CCNA 2 v5.

0 R&S Essentials Final Exam 2014

Take Assessment 1. What are two feat res of a lin!"state ro tin# $roto%ol& 'Choose two.( The database information for each router is obtained from the same source. Ro ters sen) tri##ere) $)ates in res$onse to a %han#e. Ro ters %reate a to$olo#* of the networ! +* sin# information from other ro ters. Paths are chosen based on the lowest number of hops to the designated router. Routers send periodic updates only to neighboring routers. 2. Fill in the +lan!. In IPv6, all routes are level

ultimate routes.

,. Whi%h swit%hin# metho) )ro$s frames that fail the FCS %he%!& ingress port buffering cut!through switching store"an)"forwar) swit%hin# borderless switching 4. Whi%h s mmar* -.v/ stati% ro te statement %an +e %onfi# re) to s mmari0e onl* the ro tes to networ!s 20011)+21%afe11352 thro #h 20011)+21%afe1%011352& ipv6 route "##$%db&%cafe%%'() *#'#'# ipv6 route "##$%db&%cafe%%'6# *#'#'# ipv6 route "##$%db&%cafe%%'6" *#'#'# i$v/ ro te 20011)+21%afe1135/ S03030 5.

$ ,

) " /. When a Cis%o swit%h re%eives nta##e) frames on a 202.14 tr n! $ort5 whi%h 67AN -8 is the traffi% swit%he) to +* )efa lt& data +,A- I. native 67AN -8 unused +,A- I. management +,A- I. 9. A %olle#e mar!etin# )e$artment has a networ!e) stora#e )evi%e that ses the -. a))ress 10.12.9.55 :C. $ort 44, for en%r*$tion5 an) ;8. $ort 4,/5 for vi)eo streamin#. :he %olle#e alrea)* ses .A: on the ro ter that %onne%ts to the -nternet. :he ro ter interfa%e has the $ +li% -. a))ress of 20<.1/5.200.2253,0. :he -. NA: $ool % rrentl* ses the -. a))resses ran#in# from 20<.1/5.200.222"2,/. Whi%h %onfi# ration wo l) the networ! a)ministrator a)) to allow this )evi%e to +e a%%esse) +* the mar!etin# $ersonnel from home& ip nat pool mktv $#.$&./.( $#.$&./.( i$ nat insi)e so r%e stati% t%$ 10.12.9.5 44, 20<.1/5.200.225 44, i$ nat insi)e so r%e stati% )$ 10.12.9.5 4,/5 20<.1/5.200.225 4,/5 ip nat inside source static tcp "#0.$6(."##.""( ))1 $#.$&./.( ))1 ip nat inside source static udp "#0.$6(."##.""( )16( $#.$&./.( )16( -o additional configuration is necessary. ip nat outside source static $#.$&./.( "#0.$6(."##.""( 2. Whi%h statement )es%ri+es a ro te that has +een learne) )*nami%all*& -t is a tomati%all* $)ate) an) maintaine) +* ro tin# $roto%ols. It is unaffected by changes in the topology of the network. It has an administrative distance of $. It is identified by the prefi2 3 in the routing table. <. A networ! a)ministrator is ex$lainin# to a = nior %ollea# e the se of the lt an) #t !e*wor)s when filterin# $a%!ets sin# an exten)e) AC7. Where wo l) the lt or #t !e*wor)s +e se)& in an IPv6 e2tended A3, that stops packets going to one specific destination +,Ain an -.v4 exten)e) AC7 that allows $a%!ets from a ran#e of :C. $orts )estine) for a s$e%ifi% networ! )evi%e

in an IPv) named standard A3, that has specific 4.P protocols that are allowed to be used on a specific server in an IPv6 named A3, that permits 5TP traffic from one particular ,A- getting to another ,A10

Refer to the exhi+it. >ow )i) the ro ter o+tain the last ro te that is shown& The ip address interface configuration mode command was used in addition to the network routing protocol configuration mode command. The ipv6 route command was used. the ip route command was used. Another ro ter in the same or#ani0ation $rovi)e) the )efa lt ro te +* sin# a )*nami% ro tin# $roto%ol. 11

Refer to the exhi+it. A 7a*er , swit%h ro tes for three 67ANs an) %onne%ts to a ro ter for -nternet %onne%tivit*. Whi%h two %onfi# rations wo l) +e a$$lie) to the swit%h& 'Choose two.( '%onfi#(? interfa%e #i#a+itethernet 131 '%onfi#"if(? no swit%h$ort 6config!if78 ip address $0".$6&.$." "((."((."((."(" 6config78 interface vlan $

6config!if78 ip address $0".$6&.$." "((."((."((.# 6config!if78 no shutdown 6config78 interface gigabitethernet$'$ 6config!if78 switchport mode trunk 6config78 interface fastethernet#') 6config!if78 switchport mode trunk '%onfi#(? i$ ro tin# 12. A networ! %ontains m lti$le 67ANs s$annin# m lti$le swit%hes. What ha$$ens when a )evi%e in 67AN 20 sen)s a +roa)%ast Ethernet frame& @nl* )evi%es in 67AN 20 see the frame. .evices in +,A- "# and the management +,A- see the frame. 9nly devices that are connected to the local switch see the frame. All devices in all +,A-s see the frame. 1,

the %orre%t answer of A estion 1, is 1" Ea%h ro ter learns a+o t its own )ire%tl* %onne%te) networ!s. 2" Ea%h ro ter is res$onsi+le for Bsa*in# helloC to its nei#h+ors on )ire%tl* %onne%te) networ!s.

," Ea%h ro ter + il)s a 7in!"State .a%!et '7S.( %ontainin# the state of ea%h )ire%tl* %onne%te) lin! 4" Ea%h ro ter floo)s the 7S. to all nei#h+ors5 who then store all 7S.s re%eive) in a )ata+ase 5" Ea%h ro ter ses the )ata+ase to %onstr %t a %om$lete ma$ of the to$olo#* an) %om$ tes the +est 14. Whi%h two $a%!et filters %o l) a networ! a)ministrator se on an -.v4 exten)e) AC7& 'Choose two.( computer type source T3P hello address -CD. messa#e t*$e )estination ;8. $ort n m+er destination :A3 address 15

Refer to the exhi+it. R1 was %onfi# re) with the stati% ro te %omman) i$ ro te 20<.1/5.200.224 255.255.255.224 S03030 an) %onseA entl* sers on networ! 192.1/.0.031/ are na+le to rea%h reso r%es on the -nternet. >ow sho l) this stati% ro te +e %han#e) to allow ser traffi% from the 7AN to rea%h the -nternet& Add an administrative distance of "(). Chan#e the )estination networ! an) mas! to 0.0.0.0 0.0.0.0 3hange the e2it interface to *#'#'$. Add the ne2t!hop neighbor address of "#0.$6(."##.""6. 1/. >ow is the ro ter -8 for an @S.Fv, ro ter )etermine)& the highest IPv6 address on an active interface the highest ;4I!6) I. on an active interface the hi#hest -.v4 a))ress on an a%tive interfa%e the lowest :A3 address on an active interface

19. :wo em$lo*ees in the Sales )e$artment wor! )ifferent shifts with their la$to$ %om$ ters an) share the same Ethernet $ort in the offi%e. Whi%h set of %omman)s wo l) allow onl* these two la$to$s to se the Ethernet $ort an) %reate violation lo# entr* witho t sh ttin# )own the $ort if a violation o%% rs& switchport mode access switchport port!security swit%h$ort mo)e a%%ess swit%h$ort $ort"se% rit* swit%h$ort $ort"se% rit* maxim m 2 swit%h$ort $ort"se% rit* ma%"a))ress sti%!* swit%h$ort $ort"se% rit* violation restri%t switchport mode access switchport port!security ma2imum " switchport port!security mac!address sticky switchport mode access switchport port!security ma2imum " switchport port!security mac!address sticky switchport port!security violation protect 12. Whi%h two fa%tors are im$ortant when )e%i)in# whi%h interior #atewa* ro tin# $roto%ol to se& 'Choose two.( s$ee) of %onver#en%e s%ala+ilit* I*P selection the autonomous system that is used campus backbone architecture 1<

ultimate route

child route default route level 1 $arent ro te 20. What %a se) the followin# error messa#e to a$$ear& 011111121 E.D"4"ERRF8-SAG7E1 $se% re"violation error )ete%te) on Fa0325 $ ttin# Fa032 in err")isa+le state 011111121 E.@R:FSEC;R-:H"2".SEC;REF6-@7A:-@N1 Se% rit* violation o%% rre)5 %a se) +* DAC a))ress 0011.a0)4.12a0 on $ort FastEthernet032. 0111111,1 E7-NE.R@:@"5";.8@WN1 7ine $roto%ol on -nterfa%e FastEthernet0325 %han#e) state to )own 011111141 E7-NI",";.8@WN1 -nterfa%e FastEthernet0325 %han#e) state to )own An unauthori<ed user tried to telnet to the switch through switch port 5a#'&. -AT was enabled on a router, and a private IP address arrived on switch port 5a#'&. .ort se% rit* was ena+le) on the swit%h $ort5 an) an na thori0e) %onne%tion was ma)e on swit%h $ort Fa032. Another switch was connected to this switch port with the wrong cable. A host with an invalid IP address was connected to a switch port that was previously unused. 21. Whi%h two statements are %hara%teristi%s of ro te) $orts on a m ltila*er swit%h& 'Choose two.( In a switched network, they are mostly configured between switches at the core and distribution layers. They support subinterfaces, like interfaces on the 3isco I9* routers. The interface vlan command has to be entered to create a +,A- on routed ports. :he* are se) for $oint"to"m lti$oint lin!s. :he* are not asso%iate) with a $arti% lar 67AN. 22. A networ! a)ministrator is a))in# AC7s to a new -.v/ m ltiro ter environment. Whi%h -.v/ ACE is a tomati%all* a))e) im$li%itl* at the en) of an AC7 so that two a)=a%ent ro ters %an )is%over ea%h other& permit ip any host ip=address $ermit i%m$ an* an* n)"na permit ip any any deny ip any any 2,

24. What )oes the %ost of an @S.F lin! in)i%ate& A lower %ost in)i%ates a +etter $ath to the )estination than a hi#her %ost )oes. 3ost e>uals bandwidth. A higher cost for an 9*P5 link indicates a faster path to the destination. ,ink cost indicates a proportion of the accumulated value of the route to the destination. 25

Refer to the exhi+it. :he Ji#a+it interfa%es on +oth ro ters have +een %onfi# re) with s +interfa%e n m+ers that mat%h the 67AN n m+ers %onne%te) to them. .Cs

on 67AN 10 sho l) +e a+le to $rint to the .1 $rinter on 67AN 12. .Cs on 67AN 20 sho l) $rint to the $rinters on 67AN 22. What interfa%e an) in what )ire%tion sho l) *o $la%e a stan)ar) AC7 that allows $rintin# to .1 from )ata 67AN 105 + t sto$s the .Cs on 67AN 20 from sin# the .1 $rinter& 'Choose two.( o t+o n) R" *#'#'$ R$ *#'#'# inbound R1 Ji031.12 R" ?i#'$."# 2/. @n a swit%h that is %onfi# re) with m lti$le 67ANs5 whi%h %omman) will remove onl* 67AN 100 from the swit%h& Swit%h'%onfi#(? no vlan 100 *witch6config!if78 no switchport access vlan $## *witch6config!if78 no switchport trunk allowed vlan $## *witch8 delete flash%vlan.dat 29. A ro ter nee)s to +e %onfi# re) to ro te within @S.F area 0. Whi%h two %omman)s are reA ire) to a%%om$lish this& 'Choose two.( RouterA6config!router78 network $0".$6&.".# "((."((."((.# # RouterA6config!router78 network $0".$6&.".# #.#.#."(( # Ro terA'%onfi#(? ro ter os$f 1 Ro terA'%onfi#"ro ter(? networ! 1<2.1/2.2.0 0.0.0.255 area 0 RouterA6config78 router ospf # 22. What is a f n%tion of the )istri+ tion la*er& inter%onne%tion of lar#e"s%ale networ!s in wirin# %losets network access to the user fault isolation high!speed backbone connectivity 2<. A small"si0e) %om$an* has 20 wor!stations an) 2 servers. :he %om$an* has +een assi#ne) a #ro $ of -.v4 a))resses 20<.1/5.200.22432< from its -S.. What te%hnolo#* sho l) the %om$an* im$lement in or)er to allow the wor!stations to a%%ess the servi%es over the -nternet& static -AT )*nami% NA: port address translation .@3P

,0. Whi%h three reA irements are ne%essar* for two @S.Fv2 ro ters to form an a)=a%en%*& 'Choose three.( :he lin! interfa%e s +net mas!s m st mat%h. :he two ro ters m st in%l )e the inter"ro ter lin! networ! in an @S.Fv2 networ! %omman). The 9*P5v" process I. must be the same on each router. :he @S.F hello or )ea) timers on ea%h ro ter m st mat%h. The 9*P5v" process is enabled on the interface by entering the ospf process area!id command. The link interface on each router must be configured with a link!local address. ,1. Whi%h three $ie%es of information )oes a lin!"state ro tin# $roto%ol se initiall* as lin!"state information for lo%all* %onne%te) lin!s& 'Choose three.( the %ost of that lin! the t*$e of networ! lin! the link bandwidth the link ne2t!hop IP address the lin! ro ter interfa%e -. a))ress an) s +net mas! ,2. What is a )isa)vanta#e of NA:& The internal hosts have to use a single public IPv) address for e2ternal communication. :here is no en)"to"en) a))ressin#. The costs of readdressing hosts can be significant for a publicly addressed network. The router does not need to alter the checksum of the IPv) packets. ,,

Refer to the exhi+it. :he $artial %onfi# ration that is shown was se) to %onfi# re ro ter on a sti%! for 67ANS 105 ,05 an) 50. >owever5 testin# shows that there are some %onne%tivit* $ro+lems +etween the 67ANs. Whi%h %onfi# ration error is %a sin# this $ro+lem& There is no IP address configured for the 5ast;thernet #'# interface. A configuration for the native +,A- is missing. :he wron# 67AN has +een %onfi# re) on s +interfa%e Fa030.50. The +,A- IP addresses should belong to the same subnet. ,4

Refer to the exhi+it. R1 has +een %onfi# re) as shown. >owever5 .C1 is not a+le to re%eive an -.v4 a))ress. What is the $ro+lem& R$ is not configured as a .@3Pv) server. A .@3P server must be installed on the same ,A- as the host that is receiving the IP address. The ip address dhcp command was not issued on the interface ?i#'$. :he i$ hel$er"a))ress %omman) was a$$lie) on the wron# interfa%e. ,5. What +est )es%ri+es the o$eration of )istan%e ve%tor ro tin# $roto%ols& They use hop count as their only metric. :he* sen) their ro tin# ta+les to )ire%tl* %onne%te) nei#h+ors. They flood the entire network with routing updates. They only send out updates when a new network is added. ,/. A networ! a)ministrator is sin# the ro ter"on"a"sti%! metho) to %onfi# re inter" 67AN ro tin#. Swit%h $ort Ji131 is se) to %onne%t to the ro ter. Whi%h %omman) sho l) +e entere) to $re$are this $ort for the tas!& *witch6config78 interface gigabitethernet $'$ *witch6config!if78 spanning!tree vlan $ *witch6config78 interface gigabitethernet $'$ *witch6config!if78 spanning!tree portfast Swit%h'%onfi#(? interfa%e #i#a+itethernet 131 Swit%h'%onfi#"if(? swit%h$ort mo)e tr n!

*witch6config78 interface gigabitethernet $'$ *witch6config!if78 switchport access vlan $ ,9. Whi%h three a)vanta#es are $rovi)e) +* stati% ro tin#& 'Choose three.( :he $ath a stati% ro te ses to sen) )ata is !nown. -o intervention is re>uired to maintain changing route information. Stati% ro tin# )oes not a)vertise over the networ!5 th s $rovi)in# +etter se% rit*. Stati% ro tin# t*$i%all* ses less networ! +an)wi)th an) fewer C.; o$erations than )*nami% ro tin# )oes. 3onfiguration of static routes is error!free. *tatic routes scale well as the network grows. ,2. When %onfi# rin# a swit%h to se SS> for virt al terminal %onne%tions5 what is the $ r$ose of the %r*$to !e* #enerate rsa %omman)& show active **@ ports on the switch disconnect **@ connected hosts %reate a $ +li% an) $rivate !e* $air show **@ connected hosts access the **@ database configuration ,<. Whi%h information )oes a swit%h se to $o$ late the DAC a))ress ta+le& the destination :A3 address and the outgoing port the so r%e DAC a))ress an) the in%omin# $ort the source and destination :A3 addresses and the incoming port the source :A3 address and the outgoing port the source and destination :A3 addresses and the outgoing port the destination :A3 address and the incoming port 40

Refer to the exhi+it. A networ! a)ministrator is %onfi# rin# a ro ter as a 8>C.v/ server. :he a)ministrator iss es a show i$v/ )h%$ $ool %omman) to verif* the %onfi# ration. Whi%h statement ex$lains the reason that the n m+er of a%tive %lients is 0& The IPv6 .@3P pool configuration has no IPv6 address range specified. :he state is not maintaine) +* the 8>C.v/ server n)er stateless 8>C.v/ o$eration. The default gateway address is not provided in the pool. -o clients have communicated with the .@3Pv6 server yet. 41. @$en the .: A%tivit*. .erform the tas!s in the a%tivit* instr %tions an) then answer the A estion. What is the $ro+lem $reventin# .C0 an) .C1 from %omm ni%atin# with .C2 an) .C,& The routers are using different 9*P5 process I.s. :he serial interfa%es of the ro ters are in )ifferent s +nets. -o router I. has been configured on the routers. The gigabit interfaces are passive. 42

Whi%h %omman) will %reate a stati% ro te on R2 in or)er to rea%h .C G& R$6config78 ip route $/".$6.".# "((."((."((.# $/".$6."."() R1'%onfi#(? i$ ro te 192.1/.2.0 255.255.255.0 192.1/.,.1 R$6config78 ip route $/".$6.".$ "((."((."((.# $/".$6.1.$ R$6config78 ip route $/".$6.1.# "((."((."((.# $/".$6."."() 4,. Whi%h $ro+lem is evi)ent if the show i$ interfa%e %omman) shows that the interfa%e is )own an) the line $roto%ol is )own& The no shutdown command has not been issued on the interface. There is an IP address conflict with the configured address on the interface. A %a+le has not +een atta%he) to the $ort. An encapsulation mismatch has occurred. 44. Whi%h three val es or sets of val es are in%l )e) when %reatin# an exten)e) a%%ess %ontrol list entr*& 'Choose three.( a%%ess list n m+er +etween 100 an) 1<< source subnet mask and wildcard mask default gateway address and wildcard mask so r%e a))ress an) wil)%ar) mas! destination subnet mask and wildcard mask access list number between $ and 00 )estination a))ress an) wil)%ar) mas!

45. A networ! a)ministrator is )esi#nin# an AC7. :he networ!s 1<2.1/2.1.03255 1<2.1/2.0.03255 1<2.1/2.0.1223255 1<2.1/2.1.12232/5 an) 1<2.1/2.1.1<232/ are affe%te) +* the AC7. Whi%h wil)%ar) mas!5 if an*5 is the most effi%ient to se when s$e%if*in# all of these networ!s in a sin#le AC7 $ermit entr*& #.#.#.$"/ #.#.#."(( 0.0.1.255 #.#."((."(( A single A3, command and wildcard mask should not be used to specify these particular networks or other traffic will be permitted or denied and present a security risk. 4/. Whi%h !in) of messa#e is sent +* a 8>C. %lient when its -. a))ress lease has ex$ire)& a 8>C.RE4;ES: ni%ast messa#e a .@3PR;A4;*T broadcast message a .@3P.I*39+;R broadcast message a .@3P.I*39+;R unicast message 49. What ha$$ens imme)iatel* after two @S.F ro ters have ex%han#e) hello $a%!ets an) have forme) a nei#h+or a)=a%en%*& They re>uest more information about their databases. They negotiate the election process if they are on a multiaccess network. They e2change .B. packets in order to advertise parameters such as hello and dead intervals. :he* ex%han#e a++reviate) lists of their 7S8Gs 42. What +enefit )oes NA:/4 $rovi)e& It allows sites to use private IPv) addresses, and thus hides the internal addressing structure from hosts on public IPv) networks. It allows sites to connect multiple IPv) hosts to the Internet via the use of a single public IPv) address. -t allows sites to %onne%t -.v/ hosts to an -.v4 networ! +* translatin# the -.v/ a))resses to -.v4 a))resses. It allows sites to use private IPv6 addresses and translates them to global IPv6 addresses. 4<. What is the $ r$ose of settin# the native 67AN se$arate from )ata 67ANs&

The native +,A- is for routers and switches to e2change their management information, so it should be different from data +,A-s. A se$arate 67AN sho l) +e se) to %arr* n%ommon nta##e) frames to avoi) +an)wi)th %ontention on )ata 67ANs. The native +,A- is for carrying +,A- management traffic only. The security of management frames that are carried in the native +,A- can be enhanced 50. Whi%h %omman)5 when iss e) in the interfa%e %onfi# ration mo)e of a ro ter5 ena+les the interfa%e to a%A ire an -.v4 a))ress a tomati%all* from an -S.5 when that lin! to the -S. is ena+le)& ip helper!address i$ a))ress )h%$ ip dhcp pool service dhcp 51. Whi%h statement is %orre%t a+o t -.v/ ro tin#& IPv6 routing is enabled by default on 3isco routers. IPv6 routes appear in the same routing table as IPv) routes. -.v/ ses the lin!"lo%al a))ress of nei#h+ors as the next"ho$ a))ress for )*nami% ro tes. IPv6 only supports the 9*P5 and ;I?RP routing protocols 52. A ro ter has se) the @S.F $roto%ol to learn a ro te to the 192.1/.,2.031< networ!. Whi%h %omman) will im$lement a +a%! $ floatin# stati% ro te to this networ!& ip route $/".$6.1".# "((."((.#.# *#'#'# $## i$ ro te 192.1/.,2.0 255.255.224.0 S03030 200 ip route $/".$6.#.# "((."((.")#.# *#'#'# "## ip route $/".$6.#.# "((."((."").# *#'#'# $## 5,

Refer to the exhi+it. >ow man* +roa)%ast an) %ollision )omains exist in the to$olo#*& ( broadcast domains and $$ collision domains $# broadcast domains and ( collision domains $6 broadcast domains and $$ collision domains 5 +roa)%ast )omains an) 10 %ollision )omains 54. Whi%h two %omman)s %an +e se) to verif* the %ontent an) $la%ement of a%%ess %ontrol lists& 'Choose two.( show processes show cdp neighbor show a%%ess"lists show ip route show r nnin#"%onfi# 55. Whi%h t*$e of traffi% wo l) most li!el* have $ro+lems when $assin# thro #h a NA: )evi%e& -.se% .-* Telnet @TTP I3:P

5/. @$en the .: A%tivit*. .erform the tas!s in the a%tivit* instr %tions an) then answer the A estion. Whi%h !e*wor) is )is$la*e) on the we+ +rowser& -AT worksC ?oodDobC Well)oneK -AT configuredC 59

Refer to the exhi+it. What s mmar* stati% a))ress wo l) +e %onfi# re) on R1 to a)vertise to R,& $0".$6&.#.#'") $0".$6&.#.#'"1 1<2.1/2.0.0322 $0".$6&.#.#'"$ 52 Fill in the +lan!. *tatic routes are configured by the use of the i$ ro te global configuration command.