A company is closing its branch offices and moving all resources to a centralized cloud platform. The primary purpose of the WAN now shifts from connecting offices to connecting the company to the internet backbone. Which connectivity type is now the most critical?

High-speed Internet access (e.g., dedicated Ethernet/broadband)

In a scenario using Dynamic NAT with an address pool, a private host is idle for an extended period. The NAT entry is subsequently removed by the router. This removal is based on the router's:

NAT Table Timeout (aging timer).

Maria, a junior network technician, is preparing a presentation on network fundamentals. She needs to articulate the fundamental differences and relationships between Local Area Networks (LANs) and Wide Area Networks (WANs) to her team. Which two statements accurately describe the relationship, scope, and ownership differences between LANs and WANs? (Choose two.)

WANs are generally operated and maintained by multiple service providers (ISPs/Carriers), whereas LANs are usually operated by a single organization or individual within a confined area.

Both LANs and WANs fundamentally perform the same task of connecting end devices (like PCs and printers) to a network.

WANs always connect remote sites using much faster speeds than the internal LAN connections.

LANs are exclusively owned by private entities, while all WANs must be owned by public, governmental organizations.

LANs are designed to connect different WANs together within a building.

A network administrator is writing an ACL entry to filter traffic from a group of 16 contiguous IP addresses. To define this block precisely, they use the subnet address with a wildcard mask of 0.0.0.15. Which two statements correctly describe how the router interprets the bits when applying the wildcard mask 0.0.0.15? (Choose two.)

The last four bits of a supplied IP address will be ignored (meaning they are "don't care" bits).

The first 28 bits of a supplied IP address will be matched exactly (meaning they are '0's in the wildcard mask).

The first 32 bits of a supplied IP address will be matched exactly.

The first 28 bits of a supplied IP address will be ignored.

The last four bits of the supplied IP address must match the corresponding bits in the ACL entry.

An administrator has created an IPv6 ACL named ENG_ACL and needs to apply it to a router interface. The policy dictates that the router must filter traffic before the routing process occurs (in other words, the ACL must be applied inbound). Which command is used to activate the IPv6 ACL named ENG_ACL inbound on the interface?

ipv6 traffic-filter ENG_ACL out

A corporate IT department needs to allow their internal web server (Private IP: 192.168.1.50) and their internal mail server (Private IP: 192.168.1.60) to be reachable from the internet using two fixed, known public IP addresses. Which statements accurately describe the required NAT configuration?

A one-to-one, permanent mapping is necessary for both servers.

Static NAT is the appropriate translation type.

The best solution is PAT, as it uses the same public IP for both.

Dynamic NAT should be used to map the addresses from a pool.

This setup is a clear use case for NAT64.

A network engineer is migrating from an IPv4-only network to a dual-stack environment. The engineer is learning the nuances of IPv6 ACLs compared to IPv4 ACLs. Which feature is unique to IPv6 ACLs when compared to a standard IPv4 ACL configuration?

An implicit permit of essential Neighbor Discovery Protocol (NDP) packets for functions like router solicitation and advertisement.

The explicit use of the deny any any ACE at the end of the list.

The use of named ACL Access Control Entries (ACEs).

The ability to use wildcard masks for network ranges.

A company needs to quickly set up a temporary WAN link to a disaster recovery site. They decide to use secure tunnels over the public internet. This approach falls under which type of WAN connectivity?

Internet-Based Connectivity (VPN)

An administrator enters the command Router1(config-ext-nacl)# permit tcp 172.16.4.0 0.0.0.255 any eq www into a Named Extended ACL configuration. The ACL is then applied inbound on interface f0/0. Assuming this is the first and only entry in the ACL, what effect will this command have on the traffic passing through the router?

Traffic originating from the 172.16.4.0/24 network is permitted to reach any destination on TCP port 80 (HTTP).

The command is rejected by the router because it is incomplete (missing the destination port).

All traffic originating from the entire 172.16.4.0/24 network is permitted to go anywhere on any port.

All TCP traffic is permitted, and all other traffic (UDP, ICMP, etc.) is denied.

A network administrator has configured a long Named ACL for filtering traffic. A specific Access Control Entry (ACE) was accidentally added and is now blocking legitimate traffic. The administrator needs to remove only that single, erroneous line as quickly and efficiently as possible without disrupting the rest of the production ACL. What is the quickest and most standard configuration method to remove this single ACE from the named ACL?

Use the no keyword followed by the sequence number of the ACE to be removed.

Create an entirely new ACL with a different name or number and apply the new ACL to the interface.

Copy the entire running configuration into a text editor, delete the line, and paste the modified ACL back into the router.

Use the no access-list command to remove the entire ACL, and then immediately recreate it without the offending ACE.

A network with 500 users needs to send an email to an external server. The router performs PAT . When the external email server receives the packet, what unique combination does it use to reply to the correct internal user?

The router's Public IP address AND the translated Source Port number.

The external server's IP address.

Only the router's public IP address.

The internal user's private IP address.

David is tasked with configuring a Static NAT entry on the border router to allow external users to reliably access an internal web server with a private IP address (192.168.1.10). The server must always be reachable on the public IP address (203.0.113.5). Which two essential configuration tasks must David perform on the router to correctly enable this static translation? (Choose two.)

Create a specific mapping between the inside local address (192.168.1.10) and the inside global address (203.0.113.5).

Explicitly identify the participating router interfaces as either 'inside' (facing the server) or 'outside' (facing the public network).

Configure the private address (192.168.1.10) as the inside global address.

Define a reusable pool of public IP addresses (NAT Pool) to be shared by multiple private addresses.

Answer, Define the outside global address (the destination of the external user) in the NAT configuration.

Acme Corp. needs to connect its main headquarters in New York to a new branch office in London. The requirements state that the connection must be a private Wide Area Network (WAN) infrastructure, meaning the connection must offer high security, isolation, and guaranteed bandwidth that is not shared with the general public. Based on these requirements, which two technologies would a network architect categorize as suitable private WAN infrastructures for this dedicated, secure inter-office link? (Choose two.)

Virtual Private Network (VPN) over the public internet

A technician needs to secure the Virtual Terminal (VTY) lines of a router to prevent unauthorized remote access (Telnet/SSH). A Standard ACL (number 20) has already been created to define the allowed source IP addresses. Which specific command or configuration option would the technician use to apply this ACL to secure the router's administrative access?

Use the access-class 20 in command on the VTY lines.

Use the ip access-group 20 in command on the interface.

Use the no access-list 20 command to remove the ACL.

Use the ip access-group 20 in command on the VTY lines.

MPLS is a Modern WAN Connectivity solution that speeds up traffic delivery by using:

Labels to direct packets over a path.

Fiber optic cables exclusively.

Only Layer 3 routing protocols.

A global manufacturing company needs to connect its headquarters in New York to a new factory in Shanghai with a guaranteed, high-quality link for its real-time production data. Which type of WAN connectivity is generally chosen for its excellent QoS and performance guarantees?

MPLS (Multiprotocol Label Switching)

An administrator, Raj, wants to configure a Standard ACL (number 10) on a router's Virtual Terminal (VTY) lines. The goal is to allow only his workstation (192.168.15.23) to access the router via Telnet or SSH, while implicitly denying all others. Which two configuration commands correctly define the ACE that permits only Raj's single host? (Choose two.)

Router1(config)# access-list 10 permit host 192.168.15.23

outer1(config)# access-list 10 permit 192.168.15.23 0.0.0.0

Router1(config)# access-list 10 permit 192.168.15.23 255.255.255.255

Router1(config)# access-list 10 permit 192.168.15.23 255.255.255.0

Router1(config)# access-list 10 permit 192.168.15.23 0.0.0.255

A network engineer is designing a WAN for a startup that prioritizes low initial cost and flexible scalability, even if it means sacrificing some bandwidth guarantees. Which connectivity approach aligns best with this strategy?

Internet-Based Connectivity (e.g., site-to-site VPNs)

Your ISP provides your organization with a small pool of 5 public IPv4 addresses for use by the 50 employees. You decide to use Dynamic NAT . Which two statements correctly describe how this will function?

If all 5 public addresses are in use, a 6th host cannot initiate a connection.

The number of simultaneous outgoing sessions is limited to 5.

It provides a one-to-one mapping between the private and public addresses.

The translation is permanent until the device is rebooted.

All 50 employees will be able to access the internet simultaneously.

A network administrator notices that peer-to-peer applications and some VoIP services (like SIP) are failing after implementing NAT. This is primarily a manifestation of which NAT disadvantage ?

Breaking end-to-end IP address transparency.

Increased latency due to translation lookups.

Increased CPU utilization on the router.

A network security team is performing penetration testing. They can only see the router's public IP address ( 203.0.113.1 ) and no internal IP schema. This is a direct benefit of NAT, primarily contributing to:

Network security/Hiding internal topology

Which statement is a major disadvantage of NAT?

It can complicate the use of certain applications that require end-to-end IP addresses.

It requires less configuration on the router.

It makes it easier to track individual user activity.

It increases the demand for public IP addresses.

A security engineer is configuring a new firewall policy using an Extended ACL on the internet-facing interface. The primary goal is to allow internal users to initiate connections (like browsing the web) but block all unwanted incoming traffic from the outside. To maintain stateful inspection for TCP sessions without using a true firewall, the engineer uses a special keyword in the ACL. When would the technician use the established configuration option in an extended ACL?

To allow returning reply traffic (part of an already established TCP session) to enter the internal network from the outside.

To generate an informational log message whenever a packet matches the access list entry (ACE).

To allow all initial traffic from the internal network to exit the interface.

To identify and display all packets that have been restricted by the ACL.

Why is the Internet considered the cheapest form of WAN Connectivity ?

It is always faster than any other option.

It leverages shared, best-effort infrastructure, eliminating the need for dedicated circuits.

It is controlled by a single service provider globally.

It offers guaranteed QoS for all traffic.

A key characteristic of a Traditional WAN Connectivity solution like T1/E1 lines is that they provide:

Dedicated, leased-line bandwidth.

Dynamic routing based on traffic load.

Shared Bandwidth with high contention.

Best-effort service with no guarantees.

A government agency requires a fixed, private, and secure circuit between two main data centers that cannot rely on any shared carrier infrastructure. They choose to install a dedicated, long-haul fiber connection. This is an example of which type of WAN connectivity?

Traditional WAN (Private Leased Line)

An administrator configures a firewall rule to allow specific inbound traffic (e.g., SSH on port 22) to an external host. This action is most often paired with which NAT feature to map the public-IP:Port combination to the private-IP:Port?

Port forwarding (a use of Static NAT/PAT)

In a configuration using Static NAT, the network administratot must be mindful of potential issues. Which two statements describe problems or limitatiom specific to Static NAT?

Each internal host that needs internet access requires its own dedicated public IP.

It offers no public IP address conversation benefit.

It provides less security than other NAT types.

It can quickly lead to exhaustion of port numbers.

It only works for IPv6-IPv4 translation.

A medium-sized company is evaluating different options for its Camput-to-WAN connection to guarantee high avaialbility, dedicated bandwidth, and predictable performance, unlike shared public internet services. Which two WAN options are considered examples of a private WAN architecture (i.e., a dedicated or non-shared conection/circuit from the service provider)? (Choose two.)

Ethernet WAN (Carrier Ethernet)

What is the primary function of NAT?

To translate private IP addresses to public IP addresses.

to assign dynamic IP addresses to hosts.

To filter unwanted network packets.

Which Traditional WAN Connectivity technology utilizes a cell-based architecture with small, fixed-length-byte frames?

Asynchronous Transfer Mode (ATM)

The primary goal of NAT64 is to:

Allow IPv6-only networks to communicate with IPv4-only servers.

Translate between private IPv4 and public IPv4 adresses.

Double the speed of IPv6 packet transmission.

Encrypt IPv6 traffic for security.

A company needs to immediately block all IP traffic originating from a specific rogue host with the IP address 10.1.1.1 from reaching any machine on the sensitive 192.168.0.0/16 network. A Standard ACL (numbered 100) is being written. Which two Access Control Ethics (ACEs) can be used to define this specific denial rule correctly? (Choose two.)

access-list 100 deny ip 10.1.1.1 192.168.0.0 0.00.255.255

access-list 100 deny ip host 10.1.1.1 192.168.0.0 0.0.255.255

access-list 100 deny ip 10.1.1.1 255.255.255.255 192.168.0.0 0.00.255.255

access-list 100 deny ip 192.168.0.0 0.00.255.255 10.1.1.1 0.0.0.0

access-list 100 deny ip 192.168.0.0 0.00.255.255 host 10.1.1.1

In which scenario would you typically use a standard ACL?

To allow or deny traffic from specific subnets

To permit or deny access to specific applications

To filter web traffic based on HTTP and HTTPS protocols

To control traffic based on user roles

An enterprise is implementing SD-WAN accross all branches. The key operational advantage gained by this approach, compared to traditional setups, is:

Intelligent path selection and traffic steering based on application needs.

Removing all latency from network links.

Eliminating the need for any physical circuits.

Reliance solely on expensive MPLS circuits.

PISBOL

Authored by DONJAN CAGURANGAN

Other

University

Used 2+ times

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

80 questions

Show all answers

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Where should an ACL be applied to control inbound traffic on an interface?

On the inbound direction

On the outbound direction

It does not matter

Both inbound and outbound

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A network administrator needs to create an Extended ACL (number 103) with a precise policy for the 192.168.10.0/24 network:
Permit all users in that network to access the public web server at 172.17.80.1 (HTTP on port 80).
Deny those same users from using Telnet (port 23) to any destination.
Which set of access control entries (in the correct order) achieves this specific policy?

access-list 103 permit 192.168.10.0 0.0.0.255 host 172.17.80.1

access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq telnet

access-list 103 deny tcp host 192.168.10.0 any eq 23

access-list 103 permit tcp host 192.168.10.1 eq 80

access-list 103 permit tcp 192.168.10.0 0.0.0.255 host 172.17.80.1 eq 80

access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq 23

access-list 103 permit tcp 192.168.10.0 0.0.0.255 any eq 80

access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq 23

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A retailer has several hundred small stores that only generate low volumes of transaction data (credit card swipes). They want a low-cost, asymmetrical, and widely available connection to the headquarters' data center. Which Internet-Based Connectivity option is most likely used?

Carrier Ethernet

Frame Relay

T1/E1 Leased Line

Cable Broadband or DSL

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

The role of the Demarcation Point in a WAN is to:

Define the point where the customer's responsibility ends and the carrier's begins.

Encrypt all data before transmission.

Route packets across the carrier's network.

Manage the local area network.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A large corporation has an internal network of 5,000 devices but only a single public IPv4 address assigned by its ISP. Which NAT technology is the most practical and economical solution for all devices to access the internet simultaneously?

Static NAT

Port Address Translation (PAT)

Dynamic NAT with a pool of 5,000 addresses

NAT64

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What is one of the primary advantages of using NAT in a corporate network?

It simplifies routing protocols.

internal IP addresses.

It allows for easier network segmentation.

It provides an additional layer of security by hiding

It increases network traffic.

MULTIPLE SELECT QUESTION

45 sec • 1 pt

A regional chain of retail stores needs to connect its Point-of-Sale (POS) systems across hundreds of remote locations to a central server. The priority is low operating cost and rapid deployment. Which two connectivity types best meet these criteria?

Satellite WAN

Dedicated T1 Leased Lines

ATM Circuits

Cable Broadband

DSL

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

76 questions

Oceans Review

Quiz

•

8th Grade - University

80 questions

Human Factors and Safety Quiz

Quiz

•

University

80 questions

Comptia network plus

Quiz

•

12th Grade - Professi...

80 questions

EXAMEN COMPLETO - RAZONAMIENTO

Quiz

•

University

85 questions

UAS Sistem Pengaturan

Quiz

•

University

76 questions

TAXABLE CHARGES

Quiz

•

University

85 questions

guess the country

Quiz

•

5th Grade - University

84 questions

CMA 385 - Estimating I Chapters 1-3

Quiz

•

University

Popular Resources on Wayground

8 questions

Spartan Way - Classroom Responsible

Quiz

•

9th - 12th Grade

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

14 questions

Boundaries & Healthy Relationships

Lesson

•

6th - 8th Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

3 questions

Integrity and Your Health

Lesson

•

6th - 8th Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

9 questions

FOREST Perception

Lesson

•

20 questions

Main Idea and Details

Quiz

•

5th Grade

Discover more resources for Other

20 questions

Disney Trivia

Quiz

•

University

7 questions

Fragments, Run-ons, and Complete Sentences

Interactive video

•

4th Grade - University

7 questions

Renewable and Nonrenewable Resources

Interactive video

•

4th Grade - University

10 questions

DNA Structure and Replication: Crash Course Biology

Interactive video

•

11th Grade - University

7 questions

Force and Motion

Interactive video

•

4th Grade - University

20 questions

Implicit vs. Explicit

Quiz

•

6th Grade - University

14 questions

Ch.3_TEACHER-led

Quiz

•

University

7 questions

Comparing Fractions

Interactive video

•

1st Grade - University

PISBOL

Where should an ACL be applied to control inbound traffic on an interface?

A retailer has several hundred small stores that only generate low volumes of transaction data (credit card swipes). They want a low-cost, asymmetrical, and widely available connection to the headquarters' data center. Which Internet-Based Connectivity option is most likely used?

The role of the Demarcation Point in a WAN is to:

A large corporation has an internal network of 5,000 devices but only a single public IPv4 address assigned by its ISP. Which NAT technology is the most practical and economical solution for all devices to access the internet simultaneously?

What is one of the primary advantages of using NAT in a corporate network?

A regional chain of retail stores needs to connect its Point-of-Sale (POS) systems across hundreds of remote locations to a central server. The priority is low operating cost and rapid deployment. Which two connectivity types best meet these criteria?

Which command is used to create a named standard ACL on a Cisco router?

A company is closing its branch offices and moving all resources to a centralized cloud platform. The primary purpose of the WAN now shifts from connecting offices to connecting the company to the internet backbone. Which connectivity type is now the most critical?

In a scenario using Dynamic NAT with an address pool, a private host is idle for an extended period. The NAT entry is subsequently removed by the router. This removal is based on the router's:

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Other