Tüm alıştırma soruları

1987 soru

Soru 341Soru

A network administrator needs to convert two physical switch interfaces (GigabitEthernet0/1 and GigabitEthernet0/2) on a Cisco Catalyst switch into a routed (Layer 3) EtherChannel bundle using dynamic LACP active mode. In what sequential order should the Cisco IOS configuration commands be executed to successfully establish the routed port-channel interface and configure its IP addressing?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct CLI configuration sequence is: enter physical interface range mode ('interface range GigabitEthernet0/1 - 2'), convert physical links to routed mode ('no switchport'), assign interfaces to dynamic LACP group ('channel-group 10 mode active'), enter logical port-channel mode ('interface Port-channel 10'), and assign the IP address ('ip address 10.10.10.1 255.255.255.252').
To build a routed (Layer 3) EtherChannel using LACP, an engineer must first enter physical interface configuration mode ('interface range GigabitEthernet0/1 - 2'), disable Layer 2 processing on those physical member links using 'no switchport', and bind them into an active LACP bundle with 'channel-group 10 mode active'. Once the bundle is formed, the engineer enters the logical interface mode ('interface Port-channel 10') and applies the IPv4 network parameters using 'ip address 10.10.10.1 255.255.255.252'.

Adım Adım Çözüm

1
Select physical member interfaces using 'interface range GigabitEthernet0/1 - 2'
Enters interface range configuration mode for both physical ports simultaneously.
Configuration commands must target the physical interfaces that will compose the EtherChannel.
2
Disable Layer 2 functionality on physical links using 'no switchport'
Converts physical member interfaces from Layer 2 switchports to Layer 3 routed interfaces.
If interfaces remain in Layer 2 mode when assigned to a channel group, a Layer 2 port-channel will be created instead of a Layer 3 port-channel.
3
Bind physical interfaces into an LACP group using 'channel-group 10 mode active'
Creates logical Port-channel 10 and initiates LACP active negotiation on physical member links.
The 'active' keyword specifies dynamic LACP negotiation protocol mode.
4
Enter logical bundle interface configuration using 'interface Port-channel 10'
Moves CLI focus to the newly spawned logical interface Port-channel 10.
Layer 3 IP attributes must be configured on the parent logical bundle rather than individual member links.
5
Configure the IP address using 'ip address 10.10.10.1 255.255.255.252'
Assigns Layer 3 IPv4 addressing to Port-channel 10 for routing.
In a Layer 3 EtherChannel, routing parameters reside on the logical Port-channel interface.

Anahtar Kavram

Layer 3 LACP EtherChannel CLI Configuration Sequence
Soru 342Soru

Match each fully expanded IPv6 address on the left with its standard canonical compressed representation on the right according to RFC 5952 rules.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

2001:0db8:0000:0000:0042:0000:0000:0001
2001:0db8:0000:00ab:0000:0000:0000:0001
fe80:0000:0000:0000:0000:0000:0000:0001
2001:0db8:0000:0000:0000:00b0:0000:0000

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The correct pairings match each expanded IPv6 address to its RFC 5952 canonical compressed form: 2001:0db8:0000:0000:0042:0000:0000:0001 pairs with 2001:db8::42:0:0:1; 2001:0db8:0000:00ab:0000:0000:0000:0001 pairs with 2001:db8:0:ab::1; fe80:0000:0000:0000:0000:0000:0000:0001 pairs with fe80::1; and 2001:0db8:0000:0000:0000:00b0:0000:0000 pairs with 2001:db8::b0:0:0.
The correct pairings strictly adhere to RFC 5952 canonical formatting rules: leading zeros within any 16-bit field are omitted, the single longest contiguous sequence of zero-value 16-bit fields is replaced with ::, and when sequences of zero fields are equal in length, the first sequence is compressed.

Adım Adım Çözüm

1
Remove leading zeros from each 16-bit hexadecimal field (hextet).
Fields such as '0db8' become 'db8', '0042' becomes '42', '0000' becomes '0', and '0001' becomes '1'.
RFC 5952 requires leading zeros to be suppressed in every hextet.
2
Identify contiguous zero hextets and apply the double colon (::) compression rule.
For 2001:0db8:0000:0000:0042:0000:0000:0001, there are two equal runs of 2 zero hextets. Compress the first run to yield 2001:db8::42:0:0:1.
When zero sequences are of equal length, RFC 5952 requires compressing the first sequence.
3
Evaluate remaining addresses for longest zero sequence compression.
Compress the sequence of 3 zero hextets in 2001:0db8:0000:00ab:0000:0000:0000:0001 to get 2001:db8:0:ab::1, and the 6 zero hextets in fe80:0000:0000:0000:0000:0000:0000:0001 to get fe80::1.
The double colon must represent the maximum possible consecutive zero hextets when lengths differ.

Anahtar Kavram

IPv6 Address Compression and Canonical Representation (RFC 5952)
Soru 343Soru

A network administrator needs to explicitly configure switch interface GigabitEthernet0/3 as a static access port belonging to VLAN 30. Which set of commands must be executed in interface configuration mode to achieve this configuration?

Cevabı ve açıklamayı göster

Cevap: switchport mode access
switchport access vlan 30

Cevap

The correct command set to execute in interface configuration mode is 'switchport mode access' followed by 'switchport access vlan 30'.
To configure an access port for an end-user host in VLAN 30, an administrator enters interface configuration mode and issues 'switchport mode access' to define the operational mode, followed by 'switchport access vlan 30' to bind the port to that specific broadcast domain.

Adım Adım Çözüm

1
Set interface mode
The interface mode is configured for access using 'switchport mode access'.
This disables trunk negotiation and ensures the interface functions strictly as a host access port.
2
Assign access VLAN
The port is assigned to VLAN 30 using 'switchport access vlan 30'.
Associates untagged traffic from the connected host with broadcast domain VLAN 30.

Anahtar Kavram

Layer 2 Access Port Configuration
Soru 344Soru

Place the following Cisco IOS configuration commands in the correct order to create VLAN 30, assign it the name 'ENGINEERING', and configure interface GigabitEthernet1/0/15 as a static access port in VLAN 30, starting from privileged EXEC mode (`Switch#`).

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence starts by entering global configuration mode (`configure terminal`), creating and naming the VLAN (`vlan 30` followed by `name ENGINEERING`), navigating to the interface (`interface GigabitEthernet1/0/15`), statically setting access mode (`switchport mode access`), and finally assigning the port to VLAN 30 (`switchport access vlan 30`).
The CLI prompt hierarchy in Cisco IOS enforces a strict order of operations: privileged EXEC mode (`Switch#`) must first transition to global configuration mode (`configure terminal`), followed by entering the VLAN submode (`vlan 30`) to set parameters like `name ENGINEERING`. Once VLAN creation and naming are complete, navigating to interface configuration mode (`interface GigabitEthernet1/0/15`) allows setting the operational mode (`switchport mode access`) and assigning the port membership (`switchport access vlan 30`).

Adım Adım Çözüm

1
Enter Global Configuration mode from privileged EXEC mode.
Prompt changes to `Switch(config)#`.
CLI global context is needed to instantiate VLANs and select target interfaces.
2
Execute `vlan 30` in global configuration mode.
Prompt changes to `Switch(config-vlan)#`.
VLAN sub-configuration mode is required to configure specific properties such as the VLAN name.
3
Execute `name ENGINEERING` in VLAN configuration mode.
VLAN 30 is named ENGINEERING in the switch VLAN database.
VLAN name commands can only be issued within the `Switch(config-vlan)#` prompt context.
4
Navigate to the interface context using `interface GigabitEthernet1/0/15`.
Prompt changes to `Switch(config-if)#`.
Port configuration commands require interface configuration context.
5
Configure the port operational mode using `switchport mode access`.
Interface GigabitEthernet1/0/15 is set to static access mode.
Static access mode prevents DTP negotiation and ensures frames are untagged on host links.
6
Assign the port membership using `switchport access vlan 30`.
GigabitEthernet1/0/15 is placed into VLAN 30.
Associates the access interface with the intended broadcast domain.

Anahtar Kavram

VLAN Creation and Access Port Assignment in Cisco IOS
Soru 345Soru

A network engineer deploys a Layer 2 switch to connect 24 host workstations within a single IP subnet. The switch connects upstream directly to a single Ethernet interface on a enterprise router. Assuming standard full-duplex switch port configurations and no VLAN segmentation, how do the Layer 2 switch and the router function regarding collision domains and broadcast domains for this segment?

Cevabı ve açıklamayı göster

Cevap: The Layer 2 switch provides an independent collision domain on each port, creating 25 total collision domains, while the router interface bounds the segment into a single broadcast domain.

Cevap

The Layer 2 switch isolates collision domains per port (25 total), while the router interface defines a single broadcast domain boundary.
Layer 2 switches process frames at the Data Link layer, providing dedicated bandwidth and isolating collision domains on each individual port. Because there are 24 host links plus 1 router connection, 25 collision domains exist. Routers operate at Layer 3 and stop Layer 2 broadcasts from traversing to other interface segments, creating a single broadcast domain boundary for the subnet.

Adım Adım Çözüm

1
Analyze the operational role of the Layer 2 switch regarding collision domains.
Each micro-segmented port on a Layer 2 switch acts as its own independent collision domain. With 24 hosts and 1 router uplink connected across 25 active ports, there are 25 distinct collision domains.
Layer 2 switches buffer frames and operate at the Data Link layer to prevent packet collisions across separate physical ports.
2
Analyze the operational role of the Layer 2 switch and Router regarding broadcast domains.
Layer 2 switches forward broadcast frames (FF:FF:FF:FF:FF:FF) out all switch ports within the default VLAN (VLAN 1), keeping all 24 hosts and the router interface in one broadcast domain. The router interface drops Layer 2 broadcasts by default and does not forward them to other network segments.
Routers operate at Layer 3 and establish the boundary of a broadcast domain.

Anahtar Kavram

Collision and Broadcast Domain Separation across Layer 2 Switches and Routers
Soru 346Soru

Match each transport layer characteristic or mechanism on the left to its corresponding protocol behavior on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Sliding Windowing
8-Byte Header Overhead
Three-Way Handshake
Best-Effort Stateless Delivery

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Sliding Windowing pairs with dynamically regulating data transmission volume based on receiver buffer capacity; 8-Byte Header Overhead pairs with minimizing protocol processing delay and encapsulation size for low-latency applications; Three-Way Handshake pairs with synchronizing initial sequence numbers and establishing session state prior to data exchange; Best-Effort Stateless Delivery pairs with transmitting individual datagrams independently without session management or delivery confirmation.
TCP relies on connection-oriented mechanisms including sequence number synchronization via a three-way handshake (SYN, SYN-ACK, ACK) and dynamic sliding window flow control to manage receiver buffers. Conversely, UDP is connectionless and lightweight, utilizing a minimal fixed 8-byte header and best-effort delivery without state tracking or retransmission overhead.

Adım Adım Çözüm

1
Identify the connection-oriented reliability and flow control features associated with TCP.
Sliding Windowing regulates buffer data rate (TCP Flow Control), and the Three-Way Handshake synchronizes sequence numbers during session setup (TCP Connection Establishment).
TCP requires explicit state management, sequence verification, and flow negotiation between endpoints.
2
Identify the connectionless, low-overhead characteristics associated with UDP.
An 8-Byte Header Overhead minimizes processing latency, and Best-Effort Stateless Delivery transmits data without acknowledgments or session tracking.
UDP trades error recovery and session control for speed and reduced encapsulation header space.
3
Map each left transport layer term to its matching operational behavior on the right.
left_1 matches right_1, left_2 matches right_2, left_3 matches right_3, and left_4 matches right_4.
Matches align directly with TCP stateful reliability features versus UDP lightweight connectionless characteristics.

Anahtar Kavram

Transport Layer TCP Connection-Oriented Reliability vs UDP Connectionless Overhead
Soru 347Soru

An enterprise network architect is designing a Variable Length Subnet Mask (VLSM) address allocation plan starting at the base private IPv4 block 10.200.16.0/2010.200.16.0/20. Three internal subnets must be allocated sequentially in contiguous order from the lowest available boundary:

- Subnet A (WLAN Clients): Requires at least 1,0001,000 usable host IP addresses
- Subnet B (VoIP Phones): Requires at least 450450 usable host IP addresses
- Subnet C (Management): Requires at least 6060 usable host IP addresses

If Subnet A is allocated first, followed immediately by Subnet B, and then Subnet C, what is the valid usable host IPv4 address range for Subnet C?

Cevabı ve açıklamayı göster

Cevap: 10.200.22.1 to 10.200.22.62

Cevap

The valid usable host IPv4 address range for Subnet C is 10.200.22.1 to 10.200.22.62.
To calculate VLSM subnets sequentially from the base block 10.200.16.0/20:
1. Subnet A requires 1,000 usable host IPs. The smallest power of 2 minus 2 that satisfies this is 2^10 - 2 = 1,022 (10 host bits, /22 prefix). Allocated block: 10.200.16.0 to 10.200.19.255.
2. Subnet B starts at 10.200.20.0 and requires 450 usable host IPs. 2^9 - 2 = 510 (9 host bits, /23 prefix). Allocated block: 10.200.20.0 to 10.200.21.255.
3. Subnet C starts at 10.200.22.0 and requires 60 usable host IPs. 2^6 - 2 = 62 (6 host bits, /26 prefix). Network ID is 10.200.22.0 and broadcast is 10.200.22.63.
Thus, the usable host range for Subnet C is 10.200.22.1 through 10.200.22.62.

Adım Adım Çözüm

1
Calculate host bits and prefix length for Subnet A (1,000 hosts).
Host bits needed: h=10h = 10 (2102=1,0221,0002^{10} - 2 = 1,022 \ge 1,000). Prefix length: /22/22 (321032 - 10). Address block: 10.200.16.0/2210.200.16.0/22, spanning 10.200.16.010.200.16.0 through 10.200.19.25510.200.19.255.
Subnetting formula 2h22^h - 2 requires 10 host bits to fit 1,000 usable host addresses.
2
Determine starting address and size for Subnet B (450 hosts).
Start address: 10.200.20.010.200.20.0. Host bits needed: h=9h = 9 (292=5104502^9 - 2 = 510 \ge 450). Prefix length: /23/23 (32932 - 9). Address block: 10.200.20.0/2310.200.20.0/23, spanning 10.200.20.010.200.20.0 through 10.200.21.25510.200.21.255.
Sequential allocation places Subnet B immediately after Subnet A's broadcast boundary.
3
Determine starting address, size, and usable range for Subnet C (60 hosts).
Start address: 10.200.22.010.200.22.0. Host bits needed: h=6h = 6 (262=62602^6 - 2 = 62 \ge 60). Prefix length: /26/26 (32632 - 6). Network ID: 10.200.22.0/2610.200.22.0/26. Broadcast address: 10.200.22.6310.200.22.63. Usable range: 10.200.22.110.200.22.1 to 10.200.22.6210.200.22.62.
Subnet C starts at 10.200.22.0/2610.200.22.0/26. Usable hosts range from Network ID +1+ 1 to Broadcast 1- 1.

Anahtar Kavram

Variable Length Subnet Masking (VLSM) host requirement sizing and sequential subnet boundary calculation.
Soru 348Soru

A network engineer is configuring a point-to-point connection and internal VLANs within an enterprise infrastructure. An interface is assigned the IPv4 address 10.144.67.100/2110.144.67.100/21. What is the decimal value of the third octet of the broadcast address for the subnet to which this host belongs?

Cevabı ve açıklamayı göster

Cevap: 71

Cevap

The third octet of the broadcast address is 71 (broadcast address is 10.144.71.255).
For the prefix /21 (subnet mask 255.255.248.0), the third octet operates with a block size of 8 (256 - 248 = 8). The third octet value 67 falls into the subnet starting at 64 (10.144.64.0). The next subnet starts at 72 (10.144.72.0), making the broadcast address for the current subnet 10.144.71.255. The third octet of this broadcast address is 71.

Adım Adım Çözüm

1
Convert CIDR prefix /21 to dotted-decimal mask.
Mask is 255.255.248.0 (21 network bits: 8 + 8 + 5).
The third octet contains 5 subnet bits and 3 host bits.
2
Calculate the block size (increment) for the third octet.
256 - 248 = 8.
Subnets increment in steps of 8 in the third octet.
3
Find the third octet network boundary for IP 10.144.67.100.
Network address is 10.144.64.0.
The greatest multiple of 8 less than or equal to 67 is 64.
4
Determine the broadcast address of the subnet.
Broadcast address is 10.144.71.255.
The subnet spans from 10.144.64.0 to 10.144.71.255, one value prior to the next subnet 10.144.72.0.

Anahtar Kavram

Subnet Boundary and Broadcast Address Calculation
Soru 349Soru

An edge switch port connected directly to an end-host is configured with Cisco STP PortFast. Which operational benefit does PortFast provide when this link transitions to an up state?

Cevabı ve açıklamayı göster

Cevap: The interface immediately transitions to the forwarding state by bypassing the listening and learning states.

Cevap

The interface immediately transitions to the forwarding state by bypassing the listening and learning states.
Enabling PortFast on a Cisco switch access port connected to an end device allows the port to bypass the 802.1D listening and learning states, transitioning immediately to the forwarding state to eliminate initialization delays.

Adım Adım Çözüm

1
Analyze standard 802.1D STP port state transitions.
Standard ports move from Blocking to Listening (15s) to Learning (15s) before reaching Forwarding (30 seconds total delay).
This delay prevents temporary Layer 2 loops while topology information propagates.
2
Determine the impact of enabling PortFast on an access interface connected to an end-host.
The interface skips the Listening and Learning states and enters the Forwarding state immediately upon link-up.
End-user hosts do not form loops, so bypassing convergence timers prevents network timeouts for protocols like DHCP.

Anahtar Kavram

STP PortFast operational mechanism and convergence benefit
Soru 350Soru

An enterprise security audit reveals two critical vulnerabilities in a campus network infrastructure: administrative command entries sent to network switches during remote management sessions are logged in cleartext without granular per-command authorization, and unauthorized rogue devices plugged into active wall jacks in common areas gain immediate access to internal network segments. Which two security mitigations directly resolve these specific vulnerabilities? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Implementing TACACS+ for network device administration to mandate command-by-command authorization and encrypt the full packet payload.; Configuring Port Security on access switch ports to restrict link connectivity to authorized MAC addresses.

Cevap

Implementing TACACS+ for network device administration and configuring Port Security on access switch ports directly resolve the administrative cleartext/authorization gap and unauthorized physical access vulnerabilities.
The correct mitigations are implementing TACACS+ for device administration and configuring Port Security on access switch ports. TACACS+ operates over TCP port 49, encrypts the complete packet body, and permits granular authorization of individual administrative CLI commands. Port Security secures Layer 2 physical access ports by permitting only specified MAC addresses, effectively blocking rogue devices plugged into physical wall jacks.

Adım Adım Çözüm

1
Analyze the first identified vulnerability regarding switch administrative command security.
The requirement demands full packet encryption and per-command authorization for network administration.
TACACS+ uses TCP port 49, encrypts the entire packet payload, and allows administrators to control exactly which CLI commands individual users can execute.
2
Analyze the second identified vulnerability regarding rogue physical connections in common areas.
The requirement demands Layer 2 ingress filtering on access ports.
Port Security restricts interface traffic to dynamically learned or statically defined MAC addresses, dropping traffic or shutting down the port when an unauthorized device plugs in.
3
Evaluate why RADIUS and Standard ACLs fail as correct solutions.
RADIUS lacks full payload encryption and per-command authorization, while standard ACLs on access ports trigger implicit deny behavior for non-management host traffic.
Correct mitigations must address the specific root vulnerabilities without causing protocol mismatches or dropping legitimate network traffic.

Anahtar Kavram

AAA Framework Differences and Layer 2 Access Control Mitigations
Soru 351Soru

A network engineer is analyzing packet captures from a site-to-site IPsec VPN tunnel operating between two enterprise edge routers across an intermediate Internet Service Provider network with Port Address Translation (PAT). The captured traffic shows that Encapsulating Security Payload (ESP) is encapsulated inside UDP port 4500 packets rather than transmitted directly over IP protocol 50. Which statement correctly explains why UDP encapsulation was dynamically negotiated for this IPsec tunnel?

Cevabı ve açıklamayı göster

Cevap: Intermediate PAT devices require Layer 4 port numbers to multiplex traffic from multiple internal hosts, which raw IP protocol 50 headers lack.

Cevap

Intermediate PAT devices require Layer 4 port numbers to multiplex traffic from multiple internal hosts, which raw IP protocol 50 headers lack.
ESP uses raw IP protocol 50, which does not contain TCP/UDP Layer 4 port numbers. When a NAT/PAT device sits between IPsec endpoints, it cannot multiplex multiple internal host connections onto a shared public IP address without port numbers. NAT-T dynamically detects intermediate NAT/PAT devices and encapsulates ESP packets inside UDP port 4500 headers, allowing PAT gateways to perform stateful port translation.

Adım Adım Çözüm

1
Analyze the protocol characteristics of unencapsulated IPsec ESP traffic.
ESP operates directly above the IP layer as IP Protocol 50 and does not contain source or destination Layer 4 port numbers.
Without TCP or UDP port fields, a stateful Port Address Translation (PAT) device cannot track multiple internal IP address mappings to a single public IP address.
2
Identify how IPsec NAT Traversal (NAT-T) resolves PAT incompatibility.
During IKE negotiations, peers detect intermediate NAT devices and encapsulate ESP packets inside a UDP header using destination port 4500.
Adding the UDP header inserts valid Layer 4 port fields into the packet stream, enabling intermediate PAT routers to perform port translation and maintain session tables for ESP traffic.

Anahtar Kavram

IPsec NAT Traversal (NAT-T) and ESP Encapsulation Mechanics
Soru 352Soru

A Cisco router receives an IPv4 packet destined for 10.25.8.1210.25.8.12. The router inspects its routing table and finds the following matching route entries:

text
S 10.25.0.0/16 [1/0] via 172.16.1.1
O 10.25.8.0/23 [110/30] via 172.16.2.1
D 10.25.8.0/27 [90/2170112] via 172.16.3.1
S* 0.0.0.0/0 [1/0] via 172.16.0.1

Which next-hop IP address will the router choose to forward this packet?

Cevabı ve açıklamayı göster

Cevap: 172.16.3.1

Cevap

The router will forward the packet to next-hop 172.16.3.1 based on the longest prefix match rule.
The destination IP address 10.25.8.12 falls within the subnet range of 10.25.8.0/27 (10.25.8.0 to 10.25.8.31). Because /27 has the largest prefix length among all matching routes (/27 > /23 > /16 > /0), the router uses this route and forwards the packet to 172.16.3.1.

Adım Adım Çözüm

1
Evaluate which subnet prefixes match the destination IP address 10.25.8.12.
The destination address 10.25.8.12 matches 10.25.0.0/16, 10.25.8.0/23 (range 10.25.8.0–10.25.9.255), 10.25.8.0/27 (range 10.25.8.0–10.25.8.31), and 0.0.0.0/0.
Before making a forwarding decision, all matching routing entries must be identified.
2
Compare the prefix lengths of all matching routes to determine the most specific route.
The prefix length of /27 is longer (more specific) than /23, /16, and /0.
Cisco routers always prefer the route with the longest prefix match (most specific subnet mask), regardless of administrative distance or routing protocol metric.
3
Identify the next-hop address associated with the longest prefix route entry.
The entry 10.25.8.0/27 specifies the next-hop address 172.16.3.1.
The forwarding engine forwards the traffic out to the next-hop specified by the winning route.

Anahtar Kavram

Longest Prefix Match (LPM) Rule
Soru 353Soru

A network administrator executes the `show cdp neighbors` command on a Cisco Catalyst switch to inspect connected devices and receives the following output:

Device ID Local Intrfce Holdtme Capability Platform Port ID
SW-ACCESS-02 Gig 0/1 162 R S I WS-C3560 Gig 0/24

Based on this command output, which interface on the local switch directly connects to neighboring switch SW-ACCESS-02?

Cevabı ve açıklamayı göster

Cevap: GigabitEthernet 0/1

Cevap

The local switch interface connected to SW-ACCESS-02 is GigabitEthernet 0/1.
In the `show cdp neighbors` command output, the 'Local Intrfce' column specifies the physical interface on the current (local) switch where the CDP advertisement was received. For the entry corresponding to device SW-ACCESS-02, the 'Local Intrfce' is GigabitEthernet 0/1 (abbreviated as Gig 0/1).

Adım Adım Çözüm

1
Examine the column headers of the `show cdp neighbors` output
Identify the columns for neighbor identity ('Device ID'), local port ('Local Intrfce'), remaining hold time ('Holdtme'), neighbor platform ('Platform'), and remote port ('Port ID').
Understanding the CLI output structure allows distinguishing local interface bindings from remote device port identifiers.
2
Locate the entry corresponding to Device ID 'SW-ACCESS-02'
Match 'SW-ACCESS-02' with its row entry.
The row contains parameters specifically sent by and associated with that neighboring device.
3
Read the value under the 'Local Intrfce' column for that row
The value is 'Gig 0/1', corresponding to local interface GigabitEthernet 0/1.
The 'Local Intrfce' field explicitly specifies the port on the local switch receiving the CDP advertisements from the neighbor.

Anahtar Kavram

CDP Neighbor Output Data Parsing (Local vs Remote Interface Identification)
Soru 354Soru

A network administrator needs to configure an IPv6 static route on a Cisco IOS router to reach the destination prefix 2001:db8:1:10::/642001:\text{db8}:1:10::/64. Which of the following commands represent valid IPv6 static route configurations? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: ipv6 route 2001:db8:1:10::/64 2001:db8:1:1::2; ipv6 route 2001:db8:1:10::/64 GigabitEthernet0/0 fe80::1

Cevap

The valid IPv6 static route commands are 'ipv6 route 2001:db8:1:10::/64 2001:db8:1:1::2' (directly specifying a global unicast next-hop) and 'ipv6 route 2001:db8:1:10::/64 GigabitEthernet0/0 fe80::1' (fully specifying both the exit interface and the link-local next-hop address).
Valid Cisco IOS IPv6 static route configurations require the 'ipv6 route' keyword followed by the destination prefix. The next hop may be specified either as a global unicast IPv6 address directly, or as a link-local IPv6 address provided that the local exit interface is also explicitly specified.

Adım Adım Çözüm

1
Verify correct command prefix keyword for IPv6 static routing
Cisco IOS requires 'ipv6 route' rather than 'ip route'.
The 'ip route' command is strictly used for configuring IPv4 static routes.
2
Evaluate next-hop syntax with global unicast addresses
A global unicast IPv6 address can be configured directly as a next hop without specifying an exit interface.
Global unicast addresses are globally unique and routable across network interfaces.
3
Evaluate next-hop syntax with link-local addresses
A link-local next-hop address (fe80::/10) requires specifying the local exit interface alongside the address.
Link-local addresses are only valid on their specific local link, making the command ambiguous to the router if the exit interface is omitted.

Anahtar Kavram

IPv6 Static Route Command Syntax and Link-Local Next-Hop Requirements
Soru 355Soru

A network administrator is configuring a Cisco Catalyst switch running Rapid PVST+ to serve as a secondary root bridge for VLAN 20. The administrator intends to set a custom bridge priority using the command `spanning-tree vlan 20 priority <value>`. Which value will Cisco IOS accept for this command?

Cevabı ve açıklamayı göster

Cevap: 24576

Cevap

The correct option is 24576 because base bridge priority in Rapid PVST+ must be configured as a strict multiple of 4096.
In Rapid PVST+, Cisco IOS enforces that bridge priority settings configured via CLI must be exact multiples of 4096 (range 0 to 61440). The value 24576 equals 6 × 4096, making it a valid base priority parameter.

Adım Adım Çözüm

1
Understand Rapid PVST+ Priority Architecture
Rapid PVST+ uses the 802.1t System ID Extension, which splits the 16-bit Bridge Priority field into a 4-bit Priority field and a 12-bit System ID Extension (VLAN ID).
Because only the top 4 bits are allocated for configurable priority, priority values can only change in steps of 212=40962^{12} = 4096.
2
Evaluate CLI configuration requirements
When executing `spanning-tree vlan <vlan-id> priority <value>`, the `<value>` parameter must be a multiple of 4096 (e.g., 0, 4096, 8192, 12288, 16384, 20480, 24576, 28672, 32768, etc.).
Cisco IOS automatically adds the VLAN ID to the base priority when constructing the BPDU, so the user must specify the unshifted base priority.
3
Test candidate values
Calculating 24576/4096=624576 / 4096 = 6, which is an exact integer. Other choices (24596, 20000, 8212) leave non-zero remainders when divided by 4096.
Only 24576 satisfies the increment requirement and will be accepted by Cisco IOS.

Anahtar Kavram

Rapid PVST+ Bridge Priority Configuration and 4096 Increment Constraint
Soru 356Soru

An administrator examines an IPv4 routing table entry on a Cisco router:

`D 192.168.50.0/24 [90/2170112] via 10.1.1.2, 00:04:12, GigabitEthernet0/1`

Which two statements correctly describe the components of this routing entry? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The value 90 represents the administrative distance of the route source.; The IP address 10.1.1.2 identifies the next-hop router address to forward packets destined for 192.168.50.0/24.

Cevap

The correct statements are that the value 90 represents the administrative distance of the route source, and the IP address 10.1.1.2 identifies the next-hop router address for forwarding packets.
In a Cisco IP routing table entry formatted as `[AD/Metric] via Next-Hop`, the first number inside the square brackets (90) is the administrative distance, which reflects the trustworthiness of EIGRP routes. The IP address following 'via' (10.1.1.2) represents the next-hop forwarding address.

Adım Adım Çözüm

1
Parse the bracketed numbers [90/2170112] in the routing table output.
The first number inside the brackets (90) is the Administrative Distance (AD), and the second number (2170112) is the Metric (cost).
Cisco IOS routing tables always display route metrics in the standard format [Administrative Distance / Metric].
2
Identify the next-hop address following the 'via' keyword.
The IP address 10.1.1.2 is identified as the next-hop router IP.
The 'via' field specifies the neighboring router interface to which packets matching the prefix must be sent.
3
Interpret the source code prefix 'D'.
'D' represents EIGRP dynamic routing protocol, not a static route.
The routing table legend uses 'S' for static routes and 'D' for EIGRP routes.

Anahtar Kavram

Interpretation of Cisco IP routing table entry components including administrative distance, metric, next-hop address, and route source codes.
Tahmini Süre:45s
Soru 357Soru

A network administrator needs to configure a static route on a Cisco router to reach destination network 2001:DB8:ABCD:10::/642001:\text{DB8}:\text{ABCD}:10::/64. The adjacent router's link-local address is FE80::2:1\text{FE80}::2:1 and the local outbound interface is GigabitEthernet0/0. Which Cisco IOS command correctly configures this IPv6 static route?

Cevabı ve açıklamayı göster

Cevap: ipv6 route 2001:DB8:ABCD:10::/64 GigabitEthernet0/0 FE80::2:1

Cevap

The command 'ipv6 route 2001:DB8:ABCD:10::/64 GigabitEthernet0/0 FE80::2:1' correctly configures the static route.
When configuring an IPv6 static route using a link-local next-hop address, Cisco IOS requires specifying the local exit interface because link-local addresses are ambiguous and exist on every interface. The correct syntax specifies the exit interface followed by the link-local address.

Adım Adım Çözüm

1
Identify destination prefix and next-hop type
Destination prefix is 2001:DB8:ABCD:10::/642001:\text{DB8}:\text{ABCD}:10::/64, and next-hop is link-local FE80::2:1\text{FE80}::2:1.
Link-local addresses are non-routable outside the local link segment.
2
Apply Cisco IOS fully specified static route rule
Because link-local addresses are ambiguous across multiple interfaces, the exit interface GigabitEthernet0/0 must be included before the next-hop address.
Cisco IOS requires syntax: `ipv6 route <prefix/mask> <exit-interface> <next-hop-address>` when using link-local addresses.

Anahtar Kavram

Fully Specified IPv6 Static Route Syntax using Link-Local Next-Hop
Tahmini Süre:45s
Soru 358Soru

A network engineer transitions several Cisco Lightweight Access Points (LAPs) deployed at a branch office from default Local mode to FlexConnect mode with local switching enabled for the corporate employee wireless network. The switch ports connected to these APs are currently configured as Layer 2 access ports assigned to VLAN 10 (Management). Following the transition, AP-to-WLC CAPWAP control connectivity remains healthy, but wireless clients connecting to the employee SSID (mapped to VLAN 20) fail to obtain IP addresses or communicate with local resources. Which configuration change must be applied to the access switch ports to restore client connectivity on the employee WLAN?

Cevabı ve açıklamayı göster

Cevap: Reconfigure the switch ports as 802.1Q trunk ports with VLAN 10 configured as the native VLAN and allow VLAN 20 on the trunk.

Cevap

Reconfigure the switch ports as 802.1Q trunk ports with VLAN 10 configured as the native VLAN and allow VLAN 20 on the trunk.
When a Cisco LAP operates in FlexConnect mode with local switching, client traffic is broken out locally at the AP's physical switch port. To carry untagged AP management traffic alongside tagged client VLAN traffic (such as VLAN 20), the connected switch port must be configured as an 802.1Q trunk with the AP management VLAN (VLAN 10) specified as the native VLAN.

Adım Adım Çözüm

1
Analyze AP mode traffic behavior differences between Local mode and FlexConnect mode.
In Local mode, all client traffic is encapsulated in CAPWAP and sent to the WLC, requiring only a simple switch access port in the AP management VLAN. In FlexConnect local switching mode, client traffic is switched locally onto the Ethernet switch port.
Understanding how traffic leaves the AP determines the required switch port mode.
2
Identify the VLAN requirements for the FlexConnect AP connection.
The AP requires management traffic on VLAN 10 (untagged CAPWAP traffic) and wireless client traffic tagged for VLAN 20.
Carrying both tagged client traffic and untagged management traffic over a single physical cable requires an 802.1Q trunk.
3
Determine the necessary switch port trunk settings.
The switch port must be set to trunk mode (`switchport mode trunk`), with VLAN 10 set as the native VLAN (`switchport trunk native vlan 10`) so CAPWAP management traffic remains untagged, while allowing VLAN 20 for client traffic.
This allows the AP to maintain its CAPWAP tunnel while successfully bridging tagged client packets to the local switch.

Anahtar Kavram

FlexConnect AP Switch Port Infrastructure Trunking
Tahmini Süre:2m 0s
Soru 359Soru

A network engineer is interconnecting two legacy network switches via their FastEthernet interfaces. Neither switch interface supports IEEE 802.3ab Auto-MDIX. Which physical cable type and pin mapping must be used on this link to establish Layer 1 connectivity?

Cevabı ve açıklamayı göster

Cevap: A crossover cable with pins 1 and 2 on one end connected to pins 3 and 6 on the opposite end

Cevap

A crossover cable with pins 1 and 2 on one end connected to pins 3 and 6 on the opposite end must be used to interconnect the two switches.
When connecting two switch interfaces (both MDI-X) without Auto-MDIX support, an Ethernet crossover cable is mandatory. In FastEthernet (100BASE-TX), pins 1 and 2 transmit data while pins 3 and 6 receive data. The crossover cable swaps pins 1 and 2 on one connector to pins 3 and 6 on the opposite connector so transmit signals reach the receiver on the other side.

Adım Adım Çözüm

1
Identify the device types and port pinouts.
Both switches use MDI-X (Medium Dependent Interface Crossover) port pinouts on their FastEthernet interfaces.
Like network devices (such as switch-to-switch or router-to-PC) operate with identical pin configurations.
2
Evaluate the requirement for crossover wiring when Auto-MDIX is unavailable.
The transmit pair (pins 1 and 2) of one switch must connect to the receive pair (pins 3 and 6) of the opposing switch.
Without Auto-MDIX, the interface cannot automatically reassign transmit and receive functions dynamically.

Anahtar Kavram

Ethernet Crossover Cable Pinout Requirements
Tahmini Süre:1m 0s
Soru 360Soru

Match each VPN implementation type or protocol combination on the left with its corresponding operational characteristic on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Clientless SSL VPN
IPsec Site-to-Site VPN
GRE over IPsec VPN
Client-based Remote Access VPN

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Clientless SSL VPN matches browser-based access without dedicated software; IPsec Site-to-Site VPN matches static tunnel connecting permanent gateways; GRE over IPsec VPN matches encapsulation of multicast and routing protocols before encryption; Client-based Remote Access VPN matches endpoint software providing full Layer 3 access.
Each match correctly aligns the VPN architecture with its technical implementation constraint. Clientless SSL VPN enables browser-only web access without software installation; IPsec Site-to-Site securely interconnects fixed branch locations; GRE over IPsec allows multicast and dynamic routing over an encrypted tunnel; Client-based Remote Access VPN utilizes software installed on the endpoint to provide full Layer 3 network connectivity.

Adım Adım Çözüm

1
Analyze the requirements for remote access vs site-to-site topologies.
Identified that fixed gateway connectivity corresponds to Site-to-Site IPsec, while individual end-user connection models split into Clientless and Client-based Remote Access VPNs.
Topology type dictates whether gateways or endpoints initiate and terminate the tunnel.
2
Differentiate Clientless SSL VPN from Client-based Remote Access VPN.
Clientless uses web browsers for web application proxy access; Client-based requires installed software (e.g., AnyConnect) for full Layer 3 subnet connectivity.
Client software determines the depth of network access provided to the endpoint device.
3
Evaluate transport limitations of IPsec vs GRE over IPsec.
Native IPsec only supports IP unicast packets, requiring GRE encapsulation to carry routing protocol multicast packets through an IPsec encrypted tunnel.
Dynamic routing protocols depend on multicast packets to form neighbor adjacencies across VPN tunnels.

Anahtar Kavram

Remote Access and Site-to-Site VPN Architectures and Capabilities
ÖncekiSayfa 18 / 100Sonraki
Tüm alıştırma soruları — Cisco CCNA | Examkin