GT-ECOPS CCNA Day1 Set2

Shem, Ric, and Ryan are working on configuring a WLAN using the strongest encryption type for WPA2-PSK.

Which cipher fulfills the configuration requirements?

• WEP

• RC4

• AES

• TKIP

Answer explanation

Explanation:

Many routers provide WPA2-PSK (TKIP), WPA2-PSK (AES), and WPA2-PSK (TKIP/AES) as options.

TKIP is actually an older encryption protocol introduced with WPA to replace the very-insecure WEP encryption at the time. TKIP is actually quite similar to WEP encryption. TKIP is no longer considered secure, and is now deprecated. In other words, you shouldn't be using it.

AES is a more secure encryption protocol introduced with WPA2 and it is currently the strongest encryption type for WPA2-PSK/

When setting up an EtherChannel bundle, which mode activates LACP only if a LACP device is detected?

• Passive

• Desirable

• On

• Auto

• Active

Answer explanation

Explanation:

The LACP is Link Aggregation Control Protocol. LACP is an open protocol, published under the 802.3ad.

The modes of LACP are active, passive or on. The side configured as “pasive” will waiting the other side that should an Active for the Etherchannel to be established.

PAgP is Port-Aggregation Protocol. It is Cisco proprietary protocol. The mode are On, Desirable or Auto. Desirable – Auto will establish a EtherChannel.

An example of how to configure an Etherchannel:

SwitchFormula1>enable

SwitchFormula1#configure terminal

SwitchFormula1(config)# interface range f0/5 -14

SwitchFormula1(config-if-range)# channel-group 13 mode ? active Enable LACP unconditionally

auto Enable PAgP only if a PAgP device is detected

desirable Enable PAgP unconditionally on

Enable Etherchannel only

passive Enable LACP only if a LACP device is detected

Take a look at the exhibit. Can you tell me which VLAN ID is associated with the default VLAN in the given environment?

• VLAN 1

• VLAN 5

• VLAN 10

• VLAN 20

Which two VLAN IDs indicate a default VLAN? (Choose two.)

• 0

• 1

• 1005

• 1006

• 4096

Answer explanation

Explanation:

VLAN 1 is a system default VLAN, you can use this VLAN but you cannot delete it. By default VLAN 1 is use for every port on the switch.

Standard VLAN range from 1002-1005 it's Cisco default for FDDI and Token Ring. You cannot delete VLANs 1002-1005. mostly we don't use VLAN in this range.

Refer to the exhibit. Which statement about the interface that generated the output is true?

• A syslog message is generated when a violation occurs.

• One secure MAC address is manually configured on the interface.

• One secure MAC address is dynamically learned on the interface.

• Five secure MAC addresses are dynamically learned on the interface.

Which command should you enter to view the error log in an EIGRP for IPv6 environment?

• show ipv6 eigrp neighbors

• show ipv6 eigrp topology

• show ipv6 eigrp traffic

• show ipv6 eigrp events

When a notice-level messaging is sent to a syslog server, what event has occurred?

• A network device has restarted

• An ARP inspection has failed

• A routing instance has flapped

• A debug operation is running

Answer explanation

Explanation:

Usually no action is required when a route flaps so it generates the notification syslog level message (level

5).

What are two southbound APIs? (Choose two )

• OpenFlow

• NETCONF

• Thrift

• CORBA

• DSC

Answer explanation

Explanation:

OpenFlow is a well-known southbound API. OpenFlow defines the way the SDN Controller should interact with the forwarding plane to make adjustments to the network, so it can better adapt to changing business requirements.

The Network Configuration Protocol (NetConf) uses Extensible Markup Language (XML) to install, manipulate and delete configuration to network devices.

Other southbound APIs are:

+ onePK: a Cisco proprietary SBI to inspect or modify the network element configuration without hardware upgrades.

+ OpFlex: an open-standard, distributed control system. It send "summary policy" to network elements.

Which feature on the Cisco Wireless LAN Controller when enabled restricts management access from specific networks?

• CPU ACL

• TACACS

• Flex ACL

• RADIUS

Answer explanation

Explanation:

Whenever you want to control which devices can talk to the main CPU, a CPU ACL is used. Note: CPU ACLs only filter traffic towards the CPU, and not any traffic exiting or generated by the CPU.

Access control lists are used for controlling permissions to a computer system or computer network. They are used to filter traffic in and out of a specific device. Those devices can be network devices that act as network gateways or endpoint devices that users access directly.

Which command magically generates an IPv6 address from a specified IPv6 prefix and MAC address of an interface?

• ipv6 address dhcp

• ipv6 address 2001:DB8:5:112::/64 eui-64

• ipv6 address autoconfig

• ipv6 address 2001:DB8:5:112::2/64 link-local

Answer explanation

Explanation:

The "ipv6 address autoconfig" command causes the device to perform IPv6 stateless address auto- configuration to discover prefixes on the link and then to add the EUI-64 based addresses to the interface.

Addresses are configured depending on the prefixes received in Router Advertisement (RA) messages.

The device will listen for RA messages which are transmitted periodically from the router (DHCP Server).

This RA message allows a host to create a global IPv6 address from:

+ Its interface identifier (EUI-64 address)

+ Link Prefix (obtained via RA)

Note: Global address is the combination of Link Prefix and EUI-64 address