Tüm alıştırma soruları

1987 soru

Soru 161Soru

A network engineer is configuring router R1 to reach destination network 172.16.10.0/24172.16.10.0/24. The primary path must use next-hop IP address 192.168.12.2192.168.12.2 with standard default static priority. A backup path must use next-hop IP address 10.0.0.210.0.0.2 and function as a floating static route that only enters the routing table if the primary path is unavailable. Which TWO commands must be configured on R1 to meet these requirements? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: ip route 172.16.10.0 255.255.255.0 192.168.12.2; ip route 172.16.10.0 255.255.255.0 10.0.0.2 10

Cevap

The correct commands are 'ip route 172.16.10.0 255.255.255.0 192.168.12.2' for the primary path and 'ip route 172.16.10.0 255.255.255.0 10.0.0.2 10' for the backup floating path.
The command specifying next-hop 192.168.12.2 without an explicit administrative distance correctly creates the primary static route with the default Administrative Distance of 1. The command specifying next-hop 10.0.0.2 with an explicit administrative distance of 10 correctly creates a floating static route, because its higher administrative distance keeps it out of the routing table until the primary route disappears.

Adım Adım Çözüm

1
Identify the proper Cisco IOS IPv4 static route command structure.
The correct command format is 'ip route <destination-prefix> <subnet-mask> <next-hop-ip> [administrative-distance]'.
Cisco IOS requires a subnet mask (not a wildcard mask) and optional administrative distance parameter.
2
Configure the primary static route.
'ip route 172.16.10.0 255.255.255.0 192.168.12.2' is generated.
When no administrative distance is specified at the end of the command, Cisco IOS assigns a default Administrative Distance of 1.
3
Configure the backup floating static route.
'ip route 172.16.10.0 255.255.255.0 10.0.0.2 10' is generated.
A floating static route must have an Administrative Distance higher than the primary route (in this case, 10 > 1) so it remains inactive in the RIB until the primary route fails.

Anahtar Kavram

IPv4 Static Route Syntax and Administrative Distance for Floating Static Routes
Soru 162Soru

An enterprise network engineer is designing a wireless deployment using a Centralized Wireless LAN Controller (WLC) architecture based on the Split-MAC protocol structure. To ensure low latency for time-sensitive radio frequency operations, certain MAC layer operations must occur on the physical Access Point (AP). Which function is executed directly by the Lightweight Access Point (LAP) hardware rather than being handled by the Centralized WLC?

Cevabı ve açıklamayı göster

Cevap: Transmission of beacon frames and immediate 802.11 layer acknowledgments

Cevap

Transmission of beacon frames and immediate 802.11 layer acknowledgments
Under the Cisco Split-MAC architecture (CAPWAP model), functions are divided based on timing requirements. Real-time 802.11 MAC operations—such as sending beacon frames, responding to probe requests, handling frame acknowledgments (ACKs), and executing MAC-layer encryption/decryption—must occur directly on the Lightweight Access Point (LAP) hardware to satisfy strict 802.11 timing constraints.

Adım Adım Çözüm

1
Analyze the Split-MAC architecture division of responsibilities between LAPs and WLCs.
Identify that functions requiring microsecond-level timing must be processed locally at the AP radio level.
CAPWAP tunnel latency to the WLC would introduce unacceptable delays for real-time RF MAC operations.
2
Categorize real-time MAC functions versus non-real-time control/management functions.
Beacon frame generation, probe responses, frame queuing/prioritization, and 802.11 layer ACK responses belong to real-time MAC functions performed by the LAP.
These tasks must occur immediately in response to RF signals.
3
Evaluate the management and control functions offloaded to the WLC.
802.1X/EAP authentication, association requests, RRM channel selection, and centralized 802.11 to 802.3 frame translation are handled by the controller.
Centralizing these non-real-time operations allows uniform policy enforcement and global RF optimization across the enterprise network.

Anahtar Kavram

Split-MAC Architecture Division of Responsibilities
Soru 163Soru

Two Cisco Catalyst switches, SwitchA and SwitchB, are connected via their GigabitEthernet0/1 interfaces. SwitchA is configured with the commands `switchport mode dynamic desirable` and `switchport trunk native vlan 20`. SwitchB is configured with `switchport mode dynamic auto` and default interface settings (`switchport trunk native vlan 1`). Based on this operational configuration, which statement correctly describes the trunking state and frame handling across this link?

Cevabı ve açıklamayı göster

Cevap: The link successfully negotiates an 802.1Q trunk, but untagged frames sent from SwitchA's native VLAN 20 will be processed in VLAN 1 on SwitchB, causing a cross-VLAN traffic leak and triggering CDP error logs.

Cevap

The link successfully negotiates an 802.1Q trunk, but untagged frames sent from SwitchA's native VLAN 20 will be processed in VLAN 1 on SwitchB, causing a cross-VLAN traffic leak and triggering CDP error logs.
The combination of dynamic desirable on one side and dynamic auto on the other successfully forms an 802.1Q trunk via Dynamic Trunking Protocol. Because native VLAN traffic is sent untagged by default under 802.1Q, frames originating in VLAN 20 on the first switch are received untagged on the second switch and mapped to its native VLAN 1. This creates a cross-VLAN leak and causes Cisco Discovery Protocol to log warning messages regarding the native VLAN mismatch.

Adım Adım Çözüm

1
Evaluate DTP negotiation between SwitchA and SwitchB.
SwitchA is set to dynamic desirable (actively seeking to form a trunk) and SwitchB is set to dynamic auto (willing to form a trunk if requested). This combination successfully negotiates an operational trunk link.
DTP operational mode matrix dictates that desirable + auto results in a trunking state.
2
Analyze 802.1Q native VLAN tagging mechanics across the trunk.
SwitchA sends VLAN 20 traffic without an 802.1Q tag. When SwitchB receives untagged traffic on a trunk port, it forwards that traffic to its own configured native VLAN (VLAN 1).
By default, 802.1Q trunks transmit native VLAN frames without inserting a 4-byte VLAN tag header.
3
Determine control plane diagnostic behavior.
CDP exchanges native VLAN information via TLVs and generates console log warnings about the native VLAN mismatch, but traffic forwarding continues and the interface remains up/up.
CDP provides notification of misconfigurations but does not automatically shut down interfaces or block native VLAN traffic unless explicitly combined with STP loop guard/BPDU guard mechanisms.

Anahtar Kavram

802.1Q Native VLAN Tagging Mechanics and DTP Negotiation
Tahmini Süre:2m 0s
Soru 164Soru

An enterprise network engineer is implementing a centralized wireless network architecture utilizing Cisco Lightweight Access Points (LAPs) and a centralized Wireless LAN Controller (WLC) operating in Split-MAC mode. Which operational responsibility is handled directly by the Wireless LAN Controller rather than being processed locally by the Lightweight Access Point?

Cevabı ve açıklamayı göster

Cevap: Processing 802.1X client authentication requests and managing centralized wireless client associations

Cevap

Processing 802.1X client authentication requests and managing centralized wireless client associations
In Cisco Split-MAC wireless architecture, the Wireless LAN Controller (WLC) is responsible for centralizing management and control plane operations. This includes processing 802.1X client authentication, managing client association states, enforcing security policies, and orchestrating Radio Resource Management (RRM). Real-time operations, such as beaconing, probe responses, and frame encryption, remain on the Lightweight Access Point (LAP).

Adım Adım Çözüm

1
Analyze the Split-MAC architecture responsibilities between Lightweight Access Points (LAPs) and Wireless LAN Controllers (WLCs).
Split-MAC divides 802.11 protocol handling into real-time MAC tasks (handled by the LAP) and non-real-time management tasks (handled by the WLC).
This division optimizes latency-sensitive frame transmissions while keeping network-wide security and RF policy control centralized.
2
Identify real-time functions assigned to the LAP.
Real-time duties include beacon transmission, probe responses, packet acknowledgments (ACKs), and 802.11 frame encryption/decryption.
These tasks require microsecond-level timing and must occur directly at the physical radio interface.
3
Identify non-real-time functions assigned to the WLC.
Non-real-time duties include 802.1X security authentication processing, client association tracking, roaming coordination, and Radio Resource Management (RRM).
Centralizing these tasks allows the WLC to maintain consistent security policies and system-wide visibility across all access points.

Anahtar Kavram

Split-MAC Architecture and WLC vs. LAP Functional Roles
Soru 165Soru

A network engineer is designing a 10 Gbps backbone link between two switches located in separate campus buildings that are 450 meters apart. The campus conduit contains both multi-mode optical fiber (OM2 and OM3) and single-mode optical fiber (OS2). The link must achieve maximum throughput without signal degradation. Which optic transceiver and cabling combination must be selected to fulfill this requirement?

Cevabı ve açıklamayı göster

Cevap: 10GBASE-LR SFP+ transceiver over single-mode fiber (OS2)

Cevap

10GBASE-LR SFP+ transceiver over single-mode fiber (OS2)
The 10GBASE-LR standard uses long-wavelength optics (1310 nm) over single-mode fiber (SMF/OS2), which easily supports a distance of 450 meters (up to a 10 km maximum limit).

Adım Adım Çözüm

1
Analyze required distance and speed parameters
The requirement specifies a 10 Gbps Ethernet connection across a distance of 450 meters.
Different Ethernet physical layer standards (transceivers and cable types) have strict maximum reach limits.
2
Evaluate multi-mode fiber (MMF) standard limits for 10GBASE-SR
10GBASE-SR over OM2 reaches up to 82 meters; over OM3 reaches up to 300 meters; over OM4 reaches up to 400 meters. None of the available MMF options reach 450 meters.
Short-wavelength (850 nm) lasers on multi-mode fiber suffer from modal dispersion over long distances.
3
Evaluate copper cabling options
10GBASE-T UTP twisted-pair cable max distance is 100 meters; Direct Attach Copper (DAC) cables max distance is 7–10 meters.
Electrical signal attenuation limits copper cabling for high-speed long-distance links.
4
Evaluate single-mode fiber (SMF/OS2) options
10GBASE-LR operates using long-wavelength (1310 nm) lasers over single-mode optical fiber and supports distances up to 10 kilometers (10,000 meters).
Single-mode fiber avoids modal dispersion, making it the ideal choice for distances exceeding 400 meters.

Anahtar Kavram

Ethernet optical transceiver standards, distance limitations, and fiber cable types (10GBASE-SR vs 10GBASE-LR)
Soru 166Soru

A network engineer starts an OSPFv2 routing process on router Branch-GW. Prior to launching the OSPF process, no explicit router-id command is configured. The router has the following interfaces configured:

- Interface Loopback0: IP address 10.200.1.1/3210.200.1.1/32, Operational Status: Administratively Down
- Interface Loopback10: IP address 172.16.50.1/24172.16.50.1/24, Operational Status: Up/Up
- Interface Loopback20: IP address 172.16.20.1/24172.16.20.1/24, Operational Status: Up/Up
- Interface GigabitEthernet0/0: IP address 192.168.10.1/24192.168.10.1/24, Operational Status: Up/Up

What IPv4 address will OSPFv2 select as the Router ID for Branch-GW?

Cevabı ve açıklamayı göster

Cevap: 172.16.50.1

Cevap

172.16.50.1
In Cisco OSPFv2, the Router ID selection order follows three rules: 1) Explicitly configured `router-id` command, 2) Highest IPv4 address among active (Up/Up) loopback interfaces, 3) Highest IPv4 address among active (Up/Up) physical interfaces. Since no manual Router ID is configured, OSPF evaluates loopback interfaces. Loopback0 is administratively down, so it is ineligible. Between the active loopbacks (Loopback10 at 172.16.50.1 and Loopback20 at 172.16.20.1), 172.16.50.1 is the highest IP address, making it the selected Router ID.

Adım Adım Çözüm

1
Check for a manually configured OSPF Router ID
No explicit OSPF router-id command was entered under the routing process.
Explicit configuration always takes top precedence in OSPF Router ID election.
2
Evaluate active (Up/Up) Loopback interfaces
Loopback0 (10.200.1.110.200.1.1) is administratively down and ignored. Active loopbacks are Loopback10 (172.16.50.1172.16.50.1) and Loopback20 (172.16.20.1172.16.20.1).
Only active interfaces with operational status Up/Up are eligible for Router ID selection.
3
Select the highest IPv4 address among eligible active loopback interfaces
Comparing 172.16.50.1172.16.50.1 and 172.16.20.1172.16.20.1, the address 172.16.50.1172.16.50.1 is numerically higher.
OSPF tie-breaking logic favors the highest IPv4 address among active loopback interfaces over physical interface IP addresses.

Anahtar Kavram

OSPFv2 Router ID Election Order and Interface State Requirements
Soru 167Soru

A network engineer is configuring OSPFv2 on router R1, which has the following interface states and IPv4 configurations:

- Loopback0: 192.168.254.1/32 (administratively down, line protocol down)
- Loopback1: 172.16.50.1/24 (up, line protocol up)
- Loopback2: 10.255.255.1/24 (up, line protocol up)
- GigabitEthernet0/0: 10.1.1.1/30 (up, line protocol up)
- GigabitEthernet0/1: 192.168.1.1/30 (up, line protocol up)

The engineer starts the OSPF process using `router ospf 1`. Immediately after, the engineer configures `router-id 1.1.1.1` under the OSPF process prompt but does NOT issue a `clear ip ospf process` command. Router R1 then attempts to establish an OSPFv2 adjacency over GigabitEthernet0/0 (Area 0) with directly connected router R2. Router R2 already has a manually configured static OSPF Router ID of 172.16.50.1172.16.50.1.

Which outcome correctly describes the OSPF neighbor state and behavior between R1 and R2?

Cevabı ve açıklamayı göster

Cevap: The routers fail to establish an OSPF adjacency because both routers are using the duplicate Router ID 172.16.50.1.

Cevap

The routers fail to establish an OSPF adjacency because both routers are using the duplicate Router ID 172.16.50.1.
When the OSPF process initializes on R1, it evaluates active interfaces. Loopback0 is down, so it is ignored. Loopback1 (172.16.50.1172.16.50.1) is chosen over Loopback2 (10.255.255.110.255.255.1) because it has the higher IPv4 address. Although the administrator configures `router-id 1.1.1.1`, OSPF Router ID changes are non-preemptive and require the process to be cleared (`clear ip ospf process`) before taking effect. Consequently, R1 maintains its elected Router ID of 172.16.50.1172.16.50.1, which matches R2's Router ID. OSPF neighbors cannot form an adjacency with duplicate Router IDs on the same network segment.

Adım Adım Çözüm

1
Evaluate initial dynamic OSPF Router ID election on R1
Loopback0 is down and disqualified. Among active loopbacks (Loopback1: 172.16.50.1 and Loopback2: 10.255.255.1), 172.16.50.1 is numerically highest and becomes R1's active Router ID.
OSPF Router ID selection order is: manual 'router-id' command > highest IP on active loopbacks > highest IP on active physical interfaces.
2
Evaluate the effect of the manual 'router-id 1.1.1.1' command
R1 retains 172.16.50.1 as its active Router ID because the process was not cleared.
In Cisco IOS OSPFv2, manually modifying the Router ID on an existing process is non-preemptive until 'clear ip ospf process' is executed.
3
Analyze neighbor adjacency formation with R2
Both R1 and R2 present a Router ID of 172.16.50.1 in Hello packets, leading to duplicate Router ID conflict and adjacency failure.
OSPF routers on the same segment or area require unique Router IDs to establish neighbor relationships.

Anahtar Kavram

OSPFv2 Router ID Selection Precedence and Non-Preemptive CLI Behavior
Soru 168Soru

A network engineer needs to configure an IPv6 static route on router R1 to forward traffic destined for remote subnet 2001:db8:acad:50::/642001:\text{db8}:\text{acad}:50::/64. The next-hop router's link-local address is fe80::fe54:99ff:fe12:34ab\text{fe80::fe54:99ff:fe12:34ab} via local interface GigabitEthernet0/0/2. Complete the Cisco IOS command below by filling in the exit interface and the next-hop address.

Aşağıdaki boşlukları doldurun

R1(config)# ipv6 route 2001:db8:acad:50::/64
Cevabı ve açıklamayı göster

Cevap

The missing command parameters are GigabitEthernet0/0/2 for the local exit interface (blank 1) and fe80::fe54:99ff:fe12:34ab for the link-local next-hop IPv6 address (blank 2).
When configuring an IPv6 static route using a link-local IPv6 address as the next hop, Cisco IOS requires a fully specified static route syntax where the local exit interface is specified first, followed by the link-local address. Therefore, the first blank requires the exit interface GigabitEthernet0/0/2 and the second blank requires the next-hop link-local address fe80::fe54:99ff:fe12:34ab.

Adım Adım Çözüm

1
Identify the destination network prefix and prefix length.
The target network prefix is 2001:db8:acad:50::/642001:\text{db8}:\text{acad}:50::/64.
This forms the first argument following the `ipv6 route` global configuration command keyword.
2
Determine the requirement for static routes configured with link-local next-hop addresses.
Because link-local addresses (fe80::/10\text{fe80::/10}) are only unique per link, Cisco IOS requires the local exit interface to be explicitly specified preceding the link-local address.
Without specifying the local exit interface, the router cannot determine which local interface to send packets out to reach the non-unique link-local address.
3
Assemble the complete IPv6 static route command string in Cisco IOS order.
`ipv6 route 2001:db8:acad:50::/64 GigabitEthernet0/0/2 fe80::fe54:99ff:fe12:34ab`
This populates GigabitEthernet0/0/2 as the first blank and fe80::fe54:99ff:fe12:34ab as the second blank.

Anahtar Kavram

Fully specified IPv6 static route syntax using a link-local next-hop address and local outbound interface.
Soru 169Soru

Two Cisco routers, R1 and R2, are connected via their GigabitEthernet0/0 interfaces over a point-to-point Ethernet link. A network engineer notices that OSPFv2 fails to establish a neighbor relationship between them. The engineer issues verification commands on both routers and observes the following command outputs:

R1# show ip ospf interface gigabitEthernet 0/0
GigabitEthernet0/0 is up, line protocol is up
Internet Address 10.1.1.1/24, Area 0
Process ID 1, Router ID 1.1.1.1, Network Type BROADCAST
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5

R2# show ip ospf interface gigabitEthernet 0/0
GigabitEthernet0/0 is up, line protocol is up
Internet Address 10.1.1.2/24, Area 10
Process ID 2, Router ID 2.2.2.2, Network Type BROADCAST
Timer intervals configured, Hello 15, Dead 60, Wait 60, Retransmit 5

Which TWO configuration changes will resolve the neighbor adjacency failure between R1 and R2? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Reconfigure R2's interface so that its OSPF Area ID matches Area 0.; Adjust R2's Hello and Dead timers to 10 seconds and 40 seconds respectively to match R1.

Cevap

The two required configuration changes are: reconfiguring R2's interface so its OSPF Area ID matches Area 0, and adjusting R2's Hello and Dead timers to 10 seconds and 40 seconds to match R1.
To form an OSPFv2 neighbor adjacency over a connected link, routers must exchange Hello packets that agree on several mandatory fields. The Area ID (Area 0 vs Area 10) and the Hello/Dead timer intervals (10/40 vs 15/60) are mismatched in the output. Reconfiguring R2 to use Area 0 and setting its timers to Hello 10s / Dead 40s removes both blocking conditions, allowing neighbor adjacency to complete.

Adım Adım Çözüm

1
Analyze the CLI output for OSPF Area ID configuration on both routers.
R1 is in Area 0 while R2 is in Area 10.
OSPF interfaces on the same subnet must belong to the exact same area for an adjacency to form.
2
Compare the configured OSPF Hello and Dead timer values between R1 and R2.
R1 has Hello 10s / Dead 40s, whereas R2 has Hello 15s / Dead 60s.
Mismatching Hello/Dead timers prevent OSPF routers from accepting Hello packets and forming a neighbor relationship.
3
Evaluate the non-matching parameters (Process ID and Router ID) to determine if they impact adjacency.
Process IDs do not need to match (local significance only), and Router IDs must remain unique rather than identical.
Only Area ID, Hello/Dead timers, Subnet Mask, MTU, and Authentication fields must satisfy adjacency checks in Hello exchanges.

Anahtar Kavram

OSPFv2 Neighbor Adjacency Requirements
Soru 170Soru

An enterprise network engineer is deploying a centralized wireless architecture using Cisco Lightweight Access Points (LAPs) and a Wireless LAN Controller (WLC) configured for Split-MAC operation. Which function is performed locally by the Lightweight Access Point during normal operation?

Cevabı ve açıklamayı göster

Cevap: Transmission of 802.11 beacon frames and handling of probe responses

Cevap

Transmission of 802.11 beacon frames and handling of probe responses
Under Cisco's Split-MAC architecture, real-time 802.11 PHY and MAC functions—such as generating 802.11 beacon frames, responding to client probe requests, packet buffering for power-save mode, and layer 1/2 frame acknowledgments—are handled directly by the Lightweight Access Point (LAP). Because these operations demand tight, real-time execution, processing them locally prevents latency issues that would occur if traffic had to travel back and forth over a CAPWAP tunnel to the WLC.

Adım Adım Çözüm

1
Analyze the Split-MAC architecture model used in Cisco centralized wireless networks.
Identify that functions are split between real-time MAC functions (AP) and management/non-real-time MAC functions (WLC).
Split-MAC optimizes processing by keeping delay-sensitive RF tasks on the AP while centralizing policy and control on the WLC.
2
Categorize the AP responsibilities under real-time MAC operations.
Real-time MAC tasks include sending 802.11 beacons, responding to probe requests, frame handshakes (ACKs), and packet buffering for power-save clients.
These tasks require microsecond-level timing and cannot tolerate latency introduced by traversing a CAPWAP tunnel to the controller.
3
Categorize WLC responsibilities under management and security functions.
Non-real-time functions include 802.11 authentication/association, 802.1X/EAP processing, security key distribution, and 802.11-to-802.3 frame conversion.
These functions control network access policies and data forwarding centrally.

Anahtar Kavram

Split-MAC Architecture Division of Responsibilities
Tahmini Süre:1m 0s
Soru 171Soru

Refer to the following excerpt from a Cisco router's IPv4 routing table:

text
Gateway of last resort is 192.168.4.1 to network 0.0.0.0

S 10.1.4.0/24 [1/0] via 192.168.1.1
O 10.1.4.64/27 [110/20] via 192.168.2.1, 00:12:45, GigabitEthernet0/0/2
D 10.1.0.0/16 [90/307200] via 192.168.3.1, 01:45:10, GigabitEthernet0/0/3
S* 0.0.0.0/0 [1/0] via 192.168.4.1

The router receives an IP packet destined for 10.1.4.6710.1.4.67. Which next-hop IP address will the router select to forward this packet?

Cevabı ve açıklamayı göster

Cevap: 192.168.2.1

Cevap

The router forwards the packet to next-hop IP address 192.168.2.1.
The destination IPv4 address 10.1.4.6710.1.4.67 matches multiple routes in the routing table: 10.1.4.0/2410.1.4.0/24, 10.1.4.64/2710.1.4.64/27, 10.1.0.0/1610.1.0.0/16, and 0.0.0.0/00.0.0.0/0. Router forwarding decision logic dictates that the router will ALWAYS prefer the Longest Prefix Match (most specific subnet mask). Comparing mask lengths (/27 > /24 > /16 > /0), the route 10.1.4.64/2710.1.4.64/27 has the longest match. Therefore, the router forwards the packet to next-hop 192.168.2.1192.168.2.1.

Adım Adım Çözüm

1
Evaluate all routes matching the destination IP address 10.1.4.67.
Three matching routes found: 10.1.4.0/24 (prefix length 24), 10.1.4.64/27 (prefix length 27), and 10.1.0.0/16 (prefix length 16).
The subnet 10.1.4.64/27 covers IP addresses 10.1.4.64 through 10.1.4.95, which includes 10.1.4.67.
2
Apply the Longest Prefix Match (LPM) rule.
The route 10.1.4.64/27 has a 27-bit mask, which is longer than /24, /16, and /0.
The router always prioritizes the most specific match (longest subnet mask) first before evaluating Administrative Distance.
3
Identify the next-hop IP address for the winning route 10.1.4.64/27.
The next-hop address associated with 10.1.4.64/27 is 192.168.2.1.
The routing table entry specifies 'via 192.168.2.1'.

Anahtar Kavram

Router Forwarding Decision Logic (Longest Prefix Match)
Soru 172Soru

A network administrator configures a router interface to automatically generate a global unicast IPv6 address using EUI-64 based on the network prefix 2001:db8:acad:1::/642001:\text{db8}:\text{acad}:1::/64. Given that the interface burned-in hardware MAC address is 1060.4b22.33441060.4\text{b}22.3344, which IPv6 address is dynamically assigned to the interface?

Cevabı ve açıklamayı göster

Cevap: 2001:db8:acad:1:1260:4bff:fe22:3344

Cevap

The dynamically assigned IPv6 global unicast address is 2001:db8:acad:1:1260:4bff:fe22:3344.
The correct answer correctly applies both steps of EUI-64 interface identifier construction: inserting 0xFFFE into the middle of the MAC address (between 10-60-4B and 22-33-44) and inverting the 7th bit of the first byte (converting 0x10 binary 00010000 to 0x12 binary 00010010), yielding the interface ID 1260:4bff:fe22:3344 concatenated with prefix 2001:db8:acad:1::/64.

Adım Adım Çözüm

1
Split the 48-bit MAC address into two 24-bit halves.
Left half is 1060.4b, right half is 22.3344.
EUI-64 generation requires dividing the MAC address to insert a 16-bit hex delimiter in the middle.
2
Insert the hex string FFFE between the two halves.
1060.4bff:fe22.3344.
Inserting FFFE expands the 48-bit MAC address into a 64-bit interface identifier.
3
Invert the 7th bit (Universal/Local bit) of the first byte.
First byte 0x10 (00010000 in binary) becomes 0x12 (00010010 in binary), making the interface ID 1260:4bff:fe22:3344.
IEEE EUI-64 format requires inverting the 7th bit to signify a universally administered address.
4
Combine the /64 network prefix with the generated 64-bit interface ID.
2001:db8:acad:1:1260:4bff:fe22:3344.
Concatenating the prefix 2001:db8:acad:1::/64 with the interface ID forms the complete IPv6 Global Unicast Address.

Anahtar Kavram

EUI-64 Interface Identifier Derivation
Soru 173Soru

A network administrator is auditing enterprise IP addressing schemas across multiple branch office subnets to ensure full compliance with RFC 1918 private addressing standards. During the audit, the administrator observes four host interface configurations:

- Device A: 10.255.250.1/810.255.250.1/8
- Device B: 172.31.255.1/12172.31.255.1/12
- Device C: 172.32.10.1/16172.32.10.1/16
- Device D: 192.168.255.1/16192.168.255.1/16

Which host is configured with a globally routable public IPv4 address rather than a valid RFC 1918 private IPv4 address?

Cevabı ve açıklamayı göster

Cevap: Device C (172.32.10.1/16172.32.10.1/16)

Cevap

Device C (172.32.10.1/16172.32.10.1/16) is configured with a public IPv4 address because RFC 1918 defines the Class B private IPv4 allocation strictly as 172.16.0.0172.16.0.0 to 172.31.255.255172.31.255.255 (172.16.0.0/12172.16.0.0/12).
The RFC 1918 standard reserves three specific IPv4 address blocks for private internal network use: 10.0.0.0/810.0.0.0/8 (10.0.0.010.0.0.010.255.255.25510.255.255.255), 172.16.0.0/12172.16.0.0/12 (172.16.0.0172.16.0.0172.31.255.255172.31.255.255), and 192.168.0.0/16192.168.0.0/16 (192.168.0.0192.168.0.0192.168.255.255192.168.255.255). The address assigned to Device C (172.32.10.1/16172.32.10.1/16) falls outside the 172.16.0.0/12172.16.0.0/12 boundary because its second octet (3232) is greater than 3131. Therefore, it is a globally routable public address.

Adım Adım Çözüm

1
Identify the three defined RFC 1918 private IPv4 address blocks and their prefix boundaries.
Class A: 10.0.0.0/810.0.0.0/8 (10.0.0.010.0.0.010.255.255.25510.255.255.255); Class B: 172.16.0.0/12172.16.0.0/12 (172.16.0.0172.16.0.0172.31.255.255172.31.255.255); Class C: 192.168.0.0/16192.168.0.0/16 (192.168.0.0192.168.0.0192.168.255.255192.168.255.255).
RFC 1918 reserves specific IPv4 address ranges exclusively for private enterprise networks.
2
Evaluate each given IP address against the defined RFC 1918 boundaries.
10.255.250.110.255.250.1 is within 10.0.0.0/810.0.0.0/8; 172.31.255.1172.31.255.1 is within 172.16.0.0/12172.16.0.0/12; 192.168.255.1192.168.255.1 is within 192.168.0.0/16192.168.0.0/16; 172.32.10.1172.32.10.1 exceeds the upper limit (172.31.255.255172.31.255.255) of the Class B range.
Addresses beyond 172.31.255.255172.31.255.255, such as 172.32.0.0/11172.32.0.0/11, are allocated as public IP space by IANA.
3
Determine which device uses a public, globally routable IPv4 address.
Device C (172.32.10.1/16172.32.10.1/16) uses a public address.
Because 172.32.10.1172.32.10.1 is outside the RFC 1918 private boundary, it requires direct public Internet routing or dynamic translation.

Anahtar Kavram

RFC 1918 Private IPv4 Address Ranges
Soru 174Soru

A network engineer is troubleshooting performance degradation on a link between Switch-A and Switch-B. The engineer executes the command `show interfaces fastEthernet 0/1` on Switch-A and observes the following CLI output:

text
FastEthernet0/1 is up, line protocol is up (connected)
Hardware is Fast Ethernet, address is 0007.eb78.8901 (bia 0007.eb78.8901)
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, media type is 100BaseTX
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
5 minute input rate 12000 bits/sec, 15 packets/sec
5 minute output rate 15000 bits/sec, 18 packets/sec
482910 packets input, 54910284 bytes, 0 no buffer
0 runts, 0 giants, 0 throttles
8942 input errors, 8942 CRC, 0 frame, 0 overrun, 0 ignored
512049 packets output, 61029481 bytes, 0 underruns
0 output errors, 0 collisions, 0 late collision, 0 deferred

Meanwhile, the connected interface on Switch-B reports `Half-duplex, 100Mb/s` and shows a rapidly incrementing counter for late collisions and deferred transmissions. Which of the following is the root cause of this troubleshooting issue?

Cevabı ve açıklamayı göster

Cevap: Switch-A is manually configured for full duplex while Switch-B relies on auto-negotiation, forcing Switch-B to default to half duplex.

Cevap

Switch-A is manually configured for full duplex while Switch-B relies on auto-negotiation, forcing Switch-B to default to half duplex.
The correct answer identifies a classic duplex mismatch scenario. When Switch-A is manually set to full duplex, it stops participating in auto-negotiation. Switch-B, left on auto-negotiation, can sense the 100 Mbps link speed via fast link pulses (FLP) but cannot negotiate the duplex setting. Following IEEE rules, Switch-B falls back to half duplex. Switch-A transmits whenever it has data, while Switch-B attempts CSMA/CD. This causes Switch-B to see late collisions and Switch-A to record CRC input errors.

Adım Adım Çözüm

1
Analyze the interface output on Switch-A
Switch-A is operating at Full-duplex 100Mb/s, has 0 collisions/late collisions recorded, but shows a high number of input errors and CRC errors.
Full-duplex interfaces do not perform carrier sense multiple access with collision detection (CSMA/CD), so they never register collisions. However, incoming frames from a half-duplex partner transmitting during local transmissions will be truncated or corrupted, resulting in CRC errors.
2
Analyze the counter symptoms on Switch-B
Switch-B operates at Half-duplex and increments late collisions and deferred packets.
Because Switch-B is in half-duplex mode, it uses CSMA/CD. When Switch-A transmits continuously in full duplex, Switch-B detects collisions past the 64-byte slot time (late collisions).
3
Determine the cause of the duplex asymmetry
Disabling auto-negotiation on one end (hardcoding Switch-A to Full) causes the auto-negotiating peer (Switch-B) to fall back to the standard default of Half-duplex.
Cisco and IEEE 802.3 standards require auto-negotiation on both ends or manual configuration on both ends. Mixing hardcoded settings with auto-negotiation results in a duplex mismatch.

Anahtar Kavram

Ethernet Auto-Negotiation and Duplex Mismatch Troubleshooting
Soru 175Soru

An enterprise network deployment uses Cisco Lightweight Access Points (LAPs) operating in a Centralized Split-MAC architecture managed by a Wireless LAN Controller (WLC). During high-density traffic analysis, an engineer must verify which frame processing tasks are handled locally by the AP in real time to minimize latency. Which function is executed directly by the Lightweight AP rather than being processed by the Wireless LAN Controller?

Cevabı ve açıklamayı göster

Cevap: Transmission of 802.11 beacon frames and processing of real-time 802.11 frame acknowledgments

Cevap

Transmission of 802.11 beacon frames and processing of real-time 802.11 frame acknowledgments
Under Cisco Split-MAC architecture, time-sensitive (real-time) 802.11 protocol functions are executed directly on the Lightweight Access Point. These include beacon transmission, probe responses, MAC-level frame acknowledgments (ACKs), frame buffering/queuing, and signal strength measurements.

Adım Adım Çözüm

1
Analyze the Split-MAC architecture division of responsibilities in Cisco centralized wireless networks.
Split-MAC divides 802.11 protocol handling between real-time MAC functions and management/non-real-time MAC functions.
Real-time functions must react within microsecond thresholds directly on the AP radio hardware.
2
Identify AP-specific real-time MAC functions.
The AP performs beacon generation, probe responses, 802.11 MAC layer acknowledgments (ACK), frame buffering, and Layer 1/2 encryption/decryption.
Sending real-time ACKs or beacons back and forth across a CAPWAP tunnel to a WLC would introduce intolerable latency.
3
Identify WLC-specific management functions.
The WLC manages 802.11 authentication, association/reassociation processing, 802.1X/EAP key handshakes, RRM, and CAPWAP tunnel termination.
Centralizing management policy ensures seamless mobility, central security control, and global RF optimization.

Anahtar Kavram

Split-MAC Architecture Division of Responsibilities
Soru 176Soru

Refer to the following Cisco IOS CLI output from a switch interface:

text
Switch# show interfaces gigabitEthernet 0/1
GigabitEthernet0/1 is up, line protocol is up (connected)
Hardware is GigabitEthernet, address is 0007.7d04.1a01
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Half-duplex, 100Mb/s, media type is 10/100/1000BaseTX
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:01, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 12000 bits/sec, 15 packets/sec
5 minute output rate 45000 bits/sec, 32 packets/sec
41205 packets input, 5142091 bytes, 0 no buffer
Received 104 broadcasts (0 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
58912 packets output, 7120491 bytes, 0 underruns
3412 output errors, 3290 late collisions, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output

Based on the output, which condition is the most probable cause of the accumulated interface errors?

Cevabı ve açıklamayı göster

Cevap: The local interface is operating in half-duplex mode while the connected neighbor is hardcoded for full-duplex mode.

Cevap

The local interface is operating in half-duplex mode while the connected neighbor is hardcoded for full-duplex mode.
The combination of an 'up/up' link status, half-duplex local operational mode, and high late collision counts specifically indicates a duplex mismatch. When the remote device is manually set to full-duplex, auto-negotiation on the local device fails to detect duplex and falls back to half-duplex. As the full-duplex neighbor transmits at will without checking carrier sense, it interrupts ongoing local transmissions after the 64-byte collision window, causing late collisions to increment on the half-duplex side.

Adım Adım Çözüm

1
Analyze line status and line protocol state.
Interface status is 'up' and line protocol is 'up', confirming physical Layer 1 connectivity and Layer 2 framing operational state.
This rules out physical disconnection or complete cable pinout failures.
2
Examine operating duplex settings and interface error counters.
The interface operates at 'Half-duplex, 100Mb/s' and shows significant 'late collisions' (3,290) and 'output errors' (3,412), but 0 CRC/input errors.
Late collisions occur when a collision is detected after the first 64 bytes (512 bits) of a frame have been transmitted.
3
Correlate symptoms with duplex operation mechanics.
Late collisions on a half-duplex interface are a textbook symptom of a duplex mismatch, occurring because the remote full-duplex node transmits while the local half-duplex node is midway through sending a frame.
In auto-negotiation fallback, if one side is set manually to full-duplex, the auto-negotiating side defaults to half-duplex, creating this exact symptom pattern.

Anahtar Kavram

Duplex Mismatch Identification via Interface Counters
Tahmini Süre:2m 0s
Soru 177Soru

A network administrator needs to manually configure an 802.1Q trunk on switch port GigabitEthernet0/1 and assign VLAN 99 as the untagged native VLAN. Place the Cisco IOS CLI configuration commands in the correct sequential order required to accomplish this task.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of configuration commands is: enter interface context ('interface GigabitEthernet0/1'), specify 802.1Q encapsulation ('switchport trunk encapsulation dot1q'), set operational mode to trunk ('switchport mode trunk'), and set native VLAN 99 ('switchport trunk native vlan 99').
To successfully establish an 802.1Q trunk link with a custom native VLAN on a Cisco switch interface, commands must be entered in hierarchical CLI order: first select the targeted interface ('interface GigabitEthernet0/1'), define the trunk encapsulation standard ('switchport trunk encapsulation dot1q'), force the link into trunking mode ('switchport mode trunk'), and finally designate the untagged native VLAN ('switchport trunk native vlan 99').

Adım Adım Çözüm

1
Navigate to the targeted physical interface context.
Switch enters interface configuration mode for GigabitEthernet0/1.
Trunk configuration commands are applied directly under the specific switchport interface context.
2
Set the trunk encapsulation type to 802.1Q.
The interface uses 802.1Q frame tagging for VLAN multiplexing.
On Cisco Catalyst switches supporting legacy ISL and 802.1Q, encapsulation type must be explicitly specified before enabling trunk mode.
3
Enable static trunking mode.
The port transitions to a permanent 802.1Q trunking operational state.
The command 'switchport mode trunk' forces the interface into trunking mode.
4
Configure the native VLAN assignment.
VLAN 99 is assigned as the native (untagged) VLAN on the trunk.
Untagged frames sent and received over the 802.1Q trunk will be mapped to VLAN 99.

Anahtar Kavram

IEEE 802.1Q Trunk CLI Configuration Sequence
Soru 178Soru

Network administrators deploy various hardware devices to perform specific roles within an enterprise network infrastructure. Match each network component on the left to its primary operational function on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Router
Layer 2 Switch
Next-Generation Firewall (NGFW)
Wireless LAN Controller (WLC)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Router matches with 'Forwards packets between distinct IPv4/IPv6 subnets based on Layer 3 IP addresses.'; Layer 2 Switch matches with 'Forwards frames based on Layer 2 MAC addresses and separates collision domains.'; Next-Generation Firewall (NGFW) matches with 'Inspects deep application-layer traffic and enforces stateful security policies.'; Wireless LAN Controller (WLC) matches with 'Centrally manages lightweight access points, wireless SSIDs, and radio resources.'
Each network component is correctly paired with its primary operational layer and function in enterprise architecture: Routers for inter-subnet Layer 3 packet forwarding, Layer 2 switches for intra-subnet Ethernet frame switching, NGFWs for security filtering, and WLCs for central wireless management.

Adım Adım Çözüm

1
Identify Layer 3 forwarding device
Router matches with forwarding packets between IP subnets.
Routers make forwarding decisions based on Layer 3 IP routing tables to interconnect different subnets.
2
Identify Layer 2 switching device
Layer 2 Switch matches with forwarding frames using MAC addresses.
Layer 2 switches operate within a single broadcast domain and make forwarding decisions using MAC address tables.
3
Identify perimeter security device
NGFW matches with inspecting application-layer traffic and stateful policies.
Firewalls filter network traffic based on security rules, state tables, and application signatures.
4
Identify centralized wireless management component
WLC matches with managing lightweight access points centrally.
WLCs aggregate control-plane functionality for Lightweight APs (LAP/CAPWAP).

Anahtar Kavram

Core roles and functions of enterprise network devices
Soru 179Soru

Match each wireless radio frequency (RF) propagation behavior on the left with its corresponding physical effect on Wi-Fi signals on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Absorption
Reflection
Refraction
Scattering

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Absorption pairs with RF energy being converted to heat through dense materials; Reflection pairs with the signal bouncing off large flat conductive surfaces; Refraction pairs with signal bending through medium density changes; Scattering pairs with signal dispersion across rough or small obstacles.
Absorption describes energy loss in dense obstacles, Reflection describes signals bouncing off smooth metal surfaces, Refraction describes signal bending through media density changes, and Scattering describes multi-directional dispersion off irregular surfaces.

Adım Adım Çözüm

1
Identify the mechanism of signal attenuation caused by solid building materials.
Absorption is the physical conversion of RF energy into heat as it penetrates dense obstacles.
Materials like concrete and brick absorb RF energy.
2
Identify the behavior when RF encounters large flat metallic objects.
Reflection is the bouncing back of an RF wave from a large conductive boundary.
Smooth metallic surfaces act as reflectors for wireless signals.
3
Identify the behavior associated with signal bending.
Refraction is the deflection of an RF wave passing through media of varying density.
Changes in medium propagation speed cause the wave vector to change direction.
4
Identify the behavior when signals hit small or non-uniform objects.
Scattering causes multi-directional redirection of RF energy.
Irregular boundaries prevent cohesive specular reflection.

Anahtar Kavram

RF Propagation Behaviors in Wireless Networks
Soru 180Soru

A network administrator needs to manually configure an 802.1Q trunk link on a switch port supporting multi-encapsulation according to security best practices. Place the Cisco IOS configuration commands in the correct execution sequence from initial interface selection to traffic pruning.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct configuration sequence is: 1) Enter interface context, 2) Define 802.1Q encapsulation, 3) Set switchport mode to trunk, 4) Reassign the native VLAN ID, and 5) Define allowed VLANs for traffic pruning.
The correct operational sequence begins with entering the interface configuration context. Next, on switches supporting multiple encapsulation protocols, 802.1Q encapsulation must be explicitly configured prior to setting the interface mode to trunk. Once the trunk state is active, security hardening steps follow: reassigning the untagged native VLAN away from VLAN 1, and finally filtering trunk traffic by restricting allowed VLANs.

Adım Adım Çözüm

1
Select the target interswitch physical interface context.
Enters interface configuration prompt context.
CLI commands must target the specific interface designated for trunking.
2
Execute switchport trunk encapsulation dot1q.
Defines IEEE 802.1Q frame tagging for the port.
On legacy or multi-layer Catalyst switches, attempting switchport mode trunk before selecting encapsulation results in a CLI error.
3
Execute switchport mode trunk.
Forces interface into permanent trunking state.
Establishes trunk operation and stops unconditional access behavior.
4
Execute switchport trunk native vlan 99.
Changes untagged frame handling to VLAN 99.
Enhances security by avoiding the default native VLAN 1.
5
Execute switchport trunk allowed vlan 10,20,99.
Restricts broadcast/multicast forwarding to specified VLANs.
Implements traffic filtering and pruning across interswitch links.

Anahtar Kavram

Manual 802.1Q Trunk CLI Configuration Order
ÖncekiSayfa 9 / 100Sonraki
Tüm alıştırma soruları — Cisco CCNA | Examkin