Font size
WorksheetsCCNA 2 final exam part 1
Total questions: 55
Worksheet time: 29mins
Refer to the exhibit. What will router R1 do with a packet that has a destination IPv6 address of 2001:db8:cafe:5::1?
forward the packet out Serial0/0/0
forward the packet out GigabitEthernet0/1
drop the packet
forward the packet out GigabitEthernet0/0
What is a method to launch a VLAN hopping attack?
introducing a rogue switch and enabling trunking
sending spoofed native VLAN information
sending spoofed IP addresses from the attacking host
flooding the switch with MAC addresses
Refer to the exhibit. How is a frame sent from PCA forwarded to PCC if the MAC address table on switch SW1 is empty?
SW1 forwards the frame directly to SW2. SW2 floods the frame to all ports connected to SW2, excluding the port through which the frame entered the switch.
SW1 floods the frame on all ports on the switch, excluding the interconnected port to switch SW2 and the port through which the frame entered the switch.
SW1 floods the frame on all ports on SW1, excluding the port through which the frame entered the switch.
SW1 drops the frame because it does not know the destination MAC address.
Refer to the exhibit. A network administrator has connected two switches together using EtherChannel technology. If STP is running, what will be the end result?
STP will block one of the redundant links.
The switches will load balance and utilize both EtherChannels to forward packets.
The resulting loop will create a broadcast storm.
Both port channels will shutdown.
Which wireless encryption method is the most secure?
WPA2 with AES
WPA2 with TKIP
WEP
WPA
Refer to the exhibit. Host A has sent a packet to host B. What will be the source MAC and IP addresses on the packet when it arrives at host B?
Source MAC: 00E0.FE91.7799Source IP: 10.1.1.10
Source MAC: 00E0.FE10.17A3
Source IP: 10.1.1.10
Source MAC: 00E0.FE10.17A3
Source IP: 192.168.1.1
Source MAC: 00E0.FE91.7799
Source IP: 10.1.1.1
Source MAC: 00E0.FE91.7799
Source IP: 192.168.1.1
Compared with dynamic routes, what are two advantages of using static routes on a router? (Choose two.)
They improve network security.
They use fewer router resources.
They take less time to converge when the network topology changes.
They improve the efficiency of discovering neighboring networks.
What is the IPv6 prefix that is used for link-local addresses?
FF01::/8
FC00::/7
2001::/3
FE80::/10
Successful inter-VLAN routing has been operating on a network with multiple VLANs across multiple switches for some time. When an inter-switch trunk link fails and Spanning Tree Protocol brings up a backup trunk link, it is reported that hosts on two VLANs can access some, but not all the network resources that could be accessed previously. Hosts on all other VLANS do not have this problem. What is the most likely cause of this problem?
The protected edge port function on the backup trunk interfaces has been disabled.
The allowed VLANs on the backup link were not configured correctly.
Dynamic Trunking Protocol on the link has failed.
Inter-VLAN routing also failed when the trunk link failed.
Which command will start the process to bundle two physical interfaces to create an EtherChannel group via LACP?
interface port-channel 2
channel-group 1 mode desirable
interface range GigabitEthernet 0/4 – 5
channel-group 2 mode auto
A junior technician was adding a route to a LAN router. A traceroute to a device on the new network revealed a wrong path and unreachable status. What should be done or checked?
Verify that there is not a default route in any of the edge router routing tables.
Check the configuration of the exit interface on the new static route.
Create a floating static route to that network.
Check the configuration on the floating static route and adjust the AD.
. A static route has been configured on a router. However, the destination network no longer exists. What should an administrator do to remove the static route from the routing table?
Remove the route using the no ip route command.
The static route will go away on its own.
Nothing, The static route will go away on its own.
Change the administrative distance for that route.
Refer to the exhibit. R1 has been configured as shown. However, PC1 is not able to receive an IPv4 address. What is the problem?
The ip helper-address command was applied on the wrong interface.
The ip address dhcp command was not issued on the interface Gi0/1.
A DHCP server must be installed on the same LAN as the host that is receiving the IP address.
R1 is not configured as a DHCPv4 server.
What is the common term given to SNMP log messages that are generated by network devices and sent to the SNMP server?
traps
warnings
auditing
acknowledgments
A network administrator is configuring a WLAN. Why would the administrator change the default DHCP IPv4 addresses on an AP?
to reduce outsiders intercepting data or accessing the wireless network by using a well-known address range
to reduce the risk of interference by external devices such as microwave ovens
to monitor the operation of the wireless network
to restrict access to the WLAN by authorized, authenticated users only
Which network attack is mitigated by enabling BPDU guard?
rogue switches on a network
rogue DHCP servers on a network
MAC address spoofing
XCAM table overflow attacks
Refer to the exhibit. What is the metric to forward a data packet with the IPv6 destination address 2001:DB8:ACAD:E:240:BFF:FED4:9DD2?
2682112
3193856
2681856
128
Refer to the exhibit. Which statement shown in the output allows router R1 to respond to stateless DHCPv6 requests?
prefix-delegation 2001:DB8:8::/48 00030001000E84244E70
ipv6 nd other-config-flag
ipv6 dhcp server LAN1
ipv6 unicast-routing
dns-server 2001:DB8:8::8
A company has just switched to a new ISP. The ISP has completed and checked the connection from its site to the company. However, employees at the company are not able to access the internet. What should be done or checked?
Verify that the static route to the server is present in the routing table.
Ensure that the old default route has been removed from the company edge routers.
Check the configuration on the floating static route and adjust the AD.
:d
Refer to the exhibit. A network administrator is reviewing the configuration of switch S1. Which protocol has been implemented to group multiple physical ports into one logical link?
PAgP
STP
LACP
DTP
Refer to the exhibit. The network administrator configures both switches as displayed. However, host C is unable to ping host D and host E is unable to ping host F. What action should the administrator take to enable this communication?
Configure either trunk port in the dynamic desirable mode.
Remove the native VLAN from the trunk.
Include a router in the topology.
Associate hosts A and B with VLAN 10 instead of VLAN 1.
A company security policy requires that all MAC addressing be dynamically learned and added to both the MAC address table and the running configuration on each switch. Which port security configuration will accomplish this?
auto secure MAC addresses
dynamic secure MAC addresses
static secure MAC addresses
sticky secure MAC addresses
Refer to the exhibit. Which trunk link will not forward any traffic after the root bridge election process is complete?
Trunk1
Trunk3
Trunk4
Trunk2
Which mitigation technique would prevent rogue servers from providing false IP configuration parameters to clients?
implementing port security
implementing port-security on edge ports
turning on DHCP snooping
disabling CDP on edge ports
A network administrator configures the port security feature on a switch. The security policy specifies that each access port should allow up to two MAC addresses. When the maximum number of MAC addresses is reached, a frame with the unknown source MAC address is dropped and a notification is sent to the syslog server. Which security violation mode should be configured for each access port?
restrict
warning
protect
shutdown
Which three pairs of trunking modes will establish a functional trunk link between two Cisco switches? (Choose three.)
dynamic auto - dynamic auto access - trunk
dynamic desirable - trunk
desirable - dynamic desirable
dynamic desirable - dynamic auto
A network administrator of a small advertising company is configuring WLAN security by using the WPA2 PSK method. Which credential do office users need in order to connect their laptops to the WLAN?
the company username and password through
a user passphrase
a username and password configured on the AP
a key that matches the key on the AP
Active Directory service
Refer to the exhibit. Which static route would an IT technician enter to create a backup route to the 172.16.1.0 network that is only used if the primary RIP learned route fails?
ip route 172.16.1.0 255.255.255.0 s0/0/0 121
ip route 172.16.1.0 255.255.255.0 s0/0/0 91
ip route 172.16.1.0 255.255.255.0 s0/0/0 111
ip route 172.16.1.0 255.255.255.0 s0/0/0
Which DHCPv4 message will a client send to accept an IPv4 address that is offered by a DHCP server?
broadcast DHCPACK
unicast DHCPREQUEST
unicast DHCPACK
broadcast DHCPREQUEST
After a host has generated an IPv6 address by using the DHCPv6 or SLAAC process, how does the host verify that the address is unique and therefore usable?
The host sends an ICMPv6 neighbor solicitation message to the DHCP or SLAAC-learned address and if no neighbor advertisement is returned, the address is considered unique.
The host sends an ARP broadcast to the local link and if no
The host checks the local neighbor cache for the learned address and if the address is not cached, it it considered unique.
The host sends an ICMPv6 echo request message to the DHCPv6 or SLAAC-learned address and if no reply is returned, the address is considered unique.
What network attack seeks to create a DoS for clients by preventing them from being able to obtain a DHCP lease?
IP address spoofing
DHCP spoofing
DHCP starvation
CAM table attack
What protocol should be disabled to help mitigate VLAN attacks?
DTP
CDP
ARP
STP
What are two reasons a network administrator would segment a network with a Layer 2 switch? (Choose two.)
to create fewer collision domains
to enhance user bandwidth
to create more broadcast domains
to eliminate virtual circuits
to isolate traffic between segments
In which situation would a technician use the show interfaces switch command?
to determine the MAC address of a directly attached network device on a particular interface
when packets are being dropped from a particular directly attached host
bla
bla
What is a drawback of the local database method of securing device access that can be solved by using AAA with centralized servers?
User accounts must be configured locally on each device, which is an unscalable authentication solution.
It is very susceptible to brute-force attacks because there is no username.
The passwords can only be stored in plain text in the running configuration.
There is no ability to provide accountability.
What method of wireless authentication is dependent on a RADIUS authentication server?
WEP
WPA2 Enterprise
WPA2 Personal
WPA Personal
Users are complaining of sporadic access to the internet every afternoon. What should be done or checked?
Create static routes to all internal networks and a default route to the internet.
Verify that there is not a default route in any of the edge router routing tables.
Create a floating static route to that network.
Check the statistics on the default route for oversaturation.
A network administrator is configuring a WLAN. Why would the administrator use a WLAN controller?
to centralize management of multiple WLANs
to provide privacy and integrity to wireless traffic by using encryption
to facilitate group configuration and management of multiple WLANs through a WLC
to provide prioritized service for time-sensitive applications
Refer to the exhibit. A network administrator is configuring the router R1 for IPv6 address assignment. Based on the partial configuration, which IPv6 global unicast address assignment scheme does the administrator intend to implement?
stateful
stateless
manual configuration
SLAAC
A new switch is to be added to an existing network in a remote office. The network administrator does not want the technicians in the remote office to be able to add new VLANs to the switch, but the switch should receive VLAN updates from the VTP domain. Which two steps must be performed to configure VTP on the new switch to meet these conditions? (Choose two.)
Configure the new switch as a VTP client.
Configure the existing VTP domain name on the new switch.
Configure all ports of both switches to access mode.
Configure all ports of both switches to access mode.
Refer to the exhibit. Consider that the main power has just been restored. PC3 issues a broadcast IPv4 DHCP request. To which port will SW1 forward this request?
to Fa0/1, Fa0/2, and Fa0/3 only
to Fa0/1, Fa0/2, Fa0/3, and Fa0/4
to Fa0/1, Fa0/2, and Fa0/4 only
to Fa0/1 only
What are two switch characteristics that could help alleviate network congestion? (Choose two.)
fast internal switching
large frame buffers
store-and-forward switching
low port density
Branch users were able to access a site in the morning but have had no connectivity with the site since lunch time. What should be done or checked?
Verify that the static route to the server is present in the routing table.
Use the “show ip interface brief” command to see if an interface is down.
Check the configuration on the floating static route and adjust the AD.
Create a floating static route to that network.
A network administrator is configuring a WLAN. Why would the administrator use multiple lightweight APs?
to centralize management of multiple WLANs
to provide prioritized service for time-sensitive applications
to facilitate group configuration and management of multiple WLANs through a WLC
lazy
A network administrator is configuring a WLAN. Why would the administrator disable the broadcast feature for the SSID?
to eliminate outsiders scanning for available SSIDs in the area
to centralize management of multiple WLANs
WLANs through a WLC
to provide prioritized service for time-sensitive applications
to facilitate group configuration and management of multiple WLANs through a WLC
What action takes place when a frame entering a switch has a unicast destination MAC address that is not in the MAC address table?
he switch updates the refresh timer for the entry.
The switch replaces the old entry and uses the more current port.
The switch resets the refresh timer on all MAC address table entries.
The switch will forward the frame out all ports except the incoming port.
Users on a LAN are unable to get to a company web server but are able to get elsewhere. What should be done or checked?
Ensure that the old default route has been removed from the company edge routers.
Check the configuration on the floating static route and adjust the AD.
Verify that the static route to the server is present in the routing table.
Create a floating static route to that network.
What IPv6 prefix is designed for link-local communication?
2001::/3
ff00::/8
fc::/07
fe80::/10
What address and prefix length is used when configuring an IPv6 default static route?
::/0
FF02::1/8
0.0.0.0/0
::1/128
Which term describes the role of a Cisco switch in the 802.1X port-based access control?
agent
supplicant
authenticator
authentication server
What protocol or technology uses a standby router to assume packet-forwarding responsibility if the active router fails?
EtherChannel
DTP
HSRP
VTP
What action takes place when the source MAC address of a frame entering a switch is in the MAC address table?
The switch updates the refresh timer for the entry.
The switch adds a MAC address table entry for the destination MAC address and the egress port.
The switch replaces the old entry and uses the more current port.
The switch forwards the frame out of the specified port.
Which mitigation technique would prevent rogue servers from providing false IPv6 configuration parameters to clients?
enabling DHCPv6 Guard
enabling RA Guard
implementing port
security on edge ports
disabling CDP on edge ports
While attending a conference, participants are using laptops for network connectivity. When a guest speaker attempts to connect to the network, the laptop fails to display any available wireless networks. The access point must be operating in which mode?
mixed
passive
active
open
On a Cisco 3504 WLC Summary page (Advanced > Summary), which tab allows a network administrator to configure a particular WLAN with a WPA2 policy?
SECURITY
WIRELESS
WLANs
MANAGEMENT
