Examkin

Tüm alıştırma soruları

1987 soru

Tüm türler1,987Çoktan seçmeli1,020Çoklu seçim452Sayısal18Eşleştirme229Sıralama203Boşluk doldurma22Kısa cevap43
Soru 1141Soru →

An enterprise topology runs Rapid PVST+ across four switches for VLAN 40. Switch SW1 serves as the Root Bridge with a priority of 40964096 (total priority 41364136 with System ID Extension). Switches SW2 and SW3 are distribution switches, both configured with a base bridge priority of 2867228672 (2871228712 total). Switch SW4 is an access switch connected to SW2 via interface GigabitEthernet1/0/1 and to SW3 via interface GigabitEthernet1/0/2. All interconnecting links between switches are 10-Gigabit Ethernet (10 Gbps10\text{ Gbps}, cost 22).

The MAC addresses of the distribution switches are:
- SW2 MAC: `0011.2233.4455`
- SW3 MAC: `0011.2233.6677`

Both SW2 and SW3 have direct single-link 10 Gbps10\text{ Gbps} connections to SW1. Which statement correctly identifies the Rapid PVST+ port role and state for interface GigabitEthernet1/0/2 on Switch SW4, along with the precise technical reason?

Cevabı ve açıklamayı göster

Cevap: Interface GigabitEthernet1/0/2 becomes an Alternate port in the Discarding state because SW4 receives a superior BPDU from SW2 due to SW2's lower MAC address.

Cevap

Interface GigabitEthernet1/0/2 becomes an Alternate port in the Discarding state because SW4 receives a superior BPDU from SW2 due to SW2's lower MAC address.
The correct answer identifies that interface GigabitEthernet1/0/2 becomes an Alternate port in the Discarding state. SW4 evaluates two potential paths to the Root Bridge (SW1). Both paths have equal cumulative root path costs of 4 (2+22 + 2). Comparing the upstream switch Bridge IDs, both SW2 and SW3 have identical bridge priorities of 28712 (28672 base+40 VLAN ID28672 \text{ base} + 40 \text{ VLAN ID}). The tie is broken by MAC address comparison, where SW2 (`0011.2233.4455`) is lower than SW3 (`0011.2233.6677`). Thus, SW2 provides superior BPDUs, causing SW4 to select GigabitEthernet1/0/1 as its Root Port and GigabitEthernet1/0/2 as an Alternate port in the Rapid PVST+ Discarding state.

Adım Adım Çözüm

1
Calculate Cumulative Root Path Cost for each path on SW4
Path via SW2 = 2 (SW4-SW2)+2 (SW2-SW1)=42\text{ (SW4-SW2)} + 2\text{ (SW2-SW1)} = 4. Path via SW3 = 2 (SW4-SW3)+2 (SW3-SW1)=42\text{ (SW4-SW3)} + 2\text{ (SW3-SW1)} = 4. Costs are equal.
Rapid PVST+ first compares cumulative root path cost to elect the Root Port.
2
Evaluate Designated Bridge ID (Sender Bridge Priority + MAC)
SW2 Priority = 28672+40=2871228672 + 40 = 28712. SW3 Priority = 28672+40=2871228672 + 40 = 28712. Priorities are equal, so compare MAC addresses: `0011.2233.4455` (SW2) vs `0011.2233.6677` (SW3). SW2 has the lower MAC address.
When root path costs are equal, the switch evaluates the sender's Designated Bridge ID.
3
Determine Port Role and State for SW4's interfaces
GigabitEthernet1/0/1 (connected to SW2) is elected as Root Port (Forwarding state). GigabitEthernet1/0/2 (connected to SW3) becomes an Alternate port (Discarding state).
Rapid PVST+ assigns Alternate port role to non-root interfaces receiving inferior BPDUs from alternate upstream switches and places them in the Discarding state.

Anahtar Kavram

Rapid PVST+ Root Port Election and Alternate Port State Operations
Soru 1142Soru →

Match each network architectural layer from Cisco 3-Tier Campus and Data Center Spine-Leaf design models to its primary operational responsibility.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Core Layer (Campus)
Distribution Layer (Campus)
Access Layer (Campus)
Spine Layer (Data Center)
Leaf Layer (Data Center)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Core Layer matches dedicated high-speed switching backbone without filtering; Distribution Layer matches policy-based routing, ACLs, and inter-VLAN boundaries; Access Layer matches end-user endpoint connectivity and PoE; Spine Layer matches high-bandwidth interconnect fabric enabling ECMP; Leaf Layer matches end-host server attachment point connecting to all spine nodes.
In Cisco network designs, every architectural layer performs a specialized function: the Core layer provides uninhibited high-speed packet transport; the Distribution layer handles routing policies, security boundaries, and aggregation; the Access layer provides user device attachment and port security; the Spine layer forms an ECMP-routed backbone in data centers; and the Leaf layer serves as the endpoint attachment interface connecting to all spine switches.

Adım Adım Çözüm

1
Analyze campus 3-tier architectural responsibilities
Core delivers fast transport without inspection, Distribution enforces policy boundaries and routing, and Access connects edge endpoints.
Campus designs enforce modular separation between edge attachment, policy enforcement, and backbone forwarding.
2
Analyze data center spine-leaf architectural responsibilities
Spine switches form the non-blocking interconnect matrix for ECMP routing, while Leaf switches host server attachments and uplink to every spine switch.
Spine-leaf architectures optimize predictable East-West traffic latency across cloud workloads.
3
Map each architectural layer to its corresponding operational profile
All 5 architectural layers are accurately paired with their functional definitions.
Aligns strictly with Cisco design fundamentals.

Anahtar Kavram

Cisco 3-Tier Campus and Data Center Spine-Leaf Functional Layer Responsibilities
Tahmini Süre:1m 30s
Soru 1143Soru →

An administrator is connecting a workstation to port FastEthernet 0/8 on a switch. Which interface configuration command must be executed to explicitly force the port into static access mode?

Cevabı ve açıklamayı göster

Cevap: switchport mode access

Cevap

The command 'switchport mode access' explicitly configures an interface to operate strictly as a Layer 2 access port.
The command 'switchport mode access' instructs Cisco IOS to statically set the interface operational mode to access (non-trunking). This disables dynamic trunking negotiation on that interface.

Adım Adım Çözüm

1
Identify the goal of configuring a switchport for host connection
Host connections require non-trunking access ports that statically belong to a single broadcast domain.
By default, switch ports on modern Catalyst switches may attempt DTP negotiation unless configured explicitly.
2
Select the Cisco IOS command that sets administrative port mode
Executing 'switchport mode access' in interface configuration mode forces the interface to function as an access port.
This command overrides dynamic mode negotiation and ensures the interface remains an access port.

Anahtar Kavram

Access Port Mode Configuration
Soru 1144Soru →

A network administrator is troubleshooting an issue where end-user workstations experience initial network connection timeouts and fail to obtain IPv4 addresses via DHCP upon booting up. The administrator decides to configure Cisco STP PortFast on the access-mode switch interfaces connected to these workstations. Which TWO operational benefits or behaviors occur as a result of enabling PortFast on these access ports? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The interface bypasses the standard 802.1D Listening and Learning states, transitioning immediately to the Forwarding state upon link activation.; Link state changes on the interface do not trigger Topology Change Notifications (TCNs) to be flooded across the Spanning Tree domain.

Cevap

Enabling PortFast on access interfaces allows ports to immediately transition from the Blocking state to the Forwarding state by bypassing the standard Listening and Learning delay, while also suppressing the generation of Topology Change Notifications (TCNs) during link UP/DOWN events on edge ports.
The correct options identify that PortFast allows an access port to transition directly from Blocking to Forwarding (bypassing the 15-second Listening and 15-second Learning timer delay) and that edge interface transitions on PortFast ports do not trigger Topology Change Notifications (TCNs) to the STP root bridge.

Adım Adım Çözüm

1
Analyze the impact of standard 802.1D STP convergence on DHCP client requests.
Standard IEEE 802.1D STP requires ports to spend 15 seconds in the Listening state and 15 seconds in the Learning state (30 seconds total) before reaching Forwarding.
This 30-second convergence delay causes DHCP client software on workstations to time out before the port can forward traffic.
2
Determine the primary operational state behavior of Cisco PortFast.
PortFast moves an edge interface immediately into the Forwarding state upon link UP, bypassing Listening and Learning.
End-user devices do not create Layer 2 loops, making the 30-second STP listening/learning check unnecessary for edge devices.
3
Evaluate the secondary operational trait regarding Topology Change Notifications (TCNs).
PortFast suppresses TCN generation for edge port link status changes.
Frequent rebooting or power cycles of client PCs would otherwise cause constant network-wide MAC address table aging if TCNs were flooded.

Anahtar Kavram

STP PortFast Operational Behavior and TCN Suppression
Soru 1145Soru →

A network administrator configures a Cisco Lightweight Access Point (LAP) to assist in identifying unauthorized rogue devices on the enterprise network. After updating the operational mode of the access point via the Wireless LAN Controller (WLC), the administrator observes that both the 2.4 GHz and 5 GHz radios on the access point are disabled, and no SSIDs are being broadcast. However, the device actively reports rogue device MAC address correlations back to the WLC. Which statement correctly explains the operational behavior of the access point in this scenario?

Cevabı ve açıklamayı göster

Cevap: The access point is operating in Rogue Detector mode, which turns off its wireless radios and uses its wired link to listen for broadcast ARP packets to match against rogue MAC lists.

Cevap

The access point is operating in Rogue Detector mode, which turns off its wireless radios and uses its wired link to listen for broadcast ARP packets to match against rogue MAC lists.
The correct answer accurately describes Rogue Detector mode. In this specialized mode, the AP's wireless radios are turned off completely. The AP uses its wired Ethernet connection (typically configured on a trunk port to see all VLANs) to listen to ARP broadcasts and match MAC addresses against the WLC's list of rogue APs and clients detected by other monitoring APs.

Adım Adım Çözüm

1
Analyze the reported operational state of the Lightweight AP.
The access point has disabled both 2.4 GHz and 5 GHz wireless radios (no SSIDs broadcast), yet it actively correlates rogue MAC addresses with the WLC.
Identifying radio status (disabled vs active) narrows down the operational AP mode.
2
Differentiate between Cisco Lightweight AP modes (Local, FlexConnect, Monitor, Sniffer, Rogue Detector).
Rogue Detector mode is the only mode where RF radios are shut off completely while the AP operates purely over its wired interface to inspect ARP broadcasts.
Monitor and Sniffer modes require active wireless radios to listen to 802.11 channels over the air.
3
Correlate wired inspection with WLC functionality.
The AP compares MAC addresses seen on wired broadcast frames against the list of rogue wireless clients reported by other APs to the WLC.
This determines if a rogue AP or rogue client connected wirelessly is also physically plugged into the enterprise wired network.

Anahtar Kavram

Cisco Lightweight Access Point Operational Modes
Soru 1146Soru →

Match each transport layer operational characteristic or application scenario on the left with its corresponding transport protocol classification on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

20-byte base header overhead using sequence and acknowledgment numbers for stateful data delivery
8-byte fixed header overhead using a simple checksum field for connectionless data delivery
DHCP client and server broadcast communications operating across destination ports 67 and 68
HTTPS encrypted web sessions requiring ordered, lossless stream transport across port 443

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The 20-byte base header with sequence numbers matches TCP Operational Characteristic. The 8-byte fixed header matches UDP Operational Characteristic. DHCP on ports 67/68 matches UDP-Based Application Protocol. HTTPS on port 443 matches TCP-Based Application Protocol.
TCP provides connection-oriented, reliable transmission using a 20-byte base header equipped with sequence numbers, which web applications like HTTPS (port 443) depend on. UDP provides connectionless, unacknowledged delivery using an 8-byte header, making it optimal for bootstrap protocols like DHCP (ports 67/68).

Adım Adım Çözüm

1
Evaluate transport layer header structures and connection state tracking.
Recognize that a 20-byte base header with sequence and acknowledgment fields belongs to TCP, whereas an 8-byte fixed header with minimal overhead belongs to UDP.
TCP requires additional fields for state tracking and error recovery, whereas UDP omits connection tracking fields to reduce latency.
2
Classify upper-layer protocols by transport requirements and port assignments.
Associate DHCP (ports 67/68) with UDP due to its reliance on unacknowledged local network broadcasts, and associate HTTPS (port 443) with TCP due to its requirement for reliable stream delivery during TLS sessions.
Application protocols requiring high efficiency or initial broadcast bootstrap use UDP, while those requiring complete, ordered data delivery use TCP.

Anahtar Kavram

TCP vs UDP header structure, operational statefulness, and well-known application mapping
Soru 1147Soru →

A Cisco router, R1, initializes its OSPFv2 routing process without an explicit router-id configuration. R1 has three interfaces with the following states:
- Loopback0: IP address 172.16.100.1/32 (Line protocol UP, Operational state UP)
- Loopback1: IP address 192.168.50.1/32 (Line protocol DOWN, Operational state DOWN)
- GigabitEthernet0/0: IP address 10.0.12.1/24 (Line protocol UP, Operational state UP, MTU 1500)

After the OSPF process starts operating and selects its Router ID, a network engineer enters the command 'router-id 1.1.1.1' under the OSPF configuration mode on R1, but does not reload the router or issue the 'clear ip ospf process' command.

R1 then sends an initial OSPF Hello packet out GigabitEthernet0/0 to neighboring router R2. Router R2 has its connected interface configured in the same OSPF area with matching timers, but with an interface MTU of 1400 bytes. When R2 receives this initial Hello packet from R1 (which does not yet list R2's Router ID in its neighbor field), which OSPF Router ID will R1 use in the packet header, and what state will R2 record for neighbor R1 upon processing this packet?

Cevabı ve açıklamayı göster

Cevap: Router ID: 172.16.100.1; Neighbor State on R2: Init

Cevap

Router ID: 172.16.100.1; Neighbor State on R2: Init
The correct answer specifies Router ID 172.16.100.1 and Init state. R1 selects 172.16.100.1 because Loopback0 is the highest operational loopback interface when OSPF starts. Configuring a manual router-id later has no effect until the OSPF process is restarted. When R2 receives R1's first Hello packet (which lacks R2's Router ID in its neighbor list), R2 records R1 in the Init state. MTU differences do not prevent entering Init state.

Adım Adım Çözüm

1
Determine the active OSPF Router ID on R1 at process initialization
Loopback0 (172.16.100.1) is chosen as the Router ID
OSPF Router ID selection logic evaluates: 1) manual 'router-id' setting, 2) highest IP address among operational (UP/UP) loopback interfaces, 3) highest IP address among operational non-loopback interfaces. Loopback1 is DOWN/DOWN, so it is ignored. Loopback0 (172.16.100.1) is the highest active loopback IP.
2
Evaluate the impact of configuring 'router-id 1.1.1.1' after process startup
The active Router ID remains 172.16.100.1
OSPF Router ID election is non-preemptive. Changing the router ID under the OSPF process does not take effect until the OSPF process is explicitly restarted using 'clear ip ospf process' or the router is rebooted.
3
Evaluate the OSPF neighbor state recorded by R2 upon receiving R1's initial Hello packet
R2 transitions R1 to the Init state
When a router receives an OSPF Hello packet from a neighbor that does not contain its own Router ID in the Received Neighbor field, it places that neighbor into the Init state. MTU mismatches affect Database Description (DBD) exchanges during ExStart/Exchange states, not the initial Hello exchange.

Anahtar Kavram

OSPFv2 Router ID selection non-preemptiveness and finite state machine transition rules upon Hello packet reception.
Tahmini Süre:2m 0s
Soru 1148Soru →

A Cisco Catalyst switch is operating with default Rapid PVST+ settings. What total bridge priority value will the switch advertise in its BPDUs for VLAN 100?

Cevabı ve açıklamayı göster

Cevap: 32868

Cevap

32868
In Rapid PVST+, the 16-bit Priority field of the Bridge ID is divided into a 4-bit Bridge Priority and a 12-bit System ID Extension. The System ID Extension automatically equals the VLAN ID. With the default base bridge priority set to 32768, the advertised total priority for VLAN 100 is calculated as 32768+100=3286832768 + 100 = 32868.

Adım Adım Çözüm

1
Identify the default base bridge priority
Default base priority is 32768
Cisco switches running PVST+/Rapid PVST+ use a default base priority of 32768.
2
Determine the System ID Extension value
System ID Extension is 100
In PVST+ and Rapid PVST+, the System ID Extension carries the VLAN ID for which the BPDU is generated.
3
Calculate the total bridge priority
32768 + 100 = 32868
Total Bridge Priority = Base Priority + System ID Extension (VLAN ID).

Anahtar Kavram

Rapid PVST+ System ID Extension and Total Bridge Priority Calculation
Soru 1149Soru →

Which primary operational benefit is achieved when Cisco STP PortFast is enabled on a switch access interface connected to an end-user host?

Cevabı ve açıklamayı göster

Cevap: The port transitions immediately from Blocking to Forwarding state upon link UP and avoids generating Topology Change Notifications.

Cevap

Enabling PortFast causes the access interface to immediately transition into the STP Forwarding state upon link activation while preventing Topology Change Notifications (TCNs) from being sent to the root bridge.
Enabling PortFast on an access interface allows edge devices (such as PCs and servers) to begin transmitting data immediately upon link activation by bypassing the Listening (15s) and Learning (15s) states. Furthermore, because edge ports joining or leaving the network do not reflect core topology changes, PortFast prevents the switch from generating Topology Change Notifications (TCNs) to the Root Bridge.

Adım Adım Çözüm

1
Analyze standard 802.1D STP timer delays on link initiation.
Standard 802.1D STP requires ports to spend 15 seconds in Listening and 15 seconds in Learning before reaching Forwarding.
This 30-second delay ensures no temporary switching loops exist before user data is forwarded.
2
Evaluate the effect of PortFast on edge device connectivity.
Edge ports connected directly to workstations or servers cannot form switching loops, making the 30-second delay redundant.
PortFast bypasses Listening and Learning states directly to Forwarding and suppresses TCN generation to maintain network stability.

Anahtar Kavram

STP PortFast Benefits and State Bypass Behavior
Soru 1150Soru →

An enterprise network administrator deploys a Cisco Wireless LAN Controller (WLC). The Management Interface is assigned to VLAN 10 with IP address 10.10.10.10/2410.10.10.10/24, and the Service Port is configured on an isolated network with IP address 192.168.1.50/24192.168.1.50/24 for out-of-band management. Engineers in the Network Operations Center (NOC) residing on subnet 172.16.100.0/24172.16.100.0/24 report that they can successfully ping and manage the WLC via HTTPS using the Service Port IP address (192.168.1.50192.168.1.50). However, lightweight Access Points (APs) located on subnet 10.10.20.0/2410.10.20.0/24 consistently fail to complete CAPWAP discovery and join procedures with the Management Interface (10.10.10.1010.10.10.10). Furthermore, NOC engineers cannot establish HTTPS or SSH sessions to 10.10.10.1010.10.10.10, whereas administrative hosts directly connected to VLAN 10 can access 10.10.10.1010.10.10.10 without issue. Which of the following root causes accounts for both the AP CAPWAP join failure and the remote NOC management access timeout to the Management Interface?

Cevabı ve açıklamayı göster

Cevap: The WLC Management Interface lacks a valid default gateway configuration, preventing routed return traffic to remote subnets while allowing local Layer 2 communications.

Cevap

The WLC Management Interface lacks a valid default gateway configuration, preventing routed return traffic to remote subnets while allowing local Layer 2 communications.
The correct answer identifies that a missing or invalid default gateway on the WLC Management Interface prevents the WLC from routing return IP packets to subnets outside its local subnet (10.10.10.0/24). Local VLAN 10 devices can communicate using direct Layer 2 switching, and the Service Port functions because it operates on a separate out-of-band routing stack. However, both remote AP CAPWAP join responses and remote NOC management attempts fail because the WLC cannot route return packets to subnets 10.10.20.0/24 or 172.16.100.0/24.

Adım Adım Çözüm

1
Analyze the Service Port management behavior
The Service Port uses a separate, isolated out-of-band routing context with its own static routes and gateway, allowing NOC access to 192.168.1.50 independently of the data plane/Management Interface routing table.
Cisco WLC architecture isolates out-of-band Service Port traffic from the in-band Management and Dynamic interfaces.
2
Compare local vs remote reachability to the Management Interface IP (10.10.10.10)
Local hosts on VLAN 10 (10.10.10.0/24) communicate with the WLC via direct Layer 2 ARP and switching, succeeding without routing. Remote hosts (NOC at 172.16.100.0/24 and APs at 10.10.20.0/24) require Layer 3 routing.
When a remote client sends a packet to the Management Interface, the WLC receives the ingress packet but must consult the Management Interface routing table to send return packets back to the client's gateway.
3
Identify the common failure point for off-subnet APs and off-subnet NOC hosts
Without a valid default gateway configured on the WLC Management Interface, return traffic for CAPWAP join responses (to 10.10.20.0/24) and HTTPS/SSH responses (to 172.16.100.0/24) is dropped by the WLC kernel.
Missing default gateway breaks bidirectional Layer 3 IP connectivity for all remote subnets attempting to communicate with the Management Interface.

Anahtar Kavram

WLC Management Interface Gateway and Routing Isolation
Tahmini Süre:3m 0s
Soru 1151Soru →

A network engineer needs to configure a dedicated Cisco lightweight Access Point (AP) to continuously scan all channels for wireless intrusion detection (WIDS) signatures and rogue access points without servicing client associations. Which operational AP mode should be configured on the access point?

Cevabı ve açıklamayı göster

Cevap: Monitor mode

Cevap

Monitor mode
Monitor mode configures a Cisco lightweight Access Point as a dedicated security sensor. In this mode, the AP radios refrain from broadcasting SSIDs or serving client associations, and instead continuously cycle through all configured channels to detect rogue access points, intrusion attempts (WIDS), and radio frequency interference.

Adım Adım Çözüm

1
Identify the primary operational requirement.
The access point must continuously scan all channels for security threats and rogue devices without serving client connections.
The requirement specifies a dedicated monitoring role.
2
Evaluate Cisco lightweight AP modes against the requirement.
Monitor mode disables client association functions and enables continuous channel scanning for WIDS and rogue detection.
Local and FlexConnect modes service client connections, whereas Sniffer mode focuses on single-channel packet capturing.

Anahtar Kavram

Cisco Lightweight AP Modes (Monitor Mode)
Soru 1152Soru →

An enterprise network infrastructure utilizes a Cisco centralized wireless architecture. A network engineer is connecting a Lightweight Access Point (AP) operating in Local mode to an access switch and configuring the Wireless LAN Controller (WLC) Management Interface on a distribution switch trunk. Which TWO statements accurately describe the switchport configuration and interface connectivity requirements for this deployment?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The access switch port connected to the Local mode AP should be configured as an access port assigned to the AP management VLAN.; The WLC Management Interface handles in-band CAPWAP tunnel management and control traffic between the AP and WLC as well as controller GUI/CLI administrative access.

Cevap

The correct statements are: (1) The access switch port connected to the Local mode AP should be configured as an access port assigned to the AP management VLAN, and (2) The WLC Management Interface handles in-band CAPWAP tunnel management and control traffic between the AP and WLC as well as controller GUI/CLI administrative access.
In a Cisco centralized deployment, Local mode APs send all control and data traffic through CAPWAP tunnels to the controller. Consequently, the access layer switchport connecting to a Local mode AP needs only to be an access port in the AP management VLAN. Additionally, the WLC Management Interface serves as the primary in-band interface, handling both CAPWAP tunnel termination from APs and administrative management traffic (GUI/CLI).

Adım Adım Çözüm

1
Analyze AP deployment mode requirements (Local mode vs. FlexConnect mode).
In Cisco centralized architecture, a Local mode AP encapsulates all client wireless frames inside IP/CAPWAP tunnel packets sent to the WLC. The AP requires only a single IP address on the management network.
Since client traffic is tunneled over L3 CAPWAP, the switch port facing a Local mode AP does not need 802.1Q trunking or multi-VLAN configuration; a standard access port on the AP management VLAN is sufficient.
2
Evaluate WLC logical interface functionality (Management Interface vs. Service Port).
The WLC Management Interface is an in-band, routed logical interface that terminates CAPWAP tunnels from APs and supports HTTP/HTTPS/SSH administrative access.
Out-of-band management uses the dedicated physical Service Port, whereas the Management Interface handles both AP CAPWAP management/control and in-band management traffic.
3
Identify misconfigurations regarding VLAN trunking and native VLAN settings.
Configuring trunk ports for Local mode APs confuses Local mode with FlexConnect local switching, and mismatching native VLAN settings breaks 802.1Q trunk operation.
FlexConnect mode requires trunking for local VLAN mapping. Mismatching native VLANs generates STP/CDP errors and disrupts reachability.

Anahtar Kavram

AP and WLC Management Access Connections
Soru 1153Soru →

An administrator is connecting a Cisco Lightweight Access Point (LAP) operating in Local mode to an enterprise access switch. The Wireless LAN Controller (WLC) hosts multiple WLANs mapped to different client VLANs, including VLAN 10 for Corporate and VLAN 20 for Guest traffic. How should the switch port directly connected to this Local mode Access Point be configured on the access switch?

Cevabı ve açıklamayı göster

Cevap: Configure the switch port as an access port assigned to the AP management VLAN, because all client traffic is encapsulated within CAPWAP and tunneled to the WLC.

Cevap

The switch port connected to the AP should be configured as an access port assigned to the AP management VLAN because all client traffic is encapsulated within CAPWAP tunnels and sent directly to the WLC.
When a Cisco Access Point is configured in Local mode, all wireless user traffic is encapsulated within CAPWAP data tunnels and sent directly to the Wireless LAN Controller. The WLC handles mapping the wireless SSIDs to their respective VLANs (such as Corporate and Guest) on its own physical/dynamic interfaces connected to the core/distribution switch. Consequently, the access switch port connecting the AP needs only to belong to the AP management VLAN, which is best configured as a standard access port.

Adım Adım Çözüm

1
Analyze the operational mode of the Access Point.
The Access Point operates in Local mode.
Local mode is the default Cisco AP mode where all wireless client traffic, control messages, and management traffic are encapsulated in CAPWAP tunnels between the AP and the WLC.
2
Evaluate the VLAN mapping and switching requirements for Local mode APs.
Client VLAN tags are processed inside the CAPWAP payload at the WLC, not at the AP's switch port.
Because the AP does not locally break out or switch client traffic onto the local switch, the switch port connected to the AP only needs to provide IP reachability for the AP's own management interface via CAPWAP.
3
Determine the appropriate switch port configuration.
Configure the switch port as a L2 access port in the AP management VLAN.
An access port provides standard untagged connectivity for the AP to receive an IP address and form a CAPWAP tunnel with the WLC management interface.

Anahtar Kavram

Local Mode AP switchport requirements versus FlexConnect Mode
Tahmini Süre:1m 15s
Soru 1154Soru →

A network administrator issue the `show etherchannel summary` command on a Cisco Catalyst switch to inspect an operational Link Aggregation Control Protocol (LACP) link bundle. The output displays the following status:

text
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use

Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SD) LACP Gi0/1(I) Gi0/2(I)

Which configuration issue is the primary cause of the bundle remaining inactive with member ports in an independent state?

Cevabı ve açıklamayı göster

Cevap: Both the local and neighbor switches are configured in LACP passive negotiation mode on member interfaces.

Cevap

Both the local and neighbor switches are configured in LACP passive negotiation mode on member interfaces.
LACP requires at least one switch interface to be in 'active' mode to send LACP negotiation frames (PDUs). When both sides are set to 'passive' mode, neither switch initiates LACP messages. As a result, negotiation never occurs, physical interfaces remain in an independent/stand-alone (I) state, and the port-channel interface stays down (SD).

Adım Adım Çözüm

1
Analyze the CLI output flags and port states.
Port-channel 1 has flags (SD), indicating it is Layer 2 and Down. Interfaces GigabitEthernet0/1 and 0/2 have flag (I), meaning they are operating as independent physical ports rather than bundled members.
LACP negotiation has failed to form a channel aggregator.
2
Evaluate LACP operational mode behaviors.
LACP 'active' mode sends LACP PDUs continuously. LACP 'passive' mode only responds to received LACP PDUs and never initiates negotiation.
If both connected switches are set to passive mode, neither switch sends initiating LACP frames, preventing negotiation entirely.
3
Determine the root cause of the independent (I) state.
Passive-to-passive LACP configuration leaves all physical interfaces in stand-alone (I) mode because zero LACP negotiation frames are exchanged.
At least one side must be set to 'active' mode for LACP negotiation to take place.

Anahtar Kavram

LACP Negotiation Modes (Active vs. Passive)
Soru 1155Soru →

An administrator is configuring a new Wireless LAN (WLAN) using the Cisco Wireless LAN Controller (WLC) web GUI. Which two settings must be configured on the WLANs > Edit 'General' tab to enable basic client connectivity and map wireless traffic to the wired network? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Check the Enabled box under Status to activate the WLAN.; Select the appropriate Interface or Interface Group name from the drop-down menu.

Cevap

The two required configurations on the General tab are enabling the WLAN Status checkbox and selecting the target Interface/Interface Group.
On a Cisco WLC GUI, the WLANs > Edit 'General' tab is used to establish core settings: enabling the WLAN Status checkbox makes the network active, and selecting the Interface/Interface Group ties wireless clients to the appropriate wired network interface.

Adım Adım Çözüm

1
Navigate to the WLANs menu in the Cisco WLC GUI and open the General tab for the specific WLAN.
The General tab displays primary parameters including Profile Name, SSID, Status, and Interface/Interface Group.
This tab establishes fundamental WLAN administrative identity and traffic mapping.
2
Select the Enabled checkbox under Status.
The WLAN transitions to an active state across joining access points.
By default, new WLANs are created in a disabled state to prevent unexpected broadcasts before full setup.
3
Select the designated dynamic interface or interface group from the Interface/Interface Group menu.
Wireless client data frames are bridged onto the corresponding wired VLAN.
A WLAN must be tied to a controller interface to map client traffic into the underlying local network infrastructure.

Anahtar Kavram

WLC GUI WLAN General Tab Configuration
Soru 1156Soru →

A network administrator is allocating subnets from the enterprise address block 172.16.0.0/12172.16.0.0/12 to provision a new datacenter VLAN that must support at least 500500 usable host interfaces. The design requires using the most efficient subnet mask possible to conserve IP address space, while ensuring all assigned host addresses strictly adhere to RFC 1918 private IPv4 specifications. Which statements regarding this subnetting design are correct? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The most efficient subnet mask to accommodate the host requirement is 255.255.254.0255.255.254.0 (/23/23).; The IP address 172.31.255.250172.31.255.250 is a valid private IPv4 host address within the allocated 172.16.0.0/12172.16.0.0/12 address space.

Cevap

The correct answers are the statement identifying 255.255.254.0 (/23) as the most efficient subnet mask and the statement confirming that 172.31.255.250 is a valid private IPv4 address within the 172.16.0.0/12 range.
The subnetting calculation requires 9 host bits (29−2=5102^9 - 2 = 510) to support 500 hosts, making /23/23 (255.255.254.0255.255.254.0) the most efficient choice. Additionally, RFC 1918 defines Class B private space as 172.16.0.0172.16.0.0 to 172.31.255.255172.31.255.255, which includes 172.31.255.250172.31.255.250.

Adım Adım Çözüm

1
Calculate the host bits required for 500 usable host interfaces.
Using the formula 2h−2≥5002^h - 2 \ge 500, h=9h = 9 host bits are needed because 29−2=5102^9 - 2 = 510 usable addresses (28−2=2542^8 - 2 = 254 is insufficient).
Two addresses in every subnet are reserved for network identity and subnet broadcast.
2
Determine prefix length and dotted-decimal subnet mask.
Prefix length =32−9=/23= 32 - 9 = /23. In dotted-decimal format, /23 translates to 255.255.254.0255.255.254.0.
A 23-bit network prefix leaves 9 bits for host addressing.
3
Verify RFC 1918 private IPv4 range boundaries for Class B.
The RFC 1918 Class B private address space spans 172.16.0.0172.16.0.0 to 172.31.255.255172.31.255.255 (172.16.0.0/12172.16.0.0/12).
Address 172.31.255.250172.31.255.250 falls inside this range, whereas 172.32.10.15172.32.10.15 is in public IP space.

Anahtar Kavram

Subnet Host Calculation and RFC 1918 Private Addressing
Soru 1157Soru →

A network administrator needs to manually provision a new VLAN for guest wireless traffic (VLAN 88 named GUEST_WIFI) and configure switch port GigabitEthernet1/0/22 as a dedicated access port in this VLAN on a Cisco Catalyst switch. Place the Cisco IOS CLI commands in the correct administrative order of execution starting from global configuration mode.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct operational sequence begins with defining VLAN 88 in global configuration mode ('vlan 88'), naming the VLAN ('name GUEST_WIFI'), navigating to the target port ('interface gigabitethernet 1/0/22'), setting static access mode ('switchport mode access'), and assigning the access VLAN membership ('switchport access vlan 88').
Cisco IOS command syntax requires configuring global parameters (VLAN ID and name in VLAN subconfiguration mode) prior to entering interface subconfiguration mode to establish static access mode and assign the access VLAN membership.

Adım Adım Çözüm

1
Execute 'vlan 88' in global configuration mode (Switch(config)#).
Initializes VLAN 88 in the local VLAN database and shifts prompt context to Switch(config-vlan)#.
Defining the VLAN ID is required to instantiate the subconfiguration context for setting VLAN attributes.
2
Execute 'name GUEST_WIFI' within VLAN subconfiguration mode.
Assigns the label 'GUEST_WIFI' to VLAN 88.
The 'name' command is a VLAN subconfiguration command that can only be issued under the Switch(config-vlan)# prompt.
3
Navigate to interface configuration mode via 'interface gigabitethernet 1/0/22'.
Changes prompt context to Switch(config-if)# for GigabitEthernet1/0/22.
Port configuration commands require entering the interface-specific configuration mode from global configuration mode.
4
Execute 'switchport mode access' on the interface.
Disables Dynamic Trunking Protocol (DTP) negotiation and locks the port into permanent access mode.
Explicitly enforcing access mode prevents trunk negotiation vulnerabilities before binding the port to a VLAN.
5
Execute 'switchport access vlan 88' on the interface.
Assigns untagged frames received on GigabitEthernet1/0/22 to broadcast domain VLAN 88.
Maps the physical interface to the configured broadcast domain.

Anahtar Kavram

Cisco IOS CLI prompt hierarchy for VLAN creation, naming, static access port configuration, and VLAN membership assignment
Soru 1158Soru →

An enterprise Catalyst switch has recently rebooted, and its MAC address table is entirely empty. Host Workstation-1 is connected to port FastEthernet0/12 in VLAN 10 and sends a unicast frame addressed to Server-1 (MAC address 0050.56a1.1a02). The frame enters FastEthernet0/12 carrying a source MAC address of 0050.56a1.1a01. How will the switch process this incoming Ethernet frame?

Cevabı ve açıklamayı göster

Cevap: The switch records MAC address 0050.56a1.1a01 mapped to port FastEthernet0/12 in VLAN 10, and floods the frame out all operational ports assigned to VLAN 10 except FastEthernet0/12.

Cevap

The switch records MAC address 0050.56a1.1a01 mapped to port FastEthernet0/12 in VLAN 10, and floods the frame out all operational ports assigned to VLAN 10 except FastEthernet0/12.
When a Layer 2 switch receives an Ethernet frame, it first inspects the source MAC address and associates it with the ingress port and VLAN in its MAC address table. Next, it looks up the destination MAC address. Because the MAC table is empty, the destination MAC is unknown. The switch performs unknown unicast flooding by forwarding the frame out every active port assigned to the same VLAN, excluding the port on which the frame arrived.

Adım Adım Çözüm

1
Examine the ingress frame's source MAC address and ingress port.
The source MAC address is 0050.56a1.1a01 on ingress port FastEthernet0/12 (VLAN 10).
Layer 2 switches dynamically build their MAC address table by inspecting the source MAC address of every incoming Ethernet frame.
2
Update the MAC address table entry for VLAN 10.
An entry mapping 0050.56a1.1a01 to FastEthernet0/12 in VLAN 10 is added or refreshed.
Learning source MAC addresses ensures future frames destined for Workstation-1 can be forwarded directly via unicast.
3
Lookup the destination MAC address 0050.56a1.1a02 in the MAC address table.
The destination MAC address is not found (unknown unicast).
The switch MAC address table was cleared after reboot and has not yet observed traffic originating from Server-1.
4
Determine the forwarding action for the unknown unicast frame.
The frame is flooded out all active switch ports belonging to VLAN 10, except the ingress port FastEthernet0/12.
Flooding guarantees delivery to the destination host while restricting traffic within the VLAN boundary and preventing hairpinning back out the ingress port.

Anahtar Kavram

L2 Switching Concepts and MAC Table Operation
Soru 1159Soru →

An enterprise network team is upgrading a data center environment to host high-density microservices workloads. The target design requires consistent, low-latency East-West traffic flows where any leaf node is exactly two hops away from any other leaf node, while eliminating Spanning Tree Protocol (STP) blocked ports across inter-switch links. Which network topology architecture best satisfies these operational requirements?

Cevabı ve açıklamayı göster

Cevap: A Spine-Leaf topology where every leaf switch connects to every spine switch in a bipartite layout using active Layer 3 routed links.

Cevap

A Spine-Leaf topology where every leaf switch connects to every spine switch in a bipartite layout using active Layer 3 routed links.
The correct answer describes a Spine-Leaf (Clos) architecture. In this design, every leaf switch is directly connected to every spine switch, establishing a bipartite graph. Because spine switches do not connect to each other and leaf switches do not connect to each other directly, any inter-leaf path requires exactly two hops (leaf to spine to leaf). Utilizing Layer 3 routing across these links allows Equal-Cost Multi-Pathing (ECMP) to forward traffic across all physical connections simultaneously without triggering Spanning Tree Protocol link blocking.

Adım Adım Çözüm

1
Analyze the workload requirement for East-West traffic, predictable two-hop path latency, and non-blocking inter-switch links.
Identified the need for a bipartite data center fabric where endpoints connect to leaf switches, and leaf switches interconnect via a full mesh of active links to spine switches.
Traditional multi-tier topologies introduce variable hop counts and rely on STP to block redundant paths, leading to bandwidth bottlenecks.
2
Evaluate Spine-Leaf architectural traits against Layer 3 forwarding benefits.
Confirm that Spine-Leaf designs use Layer 3 routing (ECMP) across all links, allowing simultaneous active forwarding across all paths without STP blocking.
This guarantees deterministic latency and maximum bandwidth utilization for East-West data center workloads.

Anahtar Kavram

Spine-Leaf (Clos) Data Center Topology and Operational Traits
Soru 1160Soru →

A network engineer is optimizing a time-sensitive financial market data broadcast application where minimizing packet processing delay is critical. The development team decides to transport the data feeds using UDP rather than TCP. Which statement accurately compares the Layer 4 header overhead and operational behavior of UDP relative to TCP?

Cevabı ve açıklamayı göster

Cevap: UDP uses a fixed 8-byte header and operates statelessly without connection establishment, whereas TCP uses a minimum 20-byte header and maintains stateful connection tracking.

Cevap

UDP utilizes a fixed 8-byte header and operates statelessly without connection setup, while TCP uses a minimum 20-byte header and maintains stateful tracking.
The correct answer accurately states that UDP has a streamlined fixed 8-byte header containing only source port, destination port, length, and checksum fields, and operates without establishing connection state. TCP, by contrast, requires at least 20 bytes of header space for fields such as sequence numbers, acknowledgments, control bits, and window size, maintaining active state tracking across the session.

Adım Adım Çözüm

1
Analyze UDP Layer 4 header structure.
UDP headers contain Source Port (2 bytes), Destination Port (2 bytes), Length (2 bytes), and Checksum (2 bytes), resulting in a fixed 8-byte overhead.
Determining the exact byte overhead of UDP.
2
Analyze TCP Layer 4 header structure and state management.
TCP base headers require 20 bytes to accommodate fields for sequence numbers, acknowledgment numbers, flags, window size, and checksum. TCP also requires connection state tracking (handshake, sequence numbering, ACK tracking).
Comparing UDP header size and operational state to TCP.
3
Evaluate the choices to find the statement that accurately reflects these protocol properties.
The statement identifying UDP's fixed 8-byte stateless operation versus TCP's minimum 20-byte stateful tracking is correct.
Matching protocol features to Layer 4 standard specifications.

Anahtar Kavram

TCP vs UDP Header Overhead and Connection State
Tahmini Süre:1m 0s
ÖncekiSayfa 58 / 100Sonraki
Tüm alıştırma soruları — Cisco CCNA | Examkin