Font size
WorksheetsCCNA Day 4
Total questions: 50
Worksheet time: 29mins
By default, how does EIGRP determine the metric of a route for the routing table?
It counts the number of hops between the receiving and destination routers and uses that value as the metric.
It uses a reference bandwidth and the actual bandwidth of the connected link to calculate the route metric.
It uses the bandwidth and delay values of the path to calculate the route metric.
It uses a default metric of 10 for all routes that are learned by the router.
Which type of IPv6 address is publicly routable in the same way as IPv4 public addresses?
unique local
link-local
multicast
global unicast
Which WPA3 enhancement protects against hackers viewing traffic on the \M-Fi network?
AES encryption
SAE encryption
TKIP encryption
scrambled encryption key
Refer to the exhibit. Which two commands were used to create port channel 10? (Choose two.)
int range g0/0-1
channel-group 10 mode active
int range g0/0-1
channel-group 10 mode desirable
int range g0/0-1
channel-group 10 mode passive
int range g0/0-1
channel-group 10 mode on
int range g0/0-1
channel-group 10 mode auto
What are two fundamentals of virtualization? (Choose two.)
The environment must be configured with one hypervisor that serves solely las a network manager to monitor SNMP traffic.
It requires that some servers, virtual machines, and network gear reside on the Internet.
It allows logical network devices to move traffic between virtual machines and the rest of the physical network.
It allows a physical router to directly connect Nle from each virtual machine into the network.
It allows multiple operating systems and applications to run independently on one physical server.
Refer to the exhibit. What is the next hop address for traffic that is destined to host 10.0.1.5?
10.0.1.3
10.0.1.4
Loopback 0
10.0.1.50
When configuring a WLAN with WPA2 PSK in the Cisco Wireless LAN Controller. GUI, which two formats are available to select? (Choose two.)
base64
hexadecimal
binary
decimal
ASCII
Refer to the exhibit. Which path is used by the router for internet traffic?
0.0.0.0/0
10.10.10.0/28
10.10.13.0/24
209.165.200.0/27
Which two encoding methods are supported by REST APls? (Choose two.)
XML
YAML
SGML
EBCDIC
JSON
What is an advantage of Cisco DNA Center versus traditional campus device management?
It enables easy autodiscovery of network elements in a brownfield deployment.
It is designed primarily to provide network assurance.
It supports numerous extensibility options, including cross-domain adapters and third-party SDKs.
It supports high availability for management functions when operating in cluster mode.
When a WPA2-PSK WLAN is configured in the Wireless LAN Controller, what is the minimum number of characters that is required in ASCII format?
8
6
12
18
Which two conditions must be met before SSH can operate normally on a Cisco IOS switch? (Choose two.)
IP routing must be enabled on the switch.
Telnet mustbe disabled on the switch
The ip domain-name command must be configured on the switch.
A console password must be configured on the switch.
The switch must be running a k9 (crypto) IOS image.
Refer to the exhibit. What two conclusions should be made about this configuration? (Choose two.)
The spanning-tree mode is Rapid PVST+.
The spanning-tree mode is PVST+
This is a root bridge.
The designated port is FastEthernet 2/1
The root port is FastEthernet 2/ 1
What is a difference between RADIUS and TACACS+?
TACACS+ separates authentication and authorization, and RADIUS merges them.
TACACS+ encrypts only password information, and RADIUS encrypts the entire payload.
RADIUS logs all commands that are entered by the administrator, but TACACS+ logs only start, stop, and interim commands.
RADIUS is most appropriate for dial authentication, bUt TACACS+ can be used for multiple types of authentication.
What are two benefits of network automation? (Choose two.)
faster changes with more reliable results
fewer network failures
reduced hardware footprint
reduced operational costs
increased network security
Refer to the exhibit. How does the router manage traffic to 192.168.12.16?
It chooses the EIGRP route because it has the lowest administrative distance
It load-balances traffic between all three routes
It selects the RIP route because it has the longest prefix inclusive of the destination address.
It chooses the OSPF route because it has the longest prefix inclusive of the destination address.
Which two capabilities of Cisco DNA Center make it more extensible? (Choose two-)
customized versions for small, medium, and large enterprises
REST APIS that allow for external applications to interact natively with Cisco DNA Center
SDKs that support interaction with third-party network equipment
adapters that support all families of Cisco IOS software
modular design that is upgradable as needed
When configuring IPv6 on an interface, which two IPv6 multicast groups are joined? (Choose two.)
FF02::2
FC00::/7
FF02::1
2002::5
2000::/3
An engineer must configure a WLAN using the strongest encryption type for WPA2-PSK Which cipher fulfills the configuration requirement?
WEP
TKIP
RC4
AES
Which goal is achieved by the implementation of private IPv4 addressing on a network?
allows servers and workstations to communicate across public network boundaries
allows communication across the Internet to other private networks
provides a reduction in size of the forwarding table on network routers
provides an added level of protection against Internet exposure
Which type of attack is mitigated by dynamic ARP inspection?
man-in-the-middle
DDoS
Worm
Malware
A device detects two stations transmitting frames at the same time. This condition occurs after the first 64 bytes of the frame is received. Which interface counter increments?
late collision
Runt
CRC
Collision
How does Cisco DNA Center gather data from the network?
The Cisco CLI Analyzer tool gathers data from each licensed network device and streams it to the controller.
Network devices use different services like SNMP, syslog, and streaming telemetry to send data to the controller.
Devices use the call-home protocol to periodically send data to the controller
Devices establish an IPsec tunnel to exchange data with the controller.
How does CAPWAP communicate between an access point in local mode and a WLC?
The access point has the ability to link to any switch in the network, assuming connectivity to the WLC.
The access point must be connected to the same switch as the WLC.
The access point must directly connect to the WLC using a copper cable.
The access point must not be connected to the wired network, as it would create a loop.
An engineer is configuring NAT to translate the source subnet of 10.10.0.0/24 to any one of three addresses:192.168.3.1, 192.168.3.2, or 192.168.3.3. Which configuration should be used?
enable
configure terminal
ip nat pool mypool 192168.3.1 192.168.3.3 prefix-length30
access-list 1 permit 10.10.0.0 0.0.0.255
ip nat inside source list 1 pool mypool
interface g1/1
ip nat inside
interface g1/2
ip nat outside
enable
configure terminal
ip nat pool mypool 192,168.3.1 192.168.3.3 prefix-length 30
access-list 1 permit 10.10.0.0 0.0.0.255
ip nat outside destination list 1 pool mypool
interface g1/1
ip nat inside
interface g1/2
ip nat outside
enable
configure terminal
ip nat pool mypool 192,168.3.1 192.168.3.3 prefix-length 30
access-list 1 permit 10.10.0.0 0.0.0.255
ip nat outside destination list 1 pool mypool
interface g1/1
ip nat inside
interface g1/2
ip nat outside
enable
configure terminal
ip nat pool mypool 192.168.3.1 192.168.3.3 prefix-length 30
route-map permit 10.10.0.0 255.255.255.0
ip nat outside destination list 1 pool mypool
interface g1/1
ip nat inside
interface g1/2
ip nat outside
enable
configure terminal
ip nat pool mypool 192.168.3.1 192.168.3.3 prefix-length 30
access-list 1 permit 10.10.0.0 0.0.0.254
ip nat inside source list 1 pool mypool
interface g1/1
ip nat inside
interface g1/2
ip nat outside .
Refer to the exhibit. An engineer deploys a topology in which R1 obtains its IP configuration from DHCP. If the switch and DHCP server configurations are complete and correct, which two sets of commands must be configured on R1 and R2 to complete the task? (Choose two.)
R1 (config)# interface fa0/0
R1 (config-if)# ip address dhcp
R1 (config-if)# no shutdown
R1 (config)# interface fa0/0
R1 (config-if)# ip helper-address 192.0.2.2
R2(config)# interface gi0/0
R2(config-if)# ip helper-address 198.51.10
R2(config)# interface gi0/0
R2(config-if)# ip address dhcp
R1 (confi9)# interface fa0/0
R1 (config-if)# ip helper-address 198.51.100.100
Which command must be entered when a device is configured as an NTP server?
ntp peer
ntp server
ntp master
ntp authenticate
What mechanism carries multicast traffic between remote sites and supports encryption?
GRE
GRE over IPsec
ISATAP
IPsec over ISATAP
Which 802.11 frame type is Association Response?
control
protected frame
management
action
The service password-encryption command is entered on a router. What is the effect of this configuration?
protects the VLAN database from unauthorized PC connections on the switch
encrypts the password exchange when a VPN tunnel is established
prevents network administrators from configuring clear-text passwords
restricts unauthorized users from viewing clear-text passwords in the running configuration
Refer to the exhibit. Which outcome is expected when PC_A sends data to PC_B?
The source MAC address is changed.
The source and destination MAC addresses remain the same.
The destination MAC address is replaced with ffff.ffff.ffff
The switch rewrites the source and destination MAC addresses with its own.
What is a characteristic of spine-and-Ieaf architecture?
Each link between leaf switches allows for higher bandwidth.
Each device is separated by the same number of hops.
It provides variable latency.
It provides greater predictability on STP blocked ports.
A packet is destined for 10.10.1.22. Which static route does the router choose to forward the packet?
ip route 10.10.1.0 255.255.255.240 10.10.255.1
ip route 10.10.1.16 255.255.255.252 10.10.255.1
ip route 10.10.1.20 255.255.255.252 10.10.255.1
ip route 10.10.1.20 255.255.255.254 10.10.255.1
How do AAA operations compare regarding user identification, user services, and access control?
Authorization identifies users, and authentication provides access control.
Authorization provides access control, and authentication tracks user services
Authentication identifies users, and accounting tracks user services.
Accounting tracks user services, and authentication provides access control.
Refer to the exhibit Which configuration issue is preventing the OSPF neighbor relationship from being established between the two routers?
R1 interface Gi1/0 has a larger MTU size.
R1 has an incorrect network command for interface Gi1/0.
R2 should have its network command in area 1.
R2 is using the passive-interface default command.
Which feature on the Cisco Wireless LAN Controller when enabled restricts management access from specific networks?
RADIUS
Flex ACL
CPU ACL
TACACS
What are two reasons for an engineer to configure a floating static route? (Choose two.)
to enable fallback static routing when the dynamic routing protocol fails
to support load balancing via static routing
to route traffic differently based on the source IP of the packet
to automatically route traffic on a secondary path when the primary path goes down
to control the return path of traffic that is sent from the router
What is the expected outcome when an EUl-64 address is generated?
The seventh bit of the original MAC address of the interface is inverted,
The MAC address of the interface is used as the interface ID without modification.
The characters FE80 are inserted at the beginning of the MAC address of the interface.
The interface ID is configured as a random 64-bit value.
What are two reasons that cause late collisions to increment on an Ethernet interface? (Choose two.)
when one side of the connection is configured for half-duplex
When the cable length limits are exceeded
when Carrier Sense Multiple Access/Collision Detection is used
when a collision occurs after the 32nd byte of a frame has been transmitted
sending
Referto the exhibit. What is the effect of this configuration?
The switch port interface trust state becomes untrusted
The switch port remains administratively down until the interface is connected to another switch
The switch port remains down until it is configured to trust or untrust incoming packets
Dynamic ARP Inspection is disabled because the ARP ACL is missing
Refer to the exhibit. What commands are needed to add a subinterface to Ethernet0/0 on R1 to allow for VLAN 20, with IP address 10.20.20.1/24?
R1 (config)# interface ethernet0/0
R1(config)# ip address 10.20.20.1 255.255.255.0
R1 (config)# interface ethernet0/0.20
R1(config)# encapsulation dot1q 20
R1(config)# ip address 10.20.20.1 255.255.255.0
R1 (config)# interface ethernet0/0.20
R1(config)# ip address 10.20.20.1 255.255.255.0
R1 (config)# interface ethernet0/0
R1(config)# encapsulation dot1q 20
R1(config)# ip address 10.20.20.1 255.255.255.0
What are two benefits of controller-based networking compared to traditional networking? (Choose two.)
controller-based allows for fewer network failures, while traditional increases failure rates
controller-based increases network bandwidth usage. while traditional lightens the load on the network
controller-based inflates software costs, while traditional decreases individual licensing costs
controller-based reduces network configuration complexity, while traditional increases the potential for errors
controller-based provides centralization of key IT functions, while traditional requires distributed management functions
Refer to the exhibit. An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate directly to enable privilege mode via Telnet using a local username and password?
R1(confi9)#username admin .
R1 (config-if)#line vty 0 4
R1(config-line)#password p@ss1234
R1(config)#usemame admin
R1 (config-if)#line vty 0 4
R1 (config-line)#password p@ss1234
R1 (config-Iine)#transport input telnet
R1 (config)#usemame admin secret p@ss1234
R1 (config-if)#line vty 0 4
R1 (config-line)#login local
R1(config)#enable secret p@ss1234
R1(config)#usemame admin privilege 15 secret p@ss1234
R1(config-if)#line vty 0 4
R1 (config-Iine)#login local
Refer to the exhibit. Which switch becomes the root bridge?
S3
S4
S1
S2
Refer to the exhibit. Which route type does the‘routing protocol Code D represent in the output?
/24 route of a locally configured IP
statically assigned route
internal BGP route
route learned through EIGRP
Which two values or settings must be entered when configuring a new WLAN in the Cisco Wireless LAN Controller GUI? (Choose two.)
QoS settings
management interface settings
SSID
IP address of one or more access points
profile name
Which configuration is needed to generate an RSA key for SSH on a router?
Create a user with a password.
Configure the version of SSH
Configure VTY access.
Assign a DNS domain name
Refer to the exhibit. An administrator is tasked with configuring a voice VLAN. What is the expected outcome when a Cisco phone is connected to the GigabitEthernet3/1/4 port on a switch?
The phone sends and receives data in VLAN 50, but a workstation connected to the phone sends and receives data in VLAN 1.
The phone sends and receives data in VLAN 50, but a workstation connected to the phone has no VLAN connectivity.
The phone and a workstation that is connected to the phone do not have VLAN connectivity.
The phone and a workstation that is connected to the phone send and receive data in VLAN 50.
Refer to the exhibit. Which action is expected from SW1 when the untagged frame is received on the GigabitEthernet0/1 interface?
The frame is processed in VLAN 1.
The frame is processed in VLAN 11.
The frame is dropped.
The frame is processed in VLAN 5.
What are two descriptions of three-tier network topologies? (Choose two.)
The core layer maintains wired connections for each host.
The distribution layer runs Layer 2 and Layer 3 technologies.
The core and distribution layers perform the same functions.
The access layer manages routing between devices in different domains.
The network core is designed to maintain continuous connectivity when devices fail.
