Wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

Module 7-9

Total questions: 75

Worksheet time: 39mins

Name
Class
Date
1.

What is a recommended best practice when dealing with the native VLAN?

a)

Use port security.

b)

Turn off DTP.

c)

Assign it to an unused VLAN.

d)

Assign the same VLAN number as the management VLAN.

2.

On what switch ports should PortFast be enabled to enhance STP stability?

a)

only ports that are elected as designated ports

b)

all trunk ports that are not root ports

c)

all end-user ports

d)

only ports that attach to a neighboring switch

3.

Which command would be best to use on an unused switch port if a company adheres to the best practices as recommended by Cisco?

a)

ip dhcp snooping

b)

mac-address

c)

switchport port-security violation shutdown

d)

shutdown

e)

switchport port-security mac-address sticky

4.

Which two features on a Cisco Catalyst switch can be used to mitigate DHCP starvation and DHCP spoofing attacks? (Choose two.)

a)

DHCP server failover

b)

extended ACL

c)

port security

d)

DHCP snooping

e)

strong password on DHCP servers

5.

What is the best way to prevent a VLAN hopping attack?

a)

Use ISL encapsulation on all trunk links.

b)

Disable STP on all nontrunk ports.

c)

Use VLAN 1 as the native VLAN on trunk ports.

d)

Disable trunk negotiation for trunk ports and statically set nontrunk ports as access ports.

6.

Which procedure is recommended to mitigate the chances of ARP spoofing?

a)

Enable port security globally.

b)

Enable DHCP snooping on selected VLANs.

c)

Enable IP Source Guard on trusted ports.

d)

Enable DAI on the management VLAN.

7.

What are two types of switch ports that are used on Cisco switches as part of the defense against DHCP spoofing attacks? (Choose two.)

a)

trusted DHCP port

b)

untrusted port

c)

established DHCP port

d)

unauthorized port

e)

unknown port

8.

Which two commands can be used to enable PortFast on a switch? (Choose two.)

a)

S1(config-if)# enable spanning-tree portfast

b)

S1(config-if)# spanning-tree portfast

c)

S1(config)# enable spanning-tree portfast default

d)

S1(config)# spanning-tree portfast default

e)

S1(config-line)# spanning-tree portfast

9.

An administrator who is troubleshooting connectivity issues on a switch notices that a switch port configured for port security is in the err-disabled state. After verifying the cause of the violation, how should the administrator re-enable the port without disrupting network operation?

a)

Reboot the switch.

b)

Issue the shutdown command followed by the no shutdown command on the interface.

c)

Issue the no switchport port-security command, then re-enable port security.

d)

Issue the no switchport port-security violation shutdown command on the interface.

10.

A network administrator is configuring DHCP snooping on a switch. Which configuration command should be used first?

a)

ip dhcp snooping

b)

ip dhcp snooping limit rate

c)

ip dhcp snooping vlan

d)

ip dhcp snooping trust

11.

A network administrator is configuring DAI on a switch with the command ip arp inspection validate dst-mac. What is the purpose of this configuration command?

a)

to check the destination MAC address in the Ethernet header against the MAC address table

b)

to check the destination MAC address in the Ethernet header against the source MAC address in the ARP body

c)

to check the destination MAC address in the Ethernet header against the user-configured ARP ACLs

d)

to check the destination MAC address in the Ethernet header against the target MAC address in the ARP body

12.

Which security feature should be enabled in order to prevent an attacker from overflowing the MAC address table of a switch?

a)

storm control

b)

port security

c)

BPDU filter

d)

root guard

13.

What Layer 2 attack is mitigated by disabling Dynamic Trunking Protocol?

a)

VLAN hopping

b)

DHCP spoofing

c)

ARP poisoning

d)

ARP spoofing

14.

A network administrator is configuring DAI on a switch. Which command should be used on the uplink interface that connects to a router?

a)

ip arp inspection trust

b)

ip dhcp snooping

c)

ip arp inspection vlan

d)

spanning-tree portfast

15.

Where are dynamically learned MAC addresses stored when sticky learning is enabled with the switchport port-security mac-address sticky command?

a)

flash

b)

NVRAM

c)

RAM

d)

ROM

16.

Which method would mitigate a MAC address flooding attack?

a)

Configuring port security

b)

Increasing the size of the CAM table

c)

Increasing the speed of switch ports

d)

Using ACLs to filter broadcast traffic on the switch

17.

Which action will bring an error-disabled switch port back to an operational state?

a)

Clear the MAC address table on the switch.

b)

Issue the shutdown and no shutdown interface config commands.

c)

Issue the switchport mode access interface config command.

d)

Remove and reconfigure port security on the interface.

18.

Which two statements are true regarding switch port security? (Choose two.)

a)

After entering the sticky parameter, only MAC addresses subsequently learned are converted to secure MAC addresses.

b)

Dynamically learned secure MAC addresses are lost when the switch reboots.

c)

If fewer than the maximum number of MAC addresses for a port are configured statically, dynamically learned addresses are added to CAM until the maximum number is reached.

d)

The three configurable violation modes all log violations via SNMP.

e)

The three configurable violation modes all require user intervention to reenable ports.

19.

Port security has been enabled on access ports to allow a maximum of two MAC addresses. Which port security violation would drop the frame and send a notification to the syslog server if the maximum number of MAC addresses is exceeded?

a)

Protect

b)

Restrict

c)

Shutdown

d)

Warning

20.

Which feature should be configured on PortFast enabled switches to prevent rogue switches from being added to a network?

a)

BPDU guard

b)

DAI

c)

DHCP snooping

d)

Port security

21.

Which port security feature enables switches to automatically learn and retain MAC addresses for each port?

a)

Auto secure MAC addresses

b)

Dynamic secure MAC addresses

c)

Static secure MAC addresses

d)

Sticky secure MAC addresses

22.

Assume that BPDU Guard has been enabled globally on all access ports. However, one port must not be configured with the feature. Which command would explicitly disable BPDU Guard on that switch port?

a)

S1(config)# no spanning-tree bpduguard default

b)

S1(config)# no spanning-tree portfast bpduguard default

c)

S1(config-if)# no enable spanning-tree bpduguard

d)

S1(config-if)# no spanning-tree bpduguard enable

e)

S1(config-if)# no spanning-tree portfast bpduguard

23.

Which DAI command checks the source MAC address in the Ethernet header against the target MAC address in the ARP body?

a)

ip arp inspection validate dst-mac

b)

ip arp inspection validate dst-mac ip

c)

ip arp inspection validate ip

d)

ip arp inspection validate src-mac

24.

What is the result of entering the ip dhcp snooping limit rate 4 interface configuration command?

a)

The port can receive up to 4 DHCP discovery messages per second.

b)

The port can receive up to 4 DHCP offer messages per second.

c)

The port can send up to 4 DHCP messages per second.

d)

The port can send up to 4 DHCP offer discovery messages per second.

25.

Port security has been enabled on a switch port. What is the default violation mode in use by default?

a)

Restrict

b)

Disabled

c)

Protect

d)

Shutdown

26.

What techniques should be done to mitigate VLAN attacks? (Choose three.)

a)

Enable trunking manually.

b)

Enable Source Guard.

c)

Set the native VLAN to an unused VLAN.

d)

Enable BPDU guard.

e)

Disable DTP.

27.

Port security has been enabled on interface Fa0/1 and the show port-security interface fa0/1 command has been entered. What does the Port Status “Secure-up” message indicate?

a)

The Fa0/1 port is currently error-disabled.

b)

The Fa0/1 port violation mode is “protect”.

c)

There are no hosts connected to the secured Fa0/1 port.

d)

There is a host connected to the secured Fa0/1 port.

28.

1. In the context of mobile devices, what does the term tethering involve?

a)

connecting a mobile device to a USB port on a computer in order to charge the mobile device

b)

connecting a mobile device to another mobile device or computer to share a network connection

c)

connecting a mobile device to a 4G cellular network

d)

connecting a mobile device to a hands-free headset

29.

2. Which feature of 802.11n wireless access points allows them to transmit data at faster speeds than previous versions of 802.11 Wi-Fi standards did?

a)

SPS

b)

WPS

c)

MITM

d)

MIMO

30.

3. Which method of wireless authentication is currently considered to be the strongest?

a)

open

b)

WPA

c)

WPA2

d)

WEP

e)

shared key

31.

4. Which parameter is commonly used to identify a wireless network name when a home wireless AP is being configured?

a)

SSID

b)

BESS

c)

ad hoc

d)

ESS

32.

5. Which characteristic describes a wireless client operating in active mode?

a)

ability to dynamically change channels

b)

must be configured for security before attaching to an AP

c)

must know the SSID to connect to an AP

d)

broadcasts probes that request the SSID

33.

6. Which IEEE standard operates at wireless frequencies in both the 5 GHz and 2.4 GHz ranges?

a)

802.11a

b)

802.11g

c)

802.11b

d)

802.11n

34.

7. Which statement describes an autonomous access point?

a)

It is a standalone access point.

b)

It is managed by a WLAN controller.

c)

It is server-dependent.

d)

It is used for networks that require a large number of access points.

35.

8. Which two roles are typically performed by a wireless router that is used in a home or small business? (Choose two.)

a)

Ethernet switch

b)

RADIUS authentication server

c)

repeater

d)

WLAN controller

e)

access point

36.

9. Which protocol and port numbers are used by both IPv4 and IPv6 CAPWAP tunnels? (Choose two.)

a)

TCP

b)

ICMP

c)

UDP

d)

17 and 163

e)

5246 and 5247

37.

10. If three 802.11b access points need to be deployed in close proximity, which three frequency channels should be used? (Choose three.)

a)

8

b)

1

c)

3

d)

11

e)

6

38.

11. Which type of telecommunication technology is used to provide Internet access to vessels at sea?

a)

satellite

b)

cellular

c)

WiMax

d)

municipal WiFi

39.

12. Which wireless network topology is being configured by a technician who is installing a keyboard, a mouse, and headphones, each of which uses Bluetooth?

a)

hotspot

b)

ad hoc mode

c)

infrastructure mode

d)

mixed mode

40.

13. Which type of wireless topology is created when two or more Basic Service Sets are interconnected by Ethernet?

a)

BSS

b)

ESS

c)

ad hoc WLAN

d)

IBISS

e)

WiFi Direct

41.

14. What Wi-Fi management frame is regularly broadcast by APs to announce their presence?

a)

association

b)

beacon

c)

probe

d)

authentication

42.

15. An AP regularly broadcasts which type of management frame?

a)

Authentication

b)

Beacon

c)

Probe request

d)

Probe response

43.

16. What type of wireless antenna is best suited for providing coverage in large open spaces, such as hallways or large conference rooms?

a)

Directional

b)

Omnidirectional

c)

Parabolic dish

d)

Yagi

44.

17. Which wireless security method requires clients to manually identify the SSID to connect to the WLAN?

a)

MAC Address Filtering

b)

IP Address Filtering

c)

SSID cloaking

d)

SSID disclosing

45.

18. What are the two methods that a wireless client can use to discover an AP? (Choose two.)

a)

Delivering a broadcast frame

b)

Initiating a three-way handshake

c)

Receiving a broadcast beacon frame probe response

d)

Sending an ARP request

e)

Transmitting a probe request

46.

What type of wireless network topology would be used in a medium to large organization?

a)

Ad hoc

b)

Hotspot

c)

Infrastructure

d)

Mixed mode

e)

Tethering

47.

20. What IEEE 802.11 wireless standards operate only in the 2.4 GHz range? (Choose two.)

a)

802.11b

b)

802.11a

c)

802.11g

d)

802.11n

e)

802.11ac

48.

21. Which IEEE wireless standard is backward compatible with older wireless protocols and supports data rates up to 1.3 Gb/s?

a)

802.11

b)

802.11a

c)

802.11ac

d)

802.11g

e)

802.11n

49.

22. In a 2.4 GHz wireless network, which three channels should be used to avoid interference from nearby wireless devices? (Choose three.)

a)

0

b)

1

c)

3

d)

6

e)

11

50.

23. Which authentication method is more secure but requires the services of a RADIUS server?

a)

WEP Enterprise

b)

WPA Personal

c)

WPA Enterprise

d)

WPA2 Personal

51.

24. Which option correctly describes when an AP openly advertises its service by periodically sending broadcast beacon frames containing the SSID, supported standards, and security settings?

a)

Active mode

b)

Mixed mode

c)

Open authentication mode

d)

Passive mode

52.

1. A user is configuring a wireless access point and wants to prevent any neighbors from discovering the network. What action does the user need to take?

a)

Configure DMZ settings.

b)

Configure a DNS server.

c)

Disable SSID broadcast.

d)

Enable WPA encryption.

53.

2. When a wireless network in a small office is being set up, which type of IP addressing is typically used on the networked devices?

a)

network

b)

public

c)

wireless

d)

private

54.

3. A user has just purchased a generic home router and would like to secure it. What should be done to help secure the wireless home router?

a)

Change the default SSID.

b)

Set a private IPv4 network for the internal network.

c)

Allow only IPv6 traffic to enter the router.

d)

Change the default administrator password.

55.

4. Which protocol could be used by a company to monitor devices such as a wireless LAN controller (WLC)?

a)

SSH

b)

NTP

c)

PAT

d)

SNMP

56.

5. When configuring a Cisco 3500 series wireless LAN controller (WLC) for a WPA2 Enterprise WLAN, what has to be created on the WLC before creating the new WLAN?

a)

a security module

b)

a new SSID

c)

a VLAN for the wireless network

d)

a security policy

57.

6. What is a DHCP scope as it relates to a WLAN configured on the WLC controller?

a)

a pool of IP addresses for WLAN clients

b)

a corporate plan for allocation of IP addresses for wireless clients

c)

security rules associated with DHCP for WLANs

d)

the distance allotted for wireless clients that can receive IP addressing information

58.

7. Why would a technician configure a passphrase for a WLAN on a wireless router?

a)

to protect someone from changing the configuration

b)

to protect the SSID from being changed

c)

to protect someone from cabling directly to the router and accessing the router

d)

to configure wireless client authentication

59.

A customer installs a wireless access point at home in the closet next to the kitchen. The customer mentions that the wireless communication performance seems degraded when the cordless phone or the microwave oven is in use. What is the possible reason for this degradation?

a)

The surge of electricity when a microwave oven is in use disrupts the operation of the access point.

b)

The cordless phone joins the WLAN and shares the available bandwidth.

c)

The wireless signal is in the same radio frequency range as the household devices are in.

d)

The access point is on the same electrical circuit as the phone base unit and microwave oven are.

e)

The access point is close to walls.

60.

9. What functionality is required on routers to provide remote workers with VoIP and videoconferencing capabilities?

a)

IPsec

b)

PPPoE

c)

QoS

d)

VPN

61.

10. A wireless router is displaying the IP address of 192.168.0.1. What could this mean?

a)

Dynamic IP address allocation has been configured on the router and is functioning correctly.

b)

The wireless router has been configured to use the frequencies on channel 1.

c)

The NAT function is not working on the wireless router.

d)

The wireless router still has the factory default IP address.

62.

11. A laptop cannot connect to a wireless access point. Which two troubleshooting steps should be taken first? (Choose two.)

a)

Ensure that the wireless SSID is chosen.

b)

Ensure that the correct network media is selected.

c)

Ensure that the NIC is configured for the proper frequency.

d)

Ensure that the laptop antenna is attached.

e)

Ensure that the wireless NIC is enabled.

63.

In setting up a small office network, the network administrator decides to assign private IP addresses dynamically to workstations and mobile devices. Which feature must be enabled on the company router in order for office devices to access the internet?

a)

UPnP

b)

NAT

c)

QoS

d)

MAC filtering

64.

13. What is a difference between autonomous APs that operate in a home environment and controller-based APs that operate in a corporate environment?

a)

Controller-based APs are known as lightweight APs and require an initial configuration to operate.

b)

Autonomous APs do not support PoE.

c)

Autonomous APs incorporate the functions of a router, switch, and AP into one device.

d)

Controller-based APs can be automatically configured and managed by a WLAN controller.

65.

14. Which WLC tab would a network administrator typically use to see a summary view of the most heavily used WLANs including the number of clients using a particular WLAN?

a)

Commands

b)

Monitor

c)

WLANs

d)

Controller

66.

15. Users on an IEEE 802.11n network are complaining of slow speeds. The network administrator checks the AP and verifies it is operating properly. What can be done to improve the wireless performance in the network?

a)

Switch to an 802.11g AP.

b)

Split the wireless traffic between the 802.11n 2.4 GHz band and the 5 GHz band.

c)

Set the AP to mixed mode.

d)

Change the authentication method on the AP.

67.

17. Which option is an easy way to improve wireless performance on an 802.11n wireless router?

a)

Connect a Wi-Fi range extender on the 2.4 GHz band to a wireless router on the 5 GHz band.

b)

Require all wireless devices to use the 802.11g standard.

c)

Use different SSID names for the 2.4 GHz and 5 GHz bands.

d)

Use the same SSID name for all wireless bands.

68.

18. Which Cisco 3504 WLC dashboard menu option provides an overview of the number of configured wireless networks, associated access points (APs), and active clients?

a)

Access Points

b)

Advanced

c)

Network Summary

d)

Rogues

69.

19. Which protocol is used to monitor a network?

a)

LWAPP

b)

RADIUS

c)

SNMP

d)

WLC

70.

20. Which service on a wireless router enables a host with an internal private IPv4 address to access an outside network using a public IPv4 address?

a)

DHCP

b)

DNS

c)

LWAPP

d)

NAT

71.

21. Which service available on some wireless routers can be used to prioritize email over web data traffic?

a)

DHCP

b)

DNS

c)

NAT

d)

QoS

72.

22. What must be done before creating a new WLAN on a Cisco 3500 series WLC?

a)

Build or have a RADIUS server available.

b)

Build or have an SNMP server available.

c)

Create a new SSID.

d)

Create a new VLAN interface.

73.

23. Which frequency band SSID name should users with time-sensitive applications connect to?

a)

The 2.4 GHz band, because it is less crowded than the 5 GHz band.

b)

The 2.4 GHz band, because it has more channels than the 5 GHz band.

c)

The 2.4 GHz band, because the channel is likely interference-free.

d)

The 5 GHz band, because it has more channels than the 2.4 GHz band.

74.

24. A Cisco 3500 series WLC is configured to access a RADIUS server. The configuration requires a shared secret password. What is the purpose for the shared secret password?

a)

It allows users to authenticate and access the WLAN.

b)

It is used by the RADIUS server to authenticate WLAN users.

c)

It is used to authenticate and encrypt user data on the WLAN.

d)

It is used to encrypt messages between the WLC and the server.

75.

25. Which type of WLAN extends wireless coverage using a few APs controlled using a smartphone app?

a)

Lightweight access point (LWAP)

b)

Wi-Fi Extender

c)

Wireless LAN Controller (WLC)

d)

Wireless Mesh Network (WMN)