Network Implementation

424 questions

Question 1Question

A network administrator upgrades several core backbone links within an Open Shortest Path First (OSPF) routing domain from 1 Gbps to 10 Gbps. Despite the physical bandwidth upgrade, the core routers assign an identical metric cost of 1 to both the 1 Gbps and 10 Gbps interfaces, resulting in unwanted equal-cost multi-path (ECMP) load balancing across asymmetric links. Which configuration change must be applied to ensure OSPF correctly assigns a lower metric cost to the 10 Gbps interfaces?

Show answer & explanation

Answer: Increase the OSPF auto-cost reference bandwidth setting across all participating routers in the routing domain.

Answer

Increase the OSPF auto-cost reference bandwidth setting across all participating routers in the routing domain.
The correct answer highlights that default OSPF implementations use a reference bandwidth of 100 Mbps (10810^8 bps) to calculate link cost. As a result, both 1 Gbps and 10 Gbps interfaces evaluate to a cost less than 1, which rounds up to the minimum metric value of 1. Increasing the auto-cost reference bandwidth across all routers allows OSPF to assign distinct, lower cost metrics to faster links, resolving unwanted equal-cost load balancing.

Step-by-Step Solution

1
Analyze the default OSPF interface cost calculation formula.
Recognize that OSPF calculates cost as Cost=Reference BandwidthInterface Bandwidth\text{Cost} = \frac{\text{Reference Bandwidth}}{\text{Interface Bandwidth}}, where default reference bandwidth equals 100 Mbps (10810^8 bps).
For interfaces with bandwidth equal to or greater than 100 Mbps (such as 1 Gbps and 10 Gbps), the formula yields values less than 1, which are rounded up to the minimum metric integer of 1.
2
Determine how to restore metric differentiation for high-speed interfaces.
Adjust the auto-cost reference bandwidth parameter to a higher threshold (such as 100,000 Mbps or 100 Gbps).
With a 100,000 Mbps reference bandwidth, a 1 Gbps link has a metric cost of 100 (100,0001,000\frac{100,000}{1,000}), whereas a 10 Gbps link has a metric cost of 10 (100,00010,000\frac{100,000}{10,000}), successfully preferring the faster path.

Key Concept

OSPF Auto-Cost Reference Bandwidth Adjustment
Question 2Question

A client workstation on VLAN 20 (192.168.20.0/24192.168.20.0/24) broadcasts a DHCPDISCOVER message to obtain an IP configuration. The Layer 3 switch interface acting as the default gateway for VLAN 20 is configured with an IP helper address pointing to a centralized DHCP server at 10.0.99.510.0.99.5 on VLAN 99. Which of the following operations accurately describe how the relay agent processes and forwards this message? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: The relay agent inserts the IP address of the VLAN 20 interface into the Gateway IP Address (giaddr) header field.; The relay agent converts the client broadcast frame into a unicast IP packet targeted to 10.0.99.510.0.99.5 using UDP port 67.

Answer

The relay agent populates the Gateway IP Address (giaddr) field with the IP address of its local receiving interface (VLAN 20 gateway) and encapsulates the client's broadcast into a unicast IP packet directed to the destination DHCP server using UDP port 67.
When a Layer 3 relay agent intercepts a broadcast DHCPDISCOVER message, it rewrites the packet payload by setting the Gateway IP Address (giaddr) field to its local client-facing interface address. It then converts the Layer 2 broadcast into a unicast IPv4 datagram and forwards it directly to the IP address specified in the helper configuration using UDP destination port 67.

Step-by-Step Solution

1
Analyze incoming broadcast and interface identification
The client issues a broadcast DHCPDISCOVER frame on VLAN 20. The Layer 3 relay agent receives this broadcast on its VLAN 20 SVI/interface.
Broadcast frames do not traverse Layer 3 boundaries natively, requiring the relay agent to intervene.
2
Modify the DHCP header giaddr field
The relay agent writes the IP address of the VLAN 20 interface into the giaddr (Gateway IP Address) field of the DHCP packet payload.
This informs the remote DHCP server which IP address pool/scope must be used for address assignment.
3
Encapsulate and forward as unicast UDP
The relay agent encapsulates the modified request into a unicast IPv4 packet with a destination address of 10.0.99.510.0.99.5 and destination UDP port 67.
Unicast packets can be routed across Layer 3 network boundaries to reach centralized servers.

Key Concept

DHCP Relay Agent Operational Mechanics and Packet Header Modification
Question 3Question

An enterprise network engineer is deploying redundant centralized DHCP servers (192.168.100.10192.168.100.10 and 192.168.100.11192.168.100.11) located in a dedicated management subnet. Workstations are partitioned across three client subnets (VLAN 20: 10.20.0.0/2410.20.0.0/24, VLAN 30: 10.30.0.0/2410.30.0.0/24, and VLAN 40: 10.40.0.0/2410.40.0.0/24) terminated on a Layer 3 core switch serving as their default gateway. Which TWO of the following statements correctly describe the technical mechanics and configuration requirements for the Layer 3 switch when relaying DHCPDISCOVER broadcast requests to the server pool?

Select all that apply

Show answer & explanation

Answer: The Layer 3 switch inserts the IP address of the ingress Switch Virtual Interface (SVI) into the Gateway IP Address (giaddrgiaddr) field of the DHCP message header before forwarding.; The Layer 3 switch converts incoming client UDP broadcast packets received on destination port 67 into unicast packets directed to both configured DHCP server IP addresses on destination port 67.

Answer

The correct statements are that the Layer 3 switch inserts the ingress SVI IP address into the Gateway IP Address (giaddrgiaddr) header field, and that it converts incoming client UDP broadcasts on port 67 into unicast UDP packets sent to both DHCP servers on destination port 67.
The correct statements accurately reflect standard DHCP relay behavior per RFC 2131: the relay agent fills the giaddrgiaddr field with the receiving interface's IP address to inform the central server of the client's subnet, and it translates client broadcast traffic into targeted unicast UDP packets sent to port 67 on all configured server endpoints.

Step-by-Step Solution

1
Analyze client broadcast reception at Layer 3 interface boundary.
Client broadcast DHCPDISCOVER packets sent to destination 255.255.255.255255.255.255.255 on UDP port 67 arrive at the SVI for VLAN 20 (10.20.0.110.20.0.1).
Layer 3 switches block Layer 2/3 broadcast frames by default unless configured with a relay agent service.
2
Evaluate header modification mechanics performed by the DHCP relay agent.
The relay agent populates giaddr=10.20.0.1giaddr = 10.20.0.1 using its receiving interface IP address.
The centralized DHCP server uses the giaddrgiaddr value to determine which pool scope (10.20.0.0/2410.20.0.0/24) to select for address allocation.
3
Evaluate transport and network layer packet forwarding to destination servers.
The Layer 3 switch sends unicast UDP packets targeting 192.168.100.10192.168.100.10 and 192.168.100.11192.168.100.11 using destination UDP port 67.
DHCP servers listen exclusively on UDP port 67; altering the destination port to 68 or failing to unicast to both configured helper targets breaks multi-server deployment.

Key Concept

DHCP Relay Agent Operational Mechanics and Header Modifications
Question 4Question

During data transmission across an IEEE 802.1Q trunk link, a switch inserts a 4-byte header tag into Ethernet frames for non-native VLANs. At which specific location within the standard Ethernet II frame header is this 802.1Q tag inserted?

Show answer & explanation

Answer: Between the Source MAC Address and the Type/Length fields

Answer

The 802.1Q tag is inserted between the Source MAC Address and the Type/Length fields.
IEEE 802.1Q trunking inserts a 4-byte VLAN header directly into the Layer 2 Ethernet frame between the Source MAC Address field and the original EtherType/Length field. This tag includes the Tag Protocol Identifier (TPID set to 0x8100) and Tag Control Information (TCI, containing the VLAN ID and priority bits).

Step-by-Step Solution

1
Analyze standard Ethernet II frame structure
An Ethernet II frame consists of Preamble/SFD, Destination MAC, Source MAC, EtherType, Payload, and FCS.
Understanding standard frame layout is required to identify encapsulation insertion points.
2
Identify 802.1Q trunking tag placement rules
IEEE 802.1Q modifies the Layer 2 header by inserting a 4-byte VLAN tag field (TPID 0x8100 + TCI) directly following the 6-byte Source MAC address.
This location allows receiving switches to parse the Tag Protocol Identifier (TPID) in place of the original EtherType.
3
Evaluate frame check sequence recalculation
Because the Layer 2 header is modified, the sending switch recalculates the Frame Check Sequence (FCS) trailer before transmission.
Ensures the frame passes integrity checks on the receiving switch trunk port.

Key Concept

IEEE 802.1Q Frame Tagging and Header Structure
Question 5Question

A network administrator is configuring a point-to-point interconnect between two core routers. The interface on Router A is assigned the IPv4 address 10.200.15.14/3010.200.15.14/30. What is the directed broadcast address for this subnet?

Show answer & explanation

Answer: 10.200.15.15

Answer

10.200.15.15
For the /30/30 network containing the host IP address 10.200.15.1410.200.15.14, the subnet spans from 10.200.15.1210.200.15.12 to 10.200.15.1510.200.15.15. The address 10.200.15.1210.200.15.12 is the network ID, 10.200.15.1310.200.15.13 and 10.200.15.1410.200.15.14 are usable host addresses, and 10.200.15.1510.200.15.15 is the directed broadcast address.

Step-by-Step Solution

1
Determine the subnet mask and subnet block size from the CIDR notation
A /30/30 prefix corresponds to a subnet mask of 255.255.255.252255.255.255.252, which yields a block size of 44 addresses (256252=4256 - 252 = 4) in the fourth octet.
Understanding the block size identifies subnet boundaries along increments of 4.
2
Calculate the network address for the host IP
For the host IP 10.200.15.1410.200.15.14, dividing 1414 by the block size 44 gives 33 with a remainder of 22. The network ID for this block is 10.200.15.1210.200.15.12.
The network address represents the lowest numerical boundary of the subnet.
3
Determine the directed broadcast address
The broadcast address is the highest address in the subnet block, which is 10.200.15.12+3=10.200.15.1510.200.15.12 + 3 = 10.200.15.15.
The last IP address in any IPv4 subnet block is reserved as the directed broadcast address.

Key Concept

IPv4 Subnetting and Broadcast Address Calculation
Question 6Question

An enterprise branch office has 500 internal workstations configured on a private IPv4 network (10.1.0.0/2210.1.0.0/22). Outbound internet access is currently handled by an edge router using Port Address Translation (PAT / NAT Overload) mapped to a single public IP address (203.0.113.5203.0.113.5). During peak operational hours, users report that while existing web sessions remain active, new outbound connection attempts to cloud services begin timing out consistently. A network administrator inspects the router's active translation table and discovers over 64,00064,000 active translation entries associated with 203.0.113.5203.0.113.5, while CPU, memory, and interface bandwidth utilization on the edge router remain below 25%25\%. Which of the following implementation changes is the most appropriate solution to resolve the connection failures?

Show answer & explanation

Answer: Configure a dynamic NAT pool containing multiple public IP addresses and bind PAT to the pool.

Answer

The correct action is to configure a dynamic NAT pool containing multiple public IP addresses and bind PAT to the pool.
Port Address Translation (PAT) uses 16-bit source port numbers to multiplex multiple private IP streams over a single public IP address. Because a 16-bit port field yields a maximum of 65,535 ports, a high-density subnet can exhaust the ephemeral port pool of a single public IP address. Configuring a NAT pool of public IP addresses and applying PAT across the pool multiplies the available transport port pool by the number of IP addresses in the pool, resolving exhaustion without sacrificing simultaneous connectivity for internal hosts.

Step-by-Step Solution

1
Analyze the symptom and diagnostic evidence.
Router hardware resources (CPU, RAM, bandwidth) are normal (<25%), but active NAT translation entries have reached over 64,000 on a single public IP address.
PAT tracks outbound connections by mapping private IP addresses and source port numbers to a single public IP address and unique external source ports. Since TCP/UDP port fields are 16-bit, the maximum theoretical port count per IP is 65,535 (with around 1,024 reserved/well-known ports, leaving ~64,500 usable ephemeral ports).
2
Identify the underlying bottleneck.
The network is suffering from PAT transport layer source port exhaustion.
Because 500 hosts are generating thousands of concurrent short-lived or long-lived sessions, the single public IP address has exhausted its available unique source port pool.
3
Evaluate candidate solutions to increase socket capacity.
Binding PAT to a pool of public IP addresses increases capacity linearly (e.g., 5 public IPs × ~64,000 ports = ~320,000 available concurrent translations).
Adding additional public IPs into a NAT pool tied to PAT overload expands the total available source port space while allowing all 500 internal hosts to maintain simultaneous outbound connectivity.

Key Concept

PAT Source Port Exhaustion and NAT Pool Scaling
Estimated Time:2m 0s
Question 7Question

A network engineer is configuring a Layer 3 switch to relay DHCP requests from client workstations on VLAN 35 (172.16.35.0/24172.16.35.0/24) to two redundant central DHCP servers located on VLAN 100 (10.100.0.1010.100.0.10 and 10.100.0.1110.100.0.11). Which of the following statements correctly describe the behavior and operational mechanics of the DHCP relay agent when processing these client requests? (Select TWO options.)

Select all that apply

Show answer & explanation

Answer: The relay agent inserts the IP address of its local ingress interface (VLAN 35 SVI) into the `giaddr` field of the DHCP payload before forwarding the message.; The relay agent duplicates and forwards the original broadcast `DHCPDISCOVER` frame as separate unicast IP packets addressed to each configured DHCP server.

Answer

The correct statements are that the relay agent populates the `giaddr` field with the local ingress SVI IP address to identify the client subnet, and that it replicates incoming broadcast discovery messages into individual unicast IP packets directed to each defined target server.
The statements confirming that the local ingress interface IP address is populated into the `giaddr` field and that the broadcast `DHCPDISCOVER` is duplicated into unicast UDP packets sent to each configured destination server are both correct. The `giaddr` field is critical for cross-subnet DHCP operations because central DHCP servers inspect this field to determine which IP pool scope to draw addresses from. Additionally, when redundant helper addresses are configured on a Layer 3 interface, the relay agent creates separate unicast UDP messages targeting each server address specified.

Step-by-Step Solution

1
Analyze incoming broadcast reception at the Layer 3 interface
The Layer 3 switch receives a client broadcast `DHCPDISCOVER` frame on the VLAN 35 interface.
DHCP clients initially issue Layer 2 broadcast packets (255.255.255.255255.255.255.255) because they do not possess an IP address or knowledge of the server location.
2
Evaluate relay payload modifications (`giaddr` insertion)
The relay agent writes the IP address of its VLAN 35 SVI into the `giaddr` (Gateway IP Address) field in the DHCP header.
The central DHCP server requires the `giaddr` field value to select the matching address pool (172.16.35.0/24172.16.35.0/24) and route the reply back.
3
Evaluate packet duplication and transport protocol usage
The relay agent creates two separate unicast UDP packets (destination UDP port 67) directed to 10.100.0.1010.100.0.10 and 10.100.0.1110.100.0.11.
DHCP operates entirely using UDP; when multiple relay targets exist, the agent unicasts a copy of the request to each configured helper destination address.

Key Concept

DHCP Relay Unicast Forwarding and GIADDR Field Modification
Question 8Question

A systems deployment team is provisioning a dedicated IPv4 subnet for a smart office floor. The design plan requires static IP assignments for 4242 IoT sensors, 44 wireless access points, and 22 router interfaces configured for high-availability default gateway redundancy. What is the total number of usable host IPv4 addresses provided by the smallest standard subnet mask that accommodates all required devices?

Show answer & explanation

Answer: 62

Answer

The smallest subnet that satisfies the requirement for 4848 IP addresses is a /26/26 subnet, which provides 6262 usable host IPv4 addresses.
To determine the total usable IPv4 host capacity of the smallest suitable subnet, first sum the required IP assignments: 42 (sensors)+4 (access points)+2 (gateways)=48 addresses42\text{ (sensors)} + 4\text{ (access points)} + 2\text{ (gateways)} = 48\text{ addresses}. The formula for usable host addresses is 2h22^h - 2, where hh is the number of host bits. A /27/27 block (h=5h=5) yields 252=302^5 - 2 = 30 usable addresses, which is too small. A /26/26 block (h=6h=6) yields 262=622^6 - 2 = 62 usable host addresses, which fully supports the 4848 required addresses.

Step-by-Step Solution

1
Calculate total host IP addresses required
Total host requirement = 42+4+2=4842 + 4 + 2 = 48 usable IP addresses
Every connected device and default gateway interface requires a distinct usable IPv4 address.
2
Determine the required host bit count
h=6h = 6 host bits (CIDR prefix /26/26)
252=302^5 - 2 = 30 hosts is insufficient for 4848 addresses, whereas 262=622^6 - 2 = 62 hosts satisfies the requirement.
3
Calculate the usable host capacity of the subnet
6262 usable host addresses
Subtracting 22 reserved addresses (network ID and broadcast address) from total 26=642^6 = 64 block addresses yields 6262 usable host IPs.

Key Concept

Subnet Host Capacity Calculation (2h22^h - 2 Rule)
Question 9Question

A network administrator needs to add a DNS entry that resolves the hostname `appserver.corp.local` directly to its assigned IPv6 address `2001:db8:85a3::8a2e:370:7334`. Which DNS resource record type must be configured for this resolution?

Show answer & explanation

Answer: AAAA record

Answer

An AAAA record is used to map a domain hostname directly to an IPv6 address.
An AAAA record (quad-A record) stores a 128-bit IPv6 address and maps it to a host domain name. To resolve hostnames to IPv6 destinations, DNS authoritative servers must be configured with AAAA records.

Step-by-Step Solution

1
Identify the required mapping
The scenario requires mapping a hostname (`appserver.corp.local`) to an IPv6 address (`2001:db8:85a3::8a2e:370:7334`).
Determining the network protocol version (IPv4 vs. IPv6) dictates the correct DNS record type.
2
Select the corresponding DNS record type
AAAA records are designated for 128-bit IPv6 address resolution.
Standard DNS taxonomy uses A records for IPv4 addresses and AAAA records for IPv6 addresses.

Key Concept

DNS IPv6 Host Mapping (AAAA Records)
Question 10Question

A client workstation on VLAN 20 initiates a connection and requests an IP address assignment from a centralized DHCP server residing on VLAN 100 via a Layer 3 switch interface configured with DHCP relay. Place the following stages of the relayed DHCPDISCOVER and DHCPOFFER packet lifecycle in the correct chronological sequence from first to last.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct chronological sequence is: (1) Host broadcasts DHCPDISCOVER locally on VLAN 20, (2) Relay agent populates the giaddr field with the VLAN 20 SVI address, (3) Relay agent forwards unicast DHCPDISCOVER to the server on VLAN 100, (4) Server selects scope based on giaddr and sends unicast DHCPOFFER to the relay agent, (5) Relay agent delivers DHCPOFFER back to the host on VLAN 20.
The correct sequence reflects standard DHCP relay operations across Layer 3 boundaries. The process begins when the client generates a broadcast DHCPDISCOVER packet on its local segment. The Layer 3 relay interface receives the broadcast, tags its own interface IP into the giaddrgiaddr payload field, and forwards the packet as a unicast transmission to the remote DHCP server. The DHCP server uses the giaddrgiaddr to map the request to the correct scope, then unicasts a DHCPOFFER back to the relay interface IP. Finally, the relay interface delivers the DHCPOFFER to the local client on VLAN 20.

Step-by-Step Solution

1
Identify client-side initiation
The host generates a local broadcast DHCPDISCOVER packet on UDP port 67 because it lacks an IP address.
Broadcast frames are contained within VLAN 20 and cannot traverse Layer 3 boundaries without a relay agent.
2
Relay agent interception and giaddr insertion
The SVI on VLAN 20 intercepts the packet and inserts its SVI IP into the giaddrgiaddr field.
The giaddrgiaddr field informs the remote server which logical subnet requested the lease.
3
Unicast forwarding to server
The relay agent routes a unicast packet to the designated DHCP server IP across the routing core.
Converts non-routable broadcast traffic to routable IP unicast traffic.
4
Server scope evaluation and unicast response
DHCP server matches giaddrgiaddr to the VLAN 20 scope and sends a unicast DHCPOFFER back to the relay agent address.
The server uses the giaddrgiaddr as the destination IP address for the DHCPOFFER reply.
5
Client delivery
The relay agent receives the DHCPOFFER and relays it onto the client's access segment.
Completes the initial discovery phase of the DORA process across subnets.

Key Concept

DHCP Relay Agent Architecture & GIADDR Mechanics
Question 11Question

A network engineer is reviewing an active translation table on a corporate edge gateway to verify Port Address Translation (PAT) functionality. An internal client workstation with the private IP address 172.16.10.50172.16.10.50 initiates an HTTPS session to an external web server at 198.51.100.25:443198.51.100.25:443. The gateway translates all outbound traffic using its single public interface IP address of 203.0.113.1203.0.113.1. As the outgoing IP packet leaves the firewall's public interface toward the destination server, which address and port combination accurately represents the Inside Global identifier for this session?

Show answer & explanation

Answer: 203.0.113.1203.0.113.1 paired with a dynamically assigned high-numbered source port (such as 5214452144)

Answer

The Inside Global address and port combination is the firewall's public IP address (203.0.113.1203.0.113.1) combined with a dynamic high-numbered source port (such as 5214452144).
The correct answer identifies that in NAT/PAT terminology, the Inside Global address represents the internal host as it appears to the outside network. Under Port Address Translation (PAT), the firewall replaces the private source IP with its own public WAN interface IP (203.0.113.1203.0.113.1) and substitutes the original source port with a uniquely allocated high-numbered ephemeral port (such as 5214452144) to maintain connection state mapping.

Step-by-Step Solution

1
Identify the standard CompTIA NAT terminology definitions.
Inside Local is the private client IP/port (172.16.10.50:ephemeral172.16.10.50:ephemeral). Inside Global is the public translated IP/port representing the client to the internet (203.0.113.1:translated_port203.0.113.1:translated\_port). Outside Global is the target public IP/port (198.51.100.25:443198.51.100.25:443).
CompTIA Network+ standard definitions differentiate internal local private addresses from internal global public translated addresses.
2
Analyze the impact of Port Address Translation (PAT / NAT Overload).
PAT tracks individual outbound client connections by swapping the original private source IP and source port with the public gateway IP and a newly assigned high-numbered ephemeral port.
Multiple internal hosts share a single public IP address by keeping sessions distinct at Layer 4 using unique source port numbers.
3
Determine the specific Inside Global entry for the packet exiting the WAN interface.
The packet on the public network displays the source IP 203.0.113.1203.0.113.1 and a dynamically generated source port (e.g., 5214452144).
This unique combination allows the gateway to map return traffic back to the originating client (172.16.10.50172.16.10.50).

Key Concept

NAT Terminology and PAT Port Assignment Mechanics
Estimated Time:2m 0s
Question 12Question

A network architect is designing an enterprise IPv6 deployment and reviewing address allocation strategies and autoconfiguration modes. Match each IPv6 deployment mechanism or address scope on the left with its exact functional operation and protocol behavior on the right.

Click a left item, then click its matching right item

Items

Stateless Address Autoconfiguration (SLAAC) with Stateless DHCPv6
Stateful DHCPv6 Deployment
Link-Local Unicast Addressing
Unique Local Addressing (ULA)

Matches

Show answer & explanation

Answer

SLAAC with Stateless DHCPv6 matches the configuration using RA flags M=0 and O=1; Stateful DHCPv6 Deployment matches the configuration using RA flags M=1 and O=1; Link-Local Unicast Addressing matches the fe80::/10 block for single-link communication and NDP; Unique Local Addressing matches the fc00::/7 block for non-public internal routed communication.
Each IPv6 mechanism is paired strictly according to standard RFC specifications: SLAAC with Stateless DHCPv6 relies on M=0 and O=1 RA flags; Stateful DHCPv6 requires M=1; Link-Local addressing uses the fe80::/10 prefix exclusively for local-link functions; and Unique Local Addresses utilize fc00::/7 for non-public internal routed communication.

Step-by-Step Solution

1
Analyze SLAAC with Stateless DHCPv6 flag settings.
Determined that M=0 delegates IP creation to SLAAC, while O=1 requests non-IP settings from DHCPv6.
Stateless DHCPv6 does not issue IP leases; it only supplies auxiliary options.
2
Analyze Stateful DHCPv6 flag settings.
Determined that M=1 instructs hosts to obtain IP address leases statefully from the DHCPv6 server.
Stateful operation centralizes address tracking and lease management.
3
Evaluate Link-Local addressing scope and purpose.
Associated fe80::/10 with mandatory single-link protocol operations.
Link-Local addresses are automatically assigned on all enabled interfaces and cannot cross routers.
4
Evaluate Unique Local Addressing scope and purpose.
Associated fc00::/7 (fd00::/8) with enterprise internal private routing.
ULAs function similarly to IPv4 RFC 1918 addresses within internal networks.

Key Concept

IPv6 Addressing Scopes and Neighbor Discovery RA Flag Autoconfiguration
Question 13Question

A network technician is configuring switch ports on an enterprise switch to handle 802.1Q trunking and VLAN operations. Match each switchport interface configuration command on the left with its corresponding frame processing or trunk negotiation behavior on the right.

Click a left item, then click its matching right item

Items

switchport trunk native vlan 99
switchport mode access
switchport trunk allowed vlan 10,20
switchport mode dynamic auto

Matches

Show answer & explanation

Answer

The correct pairings align each command with its operational behavior: native VLAN 99 sends untagged frames across trunks; access mode locks the interface to a single untagged VLAN; allowed vlan 10,20 drops unlisted VLAN traffic; and dynamic auto passively awaits trunk negotiation.
Each switchport configuration statement defines specific frame processing or trunk negotiation behaviors: native VLAN 99 handles untagged trunk traffic; access mode establishes single-VLAN operational ports; allowed VLAN lists prune unapproved VLAN traffic; and dynamic auto passively responds to DTP negotiation.

Step-by-Step Solution

1
Analyze native VLAN behavior for `switchport trunk native vlan 99`.
Identified that VLAN 99 traffic crosses the trunk without 802.1Q tag headers.
By 802.1Q standard design, native VLAN frames are transmitted untagged across trunk connections.
2
Analyze static access port behavior for `switchport mode access`.
Identified that the port operates exclusively in a single untagged VLAN and rejects trunking.
Access mode explicitly disables trunking encapsulation and assigns the port to one access VLAN.
3
Analyze trunk filtering for `switchport trunk allowed vlan 10,20`.
Identified that unlisted VLANs (e.g., VLAN 30) are blocked while VLAN 10 and 20 are permitted.
The allowed VLAN list acts as a trunk filter, permitting only explicitly allowed VLAN IDs.
4
Analyze negotiation behavior for `switchport mode dynamic auto`.
Identified that the interface passively waits for DTP negotiation requests from its neighbor.
Dynamic auto interfaces will convert to a trunk only if the remote end initiates negotiation via dynamic desirable or trunk modes.

Key Concept

802.1Q trunking port modes, native VLAN untagged behavior, allowed VLAN filtering, and DTP negotiation dynamics.
Question 14Question

A network administrator is documenting a host configuration and needs to compress the IPv6 address fe80:0000:0000:0000:0202:b3ff:fe1e:8329 using standard RFC 5952 rules. Which of the following is the correctly compressed IPv6 address?

Show answer & explanation

Answer: fe80::202:b3ff:fe1e:8329

Answer

The correctly compressed IPv6 address is fe80::202:b3ff:fe1e:8329.
The notation fe80::202:b3ff:fe1e:8329 follows RFC 5952 standards by replacing three contiguous zero hextets with a single double colon (::) and dropping the leading zero in the fifth hextet (0202 to 202).

Step-by-Step Solution

1
Identify contiguous blocks of 16-bit zero fields (hextets).
The block 0000:0000:0000 contains three consecutive zero hextets.
RFC 5952 mandates shortening the longest run of consecutive zero hextets using double-colon (::) notation.
2
Suppress all leading zeros in each 16-bit field.
The hextet 0202 becomes 202, while 0000 hextets reduce to single zeros before double-colon compression.
Leading zeros in an IPv6 hextet carry no numerical value and must be omitted.
3
Replace the single longest contiguous run of zero fields with a single double colon (::).
fe80:0000:0000:0000:0202:b3ff:fe1e:8329 compresses to fe80::202:b3ff:fe1e:8329.
Using double colon exactly once creates a unique, fully deterministic 128-bit IPv6 representation.

Key Concept

IPv6 Address Compression Rules (RFC 5952)
Estimated Time:45s
Question 15Question

A network switch interface configured with legacy IEEE 802.1D Spanning Tree Protocol (STP) has just experienced a physical link bring-up event. In what precise chronological order will the port transition through its operational states from initial activation to active data forwarding?

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct operational order of IEEE 802.1D STP port states from initial link bring-up to full operation is Blocking State, Listening State, Learning State, and Forwarding State.
Under IEEE 802.1D STP, a switch interface transitions through four distinct operational states upon physical link up to guarantee loop avoidance. It begins in Blocking (discarding traffic and listening for BPDUs), transitions after the forward delay timer to Listening (exchanging BPDUs to determine roles), moves after a second forward delay timer to Learning (populating MAC tables without forwarding data), and finally settles in Forwarding (actively transmitting user frames and BPDUs).

Step-by-Step Solution

1
Identify the state immediately entered upon physical link up.
The port initializes in the Blocking State.
STP defaults to Blocking to safeguard the Layer 2 domain from transient loops while initial BPDU exchange occurs.
2
Determine the state focused on topology determination and role negotiation.
The port transitions to the Listening State.
During Listening, the port active participates in BPDU transmission and election processes without altering MAC tables or forwarding data.
3
Identify the state focused on building layer 2 forwarding tables prior to frame delivery.
The port transitions to the Learning State.
Learning allows the switch to populate its MAC address table from source addresses to prevent unnecessary unicast flooding when data forwarding begins.
4
Identify the final fully operational state.
The port enters the Forwarding State.
In Forwarding, all loop management checks are complete, enabling full ingress and egress user payload traffic handling.

Key Concept

IEEE 802.1D Spanning Tree Protocol Port State Transitions
Estimated Time:1m 30s
Question 16Question

A client host on a newly configured workstation network (VLAN 30) initiates an IP address lease request. A Layer 3 switch configured with an IP helper address relays this request to a centralized DHCP server located on a separate management network. Place the sequence of events handling the DHCPDISCOVER and DHCPOFFER exchange in chronological order from initial client transmission to final relay delivery.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The chronological sequence of the relayed DHCP exchange is: 1) Client broadcasts DHCPDISCOVER on local VLAN 30; 2) Relay agent populates giaddr and unicasts request to DHCP server; 3) DHCP server selects address pool matching giaddr; 4) DHCP server unicasts DHCPOFFER to relay agent SVI IP; 5) Relay agent forwards DHCPOFFER to client on VLAN 30.
The correct sequence follows the standard DHCP relay process: first, the client host broadcasts a DHCPDISCOVER message locally on UDP port 67. The Layer 3 relay agent intercepts this broadcast, inserts its SVI address into the giaddr header field, and forwards the packet via unicast to the DHCP server. The DHCP server uses the giaddr value to choose the correct subnet pool and returns a unicast DHCPOFFER to the relay agent on UDP port 67. Finally, the relay agent forwards the DHCPOFFER to the client host on UDP port 68.

Step-by-Step Solution

1
Identify initial local broadcast
The unconfigured host transmits a broadcast DHCPDISCOVER frame on UDP port 67 across VLAN 30.
Hosts lacking IP addresses must initiate communications using local Layer 2 and Layer 3 broadcasts.
2
Trace relay agent header modification and forwarding
The Layer 3 switch SVI captures the broadcast, populates the giaddr header field with its interface IP, and forwards a unicast packet to the server on UDP port 67.
The relay agent converts non-routable local broadcasts into routable unicast traffic while adding subnet tracking information.
3
Determine server address allocation logic
The DHCP server matches the giaddr field to its configured address scope for VLAN 30 and reserves an available lease.
The giaddr field explicitly informs the centralized server which subnet pool must be used for assignment.
4
Trace server response transmission
The DHCP server creates a DHCPOFFER and sends it as a unicast packet directly to the relay agent's giaddr on UDP port 67.
The server returns the payload to the relay agent because the client cannot be reached across routed networks directly.
5
Verify final delivery to client
The relay agent receives the offer and sends a DHCPOFFER packet onto VLAN 30 addressed to the client on UDP port 68.
The relay agent delivers the leased address details back to the host on its local access segment.

Key Concept

DHCP Relay Packet Processing and Header Modification Lifecycle
Estimated Time:1m 30s
Question 17Question

A network technician is configuring DNS resources for a newly deployed web server that must support dual-stack network connectivity. Which TWO of the following DNS record types must be created to resolve the server's hostname directly to its assigned IPv4 and IPv6 addresses?

Select all that apply

Show answer & explanation

Answer: A record; AAAA record

Answer

The host name must be mapped to an IPv4 address using an A record and to an IPv6 address using an AAAA record.
To support dual-stack connectivity for a web server, an A record is required to resolve the hostname to an IPv4 address, and an AAAA record is required to resolve the exact same hostname to an IPv6 address.

Step-by-Step Solution

1
Identify the requirement for forward IPv4 resolution.
Determine that mapping a hostname to an IPv4 address requires an A (Address) record.
Standard forward DNS resolution for 32-bit IPv4 addresses relies on A records.
2
Identify the requirement for forward IPv6 resolution.
Determine that mapping a hostname to an IPv6 address requires an AAAA (Quad-A) record.
IPv6 addresses are 128 bits in length (four times the size of an IPv4 address), requiring Quad-A (AAAA) records.

Key Concept

DNS Host Record Mapping for IPv4 and IPv6
Question 18Question

Two enterprise switches, Switch-1 and Switch-2, run Rapid Spanning Tree Protocol (IEEE 802.1w). Switch-1 is the elected Root Bridge. Switch-2 connects to Switch-1 via a direct full-duplex Ethernet link. Additionally, Switch-2 has two redundant physical links connected directly to the same downstream shared hub. Which TWO of the following statements correctly describe the RSTP port roles and operational behaviors in this scenario?

Select all that apply

Show answer & explanation

Answer: The full-duplex link between Switch-1 and Switch-2 allows Switch-2 to rapidly transition its Root Port to the Forwarding state via the sync and Proposal/Agreement handshake without relying on legacy timers.; On the dual connections to the shared hub, one port on Switch-2 is elected as the Designated Port while the second port on Switch-2 becomes a Backup Port.

Answer

The correct statements are that the full-duplex point-to-point link enables rapid Root Port forwarding via the Proposal/Agreement handshake, and that connecting two interfaces from the same switch to a shared hub results in one Designated Port and one Backup Port.
The statement regarding full-duplex rapid transitions is correct because RSTP replaces timer-based 802.1D transitions on point-to-point links with an active sync and Proposal/Agreement handshake. The statement regarding the shared hub is correct because when a switch receives its own BPDUs on a secondary link connected to a common hub, the primary link becomes the Designated Port and the secondary link becomes a Backup Port.

Step-by-Step Solution

1
Analyze point-to-point link convergence mechanisms under IEEE 802.1w (RSTP).
RSTP uses full-duplex link state detection to execute an explicit Proposal/Agreement handshake, allowing fast convergence to the Forwarding state without waiting for legacy 15-second Listening and Learning forward delay timers.
Point-to-point links guarantee that only two switches exist on the segment, enabling direct negotiation.
2
Differentiate between RSTP Alternate and Backup port roles on Switch-2.
An Alternate Port receives superior BPDUs from another switch (providing a backup path to the Root Bridge). A Backup Port receives superior BPDUs from its own switch on a shared segment (hub).
Because both links connect to the same hub, Switch-2 hears its own BPDUs. The port with the lower Port ID becomes Designated, and the redundant port on the same switch becomes Backup.
3
Evaluate the Root Bridge priority selection mechanics.
Lower numerical bridge priority values are preferred (e.g., 4096 is preferred over 32768). Raising the priority to 61440 makes it least likely to become Root.
STP root elections always choose the minimum Bridge Identifier value.

Key Concept

RSTP Port Roles (Alternate vs. Backup) and Fast Convergence Mechanisms
Question 19Question

A network host on VLAN 10 needs an IP address from a centralized DHCP server located across a routed network on VLAN 100. Place the steps of the initial DHCP discovery and offer process in the correct order from first to last.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct sequence starts with the host broadcasting a DHCPDISCOVER packet on its local subnet, followed by the local relay agent populating the GIADDR header and forwarding a unicast packet to the central server, then the DHCP server replying with a unicast DHCPOFFER using the GIADDR to choose the pool, and finally the relay agent delivering the DHCPOFFER to the local host.
The correct sequence reflects standard DHCP relay behavior across subnets: a local client broadcast is captured by the relay agent, converted to a unicast packet containing the GIADDR, processed by the central DHCP server, sent back to the relay agent as a unicast DHCPOFFER, and lastly delivered back to the client host.

Step-by-Step Solution

1
Identify the initial client transmission on the local subnet.
The host broadcasts a DHCPDISCOVER message on UDP port 67 within VLAN 10.
The client lacks an IP address and must broadcast locally to find a DHCP server.
2
Trace the relay agent intervention at the layer 3 boundary.
The relay agent records its interface IP address in the GIADDR field and unicasts the packet across the network to the DHCP server.
Routers drop broadcast packets by default; the relay agent converts the broadcast into a routable unicast message.
3
Determine the server response mechanism.
The remote DHCP server allocates an IP address matching the GIADDR subnet and sends a unicast DHCPOFFER back to the relay agent.
The server relies on GIADDR information to determine which subnet scope to select.
4
Follow final packet delivery back to the requesting client.
The relay agent forwards the DHCPOFFER onto VLAN 10 so the client host can process it.
The relay agent completes the return path from the centralized server to the local client.

Key Concept

DHCP Relay Operation and Packet Transformation Sequence
Question 20Question

A network administrator is performing Variable Length Subnet Masking (VLSM) on an enterprise network segment. A router interface is currently assigned the IP address 10.140.77.218/2110.140.77.218/21. Upon inspecting the existing IP allocations, the administrator determines that subnets 10.140.72.0/2310.140.72.0/23 and 10.140.74.0/2310.140.74.0/23 are already assigned to production VLANs. What is the maximum number of additional /26/26 subnets that can be created using only the remaining unallocated address space within this parent /21/21 block?

Show answer & explanation

Answer: 16

Answer

16 additional /26 subnets can be created.
The host IP address 10.140.77.218/2110.140.77.218/21 resides in the network block 10.140.72.0/2110.140.72.0/21, spanning 10.140.72.010.140.72.0 through 10.140.79.25510.140.79.255. The two allocated /23/23 subnets consume IPs 10.140.72.010.140.72.0 through 10.140.75.25510.140.75.255. This leaves 10.140.76.010.140.76.0 through 10.140.79.25510.140.79.255 unallocated, which equals a contiguous /22/22 block (10.140.76.0/2210.140.76.0/22). Dividing a /22/22 space into /26/26 subnets yields 2(2622)=24=162^{(26-22)} = 2^4 = 16 subnets.

Step-by-Step Solution

1
Determine the network boundary of the parent /21 subnet.
The host IP 10.140.77.218/2110.140.77.218/21 belongs to the network 10.140.72.0/2110.140.72.0/21, covering IP range 10.140.72.010.140.72.0 to 10.140.79.25510.140.79.255.
A /21 mask uses a third-octet block size of 8 (256248=8256 - 248 = 8). Since 77÷8=977 \div 8 = 9 remainder 55, the network start is 9×8=729 \times 8 = 72.
2
Calculate the address space consumed by existing allocations.
Subnet 10.140.72.0/2310.140.72.0/23 consumes 10.140.72.010.140.72.0 - 10.140.73.25510.140.73.255, and subnet 10.140.74.0/2310.140.74.0/23 consumes 10.140.74.010.140.74.0 - 10.140.75.25510.140.75.255.
Each /23 subnet covers 2 third-octet values (22423=22^{24-23} = 2).
3
Identify the unallocated address space remaining in the /21 parent block.
The remaining contiguous range is 10.140.76.010.140.76.0 through 10.140.79.25510.140.79.255, which forms a single 10.140.76.0/2210.140.76.0/22 subnet.
The unallocated space spans 4 third-octet blocks (76,77,78,7976, 77, 78, 79), equivalent to a /22 prefix (256252=4256 - 252 = 4).
4
Calculate how many /26 subnets fit into the remaining /22 block.
Number of /26 subnets = 2(2622)=24=162^{(26 - 22)} = 2^4 = 16.
Subnet division is determined by exponentiation of the bit prefix difference between the parent block prefix and the target subnet prefix.

Key Concept

VLSM Subnet Allocation and CIDR Block Subdivisions
Page 1 / 22Next