Tüm alıştırma soruları

452 soru

Soru 1Soru

Which two statements accurately describe Rapid PVST+ port roles and operational port states? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: An Alternate port maintains a backup path to the root bridge and remains in the Discarding state.; Rapid PVST+ reduces the legacy 802.1D Disabled, Blocking, and Listening states into a single Discarding state.

Cevap

An Alternate port maintains a backup path to the root bridge and remains in the Discarding state, and Rapid PVST+ reduces the legacy 802.1D Disabled, Blocking, and Listening states into a single Discarding state.
Rapid PVST+ (802.1w) optimizes Spanning Tree by consolidating the 802.1D Disabled, Blocking, and Listening states into a single Discarding state. Under this model, an Alternate port provides a backup path to the root bridge and stays in the Discarding state during normal operation.

Adım Adım Çözüm

1
Identify the port states supported by Rapid PVST+ (802.1w).
Rapid PVST+ consolidates legacy 802.1D port states (Disabled, Blocking, Listening) into a single Discarding state.
This reduces operational complexity and improves convergence time.
2
Analyze the function and state of an Alternate port role in Rapid PVST+.
An Alternate port offers an alternate path to the root bridge and remains discarded (not forwarding traffic) unless the primary root port loses connectivity.
Alternate ports provide rapid failover without needing to undergo standard convergence delays.

Anahtar Kavram

Rapid PVST+ Port Roles and Port States
Soru 2Soru

A network administrator configures Cisco STP PortFast globally on an access switch (`spanning-tree portfast default`) to streamline host initialization. To evaluate the impact of this command on switch behavior and topology stability, which TWO statements accurately describe the operational characteristics and benefits of enabling PortFast on an access switch interface?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The interface transitions immediately from the Blocking state to the Forwarding state upon link up, completely bypassing the Listening and Learning states.; Link status transitions on the PortFast-enabled port do not generate Topology Change Notifications (TCNs) across the Spanning Tree domain.

Cevap

PortFast enables immediate transition from Blocking to Forwarding by skipping Listening and Learning states, and it prevents link flaps on edge ports from generating Topology Change Notifications (TCNs).
Enabling PortFast allows access ports connected to end devices to bypass the classic 802.1D Listening and Learning states (saving 30 seconds of convergence delay) and move straight to Forwarding. Furthermore, PortFast suppresses Topology Change Notification (TCN) generation when the port flaps, preventing unnecessary MAC address table flushing across the switch network.

Adım Adım Çözüm

1
Analyze the state transition mechanics of Cisco STP PortFast.
Standard 802.1D STP transitions through Blocking (20s max age) -> Listening (15s forward delay) -> Learning (15s forward delay) -> Forwarding (30-50s total). PortFast bypasses Listening and Learning, bringing the port directly from Blocking to Forwarding instantly upon link establishment.
This direct transition prevents DHCP request timeouts and initial bootup delays for end-user workstations.
2
Evaluate the topology change control mechanisms introduced by PortFast.
Normal STP interfaces generate TCN BPDUs whenever link status changes, instructing the Root Bridge to broadcast a topology change flag that shortens MAC address table aging timers to the forward delay period (15s). PortFast suppresses TCN generation for edge ports.
Preventing TCNs on workstation ports avoids unnecessary MAC table flooding and performance degradation across the entire Spanning Tree domain when end devices power on or off.
3
Verify BPDU processing behavior on PortFast interfaces.
PortFast ports still originate outbound BPDUs and continue to evaluate incoming BPDUs. Receiving a BPDU causes PortFast to be revoked operational status so normal loop prevention mechanics can take over.
PortFast alone does not filter or block BPDUs in either direction.

Anahtar Kavram

STP PortFast operational mechanics: Immediate Forwarding state bypass and TCN suppression.
Soru 3Soru

A network administrator is evaluating Rapid PVST+ spanning-tree behavior across a multi-switch enterprise topology containing VLAN 10 and VLAN 20. Switch-A is configured with `spanning-tree vlan 10 priority 4096`, while Switch-B is configured with `spanning-tree vlan 20 priority 8192`. Switch-C connects to both Switch-A and Switch-B via 802.1Q trunk links with default Rapid PVST+ settings. Which two statements correctly describe the resulting Rapid PVST+ bridge operations, port roles, and configuration rules? (Select two choices.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: For VLAN 10, Switch-A advertises a total Bridge ID priority value of 4106 in its outbound BPDUs due to the addition of the 12-bit System ID Extension.; On Switch-C, an interface assigned the Alternate port role remains in the Discarding state while receiving superior BPDUs from a designated switch.

Cevap

The correct statements are that Switch-A advertises a total priority value of 4106 for VLAN 10 due to the System ID Extension, and an Alternate port on Switch-C remains in the Discarding state while receiving superior BPDUs.
In Rapid PVST+, the Bridge ID priority calculation incorporates the 12-bit System ID Extension, resulting in an advertised priority of 4096+10=41064096 + 10 = 4106 for VLAN 10 on Switch-A. Additionally, an Alternate port provides a backup root path and resides in the Discarding state while continuing to process superior BPDUs from the designated bridge.

Adım Adım Çözüm

1
Calculate the total Bridge ID priority advertised by Switch-A for VLAN 10.
Total Priority = Base Priority (4096) + System ID Extension (VLAN 10) = 4106.
Rapid PVST+ dynamically includes the VLAN ID inside the 12-bit System ID Extension field of the 16-bit Bridge Priority structure.
2
Verify Cisco IOS syntax rules for configuring STP bridge priority.
Configuring a value such as 4100 is rejected by Cisco IOS.
STP base priority values must be exact multiples of 4096 (0,4096,8192,,614400, 4096, 8192, \dots, 61440).
3
Determine the state and behavior of an Alternate port in Rapid PVST+.
The Alternate port is placed in the Discarding state.
An Alternate port offers an alternate path to the root bridge but remains blocked (Discarding state) as long as it receives superior BPDUs from another switch.
4
Evaluate the operational mechanics of PortFast on switch links.
PortFast transitions ports directly to Forwarding, not Learning, and does not disable BPDU traffic.
PortFast is intended exclusively for single-host end devices to skip STP listening/learning phases. Applying it to trunk links connecting switches threatens network stability.

Anahtar Kavram

Rapid PVST+ Bridge ID Structure, Port Roles, and Port States
Soru 4Soru

A network technician is configuring administration settings for a Cisco Wireless LAN Controller (WLC). Which two statements correctly describe the features and capabilities of the WLC Service Port and Management Interface? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The Service Port is dedicated to out-of-band management and traffic on this port is kept isolated from wireless client data network paths.; The Management Interface operates in-band to handle administrative SSH/HTTPS access as well as CAPWAP control communications with Access Points.

Cevap

The Service Port provides dedicated out-of-band management isolated from client data paths, while the Management Interface handles in-band administration and CAPWAP tunnel traffic across routed networks.
The correct options accurately identify that the Service Port is used for isolated, out-of-band management access, whereas the Management Interface handles in-band administrative access (such as HTTPS and SSH) alongside CAPWAP control messaging across routed infrastructure.

Adım Adım Çözüm

1
Identify the primary role and connectivity model of the WLC Service Port.
Recognize that the Service Port is a physical interface reserved for out-of-band management, initial setup, and emergency recovery, operating separately from client data.
Out-of-band interfaces isolate network management from general data plane congestion or failures.
2
Identify the primary function of the WLC Management Interface.
Recognize that the Management Interface is the default in-band interface used for CAPWAP management protocols between APs and WLC, as well as in-band Web/SSH administration.
In-band interfaces allow centralized administration and AP control traffic to traverse routed enterprise networks.

Anahtar Kavram

Distinction between out-of-band (Service Port) and in-band (Management Interface) management access connections on Cisco Wireless LAN Controllers.
Soru 5Soru

A network administrator deploys Cisco Lightweight Access Points (APs) in FlexConnect mode at a remote branch office. Which two statements correctly describe the characteristics of FlexConnect mode when connected to the Cisco Wireless LAN Controller (WLC)? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Wireless client data traffic can be switched locally on the branch access switch rather than tunneled back to the WLC.; Control plane traffic and central management functions are maintained over a CAPWAP tunnel with the central WLC.

Cevap

FlexConnect mode allows wireless client data traffic to be switched locally on the local branch network while maintaining control plane management via a CAPWAP tunnel to the central Wireless LAN Controller.
FlexConnect mode provides remote branch offices with operational flexibility by enabling local switching of user data traffic directly onto the local LAN. At the same time, it relies on a CAPWAP control tunnel back to the central WLC for control plane tasks, configuration updates, and management oversight.

Adım Adım Çözüm

1
Identify the primary purpose of FlexConnect mode in Cisco wireless architecture.
FlexConnect is designed for branch office deployments connected over WAN links to a centralized controller.
It optimizes WAN bandwidth by permitting local switching of user traffic at the branch.
2
Analyze how data traffic and control traffic are handled in FlexConnect mode.
User data traffic can be switched locally onto the branch switch, while control and management traffic travel over the CAPWAP tunnel to the WLC.
This split-MAC capability avoids sending branch-to-branch or branch-to-internet user traffic back to the central WLC.

Anahtar Kavram

Cisco FlexConnect AP Mode Operational Characteristics
Tahmini Süre:1m 0s
Soru 6Soru

A network administrator is connecting two Cisco Catalyst switches via a multi-link bundle using Link Aggregation Control Protocol (LACP). Which two conditions or configuration settings are required for the EtherChannel bundle to form and operate correctly? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: At least one of the switches must have its physical member interfaces configured in LACP active mode.; All physical member interfaces in the bundle must be configured with identical speed, duplex, and VLAN settings.

Cevap

The EtherChannel bundle successfully forms when at least one side is configured in LACP active mode and all member interfaces share matching operational parameters such as speed, duplex, and VLAN configurations.
For an LACP EtherChannel to form, at least one endpoint must actively send LACP packets (active mode), allowing negotiation when paired with an active or passive remote interface. Additionally, all bundled physical interfaces must have identical speed, duplex, switchport mode, native VLAN, and allowed VLAN attributes.

Adım Adım Çözüm

1
Analyze LACP negotiation modes
LACP modes must be compatible (active-active or active-passive). Matching passive-passive modes will fail to initiate negotiation.
Passive mode only responds to LACP packets received; if neither end initiates, no negotiation occurs.
2
Evaluate member interface attribute requirements
All member links must match speed, duplex, trunking status, allowed VLANs, and native VLAN.
EtherChannel treats bundled physical links as a single logical interface, requiring identical physical and Layer 2 properties.

Anahtar Kavram

LACP Mode Compatibility and Prerequisite Interface Matching for EtherChannel
Soru 7Soru

Which two statements accurately describe the operational characteristics of port roles and port states in Cisco Rapid PVST+ (802.1w)?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: An Alternate port provides an alternate path toward the Root Bridge and remains in the Discarding state under normal operation.; Rapid PVST+ consolidates the legacy 802.1D Listening, Blocking, and Disabled states into a single Discarding state.

Cevap

The statement that an Alternate port serves as a backup path in the Discarding state and the statement that Rapid PVST+ merges Listening, Blocking, and Disabled states into a single Discarding state are both correct.
Rapid PVST+ streamlines STP operation by using only three states: Discarding, Learning, and Forwarding. The Discarding state merges the old 802.1D Disabled, Blocking, and Listening states. An Alternate port is a designated backup path toward the Root Bridge that remains in the Discarding state while receiving BPDUs from other switches.

Adım Adım Çözüm

1
Analyze Rapid PVST+ port states
Rapid PVST+ (802.1w) reduces port states to Discarding, Learning, and Forwarding.
Legacy 802.1D states of Disabled, Blocking, and Listening are combined into the Discarding state in 802.1w.
2
Analyze Rapid PVST+ port roles
An Alternate port is a backup path to the Root Bridge that stays in Discarding state until the primary Root Port fails.
Alternate ports receive superior BPDUs from neighboring switches but are blocked from forwarding frame traffic to maintain a loop-free topology.
3
Evaluate distractor regarding PortFast
PortFast is designed only for end-host (edge) access ports, not switch-to-switch trunks.
Configuring PortFast on trunks can lead to transient or persistent Layer 2 switching loops.
4
Evaluate distractor regarding bridge priority configuration
Bridge priority values must be assigned in multiples of 4096.
The 16-bit Bridge ID consists of a 4-bit priority field (increments of 4096) and a 12-bit System ID Extension carrying the VLAN ID.

Anahtar Kavram

Rapid PVST+ Port Roles, States, and Priority Configuration
Soru 8Soru

A security review on an enterprise switch named Core-SW1 reveals that virtual terminal sessions allow plain-text remote management and bypass local account verification. To harden management access on Core-SW1, which TWO commands must be configured specifically under line VTY configuration mode (config-line) to enforce local account credentials and restrict incoming traffic exclusively to SSH?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: login local; transport input ssh

Cevap

The correct commands to configure under line VTY configuration mode are 'login local' and 'transport input ssh'.
Securing virtual terminal (VTY) lines requires configuration within line subconfiguration mode (config-line). The command 'login local' ensures that any user connecting via VTY lines must authenticate against locally configured username accounts. The command 'transport input ssh' locks down line access so that only encrypted SSH sessions are permitted, disabling clear-text protocols like Telnet.

Adım Adım Çözüm

1
Identify the CLI context required for line-specific remote access security controls.
Line configuration mode (config-line) is accessed via the command 'line vty 0 15'.
VTY lines handle inbound network connection sessions.
2
Select the line command that requires local database credentials.
The 'login local' command binds line authentication to local user accounts created in global configuration mode.
Without 'login local', VTY lines either request a simple line password or permit unauthenticated access.
3
Select the line command that filters inbound remote management traffic protocols.
The 'transport input ssh' command restricts incoming protocol traffic exclusively to SSH.
By default, Cisco IOS line VTY sessions allow incoming Telnet connections unless restricted.

Anahtar Kavram

VTY Line Security Configuration for SSH Access
Soru 9Soru

An engineer wants to configure a floating static route on a Cisco router to serve as a backup for a primary route learned via OSPF (Administrative Distance 110). Which two statements correctly describe the requirements and operational behavior of this floating static route?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The administrative distance assigned to the floating static route must be set higher than 110.; The floating static route will remain inactive and out of the routing table as long as the primary OSPF route is active.

Cevap

The floating static route must be configured with an administrative distance greater than 110, and it will remain inactive in the routing table while the primary OSPF route is operational.
A floating static route functions as a backup and must be configured with an administrative distance higher than that of the active primary routing protocol (OSPF AD 110). Because Cisco routers select routes with lower administrative distance values for forwarding, the floating static route remains hidden from the routing table until the primary OSPF route fails.

Adım Adım Çözüm

1
Determine the administrative distance of the primary route.
OSPF has a default administrative distance of 110.
To create a floating static backup route, the configured administrative distance must be higher than that of the primary route.
2
Analyze router path selection logic.
The router selects the route with the lowest administrative distance for installation into the active routing table.
Because the static route's administrative distance is higher than 110, it stays out of the routing table until the primary OSPF route disappears.

Anahtar Kavram

Floating Static Route Administrative Distance Requirements
Tahmini Süre:1m 0s
Soru 10Soru

A network administrator is configuring interface GigabitEthernet1/0/14 on a Cisco Catalyst switch to connect an end-user workstation. The workstation must be placed into VLAN 30, and the interface must be explicitly prevented from negotiating a trunk link. Which TWO commands must be executed under interface configuration mode to accomplish this setup? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: switchport mode access; switchport access vlan 30

Cevap

The correct commands to execute in interface configuration mode are 'switchport mode access' and 'switchport access vlan 30'.
Configuring an access port on a Cisco Catalyst switch requires setting the administrative mode to access using 'switchport mode access' and binding the port to a target VLAN using 'switchport access vlan 30'. Both commands must be run within the interface configuration mode.

Adım Adım Çözüm

1
Set the operational mode of GigabitEthernet1/0/14 to static access mode.
Interface is locked into access mode using 'switchport mode access'.
Prevents accidental trunk negotiation with connected end-user devices via DTP.
2
Assign the access port to the designated VLAN.
Interface is assigned to VLAN 30 using 'switchport access vlan 30'.
Places untagged frames received on this interface into the Layer 2 broadcast domain of VLAN 30.

Anahtar Kavram

Static Access Port Assignment and VLAN Configuration
Soru 11Soru

A network administrator is evaluating transport layer requirements for a real-time voice conferencing application and a critical database replication service. Which two operational characteristics accurately describe User Datagram Protocol (UDP) when compared to Transmission Control Protocol (TCP)? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: UDP operates as a connectionless protocol that transmits data without establishing a initial session handshake.; UDP utilizes a fixed 8-byte header overhead to minimize latency and processing burden.

Cevap

UDP is characterized by its connectionless operation without a session handshake and its compact 8-byte fixed header structure.
The statements highlighting UDP as a connectionless protocol without session handshakes and noting its fixed 8-byte header overhead are correct. UDP provides low-latency transmission by dispensing with connection setup and header complexity.

Adım Adım Çözüm

1
Analyze transport protocol connection state requirements.
Identify that UDP does not initiate sessions using a three-way handshake (SYN, SYN-ACK, ACK), making it connectionless.
Eliminates delay associated with connection establishment, ideal for time-sensitive applications like voice conferencing.
2
Compare transport layer header fields and overhead.
Confirm that UDP headers consist of only 4 fields totaling 8 bytes, whereas TCP headers require a minimum of 20 bytes.
The smaller header footprint minimizes processing overhead and reduces bandwidth consumption.
3
Evaluate distractor claims against UDP capabilities.
Recognize that sequence/acknowledgment tracking and sliding window flow control belong to stateful TCP operations.
UDP leaves packet ordering and reliability functions to higher-layer application protocols if needed.

Anahtar Kavram

Connectionless vs Connection-Oriented Transport Protocols and Header Overhead
Tahmini Süre:1m 15s
Soru 12Soru

A network administrator is evaluating campus design options for a multi-floor office building with modest bandwidth requirements. The team decides to implement a 2-Tier Collapsed Core topology instead of a traditional 3-Tier Cisco Campus architecture. Which of the following statements accurately describe the structural and operational traits of this Collapsed Core design? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The core and distribution layer functions are merged onto the same physical switch platform or redundant switch pair.; It reduces hardware expenditure and management overhead while providing adequate scalability for smaller to medium-sized networks.

Cevap

The correct statements are that the core and distribution layer functions are merged onto the same physical switch platform or redundant switch pair, and that the design reduces hardware expenditure and management overhead while providing adequate scalability for smaller to medium-sized networks.
A 2-Tier Collapsed Core architecture combines the functional responsibilities of the distribution layer (routing boundaries, policy enforcement, VLAN aggregation) and core layer (high-speed transport) into a single logical or physical layer. This approach lowers equipment expenditures, simplifies maintenance, and provides an efficient design for small-to-medium enterprise campuses.

Adım Adım Çözüm

1
Analyze the structural definition of a 2-Tier Collapsed Core architecture.
Identify that the core and distribution layers of a traditional 3-Tier model are combined into unified hardware.
This consolidation eliminates one tier of switches to simplify network complexity for smaller deployments.
2
Evaluate the financial and operational benefits of collapsing the core and distribution layers.
Recognize that fewer physical devices result in lower capital costs and simplified management.
Smaller campus environments do not generate enough inter-building aggregate traffic to justify a standalone core layer.
3
Differentiate access layer responsibilities and STP configuration rules.
Confirm that access switches remain necessary and that PortFast must not be applied to switch-to-switch trunks.
PortFast applied to switch interconnects leads to bridging loops, while access switches provide endpoint connectivity and local security enforcement.

Anahtar Kavram

Cisco 2-Tier Collapsed Core Campus Architecture
Soru 13Soru

A network engineer is configuring IP address assignments for client workstations within a corporate VLAN allocated the 10.150.32.0/2110.150.32.0/21 IPv4 block. Which two IP addresses are valid host addresses that can be assigned to devices on this subnet?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: 10.150.35.25510.150.35.255; 10.150.39.25410.150.39.254

Cevap

The valid host addresses are 10.150.35.25510.150.35.255 and 10.150.39.25410.150.39.254.
For the prefix /21/21, the subnet mask is 255.255.248.0255.255.248.0, giving a block size of 88 in the third octet. The subnet 10.150.32.0/2110.150.32.0/21 ranges from network address 10.150.32.010.150.32.0 to broadcast address 10.150.39.25510.150.39.255. The usable host range is 10.150.32.110.150.32.1 through 10.150.39.25410.150.39.254. Both 10.150.35.25510.150.35.255 and 10.150.39.25410.150.39.254 fall within this usable range.

Adım Adım Çözüm

1
Determine the subnet mask and block size for a /21 prefix
Prefix /21 corresponds to subnet mask 255.255.248.0. The third octet block size is 256 - 248 = 8.
Calculating block size in the interesting octet establishes subnet boundaries.
2
Calculate the network and broadcast addresses for the 10.150.32.0/21 subnet
Network address is 10.150.32.0. The next subnet starts at 10.150.40.0. Therefore, the broadcast address is 10.150.39.255.
Subnet boundaries define the start and end of the address block.
3
Determine the usable host IP address range
Usable host range spans from 10.150.32.1 to 10.150.39.254 inclusive.
Usable host IPs exclude the network ID (all host bits 0) and broadcast ID (all host bits 1).
4
Evaluate the given options against the usable host range
10.150.35.255 and 10.150.39.254 lie between 10.150.32.1 and 10.150.39.254. Address 10.150.39.255 is the broadcast IP and 10.150.40.0 belongs to the next subnet.
Verifies which IP addresses fall within the valid host envelope.

Anahtar Kavram

Usable host address range determination for IPv4 subnets with non-byte-aligned prefixes
Soru 14Soru

A network engineer is designing a 10 Gigabit Ethernet trunk link between two distribution switches located 250 meters apart in a campus environment. Which of the following transceiver and cabling combinations will successfully establish and support this 10 Gbps connection over the specified distance? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: 10GBASE-SR SFP+ transceivers connected via OM3 multimode fiber optic cabling; 10GBASE-LR SFP+ transceivers connected via single-mode fiber optic cabling

Cevap

The 10 Gigabit Ethernet link over 250 meters can be supported using 10GBASE-SR transceivers with OM3 multimode fiber or 10GBASE-LR transceivers with single-mode fiber.
The combination of 10GBASE-SR with OM3 multimode fiber supports 10 Gbps up to 300 meters, which comfortably reaches the required 250 meters. Similarly, 10GBASE-LR transceivers with single-mode fiber support 10 Gbps up to 10 kilometers, making both options fully compliant with the design constraints.

Adım Adım Çözüm

1
Evaluate bandwidth and physical distance parameters.
Required data rate is 10 Gbps; required distance is 250 meters.
Transceiver optics and media standards are defined by maximum supported reach and speed capabilities.
2
Analyze multimode fiber (MMF) specifications for 10 Gbps operation.
10GBASE-SR over OM3 MMF supports distances up to 300 m (and up to 400 m on OM4), whereas legacy OM1 MMF only supports up to 33 m.
OM3 fiber has higher modal bandwidth allowing 10GBASE-SR light signals to travel up to 300 meters without unacceptable modal dispersion.
3
Analyze single-mode fiber (SMF) specifications for 10 Gbps operation.
10GBASE-LR over SMF supports distances up to 10 km (10,000 meters).
Single-mode fiber uses narrow core diameters and lasers, eliminating modal dispersion and easily covering 250 meters.

Anahtar Kavram

Physical Interface and Cabling Specifications for Ethernet Transceivers
Tahmini Süre:1m 30s
Soru 15Soru

A network operations engineer is provisioning IPv6 static routing on router Edge-Rtr. The design requirements specify:
1. All default traffic must be forwarded to the primary service provider gateway at global unicast address 2001:db8:1000:1::12001:\text{db8}:1000:1::1.
2. A backup static route for internal network 2001:db8:abc:10::/642001:\text{db8}:\text{abc}:10::/64 must direct traffic to link-local next-hop address fe80::2\text{fe80}::2 across exit interface GigabitEthernet0/0/1, functioning as a floating route to back up a primary OSPFv3 route (administrative distance 110).

Which TWO Cisco IOS configuration commands correctly fulfill these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: ipv6 route ::/0 2001:db8:1000:1::1; ipv6 route 2001:db8:abc:10::/64 GigabitEthernet0/0/1 fe80::2 120

Cevap

The correct commands are 'ipv6 route ::/0 2001:db8:1000:1::1' for default routing to the global unicast address, and 'ipv6 route 2001:db8:abc:10::/64 GigabitEthernet0/0/1 fe80::2 120' for the fully-specified floating static route.
The command configuring the default prefix '::/0' to the global unicast address correctly establishes default forwarding. The command referencing prefix '2001:db8:abc:10::/64' with interface 'GigabitEthernet0/0/1', link-local address 'fe80::2', and administrative distance '120' correctly satisfies all syntax rules for link-local next hops and floating route precedence.

Adım Adım Çözüm

1
Identify the proper prefix and syntax for an IPv6 default static route.
The IPv6 default route prefix is ::/0::/0. When using a global unicast next hop, specifying an exit interface is optional.
Global unicast addresses are globally reachable and routable without explicit interface disambiguation.
2
Identify the mandatory syntax requirements when using an IPv6 link-local address as a next-hop.
Because link-local addresses (FE80::/10) are non-routable outside their local link, Cisco IOS requires specifying the local outbound exit interface along with the link-local next-hop address.
Without specifying the exit interface, the router cannot determine which local interface connects to the target link-local neighbor.
3
Evaluate the administrative distance requirement for floating static routes.
The floating static route must have an administrative distance greater than the active route protocol (OSPFv3 AD = 110), so an AD of 120 is required.
Routes with lower administrative distance values take priority in the routing table.

Anahtar Kavram

IPv6 static route configuration syntax, link-local next-hop requirements, and floating static route administrative distance manipulation.
Soru 16Soru

A network administrator is creating an IPv4 extended named Access Control List (ACL) called `MGMT_FILTER` to enforce security policies on a router interface. The policy mandates the following conditions:
- Permit HTTP (8080) and SSH (2222) traffic originating from subnet 192.168.1.0/24192.168.1.0/24 destined to a specific management server at 10.0.5.1010.0.5.10.
- Deny all other IP traffic from subnet 192.168.1.0/24192.168.1.0/24 destined to subnet 10.0.5.0/2410.0.5.0/24.
- Allow all remaining IPv4 traffic traversing the interface to reach other destinations.

Which TWO statements or configuration requirements are necessary to correctly fulfill this policy? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Place `permit tcp 192.168.1.0 0.0.0.255 host 10.0.5.10 eq 80` and `permit tcp 192.168.1.0 0.0.0.255 host 10.0.5.10 eq 22` prior to the subnet deny entry.; Add an explicit `permit ip any any` entry at the end of the access list sequence.

Cevap

The policy requires placing specific TCP permit statements for HTTP and SSH to host 10.0.5.10 before the broader subnet deny rule, and appending an explicit 'permit ip any any' at the end of the ACL to override the default implicit deny.
The solution requires two essential steps: placing specific permit statements for HTTP and SSH to host 10.0.5.10 ahead of the broader subnet deny rule (so specific allowed traffic is processed first), and adding an explicit 'permit ip any any' statement at the bottom of the ACL to override the invisible implicit 'deny ip any any' clause that would otherwise block all other traffic.

Adım Adım Çözüm

1
Evaluate Top-Down Sequential Processing
Specific host rules must be placed above general subnet rules.
Cisco IOS processes ACL entries sequentially. If the subnet deny rule for 10.0.5.0/24 were placed first, traffic to 10.0.5.10 on ports 80 and 22 would match the deny rule and be dropped before hitting the permit rules.
2
Account for Implicit Deny Behavior
An explicit 'permit ip any any' line must be added to the end of the ACL.
All Cisco ACLs end with an invisible implicit 'deny ip any any' statement. To permit traffic destined for other subnets outside 10.0.5.0/24, an explicit permit all rule is required at the end.

Anahtar Kavram

Access Control List (ACL) Evaluation Order and Implicit Deny Behavior
Soru 17Soru

A network administrator is configuring IPv4 static routing on router R1. Router R1 currently learns the primary route to destination network 192.168.50.0/24192.168.50.0/24 via iBGP, which has an Administrative Distance of 200. The administrator must configure two static routes:
1. A standard static route to reach network 10.100.1.0/2410.100.1.0/24 via next-hop IPv4 address 172.16.1.2172.16.1.2.
2. A backup floating static route to reach network 192.168.50.0/24192.168.50.0/24 via next-hop IPv4 address 172.16.1.2172.16.1.2 that remains inactive until the primary iBGP route fails.

Which two `ip route` commands must the administrator configure on router R1?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: ip route 10.100.1.0 255.255.255.0 172.16.1.2; ip route 192.168.50.0 255.255.255.0 172.16.1.2 210

Cevap

The commands 'ip route 10.100.1.0 255.255.255.0 172.16.1.2' and 'ip route 192.168.50.0 255.255.255.0 172.16.1.2 210' are correct.
The command 'ip route 10.100.1.0 255.255.255.0 172.16.1.2' is correct because it follows standard IPv4 static route syntax to direct traffic destined for network 10.100.1.0/24 to next-hop address 172.16.1.2. The command 'ip route 192.168.50.0 255.255.255.0 172.16.1.2 210' is correct because a floating static route requires an Administrative Distance higher than the primary route (iBGP AD = 200); setting the AD to 210 ensures it remains inactive until the primary route fails.

Adım Adım Çözüm

1
Identify standard Cisco IOS static route syntax for network 10.100.1.0/24
ip route 10.100.1.0 255.255.255.0 172.16.1.2
Standard IPv4 static routes use the syntax 'ip route <destination-prefix> <subnet-mask> <next-hop-ip>' with a default Administrative Distance of 1.
2
Determine Administrative Distance requirement for the backup floating static route
Target Administrative Distance must be > 200
A floating static route acts as a backup only when its Administrative Distance is configured higher than the primary path's routing protocol (iBGP AD = 200).
3
Select the correct floating static route command
ip route 192.168.50.0 255.255.255.0 172.16.1.2 210
Specifying an Administrative Distance of 210 ensures the static route remains out of the routing table until the iBGP route (AD 200) is lost.

Anahtar Kavram

IPv4 Static Route Syntax and Floating Static Route Administrative Distance Selection
Soru 18Soru

A network technician is evaluating transport layer requirements for real-time application traffic. Which two features are characteristic of the User Datagram Protocol (UDP) rather than the Transmission Control Protocol (TCP)? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Low fixed header size of 8 bytes; Connectionless datagram delivery without handshake overhead

Cevap

The characteristics unique to UDP are its low fixed header size of 8 bytes and its connectionless datagram delivery without handshake overhead.
The correct features of UDP are its minimal 8-byte header length and connectionless nature, which avoids connection setup delays.

Adım Adım Çözüm

1
Identify transport layer protocol overhead differences
UDP relies on a simple 8-byte header (Source Port, Destination Port, Length, Checksum), whereas TCP requires a minimum 20-byte header.
Understanding header structure helps evaluate bandwidth and processing efficiency.
2
Evaluate connection state properties
UDP operates connectionlessly without requiring a initial three-way handshake.
Connectionless delivery minimizes latency for real-time applications.

Anahtar Kavram

UDP is a lightweight, connectionless transport layer protocol with minimal header overhead (8 bytes) and no built-in flow control or reliability mechanisms.
Soru 19Soru

An administrator is configuring IPv6 addressing on a router interface and verifying reserved scope prefixes. Which two statements correctly describe IPv6 address representations and reserved prefix ranges? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The prefix fe80::/10 is reserved for IPv6 link-local addresses.; The IPv6 loopback address is represented as ::1/128.

Cevap

The prefix fe80::/10 is reserved for IPv6 link-local addresses, and the IPv6 loopback address is represented as ::1/128.
Link-local addresses strictly use the fe80::/10 prefix, and the loopback address for an IPv6 host interface is ::1/128.

Adım Adım Çözüm

1
Identify the reserved prefix ranges for link-local and unique local IPv6 address scopes.
The prefix fe80::/10 corresponds to link-local unicast addresses. The prefix fc00::/7 corresponds to Unique Local Addresses (ULA), not global unicast addresses (which use 2000::/3).
Understanding IPv6 scope prefixes is required to properly categorize address types.
2
Evaluate the rules of IPv6 address compression and special addresses.
The double colon (::) compression mechanism is allowed only once per address to maintain uncompressed length integrity. The IPv6 loopback address is designated as ::1/128.
RFC 4291 specifies rules for shortening IPv6 addresses and designates ::1/128 for node loopback testing.

Anahtar Kavram

IPv6 Address Scopes and Zero Compression Rules
Soru 20Soru

An enterprise network engineer is analyzing DNS name resolution behavior across internal workstations and external edge firewalls. The infrastructure uses an internal Active Directory DNS server that forwards unknown domain requests to an external resolver. Which two statements correctly describe DNS transport protocol operation and name resolution roles in this environment?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Standard DNS queries and responses primarily utilize UDP port 53, but DNS transitions to TCP port 53 when a response payload exceeds 512 bytes (without EDNS0 extensions).; The internal Active Directory DNS server acts as a recursive resolver for enterprise client hosts while functioning as an authoritative server for the local internal domain namespace.

Cevap

The correct statements are that DNS queries primarily use UDP port 53 but switch to TCP port 53 when response payloads exceed 512 bytes without EDNS0, and that the internal Active Directory DNS server acts as a recursive resolver for internal clients while being authoritative for the local domain.
The correct options accurately identify that DNS relies primarily on UDP port 53 for standard client lookups, switching to TCP port 53 when responses exceed 512 bytes without EDNS0 extensions. Additionally, they correctly identify that an internal enterprise DNS server serves a dual role: authoritative for internal zone records and recursive resolver for endpoint clients requesting external or un-cached domain names.

Adım Adım Çözüm

1
Analyze transport layer protocol usage for DNS queries and responses.
DNS uses UDP port 53 for standard low-overhead queries and responses under 512 bytes. If a response sets the Truncation (TC) bit because it exceeds 512 bytes, the client re-issues the query using TCP port 53.
UDP avoids connection establishment latency for small lookup packets, but TCP provides reliable stream delivery for oversized payloads.
2
Evaluate the distinction between authoritative DNS servers and recursive resolvers.
An internal Active Directory DNS server holds authoritative records for internal resources (such as domain controllers and local hostnames) and resolves non-local queries on behalf of client hosts recursively or via forwarders.
Clients do not query root and TLD servers directly; they rely on their configured recursive resolver to navigate the DNS hierarchy or forward requests.
3
Evaluate incorrect protocol and role assumptions.
Zone transfers require TCP port 53 due to database size and reliability requirements. Clients do not default to TCP port 53 for normal queries, nor do authoritative-only servers perform recursion for external clients.
Distinguishing between control plane operations (zone transfers), data plane lookups (client queries), and server roles (authoritative vs. recursive) clarifies correct DNS architecture.

Anahtar Kavram

DNS Transport Protocols and Server Roles in Enterprise Networks
Sayfa 1 / 23Sonraki
Tüm alıştırma soruları — Cisco CCNA | Examkin