Examkin

All practice questions

1987 questions

All types1,987Multiple choice1,020Multiple select452Numeric18Matching229Ordering203Fill in the blank22Short answer43
Question 301Question →

An enterprise host generates an IPv6 Link-Local address on an Ethernet interface using SLAAC and the standard EUI-64 process. Which two statements regarding the resulting IPv6 address structure and generation rules are correct?

Select all that apply

Show answer & explanation

Answer: The link-local prefix begins with FE80::/10FE80::/10, where the first 10 bits are fixed as binary 1111 1110 101111\ 1110\ 10.; The 7th bit of the first byte (Universal/Local bit) in the MAC address is inverted from 0 to 1.

Answer

The correct statements are that IPv6 link-local addresses use the prefix FE80::/10 (first 10 bits fixed as 1111 1110 10) and that the EUI-64 process inverts the 7th bit (Universal/Local bit) of the first byte of the MAC address.
The IPv6 link-local address range is defined by RFC 4291 as starting with the prefix FE80::/10, which fixes the first 10 bits to 1111 1110 10. Additionally, when deriving a 64-bit interface identifier from a 48-bit MAC address using EUI-64, the 7th bit of the MAC address's first byte (the U/L bit) must be inverted from 0 to 1 for burned-in universal addresses.

Step-by-Step Solution

1
Identify the IPv6 Link-Local prefix definition.
Link-Local addresses belong to the block FE80::/10 (binary 1111 1110 10xx xxxx).
Standard IPv6 addressing architecture reserves the first 10 bits for link-local unicast scope.
2
Analyze the IEEE 48-bit MAC to 64-bit EUI-64 conversion rules.
The 48-bit MAC is split into two 24-bit halves, FFFE is inserted in between, and the 7th bit of the first byte is inverted.
Inverting the U/L bit (bit 7) allows burned-in MAC addresses (which have U/L = 0) to produce an interface ID where 1 represents universal scope.

Key Concept

IPv6 Link-Local Address Architecture and EUI-64 Interface Identifier Derivation
Question 302Question →

A network engineer is configuring an interface on a Cisco router for VLAN 270 using the assigned IPv6 block 2001:db8:abcd::/482001:\text{db8}:\text{abcd}::/48. Per organization policy, the 16-bit subnet ID field in the /64/64 prefix must be the exact hexadecimal equivalent of the decimal VLAN ID (27010270_{10}). The router interface has a hardware MAC address of `3C4A.9211.2233` and is configured with the command `ipv6 address 2001:db8:abcd:10e::/64 eui-64`. Which IPv6 global unicast address will be dynamically generated on this interface?

Show answer & explanation

Answer: 2001:db8:abcd:10e:3e4a:92ff:fe11:2233

Answer

2001:db8:abcd:10e:3e4a:92ff:fe11:2233
The correct option correctly converts decimal VLAN 270 into hexadecimal 010E (`10e`), inserts `FFFE` into the MAC address `3C4A.9211.2233`, and flips the 7th bit of the first byte (`3C` = `0011 1100` -> `0011 1110` = `3E`), producing the full IPv6 address `2001:db8:abcd:10e:3e4a:92ff:fe11:2233`.

Step-by-Step Solution

1
Calculate the 16-bit Subnet ID from the decimal VLAN ID
Decimal 27010=(1×162)+(0×161)+(14×160)=0x010E270_{10} = (1 \times 16^2) + (0 \times 16^1) + (14 \times 16^0) = 0x010E, which compresses to `10e` in the 4th hextet.
IPv6 hextets are written in hexadecimal format. Converting decimal 270 yields 010E.
2
Insert FFFE into the middle of the 48-bit MAC address
MAC `3C4A.9211.2233` becomes `3C4A:92FF:FE11:2233`.
EUI-64 generation splits the 6-byte MAC address into two 3-byte halves and inserts `FF-FE` (16 bits) in between.
3
Invert the 7th bit (Universal/Local bit) of the first MAC octet
First octet `3C` in binary is `0011 1100`. Inverting the 7th bit (bit 1 from the right in the first byte) changes it to `0011 1110`, which equals `3E` in hexadecimal.
IEEE EUI-64 standard dictates that the 7th bit of the interface ID must be inverted (0 for global scope, 1 for local scope).
4
Combine the /64 prefix with the EUI-64 interface identifier
`2001:db8:abcd:10e:3e4a:92ff:fe11:2233`.
Appending the 64-bit interface ID `3e4a:92ff:fe11:2233` to the /64 prefix `2001:db8:abcd:10e::/64` yields the final global unicast IPv6 address.

Key Concept

EUI-64 Interface Identifier Generation & IPv6 Hexadecimal Subnetting
Question 303Question →

Two Cisco switches, Switch-A and Switch-B, are linked using physical interfaces GigabitEthernet0/1 and GigabitEthernet0/2. The network team intends to aggregate these links using dynamic trunk negotiation. A technician executes `channel-group 5 mode active` on Switch-A's physical interfaces, but configures `channel-group 5 mode desirable` on Switch-B's physical interfaces.

After applying these configurations, the output of `show etherchannel summary` on Switch-A indicates a status of `Po5(SD)` with member ports showing `(D)`. Which explanation correctly accounts for this operational failure?

Show answer & explanation

Answer: LACP and PAgP are distinct negotiation protocols, causing channel negotiation to fail when combining `active` (LACP) with `desirable` (PAgP).

Answer

LACP and PAgP are distinct negotiation protocols, causing channel negotiation to fail when combining active (LACP) with desirable (PAgP).
EtherChannel links require matching protocols on both ends. Mode `active` triggers dynamic negotiation using LACP (IEEE 802.3ad), while mode `desirable` triggers dynamic negotiation using PAgP (Cisco proprietary). Because LACP and PAgP packets are incompatible, the switches cannot complete handshaking, causing the port-channel to remain down `Po5(SD)` with physical interfaces down `(D)` or standalone.

Step-by-Step Solution

1
Identify the protocol associated with each channel-group mode.
Mode `active` utilizes IEEE 802.3ad LACP, whereas mode `desirable` utilizes Cisco proprietary PAgP.
EtherChannel negotiation protocols must match on both ends of the link.
2
Analyze protocol compatibility between Switch-A and Switch-B.
Switch-A transmits LACP PDUs while Switch-B transmits PAgP packets. Neither switch understands the other's control frames.
LACP and PAgP cannot interoperate or establish a negotiated bundle.
3
Correlate protocol mismatch with CLI verification status `Po5(SD)`.
The Port-channel remains down (D) at Layer 2 (S) because dynamic negotiation fails completely.
Without successful negotiation, physical ports are kept in a down or unbundled state to prevent layer 2 loops.

Key Concept

EtherChannel Protocol and Mode Compatibility (LACP vs PAgP)
Question 304Question →

Two Cisco switches, SW1 and SW2, are interconnected using three physical links: GigabitEthernet1/0/1, GigabitEthernet1/0/2, and GigabitEthernet1/0/3. An engineer attempts to aggregate all three links into a routed Layer 3 EtherChannel (Port-channel 12).

On SW1, the engineer configures `no switchport` on `interface Port-channel 12` along with IPv4 addressing, and assigns all three physical interfaces using `channel-group 12 mode active`.

On SW2, `no switchport` and IP addressing are configured on `interface Port-channel 12`. Interfaces GigabitEthernet1/0/1 and GigabitEthernet1/0/2 are configured with `channel-group 12 mode passive`, while interface GigabitEthernet1/0/3 is configured with `channel-group 12 mode auto`.

Upon checking operational status, Port-channel 12 is up with IPv4 connectivity, but only GigabitEthernet1/0/1 and GigabitEthernet1/0/2 are bundled (`P` flag in `show etherchannel summary`), whereas GigabitEthernet1/0/3 remains unbundled (`I` flag on SW1 and `D` flag on SW2).

Which condition correctly explains why interface GigabitEthernet1/0/3 failed to join the EtherChannel bundle?

Show answer & explanation

Answer: Interface GigabitEthernet1/0/3 on SW2 is configured with PAgP mode auto, which cannot negotiate an EtherChannel bundle with SW1's LACP mode active.

Answer

Interface GigabitEthernet1/0/3 on SW2 is configured with PAgP mode auto, which cannot negotiate an EtherChannel bundle with SW1's LACP mode active.
The root cause of the bundling failure on GigabitEthernet1/0/3 is a protocol mismatch. SW1 is configured with LACP (`channel-group 12 mode active`), while SW2's GigabitEthernet1/0/3 is configured with PAgP (`channel-group 12 mode auto`). Because IEEE 802.3ad LACP and Cisco proprietary PAgP speak completely different protocol languages, negotiation fails and the link drops out of the bundle, showing standalone (`I`) or down (`D`) flags.

Step-by-Step Solution

1
Analyze negotiation protocol assignment on SW1.
SW1 uses `channel-group 12 mode active` across all three physical interfaces, designating LACP (IEEE 802.3ad) as the aggregation control protocol.
The `active` keyword explicitly enables LACP and actively sends LACP PDUs.
2
Analyze negotiation protocol assignment on SW2 member interfaces.
Interfaces Gig1/0/1 and Gig1/0/2 use `passive` (LACP), whereas Gig1/0/3 uses `auto` (PAgP).
The `auto` keyword enables Cisco proprietary PAgP, which expects PAgP packets (`desirable` or `auto`), not LACP PDUs.
3
Evaluate protocol compatibility for GigabitEthernet1/0/3.
SW1 sends LACP PDUs on Gig1/0/3, while SW2 listens for PAgP packets on Gig1/0/3. Neither switch receives compatible aggregation negotiation frames.
LACP and PAgP are incompatible protocols and cannot form an EtherChannel across opposing endpoints.

Key Concept

LACP and PAgP Mode Incompatibility in EtherChannel Aggregation
Question 305Question →

A network engineer is configuring a routed (Layer 3) EtherChannel bundle between two Cisco switches using Link Aggregation Control Protocol (LACP). Which TWO configuration steps must be performed on the physical member interfaces to correctly establish the channel?

Select all that apply

Show answer & explanation

Answer: Execute the `no switchport` command on each physical member interface.; Apply the `channel-group 1 mode active` command to the physical member interfaces.

Answer

The correct steps are executing the `no switchport` command on physical member interfaces and placing them into an active LACP mode using `channel-group 1 mode active`.
To construct a Layer 3 EtherChannel, physical member interfaces must first be converted from switchports to routed interfaces using the `no switchport` command. Next, an LACP negotiation mode (active or passive) must be configured using the `channel-group` command on those physical interfaces.

Step-by-Step Solution

1
Convert physical member interfaces to Layer 3 mode
The physical interfaces cease operating as Layer 2 switchports.
Layer 3 EtherChannels require member links to operate as routed ports.
2
Enable LACP negotiation on physical member interfaces
Physical interfaces send LACP packets to initiate bundle negotiation.
Setting the channel-group mode to active enables LACP dynamic negotiation.

Key Concept

Layer 3 LACP EtherChannel Configuration
Question 306Question →

A network administrator needs to configure a routed Layer 3 EtherChannel using LACP across physical interfaces GigabitEthernet 0/1 and 0/2 on a Cisco Catalyst switch. Drag and drop the CLI configuration steps into the correct sequential order from first to last.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct sequence begins with selecting the physical interface range, disabling switchport functionality to convert them to Layer 3, defining the LACP channel group mode to generate the logical bundle, and finally entering the Port-channel interface to assign the IP address.
To create a functional Layer 3 EtherChannel using LACP, the network administrator must first access the physical member interfaces using the range command, disable Layer 2 switchport characteristics with 'no switchport', group the links into an active LACP channel group with 'channel-group 1 mode active', and finally apply the network IP addressing directly onto the resulting logical Port-channel interface.

Step-by-Step Solution

1
Select member physical interfaces
Enters interface range configuration mode for GigabitEthernet 0/1 - 2.
Configuration must begin on the target member links.
2
Convert physical ports to routed ports
Disables Layer 2 port capabilities using 'no switchport'.
Layer 3 EtherChannels require member ports to be routed ports prior to forming a Layer 3 logical port-channel.
3
Enable LACP dynamic negotiation
Creates Port-channel 1 and initiates active LACP negotiations via 'channel-group 1 mode active'.
The 'active' keyword explicitly selects LACP protocol for bundle aggregation.
4
Assign IP address to the Port-channel
Navigates to 'interface Port-channel 1' and configures 'ip address 10.1.1.1 255.255.255.252'.
In a Layer 3 EtherChannel, routing parameters and IP addresses reside on the logical port-channel interface, not on individual physical members.

Key Concept

Layer 3 EtherChannel LACP Configuration Sequence
Question 307Question →

A network administrator needs to assign a single usable IPv4 host address to a server connected to the 192.168.1.16/28 subnet. Which of the following IPv4 addresses is a valid usable host address for this subnet?

Show answer & explanation

Answer: 192.168.1.25

Answer

The address 192.168.1.25 is a valid usable host address.
For the network block 192.168.1.16/28, the subnet range begins at the network address 192.168.1.16 and ends at the broadcast address 192.168.1.31. Consequently, the assignable usable host address range spans from 192.168.1.17 through 192.168.1.30. The address 192.168.1.25 falls directly within this valid range.

Step-by-Step Solution

1
Determine the block size from the prefix length.
A /28 prefix uses a subnet mask of 255.255.255.240. The block size is 256 - 240 = 16.
Calculating the block size identifies the increments between adjacent subnets.
2
Identify the network address and broadcast address for the subnet.
Network address is 192.168.1.16. Broadcast address is 192.168.1.31 (16 + 16 - 1).
The network address is the start of the subnet block, and the broadcast address is the last address in the block.
3
Determine the range of usable host addresses.
Usable host addresses range from 192.168.1.17 to 192.168.1.30.
Usable host IPs exclude both the network address and the broadcast address.

Key Concept

IPv4 Subnet Boundaries and Usable Host Identification
Question 308Question →

A network administrator enables Cisco PortFast on a switch port connected directly to an end-user workstation. Which operational benefit does PortFast provide in this scenario?

Show answer & explanation

Answer: The port immediately transitions from blocking to the forwarding state, bypassing listening and learning states to prevent DHCP timeouts.

Answer

The port immediately transitions from blocking to the forwarding state, bypassing listening and learning states to prevent DHCP timeouts.
Enabling PortFast on an access port connected to an end-user device allows the port to immediately transition from blocking to forwarding. By skipping the standard listening and learning states (which take 30 seconds combined), host devices receive network access right away, preventing issue scenarios like DHCP address acquisition timing out during bootup.

Step-by-Step Solution

1
Identify the standard 802.1D Spanning Tree Protocol (STP) transition sequence.
Standard STP transitions ports through Blocking → Listening (15s) → Learning (15s) → Forwarding.
This total 30-second delay prevents temporary Layer 2 loops during topology convergence.
2
Evaluate the effect of PortFast on an access interface.
PortFast allows an edge interface connected to a host (like a workstation) to immediately enter the Forwarding state upon link activation.
End-user hosts cannot create Layer 2 switching loops, so waiting through listening and learning states is unnecessary and often causes client protocol timeouts (e.g., DHCP).

Key Concept

STP PortFast operational behavior on edge ports
Question 309Question →

A network administrator configures a Cisco router interface using the command `ipv6 address 2001:db8:4444:5555::/64 eui-64`. If the MAC address of the interface is 0800.2765.43210800.2765.4321, which full IPv6 global unicast address is generated for this interface?

Show answer & explanation

Answer: 2001:db8:4444:5555:a00:27ff:fe65:4321

Answer

2001:db8:4444:5555:a00:27ff:fe65:4321
The correct IPv6 address is constructed by taking the MAC address 0800.2765.4321, inserting FFFE between the third and fourth bytes to form 0800:27FF:FE65:4321, and flipping the 7th bit of the first byte (changing 08 to 0A). Compressing the leading zero of 0A00 produces a00:27ff:fe65:4321, which appends to the prefix 2001:db8:4444:5555::/64.

Step-by-Step Solution

1
Split the 48-bit MAC address into two 24-bit halves and insert FFFE in the middle.
MAC address 0800.2765.4321 becomes 0800:27FF:FE65:4321.
EUI-64 generation requires expanding a 48-bit MAC address into a 64-bit interface ID by inserting FFFE into the center.
2
Invert the 7th bit (universal/local bit) of the first octet.
First octet 08 in hex is 0000 1000 in binary. Flipping the 7th bit yields 0000 1010 in binary, which is 0A in hex. The identifier becomes 0A00:27FF:FE65:4321.
IEEE EUI-64 rules mandate flipping the 7th bit of the MAC address to indicate universal scope.
3
Combine the /64 IPv6 prefix with the EUI-64 interface ID and apply RFC 4291/5952 zero compression rules.
Prefix 2001:db8:4444:5555::/64 + Interface ID 0a00:27ff:fe65:4321 = 2001:db8:4444:5555:a00:27ff:fe65:4321.
Leading zeros in any 16-bit hexadecimal field are omitted (0a00 becomes a00).

Key Concept

EUI-64 Interface Identifier Generation
Estimated Time:1m 30s
Question 310Question →

A network administrator needs to configure a new WPA2-Enterprise Wireless LAN (WLAN) for client connectivity using the Cisco Wireless LAN Controller (WLC) GUI. Arrange the steps in the correct chronological order required to successfully create, configure security settings for, enable, and apply this WLAN.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct procedural order is: 1) Navigate to WLANs > WLANs and select Create New, 2) Define Profile Name, SSID, and WLAN ID then click Apply, 3) Select the dynamic interface and enable Status under the General tab, 4) Configure WPA2 Policy with 802.1X under the Security > Layer 2 tab, and 5) Select the RADIUS authentication server under the AAA Servers tab and click Apply.
Creating a WLAN via the Cisco WLC web GUI follows a strict sequential process. First, navigating to WLANs > WLANs and executing 'Create New' allows entry of the basic identifying information (Profile Name, SSID, and WLAN ID). Clicking Apply creates the WLAN instance and presents the edit menu. On the General tab, the administrator maps the WLAN to a dynamic interface for VLAN access and enables the WLAN status. Next, under Security > Layer 2, WPA2 Policy and 802.1X Key Management are specified. Finally, under the AAA Servers tab, the specific RADIUS server is attached to handle 802.1X authentication, and clicking Apply saves the full configuration.

Step-by-Step Solution

1
Initiate WLAN Creation
Access the WLAN creation workflow by selecting 'Create New' from the drop-down menu on the WLANs page and clicking 'Go'.
The controller requires creating a new WLAN object before configurable tabs become available.
2
Configure Basic Identifiers
Assign the Profile Name, wireless network SSID, and unique WLAN ID, then click 'Apply'.
Applying these parameters registers the WLAN and automatically opens the WLANs > Edit page with specific configuration tabs.
3
Configure Interface Mapping & Administrative Status
On the General tab, select the mapped dynamic VLAN interface and check the Enabled box for Status.
Clients will fail to receive IP addressing or transmit traffic if the WLAN is not mapped to an operational interface and enabled.
4
Configure Layer 2 Security Mechanisms
Navigate to Security > Layer 2, select WPA+WPA2 parameters, enable WPA2 Policy, and choose 802.1X under Auth Key Management.
WPA2-Enterprise relies on 802.1X Key Management rather than PSK.
5
Bind AAA RADIUS Server & Save Settings
Navigate to the AAA Servers tab, choose the configured RADIUS server under Server 1, and click 'Apply' in the top-right corner.
802.1X authentication requests must be forwarded to a external RADIUS server for identity validation.

Key Concept

WLC GUI WLAN Creation and 802.1X Security Configuration Order
Estimated Time:2m 0s
Question 311Question →

Refer to the following routing table snippet from a Cisco router:

text
Codes: C - connected, S - static, O - OSPF, D - EIGRP
Gateway of last resort is not set

D 172.16.10.0/24 [90/2172416] via 10.1.1.1, 00:05:12, GigabitEthernet0/0
O 172.16.10.0/26 [110/20] via 10.1.1.2, 00:12:45, GigabitEthernet0/1
S 172.16.0.0/16 [1/0] via 10.1.1.3
C 172.16.10.128/27 is directly connected, GigabitEthernet0/2

When the router receives an IP packet destined for host 172.16.10.33, which next-hop IP address or interface will be selected to forward the packet?

Show answer & explanation

Answer: 10.1.1.2

Answer

10.1.1.2 via GigabitEthernet0/1 based on Longest Prefix Match (/26).
When forwarding IP packets, a router always evaluates candidate routes using Longest Prefix Match (LPM) first. For the target IP address 172.16.10.33, three candidate routes match: 172.16.0.0/16, 172.16.10.0/24, and 172.16.10.0/26. The OSPF route 172.16.10.0/26 provides the longest matching prefix mask (/26), so the router forwards the packet to next-hop IP 10.1.1.2.

Step-by-Step Solution

1
Identify all candidate routes that match destination IP 172.16.10.33.
Three matching routes exist: 172.16.0.0/16, 172.16.10.0/24, and 172.16.10.0/26. The route 172.16.10.128/27 covers range 172.16.10.128 to 172.16.10.159 and does not match.
Routing decision logic only evaluates routes whose network address and subnet mask encompass the target IP.
2
Compare prefix lengths among all matching candidate routes.
172.16.10.0/26 has a 26-bit prefix match, which is longer (more specific) than /24 and /16.
Longest Prefix Match (LPM) is always the primary criterion used by a router when selecting a route from the routing table.
3
Determine the next-hop associated with the longest prefix match route.
The route 172.16.10.0/26 points to next-hop IP 10.1.1.2.
Administrative Distance and Metric are only evaluated when comparing routes with identical prefix lengths from different sources.

Key Concept

Router Forwarding Decision Logic (Longest Prefix Match Precedence)
Question 312Question →

An engineer is comparing the operational characteristics of virtual switches (vSwitches) operating inside a Type 1 hypervisor architecture with standard physical Layer 2 switches. Which two operational statements regarding internal vSwitch behavior are correct?

Select all that apply

Show answer & explanation

Answer: A vSwitch maintains a MAC address table to forward Ethernet frames between virtual machines on the same host.; A vSwitch can apply 802.1Q VLAN tags to frames before transmitting them onto physical uplink adapters.

Answer

Virtual switches build dynamic MAC address tables to forward intra-host frame traffic between virtual machines and can tag outgoing traffic with 802.1Q VLAN headers for physical switch connectivity.
Virtual switches emulate physical Layer 2 switch functions by creating dynamic MAC address tables for frame switching between virtual machines. Additionally, vSwitches can act as 802.1Q VLAN-aware devices, tagging traffic (Virtual Switch Tagging) across physical network interfaces connected to upstream switches.

Step-by-Step Solution

1
Analyze local Layer 2 forwarding capabilities of a virtual switch
The vSwitch learns vNIC MAC addresses and creates an internal lookup table to switch frames locally.
This allows virtual machines connected to the same vSwitch and VLAN to communicate without sending traffic to external physical hardware.
2
Examine VLAN tagging capabilities on uplink interfaces
The vSwitch can perform 802.1Q encapsulation on frames prior to transmission via physical network interface cards (pNICs).
This allows multiple virtual networks (VLANs) to multiplex over shared physical server uplinks.

Key Concept

Virtual Switch (vSwitch) Layer 2 Operations and Uplink VLAN Tagging
Question 313Question →

A network technician needs to configure interface FastEthernet0/1 on a Cisco Catalyst switch to connect a host workstation. Which set of commands should be entered in interface configuration mode to explicitly set the interface as an access port and assign it to VLAN 10?

Show answer & explanation

Answer: switchport mode access
switchport access vlan 10

Answer

To configure a switch interface for a single end-user workstation, enter interface configuration mode and execute 'switchport mode access' followed by 'switchport access vlan 10'.
Executing 'switchport mode access' sets the interface to operate as a Layer 2 access interface, and 'switchport access vlan 10' assigns the interface's untagged traffic membership to VLAN 10.

Step-by-Step Solution

1
Select interface configuration mode for FastEthernet0/1.
The CLI prompt changes to Switch(config-if)#.
Configuration commands must target the specific physical interface.
2
Define port role as access mode.
The command 'switchport mode access' explicitly disables trunk negotiation and sets the interface to Layer 2 access mode.
Access ports carry traffic for a single assigned VLAN without tagging egress frames.
3
Assign the VLAN membership.
The command 'switchport access vlan 10' places interface FastEthernet0/1 into VLAN 10.
This associates all untagged traffic on this port with broadcast domain VLAN 10.

Key Concept

Access Port Assignment in Cisco IOS
Question 314Question →

Match each Cisco Wireless LAN Controller (WLC) interface to its corresponding operational characteristic and network functionality.

Click a left item, then click its matching right item

Items

Service Port
Management Interface
Virtual Interface
Dynamic Interface

Matches

Show answer & explanation

Answer

The Service Port provides out-of-band management access. The Management Interface supports in-band management and CAPWAP communication. The Virtual Interface handles internal functions like web authentication and DHCP relay. Dynamic Interfaces handle user WLAN-to-VLAN traffic mapping.
Each Cisco WLC interface serves a distinct operational purpose: the Service Port handles out-of-band management on an isolated network; the Management Interface manages in-band administrative traffic and AP CAPWAP tunnels; the Virtual Interface provides Layer 3 services like web authentication redirection and DHCP relaying; and Dynamic Interfaces segment client traffic onto specific wired VLANs.

Step-by-Step Solution

1
Identify the role of out-of-band management on Cisco controllers.
The Service Port is identified as the physical port dedicated strictly to out-of-band administrative connections.
It does not route traffic to or from dynamic interfaces or support general wireless client forwarding.
2
Identify the primary in-band management and AP control interface.
The Management Interface is selected as it manages controller administrative access via SSH/HTTPS and terminates CAPWAP tunnels from lightweight APs.
This interface is mandatory and operates in-band over trunked switchports.
3
Distinguish between internal helper interfaces and client data interfaces.
The Virtual Interface provides logical redirection and DHCP relay services, while Dynamic Interfaces act like VLAN subinterfaces for user payload traffic.
The Virtual Interface requires a unroutable placeholder IP address, whereas Dynamic Interfaces map directly to standard 802.1Q VLAN IDs.

Key Concept

Cisco WLC Physical and Logical Interface Architecture
Question 315Question →

A network administrator is evaluating IPv6 addressing structures for a router interface configuration. Which two statements correctly describe IPv6 prefix properties or address compression rules?

Select all that apply

Show answer & explanation

Answer: The address 2001:db8:0000:0000:0000:0000:0000:00012001:\text{db8}:0000:0000:0000:0000:0000:0001 can be validly compressed to 2001:db8::12001:\text{db8}::1.; The prefix fe80::/10\text{fe80}::/10 is designated for link-local addresses, which are automatically generated and non-routable beyond the local link.

Answer

The correct statements are that 2001:db8:0000:0000:0000:0000:0000:0001 can be compressed to 2001:db8::1, and that fe80::/10 is designated for link-local non-routable addresses.
Compressing consecutive zero fields into a single double colon once per address is valid according to RFC 4291 rules. Furthermore, fe80::/10 is officially designated for link-local communication and is restricted to the local layer 2 segment.

Step-by-Step Solution

1
Analyze IPv6 zero compression rules according to RFC 4291.
Consecutive blocks of zeros can be replaced by double colons (::), but only ONCE per address representation to prevent ambiguity.
Compressing 2001:db8:0000:0000:0000:0000:0000:0001 into 2001:db8::1 uses the double colon once legally, while 2001:db8::100::1 violates this rule.
2
Evaluate reserved IPv6 prefix scopes.
The fe80::/10 block is reserved for link-local unicast addresses.
Link-local addresses are required on all IPv6-enabled interfaces, automatically configured, and never forwarded by routers outside the local link boundary.
3
Evaluate subnet capacity logic in IPv6 vs IPv4.
IPv6 eliminates broadcast addressing in favor of multicast, so subtracting 2 addresses for network and broadcast is unnecessary in IPv6 subnets.
All 2642^{64} host combinations in a standard /64 subnet interface ID space are available as unique host identifiers.

Key Concept

IPv6 Address Representation and Scopes
Question 316Question →

Match each physical cabling or transceiver type to its corresponding physical characteristic.

Click a left item, then click its matching right item

Items

Single-Mode Fiber (SMF)
Multimode Fiber (MMF)
Unshielded Twisted-Pair (UTP)
SFP+ Transceiver

Matches

Show answer & explanation

Answer

Single-Mode Fiber (SMF) matches with narrow core (~9 microns) for long distances; Multimode Fiber (MMF) matches with wider core (50/62.5 microns) for shorter distances; Unshielded Twisted-Pair (UTP) matches with twisted copper wire pairs up to 100 meters; SFP+ Transceiver matches with hot-swappable module supporting 10 Gbps.
Each physical interface and cabling type directly corresponds to its fundamental engineering characteristic: Single-mode fiber has a ~9-micron core for laser transmission over long distances; Multimode fiber has a 50/62.5-micron core for transmission over shorter distances; UTP relies on twisted copper pairs up to 100 meters; SFP+ is the standard modular transceiver form factor for 10 Gbps interfaces.

Step-by-Step Solution

1
Identify the optical core specifications for fiber media.
Single-mode fiber has a small 9-micron core for single light paths, whereas multimode fiber has a larger core (50 or 62.5 microns) allowing multiple light paths.
Core size directly determines the light propagation modes and distance capabilities of optical fiber.
2
Identify the characteristics of copper media standards.
Unshielded Twisted-Pair uses balanced twisted copper conductors to resist crosstalk up to the 100-meter limit.
Twisting wire pairs creates balanced differential signals that cancel external electrical interference.
3
Identify the transceiver form factor and speed standard.
SFP+ is an enhanced version of SFP designed specifically for 10 Gigabit Ethernet data rates.
Different modular transceiver form factors correspond to specific maximum throughput capabilities.

Key Concept

Physical interface types, fiber optics core sizes, UTP cabling specifications, and transceiver form factors.
Question 317Question →

A network technician is setting up dynamic link aggregation using Link Aggregation Control Protocol (LACP) between two Cisco switches. Which TWO channel-group mode pairings will successfully establish an operational EtherChannel bundle? (Select two.)

Select all that apply

Show answer & explanation

Answer: Both switch interfaces configured in active mode; One switch interface configured in active mode and the other in passive mode

Answer

The correct options are configuring both interfaces in active mode, and configuring one interface in active mode with the opposing interface in passive mode.
LACP EtherChannel formation requires at least one participating interface to be in active mode to send LACP frames. Thus, active-active and active-passive combinations will both form a functional bundle.

Step-by-Step Solution

1
Analyze LACP operational modes.
Active mode actively transmits LACP packets, whereas passive mode only responds to received LACP packets.
At least one endpoint must be configured in active mode to initiate the LACP packet exchange.
2
Evaluate protocol compatibility.
Desirable mode belongs to PAgP, which is incompatible with LACP.
Both switches must use matching aggregation protocols (LACP to LACP or PAgP to PAgP).

Key Concept

LACP Mode Negotiation Dynamics
Question 318Question →

Match each Layer 2 discovery protocol standard, default operational timer, or feature extension on the left with its correct specification on the right.

Click a left item, then click its matching right item

Items

IEEE 802.1AB
CDP Default Holdtime
LLDP Default Advertisement Timer
LLDP-MED

Matches

Show answer & explanation

Answer

IEEE 802.1AB matches the vendor-neutral open standard specification defining Link Layer Discovery Protocol. CDP Default Holdtime matches 180 seconds. LLDP Default Advertisement Timer matches 30 seconds. LLDP-MED matches the extension supporting inventory management, power-over-Ethernet (PoE) negotiation, and network policy discovery for IP endpoints.
Each pair correctly matches the protocol standard, operational timers, and functional extensions: IEEE 802.1AB defines open-standard LLDP, CDP uses a 180-second default holdtime (3x its 60-second update timer), LLDP sends frames every 30 seconds by default, and LLDP-MED adds organizationally specific Type-Length-Values (TLVs) for media endpoints such as IP phones.

Step-by-Step Solution

1
Identify protocol standard numbers
IEEE 802.1AB corresponds directly to the open standard protocol for LLDP.
CDP is Cisco-proprietary and has no IEEE standard number, whereas LLDP was standardized under IEEE 802.1AB.
2
Differentiate default timers between CDP and LLDP
CDP advertises every 60 seconds with a 180-second holdtime. LLDP advertises every 30 seconds with a 120-second holdtime (holdtime multiplier of 4).
Matching CDP holdtime yields 180 seconds and LLDP advertisement timer yields 30 seconds.
3
Identify media endpoint discovery extensions
LLDP-MED enhances standard LLDP specifically for VoIP phones and endpoint discovery capabilities including voice VLAN assignments and PoE capabilities.
This matches the endpoint management and policy discovery description.

Key Concept

Layer 2 Discovery Protocols (CDP and LLDP) operational specifications and standards
Question 319Question →

A network engineer is deploying a point-to-point Layer 3 EtherChannel between two Cisco Catalyst switches, SW-Alpha and SW-Beta.

On SW-Alpha, the engineer issued `no switchport` on physical interfaces GigabitEthernet0/1 and GigabitEthernet0/2, added them to `channel-group 10 mode active`, and then configured `interface Port-channel 10` with `no switchport` and IP address `10.20.30.1 255.255.255.252`.

On SW-Beta, the engineer configured `interface Port-channel 10` with `no switchport` and IP address `10.20.30.2 255.255.255.252`. Next, the physical member interfaces GigabitEthernet0/1 and GigabitEthernet0/2 were assigned to `channel-group 10 mode passive`, but the engineer omitted the `no switchport` command on those physical member interfaces.

Executing `show etherchannel summary` on SW-Beta displays the following output:

text Flags: D - down P - bundled in port-channel I - stand-alone s - suspended H - Hot-standby (LACP only) R - Layer3 S - Layer2 U - in use f - failed to allocate aggregate interface Group Port-channel Protocol Ports ------+-------------+-----------+----------------------------------------------- 10 Po10(SD) LACP Gi0/1(D) Gi0/2(D)

Which configuration oversight on SW-Beta caused Port-channel 10 to exhibit the `SD` (Layer 2, Down) status flags?

Show answer & explanation

Answer: The physical member interfaces on SW-Beta were left operating in default Layer 2 switchport mode, preventing them from joining a routed Layer 3 port-channel bundle.

Answer

The physical member interfaces on SW-Beta remained in Layer 2 switchport mode because the 'no switchport' command was omitted on GigabitEthernet0/1 and GigabitEthernet0/2.
For a Layer 3 (routed) EtherChannel to operate correctly, physical member interfaces must be explicitly configured as routed ports using the 'no switchport' command. If physical ports remain in their default Layer 2 switchport state when added to a channel group, they cannot bundle with a routed port-channel interface, resulting in the port-channel defaulting to Layer 2 Down ('SD') status and physical ports marked as Down ('D').

Step-by-Step Solution

1
Analyze the output flags of 'show etherchannel summary' on SW-Beta.
Port-channel 10 displays flags 'SD', where 'S' indicates Layer 2 (Switchport) and 'D' indicates Down. Member ports Gi0/1 and Gi0/2 are marked with flag 'D' (Down).
Understanding flag meanings allows diagnosing whether the channel is operating as Layer 2 or Layer 3 and identifying port bundling status.
2
Evaluate the configuration differences between SW-Alpha and SW-Beta.
SW-Alpha configured 'no switchport' on both physical member interfaces and the logical port-channel interface. SW-Beta configured 'no switchport' only on the logical Port-channel interface but omitted it on physical member interfaces GigabitEthernet0/1 and GigabitEthernet0/2.
On Cisco Catalyst switches, physical interfaces operate as Layer 2 switchports by default.
3
Determine the operational requirement for Layer 3 EtherChannels.
Physical member interfaces must match the Layer 2/Layer 3 capability of the logical Port-channel interface. When physical ports remain Layer 2 switchports, Cisco IOS prevents them from bundling into a routed Port-channel, driving the Port-channel interface state to Layer 2 Down ('SD').
Applying 'no switchport' to the physical member interfaces before assigning them to the channel group ensures parameter consistency and enables successful LACP bundle establishment.

Key Concept

Layer 3 EtherChannel Physical Member Interface Requirements
Estimated Time:2m 0s
Question 320Question →

A network administrator is troubleshooting a physical connectivity issue between two Cisco Catalyst switches. A legacy patch cable constructed using only two twisted pairs (wired to pins 1, 2, 3, and 6) was used to connect the two GigabitEthernet interfaces. Both interfaces have been manually configured for speed 1000 and duplex full. A wire map tester confirms end-to-end continuity on pins 1, 2, 3, and 6, while pins 4, 5, 7, and 8 are open/unwired. Despite the ports being enabled, the link status remains down/down. Which statement accurately explains why the 1000BASE-T link fails to establish?

Show answer & explanation

Answer: 1000BASE-T requires all four wire pairs (eight conductors) to transmit and receive simultaneously using 5-level PAM signaling.

Answer

1000BASE-T requires all four wire pairs (eight conductors) to transmit and receive simultaneously using 5-level PAM signaling.
The 1000BASE-T standard (IEEE 802.3ab) requires Category 5e or Category 6 UTP cabling wired with all four pairs (eight conductors). Each pair carries a bi-directional data rate of 250 Mbps using 5-level Pulse Amplitude Modulation (PAM-5) and complex digital signal processing (DSP) to cancel echo and crosstalk. Because pins 4, 5, 7, and 8 are disconnected in a 2-pair cable, the 1000BASE-T physical layer cannot negotiate or establish a link.

Step-by-Step Solution

1
Analyze the physical media requirements for 100BASE-TX versus 1000BASE-T standards.
100BASE-TX operates using two pairs (pins 1, 2, 3, and 6). However, 1000BASE-T (Gigabit Ethernet over copper, IEEE 802.3ab) explicitly requires four pairs (all 8 pins).
Gigabit Ethernet achieves 1 Gbps by transmitting at 250 Mbps per pair across four pairs simultaneously using 5-level Pulse Amplitude Modulation (PAM-5) and hybrid cancellation circuits.
2
Evaluate the cable wiring described in the scenario against the 1000BASE-T requirements.
The legacy cable only has four conductors wired (pins 1, 2, 3, and 6), leaving pins 4, 5, 7, and 8 disconnected.
Without continuity across all eight pins (four pairs), physical Layer 1 signaling for 1000BASE-T cannot complete its multi-pair initialization, causing the link to remain in a down/down state.

Key Concept

1000BASE-T 4-Pair Cabling Requirement
Estimated Time:1m 30s
PreviousPage 16 / 100Next
All practice questions — Cisco CCNA | Examkin