Tüm alıştırma soruları

1987 soru

Soru 1581Soru

An enterprise workstation needs to access a web server using its Fully Qualified Domain Name (FQDN). Arrange the steps of the DNS name resolution process in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence of DNS name resolution begins with the client checking its local resolver cache and hosts file, followed by sending a recursive query to the configured DNS server on UDP port 53. The DNS server performs iterative lookups against authoritative root, TLD, and domain servers, and finally returns the resolved IP address back to the requesting workstation.
The name resolution process follows a strict hierarchy. First, local system resources (cache and hosts file) are inspected. If unresolved, the client generates a recursive DNS query to its configured DNS server via UDP port 53. The DNS server resolves the query via external hierarchy (Root, TLD, Authoritative servers) as needed, and lastly sends the reply back to the workstation while saving the mapping in its local cache.

Adım Adım Çözüm

1
Check local client sources
Host determines whether the mapping is already known in local memory or local configuration files.
Checking local host cache avoids unnecessary network overhead.
2
Initiate DNS request
Host transmits a UDP packet to port 53 of the primary DNS server.
The client delegates full resolution responsibility to its recursive resolver.
3
Perform recursive server lookup
The internal DNS server communicates with authoritative DNS infrastructure.
The recursive server traverses the DNS hierarchy to find the authoritative answer.
4
Deliver and cache response
The workstation receives the IP address and completes establishing connection to the destination.
Caching speeds up future resolution queries within the TTL period.

Anahtar Kavram

DNS Lookup Process and Name Resolution Roles
Soru 1582Soru

A network technician is configuring interface GigabitEthernet0/3 on a Cisco Catalyst switch to connect an end-user workstation to VLAN 25. Which TWO commands must be executed within interface configuration mode to properly set up this access port? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: switchport mode access; switchport access vlan 25

Cevap

To configure an interface as a static access port in VLAN 25, the engineer must enter interface configuration mode and execute both 'switchport mode access' and 'switchport access vlan 25'.
Configuring a host-facing access port requires setting the operational mode to static access using 'switchport mode access' and assigning the desired broadcast domain membership using 'switchport access vlan 25'. Both commands must be executed under interface configuration mode.

Adım Adım Çözüm

1
Set the switchport mode to access
Interface is hardcoded to operate as an access port rather than negotiating a trunk connection.
Security and operational best practices require explicitly setting access mode on host-facing ports.
2
Associate the access port with VLAN 25
Traffic on the interface is assigned to broadcast domain VLAN 25.
The command 'switchport access vlan 25' binds the port membership to VLAN 25.

Anahtar Kavram

Cisco IOS Switch Access Port Configuration Commands
Soru 1583Soru

A network administrator configures the command `ip ospf priority 0` on a router's Ethernet interface connected to a broadcast multiaccess network. Which behavior will this router exhibit during OSPF DR and BDR elections on this segment?

Cevabı ve açıklamayı göster

Cevap: The router is completely excluded from participating in DR and BDR elections on the interface.

Cevap

The router is completely excluded from participating in DR and BDR elections on the interface.
In OSPFv2 broadcast and non-broadcast multiaccess networks, setting the interface priority to 0 prevents the router from participating in the DR/BDR election. The router will always remain a DROther on that segment.

Adım Adım Çözüm

1
Analyze the interface configuration command
The command `ip ospf priority 0` sets the OSPF router priority for the specific interface to zero.
In OSPFv2, interface priority determines candidate eligibility for DR/BDR election on multiaccess networks.
2
Evaluate the effect of a priority value of 0
A priority value of 0 explicitly disqualifies the interface from becoming either the Designated Router (DR) or Backup Designated Router (BDR).
Routers with priority 0 remain in the DROther state regardless of their Router ID, loopback addresses, or physical IP addresses.

Anahtar Kavram

OSPF Interface Priority 0 Election Disqualification
Tahmini Süre:45s
Soru 1584Soru

A network administrator is assigning an IP address to a newly installed interface on a database server. The server is configured with the IP address 172.28.140.197172.28.140.197 and a subnet mask of 255.255.252.0255.255.252.0. Which IPv4 address represents the subnet broadcast address for this server's subnetwork?

Cevabı ve açıklamayı göster

Cevap: 172.28.143.255172.28.143.255

Cevap

172.28.143.255172.28.143.255
For the IP address 172.28.140.197172.28.140.197 with subnet mask 255.255.252.0255.255.252.0 (/22), the third octet operates in increments of 44 (256252=4256 - 252 = 4). Since 140140 is a multiple of 44, the subnetwork begins at 172.28.140.0172.28.140.0 and extends up to 172.28.143.255172.28.143.255. Therefore, the address 172.28.143.255172.28.143.255 is the broadcast address for this subnetwork.

Adım Adım Çözüm

1
Convert the dotted-decimal subnet mask to CIDR notation and identify the interesting octet.
The subnet mask 255.255.252.0255.255.252.0 corresponds to a /22/22 prefix (8+8+6+0=228 + 8 + 6 + 0 = 22 bits). The interesting octet is the third octet.
Determining the prefix length isolates which octet controls the subnetwork boundaries.
2
Calculate the subnetwork block size for the third octet.
Block size =256252=4= 256 - 252 = 4.
The block size specifies the interval at which subnetwork addresses increment in the third octet.
3
Find the network address containing the host IP address 172.28.140.197172.28.140.197.
Dividing 140140 by 44 gives exactly 3535 with no remainder. Thus, the network ID is 172.28.140.0172.28.140.0.
The network address is the starting boundary of the subnet block.
4
Determine the broadcast address by adding (block size - 1) to the third octet and setting all host bits in the fourth octet to 1s (255255).
Third octet upper bound =140+41=143= 140 + 4 - 1 = 143. Broadcast address =172.28.143.255= 172.28.143.255.
The broadcast address is the last IP address in the subnetwork range.

Anahtar Kavram

IPv4 Subnet Mask Evaluation and Broadcast Address Calculation
Soru 1585Soru

A network administrator is configuring Port Address Translation (PAT) on a Cisco router so that internal hosts on the 10.1.1.0/2410.1.1.0/24 subnet can access the Internet using the public IP address assigned to the WAN interface GigabitEthernet0/0/1GigabitEthernet0/0/1. Access List 11 has already been configured to permit traffic from 10.1.1.0/2410.1.1.0/24. Which two actions are required to complete this PAT configuration? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure the command `ip nat inside source list 1 interface GigabitEthernet0/0/1 overload` in global configuration mode.; Apply the command `ip nat inside` under the interface connected to the internal LAN.

Cevap

To complete PAT using an exit interface IP address, the administrator must designate the LAN interface with `ip nat inside` and configure the global translation statement `ip nat inside source list 1 interface GigabitEthernet0/0/1 overload`.
Port Address Translation (PAT) using an exit interface requires defining the internal interface with `ip nat inside` and executing `ip nat inside source list <acl> interface <interface> overload` globally. The `overload` keyword ensures multiple internal hosts can share the single public IP address by assigning unique source ports to each session.

Adım Adım Çözüm

1
Identify the internal boundary interface and assign the NAT role.
Apply `ip nat inside` on the LAN interface connected to internal hosts.
Cisco IOS requires identifying inside and outside interfaces so it knows which packets trigger NAT processing.
2
Configure the global PAT source translation statement with interface overload.
Enter `ip nat inside source list 1 interface GigabitEthernet0/0/1 overload` in global configuration mode.
The `overload` keyword enables Port Address Translation (PAT), allowing multiple internal private IP addresses to share a single public IP address using distinct TCP/UDP port numbers.

Anahtar Kavram

Inside Source Port Address Translation (PAT) Interface Overload Configuration
Tahmini Süre:1m 0s
Soru 1586Soru

An enterprise workstation attempts to connect to an external service by domain name (web.example.com) for the first time. Arrange the following DNS lookup and name resolution steps in the correct sequential order from the client's initial request to receiving the final IP address.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological sequence is: local cache/hosts file check, recursive query to configured enterprise DNS resolver over UDP port 53, iterative query to Root Name Server, iterative query to TLD Name Server, and finally iterative query to Authoritative Name Server for the host IP mapping.
DNS resolution begins locally on the host by evaluating local memory cache and hosts file entries. If unmapped, the host issues a recursive request over UDP port 53 to its configured enterprise DNS resolver. The resolver then carries out iterative queries starting at the Root level, proceeding to the TLD server level, and finally reaching the Authoritative server that returns the definitive resource record mapping.

Adım Adım Çözüm

1
Evaluate local host cache
Workstation verifies if web.example.com exists in local resolver cache or local hosts file.
Checking local host cache avoids unnecessary network traffic and speeds up resolution.
2
Issue client recursive query
Workstation sends a DNS query to the designated local DNS server asking it to complete the full lookup.
Clients use recursive queries so the local DNS server takes responsibility for traversing the DNS hierarchy.
3
Query Root server
Enterprise DNS server contacts a Root Name Server.
Root servers provide referrals to the Top-Level Domain (TLD) servers responsible for extensions such as .com.
4
Query TLD server
Enterprise DNS server queries the TLD server for .com.
TLD servers store information pointing to the specific domain's authoritative name servers.
5
Query Authoritative server
Enterprise DNS server queries the Authoritative server for example.com and gets the host IP address (A record).
Authoritative servers contain the actual DNS resource records for hosts in their managed domain zone.

Anahtar Kavram

DNS Name Resolution Mechanics and Server Roles
Soru 1587Soru

A network engineer is administering an active OSPFv2 routing process on router R1. The router currently has the following interface IP addresses and operational statuses:

- Loopback 0: 192.168.10.1/24192.168.10.1/24 (Status: Up, Line Protocol: Down)
- Loopback 1: 172.16.1.1/24172.16.1.1/24 (Status: Up, Line Protocol: Up)
- GigabitEthernet0/0: 10.0.0.1/3010.0.0.1/30 (Status: Up, Line Protocol: Up)
- GigabitEthernet0/1: 10.0.0.5/3010.0.0.5/30 (Status: Up, Line Protocol: Up)

While OSPFv2 process 1 is actively running with active neighbor adjacencies, the engineer executes the command `router-id 1.1.1.1` under the OSPF router configuration mode. Which TWO statements accurately describe the resulting OSPF Router ID behavior and operational state on R1? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The currently active OSPF Router ID will remain unchanged until the OSPF process is explicitly reset or the router is rebooted.; Once the OSPF process is cleared, the statically configured value 1.1.1.1 will take precedence over all loopback and physical interface IP addresses.

Cevap

The active OSPF Router ID will remain unchanged until the process is reset or rebooted, and once cleared, the manually configured router-id command takes precedence over all interface IP addresses.
In OSPFv2, explicit manual configuration using the `router-id` command takes top priority over all loopback and physical interfaces once applied. However, OSPF Router ID evaluation is strictly non-preemptive on an active process. Changing the Router ID while neighbors are active will store the configured value in running-config without changing the operational Router ID until the OSPF process is cleared via `clear ip ospf process` or the device reboots.

Adım Adım Çözüm

1
Evaluate OSPF Router ID election precedence order
Order of precedence is: 1) Explicit `router-id` command, 2) Highest IP address among active (Up/Up) loopback interfaces, 3) Highest IP address among active (Up/Up) physical interfaces.
OSPF criteria mandate explicit manual configuration over dynamic interface evaluation.
2
Analyze non-preemptive behavior of an active OSPF process
When a new Router ID is configured on an already active OSPF process with existing adjacencies, OSPF does not dynamically tear down adjacencies to change the ID immediately.
Preventing unnecessary network instability and SPF re-computations requires manual invocation of `clear ip ospf process` to force re-election.
3
Verify interface operational readiness for default election
Loopback 0 (192.168.10.1192.168.10.1) has Line Protocol Down, making it ineligible. Loopback 1 (172.16.1.1172.16.1.1) would be selected if no manual ID existed.
Only interfaces in an operational Up/Up state participate in automatic Router ID selection.

Anahtar Kavram

OSPFv2 Router ID Selection Logic & Non-Preemptive Execution
Soru 1588Soru

A network administrator needs to configure a floating static backup route on a Cisco router to reach the destination subnet 192.168.50.0/24192.168.50.0/24 via the next-hop IP address 10.0.12.210.0.12.2. The primary path to this network is currently dynamically learned via OSPF. Which command correctly configures the floating static route so that it only enters the routing table when the OSPF route fails?

Cevabı ve açıklamayı göster

Cevap: ip route 192.168.50.0 255.255.255.0 10.0.12.2 120

Cevap

The command 'ip route 192.168.50.0 255.255.255.0 10.0.12.2 120' correctly configures the floating static route by setting an administrative distance of 120, which is greater than OSPF's default administrative distance of 110.
The correct command specifies an administrative distance of 120 at the end of the static route definition. Because OSPF has a default administrative distance of 110, Cisco IOS will prefer the OSPF route and keep the static route out of the active routing table (floating) until the OSPF route is removed.

Adım Adım Çözüm

1
Identify the Administrative Distance (AD) of the primary routing protocol.
OSPF has a standard default Administrative Distance of 110 on Cisco IOS devices.
Floating static routes rely on AD comparisons to determine route preference.
2
Determine the required Administrative Distance for the floating static route.
The backup static route must have an AD strictly greater than 110 (e.g., 120).
Cisco routers prefer routes with lower AD values; setting a higher AD keeps the route out of the routing table until the primary route fails.
3
Verify Cisco IOS static route syntax.
The syntax 'ip route <prefix> <mask> <next-hop-ip> <distance>' is satisfied by appending 120 at the end of the command.
Appending an integer after the next-hop address specifies a custom Administrative Distance.

Anahtar Kavram

Floating Static Route Administrative Distance Calibration
Tahmini Süre:1m 0s
Soru 1589Soru

A Cisco Catalyst switch running Rapid PVST+ has a primary uplink on interface GigabitEthernet0/1 functioning as the Root Port for VLAN 10. Interface GigabitEthernet0/2 connects to a secondary distribution switch and functions as an Alternate Port for VLAN 10 in the Discarding state. If interface GigabitEthernet0/1 suddenly fails, how does Rapid PVST+ handle the state and role transition for interface GigabitEthernet0/2?

Cevabı ve açıklamayı göster

Cevap: Interface GigabitEthernet0/2 immediately transitions to the Root Port role and enters the Forwarding state.

Cevap

Interface GigabitEthernet0/2 immediately transitions to the Root Port role and enters the Forwarding state.
Rapid PVST+ (based on IEEE 802.1w) incorporates built-in fast convergence features. An Alternate port is a backup path to the Root Bridge that receives BPDUs from a neighboring switch. When the current Root Port fails, the Alternate port can immediately assume the Root Port role and transition directly into the Forwarding state without waiting for legacy 802.1D forward delay timers.

Adım Adım Çözüm

1
Identify the initial Rapid PVST+ port roles and states for VLAN 10.
GigabitEthernet0/1 is the active Root Port (Forwarding state), and GigabitEthernet0/2 is an Alternate Port (Discarding state).
The Alternate port receives superior BPDUs from another switch, serving as a standby path to the Root Bridge.
2
Analyze the impact of the primary uplink failure on GigabitEthernet0/1.
The switch loses its active path to the Root Bridge via GigabitEthernet0/1.
When the active Root Port fails, the switch must select the next best path to the Root Bridge.
3
Apply Rapid PVST+ (802.1w) fast convergence rules for Alternate ports.
GigabitEthernet0/2 immediately becomes the new Root Port and moves directly to the Forwarding state without passing through Listening or Learning states.
Rapid PVST+ integrates UplinkFast functionality into the protocol design, allowing pre-identified Alternate ports to transition to Forwarding instantly upon Root Port failure.

Anahtar Kavram

Rapid PVST+ Alternate Port Fast Transition Mechanics
Tahmini Süre:1m 0s
Soru 1590Soru

A Cisco router displays the following partial routing table output:

text
Gateway of last resort is not set

10.0.0.0/8 is variably subnetted, 4 subnets, 3 masks
O 10.150.0.0/16 [110/20] via 192.168.12.2, 00:14:22, GigabitEthernet0/0
D 10.150.32.0/19 [90/2578560] via 192.168.23.2, 00:05:10, GigabitEthernet0/1
S 10.150.32.0/24 [1/0] via 192.168.34.2, 01:12:00, GigabitEthernet0/2
O IA 10.150.32.128/26 [110/30] via 192.168.45.2, 00:02:45, GigabitEthernet0/3

The router receives a packet destined for 10.150.32.13510.150.32.135. Which interface will the router select to forward this packet?

Cevabı ve açıklamayı göster

Cevap: GigabitEthernet0/3

Cevap

The router forwards the packet out of interface GigabitEthernet0/3 because the route 10.150.32.128/26 provides the longest matching prefix for destination IP 10.150.32.135.
When a router makes a forwarding decision, it evaluates all matching routing table entries and selects the route with the longest prefix mask (the most specific match). The destination IP address 10.150.32.135 falls into the subnet 10.150.32.128/26 (range 10.150.32.128 through 10.150.32.191). Because /26 is the longest subnet mask among all valid candidate routes, the router forwards the packet out of GigabitEthernet0/3.

Adım Adım Çözüm

1
Identify candidate routes matching the destination IP address 10.150.32.135
Candidate routes include: 10.150.0.0/16, 10.150.32.0/19, 10.150.32.0/24, and 10.150.32.128/26 (range 10.150.32.128–10.150.32.191). All four candidate routes match the destination IP address.
Before comparing routing metrics or administrative distances, a router first evaluates all installed routes to determine which prefix ranges encompass the destination IP.
2
Apply the Longest Prefix Match (LPM) rule
The prefix 10.150.32.128/26 has a 26-bit mask length, which is longer than /24, /19, and /16.
Routers always prefer the route with the most specific (longest prefix mask) match regardless of administrative distance or metric.
3
Determine the egress interface associated with the longest prefix match route
The entry 10.150.32.128/26 specifies next-hop 192.168.45.2 via interface GigabitEthernet0/3.
The forwarding decision is dictated by the interface bound to the winning longest prefix route.

Anahtar Kavram

Longest Prefix Match (LPM) Logic
Soru 1591Soru

An infrastructure team is provisioning access layer switch interfaces for newly deployed Cisco Lightweight Access Points (LAPs) operating strictly in Local mode. All wireless client traffic will be encapsulated within CAPWAP tunnels back to the central Wireless LAN Controller (WLC). Which switch port configuration must be applied to the switch interfaces connecting directly to these Access Points?

Cevabı ve açıklamayı göster

Cevap: Configure each interface as a standard Layer 2 access port assigned to the AP management VLAN.

Cevap

The switch interfaces must be configured as standard Layer 2 access ports assigned to the AP management VLAN.
Local mode APs send all wireless user traffic through CAPWAP tunnels to the Wireless LAN Controller. Because the AP itself only requires network access to obtain an IP address and reach the WLC IP, the switch interface connecting to the AP only needs to be configured as a standard access port in the AP management VLAN.

Adım Adım Çözüm

1
Analyze the operational mode of the Access Points
The APs operate in Local mode.
Local mode APs do not switch wireless client traffic locally onto the access switch; instead, all data and control traffic are encapsulated into CAPWAP tunnels sent directly to the central WLC.
2
Determine the VLAN and switchport requirements for Local mode APs
The AP requires only an IP address in the AP management VLAN to establish its CAPWAP tunnel.
Because client VLAN tags are encapsulated within the CAPWAP data payload, the physical switch port connected to the AP does not need to trunk multiple client VLANs.
3
Select the appropriate switchport mode configuration
Set the switch port mode to access and assign it to the AP management VLAN.
An access port provides untagged Layer 2 connectivity for the AP to receive an IP address via DHCP and communicate with the WLC.

Anahtar Kavram

Local mode AP switchport requirements vs FlexConnect mode requirements
Soru 1592Soru

A network administrator is implementing Port Address Translation (PAT) using an IP address pool on a Cisco IOS router. Internal devices belong to the 172.16.0.0/12172.16.0.0/12 private network range. Standard IP access list 1515 has already been created to identify inside traffic with the command `access-list 15 permit 172.16.0.0 0.15.255.255`. The public IP addresses assigned by the ISP for translation are 203.0.113.10203.0.113.10 through 203.0.113.14203.0.113.14 with subnet mask 255.255.255.248255.255.255.248. Which TWO configuration commands must be executed on the router to correctly instantiate the pool and map the inside ACL traffic to allow multiple internal hosts to share these public IP addresses simultaneously?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: ip nat pool OUTSIDE_POOL 203.0.113.10 203.0.113.14 netmask 255.255.255.248; ip nat inside source list 15 pool OUTSIDE_POOL overload

Cevap

The correct commands are 'ip nat pool OUTSIDE_POOL 203.0.113.10 203.0.113.14 netmask 255.255.255.248' and 'ip nat inside source list 15 pool OUTSIDE_POOL overload'.
Configuring multi-host Port Address Translation (PAT) across an IP pool requires two key elements: first, defining the pool of available public IP addresses with its range and netmask ('ip nat pool OUTSIDE_POOL 203.0.113.10 203.0.113.14 netmask 255.255.255.248'), and second, referencing that pool in the inside source translation directive with the 'overload' keyword ('ip nat inside source list 15 pool OUTSIDE_POOL overload').

Adım Adım Çözüm

1
Define the public NAT IP address pool
Configured 'ip nat pool OUTSIDE_POOL 203.0.113.10 203.0.113.14 netmask 255.255.255.248'
Establishes the range of publicly routable IPv4 addresses provided by the ISP available for translation.
2
Map the access list traffic to the pool using Port Address Translation
Executed 'ip nat inside source list 15 pool OUTSIDE_POOL overload'
Binds the traffic identified in ACL 15 to the public pool and uses the 'overload' keyword to track unique layer 4 port numbers, enabling many private IP addresses to share the pool addresses.

Anahtar Kavram

Inside Source Dynamic PAT Configuration with Address Pool
Soru 1593Soru

An enterprise network administrator is deploying First Hop Redundancy Protocols across two Cisco Catalyst routers, R1 (primary, physical IP 192.168.10.2/24192.168.10.2/24) and R2 (secondary, physical IP 192.168.10.3/24192.168.10.3/24), servicing subnet 192.168.10.0/24192.168.10.0/24. The administrator is evaluating feature parities and operational behaviors between HSRPv2 and VRRPv3 for dual-stack IPv4/IPv6 resilience.

Which two statements accurately describe the operational differences and configuration mechanics between HSRPv2 and VRRPv3 in this environment? (Choose two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: VRRPv3 permits the virtual IP address to be identical to the physical interface IP address of the Master router (setting its priority automatically to 255), whereas HSRPv2 requires the virtual IP to be a unique IP address distinct from any physical interface IP assigned to routers in the standby group.; VRRPv3 preemption is enabled by default when configuring a VRRP group, whereas HSRPv2 requires explicit configuration of the preemption command for a higher-priority router to claim the Active role upon boot or recovery.

Cevap

The correct statements are: (1) VRRPv3 permits using the physical interface IP address as the virtual IP (which automatically forces priority to 255), while HSRPv2 mandates a unique virtual IP; and (2) VRRPv3 has preemption enabled by default, whereas HSRPv2 requires explicit configuration of the preemption command.
VRRPv3 supports IP address ownership where the virtual IP matches the physical interface IP of the master router, automatically setting priority to 255. Additionally, VRRP preemption is enabled by default. In contrast, HSRP requires a unique virtual IP address not assigned to any physical interface, and requires the explicit 'standby preemption' command to allow a higher-priority router to claim the Active role.

Adım Adım Çözüm

1
Analyze Virtual IP Address Assignment Rules for HSRP and VRRP
VRRP allows the IP Address Owner to share its physical interface IP with the virtual IP address, giving it an unalterable priority of 255. HSRP requires that the virtual IP address be unassigned to any physical interface in the local group to prevent ARP and routing loop issues.
Understanding protocol specification RFCs (RFC 5798 for VRRPv3 vs Cisco proprietary HSRPv2 specs) is essential for proper IP addressing design.
2
Analyze Default Preemption Behavior
VRRP router processes preempt higher-priority backup nodes by default unless explicitly disabled using 'no vrrp preempt'. HSRP router processes do not preempt active nodes by default, requiring 'standby <group> preempt' to be configured on primary nodes.
Failing to configure preemption on an HSRP primary router will cause sub-optimal traffic flow after a router reboots.
3
Verify Multicast Addresses and Virtual MAC Allocations
HSRPv1 uses 224.0.0.2224.0.0.2 (`0000.0C07.ACxx`), HSRPv2 uses 224.0.0.102224.0.0.102 (`0000.0C9F.Fxxx`), and VRRPv2/v3 uses 224.0.0.18224.0.0.18 (`0000.5E00.01xx`).
Distinguishing between multicast control planes and MAC structures avoids misidentifying frame header captures.

Anahtar Kavram

First Hop Redundancy Protocol (FHSRP) Operational Mechanics and Feature Comparison
Soru 1594Soru

Router R1 and Router R2 are directly connected via their GigabitEthernet0/0 interfaces across an Ethernet link. A network engineer attempts to establish an OSPFv2 neighbor relationship between them in Area 0.

The interfaces are configured with the following parameters:
- Router R1 (Gi0/0): IP address 172.16.10.1/24 (Subnet Mask: 255.255.255.0), OSPF Area 0, Hello timer 10s, Dead timer 40s
- Router R2 (Gi0/0): IP address 172.16.10.2/25 (Subnet Mask: 255.255.255.128), OSPF Area 0, Hello timer 10s, Dead timer 40s

Executing `show ip ospf neighbor` on both routers reveals no neighbor entries. Which statement correctly explains why R1 and R2 fail to establish an OSPFv2 neighbor adjacency?

Cevabı ve açıklamayı göster

Cevap: The subnet masks configured on the interconnecting interfaces do not match.

Cevap

The correct explanation is that the subnet masks configured on the interconnecting interfaces do not match.
For OSPFv2 neighbor adjacencies to form over broadcast multiaccess or point-to-point networks, specific fields within the OSPF Hello packet must match across neighboring interfaces. One critical requirement is that the subnet mask of the primary IP address configured on the interface must be identical on both ends. Since R1 is configured with a /24 subnet mask and R2 is configured with a /25 subnet mask, the routers drop received Hello packets and fail to establish an OSPF neighbor relationship.

Adım Adım Çözüm

1
Analyze OSPF Hello packet fields required for neighbor adjacency formation on broadcast/multiaccess interfaces.
OSPF Hello packets require matching parameters: Area ID, Subnet Mask, Hello and Dead timers, Authentication password/type, and Stub area flag.
If any of these mandatory fields mismatch, the routers drop received Hello packets and will not transition to the INIT or 2-WAY neighbor state.
2
Compare the interface configurations between R1 and R2.
R1 uses a /24 subnet mask (255.255.255.0) while R2 uses a /25 subnet mask (255.255.255.128).
Because the subnet masks differ, OSPF rejects the Hello packet exchange.
3
Verify secondary configuration items such as process IDs.
Process IDs are local to the router instance and do not affect neighbor adjacency formation.
Process IDs do not appear in Hello packets as adjacency requirements.

Anahtar Kavram

OSPFv2 Hello Packet Parameter Matching Requirements
Soru 1595Soru

Refer to the following partial IPv4 routing table output from a Cisco router:

text
Codes: C - connected, S - static, D - EIGRP, O - OSPF

Gateway of last resort is 192.168.40.1 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 192.168.40.1
S 172.20.0.0/16 [1/0] via 192.168.30.1
D 172.20.100.0/24 [90/2170112] via 192.168.20.1
O 172.20.100.64/26 [110/20] via 192.168.10.1

The router receives a packet destined for IP address 172.20.100.85. Which next-hop IP address will the router choose to forward this packet?

Cevabı ve açıklamayı göster

Cevap: 192.168.10.1

Cevap

192.168.10.1
When a router makes a packet forwarding decision, it evaluates matching routes using the Longest Prefix Match (LPM) rule. The destination address 172.20.100.85 matches the route 172.20.100.64/26 because the range of valid hosts for 172.20.100.64/26 spans from 172.20.100.65 to 172.20.100.126. Because /26 is more specific than /24, /16, or /0, the router chooses the next-hop address 192.168.10.1 regardless of Administrative Distance.

Adım Adım Çözüm

1
Identify all matching routes in the routing table for the destination IP address 172.20.100.85.
The IP address 172.20.100.85 matches 0.0.0.0/0, 172.20.0.0/16, 172.20.100.0/24, and 172.20.100.64/26 (usable range 172.20.100.65 - 172.20.100.126).
Before comparing routing metrics or administrative distance, the router identifies all routes whose network addresses encompass the destination host IP.
2
Determine the prefix length for each matching route.
Prefix lengths are /0 (Default), /16 (Static), /24 (EIGRP), and /26 (OSPF).
Cisco forwarding logic strictly adheres to the Longest Prefix Match rule above all other criteria.
3
Select the route with the most specific (longest) subnet mask.
172.20.100.64/26 has the longest prefix (/26). The next-hop IP associated with this route is 192.168.10.1.
Administrative Distance is only evaluated when comparing identical prefix lengths learned from different routing protocols, not when comparing routes of different prefix lengths.

Anahtar Kavram

Router Forwarding Decision Logic (Longest Prefix Match precedence over Administrative Distance)
Soru 1596Soru

A network administrator is evaluating the IPv4 static routing configuration on router R1. Router R1 needs to reach the remote subnet 10.80.16.0/2010.80.16.0/20. The primary routing path to this destination is currently provided by OSPF, which has an administrative distance of 110. The administrator must configure two static routes:

1. A static route using next-hop IPv4 address 172.16.30.2172.16.30.2 that immediately takes precedence over the OSPF route.
2. A floating static route using next-hop IPv4 address 172.16.40.2172.16.40.2 that serves as a backup only if the OSPF route becomes unavailable.

Which TWO static route commands must be configured on router R1 to achieve this objective? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: ip route 10.80.16.0 255.255.240.0 172.16.30.2; ip route 10.80.16.0 255.255.240.0 172.16.40.2 120

Cevap

The correct commands are 'ip route 10.80.16.0 255.255.240.0 172.16.30.2' for the primary route and 'ip route 10.80.16.0 255.255.240.0 172.16.40.2 120' for the floating static backup route.
To create a primary static route that overrides OSPF (AD 110), the standard command 'ip route 10.80.16.0 255.255.240.0 172.16.30.2' uses the default administrative distance of 1, which is lower than 110 and thus preferred. To configure a floating static backup route for the same subnet via next-hop 172.16.40.2, the command 'ip route 10.80.16.0 255.255.240.0 172.16.40.2 120' assigns an administrative distance of 120, which is higher than OSPF's 110, ensuring it only enters the routing table if the OSPF route drops.

Adım Adım Çözüm

1
Convert prefix length /20 to dotted-decimal subnet mask format.
A /20 prefix corresponds to a subnet mask of 255.255.240.0.
Cisco IOS static route syntax requires the destination network mask in dotted-decimal format rather than CIDR notation.
2
Determine the required Administrative Distance (AD) for the primary static route.
Use the default static route AD of 1 (or any value lower than OSPF's AD of 110).
Lower administrative distance values are preferred in the Cisco routing table forwarding decision logic.
3
Determine the required Administrative Distance (AD) for the backup floating static route.
Configure an AD greater than 110 (such as 120) for the next-hop 172.16.40.2.
A floating static route must have a higher AD than the primary dynamic routing protocol (OSPF = 110) so it is installed in the routing table only when the primary path goes down.

Anahtar Kavram

Cisco IOS IPv4 static route syntax and floating static route administrative distance selection.
Soru 1597Soru

In an enterprise network environment, host computers rely on various network services to locate resources efficiently. Which fundamental role is performed by a Domain Name System (DNS) server during host-to-host communications?

Cevabı ve açıklamayı göster

Cevap: Mapping human-readable hostnames to their corresponding network IP addresses

Cevap

The correct role performed by a DNS server is mapping human-readable hostnames to their corresponding network IP addresses.
The option stating 'Mapping human-readable hostnames to their corresponding network IP addresses' is correct because DNS serves as the protocol responsible for resolving computer hostnames and domain names into IP addresses so that network devices can route traffic to the intended destination.

Adım Adım Çözüm

1
Identify the primary requirement
Network protocols require numerical IP addresses for routing packets across networks, but users use hostnames.
Host computers need a mechanism to convert friendly hostnames into layer 3 IP addresses.
2
Evaluate the role of DNS
DNS operates as a distributed database providing name-to-address resolution.
When a host queries a DNS server with a name, the server responds with the matching A or AAAA record containing the destination IP address.

Anahtar Kavram

DNS Name Resolution
Soru 1598Soru

A network administrator is hardening switch port security on a Cisco Catalyst switch. Interface GigabitEthernet0/1 currently has default settings and is connected to a host workstation in the Accounting department. The administrator must explicitly configure the port to operate statically as an access interface in VLAN 30 (named ACCOUNTING) and ensure Dynamic Trunking Protocol (DTP) frames are no longer sent on this link. Which set of commands must be executed in interface configuration mode to fulfill these requirements?

Cevabı ve açıklamayı göster

Cevap: switchport mode access
switchport access vlan 30

Cevap

Configuring 'switchport mode access' statically defines the interface as an access port and disables DTP negotiation, while 'switchport access vlan 30' assigns the port to VLAN 30.
The command 'switchport mode access' statically disables trunking negotiation (DTP) and forces the port into operational access mode. Combined with 'switchport access vlan 30', it correctly places untagged traffic from the workstation into VLAN 30.

Adım Adım Çözüm

1
Set the administrative operational mode of GigabitEthernet0/1 to static access.
The interface is forced into access mode, stopping DTP frame generation and preventing unwanted trunk negotiation.
By default, Cisco switch ports operate in dynamic auto mode, which actively responds to DTP negotiation.
2
Assign the interface to the target VLAN using 'switchport access vlan 30'.
Untagged frames entering GigabitEthernet0/1 are assigned to VLAN 30.
Access ports must be explicitly assigned to their designated VLAN broadcast domain.

Anahtar Kavram

Static Access Port Assignment and DTP Disabling
Tahmini Süre:1m 15s
Soru 1599Soru

A network engineer is configuring Port Address Translation (PAT) on a Cisco IOS router using a dynamic NAT pool named PUBLICPOOLPUBLIC_POOL (203.0.113.10203.0.113.10 to 203.0.113.12203.0.113.12). Internal endpoints reside on the 172.16.10.0/24172.16.10.0/24 network, which is matched by standard Access Control List 15. Which two configuration actions must be performed on the router to correctly enable PAT for internal hosts and designate interface directionality? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Apply the command ip nat inside source list 15 pool PUBLIC_POOL overload in global configuration mode.; Configure the command ip nat inside under the LAN-facing interface (e.g., GigabitEthernet0/0).

Cevap

To configure PAT using an IP pool, the global command must include the 'overload' keyword ('ip nat inside source list 15 pool PUBLIC_POOL overload') to permit port multiplexing, and the internal interface must be designated with 'ip nat inside'.
Enabling PAT with a defined pool requires the 'overload' keyword at the end of the 'ip nat inside source list <acl> pool <name> overload' command structure. Additionally, Cisco IOS routers require explicit interface domain definitions, where 'ip nat inside' is applied to LAN interfaces connected to internal devices.

Adım Adım Çözüm

1
Identify the requirement for PAT overload with an IP pool.
Dynamic NAT pool mapping requires appending 'overload' to enable port address translation multiplexing.
Without 'overload', Cisco IOS performs dynamic 1-to-1 NAT, limiting active translations to the number of IPs in the pool.
2
Identify required interface NAT role assignments.
The LAN interface facing internal hosts must be marked with 'ip nat inside'.
Cisco IOS requires explicit NAT domain boundaries ('inside' and 'outside') to trigger translation on packet traversal.
3
Validate RFC 1918 IP address matching in ACL statements.
The subnet 172.16.10.0/24172.16.10.0/24 is private, whereas 172.32.10.0/24172.32.10.0/24 is public address space.
Matching public addresses in internal NAT ACLs fails to translate actual private endpoint traffic.

Anahtar Kavram

Inside Source Port Address Translation (PAT) Pool Configuration and Interface Assignment
Soru 1600Soru

Match each OSPFv2 network type or election property on the left to its corresponding default operation or behavior on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Broadcast Multiaccess
Point-to-Point
Interface Priority 0
Equal Priority Tie-Breaker

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Broadcast Multiaccess matches electing a DR/BDR with 10s/40s timers; Point-to-Point matches forming adjacencies without DR/BDR election with 10s/40s timers; Interface Priority 0 matches excluding the router from DR elections; Equal Priority Tie-Breaker matches using the highest Router ID.
Each OSPF network type operates with specific election rules and default timers under standard Cisco OSPFv2 behavior: Broadcast multiaccess requires a DR/BDR with 10-second Hello timers; Point-to-Point bypasses DR selection with 10-second Hello timers; priority 0 excludes a device from election; and highest Router ID breaks priority ties.

Adım Adım Çözüm

1
Determine which OSPFv2 network types perform DR/BDR election.
Broadcast multiaccess networks elect DR/BDR, whereas Point-to-Point networks bypass DR/BDR election.
DR/BDR selection is only required on multiaccess media to minimize full mesh neighbor adjacencies.
2
Evaluate the impact of configuring an interface priority of 0.
The router interface is disqualified from DR and BDR elections.
An interface priority value of 0 explicitly instructs OSPF to keep the interface in DROTHER status regardless of Router ID.
3
Identify the deterministic tie-breaker for DR elections when priorities match.
The router with the highest OSPF Router ID is elected.
OSPF DR election precedence evaluates interface priority first, followed by the highest Router ID.

Anahtar Kavram

OSPFv2 Network Types and DR/BDR Selection Rules
ÖncekiSayfa 80 / 100Sonraki
Tüm alıştırma soruları — Cisco CCNA | Examkin