All practice questions

A network engineer needs to configure a backup IPv4 static route on router HQ-Rtr to reach the remote LAN $10.220.50.0/24$. The primary path to this destination is learned via OSPFv2, which has a default Administrative Distance of 110. The backup static path must be routed through the next-hop IP address $192.168.88.2$ and should only be inserted into the IP routing table if the primary OSPF path fails. Which Cisco IOS command must be configured on HQ-Rtr to achieve this design requirement?

A network administrator is configuring static routes on router R1 to provide redundancy for destination network $172.20.50.0/24$. The primary path to this network is currently learned via OSPF with an administrative distance of $110$. The administrator wants to add a backup static route via next-hop IPv4 address $192.168.12.2$ and evaluate static route forwarding behavior on broadcast networks. Which two statements regarding static route configuration and forwarding logic are correct? (Select two.)

A client host on VLAN 20 ($172.16.20.0/24$) broadcasts a DHCPDISCOVER request to obtain network parameters. The default gateway router R1 forwards this request to a centralized DHCP server at $10.200.1.100$ via an `ip helper-address` statement configured on subinterface GigabitEthernet0/0.20. Which field inside the relayed DHCP payload does R1 populate with its own ingress subinterface IP address to inform the DHCP server which address pool to use?

A network engineer hardens an enterprise access switch by enabling DHCP Snooping, Dynamic ARP Inspection (DAI), and Port Security. Host A acquires an IPv4 address dynamically via DHCP on interface GigabitEthernet1/0/5, where Port Security is configured with the `switchport port-security mac-address sticky` command. The engineer executes `write memory` to save the running configuration. Later, the switch experiences a power outage and reboots. DHCP Snooping database persistence was not configured with `ip dhcp snooping database`. Upon bootup, Host A attempts to communicate using its active DHCP lease without re-initiating a DHCP DORA sequence. However, all ARP traffic from Host A is dropped by the switch. What is the root cause of these frame drops?

A network technician is configuring Hot Standby Router Protocol (HSRP) on Router R1 to provide default gateway redundancy for hosts in VLAN 20. Interface GigabitEthernet0/0/1 on R1 has been assigned the IPv4 address $172.16.20.1/24$. The technician enters the following commands in interface configuration mode:

text
R1(config-if)# ip address 172.16.20.1 255.255.255.0
R1(config-if)# standby 20 ip 172.16.20.1

Which statement accurately describes the outcome of executing these configuration commands?

An enterprise network administration team is transitioning from manually entering configuration commands on individual switches via SSH to using centralized automation playbooks. Which primary operational benefit does this shift to automated management provide?

A host client on VLAN 10 requests an IPv4 address assignment from a centralized DHCP server located across a Cisco router acting as a DHCP relay agent. Arrange the operational steps of the initial address discovery process in the correct chronological sequence.

A network administrator configures an inbound IPv4 extended Access Control List (ACL) on interface GigabitEthernet0/0 to control traffic originating from the engineering subnet $10.50.10.0/24$. The objective is to allow HTTP and HTTPS access to an internal web server at $172.16.1.100$, while continuing to allow normal network traffic to all other destinations.

The administrator applies the following configuration:

text
ip access-list extended FILTER_ENGINEERING
permit tcp 10.50.10.0 0.0.0.255 host 172.16.1.100 eq 80
permit tcp 10.50.10.0 0.0.0.255 host 172.16.1.100 eq 443

After applying this ACL to GigabitEthernet0/0 inbound, users in the $10.50.10.0/24$ subnet report that while they can access the web server, all access to internet services, DNS, and local file servers is completely blocked. What is the primary cause of this issue?

A network engineer is analyzing connectivity failures on a Cisco Catalyst switch serving VLAN 20. DHCP Snooping and Dynamic ARP Inspection (DAI) are globally enabled and configured on VLAN 20. Users connected to access ports report that they fail to receive DHCP IP addresses, valid ARP requests from hosts are dropped by the switch engine, and port-security sticky MAC addresses learned on access port GigabitEthernet0/2 were lost following a switch reboot.

Which TWO administrative actions are required to resolve the DHCP/DAI packet drops and permanently persist the learned sticky MAC addresses across switch reboots? (Select TWO.)

Router R1 contains the following IPv4 routing table entries for destination networks within the enterprise core:

- A static route to $10.10.4.0/24$ with a configured administrative distance of $110$
- An OSPF route to $10.10.0.0/16$ with an administrative distance of $110$
- A RIP route to $10.10.4.32/27$ with an administrative distance of $120$

When Router R1 receives an IPv4 packet destined for host $10.10.4.50$, which route will R1 select to forward the traffic?

A network administrator is implementing Layer 2 security controls on a Cisco Catalyst access switch to defend against rogue DHCP servers, ARP poisoning, and unauthorized MAC address access. Match each Layer 2 security configuration command or feature component on the left to its corresponding operational behavior on the right.

An enterprise network team is transitioning from legacy per-device CLI administration to an automated network management model. Which TWO statements describe key operational impacts of implementing network automation? (Select TWO.)

A network administrator needs to restrict which specific CLI commands an engineer can execute on a router after logging in. Which AAA component is responsible for controlling the specific actions and commands a user is allowed to perform?

A network administrator inspects a Cisco IOS XE switch and finds the following running configuration snippet:

text
username secadmin privilege 15 password 0 C1sc0123!
!
line vty 0 4
transport input ssh
login local

The organization's security hardening baseline requires all local database user accounts to store credentials using PBKDF2 (Type 8) password hashing rather than unencrypted plaintext (Type 0). Which global configuration command correctly updates the local user credential to meet this security standard?

A network administrator applies a Quality of Service (QoS) policy to an ingress interface of an enterprise router to cap incoming data transfers at a rate of 10 Mbps. During peak usage periods, application traffic exceeding 10 Mbps experiences immediate packet drops rather than transmission delays. Which statement accurately explains why this traffic behavior occurs?

When contrasting traditional networking with a controller-based software-defined architecture, how is control plane intelligence managed across traditional network devices?

An enterprise network administrator is implementing Quality of Service (QoS) traffic conditioning mechanisms on WAN edge routers. Which two statements correctly describe the operational differences between traffic policing and traffic shaping? (Select two.)

A network engineer is configuring Layer 2 security controls on access switches to protect against man-in-the-middle attacks and rogue server deployments. Which two statements accurately describe the operational behaviors of DHCP Snooping and Dynamic ARP Inspection (DAI)? (Select two.)

Match each AAA framework operational characteristic or protocol mechanism on the left to its corresponding protocol or architectural implementation on the right.

A network technician needs to harden local console line access on a Cisco IOS XE switch using the local user database. Arrange the following Cisco IOS CLI commands in the correct sequential order required to perform this configuration, starting from Privileged EXEC mode (`Switch#`).