All practice questions

A network security administrator is deploying a site-to-site IPsec VPN tunnel between two corporate edge routers across a private WAN. The security policy requires data confidentiality and integrity for the IP payload. To minimize encapsulation overhead, the design mandates retaining the original IP packet header rather than encapsulating the packet with an additional new IP header. Which IPsec protocol and mode combination fulfills these requirements?

A network administrator is troubleshooting a DHCP relay issue on a Cisco IOS router. Host devices on VLAN 30 ($172.16.30.0/24$) use subinterface GigabitEthernet0/0.30 ($172.16.30.1$) as their default gateway. The centralized DHCP server is located at $10.10.10.50$, connected off router interface GigabitEthernet0/1 ($10.10.10.1$).

Packet captures at the DHCP server reveal that incoming relayed DHCP DISCOVER messages contain a Relay Agent IP Address (`giaddr`) of $10.10.10.1$ instead of $172.16.30.1$. Consequently, the DHCP server fails to assign addresses from the intended $172.16.30.0/24$ pool.

Which router misconfiguration causes the `giaddr` field to be set to $10.10.10.1$?

Which physical security control uses a set of two interlocking doors to directly prevent unauthorized individuals from tailgating into a secure data center facility?

An enterprise network team is replacing standard server deployments with hypervisor-based virtualization. During the architecture review, an engineer explains that Type 1 hypervisors provide superior performance and lower latency for enterprise workloads compared to Type 2 hypervisors. Which architectural feature directly accounts for this performance advantage in Type 1 hypervisors?

A network administrator is deploying a Cisco Lightweight Access Point (AP) connected to a Layer 2 switch port configured as an 802.1Q trunk. The AP is intended to exchange CAPWAP control messages with the Wireless LAN Controller (WLC) management interface over the native VLAN while carrying client traffic on tagged VLANs. Switch syslogs immediately report a 'Native VLAN mismatch' notification on the interface, and the AP fails to join the controller. Which condition explains why management access between the AP and the WLC is failing?

A network administrator is configuring out-of-band management access for a Cisco Wireless LAN Controller (WLC). The administrator connects the WLC Service Port to an isolated management network while connecting the WLC Management Interface to an 802.1Q trunk port on the distribution switch. Which operational characteristic uniquely applies to the Service Port on a Cisco WLC?

Which Cisco Access Point (AP) mode operates by dedicating its radios to capturing wireless traffic and forwarding all raw 802.11 frames over a CAPWAP tunnel to a specified IP address for analysis by packet analyzer software such as Wireshark?

A network administrator is configuring a router interface for IPv6 stateless address autoconfiguration (SLAAC) using EUI-64. The interface is assigned the IPv6 prefix $2001:\text{db8}:\text{cafe}:10::/64$ and has a MAC address of $\text{B4A9.5A12.3456}$. Which complete IPv6 global unicast address will be generated for this interface?

A network administrator is deploying Cisco Lightweight Access Points (APs) operating in Local mode across an enterprise network. The APs must establish CAPWAP tunnels back to a central Wireless LAN Controller (WLC) whose Management interface resides on VLAN 10. The switch ports connected to the APs are configured as access ports assigned to VLAN 20, where an infrastructure DHCP server provides IP addressing along with DHCP Option 43. A junior engineer proposes reconfiguring all AP switch ports as 802.1Q trunk ports with PortFast enabled.

Which statement accurately evaluates this switchport configuration recommendation for Local mode AP access?

A network engineer deploys lightweight Cisco Access Points (APs) across multiple remote branch offices linked via a wide area network (WAN) to a centralized Wireless LAN Controller (WLC) in the main datacentre. During a unexpected WAN outage, wireless users at Branch 1 lose all network access to local site servers, whereas wireless users at Branch 2 continue accessing local network resources uninterrupted. Which configuration difference regarding AP modes and traffic handling accounts for this behavior during the WAN failure?

A network administrator needs to assign interface GigabitEthernet0/4 on a Cisco Catalyst switch to VLAN 25. Which Cisco IOS command must be executed in interface configuration mode to set the active VLAN assignment for this access port?

A network administrator is migrating a medium-sized enterprise campus from a traditional Cisco three-tier architecture (Access, Distribution, Core) to a two-tier collapsed core architecture. Which statement accurately describes the architectural shift in responsibilities resulting from this topology change?

An enterprise deploys Cisco lightweight Access Points (APs) configured in FlexConnect mode at a remote branch location connected via a WAN link to a centralized Wireless LAN Controller (WLC). The branch supports two SSIDs: an Enterprise WLAN configured for local switching with 802.1X (EAP) using FlexConnect Local Authentication, and a Guest WLAN configured for central switching and central authentication. If the WAN connection between the branch APs and the centralized WLC fails, causing the APs to transition to standalone mode, which statement correctly describes the resulting wireless client behavior?

A network technician is configuring a new Wireless LAN on a Cisco Wireless LAN Controller (WLC) using the web interface. The technician has created the WLAN profile, assigned the SSID, and selected the interface mapping under the General tab. However, access points are not broadcasting the new network and wireless clients cannot connect. Which checkbox under the WLANs > Edit 'General' tab must be selected to make the WLAN active and operational?

Refer to the following routing table output from a Cisco router:

Codes: C - connected, S - static, R - RIP, O - OSPF
Gateway of last resort is not set

10.0.0.0/8 is subnetted, 4 subnets
O 10.1.1.0/24 [110/20] via 192.168.1.2, 00:04:12, GigabitEthernet0/0
S 10.1.0.0/16 [1/0] via 192.168.1.1, GigabitEthernet0/1
O 10.1.1.128/25 [110/30] via 192.168.1.3, 00:02:15, GigabitEthernet0/2
S* 0.0.0.0/0 [1/0] via 192.168.1.254

When the router receives a packet destined for host 10.1.1.130, which next-hop IP address will the router use to forward the packet?

Refer to the exhibit displaying an abbreviated routing table for router R1:

text
Gateway of last resort is 192.168.4.1 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 192.168.4.1, Serial0/0/0
S 10.1.1.0/24 [1/0] via 192.168.1.1, GigabitEthernet0/0
D 10.1.1.64/26 [90/307200] via 192.168.2.1, GigabitEthernet0/1
O 10.1.1.64/28 [110/20] via 192.168.3.1, GigabitEthernet0/2

Router R1 receives an IP packet addressed to destination host $10.1.1.67$. Which next-hop IP address and outbound interface will R1 use to forward this packet?

A network administrator configures a Cisco Catalyst switch running Rapid PVST+ with the command `spanning-tree vlan 50 priority 8192`. What total bridge priority value will this switch include in its outgoing Bridge Protocol Data Units (BPDUs) for VLAN 50?

An enterprise router has populated its IPv4 routing table with the following entries:

text
D 10.50.0.0/16 [90/2560512] via 10.1.1.1, 01:12:40, GigabitEthernet0/0
O 10.50.12.0/24 [110/20] via 10.1.1.2, 00:45:12, GigabitEthernet0/1
S 10.50.12.80/28 [1/0] via 10.1.1.3
S 10.50.12.80/29 [250/0] via 10.1.1.4

The router receives a packet with a destination IP address of $10.50.12.85$. Which next-hop IP address will the router select to forward this packet?

A network technician is adding a secondary path on Router-HQ to reach the internal subnet $172.16.40.0/24$. The primary link currently learns this destination via EIGRP with an administrative distance of 90. To ensure the secondary static path through next-hop IP $10.1.1.2$ serves strictly as a backup when the primary link is down, which Cisco IOS command must be configured?

A network administrator needs to establish out-of-band administrative access to a Cisco Wireless LAN Controller (WLC) for system maintenance. The out-of-band management network uses subnet $192.168.100.0/24$, which is completely isolated from production wireless client traffic and general infrastructure VLANs. Which physical interface and configuration method on the WLC should the administrator use to achieve this isolated management connection?