Examkin

Tüm alıştırma soruları

1987 soru

Tüm türler1,987Çoktan seçmeli1,020Çoklu seçim452Sayısal18Eşleştirme229Sıralama203Boşluk doldurma22Kısa cevap43
Soru 1161Soru →

A network administrator is organizing interface roles on a standalone Cisco Wireless LAN Controller (WLC) to support enterprise network access operations. Match each WLC logical or physical interface type on the left with its primary operational function on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Service Port
Management Interface
Virtual Interface
Dynamic Interface

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Service Port matches the out-of-band management connection; Management Interface matches in-band CAPWAP termination and administrative access; Virtual Interface matches internal web authentication and mobility services; Dynamic Interface matches WLAN-to-VLAN client data traffic mapping.
Each WLC interface fulfills a specific role in Cisco unified wireless architecture: the Service Port handles out-of-band management; the Management Interface processes in-band CAPWAP tunnels and admin access; the Virtual Interface manages internal features like WebAuth and DHCP proxying; and Dynamic Interfaces handle user data traffic segmentation on trunked VLANs.

Adım Adım Çözüm

1
Identify out-of-band administration interface.
The Service Port is physical, un-routed via distribution ports, and dedicated exclusively to out-of-band management access.
Out-of-band management provides isolated administrative control during production network disruptions.
2
Identify in-band CAPWAP and administrative access interface.
The Management Interface handles CAPWAP control and data tunnels from APs alongside administrative GUI/SSH access.
This interface requires a routable IP address and default gateway within the distribution network.
3
Identify internal service and redirection logical interface.
The Virtual Interface supports web auth redirection, DHCP relay, and mobility communication using a non-routable dummy IP.
It does not route traffic directly to the physical network but manages internal controller-to-client operations.
4
Identify client payload routing interface.
Dynamic Interfaces function as logical sub-interfaces mapped to 802.1Q trunk VLANs for client wireless traffic.
They segment wireless client traffic onto corresponding wired enterprise VLANs.

Anahtar Kavram

Cisco WLC Physical and Logical Interface Functions
Soru 1162Soru →

Match each Cisco Wireless LAN Controller (WLC) interface to its primary functional role and operational requirement.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Service Port Interface
Management Interface
Virtual Interface
Dynamic Interface

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Service Port Interface matches with providing isolated out-of-band management access using an independent routing table; Management Interface matches with serving as the primary in-band Layer 3 interface for CAPWAP management tunnels and administration; Virtual Interface matches with supporting non-routable Layer 3 operations such as web authentication redirection and DHCP relay; Dynamic Interface matches with binding specific Wireless LANs to backend 802.1Q VLANs.
Each WLC interface has a distinct architectural purpose: the Service Port provides dedicated out-of-band administration with its own routing table; the Management Interface manages in-band CAPWAP tunnels and controller management; the Virtual Interface handles non-routable client redirection and DHCP relay; and Dynamic Interfaces map SSIDs to backend wired VLANs.

Adım Adım Çözüm

1
Analyze out-of-band management requirements on Cisco WLC platforms.
Identify that the Service Port Interface provides physical out-of-band (OOB) administrative connectivity and uses a dedicated, isolated routing table separate from the data plane.
Out-of-band ports must remain reachable independently of distribution port trunking or Layer 2/Layer 3 data network status.
2
Evaluate in-band controller control plane and tunnel termination requirements.
Identify that the Management Interface is responsible for handling CAPWAP tunnel termination from Lightweight APs, mobility control messaging, and in-band HTTPS/SSH sessions.
The Management Interface resides on distribution system ports connected to the main enterprise switched network.
3
Examine internal logical client-facing helper services.
Identify the Virtual Interface as the non-routable interface handling guest web portal redirection (web auth) and wireless client DHCP relay processing.
The Virtual Interface IP address is never advertised or routed across the enterprise network infrastructure.
4
Determine how wireless user payloads are segregated across the wired infrastructure.
Identify Dynamic Interfaces as the logical mappings between WLAN SSIDs and destination 802.1Q VLAN IDs.
Dynamic interfaces act similarly to router subinterfaces to segregate user traffic into distinct Layer 2 broadcast domains.

Anahtar Kavram

Cisco WLC Logical and Physical Interface Architecture
Soru 1163Soru →

A network engineer executes the command `spanning-tree portfast trunk` on interface GigabitEthernet0/1 of a Cisco Catalyst switch. This interface acts as an active 802.1Q trunk link connected to another switch. Which operational risk is introduced by enabling PortFast on this trunk interface?

Cevabı ve açıklamayı göster

Cevap: The interface immediately transitions to the Forwarding state upon link setup, creating a risk of transient Layer 2 loops.

Cevap

The interface immediately transitions to the Forwarding state upon link setup, creating a risk of transient Layer 2 loops.
Enabling PortFast forces a switch port to bypass the 802.1D Listening and Learning states (30 seconds total default delay) and immediately enter the Forwarding state when the link becomes active. When applied to switch-to-switch interswitch connections, this behavior exposes the network to temporary bridging loops and broadcast storms during interface startup.

Adım Adım Çözüm

1
Analyze the function of Cisco PortFast.
PortFast allows an interface to bypass the 802.1D STP Listening (15s) and Learning (15s) states, transitioning immediately from Blocking to Forwarding.
It is designed for edge ports connected to single end-user devices (like PCs or printers) where topology loops cannot occur.
2
Evaluate the risk of applying PortFast to switch-to-switch trunk links.
When applied to interswitch links using `spanning-tree portfast trunk`, the port skips loop-prevention delay states, creating potential transient broadcast storms/loops before STP converges.
Switch-to-switch links form topology loops that depend on STP Listening and Learning states to determine block/forward roles.

Anahtar Kavram

STP PortFast operational behavior and interswitch configuration risk
Soru 1164Soru →

A network administrator needs to configure a static IPv6 route on a Cisco router to reach the destination network 2001:db8:acad:1::/64 using the next-hop router's link-local address fe80::1 via local interface GigabitEthernet0/0/1. Which Cisco IOS command correctly accomplishes this configuration?

Cevabı ve açıklamayı göster

Cevap: ipv6 route 2001:db8:acad:1::/64 GigabitEthernet0/0/1 fe80::1

Cevap

The command 'ipv6 route 2001:db8:acad:1::/64 GigabitEthernet0/0/1 fe80::1' correctly configures the IPv6 static route using a link-local address with the mandatory local exit interface.
The correct command specifies 'ipv6 route' followed by the target IPv6 network prefix/length (2001:db8:acad:1::/64), the local exit interface (GigabitEthernet0/0/1), and the next-hop link-local address (fe80::1). In Cisco IOS, link-local addresses cannot be used as static route next-hops without identifying the local exit interface.

Adım Adım Çözüm

1
Identify the destination IPv6 prefix and length
Destination prefix is 2001:db8:acad:1::/64.
IPv6 static routes require CIDR prefix notation (/64).
2
Evaluate next-hop address requirements
The next-hop address fe80::1 is a link-local address.
Link-local addresses (fe80::/10 range) are non-global and exist on every interface, making them ambiguous to the routing table without an exit interface context.
3
Formulate the correct Cisco IOS IPv6 static route command syntax
Command format: ipv6 route <destination-prefix/mask> <exit-interface> <link-local-next-hop>
Cisco IOS requires both the local exit interface and the link-local next-hop address for fully specified static routes using link-local next-hops.

Anahtar Kavram

Fully specified IPv6 static routes using link-local next-hop addresses
Soru 1165Soru →

A network administrator connects a PC to a Cisco switch access port configured with standard IEEE 802.1D Spanning Tree Protocol (STP) without PortFast enabled. Place the STP port states in the correct chronological order from the moment the physical link comes up until the port actively processes end-user network traffic.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological order of 802.1D STP port state transitions from link initiation to active forwarding is: Blocking State, Listening State, Learning State, and Forwarding State.
Under standard IEEE 802.1D Spanning Tree Protocol, an access interface without PortFast undergoes a 30-second convergence delay through specific sequential states: Blocking state (loop prevention), Listening state (15s to exchange BPDUs and determine port roles), Learning state (15s to populate MAC tables), and finally Forwarding state (active user traffic processing).

Adım Adım Çözüm

1
Identify the starting state when the physical interface transitions to up.
The port initializes in the Blocking state to prevent layer 2 loops.
Before topology calculations occur, all data frame processing and MAC learning are disabled.
2
Determine the state transition after the initial blocking evaluation.
The port moves to the Listening state for the duration of the Forward Delay timer (15 seconds).
In Listening, the switch participates in BPDUs exchange to determine spanning-tree topology roles without learning MAC addresses or forwarding frames.
3
Determine the state transition after port roles are settled.
The port enters the Learning state for a second Forward Delay interval (15 seconds).
In Learning, the port populates its MAC address table from frame headers to avoid excessive unicast flooding once forwarding begins.
4
Identify the final operational state.
The port transitions to the Forwarding state after completing both Forward Delay periods (30 seconds total convergence delay).
The port is now permitted to actively forward user data plane frames.

Anahtar Kavram

IEEE 802.1D STP Port State Transition Sequence
Tahmini Süre:1m 0s
Soru 1166Soru →

A network administrator configures a WPA2-Enterprise wireless network on a Cisco Wireless LAN Controller (WLC) GUI. On the WLANs > Edit page, the administrator sets the Interface/Interface Group on the General tab to a default VLAN dynamic interface, configures RADIUS authentication under the Security > AAA Servers tab, and confirms 802.1X Key Management under the Security > Layer 2 tab. During testing, wireless clients successfully authenticate against the external RADIUS server, but all clients are assigned to the default dynamic interface specified on the General tab rather than the individual per-user VLAN IDs returned in the RADIUS server IETF attributes (Tunnel-Type, Tunnel-Medium-Type, and Tunnel-Private-Group-ID). Which GUI configuration change on the WLC is required to enforce the dynamic VLAN assignments supplied by the RADIUS server?

Cevabı ve açıklamayı göster

Cevap: Navigate to the Advanced tab of the WLAN edit page and enable the Allow AAA Override option.

Cevap

Enable the Allow AAA Override option under the Advanced tab of the WLAN configuration page on the WLC GUI.
On a Cisco WLC, the 'Allow AAA Override' setting on the WLAN's Advanced tab must be enabled for the controller to accept client-specific attributes returned by a RADIUS server during 802.1X authentication. Without this setting checked, the WLC ignores RADIUS IETF attributes (such as Tunnel-Private-Group-ID for dynamic VLAN placement) and forces all authenticated clients onto the static interface configured on the WLAN's General tab.

Adım Adım Çözüm

1
Analyze the client connectivity issue.
802.1X authentication succeeds, but RADIUS-supplied attributes (VLAN IDs) are ignored, defaulting clients to the WLAN's mapped interface.
By default, Cisco WLC ignores user-specific AAA parameters returned in RADIUS Access-Accept messages unless explicitly configured to apply them.
2
Locate the required configuration feature in the WLC GUI.
Identify that feature overrides (AAA Override) reside under WLANs > Edit > Advanced tab.
The Advanced tab controls policy override capabilities, including Allow AAA Override, Coverage Hole Detection, and Client Band Select.
3
Enable 'Allow AAA Override'.
The WLC overrides the default dynamic interface on the General tab with the RADIUS IETF attributes 64 (Tunnel-Type), 65 (Tunnel-Medium-Type), and 81 (Tunnel-Private-Group-ID).
This setting instructs the controller to dynamically place authenticated clients into their assigned VLANs based on RADIUS authorization profiles.

Anahtar Kavram

WLAN AAA Override Configuration for Dynamic RADIUS VLAN Assignment via WLC GUI
Soru 1167Soru →

A network engineer needs to configure management connectivity for a newly deployed Cisco Wireless LAN Controller (WLC). The design requires out-of-band (OOB) administrative management access isolated from production traffic, alongside in-band CAPWAP tunnel management for access point (AP) registration. Which interface assignment and switch port configuration correctly satisfies these requirements?

Cevabı ve açıklamayı göster

Cevap: Connect the WLC Service Port to an isolated switch access port for out-of-band administrative management, and map the WLC Management Interface to an 802.1Q trunk port to handle in-band CAPWAP control and management traffic.

Cevap

Connect the WLC Service Port to an isolated switch access port for out-of-band administrative management, and map the WLC Management Interface to an 802.1Q trunk port to handle in-band CAPWAP control and management traffic.
The WLC Service Port is a dedicated, out-of-band physical interface designed specifically for network administration (CLI/SSH and Web GUI access) completely separate from data plane traffic. Conversely, the WLC Management Interface handles in-band management functions, including CAPWAP control and data tunnels from lightweight APs, inter-controller communication, and in-band GUI/CLI management. Connecting the Service Port to an isolated access port and the Management Interface to an 802.1Q trunk port fulfills all segregation and trunking requirements.

Adım Adım Çözüm

1
Identify out-of-band management requirements
Recognize that the WLC Service Port is a dedicated, out-of-band physical interface used solely for administrative management (HTTP/HTTPS/SSH) and operates outside the production data plane.
Out-of-band management must remain physically and logically isolated from wireless user data and access point communication traffic.
2
Identify in-band CAPWAP tunnel management requirements
Determine that the WLC Management Interface is the default permanent in-band interface used for CAPWAP tunnel termination between lightweight APs and the WLC.
APs require IP connectivity to the WLC Management Interface (or AP-Manager interface) to establish CAPWAP tunnels for control and management.
3
Evaluate required switch port configurations
Select an isolated access port configuration for the Service Port and an 802.1Q trunk link for the Management Interface to support tagged VLANs across the wireless infrastructure.
The Service Port connects to an access port on an isolated management VLAN, whereas the main WLC distribution ports connect via 802.1Q trunks to pass multiple user and management VLANs.

Anahtar Kavram

WLC Management and Service Port Interface Roles
Soru 1168Soru →

Match each Cisco Lightweight Access Point (AP) mode to its primary operational behavior.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

FlexConnect Mode
Monitor Mode
Sniffer Mode
Rogue Detector Mode

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

FlexConnect Mode matches with switching client traffic locally during WAN failure; Monitor Mode matches with serving as a dedicated WIDS and rogue detection sensor; Sniffer Mode matches with capturing raw 802.11 frames for network analysis; Rogue Detector Mode matches with listening to wired switch trunks for ARP/MAC correlation.
Each Cisco AP mode is designed for a specific operational capability. FlexConnect mode provides local data switching and WAN fault tolerance for remote offices. Monitor mode provides dedicated over-the-air WIDS and rogue scanning without serving client traffic. Sniffer mode captures wireless frames on specified channels and streams them to a packet analyzer. Rogue Detector mode connects to wired switch trunk ports to cross-reference rogue wireless MAC addresses with wired network traffic.

Adım Adım Çözüm

1
Identify the role of FlexConnect Mode
FlexConnect handles local traffic switching for remote branch deployments, maintaining client connectivity during WAN connection drops.
It avoids sending branch client data traffic over CAPWAP across WAN links to a centralized controller.
2
Identify the role of Monitor Mode
Monitor mode APs do not broadcast SSIDs or connect clients; they act purely as monitoring sensors across RF channels.
This mode is dedicated to threat detection and location tracking.
3
Identify the role of Sniffer Mode
Sniffer mode captures over-the-air raw 802.11 frames on a designated channel.
The captured traffic is encapsulated and forwarded to specialized network packet analysis software like Wireshark.
4
Identify the role of Rogue Detector Mode
Rogue Detector mode checks wired broadcast ARP traffic on switch trunks to find rogue AP MACs.
It correlates rogue wireless BSSIDs reported by other APs with MAC addresses seen on the wired infrastructure.

Anahtar Kavram

Cisco Wireless Access Point Operational Modes
Soru 1169Soru →

A network engineer is subnetting the parent address block 192.168.45.0/24192.168.45.0/24 to provision subnets for a regional office. Each subnet must support a minimum of 5050 usable host interfaces while minimizing address wastage. If subnets are assigned sequentially starting from the lowest network address, what is the broadcast address of the third subnet?

Cevabı ve açıklamayı göster

Cevap: 192.168.45.191192.168.45.191

Cevap

The broadcast address of the third usable subnet is 192.168.45.191192.168.45.191.
To support 50 host interfaces, 6 host bits (26−2=622^6 - 2 = 62 usable addresses) are necessary, yielding a /26/26 mask (block size of 64). The sequential subnets are 192.168.45.0/26192.168.45.0/26 (Subnet 1), 192.168.45.64/26192.168.45.64/26 (Subnet 2), and 192.168.45.128/26192.168.45.128/26 (Subnet 3). The broadcast address of Subnet 3 is the highest address in its range, 192.168.45.191192.168.45.191.

Adım Adım Çözüm

1
Determine the required host bits and prefix length.
Using the formula 2n−2≥502^n - 2 \ge 50, n=6n = 6 host bits are needed because 26−2=62≥502^6 - 2 = 62 \ge 50. The prefix length is 32−6=/2632 - 6 = /26.
Choosing 5 host bits (/27/27) yields only 25−2=302^5 - 2 = 30 usable hosts, which is insufficient.
2
Calculate the subnet block size (increment).
The block size is 26=642^6 = 64 addresses.
A /26/26 prefix leaves 6 host bits in the fourth octet, causing subnet boundaries to increment by 64.
3
List sequential subnet ranges to identify the third subnet.
Subnet 1: 192.168.45.0/26192.168.45.0/26 (192.168.45.0192.168.45.0 - 192.168.45.63192.168.45.63)
Subnet 2: 192.168.45.64/26192.168.45.64/26 (192.168.45.64192.168.45.64 - 192.168.45.127192.168.45.127)
Subnet 3: 192.168.45.128/26192.168.45.128/26 (192.168.45.128192.168.45.128 - 192.168.45.191192.168.45.191)
Subnets are allocated sequentially starting from 192.168.45.0192.168.45.0.
4
Identify the broadcast address of the third subnet.
The network address is 192.168.45.128192.168.45.128, and the broadcast address (the last address in the block) is 192.168.45.191192.168.45.191.
The broadcast address precedes the next subnet's network address (192.168.45.192−1=192.168.45.191192.168.45.192 - 1 = 192.168.45.191).

Anahtar Kavram

IPv4 VLSM Subnetting and Broadcast Address Calculation
Soru 1170Soru →

Examine the following Cisco router IP routing table output:

text
R1# show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

Gateway of last resort is not set

172.24.0.0/16 is subnetted, 4 subnets
S 172.24.0.0/16 [1/0] via 10.10.10.1
D 172.24.16.0/24 [90/307200] via 10.10.20.1
O 172.24.16.64/26 [110/40] via 10.10.30.1
R 172.24.16.80/28 [120/2] via 10.10.40.1

Router R1 receives an IP packet destined for 172.24.16.85172.24.16.85. Which next-hop IP address will router R1 select to forward this packet?

Cevabı ve açıklamayı göster

Cevap: 10.10.40.1

Cevap

10.10.40.1
When a router makes a forwarding decision, it evaluates matching routes using Longest Prefix Match (LPM) as the top priority criterion. Because 172.24.16.85172.24.16.85 matches 172.24.16.80/28172.24.16.80/28 (range .80–.95), the /28/28 route has the longest prefix length (28 bits) among all candidates. Thus, next-hop 10.10.40.1 is selected regardless of RIP having a higher Administrative Distance (120) than Static (1), EIGRP (90), or OSPF (110).

Adım Adım Çözüm

1
Determine which routing table entries match the target destination IP 172.24.16.85172.24.16.85.
Matches found: 172.24.0.0/16172.24.0.0/16, 172.24.16.0/24172.24.16.0/24, 172.24.16.64/26172.24.16.64/26 (range .64 to .127), and 172.24.16.80/28172.24.16.80/28 (range .80 to .95).
The destination address 172.24.16.85172.24.16.85 falls within the address ranges of all four configured subnets.
2
Apply the router forwarding lookup order logic (Longest Prefix Match).
The /28/28 prefix is selected over /26/26, /24/24, and /16/16 because 2828 is the maximum number of matching prefix bits.
Routers always evaluate prefix length first. Administrative Distance is only evaluated when comparing identical prefixes learned from different sources.
3
Identify the next-hop IP associated with the winning /28/28 route entry.
The next-hop address for 172.24.16.80/28172.24.16.80/28 is 10.10.40.110.10.40.1.
The packet is forwarded out to the next hop specified in the /28/28 RIP route entry despite its higher AD.

Anahtar Kavram

Longest Prefix Match (LPM) precedence in Cisco IPv4 routing lookup decision logic
Tahmini Süre:2m 0s
Soru 1171Soru →

Two Cisco Catalyst switches, SW1 and SW2, are connected via their GigabitEthernet0/2 interfaces. SW1 is configured with `switchport mode dynamic auto` and allows VLANs 10, 20, and 30 on its trunk. SW2 is configured with `switchport mode dynamic desirable` and has its allowed VLAN list manually pruned using `switchport trunk allowed vlan 10,20`. Both switches share native VLAN 10. Which behavior occurs when a host on VLAN 30 attached to SW1 sends a broadcast frame destined across this switch interconnect?

Cevabı ve açıklamayı göster

Cevap: The trunk link negotiates successfully, but SW2 drops the VLAN 30 broadcast frame because VLAN 30 is absent from SW2's allowed VLAN list.

Cevap

The trunk link negotiates successfully via DTP, but SW2 drops the VLAN 30 broadcast frame because VLAN 30 is absent from SW2's allowed VLAN list.
Dynamic Trunking Protocol (DTP) successfully forms an 802.1Q trunk link when one side is configured as 'dynamic auto' and the other as 'dynamic desirable'. However, VLAN allowed lists on trunk interfaces filter traffic independently on each switch. Because SW1 sends a tagged VLAN 30 frame and SW2 only permits VLANs 10 and 20 on its trunk interface, SW2 drops the VLAN 30 frame upon ingress.

Adım Adım Çözüm

1
Analyze DTP negotiation state between SW1 and SW2.
SW1 is in dynamic auto mode and SW2 is in dynamic desirable mode. Dynamic desirable actively initiates negotiation, while dynamic auto responds to negotiation requests. This results in an operational 802.1Q trunk.
DTP mode compatibility rules dictate that auto + desirable successfully forms a trunk link.
2
Evaluate frame tagging and egress behavior on SW1 for VLAN 30.
Since VLAN 30 is not the native VLAN (which is VLAN 10), SW1 encapsulates the broadcast frame with an 802.1Q tag for VLAN 30 and forwards it out GigabitEthernet0/2.
802.1Q trunking tags all non-native VLAN traffic passing across the trunk link.
3
Evaluate ingress filtering on SW2 for the incoming tagged VLAN 30 frame.
SW2 receives the tagged VLAN 30 frame. SW2 checks its local trunk allowed VLAN list (`10,20`). Because VLAN 30 is not in SW2's allowed list, SW2 drops the frame at ingress.
Trunk allowed VLAN pruning is enforced locally by receiving switches to restrict unneeded broadcast domains.

Anahtar Kavram

802.1Q Trunking DTP Negotiation and Ingress Allowed VLAN Pruning Logic
Tahmini Süre:1m 15s
Soru 1172Soru →

A network engineer connects interface GigabitEthernet0/1 on Switch-A to interface GigabitEthernet0/1 on Switch-B. Switch-A is configured with `switchport mode trunk` and `switchport trunk native vlan 50`. Switch-B retains default Cisco IOS switchport settings. Which two operational outcomes will occur on this interswitch connection? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Switch-B operational mode transitions to an 802.1Q trunk through Dynamic Trunking Protocol (DTP) negotiation.; CDP generates system log messages reporting a native VLAN mismatch between Switch-A and Switch-B.

Cevap

The interswitch link operational outcomes are: Switch-B operational mode transitions to an 802.1Q trunk through Dynamic Trunking Protocol (DTP) negotiation, and CDP generates system log messages reporting a native VLAN mismatch between Switch-A and Switch-B.
Default Cisco Catalyst interface settings use `switchport mode dynamic auto` and native VLAN 1. When connected to a port configured with `switchport mode trunk`, DTP negotiates an operational 802.1Q trunk link. Concurrently, because Switch-A is explicitly set to native VLAN 50 while Switch-B remains on VLAN 1, CDP exchanges uncover the configuration discrepancy and issue native VLAN mismatch error logs.

Adım Adım Çözüm

1
Analyze the Dynamic Trunking Protocol (DTP) operational states.
Switch-A is in static `trunk` mode (which actively sends DTP frames). Switch-B is in default `dynamic auto` mode. The combination of `trunk` and `dynamic auto` results in a negotiated 802.1Q trunk.
Ports configured as `dynamic auto` passively listen for DTP trunking requests and will agree to negotiate trunking if requested by `trunk` or `dynamic desirable` modes.
2
Analyze the Native VLAN configuration on both sides of the trunk.
Switch-A has native VLAN set to 50, whereas Switch-B retains the default native VLAN 1. This creates a native VLAN mismatch.
802.1Q trunks send untagged frames for the configured native VLAN. When native VLAN IDs differ across a link, CDP exchanges TLVs that detect the discrepancy and log native VLAN mismatch warnings.

Anahtar Kavram

802.1Q Trunk Negotiation & Native VLAN Mismatch Diagnostics
Soru 1173Soru →

A Cisco router receives an IP packet destined for host 172.16.35.67172.16.35.67. The routing table contains multiple candidate routes that match this destination IP address. Place the routing decision criteria in the correct order of precedence used by the router to make its forwarding decision, from first evaluated (highest precedence) at the top to last evaluated (lowest precedence) at the bottom.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence of router forwarding decision logic criteria from highest to lowest precedence is: 1) Longest Prefix Match, 2) Lowest Administrative Distance, 3) Lowest Metric, and 4) Equal-Cost Load Balancing.
When forwarding an IP packet, a Cisco router evaluates candidate routes in a strict multi-tier hierarchy. First, Longest Prefix Match (LPM) determines the best route by selecting the entry with the most specific subnet mask. Second, if multiple routes match with the exact same subnet mask length, the router compares Administrative Distance (AD) to select the most trustworthy route source. Third, if routes share the exact same prefix length and come from the same routing protocol, the router selects the path with the lowest metric. Finally, if prefix length, AD, and metric are all identical, equal-cost load balancing is applied.

Adım Adım Çözüm

1
Evaluate mask length specificity (Longest Prefix Match).
The router compares the destination address against all routing table entries and isolates candidate routes matching the highest number of left-to-right network bits (longest subnet mask).
Longest Prefix Match is the primary decision rule in IP packet forwarding and overrides AD and metric.
2
Compare Administrative Distance (AD) for identical prefix lengths.
If candidate routes share the exact same prefix length (e.g., two /24/24 routes), the router compares route sources and selects the one with the lowest AD value.
Administrative Distance defines the believability or trustworthiness of the route source.
3
Compare routing protocol Metric for identical prefix length and route source.
If multiple candidate routes share the exact same prefix length and originate from the same routing protocol (same AD), the router selects the path with the lowest metric value.
Metric measures the cost or desirability of a specific path within a routing protocol domain.
4
Execute Equal-Cost Multi-Path (ECMP) load balancing.
If candidate routes for the exact same prefix length have identical AD and metric values, the router installs multiple paths in the Forwarding Information Base (FIB) and distributes traffic across them.
Equal-cost load balancing optimizes link usage when multiple best paths exist.

Anahtar Kavram

Router Forwarding Decision Hierarchy (LPM -> AD -> Metric -> ECMP)
Tahmini Süre:2m 0s
Soru 1174Soru →

A network administrator configures an interface on a Cisco router with the IPv6 address `2001:db8:3c4d:15::1/64`. Which of the following IPv6 addresses resides within the exact same `/64` subnet prefix as this interface?

Cevabı ve açıklamayı göster

Cevap: 2001:db8:3c4d:15:a::1

Cevap

The address 2001:db8:3c4d:15:a::1 resides in the 2001:db8:3c4d:15::/64 subnet prefix.
The configured interface address 2001:db8:3c4d:15::1/64 uses the network prefix 2001:db8:3c4d:15::/64 (fully expanded as 2001:0db8:3c4d:0015::/64). The address 2001:db8:3c4d:15:a::1 expands to 2001:0db8:3c4d:0015:000a:0000:0000:0001, sharing the exact same 64-bit network prefix.

Adım Adım Çözüm

1
Determine the network prefix of the configured IPv6 address
The configured address 2001:db8:3c4d:15::1/64 has a prefix length of /64. Expanding leading zeros gives 2001:0db8:3c4d:0015::1/64. The first 64 bits (4 hextets) represent the network prefix: 2001:0db8:3c4d:0015::/64 (or 2001:db8:3c4d:15::/64).
The prefix length /64 specifies that the first 64 bits determine subnet membership.
2
Expand and evaluate the candidate IPv6 options
Expanding 2001:db8:3c4d:15:a::1 yields 2001:0db8:3c4d:0015:000a:0000:0000:0001. The first 64 bits match 2001:0db8:3c4d:0015 exactly.
IPv6 address compression rules allow leading zeros to be omitted in hextets and contiguous zero hextets to be replaced with :: once.

Anahtar Kavram

IPv6 Address Representation and Subnet Prefix Matching
Tahmini Süre:1m 0s
Soru 1175Soru →

An enterprise network uses Rapid PVST+ across four switches (SW1, SW2, SW3, SW4) configured for VLAN 50. All switches operate with default STP settings except for the bridge priority values specified below:

- SW1: Bridge Priority = 2457624576, MAC = 0001.0000.00110001.0000.0011
- SW2: Bridge Priority = 3276832768, MAC = 0001.0000.00220001.0000.0022
- SW3: Bridge Priority = 3276832768, MAC = 0001.0000.00330001.0000.0033
- SW4: Bridge Priority = 3276832768, MAC = 0001.0000.00440001.0000.0044

The physical interconnections and short path costs for VLAN 50 are as follows:
- SW1 connects to SW2 via Gi1/0/1 (1 Gbps1\text{ Gbps} link, STP cost = 44) and to SW3 via Gi1/0/2 (10 Gbps10\text{ Gbps} link, STP cost = 22).
- SW2 connects to SW3 via Gi1/0/2 (10 Gbps10\text{ Gbps} link, STP cost = 22).
- SW4 connects to SW2 via Gi1/0/1 (1 Gbps1\text{ Gbps} link, STP cost = 44) and to SW3 via Gi1/0/2 (1 Gbps1\text{ Gbps} link, STP cost = 44).

After Rapid PVST+ converges, what are the port role and port state of interface Gi1/0/1 on SW4 for VLAN 50?

Cevabı ve açıklamayı göster

Cevap: Alternate port in the Discarding state

Cevap

Alternate port in the Discarding state
SW1 is elected Root Bridge because it has the lowest Bridge Priority (2457624576). SW3's Root Path Cost to SW1 is 22 (via its direct 10 Gbps10\text{ Gbps} link), while SW2's Root Path Cost to SW1 is 44 (via its direct 1 Gbps1\text{ Gbps} link). When evaluating SW4, its path through SW3 yields a total cost of 66 (4+24 + 2), whereas its path through SW2 yields a total cost of 88 (4+44 + 4). SW4 chooses Gi1/0/2 as its Root Port in the Forwarding state. For the segment between SW2 and SW4, SW2 advertises a lower Root Path Cost (44) than SW4 (66), making SW2 the Designated Bridge. Consequently, SW4's interface Gi1/0/1 is non-designated and operates as an Alternate port in the Discarding state.

Adım Adım Çözüm

1
Determine the Root Bridge for VLAN 50.
SW1 has the lowest Bridge Priority (2457624576) and is elected as the Root Bridge.
Bridge ID comparison evaluates Bridge Priority + System ID Extension first, then MAC address.
2
Calculate the Root Path Cost for SW2, SW3, and SW4 to SW1.
SW3 Root Path Cost = 22 (via Gi1/0/2 direct 10 Gbps10\text{ Gbps} link). SW2 Root Path Cost = 44 (via Gi1/0/1 direct 1 Gbps1\text{ Gbps} link).
SW3 uses its direct 10 Gbps10\text{ Gbps} link (cost 2). SW2 uses its direct 1 Gbps1\text{ Gbps} link (cost 4).
3
Evaluate SW4's root path options to select SW4's Root Port.
Path via SW3: SW4 Gi1/0/2 cost (44) + SW3 Root Path Cost (22) = 66. Path via SW2: SW4 Gi1/0/1 cost (44) + SW2 Root Path Cost (44) = 88. SW4 selects Gi1/0/2 as its Root Port.
Rapid PVST+ selects the port leading to the lowest cumulative Root Path Cost.
4
Determine the Designated Bridge and port roles on the SW2-SW4 link (SW4 Gi1/0/1).
SW2 advertises Root Path Cost = 44, while SW4 advertises Root Path Cost = 66. SW2 wins Designated Bridge status on the segment. SW4 Gi1/0/1 becomes an Alternate port in the Discarding state.
The switch with the lower advertised Root Path Cost becomes the Designated Bridge on a shared segment. The non-designated port on the non-root switch receives BPDUs and transitions to the Alternate role in the Discarding state.

Anahtar Kavram

Rapid PVST+ Root Port Election and Alternate Port Role Determination
Soru 1176Soru →

An organization is assigned the IPv4 address block 172.28.0.0/19172.28.0.0/19 to provision subnetting for a multi-building campus network. The system architecture mandates dividing this entire block into equal-sized subnets where each subnet must support at least 120120 usable host IP addresses. What is the maximum number of such equal-sized subnets that can be created from this /19/19 prefix?

Cevabı ve açıklamayı göster

Cevap: 64

Cevap

64 subnets can be created.
To host at least 120 usable IP addresses, 7 host bits are required (27−2=1262^7 - 2 = 126 usable hosts). A block with 7 host bits corresponds to a /25/25 prefix. Subnetting a /19/19 block into /25/25 subnets borrows 25−19=625 - 19 = 6 bits, resulting in 26=642^6 = 64 subnets.

Adım Adım Çözüm

1
Determine the required host bits
7 host bits (h=7h = 7)
The formula for usable IPv4 hosts per subnet is 2h−22^h - 2. For 120 hosts, 2h−2≥120  ⟹  2h≥1222^h - 2 \ge 120 \implies 2^h \ge 122. The smallest power of two satisfying this is 27=1282^7 = 128 (128−2=126128 - 2 = 126 usable host addresses).
2
Determine the required subnet prefix length
/25 prefix length
Subtracting 7 host bits from total 32 bits (32−7=2532 - 7 = 25) gives a subnet mask of /25/25 (255.255.255.128255.255.255.128).
3
Calculate the number of subnets derived from the parent prefix
64 subnets
The parent prefix is /19/19 and the subnet prefix is /25/25. The number of borrowed subnet bits is 25−19=625 - 19 = 6 bits. The total number of subnets created is 26=642^6 = 64.

Anahtar Kavram

VLSM and Subnet Sizing Calculation
Soru 1177Soru →

An engineer captures traffic from an enterprise workstation streaming live voice communication. The capture shows small datagrams arriving without connection establishment frames, sequence numbers, or acknowledgment requests, allowing out-of-order delivery without triggering retransmissions. Which transport protocol is transmitting this traffic, and what is its baseline header size?

Cevabı ve açıklamayı göster

Cevap: UDP, which uses a fixed 8-byte header containing only source port, destination port, length, and checksum fields.

Cevap

UDP, which uses a fixed 8-byte header containing only source port, destination port, length, and checksum fields.
The captured traffic demonstrates connectionless, unreliable delivery suited for real-time voice streaming. User Datagram Protocol (UDP) provides this lightweight transport mechanism using a fixed header of 8 bytes (comprising 2 bytes each for Source Port, Destination Port, Length, and Checksum).

Adım Adım Çözüm

1
Analyze packet capture characteristics
Identified connectionless behavior without sequence numbers, ACKs, or handshakes.
Real-time voice traffic prioritizes minimal latency and jitter over reliable delivery.
2
Map operational characteristics to Transport layer protocols
UDP (User Datagram Protocol) is connectionless, whereas TCP is connection-oriented.
UDP does not track sequence numbers or mandate packet retransmission.
3
Determine the exact header size
UDP uses a fixed 8-byte header (Source Port, Destination Port, Length, Checksum), compared to TCP's 20-byte minimum header.
Lower header overhead reduces bandwidth consumption and processing overhead for small real-time datagrams.

Anahtar Kavram

TCP vs UDP Header Overhead and Protocol Mechanics
Soru 1178Soru →

An engineer is troubleshooting traffic flow on switch SW-BuildingA. A connected device sends an Ethernet frame that arrives on interface GigabitEthernet0/4. The frame has a source MAC address of 0050.56a1.1a2b and a destination MAC address of 0050.56b2.2c3d. When the switch performs a lookup for the destination MAC address in its MAC address table, it identifies an existing dynamic entry mapping 0050.56b2.2c3d to GigabitEthernet0/4. Which action will the switch perform for this frame?

Cevabı ve açıklamayı göster

Cevap: Learns or updates the source MAC address entry on GigabitEthernet0/4 and filters (drops) the frame.

Cevap

The switch updates or records the source MAC address entry on the ingress port (GigabitEthernet0/4) and filters (drops) the frame without forwarding it.
When a Layer 2 switch receives a frame, it reads the source MAC address to update its MAC address table. Next, it looks up the destination MAC address. If the destination MAC address maps to the exact same port on which the frame arrived, the switch filters (drops) the frame because the destination node is already on that local segment and does not need switch forwarding.

Adım Adım Çözüm

1
Examine the ingress interface and source MAC address of the incoming Ethernet frame.
The switch records or updates the MAC address 0050.56a1.1a2b associated with interface GigabitEthernet0/4 in the MAC address table.
Layer 2 switches constantly learn and refresh source MAC address table bindings upon receiving incoming frames.
2
Perform a destination MAC address table lookup for 0050.56b2.2c3d.
The lookup matches an existing dynamic entry pointing to interface GigabitEthernet0/4.
The switch needs to determine which egress port corresponds to the destination host.
3
Compare the egress interface identified in the MAC table lookup with the ingress interface of the frame.
The egress interface (GigabitEthernet0/4) matches the ingress interface (GigabitEthernet0/4).
When ingress and egress ports match, the frame is already present on that physical network segment.
4
Apply frame forwarding/filtering rules based on matching ports.
The switch filters (drops) the frame.
Forwarding the frame back out the ingress port is unnecessary and would cause duplicate frames on a shared Layer 2 segment.

Anahtar Kavram

Frame Filtering and MAC Address Table Lookup Rules
Soru 1179Soru →

A network engineer executes the command `ipv6 address 2001:db8:abcd:1000::/64 eui-64` on a Cisco IOS router interface. The interface has a MAC address of `cc01.1a2b.3c4d`. Which IPv6 global unicast address will be assigned to this interface?

Cevabı ve açıklamayı göster

Cevap: 2001:db8:abcd:1000:ce01:1aff:fe2b:3c4d

Cevap

The address 2001:db8:abcd:1000:ce01:1aff:fe2b:3c4d will be assigned to the interface.
The IPv6 address ending in ce01:1aff:fe2b:3c4d correctly applies both EUI-64 modifications: inserting FFFE into the middle of the 48-bit MAC address and inverting the 7th bit of the first byte (0xCC becomes 0xCE).

Adım Adım Çözüm

1
Split the 48-bit MAC address into two 24-bit halves.
First half: cc:01:1a, Second half: 2b:3c:4d
EUI-64 generation requires splitting the MAC address at its midpoint to insert a 16-bit delimiter.
2
Invert the 7th bit (Universal/Local bit) of the first byte (0xCC).
0xCC (1100 1100 in binary) becomes 0xCE (1100 1110 in binary).
IEEE EUI-64 specifications require flipping the U/L bit (7th bit from the left) to indicate universal scope.
3
Insert hexadecimal FFFE between the two halves and format as IPv6 quads.
Interface ID: ce01:1aff:fe2b:3c4d
The 16-bit FFFE padding converts the 48-bit MAC address into a 64-bit interface identifier.
4
Combine the 64-bit prefix with the generated 64-bit interface ID.
2001:db8:abcd:1000:ce01:1aff:fe2b:3c4d
Appending the interface ID to the prefix produces the complete 128-bit IPv6 address.

Anahtar Kavram

EUI-64 Interface Identifier Derivation
Tahmini Süre:1m 15s
Soru 1180Soru →

A network administrator is deploying Cisco Lightweight Access Points (APs) operating in default Local mode within a centralized wireless architecture. Which two statements accurately describe the switchport configuration and CAPWAP management access requirements for these APs?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The switch port connecting the Local mode AP is typically configured as a standard Layer 2 access port assigned to the AP management VLAN.; The AP uses CAPWAP control packets to discover the controller and establish an encapsulated management and data path to the WLC Management Interface.

Cevap

In a centralized wireless architecture using Local mode APs, the AP switch port should be configured as a standard Layer 2 access port assigned to the AP management VLAN. Additionally, the AP establishes CAPWAP control and data tunnels back to the WLC Management Interface.
Lightweight APs operating in default Local mode encapsulate all wireless client traffic and management communications inside CAPWAP tunnels. Because all frames leave the AP as unicast IP packets on a single management address, the switch port connecting the AP only needs to be a standard access port in the AP management VLAN. The CAPWAP control and data tunnels terminate on the WLC Management Interface.

Adım Adım Çözüm

1
Identify the operation mode of the Lightweight Access Point.
The AP is in default Local mode, meaning all client traffic is backhauled over CAPWAP tunnels to the controller rather than being switched locally.
Local mode APs do not tag or bridge client VLANs directly onto the access switch.
2
Determine switchport requirements for Local mode APs.
Since all traffic is encapsulated inside CAPWAP packets on a single AP management IP address, a simple access port assigned to the AP management VLAN is appropriate.
Trunking is unnecessary for Local mode APs because client VLAN tagging happens at the controller.
3
Verify WLC interface roles for AP management access.
APs form CAPWAP tunnels to the WLC Management Interface (in-band), while the Service Port is strictly reserved for out-of-band controller management.
CAPWAP tunnels terminate on the WLC Management Interface.

Anahtar Kavram

Switchport placement and CAPWAP connectivity for Cisco Lightweight APs in Local mode
ÖncekiSayfa 59 / 100Sonraki
Tüm alıştırma soruları — Cisco CCNA | Examkin