Question 1

Which three statements are typical characteristics of VLAN arrangements? (Choose three.)

Accepted Answer

A)  A new switch has no VLANs configured. 
B)  Connectivity between VLANs requires a Layer 3 device. 
C)  VLANs typically decrease the number of collision domains. 
D)  Each VLAN uses a separate address space. 
E)  A switch maintains a separate bridging table for each VLAN.
F) VLANs cannot span multiple switches. 
A)  A new switch has no VLANs configured. 
B)  Connectivity between VLANs requires a Layer 3 device. 
C)  VLANs typically decrease the number of collision domains. 
D)  Each VLAN uses a separate address space. 
E)  A switch maintains a separate bridging table for each VLAN.
F) VLANs cannot span multiple switches.

Question 2

An engineer is asked to protect unused ports that are configured in the default VLAN on a switch. Which two steps will fulfill the request? (Choose two.)

Accepted Answer

A)  Configure the ports as trunk ports. 
B)  Enable the Cisco Discovery Protocol. 
C)  Configure the port type as access and place in VLAN 99. 
D)  Administratively shut down the ports. 
E)  Configure the ports in an EtherChannel. 
A)  Configure the ports as trunk ports. 
B)  Enable the Cisco Discovery Protocol. 
C)  Configure the port type as access and place in VLAN 99. 
D)  Administratively shut down the ports. 
E)  Configure the ports in an EtherChannel.

Question 3

Which feature or protocol determines whether the QOS on the network is sufficient to support IP services?

Accepted Answer

A)  LLDP 
B)  CDP 
C)  IP SLA 
D)  EEM 
A)  LLDP 
B)  CDP 
C)  IP SLA 
D)  EEM

Question 4

An organization secures its network with multi-factor authentication using an authenticator app on employee smartphones. How is the application secured in the case of a user's smartphone being lost or stolen?

Accepted Answer

A)  The application requires the user to enter a PIN before it provides the second factor 
B)  The application requires an administrator password to reactivate after a configured interval 
C)  The application verifies that the user is in a specific location before it provides the second factor 
D)  The application challenges a user by requiring an administrator password to reactivate when the smartphone is rebooted 
A)  The application requires the user to enter a PIN before it provides the second factor 
B)  The application requires an administrator password to reactivate after a configured interval 
C)  The application verifies that the user is in a specific location before it provides the second factor 
D)  The application challenges a user by requiring an administrator password to reactivate when the smartphone is rebooted

Question 5

A network administrator must configure SSH for remote access to router R1. The requirement is to use a public and private key pair to encrypt management traffic to and from the connecting client. Which configuration, when applied, meets the requirements?

Accepted Answer

A)  R1 #enable R1 #configure terminal R1(config) #ip domain-name cisco.com R1(config) #crypto key generate ec keysize 1024 R1 #enable #configure terminal R1(config) #ip domain-name cisco.com #crypto key generate ec keysize 1024 
B)  R1(config) #crypto key generate ec keysize 2048 #crypto key generate ec keysize 2048 
C)  R1(config) #crypto key encrypt rsa name myKey #crypto key encrypt rsa name myKey 
D)  R1(config) #crypto key generate rsa modulus 1024 #crypto key generate rsa modulus 1024 
A)  R1 #enable R1 #configure terminal R1(config) #ip domain-name cisco.com R1(config) #crypto key generate ec keysize 1024 R1 #enable #configure terminal R1(config) #ip domain-name cisco.com #crypto key generate ec keysize 1024 
B)  R1(config) #crypto key generate ec keysize 2048 #crypto key generate ec keysize 2048 
C)  R1(config) #crypto key encrypt rsa name myKey #crypto key encrypt rsa name myKey 
D)  R1(config) #crypto key generate rsa modulus 1024 #crypto key generate rsa modulus 1024

Question 6

Which technology prevents client devices from arbitrarily connecting to the network without state remediation?

Accepted Answer

A)  802.11n 
B)  802.1x 
C)  MAC Authentication Bypass 
D)  IP Source Guard 
A)  802.11n 
B)  802.1x 
C)  MAC Authentication Bypass 
D)  IP Source Guard

Question 7

Which three statements about MAC addresses are correct? (Choose three.)

Accepted Answer

A)  To communicate with other devices on a network, a network device must have a unique MAC address 
B)  The MAC address is also referred to as the IP address 
C)  The MAC address of a device must be configured in the Cisco IOS CLI by a user with administrative privileges 
D)  A MAC address contains two main components, the first of which identifies the manufacturer of the hardware and the second of which uniquely identifies the hardware 
E)  An example of a MAC address is 0A:26:B8:D6:65:90
F) A MAC address contains two main components, the first of which identifies the network on which the host resides and the second of which uniquely identifies the host on the network 
A)  To communicate with other devices on a network, a network device must have a unique MAC address 
B)  The MAC address is also referred to as the IP address 
C)  The MAC address of a device must be configured in the Cisco IOS CLI by a user with administrative privileges 
D)  A MAC address contains two main components, the first of which identifies the manufacturer of the hardware and the second of which uniquely identifies the hardware 
E)  An example of a MAC address is 0A:26:B8:D6:65:90
F) A MAC address contains two main components, the first of which identifies the network on which the host resides and the second of which uniquely identifies the host on the network

Question 8

In QoS, which prioritization method is appropriate for interactive voice and video?

Accepted Answer

A)  traffic policing 
B)  round-robin scheduling 
C)  low-latency queuing 
D)  expedited forwarding 
A)  traffic policing 
B)  round-robin scheduling 
C)  low-latency queuing 
D)  expedited forwarding

Question 9

Which command should you enter to view the error log in an EIGRP for IPv6 environment?

Accepted Answer

A)  show ipv6 eigrp neighbors 
B)  show ipv6 eigrp topology 
C)  show ipv6 eigrp traffic 
D)  show ipv6 eigrp events 
A)  show ipv6 eigrp neighbors 
B)  show ipv6 eigrp topology 
C)  show ipv6 eigrp traffic 
D)  show ipv6 eigrp events

Question 10

Which type of wireless encryption is used for WPA2 in preshared key mode?

Accepted Answer

A)  AES-128 
B)  TKIP with RC4 
C)  AES-256 
D)  RC4 
A)  AES-128 
B)  TKIP with RC4 
C)  AES-256 
D)  RC4

Question 11

What are two fundamentals of virtualization? (Choose two.)

Accepted Answer

A)  It allows logical network devices to move traffic between virtual machines and the rest of the physical network. 
B)  It allows multiple operating systems and applications to run independently on one physical server. 
C)  It allows a physical router to directly connect NICs from each virtual machine into the network. 
D)  It requires that some servers, virtual machines, and network gear reside on the Internet. 
E)  The environment must be configured with one hypervisor that serves solely as a network manager to monitor SNMP traffic. 
A)  It allows logical network devices to move traffic between virtual machines and the rest of the physical network. 
B)  It allows multiple operating systems and applications to run independently on one physical server. 
C)  It allows a physical router to directly connect NICs from each virtual machine into the network. 
D)  It requires that some servers, virtual machines, and network gear reside on the Internet. 
E)  The environment must be configured with one hypervisor that serves solely as a network manager to monitor SNMP traffic.

Question 12

Refer to the exhibit. Which two events occur on the interface, if packets from an unknown Source address arrive after the interface learns the maximum number of secure MAC address? (Choose two.)

Accepted Answer

A)  The security violation counter dose not increment 
B)  The port LED turns off 
C)  The interface is error-disabled 
D)  A syslog message is generated 
E)  The interface drops traffic from unknown MAC address 
A)  The security violation counter dose not increment 
B)  The port LED turns off 
C)  The interface is error-disabled 
D)  A syslog message is generated 
E)  The interface drops traffic from unknown MAC address

Question 13

What is the effect when loopback interfaces and the configured router ID are absent during the OSPF Process configuration?

Accepted Answer

A)  The lowest IP address is incremented by 1 and selected as the router ID. 
B)  The router ID 0.0.0.0 is selected and placed in the OSPF process. 
C)  No router ID is set, and the OSPF protocol does not run. 
D)  The highest up/up physical interface IP address is selected as the router ID. 
A)  The lowest IP address is incremented by 1 and selected as the router ID. 
B)  The router ID 0.0.0.0 is selected and placed in the OSPF process. 
C)  No router ID is set, and the OSPF protocol does not run. 
D)  The highest up/up physical interface IP address is selected as the router ID.

Question 14

Refer to the exhibit. Which route type is configured to reach the Internet?

Accepted Answer

A)  floating static route 
B)  host route 
C)  network route 
D)  default route 
A)  floating static route 
B)  host route 
C)  network route 
D)  default route

Question 15

Which function is performed by the collapsed core layer in a two-tier architecture?

Accepted Answer

A)  enforcing routing policies 
B)  marking interesting traffic for data policies 
C)  applying security policies 
D)  attaching users to the edge of the network 
A)  enforcing routing policies 
B)  marking interesting traffic for data policies 
C)  applying security policies 
D)  attaching users to the edge of the network

Question 16

Refer to the exhibit. Which command must be executed for Gi1/1 on SW1 to passively become a trunk port if Gi1/1 on SW2 is configured in desirable or trunk mode?

Accepted Answer

A)  switchport mode dynamic auto 
B)  switchport mode dot1-tunnel 
C)  switchport mode dynamic desirable 
D)  switchport mode trunk 
A)  switchport mode dynamic auto 
B)  switchport mode dot1-tunnel 
C)  switchport mode dynamic desirable 
D)  switchport mode trunk

Question 17

All 30 users on a single floor of a building are complaining about network slowness. After investigating the access switch, the network administrator notices that the MAC address table is full (10,000 entries) and all traffic is being flooded out of every port. Which action can the administrator take to prevent this from occurring?

Accepted Answer

A)  Configure port-security to limit the number of mac-addresses allowed on each port 
B)  Upgrade the switch to one that can handle 20,000 entries 
C)  Configure private-vlans to prevent hosts from communicating with one another 
D)  Enable storm-control to limit the traffic rate 
E)  Configure a VACL to block all IP traffic except traffic to and from that subnet 
A)  Configure port-security to limit the number of mac-addresses allowed on each port 
B)  Upgrade the switch to one that can handle 20,000 entries 
C)  Configure private-vlans to prevent hosts from communicating with one another 
D)  Enable storm-control to limit the traffic rate 
E)  Configure a VACL to block all IP traffic except traffic to and from that subnet

Question 18

Refer to the exhibit. An engineer configured NAT translations and has verified that the configuration is correct. Which IP address is the source IP?

Accepted Answer

A)  10.4.4.4 
B)  10.4.4.5 
C)  172.23.103.10 
D)  172.23.104.4 
A)  10.4.4.4 
B)  10.4.4.5 
C)  172.23.103.10 
D)  172.23.104.4

Question 19

Refer to the exhibit. With which metric was the route to host 172.16.0.202 learned?

Accepted Answer

A)  0 
B)  110 
C)  38443 
D)  3184439 
A)  0 
B)  110 
C)  38443 
D)  3184439

Question 20

Refer to the exhibit. A network engineer must block access for all computers on VLAN 20 to the web server via HTTP. All other computer must be able to access the web server. Which configuration when applied to Switch A accomplishes the task?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Exam 4: Cisco Certified Network Associate (CCNA)

Which three statements are typical characteristics of VLAN arrangements? (Choose three.)

An engineer is asked to protect unused ports that are configured in the default VLAN on a switch. Which two steps will fulfill the request? (Choose two.)

Which feature or protocol determines whether the QOS on the network is sufficient to support IP services?

An organization secures its network with multi-factor authentication using an authenticator app on employee smartphones. How is the application secured in the case of a user's smartphone being lost or stolen?

A network administrator must configure SSH for remote access to router R1. The requirement is to use a public and private key pair to encrypt management traffic to and from the connecting client. Which configuration, when applied, meets the requirements?

Which technology prevents client devices from arbitrarily connecting to the network without state remediation?

Which three statements about MAC addresses are correct? (Choose three.)

In QoS, which prioritization method is appropriate for interactive voice and video?

Which command should you enter to view the error log in an EIGRP for IPv6 environment?

Which type of wireless encryption is used for WPA2 in preshared key mode?

What are two fundamentals of virtualization? (Choose two.)

Refer to the exhibit. Which two events occur on the interface, if packets from an unknown Source address arrive after the interface learns the maximum number of secure MAC address? (Choose two.)

What is the effect when loopback interfaces and the configured router ID are absent during the OSPF Process configuration?

Refer to the exhibit. Which route type is configured to reach the Internet?

Which function is performed by the collapsed core layer in a two-tier architecture?

Refer to the exhibit. Which command must be executed for Gi1/1 on SW1 to passively become a trunk port if Gi1/1 on SW2 is configured in desirable or trunk mode?

Refer to the exhibit. An engineer configured NAT translations and has verified that the configuration is correct. Which IP address is the source IP?

Refer to the exhibit. With which metric was the route to host 172.16.0.202 learned?

Refer to the exhibit. A network engineer must block access for all computers on VLAN 20 to the web server via HTTP. All other computer must be able to access the web server. Which configuration when applied to Switch A accomplishes the task?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters