CCNA4 FINALNew.doc

8/9/2019 CCNA4 FINALNew.doc

1/45

CCNA4 FINAL (New 4)

1. Identify the factors that contribute to congestion on an Ethernet LAN. (Choose

three.)

improper placement of enterprise leel serers addition of hosts to a physical segment

replacement of hubs !ith !or"group s!itches

increasing use of band!idth intensie net!or" applications

migration to full#duple$ Ethernet !ithin the LAN

%. &hich of the follo!ing are e$amples of 'CI application layer protocols* (Choose

three.) a terminal emulation protocol that supports remote console connections !ith arious

net!or" deices

a protocol created by I+, that ma"es it easier for mainframes to connect to remote

offices

a protocol responsible for transporting electronic mail on 'CI net!or"s and the

Internet

a protocol that controls the rate at !hich data is sent to another computer

a protocol that e$changes net!or" management information bet!een a net!or"

deice and a management console

-. &hich of the follo!ing eliminates s!itching loops*

hold#do!n timers

poison reerse

spanning tree protocol

time to lie

split horion protocol

/. 'he sho! cdp neighbors command is a ery useful net!or" troubleshooting tool.

0sing the output in the graphic select the statements that are true. (Choose t!o.)

C2 operates at the net!or" layer of the 34I model.

'he output of this command displays information about directly connected Cisco

deices only.

'he s!itch is attached to the 4an5ose1 6astEthernet7%1 interface.

4an5ose1 is running C2 ersion 1%.7.

4an5ose1 has t!o fully operational cdp#enabled Cisco s!itches directly connected toit.
http://p4s-ccna.blogspot.com/2008/12/ccna4-final-new-4_01.htmlhttp://p4s-ccna.blogspot.com/2008/12/ccna4-final-new-4_01.html


2/45

4an5ose% is a %877 series router running seeral routed protocols

9. A net!or" administrator can ping the 2ener router but gets a :ass!ord ;e


3/45

+oot system commands are not configured.

6lash memory is empty causing the router to bypass the configuration in N?;A,

Nederst p@ formularen

. &hich commands are used to erify the content and placement of access control

lists* (Choose three.)

sho! ip interface

sho! ip route

sho! processes

sho! running#config

sho! cdp neighbor

sho! access#lists

B. &hich of the follo!ing are re


4/45

1- collision domains

1%. ;efer to the graphic. 0sing the most efficient I addressing scheme and ?L4,

!hich address can be configured on one of the serial interfaces*

1B%.18.18.8-%>

1B%.18.18.19%>

1B%.18.18.1B%%>

1B%.18.18.11--7

1B%.18.18.1/9-7

1B%.18.18.1B--7

1-. &hat is the purpose of the 4panning 'ree rotocol (4')*

preents Layer % loopspreents routing loops on a router

creates smaller collision domains

creates smaller broadcast domains

allo!s Cisco deices to e$change routing table updates

1/. &hat is the purpose of a loopbac" address !hen using the 346 routing protocol*

actiates the 346 neighboring process

ensures a persistent router I2 for the 346 processproides a bac"door for connectiity during the conergence process

streamlines and speeds up the conergence process

19. &hich statement is true regarding states of the IEEE 7%.1d 4panning 'ree rotocol*

orts are manually configured to be in the for!arding state.

orts listen and learn before going into the for!arding state.

orts must be bloc"ed before they can be placed in the disabled state.

It ta"es 19 seconds for a port to go from bloc"ing to for!arding

18. &hich se


5/45

;outer1(config)= interface serial 77

;outer1(config#if)= loopbac" 1

;outer1(config#if)= ip address 1B%.18.1.1 %99.%99.%99.7

;outer1(config)= interface loopbac" 1

;outer1(config#if)= ip address 1B%.18.1.1 %99.%99.%99.%99

1>. &hich routing protocols are classful and do not support ?L4,* (Choose t!o.)

EID;

346

;I 1

;I % ID;

1. ;efer to the graphic. '!o s!itches are connected together through a trun" port.

4&% displays the message sho!n. &hich of the follo!ing !ill sole the duple$

mismatch*

4&1(config)= interface fastethernet 71

4&1(config#if)= duple$ full

4&1(config)= interface fastethernet 71

4&1(config#if)= full#duple$

4&%(config)= interface fastethernet 71

4&%(config#if)= duple$ full

4&%(config)= interface fastethernet 71

4&%(config#if)= full#duple$

1B. ;efer to the graphic. '!o routers hae been configured to use EID;. ac"ets are

not being for!arded bet!een the t!o routers. &hat could be the problem*

EID; does not support ?L4,.

'he routers !ere not configured to monitor neighbor adacency changes.

'he default band!idth !as used on the routers.

An incorrect I address !as configured on a router interface.


6/45

%7. According to the the proided router output !hich of the follo!ing statements is

true regarding operation*

3nly the lin"#establishment phase completed successfully.

3nly the net!or"#layer phase completed successfully.

Neither the lin"#establishment phase nor the the net!or"#layer phase completed

successfully.

+oth the lin"#establishment and net!or"#layer phase completed successfully

%1. 6rame ;elay is configured oer a point#to#point connection bet!een t!o routers.

'he output of the sho! frame#relay pc command indicates that the status of this ?C

is inactie. &hich of the follo!ing deices could be the source of the problem* (Choose

t!o.)

local routerlocal 6rame ;elay s!itch

remote router

remote 6rame ;elay s!itch

;- has the follo!ing configurationF

;-= sho! running#config

##some output te$t omitted##

interface serial77

band!idth 1%ip address 1B%.18.11.% %99.%99.%99.7

encapsulation frame#relay

frame#relay map ip 1B%.18.11.% -7 broadcast

%%. After the command ;-= debug frame#relay pac"et is e$ecuted a ping is issued

from ;- to ;1 but is unsuccessful. +ased on the output of the debug command sho!n in

the graphic and the router configuration !hat might be problem*

No cloc" rate assigned.

'here is an incorrect 2LCI number in the map statement.

An incorrect I address e$ists in the map statement.

'he encapsulation command is missing the broadcast "ey!ord

%-. &hich statements are true regarding the 6rame ;elay L,I* (Choose three.)

'he L,I proides a irtual circuit (?C) status mechanism.

'he L,I type must al!ays be manually configured.

'he aailable L,I types are NI1 2,4177 and 9E44.

'he L,I types supported by Cisco routers are CI4C3 and IE'6.


7/45

'he L,I type configured on the router must match the one used on the 6rame ;elay

s!itch.

'he L,I uses resered 2LCIs to e$change messages bet!een the 2'E and 2CE

%/. &hich statement describes the process that occurs in Net!or" Address 'ranslation

(NA') oerloading*

,ultiple priate I addresses are mapped to one public I address.

'he number of usable addresses assigned to a company is diided into smaller

manageable groups.

A pool of I addresses are mapped to one or more ,AC addresses.

'he router acts as a 2C serer and assigns multiple public I addresses for each

priate I address configured

%9. &hich t!o statements are true about the committed information rate on a 6rame

;elay lin"* (Choose t!o.)

'he sum of the CI;s for all ?Cs must be less than the port speed.

'he sum of the CI;s for all ?Cs must e


8/45

%. A net!or" administrator is ealuating authentication protocols for a lin".

&hich of the follo!ing reasons might lead to the selection of CA oer A as the

authentication protocol* (Choose three.)

establishes identities !ith a t!o#!ay handsha"e

uses a three#!ay authentication periodically during the session to reconfirm

identities

control by the remote host of the fre


9/45

1) store#and#for!ard

%) fragment free

-) fast for!ard

1) fragment free

%) fast for!ard

-) store#and#for!ard

1) fast for!ard

%) store#and#for!ard

-) fragment free

-%. &hich of the follo!ing commands !ill display a communication message on arouter before the router prompt is sho!n*

banner motd G roperty of 'LC. 0NA0'3;IHE2 04E;4 &ILL +E ;34EC0'E2 '3 'E

60LL E'EN' 36 'E LA&. G

message roperty of 'LC. 0NA0'3;IHE2 04E;4 &ILL +E ;34EC0'E2 '3 'E 60LL

E'EN' 36 'E LA&.

banner G roperty of 'LC. 0NA0'3;IHE2 04E;4 &ILL +E ;34EC0'E2 '3 'E 60LL

E'EN' 36 'E LA&. G

hostname (roperty of 'LC. 0NA0'3;IHE2 04E;4 &ILL +E ;34EC0'E2 '3 'E 60LLE'EN' 36 'E LA&.)

Jerst p@ formularen

--. A router needs to be added to 346 area 7. &hich commands should be used to

enable 346 on the router* (Choose t!o.)

;outerA(config)= router ospf

;outerA(config)= router ospf 1

;outerA(config#router)= net!or" 1B%.18.%.7 7.7.7.%99 7

;outerA(config#router)= net!or" 1B%.18.%.7 7.7.7.%99 area 7

;outerA(config#router)= net!or" 1B%.18.%.7 %99.%99.%99.7 7

-/. ;efer to the graphic. &hich of the follo!ing commands !ill configure router A for

346*

router ospf 1

net!or" 1B%.18.17.7

router ospf 1


10/45

net!or" 1B%.18.17.8/ 7.7.7.8- area 7

net!or" 1B%.18.17.1B% 7.7.7.- area 7

router ospf 1

net!or" 1B%.18.17.8/ %99.%99.%99.1B%

net!or" 1B%.18.17.1B% %99.%99.%99.%9%

router ospf 1

net!or" 1B%.18.17.7 area 7

-9. &hich of the follo!ing protocols !ould e$change information bet!een routers to

share net!or" addresses and their metrics*

'C ;I

C4,AC2

Ethernet

-8. &hich I42N deice can be directly connected to a t!o#!ire local loop in a North

American city*

a router !ith a serial interface

a router !ith an 4' interface a router !ith a 0 interface

an I42N terminal adapter

->. 'he output of the sho! ip interfaces brief command indicates that 4erial7 is up but

the line protocol is do!n. &hich of the follo!ing are possible causes for the line

protocol being in the do!n state* (Choose t!o.)

'he cloc" rate is not set on the 2'E.

An incorrect default gate!ay is set on the router.

A net!or" is missing from the routing protocol configuration.

'he encapsulation on the 4erial7 interface is incorrect.

Keepalies are not being sent by the remote deice

-. &hich of the follo!ing is a characteristics of 'C* (Choose t!o.)

data transport reliability

best path determination

establishing maintaining and terminating irtual circuits

encapsulation of pac"ets in a data frame !ith source and destination ,AC addresses


11/45

best#effort datagram deliery

-B. &hich statement is true regarding the command ip route 1B%.18.>.%/

%99.%99.%99.%/ 1B%.18.>.B* (Choose t!o.)

A pac"et destined for host 1B%.18.>.-7 !ill be for!arded to address 1B%.18.>.B.

1B%.18.>.B is the destination net!or" for this route.

1B%.18.>.%/ is the ne$t#hop router in this command.

'his command is issued from the interface configuration mode.

'his command is used to define a static route

/7. &hich of the follo!ing application layer protocols use 'C* (Choose three.)

4,'

6'4N,

''

'6'

2C

/1. &hich terms refer to 6rame ;elay congestion management mechanisms* (Choose

three.)

+ECN2LCI

2E

6ECN

L,I

Inerse A;

/%. &hich of the follo!ing router commands !ill erify that a path e$ists to a

destination net!or"*

;outer= sho! ip interfaces brief

;outer= sho! ip route

;outer= sho! cdp neighbors

;outer= sho! running#config

;outer= sho! protocols

/-. &hen EID; is configured on a router !hich table of 20AL information is used to

calculate the best route to each destination router*

router table


12/45

topology table

20AL table

CA, table

A; table

//. ;efer to the graphic. ;outers A and + hae EID; configured and automatic

summariation has been disabled on both routers. &hich of the follo!ing commands is

used on router A to summarie the attached routes and to !hich interface is this

command applied* (Choose t!o)

ip summary#address eigrp 1 1B%.18.17.8/ %99.%99.%99.1B%

ip area#range eigrp 1 1B%.18.17.7 %99.%99.%99.%%/

summary#address 1B%.18.17.7 7.7.7.-1

ip summary#address eigrp 1 1B%.18.17.8/ 7.7.7.8- serial interface on router A

serial interface on router +

/9. A router !ith t!o LAN interfaces t!o &AN interfaces and t!o loopbac" interfaces

configured is operating !ith 346 as its routing protocol. &hat is used by the 346

process to assign the router I2*

the I address of the interface configured !ith priority 7

the 346 area I2 configured on the interface !ith the highest I address the loopbac" !ith the highest I address configured

the highest I address on the LAN interfaces

the highest I address configured on the &AN interfaces

/8. Dien the I address and subnet mas" of 1>%.18.1-/.98 %99.%99.%99.%%/ on !hich

subnet!or" does this address reside*

1>%.7.7.7

1>%.18.1-/.7

1>%.18.1-/.-%

1>%.18.1-/./

1>%.18.1-/./>

1>%.18.1-/.8-

/>. &hich commands sho! !hen the last ID; routing update !as receied* (Choose

t!o.)

;outer= sho! ip protocols

;outer= sho! ersion


13/45

;outer= sho! interfaces

;outer= sho! ip updates

;outer= sho! ip route

/. &hen using access control lists to filter traffic !hich of the follo!ing is used to

trac" multiple sessions occurring bet!een hosts*

I addresses

subnet mas"s

port numbers

routed protocols

routing protocols

interfaces

/B. Dien the I address and subnet mas" of 1>%.18.1-/.8/ %99.%99.%99.%%/ !hich of

the follo!ing !ould describe this address*

'his is a useable host address.

'his is a broadcast address.

'his is a net!or" address.

'his is not a alid address

97. 'he company net!or" sho!n in the dra!ing has to be subnetted. 'he company hasleased the Class C I address of %77.1.%.7. &hich of the follo!ing net!or" addresses

and mas"s !ould be appropriate for one of the subnet!or"s*

%77.1.%.B8 %99.%99.%99.1B%

%77.1.%.187 %99.%99.%99.%%/

%77.1.%.7 %99.%99.%99.%%/

%77.1.%.-% %99.%99.%99.%/7

CCNA4 FINAL (New 3)

1. A net!or" administrator is as"ed to design a system to allo! simultaneous access to

the Internet for %97 users. 'he I4 for this net!or" can only supply fie public Is.

&hat can be used to accomplish this tas"*

routable translation

dynamic translation

static translation

port address translation
http://p4s-ccna.blogspot.com/2008/12/ccna4-final-new-3_01.htmlhttp://p4s-ccna.blogspot.com/2008/12/ccna4-final-new-3_01.html


14/45

%. 'he LAN attached to the Ethernet interface of the ;aleigh router sho!n in the

graphic is addressed !ith priate I addresses. If one public I is assigned to the

company !hich commands could be used in a configuration that allo!s all deices

!ith priate Is in this net!or" to access the Internet* (Choose t!o.)

ip nat inside source list 1 interface serial7 oerload

ip nat outside source list 1 interface serial7 oerload

ip nat inside serial7

ip nat inside source list 1 pool ;aleigh oerload

ip nat inside ;aleigh oerload

ip inside nat source list 1 interface serial7 ;aleigh

-. 'he command output sho!n in the graphic !as ta"en from a Cisco 78 broadband

router. &hich "ind of address translation is in effect on this router*

static

dynamic

oerload

priate

public

/. &hich of the follo!ing I addresses are defined by ;6C 1B1 as priate addresses*

(Choose three.)

1B%.18.1/8.7%%

1>%.17.%9.718

1>%.-1.7.718

%7.7.7.7

17.1>%.B%.%B

9. o! !ill data be transmitted from the router to the I4 if the router has the t!o

lin"s sho!n in the graphic*

+oth lin"s !ill transmit data at the same rate.

19// bits can be transmitted simultaneously from the router oer the '1 line.

+oth lin"s !ill transmit bits one by one.

'he 98K lin" !ill transmit a ma$imum of 9- bits at the same time.

8. &hich statements about 2C are true* (Choose three.)

2C uses 'C.


15/45

2C uses 02.

2C sends messages to the serer on port 8>.

2C sends messages to the serer on port 8.

2C sends messages to the client on port 8>.

2C sends messages to the client on port 8.

>. &hich command !ould be used to e$clude the I address 1B%.18.%/.9 from the

2C address pool on a router*

;outer(dhcp#config)= ip dhcp e$cluded#address 1B%.18.%/.9

;outer= ip dhcp e$cluded#address 1B%.18.%/.9

;outer(config#e$cluded)= ip dhcp e$cluded#address 1B%.18.%/.9

;outer(config)= ip dhcp e$cluded#address 1B%.18.%/.9

;outer(config)= e$cluded#address 1B%.18.%/.9;outer(dhcp#config)= e$cluded#address 1B%.18.%/.9

. 'he &AN connection for a nation!ide company !ith %97 offices must support

constant connections to core layer serices for file sharing and occasional Internet

access. &hich combination of &AN technologies !ill meet these needs !ith minimum

e$pense*

6rame ;elay ?C for Internet access and A', for file serer access

6rame ;elay ?C for Internet access and I42N for file serer accessI42N for Internet access and .%9 for file serer access

I42N for Internet access and 6rame ;elay ?C for file serer access

B. &hich command !ould produce the output sho!n in the graphic*

sho! ip dhcp serer statistics

sho! ip dhcp binding

debug ip dhcp serer eents

debug ip dhcp binding

17. &hich of the follo!ing deices is used to establish the communications lin"

bet!een the customer e


16/45

11. &hich of the follo!ing statements are true about 6rame ;elay* (Choose three.)

6rame ;elay operation is defined by a series of I43 standards.

6rame ;elay is a pac"et s!itched connection#oriented !ide area net!or" serice.

6rame ;elay only supports point#to#point connections.

A router can be considered as data terminal e


17/45

It proides for redundancy.

It allo!s for easy &AN e$pansion in case of company gro!th.

It is less e$pensie.

It proides faster connection time.

It proides less latency and itter.

18. &hich of the follo!ing terms describes a deice that !ill put data on the local

loop*

2LCI

C3

2CE

2'E

;I+;I

1>. &hich of the follo!ing are supported by a +;I interface on a router* (Choose t!o.)

'!o independent channels that can carry analog data !ith a band!idth of 8/ K.

A single 1% Kbps digital bearer channel.

'!o multiple$ed channels carrying digital data.

A single 8/ Kbps signaling channel.

A multiple$ed data channel that can only handle 44> information. A 18 Kbps delta channel used for signaling purposes.

1. A net!or" administrator has been as"ed to proide the net!or" in the 0nited

4tates !ith an I42N &AN lin". 'he router aailable to proide the &AN connection is a

non#modular Cisco router !ith t!o serial connections. &hat must be done to adapt one

of the serial interfaces of this router for the I42N connection*

Nothing. 'he router is already suitable.

urchase a +;I &AN interface card to install in the router.

urchase a 0 interface to install in the router.

urchase a 'AN'1 deice to install on the router.

1B (NEE2 AN4&E;4MMM)&hich of the follo!ing is a function of a 2CE deice*

determines the ne$t#hop address for a pac"et

multiple$es signals from seeral sources

adapts information for use on a serice proider:s net!or"

used to directly connect t!o 2'Es to simulate a &AN net!or"


18/45

%7. &hy !ould data frames be discarded in a 6rame ;elay net!or"* (Choose t!o.)

'he frame contains an incorrect I address.

An error has been detected in computing the frame chec" se


19/45

to consere I addresses

to translate domain names into I addresses

to map net!or" addresses to the corresponding data lin" address

to hide internal addresses from e$ternal deices

%8. An I42N router is configured for 22; as sho!n in the graphic to proide Internet

connectiity for the company. Immediately after a user in the company attempts opens

a !eb bro!ser to connect to the Internet another user in the company tries to

do!nload a file using 6'. &hat !ill happen* (Choose t!o.)

'he user that opened the bro!ser !ill connect to the Internet because the 22; lin"

!ill consider this traffic interesting.

'he Internet user !ill be disconnected because the 6' data !ill cause the 22; lin" to

shut do!n.'he 22; lin" !ill allo! the 6' traffic because it is interesting.

'he 22; lin" !ill not allo! the 6' traffic because it is not interesting.

'he 6' connection !ill fail because the 22; lin" is already in use for the Internet

connection.

'he 6' connection !ill succeed because the !eb user already opened the 22; lin".

%>. &hich command configures the 4I2 on the first + channel of an I42N interface*

;outer(config)= isdn spid7 spid#number ldnO;outer(config)= isdn spid1 spid#number ldnO

;outer(config#if)= isdn spid7 spid#number ldnO

;outer(config#if)= isdn spid1 spid#number ldnO

%. &hat does the command debug isdn


20/45

the local database for the username and pass!ord of the remote deice

-7. o! many separate + channel circuits can be proisioned on a ;I interface that

uses a '1 line for connectiity*

%

18

%-

%/

-7

1%

-1. &hich operating systems support multiuser capability* (Choose three.)

Linu$&indo!s B

&indo!s ,E

&indo!s

&indo!s %777

-%. &hat is placed in the address field of a frame that !ill trael from the 2C office of

A+C company to the 3rlando office*

,AC address of the 3rlando router,AC address of the 2C router

1B%.18.1.%9

1B%.18.1.%8

2LCI 177

2LCI %77

--. &hat does a 2LCI of 7 indicate about a frame* (Choose t!o.)

'his is the first data frame sent by the router.

'his is a management frame.

'he encapsulation type is Cisco.

'he encapsulation type is IE'6.

'he L,I type is Ansi or


21/45

igh#Leel 2ata Lin" Control

Logical Lin" Control

4erial 2ata Lin" Control

oint to oint protocol

+inary 4ynchronous Control protocol

-9. An administrator consoled into the 5elly router needs to telnet to the +utter router.

&hat 2LCI !ill the 5elly router place in the frame to perform this operation*

117

119

%%7

%%9

-8. &hich commands can be used to identify !hich 2LCIs are actie* (Choose t!o.)

sho! frame#relay map

sho! frame#relay lmi

sho! frame#relay pc

sho! frame#relay interface

sho! interfaces

sho! ip route

->. A technician is testing the functionality of a recently installed router. 'he

technician is unable to ping the serial interface of a remote router. 'he technician

e$ecutes the sho! interface serial77 command on the local router and sees the

follo!ing line in the outputF

4erial77 is up line protocol is do!n

&hat are possible causes for this command output* (Choose three.)

remote C40240 failure

serial cable missing

interface shutdo!n

"eepalies not being sent

cloc"ing signal missing

-. A router needs to for!ard a message receied from a host. o! does the router

identify the correct ?C to for!ard the message* (Choose t!o.)

'he router for!ards the frame to all ports in the net!or" and learns the address from

the reply frame.

'he destination host I address is embedded in the 2LCI.


22/45

'he router searches Inerse A; tables for maps of 2LCIs to I addresses.

A table of static mappings can be searched.

'he router broadcasts a re


23/45

deices.

can be configured on both synchronous and asynchronous serial interfaces.

/-. &hich of the follo!ing describes the CA protocol* (Choose three.)

e$changes a random challenge number during the session to erfiy identity

sends authentication pass!ord to erify identity

preents transmission of login information in plain te$t

disconnects the session if authentication fails

initiates a t!o#!ay handsha"e

//. &hich of the follo!ing s!itching types !ill allo! the communication deices in the

proider:s net!or" to be shared and only allocated to an indiidual subscriber during

data transfer*circuit#s!itched

pac"et#s!itched

frame#s!itched

dedicated#s!itched lines

lease#s!itched

/9. o! does 6rame ;elay technology process frames that contain errors* (Choose

t!o.) 6rame ;elay serices depend on the upper layer protocols to handle error recoery.

It re


24/45

1. A technician has been as"ed to run Cisco 42, one#step loc"do!n on the router of a

customer. &hat !ill be the result of this process*

'raffic is only for!arded from 42,#trusted Cisco routers.

4ecurity testing is performed and the results are saed as a te$t file stored in N?;A,.

GG'he router is tested for potential security problems and any necessary changes are

made.

All traffic entering the router is


25/45

a set of computer instructions that lies dormant until triggered by a specific eent

GGe$ploits ulnerabilities !ith the intent of propagating itself across a net!or"

9. ;efer to the e$hibit. &hat can be concluded from the e$hibited output of the debug

ip nat command*

'he 17.1.1.%%9 host is e$changing pac"ets !ith the 1B%.18.7.17 host.

'he natie 17.1.%77.%9/ address is being translated to 1B%.18.7.17.

GG'he 1B%.18.7.7%/ net!or" is the inside net!or".

ort address translation is in effect.

8. A technician is tal"ing to a colleague at a rial company and comparing 24L transfer

rates bet!een the t!o companies. +oth companies are in the same city use the same

serice proider and hae the same rateserice plan. &hat is the e$planation for !hy

Company A reports higher do!nload speeds than Company +*

Company + has a higher olume of 3'4 oice traffic than Company A.

Company + shares the conection to the 24LA, !ith more clients than Company A.

Company A only uses microfilters on branch locations.

GGCompany A is closer to the serice proider.

>. ;efer to the e$hibit. &hich statement correctly describes ho! ;outer1 processes an

6' re


26/45

allo!s the pac"et into the router.

GGIt reaches the end of ACL 171 !ithout matching a condition and drops the pac"et

because there is no access#list 171 permit any any statement.

It matches the incoming pac"et to the access#list 171 permit ip any 1B%.18.1.7

7.7.7.%99 statement ignores the remaining statements in ACL 171 and allo!s the

pac"et into the router.

It matches the incoming pac"et to the access#list %71 deny icmp 1B%.18.1.7 7.7.7.%99

any statement continues comparing the pac"et to the remaining statements in ACL

%71 to ensure that no subse


27/45

GGConfigure dynamic NA' !ith oerload.

17. ;efer to the e$hibit. Company A+C e$panded its business and recently opened a

ne! branch office in another country. I8 addresses hae been used for the company

net!or". 'he data serers 4erer1 and 4erer% run applications !hich re


28/45

1%. An established company has recently transitioned from outsourced LAN support to a

completely in#house staff. 'he outsourcing company is no longer in business so no

records are aailable. 'here are many user complaints about application speed and

aailability. &hat t!o considerations apply to this situation* (Choose t!o.)

A net!or" utiliation baseline should


29/45

the administrator is able to ping the local mail serer I address successfully from a

remote net!or" and can successfully resole the mail serer name to an I address ia

the use of the nsloo"up command. At !hat 34I layer is the problem most li"ely to be

found*

physical layer

data lin" layer

net!or" layer

GGapplication layer

19. &hen configuring a 6rame ;elay connection !hat are t!o instances !hen a static

6rame ;elay map should be used* (Choose t!o.)

!hen the remote router is a non#Cisco router

GG!hen the remote router does not support Inerse A;

!hen the local router is using I34 ;elease 11.1 or earlier

GG!hen broadcast traffic and multicast traffic oer the ?C must be controlled

!hen globally significant rather than locally significant 2LCIs are being used

18. &hich three statements are true about creating and applying access lists* (Choose

three.)

Access list entries should filter in the order from general to specific.

GG3ne access list per port per protocol per direction is permitted.

4tandard ACLs should be applied closest to the source !hile e$tended ACLs should be

applied closest to the destination.


30/45

GG'here is an implicit deny at the end of all access lists.

GG4tatements are processed se


31/45

A modem terminates a digital local loop.

A C40240 terminates an analog local loop.

GGA modem terminates an analog local loop.

GGA router is commonly considered a 2'E deice.

A router is commonly considered a 2CE deice.

%7. A net!or" administrator is instructing a technician on best practices for applyingACLs. &hich suggestion should the administrator proide*

Named ACLs are less efficient than numbered ACLs.

4tandard ACLs should be applied closest to the core layer.

ACLs applied to outbound interfaces are the most efficient.

GGE$tended ACLs should be applied closest to the source that is specified by the ACL.

%1. ;efer to the e$hibit. +ranch A has a Cisco router. +ranch + has a non#Cisco router

set for IE'6 encapsulation. After the commands sho!n are entered ;% and ;- fail to

establish the ?C. 'he ;% L,I is Cisco and the ;- L,I is AN4I. 'he L,I is successfully

established at both locations. &hy is the ?C failing*

'he ?C to ;- must be point#to#point.

L,I types must match on each end of a ?C.

GG'he ietf parameter is missing from the frame#relay map ip 17.17.17.- %7- command.

'he ?Cs at ;% use different encapsulation types. A single port can only support one

encapsulation type.


32/45

%%. &hich statement is true regarding !ildcard mas"s*

'he !ildcard mas" and subnet mas" perform the same function.

'he !ildcard mas" is al!ays the inerse of the subnet mas".

GGA Q7Q in the !ildcard mas" identifies I address bits that must be chec"ed.

A Q1Q in the !ildcard mas" identifies a net!or" or subnet bit.

%-. ;efer to the e$hibit. &hat is placed in the address field in the header of a frame

that !ill trael from the 2C office of A+C Company to the 3rlando office*

,AC address of the 3rlando router

,AC address of the 2C router

1B%.18.1.%9

1B%.18.1.%8

2LCI 177

GG2LCI %77

%/ .A company is loo"ing for a &AN solution to connect its head


33/45

lo!er latency and itter

GGariable band!idth capacity

fe!er physical router interfaces

%9. ;efer to the e$hibit. ;I% has been configured on all routers in the net!or".

;outers ;1 and ;- do not receie ;I routing updates. 3n the basis of the proided

configuration !hat should be enabled on router ;% to remedy the problem*

pro$y A;

C2 updates

4N, serices

GG;I authentication

%8. &hat are the symptoms !hen the s777 interface on a router is attached to an

operational C40240 that is generating a cloc" signal but the far end router on the

point#to#point lin" has not been actiated*

sho! controllers indicates cable type 2CE ?.-9. sho! interfaces s777 indicates serial

do!n line protocol do!n.

sho! controllers indicates cable type 2CE ?.-9. sho! interfaces s777 indicates serial

up line protocol do!n.

GGsho! controllers indicates cable type 2'E ?.-9. sho! interfaces s777 indicates

serial up line protocol do!n.

sho! controllers indicates cable type 2'E ?.-9. sho! interfaces s777 indicates serial

do!n line protocol do!n.


34/45

%>. &hich statement about a ?N is true*

?N lin" establishment and maintenance is proided by LC.

2LCI addresses are used to identify each end of the ?N tunnel.

GG?Ns use irtual Layer - connections that are routed through the Internet.

3nly I pac"ets can be encapsulated by a ?N for tunneling through the Internet.

%. ;efer to the e$hibit. artial results of the sho! access#lists and sho! ip interface

6astEthernet 71 commands for router ;- are sho!n. 'here are no other ACLs in

effect. ost A is unable to telnet to host +. &hich action !ill correct the problem but

still restrict other traffic bet!een the t!o net!or"s*

Apply the ACL in the inbound direction.

Apply the ACL on the 6astEthernet 77 interface.

GG;eerse the order of the 'C protocol statements in the ACL.

,odify the second entry in the list to permit tcp host 1B%.18.17.17 any e< telnet .

%B. ;efer to the e$hibit. &hat happens if the net!or" administrator issues the

commands sho!n !hen an ACL called ,anagers already e$ists on the router*

'he commands oer!rite the e$isting ,anagers ACL.

GG'he commands are added at the end of the e$isting ,anagers ACL.

'he net!or" administrator receies an error stating that the ACL already e$ists.


35/45

'he commands !ill create a duplicate ,anagers ACL containing only the ne!

commands being entered.

-7. &hich three statements accurately describe a security policy* (Choose three.)

GGIt creates a basis for legal action if necessary.

GGIt defines a process for managing security iolations.

GGIt defines acceptable and unacceptable use of net!or" resources.

'he remote access policy is a component of the security policy that goerns acceptable

use of e#mail systems.

It is "ept priate from users to preent the possibility of circumenting security

measures.

It proides step#by#step procedures to harden routers and other net!or" deices.

-1. ;efer to the e$hibit. 'he lin" bet!een the C';L and +;R1 routers is configured as

sho!n in the e$hibit. &hy are the routers unable to establish a session*

'he cloc" rate must be 98777.

GG'he usernames are misconfigured.

'he I addresses are on different subnets.

'he cloc" rate is configured on the !rong end of the lin".

'he CA pass!ords must be different on the t!o routers.

Interface serial 777 on C';L must connect to interface serial 771 on +;R1.


36/45

-%. &hat effect !ould the ;outer1(config#e$t#nacl)= permit tcp 1>%.18./.7 7.7.7.%99

any e< !!! command hae !hen implemented inbound on the f77 interface*

All 'C traffic is permitted and all other traffic is denied.

'he command is reected by the router because it is incomplete.

All traffic from 1>%.18./.7%/ is permitted any!here on any port.

GG'raffic originating from 1>%.18./.7%/ is permitted to all 'C port 7 destinations.

--. &hat can a net!or" administrator do to recoer from a lost router pass!ord*

use the copy tftpF flashF command

boot the router to boot;3, mode and enter the b command to load the I34 manually

telnet from another router and issue the sho! running#config command to ie! thepass!ord

GGboot the router to ;3, monitor mode and configure the router to ignore the startup

configuration !hen it initialies

-/. A router in a 6rame ;elay net!or" needs to for!ard a message receied from a

host. &hat t!o methods does the router use to identify the correct ?C to for!ard the

message* (Choose t!o.)

'he router for!ards the frame to all ports in the net!or" and learns the address from

the reply frame.

'he destination host I address is embedded in the 2LCI.

'he router searches Inerse A; tables for maps of 2LCIs to I addresses.


37/45

GGA table of static mappings can be searched.

'he router broadcasts a re


38/45

are failing. 'he correct configuration of NA' has been erified. &hat is the most li"ely

cause of the problem*

44 is unable to pass through NA'.

GG'here are incorrect access control list entries.

'he access list has the incorrect port number for 44.

'he ip helper command is re


39/45

4ource 1B%.18.-.1 # 2estination 1B%.18./.%

/7. An administrator is configuring a dual stac" router !ith I8 and I/ using ;Ing.

'he administrator receies an error message !hen trying to enter the I/ routes into

;Ing. &hat is the cause of the problem*

;Ing is incompatible !ith dual#stac" technology.

All interfaces hae been configured !ith the incorrect I/ addresses.

GG;I1 or ;I% needs to be configured in addition to ;Ing to successfully use I/.

&hen I/ and I8 are configured on the same interface all I/ addresses are shut

do!n in faor of the ne!er technology.

/1. &hich !ireless solution can proide mobile users !ith non line#of#sight broadbandInternet access at speeds comparable to 24L or cable*

&i#6i

&i,A

GGsatellite

,etro Ethernet

/%. A net!or" administrator added t!o s!itches and a ne! ?LAN oer the past

!ee"end. o! can the administrator determine if the additions and changes improed

performance and aailability on the company intranet*

GGerform a baseline test and compare the current alues to alues that !ere obtained


40/45

in preious !ee"s.

Interie! departmental secretaries and determine if they thin" load time for !eb

pages is improed.

Compare the hit counts on the company !eb serer for the current !ee" to the alues

that !ere recorded from preious !ee"s.

erformance on the intranet can be determined by monitoring load times of company

!eb pages from remote sites.

/-. ;efer to the e$hibit. 'he net!or" administrator is adding ;1 to an e$isting

net!or". As a part of the corporate I' procedures the administrator attempts to bac"

up the router Cisco I34 soft!are of ;1 and receies the output sho!n. 'he net!or"

administrator then attempts unsuccessfully to ping the '6' serer from the console

session. &hat should be done ne$t to isolate this problem*

6rom ;% alidate that interface 6a77 is operational.

6rom the '6' serer erify that the soft!are on the '6' serer is operational.

6rom the '6' serer confirm there is enough room on the '6' serer for the Cisco

I34 soft!are.

GG6rom the console session ma"e sure that ;1 has a route to the net!or" !here the

'6' serer resides.

//. &hat functionality do access control lists proide !hen implementing dynamic NA'

on a Cisco router*

GGdefines !hich addresses can be translated

defines !hich addresses are assigned to a NA' pool


41/45

defines !hich addresses are allo!ed out of the router

defines !hich addresses can be accessed from the inside net!or"

/9. A net!or" administrator is !or"ing !ith an applications team to fi$ a problem that

a serer based application is haing !ith response time. 'he administrator has

e$amined the net!or" portions of the data path and identified seeral possible

problem areas. 'he applications team has simultaneously identified potential issues

!ith the current release of soft!are. 'he net!or" administrator begins addressing the

net!or" issues !hile the applications team implements soft!are patches.

&hich statement applies to this situation*

GGChanges to the net!or" !ill reeal problems that are caused by the ne! patches.

4cheduling !ill be more difficult if the net!or" and soft!are teams !or"

independently.

It !ill be difficult to isolate the problem if t!o teams are implementing changesindependently.

;esults from changes !ill be easier to reconcile and document if each team !or"s in

isolation.

/8. ;efer to the e$hibit. ;1 is performing NA' oerload for the 17.1.1.7%/ inside

net!or". ost A has sent a pac"et to the !eb serer. &hat is the destination I address

of the return pac"et from the !eb serer*

17.1.1.%F1%-/

1>%.-7.%7.1F1%-/

GG1>%.-7.%7.1F----

1B%.18.1.%F7


42/45

/>. &hich three guidelines !ould help contribute to creating a strong pass!ord policy*

(Choose three.)

3nce a good pass!ord is created do not change it.

GG2eliberately misspell !ords !hen creating pass!ords.

GGCreate pass!ords that are at least characters in length.

GG0se combinations of upper case lo!er case and special characters.

&rite pass!ords in locations that can be easily retrieed to aoid being loc"ed out.

0se long !ords found in the dictionary to ma"e pass!ords that are easy to remember.

/. &hat !ill be the result of adding the command ip dhcp e$cluded#address1>%.18./.1 1>%.18./.9 to the configuration of a local router that has been configured

as a 2C serer*

'raffic that is destined for 1>%.18./.1 and 1>%.18./.9 !ill be dropped by the router.

'raffic !ill not be routed from clients !ith addresses bet!een 1>%.18./.1 and

1>%.18./.9.

GG'he 2C serer function of the router !ill not issue the addresses bet!een

1>%.18./.1 and 1>%.18./.9.

'he router !ill ignore all traffic that comes from the 2C serers !ith addresses

1>%.18./.1 and 1>%.18./.9.

/B. &hich t!o statements are true about I8* (Choose t!o.)


43/45

GG4ecurity options are build into I8.

I8 addresses re


44/45

cloud

9%. ;efer to the e$hibit. A host connected to 6a77 is unable to ac


45/45

GG4tac"er

IC

C2C

GG,ultilin"

99. &hat are t!o main components of data confidentiality* (Choose t!o.)

chec"sum

digital certificates

GGencapsulation

GGencryption

CCNA4 FINALNew.doc

Documents

Transcript of CCNA4 FINALNew.doc