CCNA - Boson C

Which of the following can be implemented to help against spoofed management frames in a wireless network?

802.11w

Which of the following ports is used by Trivial File Transfer Protocol (TFTP)?

UDP port 69.

Baby giant?

Ethernet frame that is up to 1,600 bytes in length (where the max default size is 1,500).

Fields found in the header of a UDP packet?

Checksum, dest port, source port, length.

Globally disable LLDP?

no lldp run

Which of the following WLC interfaces supports mobility management for wireless clients?

Virtual interface.

192.168.1.30

The branch office will require 4,000 IPv4 addresses. Your supervisor instructed you to conserve IPv4 address space. Which subnet masks should you use?

255.255.240.0

The FastEthernet port on SwitchA will be blocked.

Which command should you issue from global configuration mode to config a router as an NTP server?

ntp master

You want to configure SSH for incoming vty connections on a new router. The router is running a K9 iOS image but has not yet been config with a host name, domain name, of an RSA key pair. In addition, the vty lines are not yet config to accept incoming SSH connections.

You issue the crypto key generate rsa command from global config mode.

What happens?

Please define a hostname other than Router.

Which of the following statements are not true about Cisco Discovery Protocol (CDP)?

It can be configured at interface level to transmit CDP packets but not receive them && … not transmit them.

RouterA(config)#access-list 102 deny ip 192.168.10.0 0.0.0.255 any log

RouterA(config)#access-list 102 permit icmp any host 1.2.3.5 unreachable

RouterA(config)#access-list 102 deny ip any any

RouterA(config)#interface s0/0

RouterA(config-if)#ip access-group 102 in

What’s the difference between a Next-generation Firewall (NGFW), and and Next-generation Intrusion Prevention System (NGIPS)?

An NGFW can filter traffic based on the application types, whereas an NGIPS can block traffic based on application and user behavior.

192.168.0.128/30 (Point-to-Point link between routers).

Administrative distance (AD).

Which of the following subnet addresses is most appropriate for the point-to-link between RouterA and RouterB?

192.168.0.128/30

You need to determine how traffic will flow between the two switches in the topology shown above. No VLANs are configured on the switches.

Which port will be blocked?

The FastEthernet port on SwitchA will be blocked.

Which of the following can be implemented to help protect against spoofed management frames in a wireless network?

802.11w

Which of the following fields are found in the header of a UDP packet?

length

checksum

destination port

source port

In a controller-based network, the functions of which of the following protocols are most likely to be moved to a centralized controller?

EIGRP

OSPF

Which of the following is a troubleshooting command that can be used to display basic information about the computer’s network interfaces and to perfrom various functions on those interfaces?

ipconfing

Which of the following IDS devices are the best at detecting new security threats?

anomaly-detection IDSs

You issue the following commands on a Cisco switch:

SwitchA#configure terminal

SwitchA(config)#interface fastethernet 0/5

SwitchA(config-if)#switchport mode trunk

SwitchA(config-if)#switchport trunk encapsulation dot1q

SwitchA(config-if)#switchport trunk allowed vlan add 1-99

SwitchA(config-if)#switchport trunk allowed vlan remove 100-199

SwitchA(config-if)#switchport trunk allowed vlan except 200-299

Which VLANs are allowed to be trunked over port FastEthernet 0/5? (Select the best answer.)

VLANs 1-199 and 300-4094

Which of the following most accurately describes the difference between a Next-Gen Firewall and and a Next-Gen Intrusion Prevention System?

A NGFW can filter traffic based on application types, whereas an NGIPS can block traffic based on application and user behavior.

Which of the following is true about IPSec configured in transport mode?

It does not encrypt the IP header.

Which of the following commands should you issue on a switch port so that no more than two devices can send traffic into the port?

switchport port-security maximum 2

You issue the show ip route command on RouterB and receive the following output:

<output omitted>

10.0.0.0/8 is variably subnetted, 6 subnets

O 10.1.1.0/30 [110/65] via 10.1.1.14, 00:01:29, FastEthernet1/0

O 10.1.1.8/30 [110/65] via 10.1.1.14, 00:01:29, FastEthernet1/0

C 10.1.1.12/30 is directly connected, FastEthernet1/0

L 10.1.1.13/32 is directly connected, FastEthernet1/0

C 10.1.1.16/30 is directly connected, Serial0/0

L 10.1.1.17/32 is directly connected, Serial0/0

192.0.6.0/24 is variably subnetted, 2 subnets

C 192.0.6.0/24 is directly connected, FastEthernet2/0

L 192.0.6.1/32 is directly connected, FastEthernet2/0

O 192.0.5.0 [110/65] via 10.1.1.18, 00:02:04, Serial0/0

O 192.0.3.0 [110/66] via 10.1.1.14, 00:01:29, FastEthernet1/0

O 192.0.4.0 [110/2] via 10.1.1.14, 00:01:29, FastEthernet1/0

Which of the following statements are accurate about the route to 192.0.3.0/24? (Select 2 choices.)

The metric is 66

The AD is 110

You want to configure SSH for incoming vty connections on a new router. The router is running a K9 IOS image but has not yet been configured with a host name, a domain name, or an RSA key pair. In addition, the vty lines are not yet configured to accept incoming SSH connections.

You issue the crypto key generate rsa command from global configuration mode.

Which of the following messages will you most likely receive? (Select the best answer.)

Please define a hostname other than Router.

In which of the following situations does a router use AD values to determine route selection? (Select the best answer.)

when multiple routes to the same destination network are received, and each of these routes is received from a different routing protocol

You are creating a network addressing scheme for a new branch office. The branch office will require 4,000 IPv4 addresses. Your supervisor has instructed you to conserve IPv4 address space.

Which of the following subnet masks should you use for the branch office?

255.255.240.0

Which of the following is an IEEE Ethernet standard that uses single-mode fiber cable?

1000BaseLX

Which of the following is an IEEE Ethernet standard that uses twinaxial cable?

1000BaseCX

Which of the following is an IEEE Ethernet standard that uses multi-mode fiber cable?

1000BaseSX

Which of the following is an proprietary Ethernet standard that uses multi-mode fiber cable?

1000BaseZX

Which of the following FHRPs would use the virtual MAC address 0000.5E00.0101?

Only Virtual Router Redundancy Protocol (VRRP)

You issue the following command on a Cisco router in global configuration mode:

ipv6 route 2001:db8:a::/32 fastethernet 0/1

Which of the following have you created? (Select the best answer.)

a directly attached static route

You want to configure your Cisco router to provide IP addresses to the computers on your network. The IP addresses should be assigned from the 192.168.1.0/26 address range.

Which of the following commands should you issue? (Select 2 choices.)

network 192.168.1.0 255.255.255.192

ip dhcp pool 1

Which of the following does Terraform use as a modeling language?

HashiCorp Configuration Language (HCL)

You issue the show ip route command on RouterA and receive the following partial output:

RouterA#show ip route

<output omitted>

Gateway of last resort is 10.19.54.20 to network 10.140.0.0

O E2 172.150.0.0 [110/5] via 10.19.54.6, 0:01:00, FastEthernet1/2

What does the 110 in the output indicate? (Select the best answer.)

The AD

applies an IPv4 ACL to the console

access-class

applies an IPv6 ACL to the console

ipv6 access-class

applies an ACL to an IPv4 interface

ip access-group

applies and ACL to an IPv6 interface

ipv6 traffic-filter

Which of the following is a Cisco-proprietary FHRP that elects an AVG and up to four primary AVFs?

Gateway Load Balancing Protocol (GLBP)

Which of the following commands should you issue to globally disable LLDP?

no lldp run

Which of the following IPv6 address prefixes are not routable?

FF02::/16

FE80::/10

You receive the following output on the console of RouterA:

*Dec 1 14:20:07.059: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 192.168.1.2 (FastEthernet0/0) is down: interface down

Which of the following statements is true? (Select the best answer.)

A notification-level severity code is being displayed in the output.

Which of the following refers to the process of buffering packets in a software queue on a QoS-enabled interface? (Select the best answer.)

queuing

Your company has added an email server and a web server to the existing network infrastructure. Company policy stipulates that only inbound SMTP traffic be allowed to pass to Email Server and that only inbound web traffic be allowed to pass to Web Server. All other traffic must be prevented from reaching the subnet.

Which access lists should be applied to the S0/0 interface of Router1? (Select 2 choices.)

access-list 101 permit tcp any 10.10.10.10 0.0.0.0 eq 25

access-list 101 permit tcp any 10.10.10.11 0.0.0.0 eq 25

Which of the following CRUD operations corresponds to the HTTP PUT method?

update

You administer the network in the exhibit.

You issue the show ip route command on Router1 and receive the following partial output:

Router1#show ip route

<output omitted>

Gateway of last resort is not set

10.0.0.0/30 is subnetted, 1 subnets

O 10.10.10.0 [110/20] via 192.168.1.2, 00:00:00, Ethernet0/0

192.168.1.0/30 is subnetted, 1 subnets

C 192.168.1.0 is directly connected, Ethernet0/0

You issue the ip route 10.10.10.0 255.255.255.252 ethernet 0/0 command on Router1.

Which of the following will happen next? (Select the best answer.)

The OSPF route will be replaced with a static route.

You administer the OSPF network in the above exhibit.

RouterA has been configured with a default route to the ISP through the Serial 0/0 interface. RouterB is not configured with a gateway of last resort. OSPF has been properly configured on both routers and is converged. You want RouterB to forward traffic that is destined for the Internet to RouterA.

Which of the following commands could you issue on RouterA to accomplish your goal? (Select the best answer.)

RouterA(config-router)#default-information originate

Which of the following ports is used by TFTP?

UDP port 69

In a 2-tier network, which layers are combined together?

core and distribution.

HostA is a computer on your company's network. RouterA is a NAT router. HostA sends a packet to HostB, and HostB sends a packet back to HostA.

Which of the following addresses is an outside local address? (Select the best answer.)

192.168.1.30

Which of the following commands enables a Cisco router to send DNS queries?

ip domain lookup

You want to create a user account named boson with the password eX$1mM@x on a router. The password should be converted to an MD5 hash and stored on the router.

Which of the following commands should you issue on the router? (Select the best answer.)

username boson secret eX$1mM@x

You administer the network shown in the exhibit. You have created an inspection rule named boson and applied the inspection rule to the untrusted interface in the outbound direction.

You want to protect the internal network from external threats while allowing legitimate IP traffic from the internal network to communicate with the external network.

Which of the following command sets should you issue? (Select the best answer.)

RouterA(config)#access-list 102 deny ip 192.168.10.0 0.0.0.255 any log

RouterA(config)#access-list 102 permit icmp any host 1.2.3.5 unreachable

RouterA(config)#access-list 102 deny ip any any

RouterA(config)#interface s0/0

RouterA(config-if)#ip access-group 102 in

RouterA and RouterB are OSPF routers that are configured with matching hello timer values, dead timer values, and authentication passwords. Both routers are operating in OSPF Area 0 and have been configured to operate on the same subnet. However, the routers cannot communicate.

Which of the following could be the problem? (Select 2 choices.)

mismatched MTU values

a passive interface config

Which of the following commands should you issue from global configuration mode to configure a Cisco router to operate as an NTP server?

ntp master

You are configuring security for the network shown in the topology diagram. You want to configure Dynamic ARP Inspection (DAI) on Switch1.

Which port or ports on the switch should you configure as trusted?

port Fa2/1.

SwitchA and SwitchB are connected over an 802.1Q trunk link. The native VLAN for the trunk link is configured on SwitchA and VLAN 111 on SwitchB. All of the hosts reside in the same IP subnet.

What of the following is true regarding the connectivity between the hosts in this scenario?

HostD can ping HostA

Which of the following do not indicate a duplex mismatch on an Ethernet LAN?

baby giants

You issue the following commands on SwitchA:

SwitchA#configure terminal

SwitchA(config)#interface fastethernet 0/1

SwitchA(config-if)#switchport port-security

SwitchA(config-if)#switchport port-security maximum 12

You want to configure SwitchA to discard traffic and increment the SecurityViolation counter when it receives traffic on FastEthernet 0/1 from a host with an unauthorized MAC address.

Which of the following commands should you issue? (Select the best answer.)

switchport port-security violation restrict

Which of the following WLC interfaces supports mobility management for wireless clients?

the virtual interface

configures and encrypts a clear-text password for gaining access to enable mode

enable secret password

configures an encrypted vty login password

password 7 hash

enables global password encryption

service password-encryption

configures a clear-text password for gaining access to enable mode

enable password password

configures a previously encrypted password for gaining access to enable mode

enable secret 5 hash

You issue the following commands on a Cisco router named RouterA:

RouterA(config)#ip access-list extended boson

RouterA(config-ext-nacl)#deny tcp any any neq 23

RouterA(config-ext-nacl)#permit tcp any any eq 20 21

RouterA(config-ext-nacl)#permit tcp any any range 22 80

RouterA(config-ext-nacl)#permit tcp any any gt 442

Which of the following statements about the ACL is true? (Select the best answer.)

Traffic that matches TCP destination port 23 will be permitted.

You administer the network in the above exhibit. OSPF is configured with the default settings.

You issue the show ip route ospf command on RouterE.

Which of the following are you least likely to see in the output? (Select the best answer.)

0 192.0.6.1 [110/1] via 10.10.10.7, 00:23:40, FastEthernet1/1

Which of the following statements are not true about CDP? (Select 2 choices.)

It can be configured at the interface level to transmit CDP packets but not receive them.

It can be configured at the interface level to receive CDP packets but not transmit them.

You issue the following commands on a Catalyst 9300 switch:

SwitchA#configure terminal

SwitchA(config)#interface gigabitethernet 1/0/1

SwitchA(config-if)#switchport mode trunk

SwitchA(config-if)#switchport trunk encapsulation dot1q

SwitchA(config-if)#switchport trunk native vlan 44

SwitchA(config-if)#switchport trunk allowed vlan remove 55

Which of the following statements is true regarding VLAN traffic when it is sent over port Gi1/0/1? (Select the best answer.)

VLAN 44 traffic will be untagged.

Given a host IP address of 48.25.24.71/21, what is the broadcast address for the subnetwork? (Select the best answer.)

48.25.31.255

Which of the following technologies is implemented in WPA3-Personal to replace the use of PSKs in WPA2-Personal? (Select the best answer.)

Simultaneous Authentication of Equals (SAE)