ccna 3 F3

What protocol synchronizes with a private master clock or with a publicly available server on the internet?

• MPLS

• CBWFQ

• TFTP

• NTP

Answer explanation

<

Which type of VPN allows multicast and broadcast traffic over a secure site-to-site VPN?

• dynamic multipoint VPN

• SSL VPN

• IPsec virtual tunnel interface

• GRE over IPsec

Answer explanation

<

An OSPF router has three directly connected networks; 10.0.0.0/16, 10.1.0.0/16, and 10.2.0.0/16. Which OSPF network command would advertise only the 10.1.0.0 network to neighbors?

• router(config-router)# network 10.1.0.0 0.0.255.255 area 0

• router(config-router)# network 10.1.0.0 0.0.15.255 area 0

• router(config-router)# network 10.1.0.0 255.255.255.0 area 0

• router(config-router)# network 10.1.0.0 0.0.0.0 area 0

Answer explanation

<

Refer to the exhibit. Which sequence of commands should be used to configure router A for OSPF?

• router ospf 1

  network 192.168.10.0 area 0

• router ospf 1 network 192.168.10.0

• router ospf 1

  network 192.168.10.64 255.255.255.192

  network 192.168.10.192 255.255.255.252

• router ospf 1

  network 192.168.10.64 0.0.0.63 area 0

  network 192.168.10.192 0.0.0.3 area 0

Answer explanation

<

An administrator is configuring single-area OSPF on a router. One of the networks that must be advertised is 192.168.0.0 255.255.254.0. What wildcard mask would the administrator use in the OSPF network statement?

• 0.0.7.255

• 0.0.1.255

• 0.0.3.255

• 0.0.15.255

Answer explanation

<

How does virtualization help with disaster recovery within a data center?

• improvement of business practices

• supply of consistent air flow

• support of live migration

• guarantee of power

Answer explanation

Explanation: Live migration allows moving of one virtual server to another virtual server that could be in a different location that is some distance from the original data center.

How does virtualization help with disaster recovery within a data center?

• Hardware does not have to be identical.

• (Other case) Hardware at the recovery site does not have to be identical to production equipment.

• Power is always provided.

• Less energy is consumed.

• Server provisioning is faster.

Answer explanation

Explanation: Disaster recovery is how a company goes about accessing applications, data, and the hardware that might be affected during a disaster. Virtualization provides hardware independence which means the disaster recovery site does not have to have the exact equipment as the equipment in production. Server provisioning is relevant when a server is built for the first time. Although data centers do have backup generators, the entire data center is designed for disaster recovery. One particular data center could never guarantee that the data center itself would never be without power.

Refer to the exhibit. Which devices exist in the failure domain when switch S3 loses power?

• S4 and PC_2

• PC_3 and AP_2

• AP_2 and AP_1

• PC_3 and PC_2

• S1 and S4

Answer explanation

A failure domain is the area of a network that is impacted when a critical device such as switch S3 has a failure or experiences problems.

Which set of access control entries would allow all users on the 192.168.10.0/24 network to access a web server that is located at 172.17.80.1, but would not allow them to use Telnet?

• access-list 103 deny tcp host 192.168.10.0 any eq 23

  access-list 103 permit tcp host 192.168.10.1 eq 80

• access-list 103 permit tcp 192.168.10.0 0.0.0.255 host 172.17.80.1 eq 80

  access-list 103 deny tcp ​192.168.10.0 0.0.0.255 any eq 23

• access-list 103 permit tcp 192.168.10.0 0.0.0.255 any eq 80

  access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq 23

• access-list 103 permit 192.168.10.0 0.0.0.255 host 172.17.80.1

  access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq telnet​​

Answer explanation

For an extended ACL to meet these requirements the following need to be included in the access control entries:identification number in the range 100-199 or 2000-2699permit or deny parameterprotocolsource address and wildcarddestination address and wildcardport number or name

Refer to the exhibit. A network administrator needs to add an ACE to the TRAFFIC-CONTROL ACL that will deny IP traffic from the subnet 172.23.16.0/20. Which ACE will meet this requirement?

• 5 deny 172.23.16.0 0.0.15.255

• 5 deny 172.23.16.0 0.0.255.255

• 15 deny 172.23.16.0 0.0.15.255

• 30 deny 172.23.16.0 0.0.15.255

Answer explanation

Explanation: The only filtering criteria specified for a standard access list is the source IPv4 address. The wild card mask is written to identify what parts of the address to match, with a 0 bit, and what parts of the address should be ignored, which a 1 bit. The router will parse the ACE entries from lowest sequence number to highest. If an ACE must be added to an existing access list, the sequence number should be specified so that the ACE is in the correct place during the ACL evaluation process.