Question 1

When a floating static route is configured, which action ensures that the backup route is used when the primary route fails?

Accepted Answer

A)  The administrative distance must be higher on the primary route so that the backup route becomes secondary. 
B)  The default-information originate command must be configured for the route to be installed into the routing table. The default-information originate command must be configured for the route to be installed into the routing table. 
C)  The floating static route must have a lower administrative distance than the primary route so it is used as a backup. 
D)  The floating static route must have a higher administrative distance than the primary route so it is used as a backup 
A)  The administrative distance must be higher on the primary route so that the backup route becomes secondary. 
B)  The default-information originate command must be configured for the route to be installed into the routing table. The default-information originate command must be configured for the route to be installed into the routing table. 
C)  The floating static route must have a lower administrative distance than the primary route so it is used as a backup. 
D)  The floating static route must have a higher administrative distance than the primary route so it is used as a backup

Question 2

When a site-to-site VPN is used, which protocol is responsible for the transport of user data?

Accepted Answer

A)  IPsec 
B)  IKEv1 
C)  MD5 
D)  IKEv2 
A)  IPsec 
B)  IKEv1 
C)  MD5 
D)  IKEv2

Question 3

Refer to the exhibit. A packet is being sent across router R1 to host 172.16.3.14. To which destination does the router send the packet?

Accepted Answer

A)  207.165.200.246 via Serial0/1/0 
B)  207.165.200.254 via Serial0/0/0 
C)  207.165.200.250 via Serial0/0/0 
D)  207.165.200.254 via Serial0/0/1 
A)  207.165.200.246 via Serial0/1/0 
B)  207.165.200.254 via Serial0/0/0 
C)  207.165.200.250 via Serial0/0/0 
D)  207.165.200.254 via Serial0/0/1

Question 4

What is the difference regarding reliability and communication type between TCP and UDP?

Accepted Answer

A)  TCP is reliable and is a connectionless protocol; UDP is not reliable and is a connection-oriented protocol. 
B)  TCP is not reliable and is a connectionless protocol; UDP is reliable and is a connection-oriented protocol. 
C)  TCP is not reliable and is a connection-oriented protocol; UDP is reliable and is a connectionless protocol. 
D)  TCP is reliable and is a connection-oriented protocol; UDP is not reliable and is a connectionless protocol. 
A)  TCP is reliable and is a connectionless protocol; UDP is not reliable and is a connection-oriented protocol. 
B)  TCP is not reliable and is a connectionless protocol; UDP is reliable and is a connection-oriented protocol. 
C)  TCP is not reliable and is a connection-oriented protocol; UDP is reliable and is a connectionless protocol. 
D)  TCP is reliable and is a connection-oriented protocol; UDP is not reliable and is a connectionless protocol.

Question 5

Which QoS Profile is selected in the GUI when configuring a voice over WLAN deployment?

Accepted Answer

A)  Platinum 
B)  Bronze 
C)  Gold 
D)  Silver 
A)  Platinum 
B)  Bronze 
C)  Gold 
D)  Silver

Question 6

Refer to the exhibit. How does router R1 handle traffic to 192.168.10.16?

Accepted Answer

A)  It selects the IS-IS route because it has the shortest prefix inclusive of the destination address 
B)  It selects the RIP route because it has the longest prefix inclusive of the destination address 
C)  It selects the OSPF route because it has the lowest cost 
D)  It selects the EIGRP route because it has the lowest administrative distance 
A)  It selects the IS-IS route because it has the shortest prefix inclusive of the destination address 
B)  It selects the RIP route because it has the longest prefix inclusive of the destination address 
C)  It selects the OSPF route because it has the lowest cost 
D)  It selects the EIGRP route because it has the lowest administrative distance

Question 7

Refer to the exhibit. Which statement about the interface that generated the output is true?

Accepted Answer

A)  A syslog message is generated when a violation occurs. 
B)  One secure MAC address is manually configured on the interface. 
C)  One secure MAC address is dynamically learned on the interface. 
D)  Five secure MAC addresses are dynamically learned on the interface. 
A)  A syslog message is generated when a violation occurs. 
B)  One secure MAC address is manually configured on the interface. 
C)  One secure MAC address is dynamically learned on the interface. 
D)  Five secure MAC addresses are dynamically learned on the interface.

Question 8

Which statement about system time and NTP server configuration with Cisco ISE is true?

Accepted Answer

A)  The system time and NTP server settings can be configured centrally on the Cisco ISE. 
B)  The system time can be configured centrally on the Cisco ISE, but NTP server settings must be configured individually on each ISE node. 
C)  NTP server settings can be configured centrally on the Cisco ISE, but the system time must be configured individually on each ISE node. 
D)  The system time and NTP server settings must be configured individually on each ISE node. 
A)  The system time and NTP server settings can be configured centrally on the Cisco ISE. 
B)  The system time can be configured centrally on the Cisco ISE, but NTP server settings must be configured individually on each ISE node. 
C)  NTP server settings can be configured centrally on the Cisco ISE, but the system time must be configured individually on each ISE node. 
D)  The system time and NTP server settings must be configured individually on each ISE node.

Question 9

Which two options are the best reasons to use an IPV4 private IP space? (Choose two.)

Accepted Answer

A)  to enable intra-enterprise communication 
B)  to implement NAT 
C)  to connect applications 
D)  to conserve global address space 
E)  to manage routing overhead 
A)  to enable intra-enterprise communication 
B)  to implement NAT 
C)  to connect applications 
D)  to conserve global address space 
E)  to manage routing overhead

Question 10

An office has 8 floors with approximately 30-40 users per floor. What command must be configured on the router Switched Virtual Interface to use address space efficiently?

Accepted Answer

A)  ip address 192.168.0.0 255.255.0.0 
B)  ip address 192.168.0.0 255.255.254.0 
C)  ip address 192.168.0.0 255.255.255.128 
D)  ip address 192.168.0.0 255.255.255.224 
A)  ip address 192.168.0.0 255.255.0.0 
B)  ip address 192.168.0.0 255.255.254.0 
C)  ip address 192.168.0.0 255.255.255.128 
D)  ip address 192.168.0.0 255.255.255.224

Question 11

What are two reasons for an engineer to configure a floating static route? (Choose two.)

Accepted Answer

A)  to enable fallback static routing when the dynamic routing protocol fails 
B)  to route traffic differently based on the source IP of the packet 
C)  to automatically route traffic on a secondary path when the primary path goes down 
D)  to support load balancing via static routing 
E)  to control the return path of traffic that is sent from the router 
A)  to enable fallback static routing when the dynamic routing protocol fails 
B)  to route traffic differently based on the source IP of the packet 
C)  to automatically route traffic on a secondary path when the primary path goes down 
D)  to support load balancing via static routing 
E)  to control the return path of traffic that is sent from the router

Question 12

A network engineer must create a diagram of a multivendor network. Which command must be configured on the Cisco devices so that the topology of the network can be mapped?

Accepted Answer

A)  Device(config)#lldp run 
B)  Device(config)#cdp run 
C)  Device(config-if)#cdp enable 
D)  Device(config)#flow-sampler-map topology 
A)  Device(config)#lldp run 
B)  Device(config)#cdp run 
C)  Device(config-if)#cdp enable 
D)  Device(config)#flow-sampler-map topology

Question 13

What is the destination MAC address of a broadcast frame?

Accepted Answer

A)  00:00:0c:07:ac:01 
B)  ff:ff:ff:ff:ff:ff 
C)  43:2e:08:00:00:0c 
D)  00:00:0c:43:2e:08 
E)  00:00:0c:ff:ff:ff 
A)  00:00:0c:07:ac:01 
B)  ff:ff:ff:ff:ff:ff 
C)  43:2e:08:00:00:0c 
D)  00:00:0c:43:2e:08 
E)  00:00:0c:ff:ff:ff

Question 14

Which IPv6 address block sends packets to a group address rather than a single address?

Accepted Answer

A)  2000::/3 
B)  FC00::/7 
C)  FE80::/10 
D)  FF00::/8 
A)  2000::/3 
B)  FC00::/7 
C)  FE80::/10 
D)  FF00::/8

Question 15

A network engineer must back up 20 network router configurations globally within a customer environment. Which protocol allows the engineer to perform this function using the Cisco IOS MIB?

Accepted Answer

A)  ARP 
B)  SNMP 
C)  SMTP 
D)  CDP 
A)  ARP 
B)  SNMP 
C)  SMTP 
D)  CDP

Question 16

Which mode allows access points to be managed by Cisco Wireless LAN Controllers?

Accepted Answer

A)  bridge 
B)  lightweight 
C)  mobility express 
D)  autonomous 
A)  bridge 
B)  lightweight 
C)  mobility express 
D)  autonomous

Question 17

Which WPA3 enhancement protects against hackers viewing traffic on the Wi-Fi network?

Accepted Answer

A)  SAE encryption 
B)  TKIP encryption 
C)  scrambled encryption key 
D)  AES encryption 
A)  SAE encryption 
B)  TKIP encryption 
C)  scrambled encryption key 
D)  AES encryption

Question 18

What is a role of access points in an enterprise network?

Accepted Answer

A)  integrate with SNMP in preventing DDoS attacks 
B)  serve as a first line of defense in an enterprise network 
C)  connect wireless devices to a wired network 
D)  support secure user logins to devices on the network 
A)  integrate with SNMP in preventing DDoS attacks 
B)  serve as a first line of defense in an enterprise network 
C)  connect wireless devices to a wired network 
D)  support secure user logins to devices on the network

Question 19

Refer to the exhibit. A packet is being sent across router R1 to host 172.16.0.14. What is the destination route for the packet?

Accepted Answer

A)  209.165.200.250 via Serial0/0/0 
B)  209.165.200.254 via Serial0/0/0 
C)  209.165.200.254 via Serial0/0/1 
D)  209.165.200.246 via Serial0/1/0 
A)  209.165.200.250 via Serial0/0/0 
B)  209.165.200.254 via Serial0/0/0 
C)  209.165.200.254 via Serial0/0/1 
D)  209.165.200.246 via Serial0/1/0

Question 20

An administrator must secure the WLC from receiving spoofed association requests. Which steps must be taken to configure the WLC to restrict the requests and force the user to wait 10 ms to retry an association request?

Accepted Answer

A)  Enable MAC filtering and set the SA Query timeout to 10. 
B)  Enable 802.1x Layer 2 security and set the Comeback timer to 10. 
C)  Enable Security Association Teardown Protection and set the SA Query timeout to 10. 
D)  Enable the Protected Management Frame service and set the Comeback timer to 10. 
A)  Enable MAC filtering and set the SA Query timeout to 10. 
B)  Enable 802.1x Layer 2 security and set the Comeback timer to 10. 
C)  Enable Security Association Teardown Protection and set the SA Query timeout to 10. 
D)  Enable the Protected Management Frame service and set the Comeback timer to 10.

Exam 4: Cisco Certified Network Associate (CCNA)

When a floating static route is configured, which action ensures that the backup route is used when the primary route fails?

When a site-to-site VPN is used, which protocol is responsible for the transport of user data?

Refer to the exhibit. A packet is being sent across router R1 to host 172.16.3.14. To which destination does the router send the packet?

What is the difference regarding reliability and communication type between TCP and UDP?

Which QoS Profile is selected in the GUI when configuring a voice over WLAN deployment?

Refer to the exhibit. How does router R1 handle traffic to 192.168.10.16?

Refer to the exhibit. Which statement about the interface that generated the output is true?

Which statement about system time and NTP server configuration with Cisco ISE is true?

Which two options are the best reasons to use an IPV4 private IP space? (Choose two.)

An office has 8 floors with approximately 30-40 users per floor. What command must be configured on the router Switched Virtual Interface to use address space efficiently?

What are two reasons for an engineer to configure a floating static route? (Choose two.)

A network engineer must create a diagram of a multivendor network. Which command must be configured on the Cisco devices so that the topology of the network can be mapped?

What is the destination MAC address of a broadcast frame?

Which IPv6 address block sends packets to a group address rather than a single address?

A network engineer must back up 20 network router configurations globally within a customer environment. Which protocol allows the engineer to perform this function using the Cisco IOS MIB?

Which mode allows access points to be managed by Cisco Wireless LAN Controllers?

Which WPA3 enhancement protects against hackers viewing traffic on the Wi-Fi network?

What is a role of access points in an enterprise network?

Refer to the exhibit. A packet is being sent across router R1 to host 172.16.0.14. What is the destination route for the packet?

An administrator must secure the WLC from receiving spoofed association requests. Which steps must be taken to configure the WLC to restrict the requests and force the user to wait 10 ms to retry an association request?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters