All practice questions

229 questions

Question 141Question

A network engineer is auditing infrastructure hardware and operational roles across an enterprise campus network. Match each network component on the left with its primary operational function on the right.

Click a left item, then click its matching right item

Items

Core Switch
Access Switch
Lightweight Access Point (LAP)
Enterprise Router

Matches

Show answer & explanation

Answer

Core Switch matches high-speed backbone transport without heavy filtering; Access Switch matches connecting endpoints and enforcing port security; Lightweight Access Point matches real-time 802.11 processing with central controller management; Enterprise Router matches path determination between IP subnets and broadcast domain termination.
Each component is correctly matched to its standard Cisco three-tier hierarchical architecture role or split-MAC wireless model: Core switches provide low-latency backbone transport; Access switches connect endpoints; Lightweight APs process 802.11 frames while managed by a central controller; Routers make Layer 3 forwarding decisions between subnets and isolate broadcast domains.

Step-by-Step Solution

1
Identify the primary role of the Core Switch
Matched to high-speed backbone transport with minimal overhead.
Core devices prioritize raw switching speed and low latency across the network backbone.
2
Identify the primary role of the Access Switch
Matched to end-user device connectivity and edge port security.
Access switches represent the entry point for endpoint devices and enforce boundary policies.
3
Identify the primary role of the Lightweight Access Point (LAP)
Matched to handling real-time 802.11 wireless traffic offloading control to a WLC.
Split-MAC architecture assigns real-time wireless tasks to the LAP and management to the WLC.
4
Identify the primary role of the Enterprise Router
Matched to inter-subnet path determination and broadcast domain isolation.
Routers operate at Layer 3 to connect distinct networks and block Layer 2 broadcast frames.

Key Concept

Hierarchical network layers and specialized device roles (Core, Access, LAP split-MAC, and Layer 3 Routing).
Question 142Question

Match each IPv6 address type on the left with its corresponding reserved prefix range on the right. Which pairs correctly match each IPv6 address scope to its standard IPv6 prefix?

Click a left item, then click its matching right item

Items

Global Unicast Address
Link-Local Address
Unique Local Address
Multicast Address

Matches

Show answer & explanation

Answer

Global Unicast Address pairs with 2000::/3, Link-Local Address pairs with fe80::/10, Unique Local Address pairs with fc00::/7, and Multicast Address pairs with ff00::/8.
Each standard IPv6 address scope is assigned a dedicated prefix block by IANA and RFC 4291: Global Unicast uses 2000::/3 for public Internet traffic, Link-Local uses fe80::/10 for interface communication on the same link, Unique Local uses fc00::/7 for internal site routing, and Multicast uses ff00::/8 for group delivery.

Step-by-Step Solution

1
Identify the reserved prefix block for IPv6 Global Unicast addresses.
Global Unicast Address maps to 2000::/3.
Global Unicast IPv6 addresses are defined by RFC 4291 as starting in the 2000::/3 prefix range (2000:: through 3FFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF).
2
Identify the reserved prefix block for IPv6 Link-Local addresses.
Link-Local Address maps to fe80::/10.
IPv6 link-local addresses use the prefix fe80::/10, which covers fe80:: through febf:ffff:ffff:ffff:ffff:ffff:ffff:ffff.
3
Identify the reserved prefix block for IPv6 Unique Local addresses (ULA).
Unique Local Address maps to fc00::/7.
Unique Local IPv6 addresses are analogous to IPv4 private addresses and start with the fc00::/7 block (fc00:: through fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff).
4
Identify the reserved prefix block for IPv6 Multicast addresses.
Multicast Address maps to ff00::/8.
All IPv6 multicast addresses begin with the prefix byte ff00::/8.

Key Concept

IPv6 Address Types and Reserved Prefixes
Question 143Question

Match each virtualization component on the left with its corresponding primary function or definition on the right.

Click a left item, then click its matching right item

Items

Hypervisor
Virtual Switch (vSwitch)
Virtual Network Interface Card (vNIC)
Virtual Machine (VM)

Matches

Show answer & explanation

Answer

Hypervisor matches with the software layer managing host hardware resources; Virtual Switch matches with the software entity performing Layer 2 frame forwarding; Virtual Network Interface Card matches with the software-based network adapter presented to a guest OS; Virtual Machine matches with the isolated software container executing a guest OS.
Each virtualized component serves a distinct role in network and hardware virtualization: the hypervisor manages underlying hardware allocation, the vSwitch handles software-based Layer 2 frame forwarding, the vNIC functions as the software network adapter for guest OS connection, and the VM is the hosted guest compute instance.

Step-by-Step Solution

1
Identify the role of the Hypervisor
The hypervisor controls and allocates physical hardware resources (CPU, RAM, storage) to virtual environments.
It acts as the core virtualization engine enabling multi-tenancy on physical hardware.
2
Identify the role of the Virtual Switch (vSwitch)
The vSwitch manages Layer 2 forwarding within the hypervisor host.
It connects virtual interfaces to each other and bridges virtual network traffic to physical network interface cards (pNICs).
3
Identify the role of the Virtual Network Interface Card (vNIC)
The vNIC acts as the guest system's virtual Ethernet interface.
It binds to a VM and plugs virtually into a port on a vSwitch.
4
Identify the role of the Virtual Machine (VM)
The VM is the virtualized compute instance.
It operates as an independent operating system container hosted by the hypervisor.

Key Concept

Virtualization Abstraction Components and Functions
Question 144Question

Match each network topology architecture model or functional layer on the left to its corresponding design trait and operational responsibility on the right.

Click a left item, then click its matching right item

Items

Collapsed Core Architecture Layer
Three-Tier Core Layer
Three-Tier Distribution Layer
Data Center Spine Layer (Clos)

Matches

Show answer & explanation

Answer

Collapsed Core Architecture Layer matches the description combining core transport and policy enforcement into a single switch pair. Three-Tier Core Layer matches the description providing high-speed transport without CPU-intensive packet inspection or ACL filtering. Three-Tier Distribution Layer matches the description aggregating Access switches, acting as the L2/L3 boundary, and enforcing security policies. Data Center Spine Layer matches the description functioning as a high-bandwidth IP fabric backbone with predictable single-hop latency.
Each architecture layer is uniquely optimized for its operational domain: Collapsed Core combines distribution and core functions for smaller networks; Three-Tier Core optimizes raw forwarding speed without packet filtering; Three-Tier Distribution acts as the control boundary for VLANs, security policies, and routing aggregation; Spine-Leaf Spine nodes provide predictable, non-blocking single-hop transport between all leaf switches.

Step-by-Step Solution

1
Analyze the functional responsibilities of campus network layers.
Identify that the Core layer focuses exclusively on transport speed, while the Distribution layer handles routing boundaries, ACLs, and policy enforcement.
Separation of duties in campus designs prevents performance bottlenecks on the core backbone.
2
Evaluate the Collapsed Core model.
Recognize that Collapsed Core integrates core switching and distribution policies into one physical tier, suited for medium enterprise designs.
Combining layers lowers equipment cost while retaining high availability.
3
Examine data center Spine-Leaf (Clos) architectural dynamics.
Distinguish that Spine switches form a full mesh fabric with Leaf switches to optimize east-west server traffic with deterministic latency.
Spine switches do not connect to each other; they strictly interconnect leaf nodes across a non-blocking Layer 3 fabric.

Key Concept

Network Architectural Layer Functional Responsibilities and Design Trade-offs
Question 145Question

A network engineer is deploying new infrastructure across a multi-site enterprise network. Match each network component on the left to its primary operational function on the right.

Click a left item, then click its matching right item

Items

Router
Next-Generation Firewall (NGFW)
Wireless LAN Controller (WLC)
Layer 2 Switch

Matches

Show answer & explanation

Answer

Router matches with evaluating Layer 3 IP headers to forward packets between subnets. Next-Generation Firewall (NGFW) matches with stateful packet filtering, deep packet inspection, and threat prevention. Wireless LAN Controller (WLC) matches with centralizing radio resource management, AP provisioning, and mobility. Layer 2 Switch matches with forwarding frames within the same local network segment based on destination MAC addresses.
Each component is mapped to its core operational role: Routers perform Layer 3 path determination between distinct IP subnets; Next-Generation Firewalls conduct stateful security filtering and deep packet inspection; Wireless LAN Controllers manage and provision lightweight access points centrally; and Layer 2 Switches perform MAC address-based frame switching within a local broadcast domain.

Step-by-Step Solution

1
Identify the primary operating OSI layer and function of a Router.
Routers operate at Layer 3 (Network layer), making forwarding decisions using IP addresses to route packets between different networks.
Routing across subnet boundaries requires network layer addressing and broadcast domain separation.
2
Identify the distinct security enforcement capabilities of an NGFW.
NGFWs inspect traffic statefully across multiple OSI layers, enforcing security policies, IPS, and application awareness.
Firewalls protect network perimeters by filtering unauthorized or malicious traffic.
3
Determine the management role of a Wireless LAN Controller (WLC).
WLCs provide centralized management for lightweight access points, handling RF configuration, roaming, and security policies.
Split-MAC wireless architectures centralize control-plane functions on the WLC.
4
Determine the forwarding behavior of a Layer 2 Switch.
Layer 2 switches inspect Ethernet frames and use the MAC address table to forward traffic within a single broadcast domain.
Switches handle local network frame switching at Layer 2 without modifying IP headers.

Key Concept

Network Components Roles and Functions
Question 146Question

A network administrator is analyzing Cisco IOS switch interface outputs to resolve network degradation. Match each interface status combination or error counter condition on the left to its corresponding primary root cause on the right.

Click a left item, then click its matching right item

Items

Interface state: FastEthernet0/1 is up, line protocol is down
Interface state: FastEthernet0/2 is administratively down, line protocol is down
Interface statistics: High count of late collisions on an interface operating in full-duplex
Interface statistics: Increasing count of runts accompanied by CRC errors

Matches

Show answer & explanation

Answer

FastEthernet0/1 up/down matches Layer 2 encapsulation mismatch, keepalive failure, or missing framing. FastEthernet0/2 administratively down matches interface manually disabled via the shutdown command. High count of late collisions matches a duplex mismatch with local full-duplex and remote half-duplex. Increasing runts with CRC errors matches physical cable noise, EMI, or collision fragments creating sub-64 byte frames.
Each interface state and counter statistic accurately aligns with its underlying physical or data-link layer cause: 'up/down' denotes Layer 2 framing/keepalive failure, 'administratively down' represents a software shutdown command, late collisions stem from a duplex mismatch between full-duplex and half-duplex endpoints, and runts with CRC errors signify frame corruption under 64 bytes due to physical noise or collisions.

Step-by-Step Solution

1
Analyze interface operational states for Layer 1 vs Layer 2 status
Determine that 'up, line protocol down' indicates physical carrier presence with data-link failure, whereas 'administratively down' represents a software-disabled port.
Cisco IOS separates physical layer link carrier status from data-link protocol keepalive and framing verification.
2
Evaluate CLI error counter symptoms
Associate late collisions with a duplex mismatch scenario and runts paired with CRC errors with physical noise or truncated collision fragments.
Late collisions indicate transmission collisions occurring past the first 64 bytes due to full-duplex ignoring carrier sense, while runts reflect corrupted frame fragments below the minimum Ethernet frame length.

Key Concept

Cisco IOS interface status states and error counter interpretation
Question 147Question

Match each network application operational requirement or protocol scenario on the left with its corresponding transport layer protocol implementation characteristic on the right.

Click a left item, then click its matching right item

Items

Real-time interactive voice communications (VoIP) sensitive to delay variation and jitter
Border Gateway Protocol (BGP) neighbor relationship establishing routing table synchronization
Trivial File Transfer Protocol (TFTP) image download on an embedded network device
Centralized SNMPv2c polling query retrieving interface counters from high-density switches

Matches

Show answer & explanation

Answer

Real-time VoIP pairs with UDP 8-byte low-latency transport; BGP peering pairs with TCP port 179 stateful reliable transport; TFTP image download pairs with UDP port 69 and application-layer ACKs; SNMP polling pairs with UDP port 161 stateless request-response.
Real-time VoIP demands UDP for minimal latency and an 8-byte header; BGP requires TCP on port 179 for reliable ordered routing updates; TFTP uses UDP port 69 and handles reliability at the application layer; SNMP polling uses UDP port 161 for lightweight stateless data collection.

Step-by-Step Solution

1
Analyze transport latency and retransmission requirements for voice traffic
Real-time VoIP requires low latency and predictable delivery without retransmitting dropped packets, matching UDP's 8-byte header fixed structure.
Retransmitted voice packets arrive too late to be decoded into meaningful audio.
2
Analyze reliability requirements for control plane routing protocols
BGP demands strict sequence ordering and guaranteed arrival of routing table updates, matching TCP port 179 stateful behavior.
BGP does not implement its own transport retransmission mechanism.
3
Evaluate bootloader file transfer architecture
TFTP uses UDP port 69 while handling stop-and-wait acknowledgments at the application layer.
Simple boot ROMs require minimal transport stack overhead while still needing basic delivery validation.
4
Evaluate high-frequency network monitoring polling overhead
SNMP polling uses UDP port 161 for stateless queries to prevent memory exhaustion on monitoring hosts.
Establishing TCP three-way handshakes for thousands of recurring metric requests adds unnecessary processing and state overhead.

Key Concept

TCP vs UDP Transport Characteristics and Application Protocol Mapping
Question 148Question

Match each IPv6 address category on the left with its designated reserved prefix block on the right according to RFC standards.

Click a left item, then click its matching right item

Items

Global Unicast
Unique Local
Link-Local
Multicast

Matches

Show answer & explanation

Answer

Global Unicast corresponds to 2000::/3, Unique Local corresponds to fc00::/7, Link-Local corresponds to fe80::/10, and Multicast corresponds to ff00::/8.
Each IPv6 category matches its standards-based prefix block: Global Unicast matches 2000::/3, Unique Local matches fc00::/7, Link-Local matches fe80::/10, and Multicast matches ff00::/8.

Step-by-Step Solution

1
Identify the Global Unicast prefix allocation.
Global Unicast uses binary prefix 001, which maps to 2000::/32000::/3.
RFC 4291 reserves 2000::/32000::/3 for publicly routable global unicast addresses.
2
Identify the Unique Local address range.
Unique Local uses binary prefix 1111 110, which maps to fc00::/7fc00::/7.
RFC 4193 reserves fc00::/7fc00::/7 for private enterprise network addressing.
3
Identify the Link-Local address prefix.
Link-Local uses binary prefix 1111 1110 10, which maps to fe80::/10fe80::/10.
RFC 4291 defines fe80::/10fe80::/10 for communications confined to a local physical or virtual link.
4
Identify the Multicast address range.
Multicast uses binary prefix 1111 1111, which maps to ff00::/8ff00::/8.
RFC 4291 assigns all IPv6 addresses starting with FF to multicast functionality.

Key Concept

IPv6 Address Scopes and Prefix Allocations
Question 149Question

A network technician is troubleshooting interface and cabling symptoms across enterprise switches. Match each Cisco IOS interface status output or error counter on the left with its most probable root cause on the right.

Click a left item, then click its matching right item

Items

Interface output displays 'GigabitEthernet0/1 is down, line protocol is down'.
Interface output displays 'FastEthernet0/2 is up, line protocol is down'.
Interface statistics show an increasing counter of Late Collisions.
Interface statistics show high CRC and Input Errors without collisions.

Matches

Show answer & explanation

Answer

Match 'down/down' to Layer 1 physical failure; 'up/down' to Layer 2 data link issue; 'Late Collisions' to duplex mismatch; and 'CRC errors' to physical media impairment or electromagnetic interference.
Each status combination and error counter directly corresponds to its underlying network layer or physical cabling cause. An interface status of 'down/down' reflects Layer 1 physical disconnection. An interface status of 'up/down' indicates Layer 2 data link failure. Late collisions indicate a duplex configuration mismatch. CRC errors without collisions indicate physical frame corruption due to cable degradation or electrical interference.

Step-by-Step Solution

1
Analyze interface operational states.
Identify that 'down/down' indicates a Physical Layer (Layer 1) connectivity issue, while 'up/down' signifies operational Layer 1 but failed Data Link Layer (Layer 2) keepalives or framing.
Cisco IOS interface output separates physical signaling (interface state) from data link communication (line protocol state).
2
Differentiate between specific interface error counters.
Link Late Collisions to duplex mismatches where collision detection window boundaries are violated, and associate CRC errors with frame corruption due to faulty cabling or interference.
Accurate error counter diagnosis isolates misconfigurations from physical cabling damage.

Key Concept

Cisco IOS Interface Status and Troubleshooting Error Counters
Question 150Question

Network administrators must understand the key attributes, IEEE standards, and default operational parameters of Layer 2 discovery protocols when configuring enterprise switches. Match each Layer 2 discovery protocol characteristic on the left with its corresponding protocol specification or value on the right.

Click a left item, then click its matching right item

Items

IEEE 802.1AB
CDP Default Advertisement Interval
LLDP Default Holdtime
Cisco Discovery Protocol (CDP)

Matches

Show answer & explanation

Answer

IEEE 802.1AB matches the open IEEE standard defining LLDP; CDP Default Advertisement Interval matches 60 seconds; LLDP Default Holdtime matches 120 seconds; Cisco Discovery Protocol (CDP) matches the Cisco-proprietary Layer 2 discovery protocol enabled by default on Cisco Catalyst switches.
Each item accurately corresponds to its defining standard, default timer, or vendor status. IEEE 802.1AB specifies LLDP; CDP advertises every 60 seconds; LLDP retains neighbor entries for a default holdtime of 120 seconds (30s x 4); and CDP is a Cisco-proprietary protocol enabled out of the box.

Step-by-Step Solution

1
Identify the standard specification for LLDP
IEEE 802.1AB defines vendor-neutral LLDP
Standardization allows multi-vendor interoperability for discovery protocols.
2
Determine default CDP update interval
CDP transmits periodic updates every 60 seconds by default
Cisco IOS uses 60 seconds for update packets and 180 seconds for holdtime.
3
Calculate default LLDP holdtime value
LLDP transmit timer (30s) multiplied by holdtime multiplier (4) equals 120 seconds
LLDP calculates holdtime dynamically based on transmit frequency and multiplier.
4
Identify proprietary characteristics of CDP
CDP is Cisco-proprietary and active by default on Cisco hardware
Unlike LLDP, CDP does not require global enablement on standard Cisco switch platforms.

Key Concept

Layer 2 Discovery Protocols (CDP and LLDP) Timers and Standards
Estimated Time:1m 0s
Question 151Question

An enterprise network infrastructure relies on dedicated hardware devices to perform specialized functions across the network topology. Match each network component on the left to its primary operational role on the right.

Click a left item, then click its matching right item

Items

Router
Layer 2 Switch
Next-Generation Firewall (NGFW)
Wireless LAN Controller (WLC)

Matches

Show answer & explanation

Answer

Router matches with evaluating packet headers against a routing table to forward traffic between Layer 3 networks and isolate broadcast domains; Layer 2 Switch matches with making frame forwarding decisions based on destination MAC addresses while isolating collision domains; Next-Generation Firewall matches with providing stateful packet inspection and application-level threat prevention; Wireless LAN Controller matches with centralizing management and RF control across lightweight access points.
Each network component is paired according to its core architectural role in an enterprise network: Routers perform Layer 3 forwarding and broadcast isolation; Layer 2 Switches perform MAC-based switching within a local broadcast domain; NGFWs enforce boundary security and application awareness; WLCs manage lightweight access points and radio frequencies centrally.

Step-by-Step Solution

1
Analyze the primary operation of a Router
Identified as a Layer 3 device that routes between IP networks and terminates broadcast domains.
Routers forward packets using destination IP addresses and routing table lookups.
2
Analyze the primary operation of a Layer 2 Switch
Identified as a Layer 2 device that switches Ethernet frames using MAC address tables.
Switches separate collision domains on each physical interface within a single broadcast domain.
3
Analyze the primary operation of a Next-Generation Firewall (NGFW)
Identified as a security component providing stateful inspection and deep packet/application monitoring.
NGFWs go beyond basic Layer 3/4 ACLs by inspecting Layer 7 application payloads and threats.
4
Analyze the primary operation of a Wireless LAN Controller (WLC)
Identified as a centralized management device for lightweight access points (LAPs).
WLCs handle control plane activities, radio frequency (RF) management, and LAP provisioning via CAPWAP.

Key Concept

Enterprise Network Components and Functional Roles
Question 152Question

Match each Ethernet physical interface transceiver standard to its corresponding physical cabling medium, optical wavelength, and maximum distance specification.

Click a left item, then click its matching right item

Items

10GBASE-SR
1000BASE-LX
1000BASE-T
10GBASE-LR

Matches

Show answer & explanation

Answer

10GBASE-SR matches 850 nm OM3 MMF up to 300 m; 1000BASE-LX matches 1310 nm SMF up to 5 km; 1000BASE-T matches 4-pair Cat 5e/6 UTP up to 100 m; 10GBASE-LR matches 1310 nm SMF up to 10 km.
Each physical interface type is uniquely defined by its transmission speed (1G vs 10G), medium (Copper UTP, MMF, or SMF), optical wavelength (850 nm vs 1310 nm), and distance limit (100 m, 300 m, 5 km, 10 km). Matching these characteristics correctly ensures physical layer compatibility and prevents signal degradation over specified link lengths.

Step-by-Step Solution

1
Identify the transmission speed and medium type for each standard.
Standards starting with '1000BASE' denote 1 Gbps, while '10GBASE' standards denote 10 Gbps. 'T' indicates twisted-pair copper, 'SR' indicates short-range multimode fiber, and 'LX'/'LR' denote long-reach single-mode fiber.
Ethernet standard nomenclature directly describes operational speed and physical media characteristics.
2
Map optical wavelength and maximum distance limits to each optic spec.
Short-range multimode optics (SR) utilize 850 nm VCSEL lasers (300 m reach on OM3). Long-range single-mode optics (LX/LR) utilize 1310 nm lasers (5 km for 1G LX, 10 km for 10G LR). Copper Gigabit (1000BASE-T) uses RJ-45 over Cat5e/6 for 100 m.
Wavelength and fiber core design (SMF vs MMF) dictate distance limitations due to modal dispersion and attenuation.

Key Concept

Physical interface transceiver optics and copper cabling distance/speed standards
Question 153Question

Match each network virtualization component or abstraction on the left with its corresponding operational role in an enterprise host environment on the right.

Click a left item, then click its matching right item

Items

Virtual Network Interface Card (vNIC)
Physical Network Interface Card (pNIC)
Virtual Switch (vSwitch)
Type 1 Hypervisor

Matches

Show answer & explanation

Answer

Virtual Network Interface Card (vNIC) matches with the virtual network adapter presented to a guest OS; Physical Network Interface Card (pNIC) matches with the physical hardware adapter connecting to external switches; Virtual Switch (vSwitch) matches with the software-based switching entity in host memory; Type 1 Hypervisor matches with the bare-metal software layer operating directly on server hardware.
Each virtualization element is accurately mapped to its functional role: vNIC provides virtual adapter presentation to guest VMs, pNIC acts as physical network uplink hardware, vSwitch performs host memory frame switching, and Type 1 hypervisor executes directly on bare-metal hardware.

Step-by-Step Solution

1
Analyze guest network adapter abstractions.
Identify that a vNIC is software exposed to the virtual machine operating system to provide virtual MAC and network connectivity.
Virtual machines require software-emulated interface cards to send and receive frames.
2
Analyze host hardware uplinks.
Associate pNIC with the physical host server hardware interface card.
The pNIC serves as the physical bridge carrying vSwitch traffic onto the physical infrastructure.
3
Evaluate internal frame forwarding constructs.
Match Virtual Switch (vSwitch) to software-based switching inside hypervisor memory.
vSwitches manage Layer 2 forwarding between VM interfaces and physical uplink ports within the hypervisor.
4
Determine hypervisor architecture classification.
Match Type 1 Hypervisor to bare-metal execution operating directly on server hardware.
Type 1 hypervisors control host hardware directly rather than running on top of an OS.

Key Concept

Virtualization Fundamentals and Host Components
Question 154Question

A network engineer is configuring Layer 2 neighbor discovery on Cisco Catalyst switches and multi-vendor endpoints. Match each Layer 2 discovery protocol characteristic or CLI configuration element on the left with its corresponding operational parameter or behavior on the right.

Click a left item, then click its matching right item

Items

Cisco Discovery Protocol (CDP) Default Timers
Link Layer Discovery Protocol (LLDP) Default Timers
LLDP Interface Directional Control Syntax
LLDP-MED (ANSI/TIA-1057) Capability Target

Matches

Show answer & explanation

Answer

CDP Default Timers match with a 60-second update transmission interval and 180-second holdtime. LLDP Default Timers match with a 30-second update transmission interval and 120-second holdtime (holdtime multiplier of 4). LLDP Interface Directional Control Syntax matches with granular subcommands allowing outbound frame sending and inbound frame processing to be controlled independently per interface. LLDP-MED Capability Target matches with extending discovery to endpoint devices for voice VLAN assignment, location details, and dynamic Power over Ethernet (PoE) negotiation.
The correct mapping aligns CDP with its proprietary default timers (60s update / 180s holdtime), LLDP with IEEE 802.1AB default timers (30s update / 120s holdtime calculated via a multiplier of 4), interface-level LLDP directional control ('lldp transmit' and 'lldp receive'), and LLDP-MED with multi-vendor endpoint management features (voice VLAN provisioning and dynamic PoE allocation).

Step-by-Step Solution

1
Evaluate the default transmission and holdtime values for CDP and standard LLDP.
CDP defaults to sending announcements every 60 seconds with a 180-second holdtime. IEEE 802.1AB LLDP defaults to sending frames every 30 seconds with a holdtime multiplier of 4 (giving a 120-second holdtime).
Identifying the exact timer specifications avoids confusing vendor-proprietary timer defaults with IEEE standard defaults.
2
Analyze interface configuration mechanisms for directional frame control.
CDP is toggled per interface with 'cdp enable'. LLDP provides independent control over transmission ('lldp transmit') and reception ('lldp receive') at the interface level.
Network security policies often mandate disabling advertisement transmissions on public-facing or untrusted access ports while still permitting inbound neighbor logging.
3
Identify protocol extensions for specialized media endpoints like IP phones.
LLDP-MED (ANSI/TIA-1057) builds upon IEEE 802.1AB by defining specific Type-Length-Value (TLV) headers for Voice VLAN configuration, physical location tracking, and granular power-via-MDI negotiation.
Multi-vendor VoIP deployments rely on LLDP-MED to achieve seamless endpoint provisioning on non-Cisco switches or cross-vendor telephony platforms.

Key Concept

Layer 2 Discovery Protocols (CDP and LLDP Parameters and Configurations)
Question 155Question

Match each network topology architecture to its corresponding operational characteristic and traffic flow optimization profile.

Click a left item, then click its matching right item

Items

Spine-Leaf (Clos) Fabric
Traditional 3-Tier Campus
Collapsed Core (2-Tier)
WAN Hub-and-Spoke

Matches

Show answer & explanation

Answer

Spine-Leaf (Clos) Fabric matches with East-West low-latency traffic using ECMP; Traditional 3-Tier Campus matches with separate functional tiers for structured North-South flow; Collapsed Core matches with combining core and distribution functions into a single switch pair; WAN Hub-and-Spoke matches with centralizing inspection and routing remote branch traffic through a central hub site.
Each topology architecture addresses specific scalability, redundancy, and traffic flow requirements: Spine-Leaf optimizes East-West data center flows using ECMP over a two-tier bipartite mesh; Traditional 3-Tier structures campus environments into distinct access, distribution, and core roles for policy control; Collapsed Core merges core and distribution layers for smaller networks to lower cost; WAN Hub-and-Spoke centralizes security and reduces link costs by routing branch-to-branch traffic through a central hub.

Step-by-Step Solution

1
Analyze the structural traffic requirements of modern data center versus campus environments.
Identified that Spine-Leaf designs specifically target East-West (server-to-server) traffic via non-blocking ECMP routing across spine switches.
Data center workloads require low, deterministic latency across leaf switches regardless of physical placement.
2
Evaluate the functional division of campus topologies.
Identified that 3-Tier Campus separates core, distribution, and access, placing policy enforcement at the distribution layer, whereas Collapsed Core merges core and distribution into a single switch pair for smaller footprints.
Merging layers reduces cost in smaller networks, while dedicated tiers scale policy enforcement in larger enterprise networks.
3
Examine wide area network (WAN) deployment topologies.
Identified Hub-and-Spoke as the topology that centralizes policy enforcement and minimizes WAN link costs by routing all branch communications through a central hub.
Full mesh topologies require far more connections, making hub-and-spoke cost-effective when central security inspection is required.

Key Concept

Enterprise Network Topology Architectures and Traffic Flow Characteristics
Estimated Time:1m 30s
Question 156Question

Match each Cisco Wireless LAN Controller (WLC) physical or logical interface to its primary operational role and management connectivity requirement.

Click a left item, then click its matching right item

Items

Service Port Interface
Management Interface
Virtual Interface
Dynamic Interface

Matches

Show answer & explanation

Answer

Service Port Interface pairs with out-of-band management over a separate routing table. Management Interface pairs with in-band WLC administration, CAPWAP tunnel termination, and RADIUS. Virtual Interface pairs with web authentication redirection, DHCP relay proxying, and mobility. Dynamic Interface pairs with mapping WLAN SSIDs to 802.1Q VLAN trunks.
Each Cisco WLC interface has a distinct role: Service Port provides out-of-band access via an isolated routing table; Management Interface manages in-band CAPWAP tunnels, GUI/SSH access, and AAA; Virtual Interface handles web authentication redirects using a non-routable IP address; and Dynamic Interfaces map SSIDs to enterprise switchport VLANs.

Step-by-Step Solution

1
Identify out-of-band management capabilities
Match Service Port Interface to out-of-band access
The Service Port is physically separated from data ports and resides in an isolated management network routing table.
2
Identify in-band controller administration and AP CAPWAP termination interface
Match Management Interface to in-band administrative operations and CAPWAP tunnel endpoint functions
Lightweight APs discover and establish CAPWAP management tunnels to the controller's Management Interface IP address.
3
Determine the interface responsible for web redirection and mobility signaling
Match Virtual Interface to web auth redirection and relay proxying
The Virtual Interface uses an internal non-routable IP address to handle Layer 3 guest web portal redirects.
4
Identify data plane mapping for wireless client payload traffic
Match Dynamic Interface to SSID-to-VLAN trunk mapping
Dynamic interfaces bind configured WLANs to specific 802.1Q VLAN tags on distribution switchports.

Key Concept

Cisco WLC Logical and Physical Interface Roles for In-Band and Out-Of-Band Management
Question 157Question

Match each network architectural layer from Cisco 3-Tier Campus and Data Center Spine-Leaf design models to its primary operational responsibility.

Click a left item, then click its matching right item

Items

Core Layer (Campus)
Distribution Layer (Campus)
Access Layer (Campus)
Spine Layer (Data Center)
Leaf Layer (Data Center)

Matches

Show answer & explanation

Answer

Core Layer matches dedicated high-speed switching backbone without filtering; Distribution Layer matches policy-based routing, ACLs, and inter-VLAN boundaries; Access Layer matches end-user endpoint connectivity and PoE; Spine Layer matches high-bandwidth interconnect fabric enabling ECMP; Leaf Layer matches end-host server attachment point connecting to all spine nodes.
In Cisco network designs, every architectural layer performs a specialized function: the Core layer provides uninhibited high-speed packet transport; the Distribution layer handles routing policies, security boundaries, and aggregation; the Access layer provides user device attachment and port security; the Spine layer forms an ECMP-routed backbone in data centers; and the Leaf layer serves as the endpoint attachment interface connecting to all spine switches.

Step-by-Step Solution

1
Analyze campus 3-tier architectural responsibilities
Core delivers fast transport without inspection, Distribution enforces policy boundaries and routing, and Access connects edge endpoints.
Campus designs enforce modular separation between edge attachment, policy enforcement, and backbone forwarding.
2
Analyze data center spine-leaf architectural responsibilities
Spine switches form the non-blocking interconnect matrix for ECMP routing, while Leaf switches host server attachments and uplink to every spine switch.
Spine-leaf architectures optimize predictable East-West traffic latency across cloud workloads.
3
Map each architectural layer to its corresponding operational profile
All 5 architectural layers are accurately paired with their functional definitions.
Aligns strictly with Cisco design fundamentals.

Key Concept

Cisco 3-Tier Campus and Data Center Spine-Leaf Functional Layer Responsibilities
Estimated Time:1m 30s
Question 158Question

Match each transport layer operational characteristic or application scenario on the left with its corresponding transport protocol classification on the right.

Click a left item, then click its matching right item

Items

20-byte base header overhead using sequence and acknowledgment numbers for stateful data delivery
8-byte fixed header overhead using a simple checksum field for connectionless data delivery
DHCP client and server broadcast communications operating across destination ports 67 and 68
HTTPS encrypted web sessions requiring ordered, lossless stream transport across port 443

Matches

Show answer & explanation

Answer

The 20-byte base header with sequence numbers matches TCP Operational Characteristic. The 8-byte fixed header matches UDP Operational Characteristic. DHCP on ports 67/68 matches UDP-Based Application Protocol. HTTPS on port 443 matches TCP-Based Application Protocol.
TCP provides connection-oriented, reliable transmission using a 20-byte base header equipped with sequence numbers, which web applications like HTTPS (port 443) depend on. UDP provides connectionless, unacknowledged delivery using an 8-byte header, making it optimal for bootstrap protocols like DHCP (ports 67/68).

Step-by-Step Solution

1
Evaluate transport layer header structures and connection state tracking.
Recognize that a 20-byte base header with sequence and acknowledgment fields belongs to TCP, whereas an 8-byte fixed header with minimal overhead belongs to UDP.
TCP requires additional fields for state tracking and error recovery, whereas UDP omits connection tracking fields to reduce latency.
2
Classify upper-layer protocols by transport requirements and port assignments.
Associate DHCP (ports 67/68) with UDP due to its reliance on unacknowledged local network broadcasts, and associate HTTPS (port 443) with TCP due to its requirement for reliable stream delivery during TLS sessions.
Application protocols requiring high efficiency or initial broadcast bootstrap use UDP, while those requiring complete, ordered data delivery use TCP.

Key Concept

TCP vs UDP header structure, operational statefulness, and well-known application mapping
Question 159Question

A network administrator is organizing interface roles on a standalone Cisco Wireless LAN Controller (WLC) to support enterprise network access operations. Match each WLC logical or physical interface type on the left with its primary operational function on the right.

Click a left item, then click its matching right item

Items

Service Port
Management Interface
Virtual Interface
Dynamic Interface

Matches

Show answer & explanation

Answer

Service Port matches the out-of-band management connection; Management Interface matches in-band CAPWAP termination and administrative access; Virtual Interface matches internal web authentication and mobility services; Dynamic Interface matches WLAN-to-VLAN client data traffic mapping.
Each WLC interface fulfills a specific role in Cisco unified wireless architecture: the Service Port handles out-of-band management; the Management Interface processes in-band CAPWAP tunnels and admin access; the Virtual Interface manages internal features like WebAuth and DHCP proxying; and Dynamic Interfaces handle user data traffic segmentation on trunked VLANs.

Step-by-Step Solution

1
Identify out-of-band administration interface.
The Service Port is physical, un-routed via distribution ports, and dedicated exclusively to out-of-band management access.
Out-of-band management provides isolated administrative control during production network disruptions.
2
Identify in-band CAPWAP and administrative access interface.
The Management Interface handles CAPWAP control and data tunnels from APs alongside administrative GUI/SSH access.
This interface requires a routable IP address and default gateway within the distribution network.
3
Identify internal service and redirection logical interface.
The Virtual Interface supports web auth redirection, DHCP relay, and mobility communication using a non-routable dummy IP.
It does not route traffic directly to the physical network but manages internal controller-to-client operations.
4
Identify client payload routing interface.
Dynamic Interfaces function as logical sub-interfaces mapped to 802.1Q trunk VLANs for client wireless traffic.
They segment wireless client traffic onto corresponding wired enterprise VLANs.

Key Concept

Cisco WLC Physical and Logical Interface Functions
Question 160Question

Match each Cisco Wireless LAN Controller (WLC) interface to its primary functional role and operational requirement.

Click a left item, then click its matching right item

Items

Service Port Interface
Management Interface
Virtual Interface
Dynamic Interface

Matches

Show answer & explanation

Answer

Service Port Interface matches with providing isolated out-of-band management access using an independent routing table; Management Interface matches with serving as the primary in-band Layer 3 interface for CAPWAP management tunnels and administration; Virtual Interface matches with supporting non-routable Layer 3 operations such as web authentication redirection and DHCP relay; Dynamic Interface matches with binding specific Wireless LANs to backend 802.1Q VLANs.
Each WLC interface has a distinct architectural purpose: the Service Port provides dedicated out-of-band administration with its own routing table; the Management Interface manages in-band CAPWAP tunnels and controller management; the Virtual Interface handles non-routable client redirection and DHCP relay; and Dynamic Interfaces map SSIDs to backend wired VLANs.

Step-by-Step Solution

1
Analyze out-of-band management requirements on Cisco WLC platforms.
Identify that the Service Port Interface provides physical out-of-band (OOB) administrative connectivity and uses a dedicated, isolated routing table separate from the data plane.
Out-of-band ports must remain reachable independently of distribution port trunking or Layer 2/Layer 3 data network status.
2
Evaluate in-band controller control plane and tunnel termination requirements.
Identify that the Management Interface is responsible for handling CAPWAP tunnel termination from Lightweight APs, mobility control messaging, and in-band HTTPS/SSH sessions.
The Management Interface resides on distribution system ports connected to the main enterprise switched network.
3
Examine internal logical client-facing helper services.
Identify the Virtual Interface as the non-routable interface handling guest web portal redirection (web auth) and wireless client DHCP relay processing.
The Virtual Interface IP address is never advertised or routed across the enterprise network infrastructure.
4
Determine how wireless user payloads are segregated across the wired infrastructure.
Identify Dynamic Interfaces as the logical mappings between WLAN SSIDs and destination 802.1Q VLAN IDs.
Dynamic interfaces act similarly to router subinterfaces to segregate user traffic into distinct Layer 2 broadcast domains.

Key Concept

Cisco WLC Logical and Physical Interface Architecture
PreviousPage 8 / 12Next
All practice questions — Cisco CCNA | Examkin