Examkin

Network Implementation

424 soru

Tüm türler424Çoktan seçmeli220Çoklu seçim80Sayısal11Eşleştirme53Sıralama42Kısa cevap18
Soru 221Soru →

Match each Network Address Translation (NAT) implementation concept on the left with its corresponding operational description and traffic mapping behavior on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Static NAT
Dynamic NAT
Port Address Translation (PAT)
Static PAT (Port Forwarding)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Static NAT matches the permanent one-to-one IP mapping for DMZ servers. Dynamic NAT matches the pool-based mapping without port alteration. Port Address Translation (PAT) matches many-to-one translation using Layer 4 source ports. Static PAT matches destination port redirection to an internal host and service port.
Each NAT type is accurately paired with its technical execution model: Static NAT provides permanent 1-to-1 IP mapping for unsolicited server access; Dynamic NAT allocates 1-to-1 public IPs dynamically from a pool without port alteration; PAT multiplexes many private IPs to one public IP using Layer 4 source ports; and Static PAT maps targeted public incoming transport ports directly to internal hosts.

Adım Adım Çözüm

1
Analyze Static NAT requirements
Identified as a permanent 1:1 Layer 3 mapping between an Inside Local address and an Inside Global address.
Static NAT requires a dedicated public IP for each host and allows bidirectional, unsolicited inbound traffic (e.g., hosting public web servers).
2
Analyze Dynamic NAT operational characteristics
Identified as a dynamic 1:1 allocation from a pool of public IPv4 addresses on demand.
Dynamic NAT does not translate port numbers; sessions are allocated public addresses sequentially until the public pool is exhausted.
3
Analyze Port Address Translation (PAT / NAT Overload)
Identified as many-to-one mapping using transport-layer port tracking.
PAT modifies both IP addresses (Layer 3) and port numbers (Layer 4), storing socket pairs in the state table to allow thousands of internal hosts to share a single public IPv4 address.
4
Analyze Static PAT (Port Forwarding)
Identified as inbound port translation targeting specific internal host services.
Port Forwarding intercepts inbound traffic on a specific public port and forwards it to a private IP and service port destination.

Anahtar Kavram

Differentiation of Network Address Translation types (Static NAT, Dynamic NAT, PAT, and Static PAT/Port Forwarding) by Layer 3 vs Layer 4 translation behaviors, pool allocation, and directionality.
Soru 222Soru →

An organization uses Open Shortest Path First (OSPF) as its primary interior gateway routing protocol to maintain connectivity to a remote branch office. A network administrator needs to implement a backup path using a static route over a secondary leased line. The backup path must remain inactive in the routing table under normal operations and automatically take over only if the OSPF path fails. Which configuration strategy satisfies this requirement?

Cevabı ve açıklamayı göster

Cevap: Configure the static route with an administrative distance higher than 110, such as 120.

Cevap

The static route should be configured with an administrative distance higher than OSPF's default value of 110 (such as 120) to create a floating static route.
Routers select paths based on Administrative Distance (AD) first when multiple sources provide routes to the same target subnet. Since OSPF routes have a default AD of 110 and standard static routes have a default AD of 1, configuring a static route with an AD higher than 110 (such as 120) ensures it remains inactive as a 'floating static route' until the OSPF route is withdrawn.

Adım Adım Çözüm

1
Identify the Administrative Distance (AD) of the primary dynamic routing protocol.
OSPF has a default Administrative Distance of 110110.
Routers use Administrative Distance to evaluate trustworthiness between different route sources before comparing metrics.
2
Determine the default Administrative Distance of a static route.
A standard static route has a default AD of 11, which would normally override OSPF (110110).
To prevent the static route from overriding OSPF during normal operations, its AD must be manually adjusted.
3
Configure a floating static route.
Assign an AD greater than 110110 (e.g., 120120) to the static route.
The router will prefer the OSPF route (AD 110110) and place it in the routing table. If the OSPF route disappears, the static route (AD 120120) becomes the best available path and is inserted into the routing table.

Anahtar Kavram

Floating Static Route and Administrative Distance Hierarchy
Tahmini Süre:1m 0s
Soru 223Soru →

A system administrator is preparing to deploy IPv6 across a corporate local area network and is verifying basic IPv6 addressing standards and migration mechanisms. Which of the following statements regarding IPv6 addressing and deployment are correct? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Link-local addresses starting with the fe80::/10 prefix are automatically configured on IPv6-enabled interfaces to support local network segment communication.; Dual-stack deployment enables network devices to run IPv4 and IPv6 protocol suites simultaneously on the same physical network interface.

Cevap

The correct statements are that link-local addresses starting with fe80::/10 are automatically configured on IPv6-enabled interfaces for local segment communication, and dual-stack deployment allows running IPv4 and IPv6 simultaneously on the same interface.
Link-local addresses (fe80::/10) are mandatory auto-configured IPv6 addresses used for link-scoped communication. Additionally, dual-stack protocol operation allows network interfaces to process both IPv4 and IPv6 traffic concurrently during migration.

Adım Adım Çözüm

1
Evaluate link-local addressing characteristics
Link-local addresses use the prefix fe80::/10 and are automatically generated on every IPv6-capable interface for local subnet communication.
IPv6 mandates link-local scoping for neighbor discovery and basic local connectivity.
2
Verify IPv6 zero compression rules
The double colon (::) can only be used once per address to prevent ambiguous address expansion.
Multiple double colons make it impossible to determine the exact number of suppressed zeros in each position.
3
Examine dual-stack coexistence mechanics
Dual-stack allows dual-protocol operation on a single network interface.
It is the primary transition mechanism recommended for incremental IPv6 migration.
4
Identify DNS record types for IPv6
AAAA records are required for IPv6 host resolution, not A records.
A records map hostnames to 32-bit IPv4 addresses, whereas AAAA records map hostnames to 128-bit IPv6 addresses.

Anahtar Kavram

IPv6 Address Scoping, Compression Rules, and Dual-Stack Coexistence
Soru 224Soru →

A network administrator is configuring firewall security rules between a Layer 3 router acting as a DHCP relay agent and a centralized DHCP server located at 10.10.10.25010.10.10.250. Workstations on a remote host VLAN generate broadcast DHCP lease requests that the router receives, but the relay agent fails to deliver the unicast requests to the DHCP server because firewall policies block the traffic. Which transport protocol and destination port combination must be permitted on the firewall for the relay agent to successfully forward client requests to the DHCP server?

Cevabı ve açıklamayı göster

Cevap: UDP port 67

Cevap

UDP port 67 must be allowed on the firewall to permit communication from the relay agent to the DHCP server.
DHCP servers receive incoming messages from both direct broadcast clients and unicast DHCP relay agents on UDP port 67. Allowing UDP port 67 on the intermediate firewall enables the relay agent to successfully forward the encapsulated request packets to the centralized server.

Adım Adım Çözüm

1
Identify the transport protocol used by DHCP services.
DHCP relies entirely on UDP for connectionless message delivery.
DHCP uses UDP to avoid protocol overhead during initial IP configuration.
2
Determine the destination port used by DHCP servers to receive requests.
The DHCP server listens on UDP port 67 for incoming requests from clients and relay agents.
Port 67 is designated for server-side processing, whereas port 68 is used by clients to receive responses.
3
Apply the firewall policy requirement for DHCP relay forwarding.
The firewall rule must permit UDP traffic targeted to destination port 67 on the DHCP server.
The relay agent converts client broadcasts into unicast UDP packets sent to port 67 of the DHCP server.

Anahtar Kavram

DHCP Relay Transport Protocol and Port Assignment
Soru 225Soru →

Match each DNS resource record type to its primary technical function within an enterprise network infrastructure.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

SRV Record
PTR Record
MX Record
TXT Record

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

SRV matches service location and port specification; PTR matches reverse DNS resolution from IP to hostname; MX matches mail server designation for email routing; TXT matches domain verification and security policy storage.
Each DNS record type provides distinct functionality: SRV includes port and protocol service locations; PTR maps IP addresses back to domain names for reverse lookups; MX designates incoming mail servers; and TXT holds descriptive text for domain security authentications like SPF.

Adım Adım Çözüm

1
Identify the primary function of SRV records.
SRV records include port numbers and target hostnames for network services (e.g., SIP, LDAP, Active Directory).
Different services use specific transport ports, which SRV records explicitly declare.
2
Identify the primary function of PTR records.
PTR records reside in reverse lookup zones (in-addr.arpa or ip6.arpa) to resolve IP addresses back to hostnames.
Reverse resolution enables logging, anti-spam validation, and security verification.
3
Identify the primary function of MX records.
MX records specify incoming mail servers along with priority preference numbers.
SMTP routing depends on MX queries to deliver email to the correct destination host.
4
Identify the primary function of TXT records.
TXT records contain text metadata used by email verification systems (SPF, DKIM, DMARC) and domain authorization mechanisms.
Arbitrary text strings allow domain administrators to publish verification tokens without modifying protocol headers.

Anahtar Kavram

DNS Resource Record Functionality and Application
Soru 226Soru →

A network engineer is configuring a centralized DHCP server located at 10.200.1.10/2410.200.1.10/24 to issue IPv4 address leases to workstations across remote subnets. The remote site utilizes a Layer 3 router as the default gateway for multiple local networks, including VLAN 15 (10.15.0.0/2410.15.0.0/24). Workstations connected to VLAN 15 are failing to receive IP addresses and are instead generating APIPA addresses. Packet captures indicate that client DHCP DISCOVER broadcast messages from VLAN 15 are not reaching the centralized DHCP server across the WAN link. Which configuration modification on the remote router will resolve this connectivity issue?

Cevabı ve açıklamayı göster

Cevap: Configure the helper address command with 10.200.1.1010.200.1.10 specifically on the VLAN 15 interface on the remote router.

Cevap

Configure the helper address command with 10.200.1.1010.200.1.10 specifically on the VLAN 15 interface on the remote router.
Configuring the IP helper address on the client-facing gateway interface allows the router to receive local broadcast DHCP DISCOVER messages from VLAN 15 hosts. The router converts these broadcasts into unicast UDP packets directed to the central DHCP server at 10.200.1.1010.200.1.10, adding the router's interface IP to the GIADDR field so the server allocates an IP from the correct 10.15.0.0/2410.15.0.0/24 pool.

Adım Adım Çözüm

1
Analyze client traffic flow and broadcast boundary behavior.
Workstations on VLAN 15 issue Layer 2 and Layer 3 local broadcasts (UDP port 67) during the DHCP DISCOVER phase, which routers drop at the subnet boundary by default.
Centralized DHCP servers residing across Layer 3 boundaries cannot receive un-relayed broadcast traffic.
2
Determine the proper relay placement and operation.
The DHCP Relay Agent (IP helper address) must be enabled on the client-facing gateway interface (VLAN 15 SVI or subinterface).
This enables the router to listen for incoming client broadcasts on that specific segment, convert the broadcast into a unicast frame addressed to 10.200.1.1010.200.1.10, and populate the GIADDR header field with 10.15.0.110.15.0.1 so the server selects the correct scope.

Anahtar Kavram

DHCP Relay Agent and IP Helper Placement
Tahmini Süre:1m 30s
Soru 227Soru →

Hosts on a newly provisioned user subnet fail to dynamically acquire IP addresses from an established DHCP server located on a separate administrative network segment. Why is a DHCP relay service required on the local gateway router to resolve this issue?

Cevabı ve açıklamayı göster

Cevap: DHCP discovery messages are sent as local broadcasts, which routers do not forward across subnets by default.

Cevap

DHCP discovery messages are sent as local broadcasts, which routers do not forward across subnets by default.
DHCP clients initially send broadcast messages to discover available servers. Because routers isolate subnets by dropping broadcast traffic by default, a DHCP relay agent (or IP helper address) must be configured on the router interface facing the client. The relay converts the client's broadcast discovery into a unicast packet directed straight to the central DHCP server's IP address.

Adım Adım Çözüm

1
Analyze how clients initiate DHCP requests
DHCP clients broadcast a DHCPDISCOVER message using destination IP address 255.255.255.255255.255.255.255.
The client does not yet have an IP address or knowledge of the local gateway and network topology.
2
Evaluate router behavior regarding local broadcast traffic
Routers drop Layer 3 broadcast frames by default to isolate broadcast domains.
Preventing broadcast propagation across subnets reduces network congestion and prevents broadcast storms.
3
Identify the role of the DHCP relay agent (IP Helper)
The relay agent intercepts the broadcast on the client-facing interface and forwards it as a unicast packet to the central DHCP server.
Unicast packets are routable across network boundaries, allowing the remote DHCP server to assign an IP address from the appropriate scope.

Anahtar Kavram

DHCP Relay Services and Broadcast Boundaries
Tahmini Süre:45s
Soru 228Soru →

A network administrator is configuring a local network segment using the prefix /24/24 (subnet mask 255.255.255.0255.255.255.0). What is the maximum number of usable host IPv4 addresses that can be assigned to devices on this subnet?

Cevabı ve açıklamayı göster

Cevap: 254254

Cevap

The maximum number of usable host IPv4 addresses on a /24/24 subnet is 254254.
For any standard IPv4 subnet, the formula to calculate usable host addresses is 2n−22^n - 2, where nn represents the number of host bits. A /24/24 CIDR prefix leaves 88 host bits (32−24=832 - 24 = 8). Calculating 282^8 yields 256256 total IP addresses. Subtracting 22 (one for the subnet network identifier and one for the subnet broadcast address) leaves exactly 254254 usable host addresses.

Adım Adım Çözüm

1
Calculate the number of host bits in the prefix.
32−24=832 - 24 = 8 host bits.
An IPv4 address consists of 32 bits in total.
2
Calculate the total number of IP addresses in the subnet.
28=2562^8 = 256 total addresses.
The total address capacity of a subnet is 2n2^n, where nn is the number of host bits.
3
Subtract reserved IP addresses to find the usable host count.
256−2=254256 - 2 = 254 usable host addresses.
The network address (all host bits 0) and the broadcast address (all host bits 1) cannot be assigned to network host interfaces.

Anahtar Kavram

Subnet Usable Host Count Calculation
Soru 229Soru →

A systems engineer is configuring a Layer 3 switch to relay DHCP requests from client devices on `Vlan 40` (10.40.0.0/2410.40.0.0/24) to a centralized DHCP server located on `Vlan 100` (172.16.100.10172.16.100.10). Workstations on `Vlan 40` fail to obtain IP leases and default to APIPA addresses (169.254.x.x169.254.x.x). Packet captures confirm that client DHCPDISCOVER broadcast packets reach interface `Vlan 40`, but the switch never forwards them to 172.16.100.10172.16.100.10. Reviewing the switch configuration reveals that `ip helper-address 172.16.100.10` was applied to interface `Vlan 100` instead of interface `Vlan 40`. Which of the following statements correctly explains why client leasing is failing and identifies the necessary correction?

Cevabı ve açıklamayı göster

Cevap: The relay agent must be placed on the client-facing gateway interface (`Vlan 40`) so it can intercept local layer 2 broadcasts, insert its interface IP into the gateway IP address (`giaddr`) field, and forward unicast packets to the DHCP server.

Cevap

The relay agent must be configured on the client-facing gateway interface (`Vlan 40`) to intercept local broadcasts, set the gateway IP address (`giaddr`) field to the switch's interface address, and unicast the DHCP request to the server.
DHCPDISCOVER messages are sent as local subnets broadcasts. A Layer 3 interface acting as the default gateway for clients must have `ip helper-address` enabled to listen for incoming UDP port 67 broadcasts on that specific interface. Once captured, the relay agent injects the incoming interface IP into the packet's `giaddr` field and forwards it via unicast routing to the designated DHCP server IP.

Adım Adım Çözüm

1
Analyze client broadcast domain dynamics.
Clients on `Vlan 40` issue Layer 2 broadcast DHCPDISCOVER packets that cannot cross Layer 3 boundaries without an active relay agent on their default gateway interface.
Routers and Layer 3 switches drop Layer 2/3 broadcast frames by default.
2
Evaluate the function of the Gateway IP Address (`giaddr`) field.
When `ip helper-address` is active on `Vlan 40`, the Layer 3 device receives the client broadcast, populates the `giaddr` field with its `Vlan 40` IP address (10.40.0.110.40.0.1), and unicasts the request to 172.16.100.10172.16.100.10.
The centralized DHCP server reads the `giaddr` field to determine which address pool/scope to draw the IP lease from.
3
Identify misconfiguration and remediation.
Configuring `ip helper-address` on `Vlan 100` fails to capture `Vlan 40` broadcasts. Moving the configuration to interface `Vlan 40` restores relay functionality.
The IP Helper feature only intercepts broadcasts arriving on the specific interface where the command is bound.

Anahtar Kavram

DHCP Relay Agent Interface Placement and `giaddr` Insertion
Soru 230Soru →

A network engineer is reviewing routing loop prevention mechanisms across dynamic routing protocols deployed within an enterprise network. Which of the following mechanisms are specifically utilized by distance-vector dynamic routing protocols to prevent routing loops? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Split horizon, which stops a router from advertising a route back out the same physical interface from which it learned that route.; Route poisoning, which sets the metric of a failed route to an infinite/unreachable value to immediately invalidate it across neighbor routers.

Cevap

The correct mechanisms are split horizon (preventing route re-advertisement back out the receiving interface) and route poisoning (broadcasting an unreachable metric when a link fails).
The statements defining split horizon and route poisoning correctly identify distance-vector loop prevention techniques. Split horizon prevents a router from transmitting route updates back out the interface where the route originated, breaking two-node routing loops. Route poisoning explicitly sets the metric of a down link to an unreachable value (e.g., 16 hops in RIP) so surrounding neighbors rapidly drop the bad route.

Adım Adım Çözüm

1
Identify the protocol operational category specified in the stem
The scenario focuses specifically on distance-vector dynamic routing protocols.
Distance-vector protocols (such as RIP) rely on neighbor updates and hop counts, making them susceptible to routing loops like count-to-infinity.
2
Evaluate candidate loop prevention features for distance-vector protocols
Split horizon and route poisoning are classic distance-vector mechanisms designed to prevent count-to-infinity and routing loops.
Split horizon ensures updates are not echoed back to the source node, while route poisoning marks invalid routes with infinite metric values immediately upon failure.
3
Analyze and eliminate invalid non-routing mechanisms
802.1Q trunking operates at Layer 2 for VLAN isolation, and PAT is a Layer 3/4 address translation technique.
Neither technology plays a role in dynamic routing protocol convergence or loop mitigation.

Anahtar Kavram

Distance-Vector Routing Loop Prevention Mechanisms
Soru 231Soru →

Clients connected to VLAN 20 (192.168.20.0/24192.168.20.0/24) are unexpectedly receiving IPv4 address leases from the pool configured for VLAN 10 (192.168.10.0/24192.168.10.0/24). Inspection of the central DHCP server shows healthy scope configurations. Which of the following is the most likely cause of this issue?

Cevabı ve açıklamayı göster

Cevap: The relay agent command was configured on the Switch Virtual Interface (SVI) for VLAN 10 instead of VLAN 20, causing the gateway IP address (giaddrgiaddr) field to be populated with VLAN 10's interface IP.

Cevap

The relay agent command was configured on the Switch Virtual Interface (SVI) for VLAN 10 instead of VLAN 20, causing the gateway IP address (giaddrgiaddr) field to be populated with VLAN 10's interface IP.
When a Layer 3 device acts as a DHCP relay agent, it captures client Layer 2 broadcast requests on a specific interface, populates the gateway IP address (giaddrgiaddr) field with that receiving interface's IP address, and unicasts the packet to the DHCP server. If the relay directive is placed on VLAN 10's interface instead of VLAN 20's, the giaddrgiaddr sent to the server will belong to VLAN 10, causing the DHCP server to select and lease an IP address from the VLAN 10 scope.

Adım Adım Çözüm

1
Analyze how a DHCP relay agent identifies which scope to request from the central DHCP server.
The relay agent sets the Gateway IP Address (giaddrgiaddr) field in the DHCP message header to the IP address of the local interface (SVI/subinterface) that received the client's Layer 2 broadcast.
The central DHCP server inspects the giaddrgiaddr field to select the correct IP scope corresponding to that subnet.
2
Evaluate the symptom against the relay mechanism.
Clients on VLAN 20 receiving VLAN 10 leases indicates that the DHCP server received a request with a giaddrgiaddr belonging to VLAN 10.
This occurs when the helper/relay command is mistakenly applied to VLAN 10's interface instead of VLAN 20's interface.

Anahtar Kavram

DHCP Relay Gateway IP Address (giaddr) Population
Soru 232Soru →

A network engineer is configuring a switch port connected to an enterprise wireless access point (AP). The AP requires untagged management traffic to be placed onto VLAN 10, while user Wi-Fi traffic must be carried across the link as 802.1Q tagged frames for VLAN 30. Which of the following interface configuration approaches correctly fulfills this requirement?

Cevabı ve açıklamayı göster

Cevap: Configure the interface in 802.1Q trunking mode, designate VLAN 10 as the native VLAN, and allow VLANs 10 and 30 on the trunk.

Cevap

Configure the interface in 802.1Q trunking mode, designate VLAN 10 as the native VLAN, and allow VLANs 10 and 30 on the trunk.
Configuring the switch port as an 802.1Q trunk with VLAN 10 designated as the native VLAN allows untagged management frames from the wireless access point to be placed into VLAN 10. Simultaneously, tagged frames for VLAN 30 are correctly identified and forwarded across the trunk link using 802.1Q encapsulation headers.

Adım Adım Çözüm

1
Identify traffic requirements for the access point connection
Untagged traffic belongs to management (VLAN 10), and tagged traffic belongs to user Wi-Fi (VLAN 30).
An 802.1Q trunk link is required to carry traffic for multiple VLANs over a single physical interface.
2
Determine native VLAN configuration
VLAN 10 must be assigned as the native VLAN on the switch trunk port.
IEEE 802.1Q trunks transmit frames for the native VLAN without an 802.1Q header tag. Assigning VLAN 10 as native matches the AP's untagged management traffic.
3
Verify allowed VLAN list on the trunk
Both VLAN 10 and VLAN 30 must be permitted on the trunk interface.
Permitting both VLANs ensures tagged frames for VLAN 30 and untagged native frames for VLAN 10 are forwarded successfully.

Anahtar Kavram

802.1Q Native VLAN & Trunking Configuration
Tahmini Süre:1m 30s
Soru 233Soru →

A network engineer is deploying IPv6 across a corporate branch office after receiving a /56/56 IPv6 prefix delegation of 2001:db8:1234:5600::/562001:\text{db8}:1234:5600::/56 from the upstream Internet Service Provider (ISP). Enterprise standards require that all internal local area networks (LANs) be provisioned using standard /64/64 subnets to support Stateless Address Autoconfiguration (SLAAC). How many total /64/64 subnets can the engineer allocate from this delegated prefix, and what is the RFC 5952 compliant IPv6 prefix for the final available subnet?

Cevabı ve açıklamayı göster

Cevap: 256 subnets, with the final subnet prefix designated as 2001:db8:1234:56ff::/64

Cevap

The correct subnet count is 256 subnets, and the final subnet prefix is 2001:db8:1234:56ff::/64.
Subtracting the ISP delegation prefix length (/56) from the standard host SLAAC prefix length (/64) yields 8 bits for internal subnet division. Calculating 282^8 produces 256 total subnets. The first 56 bits (2001:db8:1234:562001:\text{db8}:1234:56) remain fixed, while the remaining 8 bits of the fourth hextet range from 0x00 to 0xFF hex. Thus, the last valid /64 subnet prefix is 2001:db8:1234:56ff::/64.

Adım Adım Çözüm

1
Calculate the number of bits allocated for subnetting.
Subnet bits = 64−56=864 - 56 = 8 bits.
The delegated prefix is /56 and target LAN subnets require a /64 prefix length for SLAAC.
2
Determine total usable subnets from the 8 subnet bits.
28=2562^8 = 256 subnets.
In IPv6 subnetting, there are no reserved all-zeros network or all-ones broadcast subnet restrictions like in IPv4; all combinations are usable.
3
Calculate the fourth hextet range in hexadecimal.
The fourth hextet is 16 bits long: bits 48-55 are fixed as 0x56, and bits 56-63 range from 0x00 to 0xFF.
Starting at 0x5600, incrementing the 8-bit subnet ID from 0x00 to 0xFF results in a fourth hextet range of 5600 to 56FF.
4
Format the final subnet prefix according to RFC 5952 compression guidelines.
2001:db8:1234:56ff::/64
Trailing zero hextets in the host portion are replaced by a single double-colon (::).

Anahtar Kavram

IPv6 Prefix Subnetting and RFC 5952 Address Formatting
Tahmini Süre:2m 0s
Soru 234Soru →

A network administrator is configuring a host on an enterprise network segment using Stateless Address Autoconfiguration (SLAAC). The local router advertises the IPv6 prefix 2001:db8:0000:00ab::/642001:\text{db8}:0000:00\text{ab}::/64. The host network interface controller has the MAC address `00:50:56:A1:B2:C3`. Assuming the host generates its 64-bit Interface Identifier using the standard EUI-64 mechanism, what is the resulting host IPv6 address expressed in strict compliance with RFC 5952 zero-compression and leading-zero suppression rules?

Cevabı ve açıklamayı göster

Cevap: 2001:db8:0:ab:250:56ff:fea1:b2c3; 2001:DB8:0:AB:250:56FF:FEA1:B2C3

Cevap

2001:db8:0:ab:250:56ff:fea1:b2c3
Generating the SLAAC IPv6 address involves forming the EUI-64 interface ID from MAC address `00:50:56:A1:B2:C3` by inserting `FF:FE` between the third and fourth bytes (`00:50:56:FF:FE:A1:B2:C3`) and inverting the 7th bit of the first byte (`00` becomes `02`), yielding `0250:56ff:fea1:b2c3`. Combining this with prefix `2001:0db8:0000:00ab::/64` gives `2001:0db8:0000:00ab:0250:56ff:fea1:b2c3`. Under RFC 5952, leading zeros in each field are omitted (`0db8` -> `db8`, `0000` -> `0`, `00ab` -> `ab`, `0250` -> `250`). Because there is only one contiguous 16-bit zero field, `::` cannot be applied, resulting in `2001:db8:0:ab:250:56ff:fea1:b2c3`.

Adım Adım Çözüm

1
Split the 48-bit MAC address into two 24-bit halves and insert FF:FE in the middle.
Inserting `FF:FE` into `00:50:56` and `A1:B2:C3` yields `00:50:56:FF:FE:A1:B2:C3` (or formatted as hextets: `0050:56ff:fea1:b2c3`).
EUI-64 expands a 48-bit MAC address to a 64-bit interface identifier by inserting the reserved 16-bit hex sequence `FF-FE`.
2
Invert the 7th bit (Universal/Local bit) of the first byte of the MAC address.
The first byte `00` in binary is `0000 0000`. Inverting the 7th bit (the U/L bit) gives `0000 0010`, which is `02` in hexadecimal. The modified interface ID becomes `0250:56ff:fea1:b2c3`.
The IEEE EUI-64 standard specifies that the 7th bit of the first octet must be inverted to indicate whether the address is universally unique (0 changed to 1).
3
Combine the /64 network prefix with the 64-bit EUI-64 interface identifier.
Combining `2001:0db8:0000:00ab` with `0250:56ff:fea1:b2c3` produces the uncompressed 128-bit address `2001:0db8:0000:00ab:0250:56ff:fea1:b2c3`.
The full IPv6 unicast address is formed by concatenating the subnet prefix and host interface ID.
4
Apply RFC 5952 compression rules strictly.
Suppress leading zeros in all hextets (`0db8` -> `db8`, `0000` -> `0`, `00ab` -> `ab`, `0250` -> `250`). Note that double-colon `::` cannot be used to replace a single zero hextet (`0`). The final compressed address is `2001:db8:0:ab:250:56ff:fea1:b2c3`.
RFC 5952 mandates lower-case hexadecimal digits, leading zero suppression in each 16-bit field, and explicitly forbids using double-colon `::` for a single isolated zero field.

Anahtar Kavram

EUI-64 Interface ID Generation & RFC 5952 Address Compression Rules
Soru 235Soru →

An enterprise network infrastructure team is implementing IPv6 addressing across corporate VLANs. The core router is configured to transmit Router Advertisement (RA) messages on the local segment with the Managed Address Configuration flag set to 0 (M=0M=0) and the Other Stateful Configuration flag set to 1 (O=1O=1). Which of the following best describes how client workstations on this subnet will obtain their IPv6 configuration parameters?

Cevabı ve açıklamayı göster

Cevap: Workstations generate their IPv6 global unicast address autonomously using SLAAC from the advertised prefix, and query a stateless DHCPv6 server for additional parameters such as DNS server addresses.

Cevap

Workstations generate their IPv6 global unicast address autonomously using SLAAC from the advertised prefix, and query a stateless DHCPv6 server for additional parameters such as DNS server addresses.
In IPv6 deployment, ICMPv6 Router Advertisement (RA) flags direct host configuration behavior. When the Managed Address flag is off (M=0M=0) and the Other flag is on (O=1O=1), clients utilize Stateless Address Autoconfiguration (SLAAC) to build their own global unicast IP address using the prefix provided in the RA message. Concurrently, clients send information requests to a stateless DHCPv6 server to acquire non-address parameters such as DNS server addresses and domain names.

Adım Adım Çözüm

1
Analyze the Router Advertisement (RA) flag settings provided in the scenario.
The Managed Address Configuration flag is set to 0 (M=0M=0), and the Other Stateful Configuration flag is set to 1 (O=1O=1).
RA flags dictate whether clients use SLAAC, stateful DHCPv6, or stateless DHCPv6.
2
Evaluate the impact of M=0M=0 on address autoconfiguration.
Hosts do not use a stateful DHCPv6 server for IPv6 address assignment; instead, they use Stateless Address Autoconfiguration (SLAAC) to derive their IP address from the network prefix.
M=0M=0 indicates that addresses are not managed by a stateful DHCPv6 server.
3
Evaluate the impact of O=1O=1 on additional network options.
Hosts query a stateless DHCPv6 server for non-address configuration information such as DNS server IP addresses and domain search lists.
O=1O=1 specifies that 'other' configuration details are available via DHCPv6.

Anahtar Kavram

IPv6 Router Advertisement (RA) Flags and Autoconfiguration Modes (SLAAC vs. Stateless/Stateful DHCPv6)
Soru 236Soru →

A network engineer is deploying IPv6 across an enterprise environment and configuring dynamic address assignment and routing mechanisms. Match each IPv6 deployment component or address feature on the left to its corresponding technical operation or scope on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Stateless DHCPv6 (M=0, O=1)
EUI-64 Interface Identifier
Unique Local Address (fc00::/7)
All-DHCPv6-Relay-Agents/Servers Multicast (ff02::1:2)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Stateless DHCPv6 (M=0, O=1) matches hosts auto-generating IP addresses via SLAAC while querying DHCPv6 for non-address settings. EUI-64 Interface Identifier matches inserting 0xFFFE into a MAC address and flipping the 7th bit. Unique Local Address (fc00::/7) matches globally unique non-routable addressing for internal sites. All-DHCPv6-Relay-Agents/Servers Multicast (ff02::1:2) matches the link-local destination address used for relaying client Solicit messages.
Stateless DHCPv6 (M=0, O=1) allows hosts to use SLAAC for IP generation while fetching extra options like DNS via DHCPv6. Modified EUI-64 expands a 48-bit MAC address into a 64-bit interface ID by inserting 0xFFFE and inverting the 7th bit. Unique Local Addresses (fc00::/7) provide internal private IP routing within enterprise boundaries without internet accessibility. The multicast address ff02::1:2 specifically targets local DHCPv6 relay agents and servers.

Adım Adım Çözüm

1
Analyze Router Advertisement flags for dynamic IPv6 address deployment modes.
M=0 indicates that stateful address assignment is disabled, and O=1 indicates that other configuration parameters (such as DNS) are available via DHCPv6. This corresponds to Stateless DHCPv6 combined with SLAAC.
Understanding ICMPv6 RA flag combinations is essential for deploying stateless versus stateful IPv6 autoconfiguration.
2
Evaluate host interface identifier generation mechanisms using EUI-64.
Modified EUI-64 splits the MAC address into two 24-bit halves, inserts 16 bits (0xFFFE), and flips the Universal/Local (U/L) bit (the 7th bit of the first octet).
Verifying correct EUI-64 translation rules ensures proper identification of automatically derived IPv6 host addresses.
3
Classify IPv6 address scopes and prefixes for enterprise design.
The fc00::/7 prefix defines Unique Local Addresses (ULA), which are internal, non-globally-routable IPv6 addresses.
Distinguishing between Global Unicast, Link-Local, and Unique Local prefixes is critical for secure network architecture.
4
Identify specialized IPv6 multicast addresses used during address assignment.
ff02::1:2 represents the All-DHCPv6-Relay-Agents/Servers link-local multicast group.
DHCPv6 clients communicate with local servers or relay agents using designated multicast groups rather than broadcast mechanisms.

Anahtar Kavram

IPv6 Address Scopes, EUI-64 Derivation, and Autoconfiguration Mechanisms (SLAAC / DHCPv6)
Soru 237Soru →

A network technician is configuring an 802.1Q trunk link between core switch `SW-CORE-01` and access switch `SW-ACCESS-02` to allow traffic for multiple VLANs across the site. Interface `GigabitEthernet 1/0/24` on `SW-CORE-01` has been configured with the following command sequence:

text
interface GigabitEthernet 1/0/24
switchport mode trunk
switchport trunk native vlan 99
switchport trunk allowed vlan 10,20,30,40

On `SW-ACCESS-02`, interface `GigabitEthernet 0/1` connects to `SW-CORE-01` and is configured as follows:

text
interface GigabitEthernet 0/1
switchport mode trunk
switchport trunk native vlan 99
switchport trunk allowed vlan 10,20,40

End devices connected to `SW-ACCESS-02` on VLAN 30 are unable to reach the default gateway located on `SW-CORE-01`, while hosts on VLAN 10 and VLAN 20 experience no connectivity issues. Which configuration change on `SW-ACCESS-02` will resolve the connectivity issue for VLAN 30 hosts?

Cevabı ve açıklamayı göster

Cevap: Add VLAN 30 to the allowed VLAN list on interface GigabitEthernet 0/1 of SW-ACCESS-02.

Cevap

The connectivity issue for VLAN 30 hosts is resolved by adding VLAN 30 to the allowed VLAN list on interface GigabitEthernet 0/1 of SW-ACCESS-02.
The trunk configuration on the access switch explicitly filters out VLAN 30 because its allowed list is limited to VLANs 10, 20, and 40. Updating the allowed VLAN list on interface GigabitEthernet 0/1 of the access switch to include VLAN 30 permits 802.1Q tagged frames for VLAN 30 to pass across the trunk interface to the core switch default gateway.

Adım Adım Çözüm

1
Analyze the configuration on both ends of the 802.1Q trunk link.
SW-CORE-01 allows VLANs 10, 20, 30, and 40, while SW-ACCESS-02 only allows VLANs 10, 20, and 40.
When a VLAN is omitted from the trunk's allowed list (`switchport trunk allowed vlan`), the switch drops all ingress and egress frames tagged for that specific VLAN ID on that port.
2
Correlate the symptom with the missing configuration.
Hosts on VLAN 30 attached to SW-ACCESS-02 cannot transmit frames across the trunk to SW-CORE-01 because SW-ACCESS-02 blocks VLAN 30 on interface GigabitEthernet 0/1.
The allowed VLAN list acts as a traffic filter for 802.1Q tagged frames across trunk interfaces.
3
Determine the necessary remediation command.
Modify the trunk configuration on SW-ACCESS-02 to append VLAN 30 to the allowed list (`switchport trunk allowed vlan add 30` or updating the list to include 30).
This allows 802.1Q frames tagged with VLAN 30 to pass bidirectionally across the link.

Anahtar Kavram

802.1Q Trunk Allowed VLAN Pruning and Filtering
Soru 238Soru →

A client host on VLAN 10 (10.10.10.0/2410.10.10.0/24) boots up and requires an IPv4 address lease from a centralized DHCP server located at 192.168.100.50192.168.100.50. A Layer 3 switch serves as the DHCP relay agent with an IP helper address configured on SVI 10 (10.10.10.110.10.10.1). What is the correct sequence of network operations during the initial DHCP discover and offer phase?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of network operations is: 1) Client host broadcasts a DHCPDISCOVER packet on UDP port 67 within VLAN 10; 2) Layer 3 switch populates the `giaddr` field with 10.10.10.110.10.10.1 and sends a unicast DHCPDISCOVER packet to 192.168.100.50192.168.100.50 on UDP port 67; 3) DHCP server matches `giaddr` to the 10.10.10.0/2410.10.10.0/24 address pool, selects an available IP, and sends a unicast DHCPOFFER message back to 10.10.10.110.10.10.1; 4) Layer 3 switch receives the unicast DHCPOFFER and forwards it onto VLAN 10 to the requesting client on UDP port 68.
The sequence begins when the host client transmits a broadcast DHCPDISCOVER frame on UDP port 67 inside VLAN 10. The Layer 3 switch (relay agent) intercepts this broadcast on SVI 10, sets the `giaddr` field to its local gateway IP (10.10.10.110.10.10.1), and unicasts the packet to the remote DHCP server at 192.168.100.50192.168.100.50 on UDP port 67. Upon receiving the unicast packet, the DHCP server evaluates `giaddr` to pick an IP address from the matching 10.10.10.0/2410.10.10.0/24 scope and sends a unicast DHCPOFFER reply back to the relay agent (10.10.10.110.10.10.1). Finally, the relay agent forwards the DHCPOFFER onto VLAN 10 where the client receives it on UDP port 68.

Adım Adım Çözüm

1
Client broadcast initialization
DHCPDISCOVER broadcast generated on local VLAN 10 on UDP port 67.
Unconfigured hosts cannot unicast without an assigned IP address.
2
Relay agent interception and `giaddr` insertion
Layer 3 switch intercepts broadcast, inserts its SVI IP (10.10.10.110.10.10.1) into the `giaddr` header field, and converts the packet into a unicast payload directed to 192.168.100.50192.168.100.50 on UDP port 67.
Broadcast packets do not cross router boundaries; unicast conversion and `giaddr` tagging allow cross-subnet DHCP routing.
3
DHCP server pool matching and reply generation
DHCP server receives unicast request, examines `giaddr` (10.10.10.110.10.10.1), queries the corresponding 10.10.10.0/2410.10.10.0/24 scope, reserves an available IPv4 address, and sends a unicast DHCPOFFER back to 10.10.10.110.10.10.1.
The `giaddr` field tells the central server exactly which IP range to allocate from.
4
Relay agent local delivery
Layer 3 switch receives the unicast DHCPOFFER and transmits it onto VLAN 10 addressed to the client on UDP port 68.
The client software listens on UDP port 68 to receive incoming DHCP offer and acknowledgment responses.

Anahtar Kavram

DHCP Relay Agent Operational Packet Flow and `giaddr` Header Processing
Soru 239Soru →

A network engineer is configuring subnets within the 10.50.0.0/1610.50.0.0/16 address space for a new office building. Each subnet must support a minimum of 150150 usable host IP addresses. What is the maximum number of equal-sized subnets that can be created from this block while meeting the host requirement?

Cevabı ve açıklamayı göster

Cevap: 256

Cevap

The maximum number of equal-sized subnets that can be created is 256.
To support at least 150 host devices, 8 host bits are necessary (28−2=2542^8 - 2 = 254 usable hosts). Subtracting 8 host bits from 32 total address bits yields a /24 subnet mask. Borrowing 8 bits from the original /16 network prefix produces 28=2562^8 = 256 subnets.

Adım Adım Çözüm

1
Determine the number of host bits (hh) required for each subnet to accommodate at least 150 usable host IP addresses.
8 host bits are required because 28−2=2542^8 - 2 = 254 usable host addresses (7 host bits only yield 27−2=1262^7 - 2 = 126 usable host addresses).
Two IP addresses per subnet are reserved for the network ID and broadcast address.
2
Calculate the prefix length required for the new subnets.
Prefix length /24/24 (32 total bits−8 host bits=2432 \text{ total bits} - 8 \text{ host bits} = 24).
IPv4 addresses consist of 32 bits divided between network/subnet and host portions.
3
Determine the number of subnet bits borrowed from the original /16 network mask.
8 bits borrowed (24−16=824 - 16 = 8).
Subtracting the original network prefix length from the new subnet prefix length gives the borrowed bits.
4
Calculate the total number of equal-sized subnets that can be created.
256 subnets (28=2562^8 = 256).
The number of subnets generated is 2n2^n, where nn is the number of borrowed subnet bits.

Anahtar Kavram

IPv4 Subnet Masking and Host Capacity Calculations
Soru 240Soru →

An administrator connects two switches, SW-ALPHA and SW-BETA, via an 802.1Q trunk link. Switch SW-ALPHA is configured with an 802.1Q trunking interface where VLAN 50 is explicitly defined as the native VLAN. Switch SW-BETA has a freshly unboxed configuration with default 802.1Q trunking parameters enabled (using VLAN 1 as the native VLAN). Trunking is operational on both sides. Which of the following technical outcomes will occur on this link? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Untagged frames transmitted by SW-ALPHA from VLAN 50 will be placed into VLAN 1 upon arrival at SW-BETA.; Switches will generate CDP or syslog warning messages indicating a native VLAN mismatch condition.

Cevap

Untagged frames transmitted by the first switch from VLAN 50 will be placed into VLAN 1 upon arrival at the second switch, and the switches will generate CDP/syslog warnings indicating a native VLAN mismatch condition.
In 802.1Q trunking, native VLAN traffic is sent untagged across the link. When one switch transmits VLAN 50 traffic untagged and the receiving switch expects VLAN 1 traffic to be untagged, the receiving switch assigns those incoming untagged frames to VLAN 1. Additionally, management protocols such as CDP detect this parameter mismatch across neighboring ports and generate explicit syslog error alerts.

Adım Adım Çözüm

1
Analyze how 802.1Q handles native VLAN traffic.
Frames belonging to the native VLAN are transmitted across the trunk link untagged (without an 802.1Q header).
802.1Q standard dictates that frames belonging to the port's native VLAN carry no 4-byte VLAN tag.
2
Evaluate ingress frame processing on the receiving switch.
When untagged frames arrive at the second switch, it assigns them to its own configured native VLAN (VLAN 1).
Switches implicitly map all incoming untagged trunk frames to their locally configured native VLAN ID.
3
Determine impact on tagged traffic and protocol logging.
Tagged traffic (VLAN 20) remains properly tagged and processed, while protocol daemons (like CDP) log native VLAN mismatch errors.
Native VLAN mismatches affect untagged frame mapping and trigger control-plane diagnostics, but do not stop processing of explicitly tagged frames.

Anahtar Kavram

802.1Q Native VLAN Operation and Mismatch Behavior
ÖncekiSayfa 12 / 22Sonraki
Network Implementation Alıştırma Soruları — CompTIA Network+ — Sayfa 12 | Examkin