Network Fundamentals

398 soru

Soru 181Soru

A network administrator is allocating IPv4 addresses for internal workstations on an enterprise LAN. Which of the following IPv4 addresses are reserved for private network use under RFC 1918? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: 10.200.15.1; 172.28.45.10

Cevap

The addresses 10.200.15.1 and 172.28.45.10 are reserved private IPv4 addresses under RFC 1918.
The IPv4 address 10.200.15.1 belongs to the 10.0.0.0/8 private address block, and 172.28.45.10 belongs to the 172.16.0.0/12 private address block (which ranges from 172.16.0.0 to 172.31.255.255). Both are valid RFC 1918 private IPv4 addresses.

Adım Adım Çözüm

1
Identify the three RFC 1918 private address ranges
Class A: 10.0.0.0/8 (10.0.0.0 - 10.255.255.255), Class B: 172.16.0.0/12 (172.16.0.0 - 172.31.255.255), Class C: 192.168.0.0/16 (192.168.0.0 - 192.168.255.255).
RFC 1918 explicitly defines these three address blocks for private, unroutable network use.
2
Evaluate each candidate address against the RFC 1918 blocks
10.200.15.1 is inside 10.0.0.0/8. 172.28.45.10 is inside 172.16.0.0/12. 172.35.10.50 is outside 172.16.0.0/12 (35 > 31). 192.170.10.1 is outside 192.168.0.0/16 (170 != 168).
Comparing second octets ensures correct boundary verification for Class B and Class C private ranges.

Anahtar Kavram

RFC 1918 Private IPv4 Address Ranges
Soru 182Soru

A network auditing tool generates a report listing IPv4 addresses detected on internal branch office node interfaces. Which of the following IPv4 addresses are compliant with RFC 1918 private IP addressing standards? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: 10.254.1.50; 172.29.40.10

Cevap

The IPv4 addresses 10.254.1.50 and 172.29.40.10 are valid RFC 1918 private IPv4 addresses.
The addresses 10.254.1.50 and 172.29.40.10 fit directly inside the RFC 1918 standard private ranges: 10.0.0.0/8 (10.0.0.0 to 10.255.255.255) and 172.16.0.0/12 (172.16.0.0 to 172.31.255.255) respectively.

Adım Adım Çözüm

1
Recall the three designated RFC 1918 private IPv4 address ranges.
Class A: 10.0.0.0/8 (10.0.0.0 – 10.255.255.255), Class B: 172.16.0.0/12 (172.16.0.0 – 172.31.255.255), Class C: 192.168.0.0/16 (192.168.0.0 – 192.168.255.255).
Establishing accurate range boundaries is necessary to differentiate private non-routable IPs from public IPs.
2
Evaluate candidate address 10.254.1.50 against the RFC 1918 specifications.
10.254.1.50 begins with 10 in the first octet, making it a valid member of the 10.0.0.0/8 block.
Any IP starting with 10.x.x.x is private under RFC 1918.
3
Evaluate candidate address 172.29.40.10 against the RFC 1918 specifications.
172.29.40.10 has a second octet of 29, which lies within the inclusive 16–31 range for the 172.16.0.0/12 block.
Addresses from 172.16.0.0 through 172.31.255.255 are valid private addresses.
4
Evaluate invalid candidate addresses 172.33.1.1 and 192.169.50.25.
172.33.1.1 falls outside the 172.16–172.31 range, and 192.169.50.25 falls outside the 192.168.0.0/16 range.
Both 172.33.x.x and 192.169.x.x are public IPv4 addresses assigned on the Internet.

Anahtar Kavram

RFC 1918 Private IPv4 Address Scope
Soru 183Soru

A network engineer is analyzing application traffic across an enterprise WAN link between a real-time voice streaming service and a critical transactional database connection. Which two operational characteristics accurately distinguish User Datagram Protocol (UDP) from Transmission Control Protocol (TCP) in this scenario? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: UDP operates with a fixed 8-byte header structure and omits delivery acknowledgments, minimizing processing latency for real-time traffic.; TCP maintains stateful connection tracking using a baseline 20-byte header that incorporates sequence numbers, acknowledgment numbers, and dynamic windowing controls.

Cevap

UDP provides a low-overhead, connectionless service with an 8-byte header without acknowledgments, whereas TCP provides a stateful, connection-oriented service with a 20-byte baseline header supporting sequence tracking, acknowledgments, and flow control.
The correct statements correctly identify that UDP utilizes a streamlined 8-byte header without delivery acknowledgments to minimize real-time latency, whereas TCP utilizes a 20-byte baseline header containing sequence numbers, acknowledgment numbers, and dynamic windowing to ensure connection-oriented reliability and flow control.

Adım Adım Çözüm

1
Analyze Transport Layer header overhead for each protocol.
UDP uses a streamlined 8-byte header consisting of 4 fields (Source Port, Destination Port, Length, Checksum), while TCP requires at least a 20-byte header to accommodate stateful connection controls.
Header size directly impacts per-packet transport overhead and throughput latency.
2
Evaluate reliability and flow control mechanics.
TCP provides flow control via dynamic windowing and reliable delivery via sequence and acknowledgment numbers. UDP provides no native flow control, sequencing, or retransmission mechanisms.
Distinguishing stateful connection-oriented mechanics from stateless connectionless operation is essential for application protocol selection.

Anahtar Kavram

TCP vs UDP Header Fields and Operational Characteristics
Soru 184Soru

A network administrator is troubleshooting a router interface that fails to forward traffic. The administrator issues the command `show interfaces gigabitethernet 0/1` and observes the following output status line:

`GigabitEthernet0/1 is administratively down, line protocol is down`

Which action must be taken to enable this interface?

Cevabı ve açıklamayı göster

Cevap: Execute the `no shutdown` command in interface configuration mode.

Cevap

Execute the `no shutdown` command in interface configuration mode.
The state 'administratively down' always indicates that the administrator disabled the interface via configuration (`shutdown`). Executing `no shutdown` in interface configuration mode is the direct fix required to enable the port.

Adım Adım Çözüm

1
Analyze the output of `show interfaces gigabitethernet 0/1`.
The physical layer status reports 'administratively down'.
In Cisco IOS, 'administratively down' explicitly indicates an administrative configuration state where the `shutdown` command is present under the interface.
2
Determine the required CLI command to change the administrative state.
Navigating to interface configuration mode (`config-if`) and entering `no shutdown` removes the shutdown state.
The `no shutdown` command administratively enables the interface, allowing it to transition to an operational status.

Anahtar Kavram

Interface Administrative Status vs. Physical/Line Protocol States
Tahmini Süre:45s
Soru 185Soru

A system administrator is setting up an internal application server and needs to assign an IPv4 address from the RFC 1918 Class B private address space. Which of the following IPv4 addresses is a valid private IP address within this Class B block?

Cevabı ve açıklamayı göster

Cevap: 172.20.15.5

Cevap

172.20.15.5 is a valid RFC 1918 Class B private IPv4 address.
RFC 1918 defines the Class B private IPv4 space as 172.16.0.0 to 172.31.255.255 (172.16.0.0/12). The address 172.20.15.5 falls directly inside this range because its second octet (20) is within the 16–31 boundary.

Adım Adım Çözüm

1
Identify the RFC 1918 Class B private IPv4 address block boundaries.
The Class B private address range is 172.16.0.0 to 172.31.255.255 (with a /12 prefix length).
RFC 1918 reserves specific IPv4 address spaces for internal, non-globally routable enterprise networks.
2
Evaluate the candidate IPv4 addresses against the Class B boundary range.
172.20.15.5 has a second octet value of 20, which lies inclusively between 16 and 31.
Any IP address starting with 172.16.x.x through 172.31.x.x is part of the RFC 1918 Class B private allocation.

Anahtar Kavram

RFC 1918 Private IPv4 Addressing
Soru 186Soru

A network administrator is troubleshooting poor throughput on a switch port connected to a server. Running the show interfaces command reveals a rapidly incrementing counter for cyclic redundancy check (CRC) errors alongside late collisions. Which TWO issues are the most likely root causes of these interface statistics? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A duplex mismatch between the switch port and the connected server interface.; Physical layer noise or damage on the copper Ethernet cable connection.

Cevap

The most likely root causes are a duplex mismatch between the switch port and the connected device, and physical layer noise or damage on the Ethernet cable connection.
Late collisions typically indicate a duplex mismatch where one end operates in full-duplex mode while the other operates in half-duplex mode. CRC errors indicate corrupted frames resulting from electrical interference, loose connectors, bad cable shielding, or damaged media.

Adım Adım Çözüm

1
Analyze the reported interface error counters (CRC errors and late collisions).
Identify that late collisions occur when collisions are detected after the first 64 bytes of a frame have been transmitted, while CRC errors indicate frame corruption during transit.
Understanding what layer these counters operate on isolates the issue to Layer 1 (physical) and Layer 2 (data link speed/duplex negotiation).
2
Evaluate potential causes for late collisions.
A duplex mismatch (one side set to full-duplex and the other to half-duplex) causes the half-duplex side to transmit while receiving data, generating late collisions.
Late collisions are classic symptoms of duplex mismatches or excessive cable lengths exceeding maximum Ethernet distance standards.
3
Evaluate potential causes for CRC (Cyclic Redundancy Check) errors.
CRC errors occur when the checksum computed by the receiving interface does not match the checksum frame check sequence (FCS) sent by the transmitter, typical of faulty cabling or bad connectors.
Physical medium flaws cause electrical noise and flipped bits during frame transmission.

Anahtar Kavram

Interface Error Statistics & Duplex Mismatches
Soru 187Soru

Which TWO 802.11 frame sub-types are categorized as Management frames in a Wi-Fi network? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Beacon; Authentication

Cevap

Beacon and Authentication frames are classified as 802.11 Management frames.
Beacon and Authentication frames are 802.11 Management frames. Beacon frames broadcast BSSID and network capabilities to discovery clients, while Authentication frames initiate client joining procedures.

Adım Adım Çözüm

1
Categorize 802.11 frame types into Management, Control, and Data.
Management frames handle join/leave functions (Beacon, Probe, Authentication, Association). Control frames assist in data delivery (RTS, CTS, ACK).
802.11 defines three primary frame classes to govern media access and network membership.
2
Identify the Management frames from the listed options.
Beacon and Authentication are Management frames, whereas RTS, CTS, and ACK are Control frames.
Beacon frames advertise WLAN parameters, while Authentication frames handle client access validation.

Anahtar Kavram

802.11 Wireless Frame Types (Management vs Control vs Data)
Soru 188Soru

An enterprise network architect is reviewing packet forwarding behaviors and isolation boundaries across a hybrid campus and data center environment containing bare-metal hypervisors, Layer 3 distribution switches, Next-Generation Firewalls (NGFWs), and centralized Wireless LAN Controllers (WLCs). Which TWO operational characteristics accurately describe the roles and functions of these network components? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A virtual switch embedded within a Type 1 hypervisor forwards Layer 2 frames between co-located virtual machines on the same physical host without sending traffic out through physical network interface cards.; A Next-Generation Firewall operates as a stateful security gateway that maintains flow state tables to inspect both initial connection establishment packets and subsequent session traffic across trust zones.

Cevap

The correct operational characteristics are that virtual switches in Type 1 hypervisors process frame switching locally between co-located virtual machines, and Next-Generation Firewalls maintain stateful connection tables to evaluate session flows across network security boundaries.
The statements describing local VM frame forwarding inside a Type 1 hypervisor virtual switch and stateful session tracking by Next-Generation Firewalls are correct. Virtual switches handle intra-host Layer 2 communication in memory without sending frames out through physical network interface cards. Next-Generation Firewalls maintain state tables for connected sessions to inspect both initial handshakes and subsequent payload data.

Adım Adım Çözüm

1
Analyze the operational role of Type 1 hypervisor virtual switches.
Recognize that internal vSwitches handle Layer 2 switching between VMs residing on the same physical hardware within memory, avoiding unnecessary physical interface overhead.
Hypervisor architectures include software-based Layer 2 forwarding constructs to optimize intra-host communication.
2
Evaluate the stateful inspection mechanism of NGFW security components.
Confirm that stateful firewalls track protocol session states across interfaces, allowing return traffic automatically while enforcing policy rules on deep packet payloads.
Firewalls function beyond basic Layer 3/4 filtering by keeping state tables for active connections.
3
Examine common misconceptions regarding broadcast domain boundaries and WLC operating modes.
Identify that unmanaged Layer 2 switches do not break broadcast domains, and Local mode APs tunnel client traffic centrally to WLCs rather than utilizing Type 2 hypervisors.
Routers and VLAN boundaries separate broadcast domains, while Local mode APs rely on centralized CAPWAP datapath encapsulation.

Anahtar Kavram

Operational roles of virtual switches, NGFWs, Layer 2 boundaries, and centralized WLCs in enterprise architectures
Tahmini Süre:2m 0s
Soru 189Soru

A network technician needs to connect multiple endpoint devices in a local office environment. The operational requirement dictates that each connected device must reside in its own dedicated collision domain while all devices remain within a single, shared broadcast domain for local communication. Which network component fulfills this primary role?

Cevabı ve açıklamayı göster

Cevap: Layer 2 switch

Cevap

Layer 2 switch
A Layer 2 switch provides microsegmentation, placing every connected port into its own individual collision domain. However, unless VLANs are configured, all switch ports reside within a single broadcast domain, allowing broadcast frames to reach all connected endpoints.

Adım Adım Çözüm

1
Identify collision domain capabilities
Each microsegmented port on a Layer 2 switch forms its own distinct collision domain.
Switches buffer frames per port and support full-duplex operation, eliminating collisions between endpoints.
2
Identify broadcast domain capabilities
By default, all ports on an unconfigured Layer 2 switch belong to the same broadcast domain.
Switches flood Layer 2 broadcast frames out all active ports except the receiving port within the same VLAN.

Anahtar Kavram

Layer 2 Switch Domain Boundaries
Tahmini Süre:45s
Soru 190Soru

An enterprise network engineer is reviewing the functional boundaries of network components deployed at a branch office. The topology includes Layer 2 access switches, a Layer 3 distribution switch acting as the Inter-VLAN routing gateway, and a perimeter router. Which two functions are performed by Layer 3 switches or routers, but are NOT supported on standard Layer 2 switches? (Choose two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Forwarding traffic between different IPv4 subnets using IP header destination addresses; Containing broadcast traffic to specific VLANs by acting as default gateways for routed subnets

Cevap

The functions performed exclusively by Layer 3 switches or routers are forwarding traffic between different IPv4 subnets based on destination IP addresses and containing broadcast domains by acting as default gateways.
Layer 3 switches and routers operate at Layer 3 of the OSI model, allowing them to inspect destination IP addresses to route packets between distinct subnets and restrict broadcast traffic from crossing subnets. Standard Layer 2 switches only forward frames within a single VLAN based on Layer 2 MAC addresses.

Adım Adım Çözüm

1
Analyze the operational capabilities of standard Layer 2 switches
Layer 2 switches make forwarding decisions based on Layer 2 MAC addresses within a single broadcast domain/subnet and separate collision domains per port.
Layer 2 switches lack routing logic and routing tables needed to forward packets across different subnets.
2
Analyze the operational capabilities of Layer 3 switches and routers
Layer 3 switches and routers inspect Layer 3 IP headers to route packets between subnets and define broadcast domain boundaries.
Broadcast frames are not forwarded past Layer 3 boundaries (routers/L3 interfaces), isolating broadcast domains.
3
Compare capabilities and identify unique Layer 3 functions
Inter-subnet routing based on IP destination addresses and broadcast domain isolation are Layer 3 routing functions.
Collision domain isolation is accomplished by both Layer 2 and Layer 3 switches on every port.

Anahtar Kavram

Distinguishing Layer 2 switching capabilities (MAC addressing, collision domain segmentation) from Layer 3 routing capabilities (IP addressing, inter-subnet forwarding, broadcast domain segmentation).
Tahmini Süre:1m 30s
Soru 191Soru

A network engineer is optimizing a high-density 5 GHz wireless deployment in a large corporate conference hall. During testing, wireless clients experience significant performance degradation and latency due to co-channel interference (CCI) caused by adjacent access points operating on overlapping RF cells using the same 20 MHz channels. The engineer must reduce CCI while keeping all access points active to handle client capacity. Which action on the Wireless LAN Controller (WLC) directly resolves this issue?

Cevabı ve açıklamayı göster

Cevap: Decrease the Transmit Power Control (TPC) maximum power threshold on the WLC to shrink the RF cell size of each access point.

Cevap

Decrease the Transmit Power Control (TPC) maximum power threshold on the WLC to shrink the RF cell size of each access point.
Decreasing the Transmit Power Control (TPC) maximum power limit forces the Wireless LAN Controller to restrict the output power of individual AP radios. This reduces each AP's RF coverage cell radius, minimizing signal overlap with neighboring APs on the same channel and reducing co-channel interference (CCI) in high-density environments.

Adım Adım Çözüm

1
Analyze the primary cause of wireless performance degradation in high-density environments.
Co-channel interference (CCI) occurs when multiple access points using the same frequency channel are located close enough for their RF coverage cells to overlap, forcing clients and APs to wait for the medium to clear.
Wi-Fi uses CSMA/CA, so APs on the same channel share contention domains if they hear each other above the clear channel assessment threshold.
2
Evaluate how Transmit Power Control (TPC) affects RF cell boundaries and co-channel overlap.
Lowering the maximum allowed transmit power via TPC shrinks the physical RF cell boundary of each AP.
Smaller RF cell footprints reduce the coverage overlap between APs operating on identical channels while preserving total network capacity through dense AP placement.
3
Identify why alternative configuration options fail to mitigate CCI.
Channel bonding decreases the total count of non-overlapping channels, FlexConnect affects traffic switching rather than RRM calculations, and lowering basic rates increases cell size and management overhead.
Only TPC power reduction directly curtails the physical reach of the RF signal causing CCI.

Anahtar Kavram

Wireless Radio Resource Management (RRM) and Co-Channel Interference (CCI) mitigation in high-density WLAN deployments.
Soru 192Soru

An enterprise server administrator is investigating severe packet delay and high CPU scheduling contention affecting virtual machines during peak traffic periods. Inspection reveals that the virtualization environment operates on top of a standard Linux distribution host operating system, requiring the virtual switch to pass frame processing requests through the host OS kernel and physical device drivers. Which architectural migration eliminates host operating system overhead by allowing the hypervisor to directly schedule hardware resources and manage physical network interfaces?

Cevabı ve açıklamayı göster

Cevap: Deploying a Type 1 bare-metal hypervisor directly on the underlying server hardware.

Cevap

Deploying a Type 1 bare-metal hypervisor directly on the underlying server hardware resolves host operating system overhead.
Migrating to a Type 1 (bare-metal) hypervisor places the hypervisor software directly on the server hardware. This removes the host operating system layer completely, allowing the hypervisor's virtual switch to interact directly with physical hardware NIC drivers and CPU schedulers for maximum throughput and minimum latency.

Adım Adım Çözüm

1
Analyze the existing virtualization platform architecture.
Identified that the current environment uses a Type 2 (hosted) hypervisor running on top of a general-purpose host OS (Linux).
Type 2 hypervisors depend on the underlying host OS to manage hardware access, CPU scheduling, and physical device drivers, creating network latency and processing bottlenecks.
2
Identify the hypervisor architecture designed for bare-metal hardware control.
A Type 1 (bare-metal) hypervisor runs directly on physical hardware without requiring a separate host operating system.
Type 1 hypervisors incorporate lightweight management kernels that handle CPU, memory, and physical network interface scheduling directly, yielding higher efficiency and lower latency.
3
Select the appropriate migration path.
Migrating to a Type 1 hypervisor architecture removes the host OS layer entirely.
Direct access to physical hardware drivers and integrated virtual switching inside a Type 1 hypervisor eliminates kernel-level context switching between host OS and hypervisor.

Anahtar Kavram

Type 1 vs Type 2 Hypervisor Architecture
Tahmini Süre:1m 30s
Soru 193Soru

An administrator is documenting the 802.11 wireless architecture for a corporate office. Which identifier uniquely distinguishes a specific Basic Service Set (BSS) operating on an access point radio at the Layer 2 data link layer?

Cevabı ve açıklamayı göster

Cevap: The MAC address of the access point's radio interface (BSSID)

Cevap

The MAC address of the access point's radio interface (BSSID) uniquely identifies a specific Basic Service Set (BSS).
The correct answer identifies the Basic Service Set Identifier (BSSID), which is the 48-bit MAC address of the access point radio serving a specific wireless cell (BSS). In 802.11 networks, this hardware address uniquely distinguishes frame traffic sent to or from that particular radio.

Adım Adım Çözüm

1
Identify the standard 802.11 terminology for wireless service sets and their unique identifiers.
A Basic Service Set (BSS) consists of a single access point radio and its associated clients.
Understanding the fundamental building blocks of Wi-Fi coverage cells is necessary for network identification.
2
Determine which parameter acts as the Layer 2 hardware address for a BSS.
The Basic Service Set Identifier (BSSID) is used at Layer 2 and corresponds directly to the 48-bit MAC address of the AP radio servicing that BSS.
Wireless client frames use the BSSID MAC address in 802.11 frame headers to target a specific AP radio.

Anahtar Kavram

Basic Service Set Identifier (BSSID) in 802.11 Wireless Architecture
Tahmini Süre:45s
Soru 194Soru

A network administrator is configuring SLAAC on a router interface for a host with the MAC address `0012.3456.789A`. What is the 64-bit interface identifier generated using the EUI-64 process?

Cevabı ve açıklamayı göster

Cevap: 0212:34ff:fe56:789a

Cevap

The correct interface identifier is 0212:34ff:fe56:789a.
The EUI-64 calculation process requires splitting the 48-bit MAC address (00:12:34:56:78:9A) into two equal halves, inserting FFFE in the middle (0012:34FF:FE56:789A), and flipping the 7th bit of the first byte (00000000 becomes 00000010, or 02 in hex). This yields 0212:34ff:fe56:789a.

Adım Adım Çözüm

1
Split the 48-bit MAC address into two 24-bit halves.
Left half: 00:12:34, Right half: 56:78:9A
EUI-64 requires inserting a 16-bit payload between the Organizationally Unique Identifier (OUI) and the NIC-specific portion.
2
Insert FFFE between the two halves.
00:12:34:FF:FE:56:78:9A
This expands the 48-bit MAC address into a 64-bit value.
3
Invert the 7th bit (Universal/Local bit) of the first byte.
First byte 00 (00000000 in binary) becomes 02 (00000010 in binary). Resulting string: 02:12:34:FF:FE:56:78:9A
Inverting the 7th bit indicates that the address is globally unique.
4
Format the resulting 64-bit value into four 16-bit IPv6 hextets.
0212:34ff:fe56:789a
Standard IPv6 address notation groups 16-bit blocks separated by colons.

Anahtar Kavram

EUI-64 Interface Identifier Generation
Tahmini Süre:45s
Soru 195Soru

Match each enterprise network infrastructure component on the left with its primary operational role on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Router
Layer 2 Switch
Next-Generation Firewall (NGFW)
Wireless LAN Controller (WLC)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Router connects distinct IP subnets using routing tables; Layer 2 Switch forwards local frames based on MAC addresses; Next-Generation Firewall performs deep packet inspection up to Layer 7; Wireless LAN Controller centrally manages lightweight access points.
Each network device performs a specialized role within an enterprise architecture: Routers route IP packets across subnets, Layer 2 Switches switch local Ethernet frames using MAC addresses, Next-Generation Firewalls inspect application payload data for security, and Wireless LAN Controllers centralize management for lightweight APs.

Adım Adım Çözüm

1
Identify the primary role of a Router.
Routers operate at Layer 3 and forward packets between different IP networks and subnets based on destination IP address routing decisions.
Connecting separate networks and determining path selection is the fundamental function of a router.
2
Identify the primary role of a Layer 2 Switch.
Layer 2 switches maintain a MAC address table to switch frames within a single local network/VLAN.
Layer 2 switches isolate collision domains but operate entirely within one broadcast domain.
3
Identify the primary role of a Next-Generation Firewall (NGFW).
NGFWs analyze traffic context and application content from Layer 4 up through Layer 7 to enforce security controls.
Deep packet inspection and application awareness distinguish NGFWs from standard stateful firewalls.
4
Identify the primary role of a Wireless LAN Controller (WLC).
WLCs act as the centralized intelligence hub to manage configuration, security policies, and radio frequencies for lightweight APs.
Split-MAC architectures offload management tasks from APs to the controller.

Anahtar Kavram

Primary operational roles of core network components
Soru 196Soru

A network engineer is analyzing physical radio frequency (RF) propagation behaviors in an enterprise campus facility. Match each RF propagation phenomenon on the left with its corresponding physical behavior or operational impact on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Absorption
Reflection
Refraction
Diffraction

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Absorption pairs with RF energy conversion into heat within dense materials; Reflection pairs with signal bouncing off smooth conductive surfaces; Refraction pairs with wave bending across changing media densities; Diffraction pairs with wave bending around sharp edges of solid obstacles.
Each RF propagation phenomenon describes a distinct physical interaction between wireless signals and environmental structures. Absorption dissipates signal power as heat through materials; Reflection bounces waves off smooth conductive barriers; Refraction bends light and radio waves across atmospheric or density gradients; Diffraction curves waves around sharp obstacle borders.

Adım Adım Çözüm

1
Identify the characteristic of RF Absorption.
Absorption relates directly to energy loss converted into heat within dense physical obstacles like walls.
Dense matter absorbs RF energy, causing direct attenuation.
2
Identify the characteristic of RF Reflection.
Reflection involves RF signals bouncing off large, smooth metallic surfaces.
Conductive surfaces reflect electromagnetic waves, leading to multipath signal paths.
3
Identify the characteristic of RF Refraction.
Refraction describes signal bending caused by variations in propagation media density.
Velocity changes across media boundaries shift the phase and angle of the wave.
4
Identify the characteristic of RF Diffraction.
Diffraction describes signal bending around sharp physical corners or through small openings.
Obstacle edges split and distort the wavefront, creating shadow areas behind the obstacle.

Anahtar Kavram

RF Propagation Phenomena and Signal Impairments
Soru 197Soru

An enterprise network architecture incorporates multiple specialized physical and virtual components across campus, data center, and edge segments. Match each network component on the left to its primary operational function and forwarding behavior on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Next-Generation Firewall (NGFW)
Type 1 Bare-Metal Hypervisor
Wireless LAN Controller (WLC)
Layer 3 Switch

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Next-Generation Firewall (NGFW) matches deep packet inspection up to Layer 7 stateful security enforcement. Type 1 Bare-Metal Hypervisor matches direct hardware execution for managing virtual machines and vSwitches. Wireless LAN Controller (WLC) matches centralized control-plane and dynamic RF management for lightweight APs. Layer 3 Switch matches ASIC-driven, wire-speed inter-VLAN hardware routing.
Each component is accurately paired with its architectural plane and operational behavior: Next-Generation Firewalls handle stateful Layer 7 security inspection; Type 1 Hypervisors execute on bare metal to manage compute virtualization and vSwitches; Wireless LAN Controllers centralize control-plane RF and policy administration for APs; and Layer 3 Switches perform ASIC-accelerated inter-VLAN packet routing at line rate.

Adım Adım Çözüm

1
Analyze the functional boundaries of security appliances.
Identify that Next-Generation Firewalls perform stateful inspection and Layer 7 application inspection rather than basic packet switching.
Security components operate on security zone boundaries to filter traffic based on application signature and state.
2
Distinguish host virtualization architecture from traditional operating systems.
Map the Type 1 hypervisor directly to bare hardware management and internal vSwitch forwarding.
Type 1 hypervisors execute without an underlying host OS, managing compute and virtual network resources directly.
3
Examine wireless centralized control architecture.
Associate the Wireless LAN Controller with centralized control plane tasks, dynamic RF management, and provisioning for lightweight APs.
Split-MAC architecture delegates real-time frame handling to lightweight APs while offloading management and control functions to the WLC.
4
Evaluate LAN routing hardware mechanics.
Connect the Layer 3 switch with ASIC-accelerated inter-VLAN routing.
Layer 3 switches utilize hardware ASICs to route packets between VLANs at line rate with significantly lower latency than software-based routers.

Anahtar Kavram

Enterprise Network Component Roles and Functional Boundaries
Soru 198Soru

Match each Cisco Split-MAC architecture component or CAPWAP feature on the left with its primary function or operational characteristic on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Lightweight Access Point (LAP)
Wireless LAN Controller (WLC)
CAPWAP Control Tunnel
CAPWAP Data Tunnel

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Lightweight Access Point (LAP) matches with handling real-time MAC functions like beacons and probe responses. Wireless LAN Controller (WLC) matches with handling management MAC functions like client authentication and association. CAPWAP Control Tunnel matches with exchanging encrypted management messages over UDP port 5246. CAPWAP Data Tunnel matches with carrying client data traffic over UDP port 5247.
Each component correctly pairs with its role in Cisco centralized wireless deployment: LAPs handle real-time RF MAC duties locally; WLCs handle management MAC functions centrally; CAPWAP Control operates on UDP port 5246 with DTLS encryption; and CAPWAP Data carries client payload packets over UDP port 5247.

Adım Adım Çözüm

1
Identify the responsibilities assigned to the Lightweight Access Point (LAP) under Cisco Split-MAC architecture.
Real-time operations directly affecting radio hardware (such as beaconing, probe responses, and MAC layer encryption/decryption) are processed locally by the LAP.
Real-time MAC tasks require microsecond latency, making transmission across a WAN or LAN to a central WLC impractical.
2
Identify the responsibilities assigned to the Wireless LAN Controller (WLC).
Management and control plane tasks (such as 802.11 authentication, association handling, frame translation, and quality of service policy enforcement) are processed centrally by the WLC.
Centralizing management MAC tasks simplifies policy enforcement and wireless network administration across multiple APs.
3
Differentiate between CAPWAP Control and CAPWAP Data transport characteristics.
Control traffic uses UDP port 5246 (secured with DTLS), while Data traffic uses UDP port 5247.
Separating control and data plane transport protocols allows independent security, QoS, and routing mechanisms for management versus client payload traffic.

Anahtar Kavram

Cisco Split-MAC Architecture and CAPWAP Protocols
Tahmini Süre:1m 30s
Soru 199Soru

A Cisco Catalyst switch with an initially empty MAC address table receives an Ethernet frame on ingress port FastEthernet0/1. The frame originates from Host A (MAC address 00A1.1111.AAAA) and is addressed to Host B (MAC address 00B2.2222.BBBB) on VLAN 10. In what chronological sequence does the Layer 2 switch execute internal processing steps from frame ingress to frame egress?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological sequence is: 1) Parse ingress frame for MAC addresses, 2) Learn source MAC and map to ingress port, 3) Lookup destination MAC in table, 4) Identify destination as unknown unicast, 5) Flood frame out all VLAN ports except ingress port.
When a Layer 2 switch receives an Ethernet frame on an ingress interface, it processes the frame in a specific order: first, it parses the L2 header; second, it reads the source MAC address and updates/populates its MAC address table (CAM table); third, it looks up the destination MAC address; fourth, if the destination is missing from the CAM table, it classifies it as an unknown unicast; fifth, it floods the frame out all active ports assigned to that VLAN except the receiving port.

Adım Adım Çözüm

1
Receive and ingress-parse frame
Identified Source MAC: 00A1.1111.AAAA, Destination MAC: 00B2.2222.BBBB, Ingress Port: Fa0/1, VLAN: 10.
The switch ASIC must inspect the Layer 2 Ethernet header preamble and fields first.
2
Source MAC Learning
MAC table entry updated with [VLAN 10 | 00A1.1111.AAAA | Dynamic | Fa0/1].
Layer 2 switches always learn source MAC addresses before determining egress forwarding.
3
Destination MAC Lookup
Query for 00B2.2222.BBBB yields no matching entry in VLAN 10 CAM table.
Switch determines whether to perform known unicast forwarding or unknown unicast flooding.
4
Classification of Traffic
Traffic categorized as unknown unicast.
A table miss forces the switch to default to broadcast-like flooding behavior within Layer 2 bounds.
5
Egress Frame Flooding
Frame replicated to all operational VLAN 10 ports, suppressing Fa0/1.
Split-horizon rule prevents sending a frame back out the interface from which it was received.

Anahtar Kavram

Layer 2 MAC Address Table Operation and Ingress/Egress Forwarding Pipeline
Soru 200Soru

Match each IPv6 address, prefix, or protocol scenario on the left with its corresponding IPv6 address representation or reserved prefix range on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

The dynamically generated IPv6 link-local address for an interface with MAC address `00:1A:2B:3C:4D:5E` using EUI-64
The IPv6 prefix block defined by RFC 4193 for locally assigned Unique Local Addresses (ULA) using a 40-bit random Global ID
The link-local IPv6 multicast address used exclusively to send OSPFv3 packets to Designated Routers (DR) and Backup Designated Routers (BDR)
The IPv6 prefix representation used in routing tables to designate the default route

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The SLAAC EUI-64 calculation matches `fe80::21a:2bff:fe3c:4d5e`; the locally assigned ULA prefix matches `fd00::/8`; the OSPFv3 DR/BDR multicast address matches `ff02::6`; and the default route matches `::/0`.
Each item accurately maps to its IPv6 address representation: EUI-64 requires inserting FFFE and flipping the 7th bit (`fe80::21a:2bff:fe3c:4d5e`); RFC 4193 local ULA uses `fd00::/8`; OSPFv3 DR/BDR communication uses `ff02::6`; and the default route is `::/0`.

Adım Adım Çözüm

1
Calculate the SLAAC EUI-64 link-local address
`fe80::21a:2bff:fe3c:4d5e`
Split MAC `00:1A:2B:3C:4D:5E`, insert `FF:FE` to form `001A:2BFF:FE3C:4D5E`, flip the 7th bit of byte 1 (`00` to `02`), and prepend `fe80::`.
2
Identify the RFC 4193 locally assigned ULA prefix
`fd00::/8`
Bit 8 of the `fc00::/7` block is set to 1 for locally generated 40-bit random Global IDs, fixing the prefix to `fd00::/8`.
3
Determine the OSPFv3 DR/BDR multicast address
`ff02::6`
`ff02::5` is sent to All OSPF Routers, whereas `ff02::6` targets All OSPF Designated Routers.
4
Identify the default route IPv6 prefix
`::/0`
`::/0` signifies all zeros address and zero prefix length, serving as the default match in IPv6 routing.

Anahtar Kavram

IPv6 Addressing Scopes, EUI-64 Conversion Rules, and Multicast / Routing Prefixes
ÖncekiSayfa 10 / 20Sonraki