Refer to the exhibit. What protocol can be configured on gateway routers R1 and R2 that will allow traffic from the internal LAN to be load balanced across the two gateways to the Internet?

Refer to the exhibit. A network engineer is troubleshooting host connectivity on a LAN that uses a first hop redundancy protocol. Which IPv4 gateway address should be configured on the host?

Refer to the exhibit. Which destination MAC address is used when frames are sent from the workstation to the default gateway?

Which FHRP implementation is a Cisco-proprietary protocol that supports IPv4 load sharing?

Which statement describes HSRP?​

Which FHRP implementation is a Cisco-proprietary protocol that suppports IPv6 load balancing?

Which FHRP implementation is a nonproprietary protocol which relies on ICMP to provide IPv4 redundancy?

Which FHRP implementation is Cisco-proprietary and permits only one router in a group to forward IPv6 packets?

Which FHRP implementation is a nonproprietary IPv4-only election protocol which has one master router per group?

Which FHRP implementation is a nonproprietary IPv4-only election protocol with limited scalability?

Which Layer 2 attack will result in legitimate users not getting valid IP addresses?

What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?

Which three Cisco products focus on endpoint security solutions? (Choose three.)

True or False?
In the 802.1X standard, the client attempting to access the network is referred to as the supplicant.

Which authentication method stores usernames and passwords in the router and is ideal for small networks?

What represents a best practice concerning discovery protocols such as CDP and LLDP on network devices?

Which protocol should be used to mitigate the vulnerability of using Telnet to remotely manage network devices?

Which statement describes the behavior of a switch when the MAC address table is full?

What device is considered a supplicant during the 802.1X authentication process?

Refer to the exhibit. Port Fa0/2 has already been configured appropriately. The IP phone and PC work properly. Which switch configuration would be most appropriate for port Fa0/2 if the network administrator has the following goals?

No one is allowed to disconnect the IP phone or the PC and connect some other wired device.
If a different device is connected, port Fa0/2 is shut down.
The switch should automatically detect the MAC address of the IP phone and the PC and add those addresses to the running configuration.

Refer to the exhibit. Port security has been configured on the Fa 0/12 interface of switch S1. What action will occur when PC1 is attached to switch S1 with the applied configuration?

Which type of VLAN-hopping attack may be prevented by designating an unused VLAN as the native VLAN?

A network administrator is configuring DAI on a switch with the command ip arp inspection validate src-mac. What is the purpose of this configuration command?

Which two commands can be used to enable BPDU guard on a switch? (Choose two.)

As part of the new security policy, all switches on the network are configured to automatically learn MAC addresses for each port. All running configurations are saved at the start and close of every business day. A severe thunderstorm causes an extended power outage several hours after the close of business. When the switches are brought back online, the dynamically learned MAC addresses are retained. Which port security configuration enabled this?

Which type of management frame may regularly be broadcast by an AP?

What are the two methods that are used by a wireless NIC to discover an AP? (Choose two.)

A technician is configuring the channel on a wireless router to either 1, 6, or 11. What is the purpose of adjusting the channel?

While attending a conference, participants are using laptops for network connectivity. When a guest speaker attempts to connect to the network, the laptop fails to display any available wireless networks. The access point must be operating in which mode?

A network administrator is required to upgrade wireless access to end users in a building. To provide data rates up to 1.3 Gb/s and still be backward compatible with older devices, which wireless standard should be implemented?

A technician is about to install and configure a wireless network at a small branch office. What is the first security measure the technician should apply immediately upon powering up the wireless router?

On a Cisco 3504 WLC dashboard, which option provides access to the full menu of features?

Which step is required before creating a new WLAN on a Cisco 3500 series WLC?

A network engineer is troubleshooting a newly deployed wireless network that is using the latest 802.11 standards. When users access high bandwidth services such as streaming video, the wireless network performance is poor. To improve performance the network engineer decides to configure a 5 Ghz frequency band SSID and train users to use that SSID for streaming media services. Why might this solution improve the wireless network performance for that type of service?

A network administrator is configuring a RADIUS server connection on a Cisco 3500 series WLC. The configuration requires a shared secret password. What is the purpose for the shared secret password?

Which three parameters would need to be changed if best practices are being implemented for a home wireless AP? (Choose three.)

Which access control component, implementation, or protocol is based upon usernames and passwords?

Which type of wireless network is based on the 802.11 standard and a 2.4-GHz or 5-GHz radio frequency?

Which two Cisco solutions help prevent DHCP starvation attacks? (Choose two.)

What are three techniques for mitigating VLAN attacks? (Choose three.)

Refer to the exhibit. What can be determined about port security from the information that is shown?

A network administrator of a college is configuring the WLAN user authentication process. Wireless users are required to enter username and password credentials that will be verified by a server. Which server would provide such service?

A technician is troubleshooting a slow WLAN that consists of 802.11b and 802.11g devices . A new 802.11n/ac dual-band router has been deployed on the network to replace the old 802.11g router. What can the technician do to address the slow wireless speed?

The company handbook states that employees cannot have microwave ovens in their offices. Instead, all employees must use the microwave ovens located in the employee cafeteria. What wireless security risk is the company trying to avoid?

What is the function provided by CAPWAP protocol in a corporate wireless network?

Open the PT Activity. Perform the tasks in the activity instructions and then answer the question.
Which event will take place if there is a port security violation on switch S1 interface Fa0/1?

Match each functional component of AAA with its description. (Not all options are used.)

What are two protocols that are used by AAA to authenticate users against a central database of usernames and password? (Choose two.)

What is the result of a DHCP starvation attack?

Which feature or configuration on a switch makes it vulnerable to VLAN double-tagging attacks?

Which component of AAA allows an administrator to track individuals who access network resources and any changes that are made to those resources?

Refer to the exhibit. PC1 and PC2 should be able to obtain IP address assignments from the DHCP server. How many ports among switches should be assigned as trusted ports as part of the DHCP snooping configuration?

An IT security specialist enables port security on a switch port of a Cisco switch. What is the default violation mode in use until the switch port is configured to use a different violation mode?

A laptop cannot connect to a wireless access point. Which two troubleshooting steps should be taken first? (Choose two.)

What is an advantage of SSID cloaking?​

What is a wireless security mode that requires a RADIUS server to authenticate wireless users?

A company has recently implemented an 802.11n wireless network. Some users are complaining that the wireless network is too slow. Which solution is the best method to enhance the performance of the wireless network?

Which protocol can be used to monitor the network?

A network administrator deploys a wireless router in a small law firm. Employee laptops join the WLAN and receive IP addresses in the 10.0.10.0/24 network. Which service is used on the wireless router to allow the employee laptops to access the internet?

Which service can be used on a wireless router to prioritize network traffic among different types of applications so that voice and video data are prioritized over email and web data?

Which access control component, implementation, or protocol is based on device roles of supplicant, authenticator, and authentication server?

Which type of wireless network is suitable for national and global communications?

Which feature on a switch makes it vulnerable to VLAN hopping attacks?

Which component of AAA is used to determine which resources a user can access and which operations the user is allowed to perform?

Refer to the exhibit. The Fa0/2 interface on switch S1 has been configured with the switchport port-security mac-address 0023.189d.6456 command and a workstation has been connected. What could be the reason that the Fa0/2 interface is shutdown?

A network administrator enters the following commands on the switch SW1.

SW1(config)# interface range fa0/5 - 10

SW1(config-if)# ip dhcp snooping limit rate 6

What is the effect after these commands are entered?

A network administrator is configuring port security on a Cisco switch. The company security policy specifies that when a violation occurs, packets with unknown source addresses should be dropped and no notification should be sent. Which violation mode should be configured on the interfaces?

A network administrator is working to improve WLAN performance on a dual-band wireless router. What is a simple way to achieve a split-the-traffic result?

Which access control component, implementation, or protocol controls what users can do on the network?

Which type of wireless network is suitable for providing wireless access to a city or district?

On a Cisco 3504 WLC Summary page ( Advanced > Summary ), which tab allows a network administrator to access and configure a WLAN for a specific security option such as WPA2?

What type of wireless antenna is best suited for providing coverage in large open spaces, such as hallways or large conference rooms?

What security benefit is gained from enabling BPDU guard on PortFast enabled interfaces?

Which access control component, implementation, or protocol logs EXEC and configuration commands configured by a user?

Which type of wireless network uses transmitters to provide coverage over an extensive geographic area?

Which access control component, implementation, or protocol controls who is permitted to access a network?

What two IEEE 802.11 wireless standards operate only in the 5 GHz range? (Choose two.)

Which type of wireless network uses low powered transmitters for a short-range network, usually 20 to 30 ft. (6 to 9 meters)?

Which wireless network topology would be used by network engineers to provide a wireless network for an entire college building?

Which type of wireless network uses transmitters to provide wireless service over a large urban region?

Which type of wireless network is suitable for use in a home or office?

Which access control component, implementation, or protocol indicates success or failure of a client-requested service with a PASS or FAIL message?

Which type of wireless network often makes use of devices mounted on buildings?

A network administrator is configuring DAI on a switch with the command ip arp inspection validate src-mac . What is the purpose of this configuration command?

Which access control component, implementation, or protocol collects and reports usage data?

Which type of wireless network uses transmitters to cover a medium-sized network, usually up to 300 feet (91.4 meters)?

Which access control component, implementation, or protocol audits what users actions are performed on the network?

Which type of wireless network commonly uses Bluetooth or ZigBee devices?

Which access control component, implementation, or protocol is implemented either locally or as a server-based solution?

A technician is troubleshooting a slow WLAN and decides to use the split-the-traffic approach. Which two parameters would have to be configured to do this? (Choose two.)

Which access control component, implementation, or protocol restricts LAN access through publicly accessible switch ports?

A network administrator is required to upgrade wireless access to end users in a building. To provide data rates up to 1.3Gb/s and still be backward compatible with older devices, which wireless standard should be implemented?

What two protocols are supported on Cisco devices for AAA communications? (Choose two.)

Which service is enabled on a Cisco router by default that can reveal significant information about the router and potentially make it more vulnerable to attack?

When security is a concern, which OSI Layer is considered to be the weakest link in a network system?​

Which Layer 2 attack will result in a switch flooding incoming frames to all ports?

Why is authentication with AAA preferred over a local database method?

In a server-based AAA implementation, which protocol will allow the router to successfully communicate with the AAA server? 

Which Cisco solution helps prevent MAC and IP address spoofing attacks?

What is the purpose of AAA accounting?

Which Layer 2 attack will result in legitimate users not getting valid IP addresses?

Which three Cisco products focus on endpoint security solutions? (Choose three.)

True or False?
In the 802.1X standard, the client attempting to access the network is referred to as the supplicant.

What is involved in an IP address spoofing attack?

What three services are provided by the AAA framework? (Choose three.)

Because of implemented security controls, a user can only access a server with FTP. Which AAA component accomplishes this?

What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?

What is a recommended best practice when dealing with the native VLAN?

On what switch ports should PortFast be enabled to enhance STP stability?

Which command would be best to use on an unused switch port if a company adheres to the best practices as recommended by Cisco?

Which two features on a Cisco Catalyst switch can be used to mitigate DHCP starvation and DHCP spoofing attacks? (Choose two.)

What is the best way to prevent a VLAN hopping attack?

Which procedure is recommended to mitigate the chances of ARP spoofing?

What are two types of switch ports that are used on Cisco switches as part of the defense against DHCP spoofing attacks? (Choose two.)

Which two commands can be used to enable PortFast on a switch? (Choose two.)

An administrator who is troubleshooting connectivity issues on a switch notices that a switch port configured for port security is in the err-disabled state. After verifying the cause of the violation, how should the administrator re-enable the port without disrupting network operation?

A network administrator is configuring DHCP snooping on a switch. Which configuration command should be used first?

A network administrator is configuring DAI on a switch with the command ip arp inspection validate dst-mac. What is the purpose of this configuration command?

Which security feature should be enabled in order to prevent an attacker from overflowing the MAC address table of a switch?

What Layer 2 attack is mitigated by disabling Dynamic Trunking Protocol?

A network administrator is configuring DAI on a switch. Which command should be used on the uplink interface that connects to a router?

Where are dynamically learned MAC addresses stored when sticky learning is enabled with the switchport port-security mac-address sticky command?

What type of device routes traffic destined to network segments beyond the source network segment for which the sending node may not have explicit routing information?

What device presents the illusion of a single router to hosts on a LAN segment but actually represents a set of routers working together?

Which FHRPs are Cisco-proprietary? (Choose two.)

What is the default HSRP priority?

What device is part of a virtual router group assigned the role of alternate default gateway?

What device that is part of a virtual router group assigned to the role of default gateway?

True or False? If a router with a higher HSRP priority joins the network, it will take over the active router roll from an existing active router which has a lower priority.

During which HSRP state does an interface begin sending periodic hello messages?

Which is a characteristic of the HSRP learn state?

What is the purpose of HSRP?

Which nonproprietary protocol provides router redundancy for a group of routers which support IPv4 LANs?

A network administrator is analyzing first-hop router redundancy protocols. What is a characteristic of VRRPv3?

What is a potential disadvantage when implementing HSRP as compared to GLBP?

A network engineer is configuring a LAN with a redundant first hop to make better use of the available network resources. Which protocol should the engineer implement?

When first hop redundancy protocols are used, which two items will be shared by a set of routers that are presenting the illusion of being a single router? (Choose two.)

In FHRP terminology, what represents a set of routers that present the illusion of a single router to hosts?

A user needs to add redundancy to the routers in a company. What are the three options the user can use? (Choose three.)

Which two protocols provide gateway redundancy at Layer 3? (Choose two.)

A network administrator is overseeing the implementation of first hop redundancy protocols. Which two protocols are Cisco proprietary? (Choose two.)

Which statement describes a characteristic of GLBP?

A network administrator is analyzing the features that are supported by different first-hop router redundancy protocols. Which statement is a feature that is associated with GLBP?

A user is configuring a wireless access point and wants to prevent any neighbors from discovering the network. What action does the user need to take?

When a wireless network in a small office is being set up, which type of IP addressing is typically used on the networked devices

A user has just purchased a generic home router and would like to secure it. What should be done to help secure the wireless home router

Which protocol could be used by a company to monitor devices such as a wireless LAN controller (WLC)

When configuring a Cisco 3500 series wireless LAN controller (WLC) for a WPA2 Enterprise WLAN, what has to be created on the WLC before creating the new WLAN

What is a DHCP scope as it relates to a WLAN configured on the WLC controller

Why would a technician configure a passphrase for a WLAN on a wireless router

A customer installs a wireless access point at home in the closet next to the kitchen. The customer mentions that the wireless communication performance seems degraded when the cordless phone or the microwave oven is in use. What is the possible reason for this degradation

What functionality is required on routers to provide remote workers with VoIP and videoconferencing capabilities

A wireless router is displaying the IP address of 192.168.0.1. What could this mean

A laptop cannot connect to a wireless access point. Which two troubleshooting steps should be taken first? (Choose two.)

In setting up a small office network, the network administrator decides to assign private IP addresses dynamically to workstations and mobile devices. Which feature must be enabled on the company router in order for office devices to access the internet?

What is a difference between autonomous APs that operate in a home environment and controller-based APs that operate in a corporate environment

Which WLC tab would a network administrator typically use to see a summary view of the most heavily used WLANs including the number of clients using a particular WLAN?

Users on an IEEE 802.11n network are complaining of slow speeds. The network administrator checks the AP and verifies it is operating properly. What can be done to improve the wireless performance in the network

Which of the following wireless networks typically uses lower powered transmitters for short ranges

If three 802.11b access points need to be deployed in close proximity, which three frequency channels should be used? (Choose three.)

Which of the following wireless networks are specified in the IEEE 802.11 standards for the 2.4 GHz and 5 GHz radio frequencies

Which of the following is an IEEE 802.15 WPAN standard that uses a device-pairing process to communicate

Which 802.11 standards exclusively use the 5 GHz radio frequency? (Choose 2)

Which standards organization is responsible for allocating radio frequencies

True or False: Laptops that do not have an integrated wireless NIC can only be attached to the network through a wired connection

Which of the following components are integrated in a wireless home router? (Choose three.)

True or False: When you need to expand the coverage of a small network, the best solution is to use a range extender

Which of the following is a standalone device, like a home router, where the entire WLAN configuration resides on the device

Which of the following antennas provide 360 degrees of coverage

Which wireless topology mode is used by two devices to connect in a peer-to-peer network

True or False: An ESS is created when two or more BSSs need to be joined to support roaming clients.

How many address fields are in the 802.11 wireless frame

What is the term for an AP that openly advertises its service periodically

What is the term for an AP that does not send a beacon, but waits for clients to send probes

What IP versions does CAPWAP support?

What UDP ports and IP protocols are used by CAPWAP for IPv4? (Choose three.)

What UDP ports and IP protocols are used by CAPWAP for IPv6? (Choose three.)

In the split MAC architecture for CAPWAP, which of the following are the responsibility of the AP? (Choose four.)

In the split MAC architecture for CAPWAP, which of the following are the responsibility of the WLC? (Choose four.)

True or False: DTLS is enabled by default on the control and data CAPWAP tunnels

Which of the following statements are true about modes of operation for a FlexConnect AP? (Choose two.)

Which of the following modulation techniques rapidly switches a signal among frequency channels?

Which of the following modulation techniques spreads a signal over a larger frequency band?

Which of the following modulation techniques is used in the new 802.11ax standard?

How many channels are available for the 2.4 GHz band in Europe

How many channels are available for the 5 GHz band

Which of the following is most likely NOT the source of a wireless DoS attack?

True or False: A rogue AP is a misconfigured AP connected to the network and a possible source of DoS attacks

What type of attack is an “evil twin AP” attack

What are the best ways to secure WLANs? (Choose two.)

Which of the following authentication methods does not use a password shared between the wireless client and the AP?

Which encryption method is used by the original 802.11 specification?

Which of the following encryption methods uses CCMP to recognize if the encrypted and non-encrypted bits have been altered?

Which of the following authentication methods has the user enter a pre-shared password? (Choose two)

In the context of mobile devices, what does the term tethering involve?

Which feature of 802.11n wireless access points allows them to transmit data at faster speeds than previous versions of 802.11 Wi-Fi standards did?

Which method of wireless authentication is currently considered to be the strongest?

Which parameter is commonly used to identify a wireless network name when a home wireless AP is being configured?

Which characteristic describes a wireless client operating in active mode?

Which IEEE standard operates at wireless frequencies in both the 5 GHz and 2.4 GHz ranges?

Which statement describes an autonomous access point?

Which two roles are typically performed by a wireless router that is used in a home or small business? (Choose two.)

Which protocol and port numbers are used by both IPv4 and IPv6 CAPWAP tunnels? (Choose two.)

Which type of telecommunication technology is used to provide Internet access to vessels at sea?

Which wireless network topology is being configured by a technician who is installing a keyboard, a mouse, and headphones, each of which uses Bluetooth?

Which type of wireless topology is created when two or more Basic Service Sets are interconnected by Ethernet?

What Wi-Fi management frame is regularly broadcast by APs to announce their presence?