Network Fundamentals

398 questions

Question 181Question

A network administrator is allocating IPv4 addresses for internal workstations on an enterprise LAN. Which of the following IPv4 addresses are reserved for private network use under RFC 1918? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: 10.200.15.1; 172.28.45.10

Answer

The addresses 10.200.15.1 and 172.28.45.10 are reserved private IPv4 addresses under RFC 1918.
The IPv4 address 10.200.15.1 belongs to the 10.0.0.0/8 private address block, and 172.28.45.10 belongs to the 172.16.0.0/12 private address block (which ranges from 172.16.0.0 to 172.31.255.255). Both are valid RFC 1918 private IPv4 addresses.

Step-by-Step Solution

1
Identify the three RFC 1918 private address ranges
Class A: 10.0.0.0/8 (10.0.0.0 - 10.255.255.255), Class B: 172.16.0.0/12 (172.16.0.0 - 172.31.255.255), Class C: 192.168.0.0/16 (192.168.0.0 - 192.168.255.255).
RFC 1918 explicitly defines these three address blocks for private, unroutable network use.
2
Evaluate each candidate address against the RFC 1918 blocks
10.200.15.1 is inside 10.0.0.0/8. 172.28.45.10 is inside 172.16.0.0/12. 172.35.10.50 is outside 172.16.0.0/12 (35 > 31). 192.170.10.1 is outside 192.168.0.0/16 (170 != 168).
Comparing second octets ensures correct boundary verification for Class B and Class C private ranges.

Key Concept

RFC 1918 Private IPv4 Address Ranges
Question 182Question

A network auditing tool generates a report listing IPv4 addresses detected on internal branch office node interfaces. Which of the following IPv4 addresses are compliant with RFC 1918 private IP addressing standards? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: 10.254.1.50; 172.29.40.10

Answer

The IPv4 addresses 10.254.1.50 and 172.29.40.10 are valid RFC 1918 private IPv4 addresses.
The addresses 10.254.1.50 and 172.29.40.10 fit directly inside the RFC 1918 standard private ranges: 10.0.0.0/8 (10.0.0.0 to 10.255.255.255) and 172.16.0.0/12 (172.16.0.0 to 172.31.255.255) respectively.

Step-by-Step Solution

1
Recall the three designated RFC 1918 private IPv4 address ranges.
Class A: 10.0.0.0/8 (10.0.0.0 – 10.255.255.255), Class B: 172.16.0.0/12 (172.16.0.0 – 172.31.255.255), Class C: 192.168.0.0/16 (192.168.0.0 – 192.168.255.255).
Establishing accurate range boundaries is necessary to differentiate private non-routable IPs from public IPs.
2
Evaluate candidate address 10.254.1.50 against the RFC 1918 specifications.
10.254.1.50 begins with 10 in the first octet, making it a valid member of the 10.0.0.0/8 block.
Any IP starting with 10.x.x.x is private under RFC 1918.
3
Evaluate candidate address 172.29.40.10 against the RFC 1918 specifications.
172.29.40.10 has a second octet of 29, which lies within the inclusive 16–31 range for the 172.16.0.0/12 block.
Addresses from 172.16.0.0 through 172.31.255.255 are valid private addresses.
4
Evaluate invalid candidate addresses 172.33.1.1 and 192.169.50.25.
172.33.1.1 falls outside the 172.16–172.31 range, and 192.169.50.25 falls outside the 192.168.0.0/16 range.
Both 172.33.x.x and 192.169.x.x are public IPv4 addresses assigned on the Internet.

Key Concept

RFC 1918 Private IPv4 Address Scope
Question 183Question

A network engineer is analyzing application traffic across an enterprise WAN link between a real-time voice streaming service and a critical transactional database connection. Which two operational characteristics accurately distinguish User Datagram Protocol (UDP) from Transmission Control Protocol (TCP) in this scenario? (Select two.)

Select all that apply

Show answer & explanation

Answer: UDP operates with a fixed 8-byte header structure and omits delivery acknowledgments, minimizing processing latency for real-time traffic.; TCP maintains stateful connection tracking using a baseline 20-byte header that incorporates sequence numbers, acknowledgment numbers, and dynamic windowing controls.

Answer

UDP provides a low-overhead, connectionless service with an 8-byte header without acknowledgments, whereas TCP provides a stateful, connection-oriented service with a 20-byte baseline header supporting sequence tracking, acknowledgments, and flow control.
The correct statements correctly identify that UDP utilizes a streamlined 8-byte header without delivery acknowledgments to minimize real-time latency, whereas TCP utilizes a 20-byte baseline header containing sequence numbers, acknowledgment numbers, and dynamic windowing to ensure connection-oriented reliability and flow control.

Step-by-Step Solution

1
Analyze Transport Layer header overhead for each protocol.
UDP uses a streamlined 8-byte header consisting of 4 fields (Source Port, Destination Port, Length, Checksum), while TCP requires at least a 20-byte header to accommodate stateful connection controls.
Header size directly impacts per-packet transport overhead and throughput latency.
2
Evaluate reliability and flow control mechanics.
TCP provides flow control via dynamic windowing and reliable delivery via sequence and acknowledgment numbers. UDP provides no native flow control, sequencing, or retransmission mechanisms.
Distinguishing stateful connection-oriented mechanics from stateless connectionless operation is essential for application protocol selection.

Key Concept

TCP vs UDP Header Fields and Operational Characteristics
Question 184Question

A network administrator is troubleshooting a router interface that fails to forward traffic. The administrator issues the command `show interfaces gigabitethernet 0/1` and observes the following output status line:

`GigabitEthernet0/1 is administratively down, line protocol is down`

Which action must be taken to enable this interface?

Show answer & explanation

Answer: Execute the `no shutdown` command in interface configuration mode.

Answer

Execute the `no shutdown` command in interface configuration mode.
The state 'administratively down' always indicates that the administrator disabled the interface via configuration (`shutdown`). Executing `no shutdown` in interface configuration mode is the direct fix required to enable the port.

Step-by-Step Solution

1
Analyze the output of `show interfaces gigabitethernet 0/1`.
The physical layer status reports 'administratively down'.
In Cisco IOS, 'administratively down' explicitly indicates an administrative configuration state where the `shutdown` command is present under the interface.
2
Determine the required CLI command to change the administrative state.
Navigating to interface configuration mode (`config-if`) and entering `no shutdown` removes the shutdown state.
The `no shutdown` command administratively enables the interface, allowing it to transition to an operational status.

Key Concept

Interface Administrative Status vs. Physical/Line Protocol States
Estimated Time:45s
Question 185Question

A system administrator is setting up an internal application server and needs to assign an IPv4 address from the RFC 1918 Class B private address space. Which of the following IPv4 addresses is a valid private IP address within this Class B block?

Show answer & explanation

Answer: 172.20.15.5

Answer

172.20.15.5 is a valid RFC 1918 Class B private IPv4 address.
RFC 1918 defines the Class B private IPv4 space as 172.16.0.0 to 172.31.255.255 (172.16.0.0/12). The address 172.20.15.5 falls directly inside this range because its second octet (20) is within the 16–31 boundary.

Step-by-Step Solution

1
Identify the RFC 1918 Class B private IPv4 address block boundaries.
The Class B private address range is 172.16.0.0 to 172.31.255.255 (with a /12 prefix length).
RFC 1918 reserves specific IPv4 address spaces for internal, non-globally routable enterprise networks.
2
Evaluate the candidate IPv4 addresses against the Class B boundary range.
172.20.15.5 has a second octet value of 20, which lies inclusively between 16 and 31.
Any IP address starting with 172.16.x.x through 172.31.x.x is part of the RFC 1918 Class B private allocation.

Key Concept

RFC 1918 Private IPv4 Addressing
Question 186Question

A network administrator is troubleshooting poor throughput on a switch port connected to a server. Running the show interfaces command reveals a rapidly incrementing counter for cyclic redundancy check (CRC) errors alongside late collisions. Which TWO issues are the most likely root causes of these interface statistics? (Select two.)

Select all that apply

Show answer & explanation

Answer: A duplex mismatch between the switch port and the connected server interface.; Physical layer noise or damage on the copper Ethernet cable connection.

Answer

The most likely root causes are a duplex mismatch between the switch port and the connected device, and physical layer noise or damage on the Ethernet cable connection.
Late collisions typically indicate a duplex mismatch where one end operates in full-duplex mode while the other operates in half-duplex mode. CRC errors indicate corrupted frames resulting from electrical interference, loose connectors, bad cable shielding, or damaged media.

Step-by-Step Solution

1
Analyze the reported interface error counters (CRC errors and late collisions).
Identify that late collisions occur when collisions are detected after the first 64 bytes of a frame have been transmitted, while CRC errors indicate frame corruption during transit.
Understanding what layer these counters operate on isolates the issue to Layer 1 (physical) and Layer 2 (data link speed/duplex negotiation).
2
Evaluate potential causes for late collisions.
A duplex mismatch (one side set to full-duplex and the other to half-duplex) causes the half-duplex side to transmit while receiving data, generating late collisions.
Late collisions are classic symptoms of duplex mismatches or excessive cable lengths exceeding maximum Ethernet distance standards.
3
Evaluate potential causes for CRC (Cyclic Redundancy Check) errors.
CRC errors occur when the checksum computed by the receiving interface does not match the checksum frame check sequence (FCS) sent by the transmitter, typical of faulty cabling or bad connectors.
Physical medium flaws cause electrical noise and flipped bits during frame transmission.

Key Concept

Interface Error Statistics & Duplex Mismatches
Question 187Question

Which TWO 802.11 frame sub-types are categorized as Management frames in a Wi-Fi network? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Beacon; Authentication

Answer

Beacon and Authentication frames are classified as 802.11 Management frames.
Beacon and Authentication frames are 802.11 Management frames. Beacon frames broadcast BSSID and network capabilities to discovery clients, while Authentication frames initiate client joining procedures.

Step-by-Step Solution

1
Categorize 802.11 frame types into Management, Control, and Data.
Management frames handle join/leave functions (Beacon, Probe, Authentication, Association). Control frames assist in data delivery (RTS, CTS, ACK).
802.11 defines three primary frame classes to govern media access and network membership.
2
Identify the Management frames from the listed options.
Beacon and Authentication are Management frames, whereas RTS, CTS, and ACK are Control frames.
Beacon frames advertise WLAN parameters, while Authentication frames handle client access validation.

Key Concept

802.11 Wireless Frame Types (Management vs Control vs Data)
Question 188Question

An enterprise network architect is reviewing packet forwarding behaviors and isolation boundaries across a hybrid campus and data center environment containing bare-metal hypervisors, Layer 3 distribution switches, Next-Generation Firewalls (NGFWs), and centralized Wireless LAN Controllers (WLCs). Which TWO operational characteristics accurately describe the roles and functions of these network components? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: A virtual switch embedded within a Type 1 hypervisor forwards Layer 2 frames between co-located virtual machines on the same physical host without sending traffic out through physical network interface cards.; A Next-Generation Firewall operates as a stateful security gateway that maintains flow state tables to inspect both initial connection establishment packets and subsequent session traffic across trust zones.

Answer

The correct operational characteristics are that virtual switches in Type 1 hypervisors process frame switching locally between co-located virtual machines, and Next-Generation Firewalls maintain stateful connection tables to evaluate session flows across network security boundaries.
The statements describing local VM frame forwarding inside a Type 1 hypervisor virtual switch and stateful session tracking by Next-Generation Firewalls are correct. Virtual switches handle intra-host Layer 2 communication in memory without sending frames out through physical network interface cards. Next-Generation Firewalls maintain state tables for connected sessions to inspect both initial handshakes and subsequent payload data.

Step-by-Step Solution

1
Analyze the operational role of Type 1 hypervisor virtual switches.
Recognize that internal vSwitches handle Layer 2 switching between VMs residing on the same physical hardware within memory, avoiding unnecessary physical interface overhead.
Hypervisor architectures include software-based Layer 2 forwarding constructs to optimize intra-host communication.
2
Evaluate the stateful inspection mechanism of NGFW security components.
Confirm that stateful firewalls track protocol session states across interfaces, allowing return traffic automatically while enforcing policy rules on deep packet payloads.
Firewalls function beyond basic Layer 3/4 filtering by keeping state tables for active connections.
3
Examine common misconceptions regarding broadcast domain boundaries and WLC operating modes.
Identify that unmanaged Layer 2 switches do not break broadcast domains, and Local mode APs tunnel client traffic centrally to WLCs rather than utilizing Type 2 hypervisors.
Routers and VLAN boundaries separate broadcast domains, while Local mode APs rely on centralized CAPWAP datapath encapsulation.

Key Concept

Operational roles of virtual switches, NGFWs, Layer 2 boundaries, and centralized WLCs in enterprise architectures
Estimated Time:2m 0s
Question 189Question

A network technician needs to connect multiple endpoint devices in a local office environment. The operational requirement dictates that each connected device must reside in its own dedicated collision domain while all devices remain within a single, shared broadcast domain for local communication. Which network component fulfills this primary role?

Show answer & explanation

Answer: Layer 2 switch

Answer

Layer 2 switch
A Layer 2 switch provides microsegmentation, placing every connected port into its own individual collision domain. However, unless VLANs are configured, all switch ports reside within a single broadcast domain, allowing broadcast frames to reach all connected endpoints.

Step-by-Step Solution

1
Identify collision domain capabilities
Each microsegmented port on a Layer 2 switch forms its own distinct collision domain.
Switches buffer frames per port and support full-duplex operation, eliminating collisions between endpoints.
2
Identify broadcast domain capabilities
By default, all ports on an unconfigured Layer 2 switch belong to the same broadcast domain.
Switches flood Layer 2 broadcast frames out all active ports except the receiving port within the same VLAN.

Key Concept

Layer 2 Switch Domain Boundaries
Estimated Time:45s
Question 190Question

An enterprise network engineer is reviewing the functional boundaries of network components deployed at a branch office. The topology includes Layer 2 access switches, a Layer 3 distribution switch acting as the Inter-VLAN routing gateway, and a perimeter router. Which two functions are performed by Layer 3 switches or routers, but are NOT supported on standard Layer 2 switches? (Choose two.)

Select all that apply

Show answer & explanation

Answer: Forwarding traffic between different IPv4 subnets using IP header destination addresses; Containing broadcast traffic to specific VLANs by acting as default gateways for routed subnets

Answer

The functions performed exclusively by Layer 3 switches or routers are forwarding traffic between different IPv4 subnets based on destination IP addresses and containing broadcast domains by acting as default gateways.
Layer 3 switches and routers operate at Layer 3 of the OSI model, allowing them to inspect destination IP addresses to route packets between distinct subnets and restrict broadcast traffic from crossing subnets. Standard Layer 2 switches only forward frames within a single VLAN based on Layer 2 MAC addresses.

Step-by-Step Solution

1
Analyze the operational capabilities of standard Layer 2 switches
Layer 2 switches make forwarding decisions based on Layer 2 MAC addresses within a single broadcast domain/subnet and separate collision domains per port.
Layer 2 switches lack routing logic and routing tables needed to forward packets across different subnets.
2
Analyze the operational capabilities of Layer 3 switches and routers
Layer 3 switches and routers inspect Layer 3 IP headers to route packets between subnets and define broadcast domain boundaries.
Broadcast frames are not forwarded past Layer 3 boundaries (routers/L3 interfaces), isolating broadcast domains.
3
Compare capabilities and identify unique Layer 3 functions
Inter-subnet routing based on IP destination addresses and broadcast domain isolation are Layer 3 routing functions.
Collision domain isolation is accomplished by both Layer 2 and Layer 3 switches on every port.

Key Concept

Distinguishing Layer 2 switching capabilities (MAC addressing, collision domain segmentation) from Layer 3 routing capabilities (IP addressing, inter-subnet forwarding, broadcast domain segmentation).
Estimated Time:1m 30s
Question 191Question

A network engineer is optimizing a high-density 5 GHz wireless deployment in a large corporate conference hall. During testing, wireless clients experience significant performance degradation and latency due to co-channel interference (CCI) caused by adjacent access points operating on overlapping RF cells using the same 20 MHz channels. The engineer must reduce CCI while keeping all access points active to handle client capacity. Which action on the Wireless LAN Controller (WLC) directly resolves this issue?

Show answer & explanation

Answer: Decrease the Transmit Power Control (TPC) maximum power threshold on the WLC to shrink the RF cell size of each access point.

Answer

Decrease the Transmit Power Control (TPC) maximum power threshold on the WLC to shrink the RF cell size of each access point.
Decreasing the Transmit Power Control (TPC) maximum power limit forces the Wireless LAN Controller to restrict the output power of individual AP radios. This reduces each AP's RF coverage cell radius, minimizing signal overlap with neighboring APs on the same channel and reducing co-channel interference (CCI) in high-density environments.

Step-by-Step Solution

1
Analyze the primary cause of wireless performance degradation in high-density environments.
Co-channel interference (CCI) occurs when multiple access points using the same frequency channel are located close enough for their RF coverage cells to overlap, forcing clients and APs to wait for the medium to clear.
Wi-Fi uses CSMA/CA, so APs on the same channel share contention domains if they hear each other above the clear channel assessment threshold.
2
Evaluate how Transmit Power Control (TPC) affects RF cell boundaries and co-channel overlap.
Lowering the maximum allowed transmit power via TPC shrinks the physical RF cell boundary of each AP.
Smaller RF cell footprints reduce the coverage overlap between APs operating on identical channels while preserving total network capacity through dense AP placement.
3
Identify why alternative configuration options fail to mitigate CCI.
Channel bonding decreases the total count of non-overlapping channels, FlexConnect affects traffic switching rather than RRM calculations, and lowering basic rates increases cell size and management overhead.
Only TPC power reduction directly curtails the physical reach of the RF signal causing CCI.

Key Concept

Wireless Radio Resource Management (RRM) and Co-Channel Interference (CCI) mitigation in high-density WLAN deployments.
Question 192Question

An enterprise server administrator is investigating severe packet delay and high CPU scheduling contention affecting virtual machines during peak traffic periods. Inspection reveals that the virtualization environment operates on top of a standard Linux distribution host operating system, requiring the virtual switch to pass frame processing requests through the host OS kernel and physical device drivers. Which architectural migration eliminates host operating system overhead by allowing the hypervisor to directly schedule hardware resources and manage physical network interfaces?

Show answer & explanation

Answer: Deploying a Type 1 bare-metal hypervisor directly on the underlying server hardware.

Answer

Deploying a Type 1 bare-metal hypervisor directly on the underlying server hardware resolves host operating system overhead.
Migrating to a Type 1 (bare-metal) hypervisor places the hypervisor software directly on the server hardware. This removes the host operating system layer completely, allowing the hypervisor's virtual switch to interact directly with physical hardware NIC drivers and CPU schedulers for maximum throughput and minimum latency.

Step-by-Step Solution

1
Analyze the existing virtualization platform architecture.
Identified that the current environment uses a Type 2 (hosted) hypervisor running on top of a general-purpose host OS (Linux).
Type 2 hypervisors depend on the underlying host OS to manage hardware access, CPU scheduling, and physical device drivers, creating network latency and processing bottlenecks.
2
Identify the hypervisor architecture designed for bare-metal hardware control.
A Type 1 (bare-metal) hypervisor runs directly on physical hardware without requiring a separate host operating system.
Type 1 hypervisors incorporate lightweight management kernels that handle CPU, memory, and physical network interface scheduling directly, yielding higher efficiency and lower latency.
3
Select the appropriate migration path.
Migrating to a Type 1 hypervisor architecture removes the host OS layer entirely.
Direct access to physical hardware drivers and integrated virtual switching inside a Type 1 hypervisor eliminates kernel-level context switching between host OS and hypervisor.

Key Concept

Type 1 vs Type 2 Hypervisor Architecture
Estimated Time:1m 30s
Question 193Question

An administrator is documenting the 802.11 wireless architecture for a corporate office. Which identifier uniquely distinguishes a specific Basic Service Set (BSS) operating on an access point radio at the Layer 2 data link layer?

Show answer & explanation

Answer: The MAC address of the access point's radio interface (BSSID)

Answer

The MAC address of the access point's radio interface (BSSID) uniquely identifies a specific Basic Service Set (BSS).
The correct answer identifies the Basic Service Set Identifier (BSSID), which is the 48-bit MAC address of the access point radio serving a specific wireless cell (BSS). In 802.11 networks, this hardware address uniquely distinguishes frame traffic sent to or from that particular radio.

Step-by-Step Solution

1
Identify the standard 802.11 terminology for wireless service sets and their unique identifiers.
A Basic Service Set (BSS) consists of a single access point radio and its associated clients.
Understanding the fundamental building blocks of Wi-Fi coverage cells is necessary for network identification.
2
Determine which parameter acts as the Layer 2 hardware address for a BSS.
The Basic Service Set Identifier (BSSID) is used at Layer 2 and corresponds directly to the 48-bit MAC address of the AP radio servicing that BSS.
Wireless client frames use the BSSID MAC address in 802.11 frame headers to target a specific AP radio.

Key Concept

Basic Service Set Identifier (BSSID) in 802.11 Wireless Architecture
Estimated Time:45s
Question 194Question

A network administrator is configuring SLAAC on a router interface for a host with the MAC address `0012.3456.789A`. What is the 64-bit interface identifier generated using the EUI-64 process?

Show answer & explanation

Answer: 0212:34ff:fe56:789a

Answer

The correct interface identifier is 0212:34ff:fe56:789a.
The EUI-64 calculation process requires splitting the 48-bit MAC address (00:12:34:56:78:9A) into two equal halves, inserting FFFE in the middle (0012:34FF:FE56:789A), and flipping the 7th bit of the first byte (00000000 becomes 00000010, or 02 in hex). This yields 0212:34ff:fe56:789a.

Step-by-Step Solution

1
Split the 48-bit MAC address into two 24-bit halves.
Left half: 00:12:34, Right half: 56:78:9A
EUI-64 requires inserting a 16-bit payload between the Organizationally Unique Identifier (OUI) and the NIC-specific portion.
2
Insert FFFE between the two halves.
00:12:34:FF:FE:56:78:9A
This expands the 48-bit MAC address into a 64-bit value.
3
Invert the 7th bit (Universal/Local bit) of the first byte.
First byte 00 (00000000 in binary) becomes 02 (00000010 in binary). Resulting string: 02:12:34:FF:FE:56:78:9A
Inverting the 7th bit indicates that the address is globally unique.
4
Format the resulting 64-bit value into four 16-bit IPv6 hextets.
0212:34ff:fe56:789a
Standard IPv6 address notation groups 16-bit blocks separated by colons.

Key Concept

EUI-64 Interface Identifier Generation
Estimated Time:45s
Question 195Question

Match each enterprise network infrastructure component on the left with its primary operational role on the right.

Click a left item, then click its matching right item

Items

Router
Layer 2 Switch
Next-Generation Firewall (NGFW)
Wireless LAN Controller (WLC)

Matches

Show answer & explanation

Answer

Router connects distinct IP subnets using routing tables; Layer 2 Switch forwards local frames based on MAC addresses; Next-Generation Firewall performs deep packet inspection up to Layer 7; Wireless LAN Controller centrally manages lightweight access points.
Each network device performs a specialized role within an enterprise architecture: Routers route IP packets across subnets, Layer 2 Switches switch local Ethernet frames using MAC addresses, Next-Generation Firewalls inspect application payload data for security, and Wireless LAN Controllers centralize management for lightweight APs.

Step-by-Step Solution

1
Identify the primary role of a Router.
Routers operate at Layer 3 and forward packets between different IP networks and subnets based on destination IP address routing decisions.
Connecting separate networks and determining path selection is the fundamental function of a router.
2
Identify the primary role of a Layer 2 Switch.
Layer 2 switches maintain a MAC address table to switch frames within a single local network/VLAN.
Layer 2 switches isolate collision domains but operate entirely within one broadcast domain.
3
Identify the primary role of a Next-Generation Firewall (NGFW).
NGFWs analyze traffic context and application content from Layer 4 up through Layer 7 to enforce security controls.
Deep packet inspection and application awareness distinguish NGFWs from standard stateful firewalls.
4
Identify the primary role of a Wireless LAN Controller (WLC).
WLCs act as the centralized intelligence hub to manage configuration, security policies, and radio frequencies for lightweight APs.
Split-MAC architectures offload management tasks from APs to the controller.

Key Concept

Primary operational roles of core network components
Question 196Question

A network engineer is analyzing physical radio frequency (RF) propagation behaviors in an enterprise campus facility. Match each RF propagation phenomenon on the left with its corresponding physical behavior or operational impact on the right.

Click a left item, then click its matching right item

Items

Absorption
Reflection
Refraction
Diffraction

Matches

Show answer & explanation

Answer

Absorption pairs with RF energy conversion into heat within dense materials; Reflection pairs with signal bouncing off smooth conductive surfaces; Refraction pairs with wave bending across changing media densities; Diffraction pairs with wave bending around sharp edges of solid obstacles.
Each RF propagation phenomenon describes a distinct physical interaction between wireless signals and environmental structures. Absorption dissipates signal power as heat through materials; Reflection bounces waves off smooth conductive barriers; Refraction bends light and radio waves across atmospheric or density gradients; Diffraction curves waves around sharp obstacle borders.

Step-by-Step Solution

1
Identify the characteristic of RF Absorption.
Absorption relates directly to energy loss converted into heat within dense physical obstacles like walls.
Dense matter absorbs RF energy, causing direct attenuation.
2
Identify the characteristic of RF Reflection.
Reflection involves RF signals bouncing off large, smooth metallic surfaces.
Conductive surfaces reflect electromagnetic waves, leading to multipath signal paths.
3
Identify the characteristic of RF Refraction.
Refraction describes signal bending caused by variations in propagation media density.
Velocity changes across media boundaries shift the phase and angle of the wave.
4
Identify the characteristic of RF Diffraction.
Diffraction describes signal bending around sharp physical corners or through small openings.
Obstacle edges split and distort the wavefront, creating shadow areas behind the obstacle.

Key Concept

RF Propagation Phenomena and Signal Impairments
Question 197Question

An enterprise network architecture incorporates multiple specialized physical and virtual components across campus, data center, and edge segments. Match each network component on the left to its primary operational function and forwarding behavior on the right.

Click a left item, then click its matching right item

Items

Next-Generation Firewall (NGFW)
Type 1 Bare-Metal Hypervisor
Wireless LAN Controller (WLC)
Layer 3 Switch

Matches

Show answer & explanation

Answer

Next-Generation Firewall (NGFW) matches deep packet inspection up to Layer 7 stateful security enforcement. Type 1 Bare-Metal Hypervisor matches direct hardware execution for managing virtual machines and vSwitches. Wireless LAN Controller (WLC) matches centralized control-plane and dynamic RF management for lightweight APs. Layer 3 Switch matches ASIC-driven, wire-speed inter-VLAN hardware routing.
Each component is accurately paired with its architectural plane and operational behavior: Next-Generation Firewalls handle stateful Layer 7 security inspection; Type 1 Hypervisors execute on bare metal to manage compute virtualization and vSwitches; Wireless LAN Controllers centralize control-plane RF and policy administration for APs; and Layer 3 Switches perform ASIC-accelerated inter-VLAN packet routing at line rate.

Step-by-Step Solution

1
Analyze the functional boundaries of security appliances.
Identify that Next-Generation Firewalls perform stateful inspection and Layer 7 application inspection rather than basic packet switching.
Security components operate on security zone boundaries to filter traffic based on application signature and state.
2
Distinguish host virtualization architecture from traditional operating systems.
Map the Type 1 hypervisor directly to bare hardware management and internal vSwitch forwarding.
Type 1 hypervisors execute without an underlying host OS, managing compute and virtual network resources directly.
3
Examine wireless centralized control architecture.
Associate the Wireless LAN Controller with centralized control plane tasks, dynamic RF management, and provisioning for lightweight APs.
Split-MAC architecture delegates real-time frame handling to lightweight APs while offloading management and control functions to the WLC.
4
Evaluate LAN routing hardware mechanics.
Connect the Layer 3 switch with ASIC-accelerated inter-VLAN routing.
Layer 3 switches utilize hardware ASICs to route packets between VLANs at line rate with significantly lower latency than software-based routers.

Key Concept

Enterprise Network Component Roles and Functional Boundaries
Question 198Question

Match each Cisco Split-MAC architecture component or CAPWAP feature on the left with its primary function or operational characteristic on the right.

Click a left item, then click its matching right item

Items

Lightweight Access Point (LAP)
Wireless LAN Controller (WLC)
CAPWAP Control Tunnel
CAPWAP Data Tunnel

Matches

Show answer & explanation

Answer

Lightweight Access Point (LAP) matches with handling real-time MAC functions like beacons and probe responses. Wireless LAN Controller (WLC) matches with handling management MAC functions like client authentication and association. CAPWAP Control Tunnel matches with exchanging encrypted management messages over UDP port 5246. CAPWAP Data Tunnel matches with carrying client data traffic over UDP port 5247.
Each component correctly pairs with its role in Cisco centralized wireless deployment: LAPs handle real-time RF MAC duties locally; WLCs handle management MAC functions centrally; CAPWAP Control operates on UDP port 5246 with DTLS encryption; and CAPWAP Data carries client payload packets over UDP port 5247.

Step-by-Step Solution

1
Identify the responsibilities assigned to the Lightweight Access Point (LAP) under Cisco Split-MAC architecture.
Real-time operations directly affecting radio hardware (such as beaconing, probe responses, and MAC layer encryption/decryption) are processed locally by the LAP.
Real-time MAC tasks require microsecond latency, making transmission across a WAN or LAN to a central WLC impractical.
2
Identify the responsibilities assigned to the Wireless LAN Controller (WLC).
Management and control plane tasks (such as 802.11 authentication, association handling, frame translation, and quality of service policy enforcement) are processed centrally by the WLC.
Centralizing management MAC tasks simplifies policy enforcement and wireless network administration across multiple APs.
3
Differentiate between CAPWAP Control and CAPWAP Data transport characteristics.
Control traffic uses UDP port 5246 (secured with DTLS), while Data traffic uses UDP port 5247.
Separating control and data plane transport protocols allows independent security, QoS, and routing mechanisms for management versus client payload traffic.

Key Concept

Cisco Split-MAC Architecture and CAPWAP Protocols
Estimated Time:1m 30s
Question 199Question

A Cisco Catalyst switch with an initially empty MAC address table receives an Ethernet frame on ingress port FastEthernet0/1. The frame originates from Host A (MAC address 00A1.1111.AAAA) and is addressed to Host B (MAC address 00B2.2222.BBBB) on VLAN 10. In what chronological sequence does the Layer 2 switch execute internal processing steps from frame ingress to frame egress?

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct chronological sequence is: 1) Parse ingress frame for MAC addresses, 2) Learn source MAC and map to ingress port, 3) Lookup destination MAC in table, 4) Identify destination as unknown unicast, 5) Flood frame out all VLAN ports except ingress port.
When a Layer 2 switch receives an Ethernet frame on an ingress interface, it processes the frame in a specific order: first, it parses the L2 header; second, it reads the source MAC address and updates/populates its MAC address table (CAM table); third, it looks up the destination MAC address; fourth, if the destination is missing from the CAM table, it classifies it as an unknown unicast; fifth, it floods the frame out all active ports assigned to that VLAN except the receiving port.

Step-by-Step Solution

1
Receive and ingress-parse frame
Identified Source MAC: 00A1.1111.AAAA, Destination MAC: 00B2.2222.BBBB, Ingress Port: Fa0/1, VLAN: 10.
The switch ASIC must inspect the Layer 2 Ethernet header preamble and fields first.
2
Source MAC Learning
MAC table entry updated with [VLAN 10 | 00A1.1111.AAAA | Dynamic | Fa0/1].
Layer 2 switches always learn source MAC addresses before determining egress forwarding.
3
Destination MAC Lookup
Query for 00B2.2222.BBBB yields no matching entry in VLAN 10 CAM table.
Switch determines whether to perform known unicast forwarding or unknown unicast flooding.
4
Classification of Traffic
Traffic categorized as unknown unicast.
A table miss forces the switch to default to broadcast-like flooding behavior within Layer 2 bounds.
5
Egress Frame Flooding
Frame replicated to all operational VLAN 10 ports, suppressing Fa0/1.
Split-horizon rule prevents sending a frame back out the interface from which it was received.

Key Concept

Layer 2 MAC Address Table Operation and Ingress/Egress Forwarding Pipeline
Question 200Question

Match each IPv6 address, prefix, or protocol scenario on the left with its corresponding IPv6 address representation or reserved prefix range on the right.

Click a left item, then click its matching right item

Items

The dynamically generated IPv6 link-local address for an interface with MAC address `00:1A:2B:3C:4D:5E` using EUI-64
The IPv6 prefix block defined by RFC 4193 for locally assigned Unique Local Addresses (ULA) using a 40-bit random Global ID
The link-local IPv6 multicast address used exclusively to send OSPFv3 packets to Designated Routers (DR) and Backup Designated Routers (BDR)
The IPv6 prefix representation used in routing tables to designate the default route

Matches

Show answer & explanation

Answer

The SLAAC EUI-64 calculation matches `fe80::21a:2bff:fe3c:4d5e`; the locally assigned ULA prefix matches `fd00::/8`; the OSPFv3 DR/BDR multicast address matches `ff02::6`; and the default route matches `::/0`.
Each item accurately maps to its IPv6 address representation: EUI-64 requires inserting FFFE and flipping the 7th bit (`fe80::21a:2bff:fe3c:4d5e`); RFC 4193 local ULA uses `fd00::/8`; OSPFv3 DR/BDR communication uses `ff02::6`; and the default route is `::/0`.

Step-by-Step Solution

1
Calculate the SLAAC EUI-64 link-local address
`fe80::21a:2bff:fe3c:4d5e`
Split MAC `00:1A:2B:3C:4D:5E`, insert `FF:FE` to form `001A:2BFF:FE3C:4D5E`, flip the 7th bit of byte 1 (`00` to `02`), and prepend `fe80::`.
2
Identify the RFC 4193 locally assigned ULA prefix
`fd00::/8`
Bit 8 of the `fc00::/7` block is set to 1 for locally generated 40-bit random Global IDs, fixing the prefix to `fd00::/8`.
3
Determine the OSPFv3 DR/BDR multicast address
`ff02::6`
`ff02::5` is sent to All OSPF Routers, whereas `ff02::6` targets All OSPF Designated Routers.
4
Identify the default route IPv6 prefix
`::/0`
`::/0` signifies all zeros address and zero prefix length, serving as the default match in IPv6 routing.

Key Concept

IPv6 Addressing Scopes, EUI-64 Conversion Rules, and Multicast / Routing Prefixes
PreviousPage 10 / 20Next
Network Fundamentals Practice Questions — Cisco CCNA — Page 10 | Examkin