Cisco 109-155 (50)

In which situation would a technician use the show interfaces switch command?

• • to determine if remote access is enabled

• when packets are being dropped from a particular directly attached host

• • when an end device can reach local devices, but not remote devices

• • to determine the MAC address of a directly attached network device on a particular interface

What is a drawback of the local database method of securing device access that can be solved by using AAA with centralized servers?

• • There is no ability to provide accountability.

• User accounts must be configured locally on each device, which is an unscalable authentication solution.

• • It is very susceptible to brute-force attacks because there is no username.

• • The passwords can only be stored in plain text in the running configuration.

What action does a DHCPv4 client take if it receives more than one DHCPOFFER from multiple DHCP servers?

• It sends a DHCPREQUEST that identifies which lease offer the client is accepting.

• • It sends a DHCPNAK and begins the DHCP process over again.

• • It discards both offers and sends a new DHCPDISCOVER.

• • It accepts both DHCPOFFER messages and sends a DHCPACK.

Refer to the exhibit. The network administrator is configuring the port security feature on switch SWC. The administrator issued the command show port-security interface fa 0/2 to verify the configuration. What can be concluded from the output that is shown? (Choose three.)

• • Three security violations have been detected on this interface.

• This port is currently up.

• The port is configured as a trunk link.

• Security violations will cause this port to shut down immediately.

• The switch port mode for this interface is access mode.

What method of wireless authentication is dependent on a RADIUS authentication server?

• • WEP

• • WPA Personal

• • WPA2 Personal

• • WPA2 Enterprise

A network administrator has found a user sending a double-tagged 802.1Q frame to a switch. What is the best solution to prevent this type of attack?

• • The native VLAN number used on any trunk should be one of the active data VLANs.

• The VLANs for user access ports should be different VLANs than any native VLANs used on trunk ports.

• • Trunk ports should be configured with port security.

• • Trunk ports should use the default VLAN as the native VLAN number.

Refer to the exhibit. Which two conclusions can be drawn from the output? (Choose two.)

• The EtherChannel is down.

• The port channel ID is 2.

• The port channel is a Layer 3 channel.

• The bundle is fully operational.

• The load-balancing method used is source port to destination por

On a Cisco 3504 WLC Summary page ( Advanced > Summary ), which tab allows a network administrator to configure a particular WLAN with a WPA2 policy?

• WLANs

• • SECURITY

• • WIRELESS

• • MANAGEMENT

Refer to the exhibit. A network engineer is configuring IPv6 routing on the network. Which command issued on router HQ will configure a default route to the Internet to forward packets to an IPv6 destination network that is not listed in the routing table?​

• • ipv6 route ::/0 serial 0/0/0

• ip route 0.0.0.0 0.0.0.0 serial 0/1/1

• • ipv6 route ::1/0 serial 0/1/1

• ipv6 route ::/0 serial 0/1/1

Users are complaining of sporadic access to the internet every afternoon. What should be done or checked?

• • Create static routes to all internal networks and a default route to the internet.

• • Verify that there is not a default route in any of the edge router routing tables.

• • Create a floating static route to that network.

• Check the statistics on the default route for oversaturation.