Examkin

Tüm alıştırma soruları

1987 soru

Tüm türler1,987Çoktan seçmeli1,020Çoklu seçim452Sayısal18Eşleştirme229Sıralama203Boşluk doldurma22Kısa cevap43
Soru 101Soru →

An enterprise WAN edge router frequently transmits micro-bursts of database traffic that temporarily exceed the contract rate limit set by the service provider. The network engineer must implement a Quality of Service (QoS) mechanism on the egress WAN interface that regulates outbound transmission rates to match the provider's limit by holding excess packets in memory queues for later transmission rather than immediately dropping them. Which QoS mechanism should be configured on the router interface?

Cevabı ve açıklamayı göster

Cevap: Traffic Shaping

Cevap

Traffic Shaping is the correct mechanism because it uses software queues to buffer excess traffic and smooth out rate bursts before sending packets across the egress link.
Traffic Shaping is a traffic conditioning mechanism applied in the egress direction that buffers excess packets in memory queues when traffic exceeds the configured Committed Information Rate (CIR). It slowly releases packets over time, creating a smooth output rate that prevents service provider packet drops.

Adım Adım Çözüm

1
Analyze the operational requirements stated in the scenario.
The requirement demands regulating outbound WAN traffic to a target rate while buffering bursty traffic instead of dropping it.
Understanding the difference between packet dropping and packet buffering key behavior is critical for QoS traffic conditioning selection.
2
Compare Traffic Shaping and Traffic Policing operational characteristics.
Traffic Shaping buffers out-of-profile packets in memory queues, whereas Traffic Policing drops or remarks out-of-profile packets.
Buffering enables smoothing of bursty traffic flows at the cost of slight delay, fulfilling the exact requirement.

Anahtar Kavram

Traffic Shaping vs. Traffic Policing Mechanisms
Soru 102Soru →

A network engineer is configuring a high-security wireless LAN on a Cisco Wireless LAN Controller (WLC) that must strictly comply with WPA3-Enterprise 192-bit mode requirements. Which cryptographic suite and management security setting must be enabled on the WLC profile to meet this standard?

Cevabı ve açıklamayı göster

Cevap: GCMP-256 encryption, EAP-TLS authentication with SHA-384, and mandatory Protected Management Frames (PMF)

Cevap

GCMP-256 encryption, EAP-TLS authentication with SHA-384, and mandatory Protected Management Frames (PMF)
WPA3-Enterprise 192-bit mode mandates the 256-bit Galois/Counter Mode Protocol (GCMP-256) for wireless frame encryption, EAP-TLS with HMAC-SHA384 for robust key derivation and authentication, and mandatory Protected Management Frames (PMF / IEEE 802.11w) to prevent unicast/multicast management frame spoofing.

Adım Adım Çözüm

1
Identify the target wireless security operational mode specified in the scenario
The scenario requires configuration of WPA3-Enterprise 192-bit mode (aligned with the Commercial National Security Algorithm / CNSA suite).
WPA3 defines distinct baseline specifications for WPA3-Personal, standard WPA3-Enterprise (128-bit), and WPA3-Enterprise 192-bit mode.
2
Determine the cryptographic ciphers, key management methods, and frame protection rules for 192-bit mode
WPA3-Enterprise 192-bit mode requires GCMP-256 for data confidentiality, EAP-TLS using SHA-384 for key derivation and authentication, and mandatory Protected Management Frames (PMF / IEEE 802.11w).
Standard 128-bit WPA3-Enterprise allows CCMP-128 or GCMP-128, whereas 192-bit mode enforces higher-grade cryptographic algorithms.
3
Evaluate the choices to select the option that contains all mandatory 192-bit mode specifications
The correct selection is the option combining GCMP-256, EAP-TLS with SHA-384, and mandatory PMF.
All other options mix in WPA3-Personal components (SAE), use 128-bit or legacy ciphers (CCMP-128, TKIP), use PSK, or misstate PMF requirements as optional or disabled.

Anahtar Kavram

WPA3-Enterprise 192-bit Mode Requirements
Soru 103Soru →

In a centralized Cisco wireless deployment operating under the split-MAC architecture, operational responsibilities are divided between the Lightweight Access Point (AP) and the Wireless LAN Controller (WLC). Which two functions are performed directly by the Lightweight AP? (Select two options.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Real-time 802.11 frame transmission and acknowledgment generation; 802.11 MAC-layer frame encryption and decryption

Cevap

The two functions performed directly by the Lightweight AP are real-time 802.11 frame transmission and acknowledgment generation, and 802.11 MAC-layer frame encryption and decryption.
In a Cisco split-MAC wireless architecture, time-sensitive real-time 802.11 MAC functions are offloaded to the Lightweight AP. These include frame transmissions, ACK generation, beaconing, probe responses, and hardware-based wireless encryption/decryption. This ensures low latency and strict adherence to 802.11 timing rules.

Adım Adım Çözüm

1
Analyze the split-MAC architecture model in Cisco centralized wireless networks.
Recognize that split-MAC divides 802.11 protocol handling into real-time functions on the AP and non-real-time management functions on the WLC.
Real-time functions require microsecond-level latency responsiveness that cannot survive CAPWAP tunnel transmission delays to the WLC.
2
Identify AP-specific real-time MAC functions.
Select frame acknowledgment (ACK) handling, beaconing, probe responses, and hardware encryption/decryption as AP responsibilities.
These tasks take place directly at the physical and medium access control layers on the local RF interface.
3
Identify WLC management and control functions.
Categorize client authentication, association tracking, 802.11 to 802.3 frame conversion, and Radio Resource Management (RRM) as WLC tasks.
Centralizing these tasks allows unified policy control, seamless roaming, and intelligent RF orchestration.

Anahtar Kavram

Split-MAC architecture division of real-time vs non-real-time functions between Lightweight APs and WLCs
Soru 104Soru →

A network engineer is configuring interface GigabitEthernet0/2 on a Cisco Catalyst switch to connect an office desktop computer. The host must be statically assigned to VLAN 25, and dynamic trunk negotiation protocols on the interface must be disabled. Which set of commands must the engineer enter in interface configuration mode to achieve this objective?

Cevabı ve açıklamayı göster

Cevap: switchport mode access
switchport access vlan 25

Cevap

The correct sequence consists of 'switchport mode access' followed by 'switchport access vlan 25' entered in interface configuration mode.
Configuring 'switchport mode access' forces the interface into static Layer 2 access mode and stops dynamic trunking protocol (DTP) negotiation. Following it with 'switchport access vlan 25' correctly places untagged host frames into broadcast domain VLAN 25.

Adım Adım Çözüm

1
Set the port mode to static access
Disables dynamic trunking protocol (DTP) negotiation and locks the interface into Layer 2 access mode.
Explicitly setting access mode ensures host interfaces do not negotiate trunk links.
2
Assign the access VLAN ID
Associates all incoming untagged frame traffic on GigabitEthernet0/2 with VLAN 25.
The 'switchport access vlan <id>' command dictates which single VLAN broadcast domain receives untagged ingress traffic from the connected host.

Anahtar Kavram

Access Port VLAN Assignment and Operational Mode Locking
Soru 105Soru →

A router receives its primary path to the 172.20.0.0/16 subnet via internal EIGRP. Which administrative distance value should be configured on a static route to ensure it functions as an inactive floating backup route until the primary path fails?

Cevabı ve açıklamayı göster

Cevap: 95

Cevap

An administrative distance value of 95 should be specified for the static route.
A floating static route is designed to serve as a backup path that only installs into the IP routing table when the primary route fails. Router forwarding decisions prioritize routes with lower administrative distance (AD) values. Internal EIGRP has a default AD of 90. Assigning a value of 95 ensures the static route has a higher AD than the primary EIGRP route, keeping it dormant until EIGRP route failure occurs.

Adım Adım Çözüm

1
Identify the administrative distance of the primary routing protocol.
Internal EIGRP has a default administrative distance (AD) of 90.
Routers use administrative distance to evaluate trustworthiness when selecting the best path among different routing sources.
2
Determine the required administrative distance for a floating static backup route.
The backup static route must have an AD greater than 90 (e.g., 95).
A floating static route remains inactive in the routing table only if its administrative distance is higher than that of the active primary routing protocol.

Anahtar Kavram

Floating Static Route Administrative Distance
Tahmini Süre:45s
Soru 106Soru →

A network administrator is reviewing IPv4 static route syntax and operational characteristics on a Cisco IOS router. Which two statements regarding Cisco IPv4 static routing are correct?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A static route configured with an administrative distance higher than a primary dynamic routing protocol serves as a floating static backup route.; Cisco IOS static route syntax requires specifying the destination network mask using dotted-decimal format rather than a wildcard mask.

Cevap

The correct statements are that configuring an administrative distance higher than the primary protocol creates a floating backup route, and that Cisco IOS static routes require dotted-decimal subnet masks.
Configuring a static route with an administrative distance higher than the primary routing protocol creates a floating static route that remains inactive until the primary route fails. Additionally, Cisco IOS 'ip route' command syntax strictly requires dotted-decimal subnet masks for prefix specification.

Adım Adım Çözüm

1
Analyze static route administrative distance mechanics for floating routes.
Lower administrative distance values are preferred in the routing table. To create a backup (floating) route, its administrative distance must be set higher than the primary route source.
If set lower than the primary dynamic protocol (e.g., 90 vs 110 for OSPF), the static route will preempt the primary protocol immediately.
2
Verify Cisco IOS CLI command syntax parameters for static routing.
The correct command format is 'ip route <destination-prefix> <subnet-mask> {next-hop-ip | exit-interface} [distance]'.
Subnet masks in static routes use dotted-decimal format (e.g., 255.255.255.0), and next-hop IP addresses must belong to the neighboring router.

Anahtar Kavram

Cisco IPv4 Static Route Syntax and Floating Static Administrative Distance Calibration
Tahmini Süre:1m 0s
Soru 107Soru →

A Cisco router receives an IPv4 packet destined for a remote network. Place the router forwarding decision and packet processing steps in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of router forwarding decision logic begins with inspecting the destination IP header, evaluating the routing table using Longest Prefix Match, resolving equal prefix length ties using Administrative Distance and metric, identifying the next-hop IP and exit interface, and performing Layer 2 header rewriting along with TTL decrement prior to frame transmission.
Router forwarding logic follows a deterministic sequence: packet IP inspection -> Longest Prefix Match evaluation -> Administrative Distance/metric tie-breaking for equal prefixes -> next-hop and exit interface resolution -> Layer 2 MAC resolution, TTL decrement, and frame forwarding.

Adım Adım Çözüm

1
Examine packet header
Destination IPv4 address is extracted from the incoming packet.
The router requires the destination address to initiate a routing table lookup.
2
Apply Longest Prefix Match rule
The routing table entry with the longest subnet mask matching the destination IP is chosen.
LPM is the primary criterion in Cisco IPv4 forwarding decision logic.
3
Compare Administrative Distance and metric
Ties between identical prefix lengths from different routing sources are resolved.
Administrative Distance ranks route trustworthiness when prefix lengths are equal.
4
Retrieve egress forwarding details
The next-hop IPv4 address and outbound interface are identified.
Forwarding requires knowing where to encapsulate and send the packet next.
5
Execute Layer 2 rewrite and transmission
TTL is decremented by 1, IP header checksum updated, next-hop MAC resolved via ARP, and frame sent.
Layer 2 encapsulation is link-local and must be rewritten for each hop along the path.

Anahtar Kavram

Router Forwarding Decision Logic
Soru 108Soru →

A network administrator needs to configure a static route on router R1 to reach the destination subnet 2001:db8:fed:10::/642001:\text{db8}:\text{fed}:10::/64. The next-hop router's interface uses the link-local IPv6 address fe80::2\text{fe80}::2 across the local GigabitEthernet0/0/1 point-to-point link. Which command must be entered on R1 to properly establish this route?

Cevabı ve açıklamayı göster

Cevap: ipv6 route 2001:db8:fed:10::/64 GigabitEthernet0/0/1 fe80::2

Cevap

The command 'ipv6 route 2001:db8:fed:10::/64 GigabitEthernet0/0/1 fe80::2' is the correct configuration.
When configuring an IPv6 static route using a link-local address as the next hop, Cisco IOS requires a fully specified route syntax containing both the local exit interface and the link-local address in the format: 'ipv6 route <prefix/mask> <exit-interface> <link-local-address>'. The option specifying 'GigabitEthernet0/0/1' followed by 'fe80::2' accurately matches this syntax requirement.

Adım Adım Çözüm

1
Identify the target destination prefix and prefix length
Destination prefix is 2001:db8:fed:10::/642001:\text{db8}:\text{fed}:10::/64.
Static routing commands start with the target network prefix and mask length.
2
Evaluate the next-hop address type
The next-hop address fe80::2\text{fe80}::2 is a link-local IPv6 address (FE80::/10 range).
Link-local addresses are non-routable and scoped strictly to a single link segment.
3
Apply Cisco IOS fully specified IPv6 static route syntax rules
The required command format is 'ipv6 route <prefix/mask> <exit-interface> <link-local-next-hop>'.
Specifying the exit interface GigabitEthernet0/0/1 before the link-local address fe80::2\text{fe80}::2 resolves interface ambiguity.

Anahtar Kavram

Fully specified IPv6 static routes with link-local next-hop addresses
Soru 109Soru →

A network engineer is configuring OSPFv2 across a broadcast Ethernet network segment and verifying router behaviors. Which two statements regarding OSPFv2 Router ID determination and neighbor adjacency formation are correct?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A router ID configured explicitly with the router-id command takes precedence over IP addresses assigned to loopback or physical interfaces.; On a broadcast network segment, two neighboring routers with an OSPF interface priority of 0 will remain in the 2-WAY neighbor state with each other.

Cevap

The two correct statements are that an explicitly configured router ID takes precedence over interface IP addresses, and that two routers with an OSPF priority of 0 on a broadcast network will remain in the 2-WAY state with each other.
An explicitly configured router ID using the 'router-id' command always takes precedence over loopback and physical interface IP addresses. Furthermore, on broadcast multiaccess networks, routers configured with a priority of 0 cannot become DR or BDR; two such DROTHER routers establish bi-directional communication but remain in the 2-WAY state with each other, forming FULL adjacencies only with the elected DR and BDR.

Adım Adım Çözüm

1
Evaluate OSPF Router ID election hierarchy
The election order is: 1) explicit 'router-id' CLI command, 2) highest IP address on an active loopback interface, 3) highest IP address on an active non-loopback/physical interface.
Explicit configuration always overrides automatic interface IP selection.
2
Evaluate Router ID preemption rules
Router ID selection is non-preemptive once the OSPF process initializes.
Changing interface IPs or adding loopbacks will not alter the active Router ID until 'clear ip ospf process' is executed or the router reboots.
3
Evaluate OSPF neighbor states on multiaccess broadcast networks
Setting 'ip ospf priority 0' disables DR/BDR eligibility for a router, making it a DROTHER.
DROTHER routers form FULL adjacencies only with the DR and BDR. Communication between two DROTHERs remains bidirectional in the 2-WAY state.
4
Verify Hello packet parameter matching requirements
Area ID, Subnet Mask, Hello/Dead timers, and Authentication must match between neighbors.
An Area ID mismatch causes Hello packet rejection, preventing adjacency formation entirely.

Anahtar Kavram

OSPFv2 Router ID election precedence and DROTHER 2-WAY neighbor relationship dynamics
Soru 110Soru →

A network administrator needs to create a new VLAN named ENGINEERING (VLAN 40) on a Cisco Catalyst switch and assign interface FastEthernet 0/12 to this VLAN as an access port. Place the following Cisco IOS command sequence in the correct execution order from global configuration entry to final interface VLAN assignment.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of commands begins with entering global configuration mode (configure terminal), creating the VLAN (vlan 40), naming the VLAN (name ENGINEERING), navigating to the target interface (interface fastethernet 0/12), defining the interface as an access port (switchport mode access), and finally binding the interface to the specified VLAN (switchport access vlan 40).
The sequence follows the standard Cisco IOS configuration hierarchy. Global configuration mode must be established first to define the Layer 2 broadcast domain (vlan 40) and assign its optional descriptive name (name ENGINEERING). Next, configuration context shifts to the specific physical layer interface (interface fastethernet 0/12), where the operational mode is defined (switchport mode access) before binding the interface to the created access VLAN (switchport access vlan 40).

Adım Adım Çözüm

1
Enter global configuration mode.
The prompt changes to switch(config)#.
Global configuration mode is required to create VLAN definitions and navigate to interface configurations.
2
Execute 'vlan 40'.
The prompt changes to switch(config-vlan)#.
Creates VLAN 40 in the VLAN database and opens VLAN configuration sub-mode.
3
Execute 'name ENGINEERING'.
VLAN 40 is named ENGINEERING.
VLAN names must be configured while inside the config-vlan sub-mode.
4
Execute 'interface fastethernet 0/12'.
The prompt changes to switch(config-if)#.
Navigates directly to the specific interface configuration sub-mode for FastEthernet 0/12.
5
Execute 'switchport mode access'.
Interface FastEthernet 0/12 is statically configured as an access port.
Configuring access mode explicitly disables Dynamic Trunking Protocol (DTP) negotiation for trunking.
6
Execute 'switchport access vlan 40'.
Interface FastEthernet 0/12 is associated with VLAN 40.
Assigns untagged traffic on this access port to the target broadcast domain (VLAN 40).

Anahtar Kavram

Cisco IOS VLAN creation and interface access port configuration hierarchy
Soru 111Soru →

A network administrator is configuring OSPFv2 between two routers on a point-to-point link. After configuring the router interfaces, the administrator notices that the routers fail to establish an OSPF neighbor relationship. Troubleshooting reveals that the two connecting interfaces were assigned different OSPF Area IDs. What is the outcome of this configuration mismatch?

Cevabı ve açıklamayı göster

Cevap: The routers drop the incoming Hello packets and fail to form any neighbor relationship.

Cevap

The routers drop the incoming Hello packets and fail to form any neighbor relationship.
For two routers to establish an OSPFv2 neighbor adjacency, several parameters in their Hello packets must match exactly, including the Area ID, Hello/Dead timers, Subnet Mask (on broadcast networks), Authentication, and Stub area flag. If the Area ID does not match, the router discards the received Hello packet immediately, preventing any neighbor state transition.

Adım Adım Çözüm

1
Identify the mandatory parameters that must match in OSPFv2 Hello packets.
OSPF Hello packets contain field parameters including Area ID, Hello and Dead intervals, Subnet Mask, Authentication key, and Stub area flag.
OSPFv2 strictly validates these fields upon receipt of a Hello packet from a potential neighbor.
2
Evaluate the effect of an Area ID mismatch.
When a router receives a Hello packet containing an Area ID that does not match the receiving interface's configured Area ID, the router discards the packet.
Receiving interfaces must belong to the exact same logical area to exchange topology information.
3
Determine the resulting neighbor state.
Because Hello packets are dropped, neither router sees itself listed in the neighbor's Hello packet, preventing any neighbor state progression.
Without valid Hello processing, the neighbor relationship remains down.

Anahtar Kavram

OSPFv2 Neighbor Adjacency Mandatory Matching Parameters
Tahmini Süre:45s
Soru 112Soru →

An engineer is configuring a wireless network for enterprise laptops using the Cisco Wireless LAN Controller (WLC) web interface. Under the Security tab, Layer 2 security is configured to use WPA2-Enterprise with 802.1X key management. Which sub-tab within the WLAN configuration page must be used to specify the external RADIUS authentication server for client authorization?

Cevabı ve açıklamayı göster

Cevap: AAA Servers sub-tab under Security

Cevap

The RADIUS authentication server is assigned on the AAA Servers sub-tab under the Security tab of the WLAN configuration page.
On a Cisco WLC, after configuring Layer 2 Security for 802.1X (WPA2/WPA3 Enterprise), external RADIUS authentication servers are selected under the AAA Servers sub-tab located within the Security tab of the WLAN edit page.

Adım Adım Çözüm

1
Identify the WLAN configuration requirement
The scenario requires associating an 802.1X RADIUS authentication server with a newly defined WPA2-Enterprise WLAN.
When 802.1X is selected under Layer 2 Security, the WLC must know which external AAA server to forward EAP authentication requests to.
2
Locate the appropriate WLC GUI menu section
Navigate to WLANs > Edit > Security > AAA Servers.
Cisco WLC GUI categorizes external authentication server selection under the AAA Servers sub-tab within the Security tab.

Anahtar Kavram

WLC GUI WLAN RADIUS Authentication Server Configuration
Tahmini Süre:1m 0s
Soru 113Soru →

A enterprise network topology consists of three Cisco Catalyst switches (SwitchA, SwitchB, and SwitchC) interconnected in a redundant ring running Rapid PVST+ for VLAN 10. SwitchA is configured as the Root Bridge with a base priority of 4096. SwitchB has a base priority of 28672, and SwitchC has a base priority of 32768. All inter-switch links operate at 1 Gbps GigabitEthernet speeds (STP path cost = 4). SwitchC connects directly to SwitchA via interface GigabitEthernet0/1 and to SwitchB via interface GigabitEthernet0/2. Which Rapid PVST+ port role and state will interface GigabitEthernet0/2 assume on SwitchC for VLAN 10 after STP convergence completes?

Cevabı ve açıklamayı göster

Cevap: Alternate port in the Discarding state

Cevap

Interface GigabitEthernet0/2 on SwitchC will become an Alternate port in the Discarding state.
SwitchC selects GigabitEthernet0/1 as its Root Port because its direct path to SwitchA has a cumulative path cost of 4, compared to a cost of 8 through SwitchB. For the link between SwitchB and SwitchC, both switches have an equal cost to the Root Bridge (4), so the switch with the lower Bridge ID (SwitchB at 28682 vs SwitchC at 32778) claims the Designated Port role. As a result, SwitchC's GigabitEthernet0/2 interface becomes an Alternate port and enters the Discarding state.

Adım Adım Çözüm

1
Calculate effective Bridge IDs including the System ID Extension (VLAN 10).
SwitchA BID = 4096 + 10 = 4106 (Root Bridge). SwitchB BID = 28672 + 10 = 28682. SwitchC BID = 32768 + 10 = 32778.
Rapid PVST+ appends the 12-bit VLAN ID to the base priority to form the bridge priority.
2
Evaluate root path costs for SwitchC to select its Root Port.
Path via Gi0/1 (direct to SwitchA) cost = 4. Path via Gi0/2 (to SwitchB to SwitchA) cost = 4 + 4 = 8. Gi0/1 becomes Root Port (Forwarding).
Each non-root switch selects the single port with the lowest cumulative cost toward the Root Bridge.
3
Determine Designated Port role on the segment between SwitchB and SwitchC.
Both SwitchB and SwitchC have a root path cost of 4 to SwitchA. SwitchB has a lower BID (28682) than SwitchC (32778), so SwitchB's interface becomes the Designated Port (Forwarding).
When root path costs on a segment are tied, the switch with the lowest Bridge ID wins the Designated Port role.
4
Assign the remaining port role for SwitchC's GigabitEthernet0/2 interface.
GigabitEthernet0/2 receives superior BPDUs from SwitchB and is assigned the Alternate port role in the Discarding state.
In Rapid PVST+ (802.1w), a port receiving BPDUs from another switch on a non-designated link serves as an Alternate port to provide a backup path to the root.

Anahtar Kavram

Rapid PVST+ Port Role and State Determination
Soru 114Soru →

A network router receives its primary path to a corporate office via external BGP with an administrative distance of 20. Which administrative distance value should be assigned to a static backup route to ensure it functions as a floating static route?

Cevabı ve açıklamayı göster

Cevap: 50

Cevap

An administrative distance of 50 should be assigned.
A floating static route must have an administrative distance higher than the primary route so it is ignored by the routing table during normal operation and only installed if the primary route fails. Since the primary eBGP route has an administrative distance of 20, setting the static route's administrative distance to 50 makes it a valid backup route.

Adım Adım Çözüm

1
Identify the administrative distance of the primary route.
The primary route is learned via external BGP, which has an administrative distance of 20.
Routing protocols use administrative distance to rank trustworthiness, preferring lower values.
2
Determine the required administrative distance for a floating static route.
The static route must be configured with an administrative distance greater than 20.
Floating static routes act as backups and must remain inactive in the routing table until the primary route with a lower administrative distance becomes unavailable.
3
Select the valid administrative distance option.
50 is greater than 20, making it a valid floating static route distance.
A value of 50 ensures the static route is only placed into the routing table if the eBGP route fails.

Anahtar Kavram

Floating static routes require a higher administrative distance than the primary routing protocol to remain inactive as a backup until failover occurs.
Soru 115Soru →

A network administrator executes the following command on switch SW-Core1 to verify direct physical connections:

SW-Core1# show cdp neighbors
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone

Device ID Local Intrfce Holdtme Capability Platform Port ID
SW-Access2 Gig 1/0/1 158 S I WS-C3850 Gig 1/0/24

Based on this output, which local physical interface on SW-Core1 is connected to the neighboring switch?

Cevabı ve açıklamayı göster

Cevap: GigabitEthernet 1/0/1

Cevap

GigabitEthernet 1/0/1 is the local physical interface on SW-Core1 connected to the neighboring device.
The 'show cdp neighbors' command displays summary information about directly connected Cisco devices. The 'Local Intrfce' field specifies the local interface on the current device (SW-Core1) where the CDP frames are received, which is GigabitEthernet 1/0/1. The 'Port ID' field indicates the port on the neighboring device (GigabitEthernet 1/0/24).

Adım Adım Çözüm

1
Examine the output headers of the 'show cdp neighbors' command
Identify that 'Local Intrfce' corresponds to the local device interface, while 'Port ID' corresponds to the remote neighbor interface.
CDP separates local interface information from peer interface information across distinct table columns.
2
Locate the entry under the 'Local Intrfce' column for SW-Access2
The column value displays 'Gig 1/0/1'.
This confirms that SW-Core1 receives CDP advertisements from SW-Access2 on its local interface GigabitEthernet 1/0/1.

Anahtar Kavram

CDP Neighbor Table Data Fields Interpretation
Tahmini Süre:1m 0s
Soru 116Soru →

During a switch security audit on switch SW-1, a network engineer notices that interface FastEthernet0/10 is operating with default settings: its administrative mode is dynamic auto and it is assigned to default VLAN 1. The engineer needs to configure FastEthernet0/10 to statically connect an end-user workstation in VLAN 25 while explicitly disabling Dynamic Trunking Protocol (DTP) trunk negotiation on the interface.

Which combination of interface configuration commands correctly accomplishes this configuration?

Cevabı ve açıklamayı göster

Cevap: switchport mode access
switchport access vlan 25

Cevap

The command sequence consisting of 'switchport mode access' followed by 'switchport access vlan 25' correctly provisions the interface as a static access port in VLAN 25.
Executing 'switchport mode access' explicitly defines the interface as a Layer 2 access port, which automatically disables DTP trunk negotiation. Following this with 'switchport access vlan 25' places the interface into VLAN 25.

Adım Adım Çözüm

1
Enforce static access mode
Configuring 'switchport mode access' under interface configuration mode turns off dynamic trunking (DTP) negotiations toward becoming a trunk line and locks the port in access mode.
By default, Cisco switch ports run in dynamic auto mode, which allows them to negotiate trunking if the remote end initiates it.
2
Assign the access VLAN membership
Configuring 'switchport access vlan 25' assigns all untagged ingress traffic on this port to VLAN 25.
Access ports belong to exactly one data VLAN to isolate broadcast domains.

Anahtar Kavram

Configuring Layer 2 switch access ports and disabling DTP negotiation in Cisco IOS
Soru 117Soru →

A network engineer is configuring a static IPv4 address for a server residing on a network segment assigned the network ID 172.24.16.0/22172.24.16.0/22. Which IPv4 address represents a valid usable host address that can be assigned to this server?

Cevabı ve açıklamayı göster

Cevap: 172.24.19.254172.24.19.254

Cevap

172.24.19.254172.24.19.254 is a valid usable host address within the 172.24.16.0/22172.24.16.0/22 subnet.
The IP address 172.24.19.254172.24.19.254 is the last valid usable host IP address in the 172.24.16.0/22172.24.16.0/22 subnet range, which spans from 172.24.16.1172.24.16.1 to 172.24.19.254172.24.19.254.

Adım Adım Çözüm

1
Determine the subnet mask and block size
A prefix of /22/22 corresponds to a subnet mask of 255.255.252.0255.255.252.0. The block size in the third octet is 256−252=4256 - 252 = 4.
Calculating the block size identifies how the subnets increment across the third octet.
2
Identify the network boundary and next subnet
The network address is 172.24.16.0172.24.16.0. Adding the block size of 44 to the third octet gives the next subnet network address of 172.24.20.0172.24.20.0.
The next subnet boundary defines the upper limit of the current subnet.
3
Calculate the broadcast address and usable host range
The broadcast address is 172.24.19.255172.24.19.255 (one IP before 172.24.20.0172.24.20.0). The usable host range spans from 172.24.16.1172.24.16.1 through 172.24.19.254172.24.19.254.
Usable host addresses lie strictly between the network ID and the broadcast ID.

Anahtar Kavram

IPv4 Subnet Boundaries and Usable Host Identification
Soru 118Soru →

A network engineer is auditing OSPFv2 interface configurations across a corporate network topology. On a multi-access Ethernet segment connecting five routers (R1 through R5), R1 must be configured so that it never becomes a Designated Router (DR) or Backup Designated Router (BDR). Additionally, on a separate point-to-point serial/Ethernet link between R1 and R2, the engineer converts the default OSPF network type to `point-to-point`. Which TWO actions or operational characteristics correctly apply to this OSPFv2 deployment? (Choose two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configuring `ip ospf priority 0` on R1's multi-access interface prevents it from participating in the DR/BDR election, keeping it permanently in the DROTHER state.; Changing the interface network type to `point-to-point` on the link between R1 and R2 eliminates DR/BDR election overhead while maintaining a default Hello interval of 10 seconds on Ethernet media.

Cevap

Configuring an OSPF priority of 0 prevents a router from participating in DR/BDR elections (keeping it DROTHER), and configuring a point-to-point network type suppresses DR/BDR elections while preserving the default 10-second Hello timer on Ethernet.
Configuring an interface priority of 0 ensures a router will never assume the role of DR or BDR on a multi-access network segment. Furthermore, configuring the point-to-point network type eliminates DR/BDR elections entirely on that interface while retaining the standard 10-second Hello interval on Ethernet.

Adım Adım Çözüm

1
Evaluate the requirement for R1 on the multi-access Ethernet segment.
Setting `ip ospf priority 0` on the interface completely excludes R1 from becoming either DR or BDR.
In OSPFv2, a router priority of 0 signifies non-participation in elections.
2
Analyze the operational properties of the OSPF point-to-point network type.
Point-to-point interfaces form adjacencies without electing a DR or BDR, and default Hello/Dead timers on Ethernet media remain 10s/40s.
DR/BDR elections are unnecessary on links limited to two endpoints.
3
Evaluate incorrect assertions regarding DR preemption, election override, and timer changes.
Reject claims that priority 0 allows BDR election, that point-to-point on Ethernet uses 30s timers, or that higher priority preempts an active DR.
Priority 0 excludes both DR and BDR roles; timer default is 10s; elections are non-preemptive.

Anahtar Kavram

OSPFv2 DR/BDR Election Rules and Network Type Timer Defaults
Tahmini Süre:1m 30s
Soru 119Soru →

Refer to the following partial output from a Cisco router's IPv4 routing table:

text
Gateway of last resort is not set

172.24.0.0/16 is variably subnetted, 4 subnets, 3 masks
O 172.24.32.0/21 [110/65] via 10.1.1.2, 00:12:45, GigabitEthernet0/0/1
D 172.24.32.0/22 [90/307200] via 10.1.1.6, 02:41:10, GigabitEthernet0/0/2
O IA 172.24.35.0/24 [110/120] via 10.1.1.10, 00:05:22, GigabitEthernet0/0/3
S 172.24.0.0/16 [1/0] via 10.1.1.1

Which next-hop IP address and exit interface will the router select to forward a packet destined for 172.24.35.10172.24.35.10?

Cevabı ve açıklamayı göster

Cevap: 10.1.1.10 via GigabitEthernet0/0/3

Cevap

10.1.1.10 via GigabitEthernet0/0/3
When a router makes a forwarding decision, it evaluates all matching table entries and selects the route with the most specific match—the longest prefix length. The route entry 172.24.35.0/24 covers 172.24.35.10 with a /24 prefix length, which is longer (more specific) than /22, /21, or /16. Therefore, traffic is forwarded to next-hop 10.1.1.10 via interface GigabitEthernet0/0/3.

Adım Adım Çözüm

1
Identify all candidate routes that match the destination IP address 172.24.35.10.
The destination address falls into four matching subnet ranges: 172.24.32.0/21, 172.24.32.0/22, 172.24.35.0/24, and 172.24.0.0/16.
Before comparing routing metrics or administrative distance, a router determines which entry ranges include the destination address.
2
Determine the prefix length (subnet mask bits) for each candidate route.
Prefix lengths are /16, /21, /22, and /24.
Cisco IOS routing logic enforces the Longest Prefix Match rule above administrative distance or metric considerations.
3
Select the route with the most specific match (highest number of network prefix bits).
172.24.35.0/24 has the longest prefix match (/24). The associated next-hop is 10.1.1.10 out interface GigabitEthernet0/0/3.
A /24 mask provides a more specific route match than /22, /21, or /16.

Anahtar Kavram

Longest Prefix Match Rule in Routing Table Lookup
Soru 120Soru →

A Cisco Catalyst switch interface configured as an 802.1Q trunk receives an incoming frame. Place the internal operational steps executed by the switch to process this frame into the correct chronological order from frame arrival to egress forwarding.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence for 802.1Q ingress frame processing is: 1) Inspect header for TPID (0x8100), 2) Extract tagged VLAN ID or assign configured Native VLAN ID if untagged, 3) Verify VLAN against the allowed VLAN list (ingress filtering), 4) Update MAC address table for the VLAN domain, 5) Forward or flood the frame to egress ports in that VLAN.
The correct operational sequence begins when an ingress frame arrives on an 802.1Q trunk. The switch ASIC first checks for the 802.1Q TPID (0x8100). Next, it extracts the 12-bit VLAN ID from tagged frames or assigns the configured native VLAN ID to untagged frames. After determining the VLAN, the switch applies ingress filtering to verify if that VLAN ID is on the trunk's allowed VLAN list. If permitted, it updates its MAC address table associating the source MAC with that VLAN and ingress port, and finally makes the egress forwarding or flooding decision within that VLAN context.

Adım Adım Çözüm

1
Inspect the Ethernet header for 802.1Q encapsulation
Identifies if the frame contains a 4-byte 802.1Q header with EtherType 0x8100.
The switch must determine whether the frame is tagged before interpreting VLAN fields.
2
Derive the internal VLAN context
Extracts the 12-bit VID from the tag header, or maps untagged traffic to the native VLAN.
802.1Q rules dictate that untagged frames belong to the native VLAN, while tagged frames belong to their explicit VID.
3
Execute ingress VLAN pruning check (allowed list filtering)
Checks if the derived VLAN is permitted by the 'switchport trunk allowed vlan' configuration.
If the VLAN is pruned/disallowed, the switch drops the frame immediately prior to MAC table processing.
4
Learn source MAC address
Adds or updates the source MAC address entry in the CAM table for the derived VLAN context.
Dynamic MAC learning occurs per-VLAN after verifying ingress permission.
5
Perform egress forwarding decision
Forwards frame to egress destination interface(s) in the matching VLAN domain.
Layer 2 forwarding logic constrains broadcast and unicast traffic strictly within the matched VLAN boundary.

Anahtar Kavram

802.1Q Trunk Ingress Frame Processing Pipeline
Tahmini Süre:2m 0s
ÖncekiSayfa 6 / 100Sonraki
Tüm alıştırma soruları — Cisco CCNA | Examkin