Question 1

What is an advantage of Cisco DNA Center versus traditional campus device management?

Accepted Answer

A)  It is designed primarily to provide network assurance. 
B)  It supports numerous extensibility options, including cross-domain adapters and third-party SDKs. 
C)  It supports high availability for management functions when operating in cluster mode. 
D)  It enables easy autodiscovery of network elements in a brownfield deployment. 
A)  It is designed primarily to provide network assurance. 
B)  It supports numerous extensibility options, including cross-domain adapters and third-party SDKs. 
C)  It supports high availability for management functions when operating in cluster mode. 
D)  It enables easy autodiscovery of network elements in a brownfield deployment.

Question 2

Which two keying mechanisms are available within MACsec? (Choose two.)

Accepted Answer

A)  IKE 
B)  GDOI 
C)  SAP 
D)  MKA 
E)  Diffie-Hellman 
A)  IKE 
B)  GDOI 
C)  SAP 
D)  MKA 
E)  Diffie-Hellman

Question 3

Which two statements about exterior routing protocols are true? (Choose two.)

Accepted Answer

A)  They determine the optimal within an autonomous system. 
B)  They determine the optimal path between autonomous systems. 
C)  BGP is the current standard exterior routing protocol. 
D)  Most modern networking supports both EGP and BGP for external routing. 
E)  Most modern network routers support both EGP and EIGRP for external routing. 
A)  They determine the optimal within an autonomous system. 
B)  They determine the optimal path between autonomous systems. 
C)  BGP is the current standard exterior routing protocol. 
D)  Most modern networking supports both EGP and BGP for external routing. 
E)  Most modern network routers support both EGP and EIGRP for external routing.

Question 4

Which technology must be implemented to configure network device monitoring with the highest security?

Accepted Answer

A)  IP SLA 
B)  syslog 
C)  NetFlow 
D)  SNMPv3 
A)  IP SLA 
B)  syslog 
C)  NetFlow 
D)  SNMPv3

Question 5

In which way does a spine-and-leaf architecture allow for scalability in a network when additional access ports are required?

Accepted Answer

A)  A spine switch and a leaf switch can be added with redundant connections between them. 
B)  A spine switch can be added with at least 40 GB uplinks. 
C)  A leaf switch can be added with connections to every spine switch. 
D)  A leaf switch can be added with a single connection to a core spine switch. 
A)  A spine switch and a leaf switch can be added with redundant connections between them. 
B)  A spine switch can be added with at least 40 GB uplinks. 
C)  A leaf switch can be added with connections to every spine switch. 
D)  A leaf switch can be added with a single connection to a core spine switch.

Question 6

Which design element is a best practice when deploying an 802.11b wireless infrastructure?

Accepted Answer

A)  allocation nonoverlapping channels to access points that are in close physical proximity to one another 
B)  disabling TCP so that access points can negotiate signal levels with their attached wireless devices 
C)  configuring access points to provide clients with a maximum of 5 Mbps 
D)  setting the maximum data rate to 54 Mbps on the Cisco Wireless LAN Controller 
A)  allocation nonoverlapping channels to access points that are in close physical proximity to one another 
B)  disabling TCP so that access points can negotiate signal levels with their attached wireless devices 
C)  configuring access points to provide clients with a maximum of 5 Mbps 
D)  setting the maximum data rate to 54 Mbps on the Cisco Wireless LAN Controller

Question 7

Which API is used in controller-based architectures to interact with edge devices?

Accepted Answer

A)  southbound 
B)  overlay 
C)  northbound 
D)  underlay 
A)  southbound 
B)  overlay 
C)  northbound 
D)  underlay

Question 8

For what two purposes does the Ethernet protocol use physical addresses?

Accepted Answer

A)  to uniquely identify devices at Layer 2 
B)  to allow communication with devices on a different network 
C)  to differentiate a Layer 2 frame from a Layer 3 packet 
D)  to establish a priority system to determine which device gets to transmit first 
E)  to allow communication between different devices on the same network
F) to allow detection of a remote device when its physical address is unknown 
A)  to uniquely identify devices at Layer 2 
B)  to allow communication with devices on a different network 
C)  to differentiate a Layer 2 frame from a Layer 3 packet 
D)  to establish a priority system to determine which device gets to transmit first 
E)  to allow communication between different devices on the same network
F) to allow detection of a remote device when its physical address is unknown

Question 9

Which action must be taken to assign a global unicast IPv6 address on an interface that is derived from the MAC address of that interface?

Accepted Answer

A)  explicitly assign a link-local address 
B)  disable the EUI-64 bit process 
C)  enable SLAAC on an interface 
D)  configure a stateful DHCPv6 server on the network 
A)  explicitly assign a link-local address 
B)  disable the EUI-64 bit process 
C)  enable SLAAC on an interface 
D)  configure a stateful DHCPv6 server on the network

Question 10

What are two benefits that the UDP protocol provide for application traffic? (Choose two.)

Accepted Answer

A)  UDP traffic has lower overhead than TCP traffic 
B)  UDP provides a built-in recovery mechanism to retransmit lost packets 
C)  The CTL field in the UDP packet header enables a three-way handshake to establish the connection 
D)  UDP maintains the connection state to provide more stable connections than TCP 
E)  The application can use checksums to verify the integrity of application data 
A)  UDP traffic has lower overhead than TCP traffic 
B)  UDP provides a built-in recovery mechanism to retransmit lost packets 
C)  The CTL field in the UDP packet header enables a three-way handshake to establish the connection 
D)  UDP maintains the connection state to provide more stable connections than TCP 
E)  The application can use checksums to verify the integrity of application data

Question 11

Which state does the switch port move to when PortFast is enabled?

Accepted Answer

A)  blocking 
B)  listening 
C)  learning 
D)  forwarding 
A)  blocking 
B)  listening 
C)  learning 
D)  forwarding

Question 12

Under which condition is TCP preferred over UDP?

Accepted Answer

A)  UDP is used when low latency is optimal, and TCP is used when latency is tolerable. 
B)  TCP is used when dropped data is more acceptable, and UDP is used when data is accepted out-of-order. 
C)  TCP is used when data reliability is critical, and UDP is used when missing packets are acceptable. 
D)  UDP is used when data is highly interactive, and TCP is used when data is time-sensitive. 
A)  UDP is used when low latency is optimal, and TCP is used when latency is tolerable. 
B)  TCP is used when dropped data is more acceptable, and UDP is used when data is accepted out-of-order. 
C)  TCP is used when data reliability is critical, and UDP is used when missing packets are acceptable. 
D)  UDP is used when data is highly interactive, and TCP is used when data is time-sensitive.

Question 13

Which two protocols must be disabled to increase security for management connections to a Wireless LAN Controller? (Choose two.)

Accepted Answer

A)  HTTPS 
B)  SSH 
C)  HTTP 
D)  Telnet 
E)  TFTP 
A)  HTTPS 
B)  SSH 
C)  HTTP 
D)  Telnet 
E)  TFTP

Question 14

Refer to the exhibit. How will the router handle a packet destined for 192.0.2.156?

Accepted Answer

A)  The router will forward the packet via either Serial0 or Serial1. 
B)  The router will return the packet to its source. 
C)  The router will forward the packet via Serial2. 
D)  The router will drop the packet. 
A)  The router will forward the packet via either Serial0 or Serial1. 
B)  The router will return the packet to its source. 
C)  The router will forward the packet via Serial2. 
D)  The router will drop the packet.

Question 15

What are two benefits of using VTP in a switching environment? (Choose two.)

Accepted Answer

A)  It allows switches to read frame tags. 
B)  It allows ports to be assigned to VLANs automatically. 
C)  It maintains VLAN consistency across a switched network. 
D)  It allows frames from multiple VLANs to use a single interface. 
E)  It allows VLAN information to be automatically propagated throughout the switching environment. 
A)  It allows switches to read frame tags. 
B)  It allows ports to be assigned to VLANs automatically. 
C)  It maintains VLAN consistency across a switched network. 
D)  It allows frames from multiple VLANs to use a single interface. 
E)  It allows VLAN information to be automatically propagated throughout the switching environment.

Question 16

Which JSON data type is an unordered set of attribute-value pairs?

Accepted Answer

A)  string 
B)  array 
C)  Boolean 
D)  object 
A)  string 
B)  array 
C)  Boolean 
D)  object

Question 17

Which protocol sends authentication and accounting in different requests?

Accepted Answer

A)  RADIUS 
B)  TACACS+ 
C)  EAP-Chaining 
D)  PEAP 
E)  EAP-TLS 
A)  RADIUS 
B)  TACACS+ 
C)  EAP-Chaining 
D)  PEAP 
E)  EAP-TLS

Question 18

Which command automatically generates an IPv6 address from a specified IPv6 prefix and MAC address of an interface?

Accepted Answer

A)  ipv6 address dhcp 
B)  ipv6 address 2001:DB8:5:112::/64 eui-64 
C)  ipv6 address autoconfig 
D)  ipv6 address 2001:DB8:5:112::2/64 link-local 
A)  ipv6 address dhcp 
B)  ipv6 address 2001:DB8:5:112::/64 eui-64 
C)  ipv6 address autoconfig 
D)  ipv6 address 2001:DB8:5:112::2/64 link-local

Question 19

Refer to the exhibit. The New York router is configured with static routes pointing to the Atlanta and Washington sites. Which two tasks must be performed so that the Se0/0/0 interfaces on the Atlanta and Washington routers can reach one another? (Choose two.)

Accepted Answer

A)  Configure the ipv6 route 2023::/126 2012::1 command on the Atlanta router. Configure the ipv6 route 2023::/126 2012::1 command on the Atlanta router. 
B)  Configure the ipv6 route 2012::/126 2023::2 command on the Washington router. ipv6 route 2012::/126 2023::2 command on the Washington router. 
C)  Configure the ipv6 route 2012::/126 2023::1 command on the Washington router. ipv6 route 2012::/126 2023::1 
D)  Configure the ipv6 route 2023::/126 2012::2 command on the Atlanta router. ipv6 route 2023::/126 2012::2 
E)  Configure the ipv6 route 2012::/126 s0/0/0 command on the Atlanta router. ipv6 route 2012::/126 s0/0/0 
A)  Configure the ipv6 route 2023::/126 2012::1 command on the Atlanta router. Configure the ipv6 route 2023::/126 2012::1 command on the Atlanta router. 
B)  Configure the ipv6 route 2012::/126 2023::2 command on the Washington router. ipv6 route 2012::/126 2023::2 command on the Washington router. 
C)  Configure the ipv6 route 2012::/126 2023::1 command on the Washington router. ipv6 route 2012::/126 2023::1 
D)  Configure the ipv6 route 2023::/126 2012::2 command on the Atlanta router. ipv6 route 2023::/126 2012::2 
E)  Configure the ipv6 route 2012::/126 s0/0/0 command on the Atlanta router. ipv6 route 2012::/126 s0/0/0

Question 20

What are two benefits of private IPv4 IP addresses? (Choose two.)

Accepted Answer

A)  They are routed the same as public IP addresses. 
B)  They are less costly than public IP addresses. 
C)  They can be assigned to devices without Internet connections. 
D)  They eliminate the necessity for NAT policies. 
E)  They eliminate duplicate IP conflicts. 
A)  They are routed the same as public IP addresses. 
B)  They are less costly than public IP addresses. 
C)  They can be assigned to devices without Internet connections. 
D)  They eliminate the necessity for NAT policies. 
E)  They eliminate duplicate IP conflicts.

Exam 4: Cisco Certified Network Associate (CCNA)

What is an advantage of Cisco DNA Center versus traditional campus device management?

Which two keying mechanisms are available within MACsec? (Choose two.)

Which two statements about exterior routing protocols are true? (Choose two.)

Which technology must be implemented to configure network device monitoring with the highest security?

In which way does a spine-and-leaf architecture allow for scalability in a network when additional access ports are required?

Which design element is a best practice when deploying an 802.11b wireless infrastructure?

Which API is used in controller-based architectures to interact with edge devices?

For what two purposes does the Ethernet protocol use physical addresses?

Which action must be taken to assign a global unicast IPv6 address on an interface that is derived from the MAC address of that interface?

What are two benefits that the UDP protocol provide for application traffic? (Choose two.)

Which state does the switch port move to when PortFast is enabled?

Under which condition is TCP preferred over UDP?

Which two protocols must be disabled to increase security for management connections to a Wireless LAN Controller? (Choose two.)

Refer to the exhibit. How will the router handle a packet destined for 192.0.2.156?

What are two benefits of using VTP in a switching environment? (Choose two.)

Which JSON data type is an unordered set of attribute-value pairs?

Which protocol sends authentication and accounting in different requests?

Which command automatically generates an IPv6 address from a specified IPv6 prefix and MAC address of an interface?

Refer to the exhibit. The New York router is configured with static routes pointing to the Atlanta and Washington sites. Which two tasks must be performed so that the Se0/0/0 interfaces on the Atlanta and Washington routers can reach one another? (Choose two.)

What are two benefits of private IPv4 IP addresses? (Choose two.)

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters