Question 1

Refer to the exhibit. Which two commands when used together create port channel 10? (Choose two.)

Accepted Answer

A)  int range g0/0-1 channel-group 10 mode active 
B)  channel-group 10 mode desirable 
C)  channel-group 10 mode passive 
D)  channel-group 10 mode auto 
E)  channel-group 10 mode on 
A)  int range g0/0-1 channel-group 10 mode active 
B)  channel-group 10 mode desirable 
C)  channel-group 10 mode passive 
D)  channel-group 10 mode auto 
E)  channel-group 10 mode on

Question 2

What is difference between RADIUS and TACACS+?

Accepted Answer

A)  RADIUS logs all commands that are entered by the administrator, but TACACS+ logs only start, stop, and interim commands. 
B)  TACACS+ separates authentication and authorization, and RADIUS merges them. 
C)  TACACS+ encrypts only password information, and RADIUS encrypts the entire payload. 
D)  RADIUS is most appropriate for dial authentication, but TACACS+ can be used for multiple types of authentication. 
A)  RADIUS logs all commands that are entered by the administrator, but TACACS+ logs only start, stop, and interim commands. 
B)  TACACS+ separates authentication and authorization, and RADIUS merges them. 
C)  TACACS+ encrypts only password information, and RADIUS encrypts the entire payload. 
D)  RADIUS is most appropriate for dial authentication, but TACACS+ can be used for multiple types of authentication.

Question 3

What are two benefits of controller-based networking compared to traditional networking? (Choose two.)

Accepted Answer

A)  controller-based increases network bandwidth usage, while traditional lightens the load on the network 
B)  controller-based reduces network configuration complexity, while traditional increases the potential for errors 
C)  controller-based allows for fewer network failures, while traditional increases failure rates 
D)  controller-based provides centralization of key IT functions, while traditional requires distributed management functions 
E)  controller-based inflates software costs, while traditional decreases individual licensing costs 
A)  controller-based increases network bandwidth usage, while traditional lightens the load on the network 
B)  controller-based reduces network configuration complexity, while traditional increases the potential for errors 
C)  controller-based allows for fewer network failures, while traditional increases failure rates 
D)  controller-based provides centralization of key IT functions, while traditional requires distributed management functions 
E)  controller-based inflates software costs, while traditional decreases individual licensing costs

Question 4

Refer to the exhibit. The New York router is configured with static routes pointing to the Atlanta and Washington sites. Which two tasks must be performed so that the Serial0/0/0 interfaces on the Atlanta and Washington routers can reach one another? (Choose two.)

Accepted Answer

A)  Configure the ipv6 route 2023::/126 2012::1 command on the Atlanta router. Configure the ipv6 route 2023::/126 2012::1 command on the Atlanta router. 
B)  Configure the ipv6 route 2012::/126 2023::2 command on the Washington router. ipv6 route 2012::/126 2023::2 command on the Washington router. 
C)  Configure the ipv6 route 2012::/126 2023::1 command on the Washington router. ipv6 route 2012::/126 2023::1 
D)  Configure the ipv6 route 2023::/126 2012::2 command on the Atlanta router. ipv6 route 2023::/126 2012::2 
E)  Configure the ipv6 route 2012::/126 s0/0/0 command on the Atlanta router. ipv6 route 2012::/126 s0/0/0 
A)  Configure the ipv6 route 2023::/126 2012::1 command on the Atlanta router. Configure the ipv6 route 2023::/126 2012::1 command on the Atlanta router. 
B)  Configure the ipv6 route 2012::/126 2023::2 command on the Washington router. ipv6 route 2012::/126 2023::2 command on the Washington router. 
C)  Configure the ipv6 route 2012::/126 2023::1 command on the Washington router. ipv6 route 2012::/126 2023::1 
D)  Configure the ipv6 route 2023::/126 2012::2 command on the Atlanta router. ipv6 route 2023::/126 2012::2 
E)  Configure the ipv6 route 2012::/126 s0/0/0 command on the Atlanta router. ipv6 route 2012::/126 s0/0/0

Question 5

Which statement about Cisco Discovery Protocol is true?

Accepted Answer

A)  It is a Cisco-proprietary protocol. 
B)  It runs on the network layer. 
C)  It can discover information from routers, firewalls, and switches. 
D)  It runs on the physical layer and the data link layer. 
A)  It is a Cisco-proprietary protocol. 
B)  It runs on the network layer. 
C)  It can discover information from routers, firewalls, and switches. 
D)  It runs on the physical layer and the data link layer.

Question 6

Which statement about Link Aggregation when implementing on a Cisco Wireless LAN Controller is true?

Accepted Answer

A)  The EtherChannel must be configured in "mode active". 
B)  When enabled, the WLC bandwidth drops to 500 Mbps. 
C)  To pass client traffic, two or more ports must be configured. 
D)  One functional physical port is needed to pass client traffic. 
A)  The EtherChannel must be configured in "mode active". 
B)  When enabled, the WLC bandwidth drops to 500 Mbps. 
C)  To pass client traffic, two or more ports must be configured. 
D)  One functional physical port is needed to pass client traffic.

Question 7

Which two conditions must be met before SSH operates normally on a Cisco IOS switch? (Choose two.)

Accepted Answer

A)  IP routing must be enabled on the switch. 
B)  A console password must be configured on the switch. 
C)  Telnet must be disabled on the switch. 
D)  The switch must be running a k9 (crypto) IOS image. 
E)  The ip domain-name command must be configured on the switch. The ip domain-name command must be configured on the switch. 
A)  IP routing must be enabled on the switch. 
B)  A console password must be configured on the switch. 
C)  Telnet must be disabled on the switch. 
D)  The switch must be running a k9 (crypto) IOS image. 
E)  The ip domain-name command must be configured on the switch. The ip domain-name command must be configured on the switch.

Question 8

Refer to the exhibit. A network administrator assumes a task to complete the connectivity between PC A and the File Server. Switch A and Switch B have been partially configured with VLANs 10, 11, 12, and 13. What is the next step in the configuration?

Accepted Answer

A)  Add PC A to VLAN 10 and the File Server to VLAN 11 for VLAN segmentation 
B)  Add VLAN 13 to the trunk links on Switch A and Switch B for VLAN propagation 
C)  Add a router on a stick between Switch A and Switch B allowing for Inter-VLAN routing 
D)  Add PC A to the same subnet as the File Server allowing for intra-VLAN communication 
A)  Add PC A to VLAN 10 and the File Server to VLAN 11 for VLAN segmentation 
B)  Add VLAN 13 to the trunk links on Switch A and Switch B for VLAN propagation 
C)  Add a router on a stick between Switch A and Switch B allowing for Inter-VLAN routing 
D)  Add PC A to the same subnet as the File Server allowing for intra-VLAN communication

Question 9

Which statement about LLDP is true?

Accepted Answer

A)  It is a Cisco proprietary protocol. 
B)  It is configured in global configuration mode. 
C)  The LLDP update frequency is a fixed value. 
D)  It runs over the transport layer. 
A)  It is a Cisco proprietary protocol. 
B)  It is configured in global configuration mode. 
C)  The LLDP update frequency is a fixed value. 
D)  It runs over the transport layer.

Question 10

Which set of actions satisfy the requirement for multifactor authentication?

Accepted Answer

A)  The user enters a user name and password, and then re-enters the credentials on a second screen. 
B)  The user swipes a key fob, then clicks through an email link. 
C)  The users enters a user name and password, and then clicks a notification in an authentication app on a mobile device. 
D)  The user enters a PIN into an RSA token, and then enters the displayed RSA key on a login screen. 
A)  The user enters a user name and password, and then re-enters the credentials on a second screen. 
B)  The user swipes a key fob, then clicks through an email link. 
C)  The users enters a user name and password, and then clicks a notification in an authentication app on a mobile device. 
D)  The user enters a PIN into an RSA token, and then enters the displayed RSA key on a login screen.

Question 11

A customer needs wireless access points on a different VLAN from the controller to join via broadcast. Which two commands are required on the Layer 3 switch? (Choose two.)

Accepted Answer

A) ip forward-protocol tcp 5246 B) ip helper-address ip helper-address C) ip helper-address

D) ip forward-protocol udp 5246 E) ip helper-address

A) ip forward-protocol tcp 5246 B) ip helper-address ip helper-address C) ip helper-address

D) ip forward-protocol udp 5246 E) ip helper-address

Question 12

Which command enables a router to become a DHCP client?

Accepted Answer

A)  ip address dhcp 
B)  ip dhcp client 
C)  ip helper-address 
D)  ip dhcp pool 
A)  ip address dhcp 
B)  ip dhcp client 
C)  ip helper-address 
D)  ip dhcp pool

Question 13

An engineer configured an OSPF neighbor as a designated router. Which state verifies the designated router is in the proper mode?

Accepted Answer

A)  Init 
B)  2-way 
C)  Exchange 
D)  Full 
A)  Init 
B)  2-way 
C)  Exchange 
D)  Full

Question 14

What uses HTTP messages to transfer data to applications residing on different hosts?

Accepted Answer

A)  OpenStack 
B)  OpFlex 
C)  REST 
D)  OpenFlow 
A)  OpenStack 
B)  OpFlex 
C)  REST 
D)  OpenFlow

Question 15

Refer to the exhibit. An engineer must add a subnet for a new office that will add 20 users to the network. Which IPv4 network and subnet mask combination does the engineer assign to minimize wasting addresses?

Accepted Answer

A)  10.10.225.48 255.255.255.240 
B)  10.10.225.32 255.255.255.240 
C)  10.10.225.48 255.255.255.224 
D)  10.10.225.32 255.255.255.224 
A)  10.10.225.48 255.255.255.240 
B)  10.10.225.32 255.255.255.240 
C)  10.10.225.48 255.255.255.224 
D)  10.10.225.32 255.255.255.224

Question 16

Refer to the exhibit. An administrator is tasked with configuring a voice VLAN. What is the expected outcome when a Cisco phone is connected to the GigabitEthernet 3/1/4 port on a switch?

Accepted Answer

A)  The phone and a workstation that is connected to the phone do not have VLAN connectivity. 
B)  The phone sends and receives data in VLAN 50, but a workstation connected to the phone sends and receives data in VLAN 1. 
C)  The phone sends and receives data in VLAN 50, but a workstation connected to the phone has no VLAN connectivity. 
D)  The phone and a workstation that is connected to the phone send and receive data in VLAN 50. 
A)  The phone and a workstation that is connected to the phone do not have VLAN connectivity. 
B)  The phone sends and receives data in VLAN 50, but a workstation connected to the phone sends and receives data in VLAN 1. 
C)  The phone sends and receives data in VLAN 50, but a workstation connected to the phone has no VLAN connectivity. 
D)  The phone and a workstation that is connected to the phone send and receive data in VLAN 50.

Question 17

What is the difference between RADIUS and TACACS+?

Accepted Answer

A)  RADIUS logs all commands that are entered by the administrator, but TACACS+ logs only start, stop, and interim commands. 
B)  TACACS+ separates authentication and authorization, and RADIUS merges them. 
C)  TACACS+ encrypts only password information, and RADIUS encrypts the entire payload. 
D)  RADIUS is most appropriate for dial authentication, but TACACS+ can be used for multiple types of authentication. 
A)  RADIUS logs all commands that are entered by the administrator, but TACACS+ logs only start, stop, and interim commands. 
B)  TACACS+ separates authentication and authorization, and RADIUS merges them. 
C)  TACACS+ encrypts only password information, and RADIUS encrypts the entire payload. 
D)  RADIUS is most appropriate for dial authentication, but TACACS+ can be used for multiple types of authentication.

Question 18

Which action is taken by switch port enabled for PoE power classification override?

Accepted Answer

A)  If a monitored port exceeds the maximum administrative value for power, the port is shutdown and err-disabled. 
B)  When a powered device begins drawing power from a PoE switch port, a syslog message is generated. 
C)  As power usage on a PoE switch port is checked, data flow to the connected device is temporarily paused. 
D)  If a switch determines that a device is using less than the minimum configured power, it assumes the device has failed and disconnects it. 
A)  If a monitored port exceeds the maximum administrative value for power, the port is shutdown and err-disabled. 
B)  When a powered device begins drawing power from a PoE switch port, a syslog message is generated. 
C)  As power usage on a PoE switch port is checked, data flow to the connected device is temporarily paused. 
D)  If a switch determines that a device is using less than the minimum configured power, it assumes the device has failed and disconnects it.

Question 19

Refer to the exhibit. An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate directly to enable privilege mode via Telnet using a local username and password?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Question 20

Refer to the exhibit. When running EIGRP, what is required for RouterA to exchange routing updates with RouterC?

Accepted Answer

A)  AS numbers must be changed to match on all the routers 
B)  Loopback interfaces must be configured so a DR is elected 
C)  The no auto-summary command is needed on Router A and Router C 
D)  Router B needs to have two network statements, one for each connected network 
A)  AS numbers must be changed to match on all the routers 
B)  Loopback interfaces must be configured so a DR is elected 
C)  The no auto-summary command is needed on Router A and Router C 
D)  Router B needs to have two network statements, one for each connected network

Exam 4: Cisco Certified Network Associate (CCNA)

Refer to the exhibit. Which two commands when used together create port channel 10? (Choose two.)

What is difference between RADIUS and TACACS+?

What are two benefits of controller-based networking compared to traditional networking? (Choose two.)

Refer to the exhibit. The New York router is configured with static routes pointing to the Atlanta and Washington sites. Which two tasks must be performed so that the Serial0/0/0 interfaces on the Atlanta and Washington routers can reach one another? (Choose two.)

Which statement about Cisco Discovery Protocol is true?

Which statement about Link Aggregation when implementing on a Cisco Wireless LAN Controller is true?

Which two conditions must be met before SSH operates normally on a Cisco IOS switch? (Choose two.)

Refer to the exhibit. A network administrator assumes a task to complete the connectivity between PC A and the File Server. Switch A and Switch B have been partially configured with VLANs 10, 11, 12, and 13. What is the next step in the configuration?

Which statement about LLDP is true?

Which set of actions satisfy the requirement for multifactor authentication?

A customer needs wireless access points on a different VLAN from the controller to join via broadcast. Which two commands are required on the Layer 3 switch? (Choose two.)

Which command enables a router to become a DHCP client?

An engineer configured an OSPF neighbor as a designated router. Which state verifies the designated router is in the proper mode?

What uses HTTP messages to transfer data to applications residing on different hosts?

Refer to the exhibit. An engineer must add a subnet for a new office that will add 20 users to the network. Which IPv4 network and subnet mask combination does the engineer assign to minimize wasting addresses?

Refer to the exhibit. An administrator is tasked with configuring a voice VLAN. What is the expected outcome when a Cisco phone is connected to the GigabitEthernet 3/1/4 port on a switch?

What is the difference between RADIUS and TACACS+?

Which action is taken by switch port enabled for PoE power classification override?

Refer to the exhibit. An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate directly to enable privilege mode via Telnet using a local username and password?

Refer to the exhibit. When running EIGRP, what is required for RouterA to exchange routing updates with RouterC?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters