Refer to the exhibit. What will router R1 do with a packet that has a destination IPv6 address of 2001:db8:cafe:5::1?

• forward the packet out GigabitEthernet0/0

• drop the packet

• forward the packet out GigabitEthernet0/1

• forward the packet out Serial0/0/0

Answer explanation

The route ::/0 is the compressed form of the 0000:0000:0000:0000:0000:0000:0000:0000/0 default route. The default route is used if a more specific route is not found in the routing table.

Refer to the exhibit. Currently router R1 uses an EIGRP route learned from Branch2 to reach the 10.10.0.0/16 network. Which floating static route would create a backup route to the 10.10.0.0/16 network in the event that the link between R1 and Branch2 goes down?

• ip route 10.10.0.0 255.255.0.0 Serial 0/0/0 100

• ip route 10.10.0.0 255.255.0.0 209.165.200.226 100

• ip route 10.10.0.0 255.255.0.0 209.165.200.225 100

• ip route 10.10.0.0 255.255.0.0 209.165.200.225 50

Answer explanation

A floating static route needs to have an administrative distance that is greater than the administrative distance of the active route in the routing table. Router R1 is using an EIGRP route which has an administrative distance of 90 to reach the 10.10.0.0/16 network. To be a backup route the floating static route must have an administrative distance greater than 90 and have a next hop address corresponding to the serial interface IP address of Branch1.

Refer to the exhibit. R1 was configured with the static route command ip route 209.165.200.224 255.255.255.224 S0/0/0 and consequently users on network 172.16.0.0/16 are unable to reach resources on the Internet. How should this static route be changed to allow user traffic from the LAN to reach the Internet?

• Add an administrative distance of 254.

• Change the destination network and mask to 0.0.0.0 0.0.0.0

• Change the exit interface to S0/0/1.

• Add the next-hop neighbor address of 209.165.200.226.

Answer explanation

The static route on R1 has been incorrectly configured with the wrong destination network and mask. The correct destination network and mask is 0.0.0.0 0.0.0.0.

Which option shows a correctly configured IPv4 default static route?

• ip route 0.0.0.0 255.255.255.0 S0/0/0

• ip route 0.0.0.0 0.0.0.0 S0/0/0

• ip route 0.0.0.0 255.255.255.255 S0/0/0

• ip route 0.0.0.0 255.0.0.0 S0/0/0

Answer explanation

The static route ip route 0.0.0.0 0.0.0.0 S0/0/0 is considered a default static route and will match all destination networks.

Refer to the exhibit. Which static route command can be entered on R1 to forward traffic to the LAN connected to R2?

• ipv6 route 2001:db8:12:10::/64 S0/0/0

• ipv6 route 2001:db8:12:10::/64 S0/0/1 fe80::2

• ipv6 route 2001:db8:12:10::/64 S0/0/0 fe80::2

• ipv6 route 2001:db8:12:10::/64 S0/0/1 2001:db8:12:10::1

What is a method to launch a VLAN hopping attack?

• introducing a rogue switch and enabling trunking

• sending spoofed native VLAN information

• sending spoofed IP addresses from the attacking host

• flooding the switch with MAC addresses

A cybersecurity analyst is using the macof tool to evaluate configurations of switches deployed in the backbone network of an organization. Which type of LAN attack is the analyst targeting during this evaluation?

• VLAN hopping

• DHCP spoofing

• MAC address table overflow

• VLAN double-tagging

Answer explanation

Macof is a network attack tool and is mainly used to flood LAN switches with MAC addresses.

Refer to the exhibit. A network administrator is configuring a router as a DHCPv6 server. The administrator issues a show ipv6 dhcp pool command to verify the configuration. Which statement explains the reason that the number of active clients is 0?

• The default gateway address is not provided in the pool.

• No clients have communicated with the DHCPv6 server yet.

• The IPv6 DHCP pool configuration has no IPv6 address range specified.

• The state is not maintained by the DHCPv6 server under stateless DHCPv6 operation.

Answer explanation

Under the stateless DHCPv6 configuration, indicated by the command ipv6 nd other-config-flag, the DHCPv6 server does not maintain the state information, because client IPv6 addresses are not managed by the DHCP server. Because the clients will configure their IPv6 addresses by combining the prefix/prefix-length and a self-generated interface ID, the ipv6 dhcp pool configuration does not need to specify the valid IPv6 address range. And because clients will use the link-local address of the router interface as the default gateway address, the default gateway address is not necessary.

Refer to the exhibit. A network administrator configured routers R1 and R2 as part of HSRP group 1. After the routers have been reloaded, a user on Host1 complained of lack of connectivity to the Internet The network administrator issued the show standby brief command on both routers to verify the HSRP operations. In addition, the administrator observed the ARP table on Host1. Which entry should be seen in the ARP table on Host1 in order to gain connectivity to the Internet?

• the virtual IP address and the virtual MAC address for the HSRP group 1

• the virtual IP address of the HSRP group 1 and the MAC address of R1

• the virtual IP address of the HSRP group 1 and the MAC address of R2

• the IP address and the MAC address of R1

Answer explanation

Hosts will send an ARP request to the default gateway which is the virtual IP address. ARP replies from the HSRP routers contain the virtual MAC address. The host ARP tables will contain a mapping of the virtual IP to the virtual MAC.

Which statement is correct about how a Layer 2 switch determines how to forward frames?

• Frame forwarding decisions are based on MAC address and port mappings in the CAM table.

• Only frames with a broadcast destination address are forwarded out all active switch ports.

• Unicast frames are always forwarded regardless of the destination MAC address.

• Cut-through frame forwarding ensures that invalid frames are always dropped.

Answer explanation

Cut-through frame forwarding reads up to only the first 22 bytes of a frame, which excludes the frame check sequence and thus invalid frames may be forwarded. In addition to broadcast frames, frames with a destination MAC address that is not in the CAM are also flooded out all active ports. Unicast frames are not always forwarded. Received frames with a destination MAC address that is associated with the switch port on which it is received are not forwarded because the destination exists on the network segment connected to that port.