switch S2 port Fa0/12 is configured for full-
duplex.
These addresses were included in the DHCP
server pools.
Router R1 has a misconfigured IP address on
interface Fa1/0.
R1 interface Fa0/0 is not in the same network as
the DHCP server.
R1 interfaces Fa0/0 and Fa1/0 do not include
the ip helper-address command.

19.Refer to the exhibit. Routers R1
and R2 are both configured for
single area OSPF. Users who are
connected to switch S1 are unable
to access database applications
that run on servers that are
connected to S2. The network
engineer is working remotely and
only has the information that is
shown in the exhibit to direct
initial troubleshooting efforts.
Based on the exhibit, which OSI
layer is the most appropriate to
start with for a divide-and-
conquer approach?
network layer
application layer
data-link layer
physical layer

20. A network administrator added two switches and a new VLAN over the past weekend. How can the administrator
determine if the additions and changes improved performance and availability on the company intranet?
Perform a baseline test and compare the current values to values that were obtained in previous weeks.
Interview departmental secretaries and determine if they think load time for web pages is improved.
Compare the hit counts on the company web server for the current week to the values that were recorded from previous
weeks.
Performance on the intranet can be determined by monitoring load times of company web pages from remote sites.

37

21.Refer to the exhibit. A network administrator configures a standard
access control list on Router1 to prohibit traffic from the
192.168.0.0/24 network from reaching the Internet. The access control
list also permits traffic from the 192.168.0.0/24 network to reach the
192.168.1.0/24 network. On which interface and in which direction
should the access control list be applied?
interface Fa0/0, inbound
interface Fa0/0, outbound
interface S0/0/0, inbound
interface S0/0/0, outbound

22. Which IEEE 802.16 broadband wireless technology allows users to
connect to the ISP at speeds comparable to DSL and cable?
Wi-Fi
satellite
WiMAX
Metro Ethernet

23.Refer to the exhibit. Router1 and
Router2 each support separate areas of
a data center, and are connected via a
crossover cable. Resources attached to
Router1 are unable to connect to
resources attached to Router2. What is
the likely cause?
The crossover cable is faulty.
The IP addressing is incorrect.
There is a Layer 2 problem with the
router connection.
The upper layers are experiencing an
unspecified problem.
One or both of the Ethernet interfaces
are not working correctly.

24. A network administrator is instructing a technician on best practices for applying ACLs. Which suggestion should the
administrator provide?
Standard ACLs should be applied closest to the core layer.
ACLs applied to outbound interfaces are the most efficient.

25.

Refer to the exhibit. How many addresses could be assigned to clients by DHCP_Router?
3
17
19
51
125
38

network administrator is
creating a prototype to verify
the new WAN design.
However, the communication
between the two routers
cannot be established. Based
on the output of the
commands, what can be done
to solve the problem?
Replace the serial cable.
Replace the WIC on RA.
Configure RA with a clock
rate command.
Issue a no shutdown interface
command on RB.

27. Refer to the exhibit. Routers R1 and R2 have been configured with EIGRP in the same autonomous system. Computers
PC1 and PC2 are not able to ping each other. Further investigation has revealed that the route to 192.168.10.0 is missing
from the routing table on R2. What is the cause of the problem?
The networks are not correctly summarized.
The FastEthernet interfaces on R1 are configured as passive.
The network statements on R2 are incorrectly configured.
EIGRP on R1 does not recognize the 192.168.10.0 network.

28. During the initial configuration of a router, the administrator enters the command no service config. How will the
router behave as a result of this command?
All services will be disabled.
The default configuration will be restored on reboot.
Automatic configuration from the network will be prevented.
Services that are configured on the router will not be allowed to originate traffic.

29.
39

Refer to the exhibit. From the output of the show interface commands, at which OSI layer is a fault indicated?
application
transport
network
data link
physical

30.Refer to the exhibit. PAT has been
implemented on router R2. PC1 and PC2
are unsuccessful when attempting to
connect to Internet resources. What is a
possible cause?
No NAT pool is configured.
The "inside" and "outside" interfaces are
switched.
The access control list is configured with
an incorrect access list number.
The access control list is missing a
statement for the 10.94.6.0 network.
The ip nat inside source list 1
interface command is pointing to the
wrong serial interface.

31. Refer to the exhibit. This serial
interface is not functioning correctly.
Based on the output shown, what is the
most likely cause?
improper LMI type
interface reset
PPP negotiation failure
unplugged cable

32. What three statements describe the roles of devices in a WAN? (Choose three.)
A CSU/DSU terminates a digital local loop.
A modem terminates a digital local loop.
A CSU/DSU terminates an analog local loop.
A modem terminates an analog local loop.
A router is commonly considered a DTE device.
A router is commonly considered a DCE device.

40

33. When configuring remote access to a router, what is the significance of the no password command on a VTY line?
Logins are prevented on that line.
No password is required to log in to that line.
The remote user is not allowed to change the password for that line.
The remote user is prompted to change the line password after connecting to the router.

34..Refer to the exhibit. An administrator has added
the exhibited commands to routers A and B, but no
routing updates are exchanged between the two
routers. Based on the information that is given,
what is the likely cause of the problem?
Router A is advertising the wrong network.
The authentication key strings do not match.
The serial interfaces of routers A and B are not on
the same network.
The authentication key numbers do not match the
EIGRP process number for both routers.

35.Refer to the exhibit. The hosts in network A all have static addresses that are assigned in the 192.168.2.0./24 network.
The hosts in network B are DHCP clients in the 192.168.1.0/24 network. After router R1 has been configured with the
statements as shown in the exhibit, the DHCP clients are reporting that they cannot access any network resources. The
hosts with static addresses cannot access any resources outside network A. What is the problem?
The DHCP scope has the wrong address pool.
The interfaces on R1 are incorrectly addressed.
The assignable DCHP addresses are all excluded.
The DCHP clients are receiving the wrong default router address.

41

36.Refer to the exhibit. Why are the routers unable to establish a PPP session?
The usernames are misconfigured.
The IP addresses are on different subnets.
The clock rate is configured on the wrong end of the link.
The CHAP passwords must be different on the two routers.
Interface serial 0/0/0 on Router1 must connect to interface serial 0/0/1 on Router2.

37. A company uses a PVC with a committed information rate (CIR) of 128 kb/s and a committed burst information rate
(CBIR) of 64 kb/s. The link is used to periodically send updates at a rate of 144 kb/s. What will happen to the update
traffic?
The traffic will be sent, but the company will be charged a penalty.
The traffic will be sent using the additional CBIR and will be guaranteed delivery.
The traffic will be dropped at the CO for exceeding the committed information rate.
The traffic will be sent, but the burst traffic will be marked for discard if congestion is encountered.

38. Which statement is true about NCP?
Link termination is the responsibility of NCP.
Each network protocol has a corresponding NCP.
NCP establishes the initial link between PPP devices.
NCP tests the link to ensure that the link quality is sufficient.

39. Which three items are LCP options that can be configured for PPP? (Choose three.)
CHAP
Stacker
IPCP
CDPCP
Multilink

40. When configuring a Frame Relay connection, what is the purpose of Inverse ARP?
to assign a DLCI to a remote peer
to disable peer requests from determining local Layer 3 addresses
to negotiate LMI encapsulations between local and remote Frame Relay peers
to create a mapping of DLCI to Layer 3 addresses that belong to remote peers

41.Refer to the exhibit. What is another way to represent this IPv6 address?
2031::130F::9C0::130B
2031::130F::9C0:0:130B
2031:0:130F::9C0::130B
2031:0:130F::9C0:0:130B

42.Refer to the exhibit. Which statement is true
about the configuration of R1?
The remote session is encrypted.
A password is sent in plain text.
A connection that is using secure HTTP is enabled.
A local username database is used for
authentication.
42

43.Refer to the exhibit. To reach R2,
and for configuring Frame Relay on
the point-to-point interfaces shown
in the graphic, which DLCI should be
used in theframe-relay interface-
dlci command that is issued on R1?
100
101
200
201

CCN A 4 Raspunsuri

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

CCN A 4 Raspunsuri

Uploaded by

Copyright:

Available Formats

1

1. What are two main components of data confidentiality? (Choose two.)

You might also like