Network Fundamentals

398 soru

Soru 161Soru

A network engineer is conducting an IP addressing audit for an enterprise network. The organization requires all internal hosts to utilize private IPv4 addresses specified in RFC 1918 to ensure proper isolated routing and avoid packet delivery issues across the public Internet. Which IPv4 address assignment contains a globally routable public IPv4 address rather than a valid RFC 1918 private address?

Cevabı ve açıklamayı göster

Cevap: 172.32.15.1/24 assigned to an internal host interface

Cevap

172.32.15.1/24 assigned to an internal host interface is a globally routable public address because it falls outside the RFC 1918 Class B allocation (172.16.0.0 - 172.31.255.255).
The address starting with 172.32.15.1 is a public IPv4 address because the RFC 1918 Class B private address allocation only spans from 172.16.0.0 to 172.31.255.255 (a /12 prefix). Any address with a first octet of 172 and a second octet greater than 31 or less than 16 is a public, globally routable IP address.

Adım Adım Çözüm

1
Recall the three designated RFC 1918 private IPv4 address ranges.
The reserved private ranges are: 10.0.0.0/8 (10.0.0.0 – 10.255.255.255), 172.16.0.0/12 (172.16.0.0 – 172.31.255.255), and 192.168.0.0/16 (192.168.0.0 – 192.168.255.255).
Establishing accurate address boundaries is mandatory to distinguish non-routable private IPs from public IPs.
2
Evaluate the second octet of the Class B address candidate 172.32.15.1.
The second octet is 32, which exceeds the upper bound of 31 for the 172.16.0.0/12 private prefix block.
The /12 prefix length covers second octet values from 16 to 31 inclusive (binary 00010000 to 00011111).
3
Verify that all other candidate addresses fall strictly within RFC 1918 boundaries.
172.31.255.254 is within 172.16.0.0/12; 192.168.254.1 is within 192.168.0.0/16; 10.255.1.1 is within 10.0.0.0/8.
Confirming the validity of remaining options isolates the public address misconfiguration.

Anahtar Kavram

RFC 1918 Private IPv4 Address Space Boundaries
Soru 162Soru

An enterprise network administrator is deploying Cisco Lightweight Access Points (LAPs) across various branch offices and corporate facilities. Match each Cisco AP operational mode on the left with its correct functional description on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Monitor Mode
Sniffer Mode
Rogue Detector Mode
FlexConnect Mode

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Monitor Mode pairs with the description detailing dedicated RF scanning for rogues, CleanAir, and IDS without client associations. Sniffer Mode pairs with capturing raw 802.11 frames on a specified channel for forwarding to a packet analyzer. Rogue Detector Mode pairs with listening to wired ARP traffic to correlate MAC addresses against rogue lists. FlexConnect Mode pairs with local traffic switching for remote branch APs.
Each access point operational mode serves a targeted operational purpose within Cisco wireless architecture: Monitor mode focuses purely on RF scanning and security metrics without serving clients; Sniffer mode performs targeted 802.11 packet capture; Rogue Detector operates on the wired network to validate rogue device connections; and FlexConnect facilitates local switching for remote site deployment efficiency.

Adım Adım Çözüm

1
Analyze non-client-serving specialized scanning modes
Identify that Monitor mode dedicates its radios to RF environment scanning, CleanAir, and security detection without accepting client connections.
Monitor mode APs do not transmit SSIDs or process client associations.
2
Differentiate packet capture functionality
Map Sniffer mode to over-the-air packet capture sent directly to an external analyzer tool.
Sniffer mode requires setting a target channel and destination IP address for packet stream monitoring.
3
Identify wired-side rogue mitigation roles
Associate Rogue Detector mode with monitoring wired ARP broadcasts.
Rogue Detector APs turn off their wireless radios and connect directly to switch trunk ports to monitor layer 2 broadcasts.
4
Evaluate branch architecture survivability mode
Match FlexConnect mode with local data switching capabilities.
FlexConnect allows client traffic to bypass the CAPWAP data tunnel across the WAN while maintaining central controller management.

Anahtar Kavram

Cisco Lightweight Access Point Operational Modes
Soru 163Soru

Match each RFC 1918 private IPv4 address range to its defined default CIDR block and maximum number of usable host addresses.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

10.0.0.0 to 10.255.255.255
172.16.0.0 to 172.31.255.255
192.168.0.0 to 192.168.255.255

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

10.0.0.0 to 10.255.255.255 matches the /8 CIDR block (16,777,21416,777,214 usable hosts); 172.16.0.0 to 172.31.255.255 matches the /12 CIDR block (1,048,5741,048,574 usable hosts); 192.168.0.0 to 192.168.255.255 matches the /16 CIDR block (65,53465,534 usable hosts).
Under RFC 1918, the three private IPv4 address allocations have distinct prefix masks and sizes: 10.0.0.0/8 provides a single large block with 24 host bits (16,777,21416,777,214 usable hosts); 172.16.0.0/12 encompasses 16 Class B ranges spanning 172.16.0.0 through 172.31.255.255 with 20 host bits (1,048,5741,048,574 usable hosts); and 192.168.0.0/16 encompasses 256 Class C ranges spanning 192.168.0.0 through 192.168.255.255 with 16 host bits (65,53465,534 usable hosts).

Adım Adım Çözüm

1
Analyze the 10.0.0.0/8 Class A private block
The range 10.0.0.0 to 10.255.255.255 reserves 24 host bits (328=2432 - 8 = 24).
Calculating usable host count yields 2242=16,777,2142^{24} - 2 = 16,777,214 addresses.
2
Analyze the 172.16.0.0/12 Class B private block
The range 172.16.0.0 to 172.31.255.255 spans from second octet 16 to 31, reserving 20 host bits (3212=2032 - 12 = 20).
Calculating usable host count yields 2202=1,048,5742^{20} - 2 = 1,048,574 addresses.
3
Analyze the 192.168.0.0/16 Class C private block
The range 192.168.0.0 to 192.168.255.255 reserves 16 host bits (3216=1632 - 16 = 16).
Calculating usable host count yields 2162=65,5342^{16} - 2 = 65,534 addresses.

Anahtar Kavram

RFC 1918 Private IPv4 Address Allocation and CIDR Prefix Boundaries
Soru 164Soru

A network engineer needs to deploy a security device at the enterprise perimeter that inspects packet headers and payloads, maintains connection state tables, and enforces security policies to permit or deny traffic. Which network component fulfills this specific role?

Cevabı ve açıklamayı göster

Cevap: Stateful Firewall

Cevap

Stateful Firewall
A stateful firewall is specifically designed to enforce perimeter security by monitoring active connection states and comparing incoming and outgoing traffic against access rules.

Adım Adım Çözüm

1
Identify the primary requirement in the scenario
The scenario calls for inspecting traffic, maintaining connection state tables, and enforcing security policies.
Security policies and state tracking are defining characteristics of network security devices.
2
Match the functional requirements to network component roles
A stateful firewall continuously tracks session states (such as TCP handshakes) and applies security rules to filter traffic at the network edge.
Switches, hypervisors, and discovery protocols perform forwarding, virtualization, and management neighbor identification respectively, rather than stateful security enforcement.

Anahtar Kavram

Network Component Roles - Firewall Functionality
Tahmini Süre:45s
Soru 165Soru

Match each enterprise infrastructure network component on the left with its primary operational function on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Next-Generation Firewall (NGFW)
Wireless LAN Controller (WLC)
Layer 3 Switch
Type 1 Hypervisor

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Next-Generation Firewall matches stateful packet inspection, application-level filtering, and threat prevention; Wireless LAN Controller matches centralized access point provisioning, RF management, and wireless security policies; Layer 3 Switch matches hardware-based inter-VLAN routing using ASICs alongside L2 switching; Type 1 Hypervisor matches direct bare-metal hardware abstraction for virtual machines.
Each network component is matched accurately based on its structural plane and operational responsibility in modern enterprise architectures: NGFWs enforce security policies and application filtering, WLCs centralize wireless infrastructure control, Layer 3 switches provide ASIC-driven inter-VLAN routing, and Type 1 hypervisors provide bare-metal compute virtualization.

Adım Adım Çözüm

1
Analyze the primary role of Next-Generation Firewalls (NGFW).
Identify that NGFWs operate at boundary points to enforce application-aware filtering, intrusion prevention, and stateful security inspection.
NGFWs extend classic firewall capabilities by inspecting traffic through Layer 7 application control and integrated security features.
2
Analyze the primary role of Wireless LAN Controllers (WLC).
Identify that WLCs handle centralized control-plane tasks for wireless access points across an enterprise campus.
WLCs aggregate AP management, radio resource management (RRM), and wireless security policy enforcement into a single architecture.
3
Analyze the primary role of Layer 3 Switches.
Identify that Layer 3 switches bridge VLANs and forward traffic between IP subnets using specialized Application-Specific Integrated Circuits (ASICs).
Layer 3 switches perform high-performance inter-VLAN routing in hardware while maintaining standard Layer 2 MAC table forwarding.
4
Analyze the primary role of Type 1 Hypervisors.
Identify that Type 1 hypervisors execute bare-metal virtualization directly on the host hardware platform.
Unlike Type 2 hypervisors which run on top of an existing OS, Type 1 hypervisors interface directly with physical server resources to host guest VMs.

Anahtar Kavram

Enterprise Network Component Roles and Functions
Soru 166Soru

Match each RFC 1918 private IPv4 address block to its designated default CIDR prefix length.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

10.0.0.0 to 10.255.255.255
172.16.0.0 to 172.31.255.255
192.168.0.0 to 192.168.255.255

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

10.0.0.0 to 10.255.255.255 matches /8, 172.16.0.0 to 172.31.255.255 matches /12, and 192.168.0.0 to 192.168.255.255 matches /16.
RFC 1918 specifies three private address blocks for enterprise networks: 10.0.0.0/8 (10.0.0.0 – 10.255.255.255), 172.16.0.0/12 (172.16.0.0 – 172.31.255.255), and 192.168.0.0/16 (192.168.0.0 – 192.168.255.255).

Adım Adım Çözüm

1
Identify the prefix length for the 10.0.0.0/8 address block.
The range 10.0.0.0 – 10.255.255.255 uses a /8 prefix length.
RFC 1918 defines the 10.0.0.0 network as a single Class A range with 8 network bits.
2
Identify the prefix length for the 172.16.0.0 address block.
The range 172.16.0.0 – 172.31.255.255 uses a /12 prefix length.
RFC 1918 allocates a set of 16 Class B networks from 172.16.0.0 through 172.31.255.255, aggregating to a /12 prefix length.
3
Identify the prefix length for the 192.168.0.0 address block.
The range 192.168.0.0 – 192.168.255.255 uses a /16 prefix length.
RFC 1918 allocates a set of 256 Class C networks from 192.168.0.0 through 192.168.255.255, aggregating to a /16 prefix length.

Anahtar Kavram

RFC 1918 Private IPv4 Address Ranges
Soru 167Soru

In a Cisco Wireless LAN Controller (WLC) architecture, Access Points (APs) can be configured in distinct operational modes to fulfill specialized roles. Match each AP operational mode on the left with its corresponding functional behavior on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Monitor Mode
FlexConnect Mode
Sniffer Mode
Rogue Detector Mode

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Monitor Mode matches dedicated WIPS scanning and location tracking without client servicing; FlexConnect Mode matches local traffic switching and WAN fault tolerance for branch sites; Sniffer Mode matches raw 802.11 frame capture streaming for packet analysis; Rogue Detector Mode matches correlating airborne rogue MACs with wired infrastructure tables.
Each access point operational mode is matched directly to its primary role: Monitor mode provides non-client-serving WIPS scanning and location tracking; FlexConnect mode provides branch-office WAN fault tolerance and local traffic bridging; Sniffer mode provides remote 802.11 raw packet capture to a workstation; Rogue Detector mode links wireless rogue observations to wired network MAC tables.

Adım Adım Çözüm

1
Identify the primary function of Monitor Mode.
Monitor mode APs refrain from serving wireless clients and focus exclusively on security scanning, rogue detection, and location tracking.
Monitor mode is tailored for continuous over-the-air environmental sensing.
2
Determine the operational characteristics of FlexConnect Mode.
FlexConnect allows local bridging of client traffic and local authentication fallback during WAN disruptions.
FlexConnect optimizes branch office deployments by preventing client data from requiring central CAPWAP encapsulation over limited WAN bandwidth.
3
Examine Sniffer Mode functionality.
Sniffer mode functions as a remote wireless packet probe, redirecting channel frame captures to a Wireshark workstation.
This allows deep-packet inspection on targeted RF channels without requiring specialized physical sniffer hardware on site.
4
Analyze Rogue Detector Mode.
Rogue Detector mode checks whether a rogue wireless device seen over the air is physically connected to the internal wired switch network.
It compares learned wired layer-2 MAC address tables with over-the-air rogue MAC lists.

Anahtar Kavram

Cisco Access Point Operational Modes
Tahmini Süre:2m 0s
Soru 168Soru

A network security architect is auditing perimeter firewalls and IP addressing schemes across a enterprise topology. Match each IPv4 address specification to its corresponding RFC 1918 compliance status and public Internet routing behavior.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

172.31.255.254/28172.31.255.254/28
172.32.0.1/16172.32.0.1/16
192.168.255.254/31192.168.255.254/31
192.169.1.1/24192.169.1.1/24

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The correct pairings match 172.31.255.254/28172.31.255.254/28 to the private 172.16.0.0/12172.16.0.0/12 scope description, 172.32.0.1/16172.32.0.1/16 to the public space directly above 172.31.255.255172.31.255.255, 192.168.255.254/31192.168.255.254/31 to the private 192.168.0.0/16192.168.0.0/16 point-to-point scope description, and 192.169.1.1/24192.169.1.1/24 to the public space directly above 192.168.255.255192.168.255.255.
Each IP address is accurately mapped according to RFC 1918 boundaries: 172.31.255.254172.31.255.254 is private (172.16.0.0/12172.16.0.0/12), 172.32.0.1172.32.0.1 is public space immediately above 172.31.255.255172.31.255.255, 192.168.255.254192.168.255.254 is private (192.168.0.0/16192.168.0.0/16), and 192.169.1.1192.169.1.1 is public space immediately above 192.168.255.255192.168.255.255.

Adım Adım Çözüm

1
Evaluate RFC 1918 address ranges and boundary limits.
The three RFC 1918 private address ranges are 10.0.0.0/810.0.0.0/8 (10.0.0.010.255.255.25510.0.0.0 - 10.255.255.255), 172.16.0.0/12172.16.0.0/12 (172.16.0.0172.31.255.255172.16.0.0 - 172.31.255.255), and 192.168.0.0/16192.168.0.0/16 (192.168.0.0192.168.255.255192.168.0.0 - 192.168.255.255).
Establishing accurate lower and upper boundary IP addresses is necessary to distinguish private from public IPv4 space.
2
Analyze 172.31.255.254/28172.31.255.254/28 and 172.32.0.1/16172.32.0.1/16.
172.31.255.254172.31.255.254 is the second-to-last address within 172.16.0.0/12172.16.0.0/12, making it private and non-routable. 172.32.0.1172.32.0.1 exceeds 172.31.255.255172.31.255.255, making it a public IP address.
Common misidentifications mistake 172.32.0.0/16172.32.0.0/16 for private space by assuming all 172.x.x.x172.x.x.x addresses are private, whereas only 172.16.0.0172.16.0.0 through 172.31.255.255172.31.255.255 are reserved by RFC 1918.
3
Analyze 192.168.255.254/31192.168.255.254/31 and 192.169.1.1/24192.169.1.1/24.
192.168.255.254192.168.255.254 falls inside 192.168.0.0/16192.168.0.0/16 and is private regardless of prefix length (/31/31). 192.169.1.1192.169.1.1 exceeds 192.168.255.255192.168.255.255, making it public.
The 192.168.0.0/16192.168.0.0/16 block ends at 192.168.255.255192.168.255.255. Addresses starting with 192.169.x.x192.169.x.x are public addresses.

Anahtar Kavram

RFC 1918 Private IPv4 Address Ranges and Boundary Verification
Soru 169Soru

During a security compliance audit of internal corporate subnets, a network engineer is asked to verify that host interfaces use IPv4 addresses from the Class B private space defined in RFC 1918. Which of the following IPv4 addresses falls strictly within the valid RFC 1918 Class B private address range?

Cevabı ve açıklamayı göster

Cevap: 172.31.200.15

Cevap

The address 172.31.200.15 is the only valid RFC 1918 Class B private IPv4 address among the choices.
The IPv4 address 172.31.200.15 resides within the 172.16.0.0/12 block reserved by RFC 1918, which spans from 172.16.0.0 through 172.31.255.255.

Adım Adım Çözüm

1
Recall the RFC 1918 private IPv4 address ranges.
Class A: 10.0.0.0 to 10.255.255.255 (10.0.0.0/8); Class B: 172.16.0.0 to 172.31.255.255 (172.16.0.0/12); Class C: 192.168.0.0 to 192.168.255.255 (192.168.0.0/16).
Identifying the official range boundaries is necessary to differentiate private space from public space.
2
Evaluate each provided option against the Class B RFC 1918 boundaries.
172.31.200.15 is between 172.16.0.0 and 172.31.255.255, making it a private RFC 1918 address.
The second octet of 31 is the upper boundary of the /12 block.

Anahtar Kavram

RFC 1918 Private IPv4 Address Ranges
Tahmini Süre:1m 0s
Soru 170Soru

During a wireless site survey in a multi-story office building, a network engineer observes that 2.4 GHz signals penetrate drywall and cubicle partitions with significantly less attenuation than 5 GHz signals, resulting in severe co-channel interference (CCI) from access points located on adjacent floors using channel 6. Which radio frequency (RF) principle explains why the 2.4 GHz frequency band exhibits greater obstacle penetration and longer range than the 5 GHz frequency band?

Cevabı ve açıklamayı göster

Cevap: Lower frequency RF waves have longer wavelengths, which experience less attenuation when passing through solid physical barriers compared to higher frequency waves.

Cevap

Lower frequency RF waves have longer wavelengths, which experience less attenuation when passing through solid physical barriers compared to higher frequency waves.
The 2.4 GHz band operates at a lower frequency than the 5 GHz band, giving it a longer wavelength. Longer wavelengths attenuate less when passing through physical obstacles such as walls and floors, enabling the signal to travel greater distances through building structures and leading to co-channel interference if floor-to-floor channel separation is not properly managed.

Adım Adım Çözüm

1
Analyze the physical relationship between RF wave frequency, wavelength, and attenuation.
Frequency (ff) and wavelength (λ\lambda) are inversely proportional (c=fλc = f \cdot \lambda). Lower frequencies have longer wavelengths.
Understanding fundamental wave properties clarifies signal propagation characteristics.
2
Evaluate propagation behavior through physical barriers.
Longer wavelengths (2.4 GHz) pass through materials like drywall and wood with lower attenuation compared to shorter wavelengths (5 GHz).
Shorter wavelengths are more easily absorbed and scattered by physical structures.
3
Correlate RF behavior to the observed network issue.
The lower attenuation of 2.4 GHz signals allows them to travel farther through floors and walls, causing unintended co-channel interference across adjacent floors.
This explains why careful channel and power planning is essential in 2.4 GHz deployments.

Anahtar Kavram

RF Attenuation and Wavelength vs. Frequency Principles
Soru 171Soru

An administrator is configuring an internal workstation and needs to manually assign an IPv4 address that belongs to an RFC 1918 private network block. Which IPv4 address is valid for this requirement?

Cevabı ve açıklamayı göster

Cevap: 172.25.100.50

Cevap

172.25.100.50 is a valid RFC 1918 private IPv4 address.
The address 172.25.100.50 is correct because RFC 1918 specifies 172.16.0.0/12 (covering 172.16.0.0 through 172.31.255.255) as a private IPv4 block. Because 25 is between 16 and 31 in the second octet, 172.25.100.50 is a valid private IPv4 address.

Adım Adım Çözüm

1
Identify the designated RFC 1918 private IPv4 address ranges.
The defined private ranges are 10.0.0.0/8 (10.0.0.0 - 10.255.255.255), 172.16.0.0/12 (172.16.0.0 - 172.31.255.255), and 192.168.0.0/16 (192.168.0.0 - 192.168.255.255).
RFC 1918 reserves specific IP address blocks for private internal networks that are not routable on the public Internet.
2
Evaluate the given address options against the RFC 1918 ranges.
172.25.100.50 falls between 172.16.0.0 and 172.31.255.255, making it a valid private address. The addresses starting with 172.33, 192.169, and 11 are public addresses.
Only IP addresses within the exact start and end boundaries of RFC 1918 blocks are reserved for private use.

Anahtar Kavram

RFC 1918 Private IPv4 Address Ranges
Soru 172Soru

An edge security gateway is configured to drop any outgoing packet to the public Internet if its source IP address belongs to an RFC 1918 private address space. During a security audit of un-translated egress traffic logs, four source IPv4 addresses were recorded. Which source IPv4 address is globally routable on the public Internet and will be permitted through the firewall filter?

Cevabı ve açıklamayı göster

Cevap: 172.32.10.55

Cevap

172.32.10.55 is a public IPv4 address because it falls outside the RFC 1918 Class B private address allocation (172.16.0.0/12).
RFC 1918 allocates three specific ranges for private networks: 10.0.0.0/8 (10.0.0.0 - 10.255.255.255), 172.16.0.0/12 (172.16.0.0 - 172.31.255.255), and 192.168.0.0/16 (192.168.0.0 - 192.168.255.255). The address 172.32.10.55 begins with 172.32, which is higher than the upper boundary of 172.31.255.255, making it a globally routable public address that passes the RFC 1918 egress filter.

Adım Adım Çözüm

1
Recall the RFC 1918 private IPv4 address allocations.
Class A: 10.0.0.0 to 10.255.255.255 (10.0.0.0/8), Class B: 172.16.0.0 to 172.31.255.255 (172.16.0.0/12), Class C: 192.168.0.0 to 192.168.255.255 (192.168.0.0/16).
Establishing accurate range boundaries is necessary to differentiate private non-routable addresses from public addresses.
2
Compare each given address against the RFC 1918 boundaries.
10.255.254.1 is inside 10.0.0.0/8; 192.168.100.255 is inside 192.168.0.0/16; 172.30.100.1 is inside 172.16.0.0/12. However, 172.32.10.55 exceeds 172.31.255.255.
Any IP starting with 172.32.x.x is part of public IP address space, not RFC 1918.
3
Determine which address is permitted through the egress filter.
172.32.10.55 is a public IP address and will pass through the RFC 1918 filter.
The filter only drops packets originating from RFC 1918 private ranges.

Anahtar Kavram

RFC 1918 Private IPv4 Address Space Boundaries
Tahmini Süre:1m 0s
Soru 173Soru

Two legacy FastEthernet switches are connected directly to each other using an Ethernet cable. The interface configuration on both ends explicitly has `no mdix auto` applied. Upon connecting the devices, execution of `show interfaces fastEthernet 0/12` reports that `FastEthernet0/12 is down, line protocol is down`. What physical cabling condition is the root cause of this interface status?

Cevabı ve açıklamayı göster

Cevap: A standard Category 5e straight-through cable is connected between the two like switch devices.

Cevap

A standard Category 5e straight-through cable is connected between the two like switch devices.
When connecting two switches directly without Auto-MDIX enabled, a crossover cable must be used to cross the transmit pairs of one switch to the receive pairs of the other. Connecting them with a straight-through cable connects transmit pins to transmit pins and receive pins to receive pins, which prevents physical link negotiation and causes the interface status and line protocol to remain down.

Adım Adım Çözüm

1
Analyze the interface status and line protocol state.
Both interface status and line protocol report 'down', indicating a Layer 1 (Physical layer) connectivity failure.
When an interface reports down/down, the device is not receiving physical signals or link pulses from the connected endpoint.
2
Evaluate the configuration context and device roles.
Two like devices (switch to switch) are connected, and automatic medium-dependent interface crossover (`no mdix auto`) is disabled.
Like devices transmit and receive on the exact same pin pairs (pins 1,2 for Tx and pins 3,6 for Rx on 10/100 Ethernet).
3
Determine the required cabling type.
A crossover cable must be used so that Transmit (Tx) pins on one switch connect to Receive (Rx) pins on the opposite switch.
If a straight-through cable is used without Auto-MDIX enabled, Tx connects to Tx and Rx connects to Rx, preventing physical link establishment.

Anahtar Kavram

Ethernet Cable Pinouts and Auto-MDIX Requirements
Soru 174Soru

When designing an enterprise Wi-Fi deployment, a network technician must decide between utilizing the 2.4 GHz and 5 GHz radio frequency bands. Which characteristic represents an advantage of using the 2.4 GHz band compared to the 5 GHz band?

Cevabı ve açıklamayı göster

Cevap: Longer propagation distance and superior signal penetration through physical barriers

Cevap

The 2.4 GHz band provides longer propagation distance and superior signal penetration through physical barriers.
Lower frequency radio waves (2.4 GHz) have longer wavelengths. This physical property allows 2.4 GHz wireless signals to cover greater distances and pass through solid obstructions (such as drywall, wood, and concrete) with less signal loss compared to higher frequency 5 GHz waves.

Adım Adım Çözüm

1
Analyze RF wave propagation characteristics
Lower RF frequencies have longer wavelengths, which travel further and experience less attenuation through solid objects.
RF physics dictates an inverse relationship between frequency and wave propagation distance.
2
Compare 2.4 GHz and 5 GHz characteristics
2.4 GHz signals travel longer distances and penetrate walls better, while 5 GHz signals provide higher speed over shorter distances.
Lower frequency (2.4 GHz) trades raw speed and channel availability for increased coverage area.

Anahtar Kavram

Wireless Frequency Bands and RF Propagation Characteristics
Soru 175Soru

A network engineer is auditing perimeter firewall logs on an enterprise WAN edge router. The firewall security policy is configured to drop any outbound packet whose source IP address falls within the RFC 1918 private IPv4 address space unless it has undergone Network Address Translation (NAT). During a routine inspection, the log records outbound packets from four host IP addresses: 11.10.5.1, 172.28.140.22, 172.33.10.1, and 192.169.50.4. Which source IP address will be dropped by the firewall policy for utilizing an RFC 1918 private IPv4 address?

Cevabı ve açıklamayı göster

Cevap: 172.28.140.22

Cevap

172.28.140.22 is the RFC 1918 private IPv4 address and will be dropped by the firewall.
The IP address 172.28.140.22 falls directly within the RFC 1918 Class B private address space of 172.16.0.0 to 172.31.255.255 (a /12 prefix block). Because it is an un-translated private address destined for an outbound WAN connection, the firewall policy correctly drops the traffic.

Adım Adım Çözüm

1
Recall the defined RFC 1918 private IPv4 address ranges.
Class A: 10.0.0.0 to 10.255.255.255 (10.0.0.0/8)
Class B: 172.16.0.0 to 172.31.255.255 (172.16.0.0/12)
Class C: 192.168.0.0 to 192.168.255.255 (192.168.0.0/16)
These three blocks are set aside by IANA and RFC 1918 for internal network use and are non-routable over the public Internet without NAT.
2
Evaluate host 172.28.140.22 against the Class B RFC 1918 range.
The second octet is 28, which falls inclusively between 16 and 31.
Because 16 <= 28 <= 31, 172.28.140.22 is a valid private IPv4 address.
3
Verify the remaining candidate IP addresses to confirm public vs private classification.
11.10.5.1 is outside 10.0.0.0/8; 172.33.10.1 is above 172.31.255.255; 192.169.50.4 is outside 192.168.0.0/16.
All three remaining options are public IPv4 addresses.

Anahtar Kavram

RFC 1918 Private IPv4 Address Space Boundaries
Soru 176Soru

A network administrator executes the 'show interfaces gigabitethernet 0/1' command on a Cisco switch connected to a workstation. The output indicates that GigabitEthernet0/1 is up and the line protocol is up, but the error statistics show a high number of late collisions and FCS errors. Which two underlying physical or data-link conditions are the most probable causes of these error counters?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A duplex mismatch between the switch port and the connected workstation; A damaged or degraded Ethernet cable causing signal corruption

Cevap

The most probable causes are a duplex mismatch between the connected devices and a damaged or degraded Ethernet cable.
Late collisions are the classic symptom of a speed/duplex mismatch where one end of the link is configured for half-duplex and the other for full-duplex. FCS errors indicate that frames arrived corrupted, which is commonly caused by poor physical cabling, damaged copper conductors, or bad connectors.

Adım Adım Çözüm

1
Analyze the late collisions symptom.
Late collisions occur when a device detects a collision after transmitting the first 64 bytes of a frame. This typically occurs when one side operates in half-duplex while the opposing side operates in full-duplex.
Full-duplex transmits without checking for collisions, causing the half-duplex side to detect collisions mid-transmission.
2
Analyze the FCS errors symptom.
Frame Check Sequence (FCS) errors occur when the calculated checksum at the receiving end does not match the checksum in the trailer of the received frame.
This indicates physical Layer 1 corruption caused by faulty cabling, improper grounding, or interference.
3
Evaluate the incorrect choices.
Native VLAN mismatches affect VLAN tagging/log warnings, and cable pinout mismatches without Auto-MDIX cause the link state to remain completely down.
Neither native VLAN mismatch nor pinout mismatches produce late collisions or FCS errors on an operational up/up interface.

Anahtar Kavram

Identifying interface error symptoms and corresponding physical/data-link Layer 1 and Layer 2 root causes
Soru 177Soru

An enterprise network team is implementing a hyper-converged rack architecture containing Type 1 bare-metal hypervisors, Layer 3 access switches, and Next-Generation Firewalls (NGFWs). Which two statements accurately describe the operational roles and traffic-handling boundaries of these components? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The Type 1 hypervisor executes directly on physical server hardware to manage virtual machine resources and provision virtual switches without relying on an underlying host operating system.; Layer 3 switches separate Layer 2 broadcast domains by routing traffic between VLANs, whereas the NGFW tracks connection state to perform deep packet inspection and enforce security policies.

Cevap

The statement stating that Type 1 hypervisors execute directly on physical hardware without a host OS and the statement that Layer 3 switches terminate broadcast domains while NGFWs perform stateful connection inspection are both correct.
Type 1 hypervisors run bare-metal without an underlying host operating system, direct-managing hardware and internal virtual switching. Additionally, Layer 3 switches isolate broadcast domains by establishing routing boundaries between VLANs, while NGFWs perform stateful inspection and deep packet security enforcement across network zones.

Adım Adım Çözüm

1
Analyze the architecture of Type 1 hypervisors relative to virtual switching.
Type 1 hypervisors run directly on bare metal without a host OS, providing hardware virtualization and integrated L2 virtual switching for hosted virtual machines.
Differentiating Type 1 (bare-metal) from Type 2 (hosted) hypervisors is critical when assigning infrastructure management responsibilities.
2
Evaluate the switching domain properties of virtual and physical switches.
Switches separate collision domains per switch port, but a VLAN defines a single Layer 2 broadcast domain across both physical and virtual switch ports.
Broadcast frames flood across all ports assigned to the same VLAN regardless of whether the switch is physical or virtual.
3
Compare Layer 3 switch routing capabilities with Next-Generation Firewall functional roles.
Layer 3 switches terminate Layer 2 broadcast boundaries at VLAN SVIs and handle high-speed inter-VLAN routing, whereas NGFWs maintain connection state tables and inspect payload contents up to Layer 7.
Network component roles must be distinctly allocated between Layer 3 throughput forwarding and stateful security boundary enforcement.

Anahtar Kavram

Operational roles and functional boundaries of Type 1 hypervisors, Layer 3 switches, and Next-Generation Firewalls
Tahmini Süre:2m 0s
Soru 178Soru

An enterprise deployment uses Cisco Lightweight Access Points (LAPs) operating in a Centralized Split-MAC architecture with a central Wireless LAN Controller (WLC). Which two real-time MAC layer functions are performed directly by the Access Point rather than the WLC? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Transmission of 802.11 beacon and probe response frames; Real-time 802.11 frame encryption and decryption

Cevap

In a Cisco Split-MAC architecture, the Access Point handles real-time frame transmission (beacons/probe responses) and hardware layer encryption/decryption, while management and control functions are handled by the WLC.
In a Split-MAC architecture, real-time RF tasks that demand precise timing (such as generating 802.11 beacons, responding to probe requests, and performing hardware-level frame encryption/decryption) are processed directly by the AP hardware.

Adım Adım Çözüm

1
Analyze the functional division in Cisco Split-MAC architecture
Split-MAC divides duties based on real-time sensitivity vs. centralized management.
Tasks requiring microsecond-level timing are offloaded to the AP radio hardware.
2
Identify AP real-time MAC functions
Beacon generation, probe responses, MAC-layer frame buffering, and hardware encryption/decryption are AP duties.
Latency-sensitive radio tasks cannot tolerate the round-trip delay of a CAPWAP tunnel to the controller.
3
Identify central WLC management functions
Client authentication/association, 802.11 to 802.3 frame translation, and roaming coordination belong to the WLC.
Centralizing management ensures consistent policy enforcement and seamless mobility.

Anahtar Kavram

Split-MAC Architecture Division of Responsibilities
Soru 179Soru

An enterprise network administrator is deploying a centralized Cisco Wireless LAN Controller (WLC) architecture utilizing CAPWAP tunnels for Lightweight Access Point (LAP) management and traffic transport. Which two statements correctly describe the transport layer protocols and security characteristics used by CAPWAP? (Choose two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: CAPWAP Control traffic uses UDP port 5246 and is encrypted by default using Datagram Transport Layer Security (DTLS).; CAPWAP Data traffic uses UDP port 5247 and is unencrypted by default, though optional DTLS payload encryption can be enabled.

Cevap

The correct statements are that CAPWAP Control traffic operates over UDP port 5246 with mandatory DTLS encryption, while CAPWAP Data traffic operates over UDP port 5247 and is unencrypted by default (with optional DTLS encryption support).
CAPWAP (Control and Provisioning of Wireless Access Points) protocol specifies UDP port 5246 for Control messages, which are encrypted using DTLS by default to secure WLC-to-AP management traffic. CAPWAP Data frames are transported over UDP port 5247, which defaults to unencrypted operational state to maximize throughput, while allowing optional DTLS payload encryption.

Adım Adım Çözüm

1
Analyze CAPWAP transport protocol selection.
CAPWAP uses UDP (User Datagram Protocol) rather than TCP for both Control and Data channels to eliminate head-of-line blocking and TCP sliding-window overhead over wireless medium links.
Lightweight access points and controllers handle reliability through CAPWAP retransmission timers and DTLS instead of TCP transport features.
2
Identify CAPWAP port assignments for Control and Data planes.
Control traffic communicates over UDP port 5246, while Data traffic communicates over UDP port 5247.
Separating Control and Data onto distinct UDP destination ports allows routers and firewalls to apply targeted QoS and security policies.
3
Evaluate encryption requirements for CAPWAP channels.
CAPWAP Control traffic requires DTLS encryption by default to safeguard configuration and management exchanges. CAPWAP Data traffic travels unencrypted by default to preserve throughput, though DTLS can be enabled if desired.
Default unencrypted data tunneling avoids severe performance penalties on hardware while protecting controller management transactions.

Anahtar Kavram

CAPWAP Protocol Architecture and UDP Port Operations
Soru 180Soru

A network manager is reviewing host IP allocation requests for internal database servers. To ensure non-routable communication over the public Internet according to RFC 1918 standards, the network team must identify valid private host IPv4 addresses. Which of the following IPv4 addresses belong to the RFC 1918 private address space and can be assigned to internal hosts? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: 10.200.150.75; 172.29.45.12

Cevap

The addresses 10.200.150.75 and 172.29.45.12 belong to the RFC 1918 private IPv4 address space.
The IP addresses 10.200.150.75 and 172.29.45.12 fall directly within the RFC 1918 private IPv4 blocks. 10.200.150.75 is inside the 10.0.0.0/8 block, and 172.29.45.12 is inside the 172.16.0.0/12 block.

Adım Adım Çözüm

1
Recall the RFC 1918 reserved private IPv4 address ranges.
Class A: 10.0.0.0 to 10.255.255.255 (10.0.0.0/8); Class B: 172.16.0.0 to 172.31.255.255 (172.16.0.0/12); Class C: 192.168.0.0 to 192.168.255.255 (192.168.0.0/16).
These specific ranges are reserved by IANA for private enterprise networking and are non-routable over the public Internet.
2
Evaluate candidate address 10.200.150.75.
10.200.150.75 falls between 10.0.0.0 and 10.255.255.255.
It matches the 10.0.0.0/8 private address prefix.
3
Evaluate candidate address 172.29.45.12.
172.29.45.12 falls between 172.16.0.0 and 172.31.255.255.
The second octet 29 is within the range 16 through 31 reserved for RFC 1918 Class B space.
4
Evaluate candidate addresses 172.35.10.20 and 192.169.100.1.
172.35.10.20 (second octet 35 > 31) and 192.169.100.1 (second octet 169 != 168) are outside RFC 1918 boundaries.
Both are globally routable public IPv4 addresses.

Anahtar Kavram

RFC 1918 Private IPv4 Address Ranges
Tahmini Süre:1m 30s
ÖncekiSayfa 9 / 20Sonraki
Network Fundamentals Alıştırma Soruları — Cisco CCNA — Sayfa 9 | Examkin