Font size
WorksheetsFinal Theory Test Practice (CCNA)
Total questions: 60
Worksheet time: 30mins
What commonly motivates cybercriminals to attack networks as compared to hacktivists or state-sponsored hackers?
financial gain
fame seeking
status among peers
political reasons
In what type of attack is a cybercriminal attempting to prevent legitimate users from accessing network services?
address spoofing
MITM
session hijacking
DoS
Which objective of secure communications is achieved by encrypting data?
authentication
availability
confidentiality
integrity
What type of malware has the primary objective of spreading across the network?
worm
virus
Trojan horse
botnet
A user receives a phone call from a person who claims to represent IT services and then asks that user for confirmation of username and password for auditing purposes. Which security threat does this phone call represent?
spam
social engineering
DDoS
anonymous keylogging
What characteristic completes the following statement? When an IPv6 static route is configured, it is first necessary to configure ……
the next-hop address of two different adjacent routers
the "ipv6 unicast-routing" command
an IPv6 link-local address on the adjacent router
an administrative distance of 2
Which statement describes a VPN?
VPNs use open source virtualization software to create the tunnel through the Internet.
VPNs use logical connections to create public networks through the Internet.
VPNs use dedicated physical connections to transfer data between remote users.
VPNS use virtual connections to create a private network through a public network
The IT department is reporting that a company web server is receiving an abnormally high number of web page requests from different locations simultaneously. Which type of security attack is occurring?
adware
DDos
phishing
social engineering
spyware
What causes a buffer overflow?
launching a security countermeasure to mitigate a Trojan horse
downloading and installing too many software updates at one time
sending too much information to two or more interfaces of the same device, thereby causing dropped packets
sending repeated connections such as Telnet to a particular device, thus denying other data sources
attempting to write more data to a memory location than that location can hold
What is a ping sweep?
a query and response protocol that identifies information about a domain, including the addresses that are assigned to that domain.
a scanning technique that examines a range of TCP or UDP port numbers on a host to detect listening services.
a software application that enables the capture of all network packets that are sent across a LAN.
a network scanning technique that indicates the live hosts in a range of IP addresses
Which attack involves threat actors positioning themselves between a source and destination with the intent of transparently monitoring, capturing, and controlling the communication?
man-in-the-middle attack
SYN flood attack
DoS attack
ICMP attack
What is the term used to describe a potential danger to a company’s assets, data, or network functionality?
vulnerability
threat
asset
exploit
What is a feature of an IPS?
It is deployed in offline mode.
It has no impact on latency.
It is primarily focused on identifying possible incidents.
It can stop malicious packets.
What is the term used to describe the same pre-shared key or secret key, known by both the sender and receiver to encrypt and decrypt data?
data integrity
exploit
risk
symmetric encryption algorithm
Which impact does adding a Layer 2 switch have on a network?
an increase in the number of dropped frames
an increase in the number of network collisions
an increase in the size of the broadcast domain
an increase in the size of the collision domain
What information is added to the switch table from incoming frames?
source MAC address and incoming port number
destination MAC address and incoming port number
source IP address and incoming port number
destination IP address and incoming port number
Which protocol adds security to remote connections?
FTP
HTTP
NetBEUI
POP
SSH
What is the first action in the boot sequence when a switch is powered on?
load the default Cisco IOS software
load boot loader software
low-level CPU initialization
load a power-on self-test program
What is a characteristic of an IPv4 loopback interface on a Cisco IOS router?
The no shutdown command is required to place this interface in an UP state.
It is a logical interface internal to the router.
Only one loopback interface can be enabled on a router.
It is assigned to a physical port and can be connected to other devices.
On a switch that is configured with multiple VLANs, which command will remove only VLAN 100 from the switch?
Switch# delete flash:vlan.dat
Switch(config-if)# no switchport access vlan 100
Switch(config-if)# no switchport trunk allowed vlan 100
Switch(config)# no vlan 100
Refer to the exhibit. A network administrator is reviewing port and VLAN assignments on switch S2 and notices that interfaces Gi0/1 and Gi0/2 are not included in the output. Why would the interfaces be missing from the output?
There is a native VLAN mismatch between the switches.
There is no media connected to the interfaces.
They are administratively shut down.
They are configured as trunk interfaces.
Refer to the exhibit. In what switch mode should port G0/1 be assigned if Cisco best practices are being used?
access
trunk
native
auto
What is a characteristic of a routed port on a Layer 3 switch?
It supports trunking.
It is not assigned to a VLAN.
It is commonly used as a WAN link.
It cannot have an IP address assigned to it.
An IT security specialist enables port security on a switch port of a Cisco switch. What is the default violation mode in use until the switch port is configured to use a different violation mode?
shutdown
disabled
restrict
protect
Which feature on a Cisco router permits the forwarding of traffic for which there is no specific route?
next-hop
gateway of last resort
route source
outgoing interface
What is an advantage of using dynamic routing protocols instead of static routing?
easier to implement
more secure in controlling routing updates
fewer router resource overhead requirements
ability to actively search for new routes if the current path becomes unavailable
Which value in a routing table represents trustworthiness and is used by the router to determine which route to install into the routing table when there are multiple routes toward the same destination?
administrative distance
metric
outgoing interface
routing protocol
Refer to the graphic. Which command would be used on router A to configure a static route to direct traffic from LAN A that is destined for LAN C?
A(config)# ip route 192.168.3.0 255.255.255.0 192.168.3.1
A(config)# ip route 192.168.3.2 255.255.255.0 192.168.4.0
A(config)# ip route 192.168.4.0 255.255.255.0 192.168.5.2
A(config)# ip route 192.168.5.0 255.255.255.0 192.168.3.2
A(config)# ip route 192.168.4.0 255.255.255.0 192.168.3.2
Refer to the exhibit. What routing solution will allow both PC A and PC B to access the Internet with the minimum amount of router CPU and network bandwidth utilization?
Configure a dynamic routing protocol between R1 and Edge and advertise all routes.
Configure a static route from R1 to Edge and a dynamic route from Edge to R1.
Configure a static default route from R1 to Edge, a default route from Edge to the Internet, and a static route from Edge to R1.
Configure a dynamic route from R1 to Edge and a static route from Edge to R1.
A router has used the OSPF protocol to learn a route to the 172.16.32.0/19 network. Which command will implement a backup floating static route to this network?
ip route 172.16.0.0 255.255.224.0 S0/0/0 100
ip route 172.16.0.0 255.255.240.0 S0/0/0 200
ip route 172.16.32.0 255.255.224.0 S0/0/0 200
ip route 172.16.32.0 255.255.0.0 S0/0/0 100
Refer to the exhibit. What will the router do with a packet that has a destination IP address of 192.168.12.227?
Drop the packet.
Send the packet out the GigabitEthernet0/0 interface.
Send the packet out the Serial0/0/0 interface.
Send the packet out the GigabitEthernet0/1 interface.
Under which two occasions should an administrator disable DTP while managing a local area network? (Choose two.)
when connecting a Cisco switch to a non-Cisco switch
when a neighbor switch uses a DTP mode of dynamic auto
when a neighbor switch uses a DTP mode of dynamic desirable
on links that should not be trunking
on links that should dynamically attempt trunking
What are two functions of dynamic routing protocols? (Choose two.)
to maintain routing tables
to assure low router overhead
to avoid exposing network information
to discover the network
to choose the path that is specified by the administrator
Which three advantages are provided by static routing? (Choose three.)
Static routing does not advertise over the network, thus providing better security.
Configuration of static routes is error-free.
Static routes scale well as the network grows.
Static routing typically uses less network bandwidth and fewer CPU operations than dynamic routing does.
The path a static route uses to send data is known.
What is a function of OSPF hello packets?
to send specifically requested link-state records
to discover neighbors and build adjacencies between them
to ensure database synchronization between routers
to request specific link-state records from neighbor routers
What is a disadvantage of NAT?
There is no end-to-end addressing.
The router does not need to alter the checksum of the IPv4 packets.
The internal hosts have to use a single public IPv4 address for external communication.
The costs of readdressing hosts can be significant for a publicly addressed network.
Refer to the exhibit. If no router ID was manually configured, what would router Branch1 use as its OSPF router ID?
10.0.0.1
10.1.0.1
192.168.1.100
209.165.201.1
What is the purpose of the overload keyword in the ip nat inside source list 1 pool NAT_POOL overload command?
It allows many inside hosts to share one or a few inside global addresses.
It allows a list of internal hosts to communicate with a specific group of external hosts.
It allows external hosts to initiate sessions with internal hosts.
It allows a pool of inside global addresses to be used by internal hosts.
Which step in the link-state routing process is described by a router inserting best paths into the routing table?
declaring a neighbor to be inaccessible
executing the SPF algorithm
load balancing equal-cost paths
choosing the best route
Refer to the exhibit. Which command would be used in a standard ACL to allow only devices on the network attached to R2 G0/0 interface to access the networks attached to R1?
access-list 1 permit 192.168.10.128 0.0.0.63
access-list 1 permit 192.168.10.0 0.0.0.255
access-list 1 permit 192.168.10.96 0.0.0.31
access-list 1 permit 192.168.10.0 0.0.0.63
Refer to the exhibit. An administrator has configured a standard ACL on R1 and applied it to interface serial 0/0/0 in the outbound direction. What happens to traffic leaving interface serial 0/0/0 that does not match the configured ACL statements?
The traffic is dropped.
The source IP address is checked and, if a match is not found, traffic is routed out interface serial 0/0/1.
The resulting action is determined by the destination IP address.
The resulting action is determined by the destination IP address and port number.
A technician is tasked with using ACLs to secure a router. When would the technician use the ip access-group 101 in configuration option or command?
to secure administrative access to the router
to apply an extended ACL to an interface
to display all restricted traffic
to secure management traffic into the router
Which IPsec security function provides assurance that the data received via a VPN has not been modified in transit?
integrity
authentication
confidentiality
secure key exchange
What is one indication that a Windows computer did not receive an IPv4 address from a DHCP server?
The computer cannot ping 127.0.0.1.
The computer receives an IP address that starts with 169.254.
Windows displays a DHCP timeout message.
The computer cannot ping other devices on the same network with IP addresses in the 169.254.0.0/16 range.
A network manager wants to view the amount of available and free memory, the type of file system, and its permissions. What command should the administrator use on a Cisco router?
ntp server 10.10.14.9
lldp enable
clock timezone PST -7
show file systems
A network technician issues the following commands when configuring a router:
R1(config)# router ospf 11
R1(config-router)# network 10.10.10.0 0.0.0.255 area 0
What does the number 11 represent?
the OSPF process ID on R1
the cost of the link to R1
the autonomous system number to which R1 belongs
the administrative distance that is manually assigned to R1
the area number where R1 is located
Which message does an IPv4 host use to reply when it receives a DHCPOFFER message from a DHCP server?
DHCPOFFER
DHCPDISCOVER
DHCPREQUEST
DHCPACK
Refer to the exhibit. A network administrator is verifying the configuration of inter-VLAN routing. Users complain that PC2 cannot communicate with PC1. Based on the output, what is the possible cause of the problem?
Gi0/0 is not configured as a trunk port.
The command interface GigabitEthernet0/0.5 was entered incorrectly.
There is no IP address configured on the interface Gi0/0.
The no shutdown command is not entered on subinterfaces.
The encapsulation dot1Q 5 command contains the wrong VLAN.
What is the function of STP in a scalable network?
It decreases the size of the failure domain to contain the impact of failures.
It protects the edge of the enterprise network from malicious activity.
It combines multiple switch trunk links to act as one logical link for increased bandwidth.
It disables redundant paths to eliminate Layer 2 loops.
If no bridge priority is configured in PVST, which criteria is considered when electing the root bridge?
lowest MAC address
lowest IP address
highest IP address
highest MAC address
Which statement is true regarding the use of PAgP to create EtherChannels?
It requires full duplex.
It increases the number of ports that are participating in spanning tree.
It requires more physical links than LACP does.
It mandates that an even number of ports (2, 4, 6, etc.) be used for aggregation.
It is Cisco proprietary.
Which statement describes an EtherChannel implementation?
EtherChannel operates only at Layer 2.
PAgP cannot be used in conjunction with EtherChannel.
A trunked port can be part of an EtherChannel bundle.
EtherChannel can support up to a maximum of ten separate links.
Refer to the exhibit. An administrator wants to form an EtherChannel between the two switches by using the Port Aggregation Protocol. If switch S1 is configured to be in auto mode, which mode should be configured on S2 to form the EtherChannel?
auto
on
off
desirable
Which statement describes HSRP?
It is used within a group of routers for selecting an active device and a standby device to provide gateway services to a LAN.
It uses ICMP to allow IPv4 hosts to locate routers that provide IPv4 connectivity to remote IP networks.
If the virtual router master fails, one router is elected as the virtual router master with the other routers acting as backups.
It is an open standard protocol.
Which access control component, implementation, or protocol is based upon usernames and passwords?
802.1X
accounting
authentication
authorization
A company uses a cloud-based payroll system. Which cloud computing technology is this company using?
browser as a service (BaaS)
infrastructure as a service (IaaS)
software as a service (SaaS)
wireless as a service (WaaS)
Which is a characteristic of a Type 1 hypervisor?
installed directly on a server
best suited for consumers and not for an enterprise environment
does not require management console software
installed on an existing operating system
What is a function of the data plane of a network device?
sending information to the CPU for processing
building the routing table
resolving MAC addresses
forwarding traffic flows
Refer to the exhibit. A network administrator wants to permit only host 192.168.1.1 /24 to be able to access the server 192.168.2.1 /24. Which three commands will achieve this using best ACL placement practices? (Choose three.)
R2(config-if)# ip access-group 101 in
R2(config)# interface fastethernet 0/0
R2(config)# access-list 101 permit ip host 192.168.1.1 host 192.168.2.1
R2(config-if)# ip access-group 101 out
R2(config)# access-list 101 permit ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255.0
What two benefits are gained when an organization adopts cloud computing and virtualization? (Choose two.)
provides a “pay-as-you-go” model, allowing organizations to treat computing and storage expenses as a utility
enables rapid responses to increasing data volume requirements
distributed processing of large data sets in the size of terabytes
elimination of vulnerabilities to cyber attacks
increases the dependance on onsite IT resources
