Tüm alıştırma soruları

1987 soru

Soru 581Soru

A network administrator modifies the OSPFv2 router ID on an operational Cisco router by issuing the command `router-id 10.50.1.1` under `router ospf 1`. A system message informs the administrator that the change will not take effect until the OSPF process is reset. Which privileged EXEC mode command must be executed to immediately apply the new router ID?

Cevabı ve açıklamayı göster

Cevap: clear ip ospf process; clear ip ospf 1 process; clear ip ospf process 1

Cevap

clear ip ospf process
When the `router-id` command is configured under an active OSPF process, Cisco IOS does not immediately change the operational Router ID in order to prevent unexpected disruption of established neighbor adjacencies. Executing the privileged EXEC command `clear ip ospf process` clears all OSPF structures and restarts the process, allowing the new router ID to take effect immediately.

Adım Adım Çözüm

1
Analyze how OSPF handles changes to the Router ID on an active process.
Configuring the `router-id` command dynamically alters the intended configuration, but Cisco IOS holds the current active Router ID to prevent disrupting current neighbor adjacencies.
To apply the new Router ID without rebooting the entire device, the OSPF software process must be manually restarted.
2
Determine the exact command required in privileged EXEC mode to restart the OSPF process.
The command `clear ip ospf process` resets the OSPF database and neighbor relationships, forcing OSPF to re-initialize with the newly configured Router ID.
Running `clear ip ospf process` forces the OSPF process to tear down adjacencies and rebuild them using the new router ID.

Anahtar Kavram

OSPFv2 Router ID Modification and Process Reset
Soru 582Soru

An administrator configures port security on an enterprise access switch interface using the switchport port-security mac-address sticky command to restrict network access to authorized devices. Endpoints connect successfully and their hardware addresses are added to the active configuration as sticky entries. Following an unexpected power maintenance event, the switch reboots. When the authorized endpoints attempt to reconnect, port security violation alerts are triggered and traffic is blocked. Which administrative oversight caused this issue after the switch rebooted?

Cevabı ve açıklamayı göster

Cevap: The administrator failed to save the running configuration to the startup configuration after the sticky MAC addresses were learned.

Cevap

The administrator failed to copy the running configuration containing the learned sticky MAC addresses to the startup configuration prior to the reboot.
The command switchport port-security mac-address sticky dynamically learns connected MAC addresses and converts them into sticky secure MAC address entries in the running configuration (stored in volatile RAM). If the administrator does not save the running configuration to the startup configuration (stored in NVRAM) using copy running-config startup-config or write memory, all learned MAC addresses are lost upon reboot. When the switch comes back online, its sticky MAC table is empty, causing returning authorized devices to be flagged as unknown/unauthorized and triggering security violations.

Adım Adım Çözüm

1
Analyze how sticky MAC address learning operates in Cisco IOS port security.
When sticky MAC learning is enabled, dynamically learned MAC addresses are automatically added to the running configuration (RAM).
Sticky MAC entries allow dynamic learning without requiring manual static MAC entry CLI typing.
2
Evaluate the effect of a device reboot on RAM vs. NVRAM.
Unsaved changes stored only in RAM (running configuration) are erased when the switch reboots.
Only startup configuration stored in NVRAM persists across switch reboots.
3
Determine why violations occurred post-reboot.
Because the sticky MAC entries were erased during the reboot, reconnecting devices were treated as unauthorized MAC addresses, triggering port security violations.
Saving the configuration with copy running-config startup-config is mandatory to persist sticky MAC entries across reboots.

Anahtar Kavram

Port Security Sticky MAC Address Persistence
Soru 583Soru

An engineer is configuring router R1 to reach the internal network 10.50.0.0/1610.50.0.0/16 using a backup path via next-hop IPv4 address 192.168.12.2192.168.12.2. The primary route to 10.50.0.0/1610.50.0.0/16 is currently dynamically learned via EIGRP with an administrative distance of 9090. Which command must be configured on R1 so that the static route functions as a floating static route and only enters the routing table if the primary route fails?

Cevabı ve açıklamayı göster

Cevap: ip route 10.50.0.0 255.255.0.0 192.168.12.2 95

Cevap

ip route 10.50.0.0 255.255.0.0 192.168.12.2 95
The command 'ip route 10.50.0.0 255.255.0.0 192.168.12.2 95' correctly specifies the target network, subnet mask, next-hop IP address, and an administrative distance of 95. Because 95 is greater than the EIGRP administrative distance of 90, the router will keep this static route out of the routing table until the primary EIGRP route fails.

Adım Adım Çözüm

1
Identify the primary route protocol and its administrative distance.
The primary route is learned via EIGRP, which has an Administrative Distance (AD) of 90.
Floating static routes rely on a higher AD value than the primary path to remain dormant in the routing table.
2
Determine the required Administrative Distance for the floating static route.
The static route must have an AD greater than 90 (such as 95).
Cisco routers prefer routes with lower AD values; setting the AD higher ensures it is only installed when the primary route disappears.
3
Verify Cisco IOS static route CLI command syntax.
The format is 'ip route <destination-prefix> <subnet-mask> <next-hop-ip> [administrative-distance]'.
Using dotted-decimal subnet masks and placing the AD at the end of the command line complies with Cisco IOS syntax.

Anahtar Kavram

Floating Static Route Administrative Distance Configuration
Tahmini Süre:1m 0s
Soru 584Soru

A network administrator inspects a Cisco IOS router configuration and observes the following line:

`username admin privilege 15 secret 9 99 eG8H$kQzP8xY...`

Which encryption algorithm or password type is used to secure the password for this local account?

Cevabı ve açıklamayı göster

Cevap: scrypt (Type 9)

Cevap

The scrypt algorithm (Type 9) is used to hash the password.
In Cisco IOS software, configuring a password with the 'secret 9' keyword applies the scrypt hashing algorithm to protect the local credential in the running configuration.

Adım Adım Çözüm

1
Examine the CLI syntax from the running configuration line.
The CLI keyword 'secret 9' and the identifier '99' specify the exact password algorithm type.
Cisco IOS explicitly maps numeric type identifiers to specific hash algorithms.
2
Correlate the Cisco IOS password type number to its algorithm.
Type 9 corresponds to the scrypt password-hashing algorithm.
scrypt was introduced in Cisco IOS to provide stronger security than legacy Type 5 (MD5) and Type 7 (Vigenère) methods.

Anahtar Kavram

Cisco IOS Local Password Hashing Types
Soru 585Soru

An enterprise core router is designated to act as both an NTP client to an upstream stratum 2 server and an NTP server for internal distribution switches. To ensure reliable operations and consistent packet parameters, the network engineer must force the router to send NTP packets using a specific logical interface address and allow the router to serve as an authoritative time source if the upstream connection becomes unavailable. Which TWO Cisco IOS global configuration commands satisfy these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: ntp source Loopback0; ntp master 5

Cevap

The correct commands are 'ntp source Loopback0' and 'ntp master 5'.
Configuring 'ntp source Loopback0' ensures all outbound NTP control packets carry the loopback IP address as their source address, which aids access list matching and system stability. Configuring 'ntp master 5' allows the router to serve as a backup NTP server to downstream peers/clients at Stratum 5 when upstream synchronization fails.

Adım Adım Çözüm

1
Identify the requirement for specifying the NTP packet source address.
The global configuration command 'ntp source <interface>' ensures NTP request/response packets use a stable IP address.
Loopback interfaces remain up as long as the router is powered, providing a consistent source IP for network management and security control.
2
Identify the requirement for providing fallback authoritative time synchronization.
The global configuration command 'ntp master [stratum]' enables the internal hardware clock to act as an NTP server.
Setting 'ntp master 5' allows downstream clients to synchronize with this device at stratum 5 if connection to the primary stratum 2 server is lost.

Anahtar Kavram

NTP Source Interface and Master Clock Fallback Configuration
Soru 586Soru

A network technician is tasked with securing direct physical access to a Cisco switch console. Which two configuration steps are required to ensure that users connecting through the console port are authenticated against user accounts stored in the local device database? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure the 'login local' command under line console 0 configuration mode.; Define a user account using the 'username <name> secret <password>' command in global configuration mode.

Cevap

To enforce local database authentication on the console line, a user account must be created in global configuration mode using 'username <name> secret <password>', and the console line must be configured with 'login local'.
Local authentication requires both a local database entry (created via global configuration 'username secret') and telling the specific line interface to check that database (using 'login local' under line console 0).

Adım Adım Çözüm

1
Define local user credentials
User accounts are created in the local device database using global configuration commands.
The router or switch requires predefined accounts in its running configuration to perform local authentication.
2
Enable local authentication on the console line
Entering 'line console 0' and configuring 'login local' directs authentication attempts to the local user database.
Without 'login local', the line will either use a simple line password or allow unauthenticated access depending on default settings.

Anahtar Kavram

Local User Database Authentication on Cisco IOS Lines
Soru 587Soru

During a network maintenance window, a network engineer attempts to transfer a software image to a Cisco IOS XE switch located across an enterprise WAN link with mild latency and occasional packet loss. When using Trivial File Transfer Protocol (TFTP), the transfer repeatedly stalls and experiences severe throughput degradation whenever a single packet is dropped. However, when switching to File Transfer Protocol (FTP) over the same link, the transfer completes smoothly despite identical network conditions. Which underlying transport protocol characteristic explains why FTP recovers from packet loss far more efficiently than TFTP during file transfers?

Cevabı ve açıklamayı göster

Cevap: FTP operates over TCP using dynamic sliding window mechanisms and selective acknowledgments, whereas TFTP operates over UDP using a lock-step stop-and-wait acknowledgment mechanism where each individual block must be acknowledged before the next block is transmitted.

Cevap

FTP operates over TCP using sliding window mechanisms, whereas TFTP operates over UDP using a lock-step stop-and-wait acknowledgment mechanism where each block must be acknowledged prior to sending the next.
The correct answer highlights the foundational difference in flow control and reliability mechanics. FTP utilizes TCP, which features sliding window mechanisms that allow continuous stream transmission and selective retransmission of missing segments. TFTP uses UDP and requires an explicit ACK for every single data block before transmitting the next block (stop-and-wait), creating massive throughput bottlenecks when packets are dropped over WAN links.

Adım Adım Çözüm

1
Analyze transport protocols utilized by TFTP and FTP.
TFTP runs over UDP on port 69, while FTP runs over TCP on ports 20 and 21.
Understanding the transport layer foundation determines reliability mechanics.
2
Examine TFTP application-layer behavior during file transfer.
TFTP uses a lock-step (stop-and-wait) protocol design where block NN must be explicitly acknowledged by the receiver before block N+1N+1 can be sent.
Because UDP does not provide native sequence numbers or windowing, TFTP enforces retransmission at the application layer per block.
3
Examine FTP transport-layer behavior during file transfer.
FTP relies on TCP's connection-oriented sliding window flow control, sequence numbers, and cumulative/selective ACKs.
TCP allows multiple segments to be transmitted concurrently without waiting for individual acknowledgments, drastically diminishing loss recovery overhead over WAN links.

Anahtar Kavram

TFTP (UDP 69, lock-step stop-and-wait per block) vs FTP (TCP 20/21, sliding windows, reliable streaming)
Soru 588Soru

A network administrator is troubleshooting an OSPFv2 neighbor relationship between two directly connected Cisco routers, R1 and R2. Execution of the `show ip ospf neighbor` command on R1 reveals that the adjacency state with R2 remains persistently stuck in the EXSTART state. Which configuration mismatch is the primary cause of this behavior?

Cevabı ve açıklamayı göster

Cevap: The maximum transmission unit (MTU) size differs between the interconnecting interfaces on R1 and R2.

Cevap

The maximum transmission unit (MTU) size differs between the interconnecting interfaces on R1 and R2.
When OSPF routers establish adjacency, they exchange Database Description (DBD) packets during the EXSTART and EXCHANGE states. By default, Cisco routers include the interface MTU in DBD packets. If the MTU values on the connecting interfaces do not match, the router with the larger MTU sends DBD packets that the other router drops, or the router receiving a higher MTU value rejects the DBD packet. Consequently, the neighbor relationship gets stuck in the EXSTART (or EXCHANGE) state.

Adım Adım Çözüm

1
Identify mandatory OSPF Hello packet matching parameters versus post-Hello exchange parameters.
Hello packet parameters (Area ID, Hello/Dead timers, Subnet Mask, Authentication) must match for routers to establish a neighbor relationship.
If Hello parameters mismatch, routers ignore Hello packets and never transition past DOWN state.
2
Analyze OSPF neighbor state progression to EXSTART.
Transitioning to EXSTART indicates that Hello packets were accepted and the routers passed through INIT and 2-WAY states.
In EXSTART, routers negotiate Master/Slave roles and initial Sequence Numbers using Database Description (DBD) packets.
3
Determine the cause of persistent EXSTART/EXCHANGE state hangs.
An interface MTU mismatch causes DBD packets exceeding the smaller MTU to be dropped or ignored, leaving the neighbor stuck in EXSTART.
Cisco IOS checks the Interface MTU field in incoming DBD packets by default; if there is a mismatch, the exchange cannot complete.

Anahtar Kavram

OSPFv2 Adjacency Requirements and MTU Verification in EXSTART State
Soru 589Soru

A network administrator is configuring logging thresholds and destinations on a Cisco IOS device to monitor system events. Which TWO statements accurately describe Cisco IOS syslog operations and severity levels?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The logging trap global configuration command specifies the severity threshold for syslog messages sent to an external syslog server.; Syslog severity level 3 represents Error conditions, which are more critical than severity level 5 Notice conditions.

Cevap

The statement that the 'logging trap' command sets the severity threshold for remote syslog servers and the statement that severity level 3 (Error) is more critical than severity level 5 (Notice) are correct.
The 'logging trap' global configuration command specifies the severity threshold for log messages forwarded to external syslog servers. Additionally, syslog severity numerical levels range from 0 (Emergency) to 7 (Debugging), meaning lower numerical values indicate higher severity/criticality. Severity level 3 (Error) is higher priority than severity level 5 (Notice).

Adım Adım Çözüm

1
Analyze the function of the 'logging trap' command
Confirm that 'logging trap' defines the severity threshold for forwarding log messages to a remote syslog daemon.
By default, Cisco IOS forwards messages up to level 6 (Informational) to configured syslog hosts, which is modified globally using 'logging trap <level>'.
2
Evaluate the syslog severity numerical hierarchy
Recall that syslog severity numbers range from 0 (Emergency - highest priority) to 7 (Debugging - lowest priority).
Lower numerical values represent higher criticality. Level 3 (Error) is therefore higher priority than Level 5 (Notice).
3
Evaluate the incorrect choices regarding logging thresholds and destinations
A trap threshold of 4 includes all levels 0 through 4 (so level 2 messages are sent). Displaying log messages on SSH or Telnet terminal sessions requires 'terminal monitor', whereas 'logging buffered' stores logs in system RAM.
Common candidate misconceptions invert numerical severity levels or confuse RAM log buffering with active terminal session monitoring.

Anahtar Kavram

Syslog Severity Levels and Log Destination Configuration
Soru 590Soru

Two Cisco routers are connected via a point-to-point Ethernet link and are configured to form an OSPFv2 neighbor relationship. Which two parameters transmitted within the OSPF Hello packet must match between both routers for an OSPFv2 neighbor adjacency to be successfully established? (Choose two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Area ID; Hello and Dead timer intervals

Cevap

The correct parameters that must match in the OSPF Hello packet are the Area ID and the Hello and Dead timer intervals.
To form an OSPFv2 neighbor relationship, neighboring routers must share identical parameters in their Hello packets. Specifically, the Area ID and the configured Hello and Dead timer intervals must match. If either setting differs, the routers will refuse to transition past the INIT neighbor state.

Adım Adım Çözüm

1
Analyze OSPF Hello packet contents required for neighbor formation.
Identify parameters exchange requirements during the Init and 2-Way neighbor state transitions.
OSPF routers inspect Hello packets received on an interface to verify compatible parameters.
2
Evaluate required matching parameters versus local settings.
Confirm that Area ID, Subnet Mask (on multiaccess links), Hello/Dead timers, Authentication, and Stub flags must match.
If any mandatory parameter mismatches, the Hello packet is discarded or the neighbor remains in the INIT state.
3
Evaluate non-matching parameters.
Determine that Process ID is local only, and Router ID must be unique rather than identical.
Process ID identifies local IOS memory processes, while duplicate Router IDs cause database conflict.

Anahtar Kavram

OSPFv2 Neighbor Adjacency Requirements
Soru 591Soru

A network engineer must configure router R1 with a primary static route to reach destination subnet 192.168.20.0/24192.168.20.0/24 using next-hop IPv4 address 10.1.12.210.1.12.2. Additionally, a backup (floating) static route to the same destination subnet must be configured using next-hop IPv4 address 10.1.14.210.1.14.2 so that it only enters the routing table if the primary path becomes unavailable. Which TWO static route configuration commands must be applied on router R1 to satisfy these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: ip route 192.168.20.0 255.255.255.0 10.1.12.2; ip route 192.168.20.0 255.255.255.0 10.1.14.2 10

Cevap

The primary path requires the standard command 'ip route 192.168.20.0 255.255.255.0 10.1.12.2' (default AD of 1), while the backup path requires 'ip route 192.168.20.0 255.255.255.0 10.1.14.2 10' with a higher administrative distance.
To create a primary and backup static route relationship, the primary route is configured with the standard static syntax 'ip route 192.168.20.0 255.255.255.0 10.1.12.2', which defaults to an administrative distance of 1. The backup (floating) static route is configured with an administrative distance value strictly greater than the primary route's AD (such as 10) via 'ip route 192.168.20.0 255.255.255.0 10.1.14.2 10'. This ensures the backup route remains inactive until the primary route drops from the routing table.

Adım Adım Çözüm

1
Identify the proper Cisco IOS static route syntax.
The command syntax is 'ip route <destination-prefix> <subnet-mask> <next-hop-ip> [administrative-distance]'.
This establishes reachability to the destination network via a specified next-hop address.
2
Determine the administrative distance (AD) for the primary static route.
Reaching 192.168.20.0/24 via 10.1.12.2 uses the default static AD of 1.
Static routes without an explicit distance parameter default to an AD of 1.
3
Determine the administrative distance required for a floating static backup route.
The backup path via 10.1.14.2 requires an AD greater than 1 (such as 10).
A higher AD keeps the route out of the routing table until the lower AD primary route fails.

Anahtar Kavram

IPv4 Floating Static Route Configuration and Administrative Distance
Soru 592Soru

An enterprise network security team is establishing formal terminology for a security awareness program. Match each fundamental security concept on the left to its corresponding description on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Vulnerability
Threat
Risk
Exploit

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Vulnerability matches with 'A flaw or weakness in system design, configuration, or software code that leaves an asset exposed.'; Threat matches with 'Any potential circumstance, event, or malicious actor with the capability to cause harm or disrupt operations.'; Risk matches with 'The operational or financial impact resulting from the probability that a specific weakness will be targeted.'; Exploit matches with 'A specific payload, script, or procedure crafted to leverage a system weakness to gain unauthorized access.'
Vulnerability describes internal weaknesses in design or code. Threat identifies potential external forces or malicious actors that cause harm. Risk quantifies the financial or operational impact of a threat targeting a vulnerability. Exploit defines the specific payload or script used to attack a flaw.

Adım Adım Çözüm

1
Identify internal system weaknesses
Map Vulnerability to the description of system flaws, configuration errors, or software bugs.
Vulnerabilities reside within the target infrastructure regardless of whether an active attack occurs.
2
Identify potential external or environmental hazards
Map Threat to potential circumstances or actors capable of causing disruption or harm.
Threats represent potential sources of danger, such as malware, hackers, or natural disasters.
3
Analyze probability and potential consequences
Map Risk to the calculated likelihood and organizational impact of a security incident.
Risk evaluates the intersection where an active threat capability targets an existing vulnerability.
4
Identify attack weaponization tools
Map Exploit to software payloads or procedures designed to take advantage of system weaknesses.
An exploit is the specific code or sequence of commands used by an adversary to abuse a flaw.

Anahtar Kavram

Key Security Concepts, Threats, Vulnerabilities, and Mitigations
Soru 593Soru

A network administrator is configuring a Cisco IOS router to synchronize its clock with a remote time server located at IP address 192.168.10.5. The router must operate strictly in client mode, polling time from the specified server without allowing the remote device to synchronize to the local router clock. Which global configuration command meets this requirement?

Cevabı ve açıklamayı göster

Cevap: ntp server 192.168.10.5

Cevap

The command 'ntp server 192.168.10.5' configures the router to operate in NTP client mode toward the target server.
The global configuration command 'ntp server 192.168.10.5' configures the router as an NTP client to the target remote NTP server. In client mode, the local device receives time updates from the specified server but will not allow the server to synchronize to the local system clock.

Adım Adım Çözüm

1
Identify the required NTP association mode
The requirement specifies a client-server relationship where the local device polls time from the remote server without providing time to it.
NTP supports client/server, peer, and master modes.
2
Select the corresponding Cisco IOS global configuration syntax
The command 'ntp server <ip-address>' establishes a client-to-server NTP association.
'ntp peer' creates a symmetric active partnership, while 'ntp master' enables local authoritative master clock operation.

Anahtar Kavram

NTP Client vs Peer Mode Configuration
Soru 594Soru

An enterprise network administrator is deploying Quality of Service (QoS) across access switch ports where desktop PCs are daisy-chained through Cisco IP Phones. Which two statements accurately describe Layer 2 and Layer 3 QoS field characteristics and trust boundary enforcement in this design?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The 3-bit Class of Service (CoS) priority field is located in the IEEE 802.1Q header tag and is stripped when frames cross a Layer 3 routed boundary.; Extending a trust boundary to the Cisco IP Phone allows the switch to accept voice CoS values from the phone while re-marking untrusted data traffic from the PC to CoS 0.

Cevap

The two correct statements are that the 3-bit Class of Service (CoS) field resides within the IEEE 802.1Q header tag and is stripped when traversing a Layer 3 boundary, and extending the trust boundary to a Cisco IP Phone allows trusting phone voice markings while re-marking untrusted PC traffic to CoS 0.
Layer 2 Class of Service (CoS) consists of 3 bits in the 802.1Q header tag, which is removed whenever a router decapsulates an Ethernet frame at a Layer 3 boundary. Additionally, extending a trust boundary to a Cisco IP Phone ensures that voice traffic from the phone retains high priority while untrusted PC frames passing through the phone are reset to CoS 0 / DSCP 0.

Adım Adım Çözüm

1
Analyze Layer 2 vs Layer 3 QoS header field encapsulation
CoS is a 3-bit field (Priority Code Point / PCP) inside the 802.1Q VLAN tag. Because Layer 2 tags are stripped by a router at a L3 hop, CoS markings do not survive routing unless translated into 6-bit L3 DSCP markings within the IP header.
Differentiates L2 link-specific marking from L3 end-to-end IP marking.
2
Evaluate Cisco IP Phone trust boundary behavior
Using commands such as `mls qos trust device cisco-phone`, the switch trusts the CoS/DSCP generated by the phone itself but forces untrusted PC traffic arriving at the phone's switch port down to CoS 0.
Prevents end-user PCs from spoofing high-priority QoS markings to gain unauthorized bandwidth prioritization.
3
Differentiate Traffic Policing mechanics from Traffic Shaping and Queuing
Policers measure traffic against a CIR and enforce rate limits by dropping or remarking excess frames immediately without buffering. Buffering excess burst packets is exclusively performed by shapers.
Refutes distractors that claim policing buffers or queues non-conforming traffic.

Anahtar Kavram

QoS Trust Boundaries, CoS vs DSCP Header Lifecycles, and Policing Mechanics
Tahmini Süre:2m 0s
Soru 595Soru

An enterprise router is experiencing intermittent interface flaps. To capture log messages for troubleshooting, an engineer configures the commands `logging host 172.16.10.5` and `logging trap notice` in global configuration mode. Which set of syslog severity levels will the router send to the remote server?

Cevabı ve açıklamayı göster

Cevap: Emergency, Alert, Critical, Error, Warning, and Notice (levels 0 through 5)

Cevap

The router will send Emergency, Alert, Critical, Error, Warning, and Notice messages (numerical severity levels 0 through 5) to the remote syslog host.
In Cisco IOS, syslog trap thresholds include the configured severity level and all levels of higher criticality (which have lower numerical values). The `notice` keyword corresponds to severity level 5. Therefore, messages with severity levels 0 (Emergency), 1 (Alert), 2 (Critical), 3 (Error), 4 (Warning), and 5 (Notice) are forwarded to the configured syslog host.

Adım Adım Çözüm

1
Identify the numerical value associated with the specified syslog severity keyword.
The syslog keyword `notice` corresponds to severity level 5.
Cisco IOS syslog severity levels range from 0 (Emergency) to 7 (Debugging), where level 5 represents Notice messages.
2
Apply the Cisco IOS trap logging threshold logic.
Configuring `logging trap notice` directs the router to send all log messages with a numerical severity level less than or equal to 5 (levels 0, 1, 2, 3, 4, and 5).
Lower numerical severity values indicate higher criticality in Syslog logging.

Anahtar Kavram

Syslog severity level threshold evaluation in Cisco IOS
Soru 596Soru

A network administrator is configuring time synchronization on a newly installed Cisco IOS router. Arrange the following operational events in the correct chronological order, from initial CLI configuration to serving downstream clients.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct operational sequence is: 1) Executing `ntp server 10.1.1.50` on the router, 2) Exchanging NTP polling messages to calculate delay and offset, 3) Adjusting the local system clock, 4) Transitioning to a synchronized state at Stratum 3 (upstream + 1), and 5) Responding to downstream client requests at Stratum 3.
The NTP operation sequence begins with establishing the peer/server relationship via `ntp server`. Polling packets are then exchanged to calculate offset and dispersion. Once metrics are validated, the local clock synchronizes, allowing the router to assign itself Stratum 3 (upstream Stratum 2 + 1). Finally, the router serves downstream clients accurately.

Adım Adım Çözüm

1
Identify the initial configuration trigger
The command `ntp server 10.1.1.50` creates the server association.
No NTP message exchange can take place until the target IP server is defined in the configuration.
2
Analyze the packet exchange sequence
The router initiates NTP polling requests over UDP port 123.
Timestamped control packets must be exchanged to filter dispersion and compute clock offset.
3
Determine system clock adjustment
The system clock synchronizes to the upstream reference time.
Clock offset calculation must be completed before the router can adjust its internal clock.
4
Calculate the local stratum level
Stratum level becomes Stratum 2 + 1 = Stratum 3.
NTP protocol rules state that a device takes on the stratum level of its reference server plus one.
5
Identify downstream server operation
The router acts as an authoritative time source for internal network devices.
A Cisco router only advertises valid, authoritative time to clients after its own clock is synchronized.

Anahtar Kavram

NTP Synchronization Sequence and Stratum Propagation
Tahmini Süre:1m 30s
Soru 597Soru

A network administrator runs the `show running-config` command on a Cisco switch and observes the following user configuration entry:

`username netadmin secret 5 11 mER7$19f.aB3z7QkL9p0`

Which statement accurately describes the security mechanism used to store this password?

Cevabı ve açıklamayı göster

Cevap: The password is hashed using the MD5 algorithm (Type 5).

Cevap

The password is hashed using the MD5 algorithm (Type 5).
The option stating that the password is hashed using the MD5 algorithm (Type 5) is correct because the number 5 following the 'secret' keyword in Cisco IOS configuration syntax indicates an MD5 cryptographic hash. MD5 hashing creates a one-way digest to secure local user credentials.

Adım Adım Çözüm

1
Analyze the configuration string syntax.
Identify the keyword 'secret' followed by the algorithm indicator '5'.
Cisco IOS uses numeric identifiers following the 'secret' or 'password' keyword to denote the encryption or hashing algorithm used.
2
Map the numerical identifier to the corresponding cryptographic algorithm.
Identifier 5 corresponds to the MD5 password hash (Type 5).
Type 0 is plain text, Type 7 is weak reversible encryption, Type 5 is MD5 hashing, Type 8 is PBKDF2 SHA-256, and Type 9 is scrypt.

Anahtar Kavram

Cisco IOS Password Types and Hashing Algorithms
Soru 598Soru

Router R3 currently populates its routing table with a primary route to the 172.16.40.0/24172.16.40.0/24 network via OSPF, which carries a default administrative distance of 110110. A network administrator wants to implement a backup path to 172.16.40.0/24172.16.40.0/24 using the next-hop IPv4 address 10.2.2.210.2.2.2. The backup route must remain inactive in the routing table unless the primary OSPF path becomes unavailable. Which command should be entered on router R3 to accomplish this objective?

Cevabı ve açıklamayı göster

Cevap: ip route 172.16.40.0 255.255.255.0 10.2.2.2 130

Cevap

The command `ip route 172.16.40.0 255.255.255.0 10.2.2.2 130` correctly configures a floating static route with an administrative distance higher than OSPF (110).
A floating static route is an administrative backup route configured with a higher Administrative Distance (AD) than the primary routing protocol. Since OSPF has an AD of 110110, configuring the static route with an AD of 130130 ensures it is ignored during normal operation. If the OSPF route disappears from the routing table, the static route with AD 130130 takes over forwarding.

Adım Adım Çözüm

1
Identify the destination network, subnet mask, and next-hop IP address.
Destination: 172.16.40.0, Mask: 255.255.255.0, Next-hop IP: 10.2.2.2.
Cisco IOS static route syntax requires `ip route <prefix> <mask> <next-hop|exit-interface> [distance]`.
2
Determine the administrative distance (AD) of the primary protocol and choose a higher AD for the floating static route.
Primary OSPF AD is 110; the backup route AD must be greater than 110 (e.g., 130).
Routes with lower AD values are preferred. A higher AD ensures the static route remains floating (inactive) until the primary OSPF route fails.
3
Assemble the complete Cisco IOS CLI command string.
`ip route 172.16.40.0 255.255.255.0 10.2.2.2 130`.
This matches all parameter requirements and syntax rules.

Anahtar Kavram

Floating Static Route Administrative Distance Configuration
Tahmini Süre:1m 15s
Soru 599Soru

A network engineer inspects a Cisco router named Branch-R1 that was recently configured for OSPFv2 routing. The interface configuration and operational states on Branch-R1 are as follows:

- Loopback 0: 192.168.50.1/32 (Status: Administratively Down)
- Loopback 1: 10.10.10.1/32 (Status: Up/Up)
- GigabitEthernet 0/0: 172.16.200.1/24 (Status: Up/Up)
- GigabitEthernet 0/1: 10.200.1.1/30 (Status: Up/Up)

No manual OSPF router ID has been configured under the `router ospf 1` process. Which IP address will OSPFv2 select as the Router ID for Branch-R1 upon initialization?

Cevabı ve açıklamayı göster

Cevap: 10.10.10.1

Cevap

10.10.10.1 is selected as the OSPF Router ID because it is the highest IP address among active operational loopback interfaces.
OSPF Router ID election follows a strict hierarchy: 1) Manually configured router ID (`router-id` command), 2) Highest IPv4 address on an active (Up/Up) loopback interface, 3) Highest IPv4 address on an active (Up/Up) non-loopback/physical interface. Because Loopback 0 is administratively down, Loopback 1 (10.10.10.1) is the only active loopback interface and is selected.

Adım Adım Çözüm

1
Check for an explicitly configured OSPF router ID
No manual `router-id` command is configured under `router ospf 1`.
Explicit configuration takes precedence over automatic election logic.
2
Evaluate operational state of loopback interfaces
Loopback 0 is administratively down and ignored. Loopback 1 (10.10.10.1) is operational (Up/Up).
OSPF election logic only considers interfaces in an active Up/Up state.
3
Apply OSPF selection hierarchy
The active loopback address (10.10.10.1) is chosen over physical interface IP addresses.
Active loopbacks take precedence over physical interfaces regardless of IP numerical value.

Anahtar Kavram

OSPFv2 Router ID Selection Hierarchy
Soru 600Soru

Match each OSPFv2 network type or interface configuration on a Cisco router to its corresponding DR/BDR election behavior and default Hello/Dead timer settings.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Broadcast Multi-Access
Point-to-Point
Interface Priority 0
Non-Broadcast Multi-Access (NBMA)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Broadcast Multi-Access matches with 'Elects DR/BDR; default Hello/Dead timers are 10s / 40s'; Point-to-Point matches with 'Suppresses DR/BDR election; default Hello/Dead timers are 10s / 40s'; Interface Priority 0 matches with 'Excludes interface from DR/BDR election; remains permanently in DROTHER state'; Non-Broadcast Multi-Access (NBMA) matches with 'Elects DR/BDR; default Hello/Dead timers are 30s / 120s'.
Each OSPFv2 network type defines specific election rules and default timer values. Broadcast multi-access networks elect a DR and BDR with 10s Hello and 40s Dead timers. Point-to-Point networks suppress DR/BDR elections while maintaining 10s/40s timers. Interface priority 0 explicitly prevents participation in DR/BDR elections, locking the interface into DROTHER state. NBMA networks elect a DR and BDR with extended 30s/120s timer intervals.

Adım Adım Çözüm

1
Determine DR/BDR election requirement for multi-access vs. point-to-point topologies
Broadcast and NBMA networks require DR/BDR elections; Point-to-Point networks bypass DR/BDR elections entirely.
DR/BDR elections prevent the N(N1)/2N(N-1)/2 full mesh adjacency scaling issue on shared multi-access media.
2
Verify default Hello and Dead timers for each network type
Broadcast and Point-to-Point default to 10s Hello / 40s Dead. NBMA defaults to 30s Hello / 120s Dead.
Non-broadcast topologies use longer timers to accommodate potential WAN delays and manual neighbor definitions.
3
Evaluate explicit priority configuration overrides
An OSPF interface priority set to 0 overrides all Router ID tie-breakers and forces the interface to remain a DROTHER.
Priority 0 is designed specifically to prevent low-capacity or hub-and-spoke spoke routers from becoming DR/BDR.

Anahtar Kavram

OSPFv2 Network Types and DR/BDR Selection Rules
ÖncekiSayfa 30 / 100Sonraki
Tüm alıştırma soruları — Cisco CCNA | Examkin