Tüm alıştırma soruları

1987 soru

Soru 1561Soru

A Cisco router receives an IPv4 packet destined for host 192.168.50.45192.168.50.45. The router's routing table contains a static route `ip route 192.168.50.0 255.255.255.0 10.1.1.2` and a directly connected network 10.1.1.0/3010.1.1.0/30 out interface `GigabitEthernet0/1`. Arrange the sequential processing steps executed by the router to forward this packet from initial ingress lookup to egress transmission.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence is: Extract the destination IP address -> Perform primary routing lookup -> Perform recursive lookup for the next-hop IP -> Query ARP table for next-hop MAC -> Encapsulate packet and transmit out egress interface.
When a Cisco router receives an IP packet, it first extracts the destination IP address. Using longest prefix match, it matches the static route entry pointing to next-hop IP 10.1.1.2. Because this route specifies an IP next-hop rather than an outbound interface directly, the router performs a recursive lookup to find which connected interface reaches 10.1.1.2 (GigabitEthernet0/1). Knowing the egress Ethernet interface, it resolves the next-hop MAC address using ARP, encapsulates the IPv4 packet in an Ethernet frame, and transmits it out GigabitEthernet0/1.

Adım Adım Çözüm

1
Inspect destination header
Destination IPv4 address 192.168.50.45192.168.50.45 is extracted from the incoming frame.
Routing decisions are based on the packet's destination IPv4 address.
2
Execute primary route table lookup
Matches route `192.168.50.0 255.255.255.0` with next-hop IP 10.1.1.210.1.1.2.
The router uses longest prefix matching to select the route entry.
3
Execute recursive lookup
Resolves 10.1.1.210.1.1.2 to directly connected route 10.1.1.0/3010.1.1.0/30 on interface `GigabitEthernet0/1`.
Static routes configured solely with a next-hop IP address require a recursive lookup to identify the exit interface.
4
Resolve Layer 2 next-hop address
Obtains the target MAC address for 10.1.1.210.1.1.2 from the ARP table.
Ethernet encapsulation requires a destination Layer 2 MAC address for the next hop.
5
Encapsulate and egress
Frame is sent out `GigabitEthernet0/1`.
Final physical delivery step out the egress interface.

Anahtar Kavram

IPv4 Static Route Recursive Lookup & Packet Forwarding Pipeline
Tahmini Süre:2m 0s
Soru 1562Soru

A network administrator needs to configure Port Address Translation (PAT) on a Cisco IOS router so that multiple internal hosts defined in Access Control List 1 can share the IP address assigned to the WAN interface GigabitEthernet0/0/1. Which command correctly completes this configuration?

Cevabı ve açıklamayı göster

Cevap: ip nat inside source list 1 interface GigabitEthernet0/0/1 overload

Cevap

The command 'ip nat inside source list 1 interface GigabitEthernet0/0/1 overload' correctly enables Port Address Translation (PAT) using the router's exit interface IP address.
The correct choice utilizes the 'ip nat inside source list 1 interface GigabitEthernet0/0/1 overload' command. This properly specifies that internal traffic matching access list 1 should be translated to the public IP assigned to interface GigabitEthernet0/0/1, while the 'overload' keyword enables Port Address Translation (PAT) so multiple hosts can share that single address via port multiplexing.

Adım Adım Çözüm

1
Identify the requirement for interface-based PAT (Port Address Translation).
Dynamic translation for multiple hosts using a single interface IP requires referencing the inside source list, the outside interface name, and the 'overload' keyword.
The 'overload' keyword instructs the router to track unique source port numbers so multiple internal IP addresses can share one public IP address.
2
Evaluate the syntax structure of Cisco IOS NAT commands.
The correct global configuration command syntax is 'ip nat inside source list <acl-number> interface <interface-id> overload'.
This binds the matching ACL to the specified interface and enables port multiplexing.

Anahtar Kavram

Port Address Translation (PAT) Interface Overload Configuration
Soru 1563Soru

A network administrator is troubleshooting an OSPFv2 adjacency issue between two routers, R1 and R2, connected via their GigabitEthernet0/0/0 interfaces. The administrator notices that the OSPF neighbor state on R1 remains persistently stuck in the EXSTART/EXCHANGE state. Interface GigabitEthernet0/0/0 on R1 has an IP MTU of 1500 bytes, while GigabitEthernet0/0/0 on R2 has been configured with an IP MTU of 1450 bytes. If modifying the interface MTU on R2 is prohibited by organizational policy, which command configured on R1 will allow the OSPF neighbor adjacency to proceed successfully to the FULL state?

Cevabı ve açıklamayı göster

Cevap: Configure ip ospf mtu-ignore under interface GigabitEthernet0/0/0 on R1.

Cevap

Configure ip ospf mtu-ignore under interface GigabitEthernet0/0/0 on R1.
During the EXSTART state, OSPF routers exchange Database Descriptor (DBD) packets to agree on initial sequence numbers and master/slave roles. The DBD packet includes the interface MTU. If neighboring routers have mismatched MTU values, DBD packet processing fails and the neighbor relationship remains stuck in EXSTART/EXCHANGE. Configuring 'ip ospf mtu-ignore' in interface configuration mode forces the router to ignore MTU checks in received DBD packets, allowing the adjacency to transition to FULL.

Adım Adım Çözüm

1
Identify the cause of the EXSTART/EXCHANGE neighbor state stagnation.
During the EXSTART and EXCHANGE states, OSPF neighbors elect a Master/Slave relationship and exchange Database Descriptor (DBD) packets containing interface MTU values.
If the receiving interface detects an MTU larger than its own or mismatched MTU parameters, the DBD packet processing fails and the neighbor relationship halts at EXSTART/EXCHANGE.
2
Determine the appropriate configuration workaround when interface MTU modification is restricted.
Cisco IOS provides the 'ip ospf mtu-ignore' interface configuration command.
This command disables the MTU consistency check on incoming OSPF DBD packets for that specific interface, permitting adjacency completion.

Anahtar Kavram

OSPFv2 MTU Mismatch Behavior and ip ospf mtu-ignore
Tahmini Süre:2m 0s
Soru 1564Soru

An administrator must move a workstation connected to interface FastEthernet0/11 on a Cisco Catalyst switch into VLAN 40 (named MARKETING). VLAN 40 has not yet been created on the switch. Which command sequence correctly creates the VLAN with its name and configures the port as an access port in VLAN 40?

Cevabı ve açıklamayı göster

Cevap: vlan 40
name MARKETING
exit
interface FastEthernet0/11
switchport mode access
switchport access vlan 40

Cevap

The correct sequence creates VLAN 40, assigns the name MARKETING in VLAN configuration mode, configures interface FastEthernet0/11 in access mode, and assigns FastEthernet0/11 to VLAN 40.
Creating a VLAN requires entering VLAN configuration mode using 'vlan 40' and naming it with 'name MARKETING'. Configuring an access port requires navigating to the target interface, explicitly defining the switchport mode as access with 'switchport mode access', and assigning the access VLAN with 'switchport access vlan 40'.

Adım Adım Çözüm

1
Create and name the VLAN in global configuration mode
VLAN 40 is created with the name MARKETING
VLANs must be defined in the VLAN database via global/VLAN configuration mode before or during assignment.
2
Enter interface configuration mode for FastEthernet0/11
Prompt changes to Switch(config-if)#
Interface parameters can only be altered in interface configuration mode.
3
Set port mode to access and assign VLAN 40
Interface FastEthernet0/11 operates as an access port assigned to VLAN 40
'switchport mode access' explicitly defines the port role for end devices, and 'switchport access vlan 40' places untagged ingress frames into VLAN 40.

Anahtar Kavram

VLAN Creation and Access Port Assignment in Cisco IOS
Soru 1565Soru

A network administrator is troubleshooting DNS name resolution in an enterprise network. A client host issues a standard DNS query to an internal recursive DNS server. However, the DNS response payload exceeds 512 bytes because the zone lookup returns a large list of resource records. How does DNS handle transport layer communication when standard UDP responses exceed this size threshold?

Cevabı ve açıklamayı göster

Cevap: The DNS server responds over UDP with the Truncation (TC) flag bit set to 1, signaling the client to re-query the server using TCP port 53.

Cevap

The DNS server responds over UDP with the Truncation (TC) flag bit set to 1, signaling the client to re-query the server using TCP port 53.
Standard DNS operations utilize UDP port 53 for fast, lightweight name resolution queries. When a DNS response message exceeds the traditional 512-byte limit (without EDNS0 extended mechanisms), the DNS server returns a truncated UDP packet with the Truncation (TC) bit set in the DNS header. Receiving this flag prompts the DNS client host to retry the request using a TCP connection on port 53 to successfully receive the complete response.

Adım Adım Çözüm

1
Analyze transport protocols used by DNS
DNS uses UDP port 53 for normal queries/responses due to low overhead, but uses TCP port 53 for zone transfers and responses exceeding traditional size limits.
Traditional DNS over UDP limits message payloads to 512 bytes (unless EDNS0 extensions are negotiated).
2
Determine how DNS signals payload overflow
When a response message is too large for a single 512-byte UDP packet, the DNS server sets the TC (Truncated) bit in the DNS header.
Setting the TC bit informs the resolver client that only partial data was delivered and full data requires a TCP connection.
3
Identify client fallback behavior
Upon receiving the TC bit set in a UDP response, the DNS client opens a connection to TCP port 53 on the DNS server to re-issue the query.
TCP provides connection-oriented reliability and supports larger payload data transfers without truncation.

Anahtar Kavram

DNS Transport Layer Mechanics (UDP vs TCP Port 53 and Truncation)
Soru 1566Soru

Match each OSPFv2 network type configuration on the left with its corresponding DR/BDR election requirement and default Hello/Dead timer characteristics on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Broadcast (`ip ospf network broadcast`)
Point-to-Point (`ip ospf network point-to-point`)
Point-to-Multipoint (`ip ospf network point-to-multipoint`)
Non-Broadcast (`ip ospf network non-broadcast`)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Broadcast pairs with DR/BDR elected automatically with 10s/40s timers. Point-to-Point pairs with no DR/BDR election and 10s/40s timers. Point-to-Multipoint pairs with no DR/BDR election and 30s/120s timers. Non-Broadcast pairs with DR/BDR elected using manual neighbor statements and 30s/120s timers.
Each OSPF network type has distinct rules regarding whether DR/BDR elections occur, whether multicast is used for neighbor discovery, and which default timers apply. LAN-oriented types (Broadcast and Point-to-Point) use 10-second Hello and 40-second Dead timers, while WAN-oriented types (Point-to-Multipoint and Non-Broadcast) use 30-second Hello and 120-second Dead timers. Multiaccess types (Broadcast and Non-Broadcast) perform DR/BDR elections, whereas point-to-point styles (Point-to-Point and Point-to-Multipoint) bypass DR/BDR elections entirely.

Adım Adım Çözüm

1
Analyze election requirements for multiaccess vs. point-to-point network types.
Broadcast and Non-Broadcast networks require DR/BDR elections because multiple routers share the medium. Point-to-Point and Point-to-Multipoint networks do not elect DR/BDRs.
DR/BDR selection reduces adjacency formation overhead from n(n1)/2n(n-1)/2 to 2n32n-3 on multiaccess segments.
2
Analyze neighbor discovery mechanisms (multicast vs. unicast).
Broadcast, Point-to-Point, and Point-to-Multipoint use multicast (224.0.0.5224.0.0.5). Non-Broadcast multiaccess requires manual unicast neighbor definition via the `neighbor` command.
NBMA media do not natively support broadcast or multicast traffic.
3
Evaluate default OSPFv2 Hello and Dead timers for each network type.
LAN types (Broadcast, Point-to-Point) default to 10s Hello / 40s Dead. WAN types (Point-to-Multipoint, Non-Broadcast) default to 30s Hello / 120s Dead.
Slower WAN links require higher timer tolerances to avoid unnecessary neighbor flap state transitions.

Anahtar Kavram

OSPFv2 Network Types, DR/BDR Election Requirements, and Default Timers
Tahmini Süre:2m 0s
Soru 1567Soru

Match each IPv4 routing table entry from a Cisco IOS 'show ip route' display to its correct protocol source classification and administrative properties.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

D 192.168.10.0/24 [90/2170112] via 10.1.1.2
O 172.16.1.0/24 [110/20] via 10.1.1.6
S 10.2.2.0/24 [1/0] via 10.1.1.2
C 10.1.1.0/30 is directly connected, GigabitEthernet0/0

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Each routing table entry matches its corresponding protocol code, administrative distance, and metric: 'D' maps to Internal EIGRP (AD 90), 'O' maps to OSPF (AD 110), 'S' maps to Static (AD 1), and 'C' maps to Directly Connected (AD 0).
Routing table entries display their learning source code followed by the prefix, bracketed administrative distance and metric values [AD/Metric], next-hop IP, and outgoing interface. Code D identifies EIGRP (default AD 90), code O identifies OSPF (default AD 110), code S identifies Static routes (default AD 1), and code C identifies Connected networks (AD 0).

Adım Adım Çözüm

1
Identify the protocol code prefix at the start of each routing entry.
D corresponds to EIGRP, O corresponds to OSPF, S corresponds to Static, and C corresponds to Connected.
Cisco IOS routing tables use single-letter prefix codes to identify how each route was learned.
2
Parse the bracketed values [Administrative Distance / Metric] for dynamically learned and static routes.
The first number inside brackets represents Administrative Distance (AD), and the second number represents the protocol metric.
AD measures route source trustworthiness while metric determines path preference within the protocol.
3
Match each entry to its exact functional description based on AD and metric values.
Entry with code D matches EIGRP (AD 90), entry with code O matches OSPF (AD 110), entry with code S matches Static (AD 1), and entry with code C matches Directly Connected (AD 0).
Each routing protocol has standard default administrative distance values recognized by Cisco IOS.

Anahtar Kavram

Routing Table Components and Source Codes
Soru 1568Soru

A network administrator needs to deploy Link Aggregation (LAG) on a Cisco AireOS Wireless LAN Controller (WLC) connected to an upstream Cisco Catalyst switch. Place the operational steps required to enable and establish the LAG connection in the correct sequential order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequential order to deploy LAG on an AireOS WLC is: 1) Enable LAG in WLC settings, 2) Save configuration and reboot the WLC, 3) Configure connected upstream switch ports into an EtherChannel using mode 'on', and 4) Verify operational status of the aggregated bundle.
To successfully deploy LAG on an AireOS Wireless LAN Controller, the feature must first be enabled in WLC global controller settings. Because enabling LAG reorganizes physical ports into a single logical interface, the configuration must be saved and the controller rebooted to take effect. Following the reboot, the upstream Catalyst switch physical ports must be configured into a single EtherChannel using mode 'on' (static aggregation, since AireOS does not negotiate via LACP or PAgP). Finally, the network engineer verifies that the Port-Channel is operational and passing traffic across mapped WLAN VLANs.

Adım Adım Çözüm

1
Enable LAG feature on the WLC
The controller prepares the internal distribution system interfaces for multi-port bundling.
Global LAG setting must be changed prior to restarting the appliance.
2
Save configuration and restart WLC
The WLC reboots and binds all physical distribution ports into a single logical LAG interface.
AireOS hardware architecture requires a system reboot to apply LAG implementation across distribution ports.
3
Configure switch ports with static EtherChannel
The upstream Catalyst switch binds its corresponding interfaces into a single port-channel using mode 'on'.
AireOS WLCs do not support dynamic EtherChannel negotiation protocols like LACP or PAgP.
4
Verify port-channel operation and data flow
Operational status is confirmed and WLAN VLAN traffic flows across the unified bundle.
Ensures that all bundled interfaces forward traffic properly without port mismatches or STP blocking.

Anahtar Kavram

AireOS WLC Link Aggregation deployment workflow and static switch EtherChannel requirements.
Soru 1569Soru

An enterprise router learns the primary route to network 172.16.50.0/24172.16.50.0/24 via internal BGP (iBGP), which carries a default Administrative Distance of 200200. An administrator wants to configure a floating static backup route pointing to next-hop IP 10.1.1.210.1.1.2. Complete the Cisco IOS command below by entering the minimum administrative distance value required to ensure this route functions strictly as a backup path.

Aşağıdaki boşlukları doldurun

Router(config)# ip route 172.16.50.0 255.255.255.0 10.1.1.2
Cevabı ve açıklamayı göster

Cevap

201
A floating static route must be configured with an Administrative Distance (AD) strictly greater than that of the primary route. Since iBGP has a default AD of 200, the static route requires an AD of at least 201 to remain inactive until the primary iBGP route fails.

Adım Adım Çözüm

1
Identify the Administrative Distance (AD) of the primary routing protocol.
The primary path is learned via iBGP, which has a default Administrative Distance of 200200.
Cisco IOS prefers routing information sources with lower Administrative Distance values.
2
Determine the required AD relationship for a floating static backup route.
The static route's administrative distance must be higher than the primary route's AD (>200> 200).
If the static route has an AD lower than or equal to 200200, Cisco IOS will install the static route into the routing table instead of holding it in reserve as a backup.
3
Calculate the minimum integer AD value for the command.
The smallest integer greater than 200200 is 201201.
Specifying 201201 at the end of the `ip route` command sets the static route's AD to 201, keeping it inactive until the iBGP route is removed.

Anahtar Kavram

Floating Static Routes and Administrative Distance
Tahmini Süre:1m 0s
Soru 1570Soru

A network administrator configures dynamic NAT on a Cisco IOS router using an IP pool named `INTERNET_POOL` (198.51.100.1198.51.100.1 to 198.51.100.2198.51.100.2) for hosts in the 10.20.30.0/2310.20.30.0/23 internal network. During testing, users observe that after two internal hosts establish outbound connections, no other internal hosts can access external sites. The output of `show ip nat statistics` shows total translations equal to 22 (00 static, 22 dynamic, 00 extended).

Configuration snippet:
text
ip nat pool INTERNET_POOL 198.51.100.1 198.51.100.2 netmask 255.255.255.252
access-list 15 permit 10.20.30.0 0.0.1.255
ip nat inside source list 15 pool INTERNET_POOL

Which TWO statements correctly identify the root cause of this issue and the solution required to allow all internal hosts to translate concurrently? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The current `ip nat inside source` command configures dynamic 1-to-1 NAT, which exhausts the pool after assigning both available public IP addresses.; Appending the `overload` keyword to the `ip nat inside source` command enables Port Address Translation (PAT), allowing multiple internal hosts to share pool IP addresses using unique Layer 4 port numbers.

Cevap

The current `ip nat inside source` command configures dynamic 1-to-1 NAT, which exhausts the pool after assigning both available public IP addresses. Appending the `overload` keyword to the `ip nat inside source` command enables Port Address Translation (PAT), allowing multiple internal hosts to share pool IP addresses using unique Layer 4 port numbers.
Dynamic NAT without the `overload` keyword maps inside local IP addresses to inside global IP addresses on a strict 1-to-1 basis. Because `INTERNET_POOL` contains only two public IP addresses (198.51.100.1198.51.100.1 and 198.51.100.2198.51.100.2), only two hosts can translate simultaneously. To permit all hosts on the subnet to share these addresses concurrently, the `overload` keyword must be added to the end of the `ip nat inside source list 15 pool INTERNET_POOL` command to enable Port Address Translation (PAT).

Adım Adım Çözüm

1
Analyze the existing router configuration and command output.
The command `ip nat inside source list 15 pool INTERNET_POOL` binds ACL 15 to the pool `INTERNET_POOL` without the `overload` keyword at the end.
Omitting `overload` specifies standard dynamic NAT (1-to-1 mapping) rather than PAT (many-to-1 or many-to-few mapping).
2
Evaluate the capacity of the NAT pool.
The pool `INTERNET_POOL` contains 2 IP addresses (198.51.100.1198.51.100.1 and 198.51.100.2198.51.100.2).
In 1-to-1 dynamic NAT, once 2 hosts initiate traffic, both pool addresses are checked out. The 3rd host cannot translate and its packets are dropped.
3
Determine the required CLI modification to support concurrent access for the entire 10.20.30.0/2310.20.30.0/23 network.
Modify the command to `ip nat inside source list 15 pool INTERNET_POOL overload`.
The `overload` keyword instructs Cisco IOS to track Layer 4 source port numbers (creating extended translations shown in `show ip nat translations`), allowing thousands of concurrent sessions across the public pool IP addresses.

Anahtar Kavram

Port Address Translation (PAT) Overload Keyword Requirement
Soru 1571Soru

A network engineer is configuring Rapid PVST+ on a Cisco Catalyst switch. The engineer needs to set the switch priority for VLAN 45 so that the total Bridge Identifier (BID) priority field transmitted in BPDUs equals 20525. Which global configuration command must the engineer execute on the switch?

Cevabı ve açıklamayı göster

Cevap: spanning-tree vlan 45 priority 20480

Cevap

spanning-tree vlan 45 priority 20480
In Rapid PVST+, the Bridge Identifier (BID) priority field consists of a 4-bit bridge priority and a 12-bit System ID Extension (VLAN ID). Because 4 bits are allocated to the configurable priority, values must be multiples of 212=40962^{12} = 4096. To achieve a total priority of 20525 for VLAN 45, the base priority must be configured as 2052545=2048020525 - 45 = 20480.

Adım Adım Çözüm

1
Identify the System ID Extension value for the target VLAN.
The System ID Extension equals the VLAN ID, which is 45.
Rapid PVST+ encodes the VLAN number in the 12-bit System ID Extension portion of the Bridge Identifier (BID).
2
Calculate the required base bridge priority value.
2052545=2048020525 - 45 = 20480
Total Bridge Priority = Base Priority + System ID Extension.
3
Verify that the base priority is a valid increment of 4096.
20480/4096=520480 / 4096 = 5 (exact integer multiplier)
Cisco Catalyst switches require bridge priority to be configured in increments of 4096.

Anahtar Kavram

Rapid PVST+ System ID Extension and Priority Calculation
Soru 1572Soru

Complete the Cisco IOS command required to configure a floating static backup route.

Aşağıdaki boşlukları doldurun

An edge router receives its primary path to destination subnet 172.20.10.0/24172.20.10.0/24 via internal EIGRP, which carries a default Administrative Distance of 9090. A network engineer needs to configure a floating static backup route toward the same destination using next-hop IP 10.1.1.210.1.1.2 with an Administrative Distance of 100100.

What value should be entered to complete the Cisco IOS command below?

`ip route 172.20.10.0 255.255.255.0 10.1.1.2`
Cevabı ve açıklamayı göster

Cevap

The missing parameter to complete the command is 100.
Appending the integer 100 to the end of the `ip route` syntax sets the static route's Administrative Distance to 100. Because 100 is higher than internal EIGRP's default AD of 90, the router will keep the static route inactive (floating) in the routing table until the primary EIGRP path becomes unavailable.

Adım Adım Çözüm

1
Analyze the Cisco IOS static route command structure.
The command syntax is `ip route <prefix> <mask> <next-hop> [distance]`.
The optional trailing integer at the end of the command specifies the Administrative Distance (AD) for the route.
2
Determine the required Administrative Distance value for the floating static route.
The problem specifies an Administrative Distance of 100 for the backup route.
Setting the AD to 100 ensures the static route remains higher (less preferred) than the primary internal EIGRP route (AD 90), causing it to float outside the routing table until the primary path fails.

Anahtar Kavram

Floating Static Route Configuration and Administrative Distance
Tahmini Süre:1m 0s
Soru 1573Soru

An enterprise workstation is configured with a primary DNS server address of 10.10.20.5. The user attempts to access an external website by entering `service.partnercloud.com` into a web browser. The internal DNS server (10.10.20.5) is operational and has recursion enabled, but it currently has no cached record or authoritative zone file for `partnercloud.com`. Which statement accurately describes the name resolution role and process performed by the internal DNS server to resolve this request?

Cevabı ve açıklamayı göster

Cevap: The internal DNS server acts as a recursive resolver for the client, sending iterative queries to external root, TLD, and authoritative name servers on the client's behalf, and then returns the final IP address to the workstation.

Cevap

The internal DNS server acts as a recursive resolver for the client, issuing iterative queries to root, TLD, and authoritative DNS servers on behalf of the workstation, and returning the resolved IP address to the client.
In enterprise network operations, host computers act as stub resolvers that issue recursive queries to their designated internal DNS server. When the local DNS server lacks an authoritative zone or cached entry for a domain, it assumes the role of a recursive resolver: it queries external DNS servers (root hints, TLD servers, and domain authoritative servers) iteratively on behalf of the client and returns the resolved IP address back to the workstation.

Adım Adım Çözüm

1
Identify the type of query originated by the client workstation.
The workstation sends a recursive DNS query to its configured local DNS server (10.10.20.5).
Standard client operating systems perform recursive lookups, delegating the entire resolution workflow to their designated local resolver.
2
Determine the local DNS server's cache and authoritative state.
The server has no cached entry and is not authoritative for `partnercloud.com`.
Because the answer is not cached or stored locally, the server must query external hierarchy nodes.
3
Trace the server-side lookup process.
The local server issues iterative queries starting at the DNS root servers, progressing to the TLD servers (.com), and finally querying the authoritative server for `partnercloud.com`.
Recursive resolvers execute iterative queries on behalf of the requesting host to obtain the final answer.
4
Complete the resolution back to the host.
The local DNS server caches the answer and sends an A record response containing the IP address to the workstation.
The client receives a single final answer directly from its local DNS server.

Anahtar Kavram

DNS Recursive vs. Iterative Query Roles in Enterprise Networks
Tahmini Süre:1m 30s
Soru 1574Soru

A network administrator executes the `show ip ospf interface GigabitEthernet0/1` command on router R1 connected to an enterprise Ethernet segment, yielding the following operational output:

text
GigabitEthernet0/1 is up, line protocol is up
Internet Address 10.10.10.1/24, Area 0
Process ID 1, Router ID 10.10.10.1, Network Type BROADCAST, Cost: 1
State DR, Priority 1
Designated Router (ID) 10.10.10.1, Interface address 10.10.10.1
Backup Designated Router (ID) 10.10.10.2, Interface address 10.10.10.2
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5

If the administrator modifies the OSPF interface network type on all routers attached to this segment by executing the `ip ospf network point-to-point` command, which two operational changes will take effect on this interface? (Choose two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: OSPF will completely bypass the election of a Designated Router (DR) and Backup Designated Router (BDR) on the interface.; Neighbors will continue to dynamically form adjacencies using 224.0.0.5 while maintaining the default 10-second Hello and 40-second Dead timers.

Cevap

Reconfiguring the Ethernet interface to an OSPF point-to-point network type eliminates DR/BDR elections entirely while retaining dynamic multicast neighbor discovery (224.0.0.5) with 10-second Hello and 40-second Dead timers.
Changing an OSPF interface from broadcast to point-to-point disables DR and BDR elections because the link is assumed to connect exactly two routers. Additionally, point-to-point network types retain dynamic neighbor discovery via multicast (224.0.0.5) using standard 10-second Hello and 40-second Dead timers.

Adım Adım Çözüm

1
Analyze the default OSPF operational traits for the BROADCAST network type.
The BROADCAST network type elects a DR and BDR and uses default timers of 10s Hello and 40s Dead with multicast address 224.0.0.5.
Ethernet interfaces default to BROADCAST network type in Cisco IOS.
2
Evaluate the impact of changing the interface network type to POINT_TO_POINT.
POINT_TO_POINT network types do not elect DR or BDR roles because only two nodes reside on the segment.
DR/BDR elections exist solely to reduce adjacency counts on multiaccess media.
3
Determine timer and neighbor discovery behaviors for POINT_TO_POINT mode.
POINT_TO_POINT retains dynamic neighbor discovery using multicast (224.0.0.5) and keeps the 10s Hello / 40s Dead timer values.
Timers only change to 30s/120s on non-broadcast or point-to-multipoint OSPF network types.

Anahtar Kavram

OSPFv2 Network Types (Broadcast vs. Point-to-Point) and DR/BDR Election Rules
Soru 1575Soru

An administrator examines the following output from a Cisco router after configuring Network Address Translation to map private addresses to a defined address pool:

text
Router# show ip nat statistics
Total active translations: 1 (0 static, 1 dynamic; 0 extended)
Outside interfaces:
GigabitEthernet0/1
Inside interfaces:
GigabitEthernet0/0
Hits: 14 Misses: 0
Dynamic mappings:
-- Inside Source
[id 1] access-list 10 pool NAT_POOL refcount 1

Users on the internal subnet report that only one device at a time can successfully communicate with external networks. Which configuration change will resolve this issue and allow multiple concurrent internal hosts to share the translation pool?

Cevabı ve açıklamayı göster

Cevap: Append the overload keyword to the ip nat inside source list 10 pool NAT_POOL command.

Cevap

Append the overload keyword to the ip nat inside source list command to enable Port Address Translation.
The show ip nat statistics output reveals '0 extended translations', meaning the router is performing 1-to-1 dynamic NAT rather than Port Address Translation (PAT). Adding the overload keyword to the 'ip nat inside source list 10 pool NAT_POOL' statement enables port multiplexing, which permits multiple inside hosts to share pool addresses simultaneously.

Adım Adım Çözüm

1
Analyze the output of show ip nat statistics.
The statistics show 0 extended translations and 1 dynamic translation, indicating standard dynamic NAT (1-to-1 mapping) rather than PAT.
Without extended translations, each internal host consumes an entire IP address from the pool, preventing other hosts from translating once pool addresses are checked out.
2
Identify the missing keyword in the NAT configuration.
The current dynamic mapping uses 'access-list 10 pool NAT_POOL' without 'overload'.
The 'overload' keyword instructs Cisco IOS to track transport layer port numbers, enabling multiple hosts to share single public IP addresses.
3
Select the correct command modification.
Reconfigure using 'ip nat inside source list 10 pool NAT_POOL overload'.
This enables PAT on the pool and allows concurrent outbound access for all hosts matching ACL 10.

Anahtar Kavram

Port Address Translation (PAT) / Inside Source NAT Overload Configuration
Soru 1576Soru

An network engineer changes an Ethernet interface configuration to use the OSPFv2 Point-to-Point network type (`ip ospf network point-to-point`). Which two statements correctly describe the default operational characteristics of this OSPFv2 network type? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: OSPF suppresses Designated Router (DR) and Backup Designated Router (BDR) elections on the interface.; OSPF neighbors are dynamically discovered using multicast Hello packets sent to 224.0.0.5.

Cevap

The OSPFv2 Point-to-Point network type automatically suppresses DR and BDR elections on the interface, and dynamically discovers adjacent neighbors using OSPF multicast messages sent to the AllSPFRouters address (224.0.0.5).
The OSPF Point-to-Point network type is designed specifically for two-router links. As a result, OSPF disables DR and BDR elections entirely, and neighbors dynamically discover each other via multicast sent to the AllSPFRouters address (224.0.0.5).

Adım Adım Çözüm

1
Analyze DR/BDR requirement for Point-to-Point network type
DR and BDR elections are unnecessary because only two endpoints exist on a point-to-point link.
Suppressing DR/BDR election reduces protocol overhead and simplifies adjacency establishment.
2
Determine neighbor discovery mechanism and timers
Neighbors are discovered automatically using 224.0.0.5 multicast with standard 10-second Hello and 40-second Dead timers.
Multicast capabilities are supported natively on Point-to-Point logical and physical interfaces.

Anahtar Kavram

OSPFv2 Point-to-Point Network Type Behavior
Tahmini Süre:1m 0s
Soru 1577Soru

Four Cisco routers (Alpha, Beta, Gamma, and Delta) are connected to the same Ethernet broadcast domain and simultaneously boot and establish OSPFv2 adjacencies. The routers are configured with the following OSPF interface priorities and Router IDs:

- Router Alpha: Priority = 2, Router ID = 1.1.1.1
- Router Beta: Priority = 2, Router ID = 2.2.2.2
- Router Gamma: Priority = 1, Router ID = 10.10.10.10
- Router Delta: Priority = 0, Router ID = 192.168.1.1

Arrange the routers in order of their resulting OSPF roles on the shared segment, starting from the Designated Router (DR) at the top, followed by the Backup Designated Router (BDR), the eligible DROTHER router, and ending with the router completely excluded from election eligibility.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of routers from DR to election-ineligible is: Router Beta (DR), Router Alpha (BDR), Router Gamma (DROTHER), and Router Delta (Ineligible).
In OSPFv2 multiaccess networks, DR and BDR election precedence is determined first by highest interface priority. Router Alpha and Router Beta tie with the highest priority (2), so their Router IDs break the tie: Router Beta (2.2.2.2) becomes DR and Router Alpha (1.1.1.1) becomes BDR. Router Gamma has a lower priority (1) and becomes an eligible DROTHER. Router Delta has a priority of 0, which makes it ineligible to participate in DR/BDR selection regardless of its high Router ID.

Adım Adım Çözüm

1
Evaluate interface priority values for all routers.
Routers Alpha and Beta have priority 2, Router Gamma has priority 1, and Router Delta has priority 0.
OSPFv2 uses interface priority as the primary criterion for DR/BDR election.
2
Identify election eligibility.
Router Delta (priority 0) is marked ineligible for DR/BDR roles and placed at the bottom of election hierarchy.
An interface priority of 0 explicitly prevents a router from becoming a DR or BDR.
3
Determine DR and BDR roles among highest priority routers using Router ID as a tie-breaker.
Router Beta (2.2.2.2>1.1.1.12.2.2.2 > 1.1.1.1) is elected DR, and Router Alpha becomes BDR.
When priority values are equal, the router with the highest Router ID wins the DR election, and the next highest becomes BDR.
4
Place remaining eligible routers into DROTHER status.
Router Gamma (priority 1) assumes the DROTHER role.
Eligible routers with non-zero priority that do not win DR or BDR election remain DROTHERs.

Anahtar Kavram

OSPFv2 DR/BDR election precedence prioritizes non-zero interface priority first (highest wins; 0 is ineligible), followed by highest Router ID as a tie-breaker.
Soru 1578Soru

An engineer inspects the following OSPFv2 neighbor table on router R1, which is connected to a shared Layer 2 Ethernet segment:

text
R1# show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface
2.2.2.2 0 FULL/DROTHER 00:00:34 192.168.1.2 GigabitEthernet0/0
3.3.3.3 2 FULL/BDR 00:00:38 192.168.1.3 GigabitEthernet0/0
4.4.4.4 255 FULL/DR 00:00:31 192.168.1.4 GigabitEthernet0/0

Router R1's GigabitEthernet0/0 interface is configured with an OSPF priority of 10 and IP address 192.168.1.1. If the current Designated Router (R4) unexpectedly reboots, which router will be selected as the new Backup Designated Router (BDR) after OSPF reconverges?

Cevabı ve açıklamayı göster

Cevap: R1

Cevap

Router R1 will become the new Backup Designated Router (BDR).
When the Designated Router (R4) reboots, OSPF rules mandate that the existing Backup Designated Router (R3) is immediately promoted to Designated Router (DR). A new election is then conducted to fill the vacant BDR position. Router R2 has an OSPF interface priority of 0, which completely excludes it from DR/BDR eligibility. Consequently, R1—configured with a priority of 10—is the highest-priority eligible candidate and is elected as the new BDR. Furthermore, when R4 completes its reboot, it will not preempt R3 or R1 because OSPF DR/BDR elections are non-preemptive.

Adım Adım Çözüm

1
Determine the immediate role transition following DR failure.
Router R4 (the current DR) fails. In accordance with OSPF non-preemptive election mechanics, the active BDR (R3 with Router ID 3.3.3.3) is automatically promoted to DR.
OSPF ensures network stability on multi-access segments by promoting the current BDR to DR immediately when the DR goes offline.
2
Identify candidate routers eligible for the newly opened BDR role.
Active candidate routers remaining on the segment are R1 (Priority 10, RID 1.1.1.1) and R2 (Priority 0, RID 2.2.2.2).
R4 is offline rebooting, and R3 has already transitioned to DR.
3
Evaluate candidate eligibility and OSPF priority values.
R2 has an OSPF priority of 0, making it entirely ineligible for DR/BDR roles regardless of its Router ID. R1 has a valid OSPF priority of 10.
An OSPF interface priority of 0 prevents a router from ever participating in DR or BDR elections.
4
Conclude the BDR election result.
R1 is elected as the new BDR.
R1 is the sole eligible candidate remaining on the multi-access segment with an OSPF priority greater than 0.

Anahtar Kavram

OSPF DR/BDR election precedence, priority 0 ineligibility, and non-preemptive role promotion mechanics.
Tahmini Süre:2m 0s
Soru 1579Soru

Refer to the following partial IPv4 routing table excerpt from a Cisco router:

text
Gateway of last resort is 10.0.0.1 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 10.0.0.1
O 10.50.16.0/20 [110/20] via 10.1.1.2, GigabitEthernet0/0
O 10.50.16.32/27 [110/30] via 10.3.3.2, GigabitEthernet0/2
D 10.50.16.32/28 [90/307200] via 10.2.2.2, GigabitEthernet0/1

The router receives two separate IPv4 unicast packets with destination IP addresses 10.50.16.45 and 10.50.16.20. Which two statements accurately describe how the router forwards these packets?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The packet destined for 10.50.16.45 is egressed out GigabitEthernet0/1 because the 10.50.16.32/28 entry represents the longest prefix match.; The packet destined for 10.50.16.20 is egressed out GigabitEthernet0/0 because 10.50.16.0/20 is the most specific matching prefix for that destination address.

Cevap

The router forwards the packet destined for 10.50.16.45 out interface GigabitEthernet0/1 using the 10.50.16.32/28 route, and forwards the packet destined for 10.50.16.20 out interface GigabitEthernet0/0 using the 10.50.16.0/20 route.
When a router receives a packet, it compares the packet's destination IP address against all routing table entries and selects the route with the most specific subnet mask (the longest prefix length). For the destination host 10.50.16.45, the route 10.50.16.32/28 has a 28-bit mask, which is more specific than /27, /20, or /0, so it is egressed out interface GigabitEthernet0/1. For the destination host 10.50.16.20, it falls within the subnet range 10.50.16.0 to 10.50.31.255 associated with the 10.50.16.0/20 prefix. Since host address .20 does not reach the starting boundary .32 of the /27 or /28 subnets, 10.50.16.0/20 is its most specific matching route, and the packet is egressed out interface GigabitEthernet0/0.

Adım Adım Çözüm

1
Analyze matching prefix entries for destination IP address 10.50.16.45.
Destination 10.50.16.45 matches 0.0.0.0/0 (/0), 10.50.16.0/20 (/20), 10.50.16.32/27 (/27: 10.50.16.32 - 10.50.16.63), and 10.50.16.32/28 (/28: 10.50.16.32 - 10.50.16.47).
Routers compare the destination host IP against all entries in the IP routing table to find candidate matching routes.
2
Apply Longest Prefix Match (LPM) logic for destination IP address 10.50.16.45.
The prefix 10.50.16.32/28 has the longest prefix length (/28 > /27 > /20 > /0). Traffic is forwarded via 10.2.2.2 out interface GigabitEthernet0/1.
The router always selects the matching route with the highest number of network bits (most specific mask), regardless of administrative distance or metric.
3
Analyze matching prefix entries for destination IP address 10.50.16.20.
Destination 10.50.16.20 matches 0.0.0.0/0 (/0) and 10.50.16.0/20 (/20: 10.50.16.0 - 10.50.31.255). It does NOT match 10.50.16.32/27 or 10.50.16.32/28 because host value 20 is lower than subnet base address 32.
Subnet ranges must be accurately calculated to determine valid match candidacy.
4
Apply Longest Prefix Match logic for destination IP address 10.50.16.20.
The most specific matching prefix is 10.50.16.0/20 (/20 > /0). Traffic is forwarded via 10.1.1.2 out interface GigabitEthernet0/0.
Between /20 and /0, /20 is the longer prefix match.

Anahtar Kavram

Longest Prefix Match (LPM) Decision Logic
Soru 1580Soru

A network administrator is reviewing the layer 2 topology operational characteristics on a Cisco Catalyst switch block running Rapid PVST+. Which two statements accurately describe the port roles and operational state transitions of Rapid PVST+?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: An Alternate port receives BPDUs from neighboring switches and provides an alternate backup path toward the Root Bridge.; Rapid PVST+ streamlines protocol port states to Discarding, Learning, and Forwarding, eliminating the separate Disabled, Blocking, and Listening states used in 802.1D.

Cevap

The two correct statements are that an Alternate port receives BPDUs from neighboring switches to act as a backup path to the Root Bridge, and that Rapid PVST+ simplifies port states into Discarding, Learning, and Forwarding.
Rapid PVST+ simplifies 802.1D port states into Discarding, Learning, and Forwarding while introducing the Alternate port role as a pre-calculated backup path to the Root Bridge that receives BPDUs from alternate neighboring switches.

Adım Adım Çözüm

1
Analyze Rapid PVST+ port roles
Identify that an Alternate port offers a direct backup path to the Root Bridge via another switch, while a Backup port offers a redundant path on a shared segment from the same switch.
Rapid PVST+ explicitly defines Alternate and Backup port roles to facilitate immediate proposal/agreement convergence.
2
Analyze Rapid PVST+ port states
Confirm that Rapid PVST+ merges Disabled, Blocking, and Listening into the Discarding state.
RSTP (802.1w) optimized port state efficiency by maintaining only three operational states: Discarding, Learning, and Forwarding.
3
Evaluate invalid bridge priority and PortFast claims
Reject arbitrary bridge priorities (must use 4096 increments) and trunk PortFast configurations.
System ID extension enforces 4096 step increments, and PortFast on trunks removes loop protection.

Anahtar Kavram

Rapid PVST+ Port Roles and Port State Operations
Tahmini Süre:1m 30s
ÖncekiSayfa 79 / 100Sonraki
Tüm alıştırma soruları — Cisco CCNA | Examkin