1/44
Looks like no tags are added yet.

Which of the following subnet addresses is most appropriate for the point-to-link between RouterA and RouterB?
192.168.0.128/30

You need to determine how traffic will flow between the two switches in the topology shown above. No VLANs are configured on the switches.
Which port will be blocked?
The FastEthernet port on SwitchA will be blocked.
Which of the following can be implemented to help protect against spoofed management frames in a wireless network?
802.11w
Which of the following fields are found in the header of a UDP packet?
length
checksum
destination port
source port
In a controller-based network, the functions of which of the following protocols are most likely to be moved to a centralized controller?
EIGRP
OSPF
Which of the following is a troubleshooting command that can be used to display basic information about the computer’s network interfaces and to perfrom various functions on those interfaces?
ipconfing
Which of the following IDS devices are the best at detecting new security threats?
anomaly-detection IDSs
You issue the following commands on a Cisco switch:
SwitchA#configure terminal
SwitchA(config)#interface fastethernet 0/5
SwitchA(config-if)#switchport mode trunk
SwitchA(config-if)#switchport trunk encapsulation dot1q
SwitchA(config-if)#switchport trunk allowed vlan add 1-99
SwitchA(config-if)#switchport trunk allowed vlan remove 100-199
SwitchA(config-if)#switchport trunk allowed vlan except 200-299
Which VLANs are allowed to be trunked over port FastEthernet 0/5? (Select the best answer.)
VLANs 1-199 and 300-4094
Which of the following most accurately describes the difference between a Next-Gen Firewall and and a Next-Gen Intrusion Prevention System?
A NGFW can filter traffic based on application types, whereas an NGIPS can block traffic based on application and user behavior.
Which of the following is true about IPSec configured in transport mode?
It does not encrypt the IP header.
Which of the following commands should you issue on a switch port so that no more than two devices can send traffic into the port?
switchport port-security maximum 2
You issue the show ip route command on RouterB and receive the following output:
<output omitted>
10.0.0.0/8 is variably subnetted, 6 subnets
O 10.1.1.0/30 [110/65] via 10.1.1.14, 00:01:29, FastEthernet1/0
O 10.1.1.8/30 [110/65] via 10.1.1.14, 00:01:29, FastEthernet1/0
C 10.1.1.12/30 is directly connected, FastEthernet1/0
L 10.1.1.13/32 is directly connected, FastEthernet1/0
C 10.1.1.16/30 is directly connected, Serial0/0
L 10.1.1.17/32 is directly connected, Serial0/0
192.0.6.0/24 is variably subnetted, 2 subnets
C 192.0.6.0/24 is directly connected, FastEthernet2/0
L 192.0.6.1/32 is directly connected, FastEthernet2/0
O 192.0.5.0 [110/65] via 10.1.1.18, 00:02:04, Serial0/0
O 192.0.3.0 [110/66] via 10.1.1.14, 00:01:29, FastEthernet1/0
O 192.0.4.0 [110/2] via 10.1.1.14, 00:01:29, FastEthernet1/0
Which of the following statements are accurate about the route to 192.0.3.0/24? (Select 2 choices.)
The metric is 66
The AD is 110
You want to configure SSH for incoming vty connections on a new router. The router is running a K9 IOS image but has not yet been configured with a host name, a domain name, or an RSA key pair. In addition, the vty lines are not yet configured to accept incoming SSH connections.
You issue the crypto key generate rsa command from global configuration mode.
Which of the following messages will you most likely receive? (Select the best answer.)
Please define a hostname other than Router.
In which of the following situations does a router use AD values to determine route selection? (Select the best answer.)
when multiple routes to the same destination network are received, and each of these routes is received from a different routing protocol
You are creating a network addressing scheme for a new branch office. The branch office will require 4,000 IPv4 addresses. Your supervisor has instructed you to conserve IPv4 address space.
Which of the following subnet masks should you use for the branch office?
255.255.240.0
Which of the following is an IEEE Ethernet standard that uses single-mode fiber cable?
1000BaseLX
Which of the following is an IEEE Ethernet standard that uses twinaxial cable?
1000BaseCX
Which of the following is an IEEE Ethernet standard that uses multi-mode fiber cable?
1000BaseSX
Which of the following is an proprietary Ethernet standard that uses multi-mode fiber cable?
1000BaseZX
Which of the following FHRPs would use the virtual MAC address 0000.5E00.0101?
Only Virtual Router Redundancy Protocol (VRRP)
You issue the following command on a Cisco router in global configuration mode:
ipv6 route 2001:db8:a::/32 fastethernet 0/1
Which of the following have you created? (Select the best answer.)
a directly attached static route
You want to configure your Cisco router to provide IP addresses to the computers on your network. The IP addresses should be assigned from the 192.168.1.0/26 address range.
Which of the following commands should you issue? (Select 2 choices.)
network 192.168.1.0 255.255.255.192
ip dhcp pool 1
Which of the following does Terraform use as a modeling language?
HashiCorp Configuration Language (HCL)
You issue the show ip route command on RouterA and receive the following partial output:
RouterA#show ip route
<output omitted>
Gateway of last resort is 10.19.54.20 to network 10.140.0.0
O E2 172.150.0.0 [110/5] via 10.19.54.6, 0:01:00, FastEthernet1/2
What does the 110 in the output indicate? (Select the best answer.)
The AD
applies an IPv4 ACL to the console
access-class
applies an IPv6 ACL to the console
ipv6 access-class
applies an ACL to an IPv4 interface
ip access-group
applies and ACL to an IPv6 interface
ipv6 traffic-filter
Which of the following is a Cisco-proprietary FHRP that elects an AVG and up to four primary AVFs?
Gateway Load Balancing Protocol (GLBP)
Which of the following commands should you issue to globally disable LLDP?
no lldp run
Which of the following IPv6 address prefixes are not routable?
FF02::/16
FE80::/10
You receive the following output on the console of RouterA:
*Dec 1 14:20:07.059: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 192.168.1.2 (FastEthernet0/0) is down: interface down
Which of the following statements is true? (Select the best answer.)
A notification-level severity code is being displayed in the output.
Which of the following refers to the process of buffering packets in a software queue on a QoS-enabled interface? (Select the best answer.)
queuing

Your company has added an email server and a web server to the existing network infrastructure. Company policy stipulates that only inbound SMTP traffic be allowed to pass to Email Server and that only inbound web traffic be allowed to pass to Web Server. All other traffic must be prevented from reaching the subnet.
Which access lists should be applied to the S0/0 interface of Router1? (Select 2 choices.)
access-list 101 permit tcp any 10.10.10.10 0.0.0.0 eq 25
access-list 101 permit tcp any 10.10.10.11 0.0.0.0 eq 25
Which of the following CRUD operations corresponds to the HTTP PUT method?
update
![<p>You administer the network in the exhibit.</p><p>You issue the show ip route command on Router1 and receive the following partial output:</p><p>Router1#show ip route</p><p><output omitted></p><p>Gateway of last resort is not set</p><p> 10.0.0.0/30 is subnetted, 1 subnets</p><p>O 10.10.10.0 [110/20] via 192.168.1.2, 00:00:00, Ethernet0/0</p><p> 192.168.1.0/30 is subnetted, 1 subnets</p><p>C 192.168.1.0 is directly connected, Ethernet0/0</p><p>You issue the ip route 10.10.10.0 255.255.255.252 ethernet 0/0 command on Router1.</p><p>Which of the following will happen next? (Select the best answer.)</p>](https://assets.knowt.com/user-attachments/9d096a43-3781-4f99-b823-82ba25de3573.png)
You administer the network in the exhibit.
You issue the show ip route command on Router1 and receive the following partial output:
Router1#show ip route
<output omitted>
Gateway of last resort is not set
10.0.0.0/30 is subnetted, 1 subnets
O 10.10.10.0 [110/20] via 192.168.1.2, 00:00:00, Ethernet0/0
192.168.1.0/30 is subnetted, 1 subnets
C 192.168.1.0 is directly connected, Ethernet0/0
You issue the ip route 10.10.10.0 255.255.255.252 ethernet 0/0 command on Router1.
Which of the following will happen next? (Select the best answer.)
The OSPF route will be replaced with a static route.

You administer the OSPF network in the above exhibit.
RouterA has been configured with a default route to the ISP through the Serial 0/0 interface. RouterB is not configured with a gateway of last resort. OSPF has been properly configured on both routers and is converged. You want RouterB to forward traffic that is destined for the Internet to RouterA.
Which of the following commands could you issue on RouterA to accomplish your goal? (Select the best answer.)
RouterA(config-router)#default-information originate
Which of the following ports is used by TFTP?
UDP port 69
In a 2-tier network, which layers are combined together?
core and distribution.

HostA is a computer on your company's network. RouterA is a NAT router. HostA sends a packet to HostB, and HostB sends a packet back to HostA.
Which of the following addresses is an outside local address? (Select the best answer.)
192.168.1.30
Which of the following commands enables a Cisco router to send DNS queries?
ip domain lookup
You want to create a user account named boson with the password eX$1mM@x on a router. The password should be converted to an MD5 hash and stored on the router.
Which of the following commands should you issue on the router? (Select the best answer.)
username boson secret eX$1mM@x

You administer the network shown in the exhibit. You have created an inspection rule named boson and applied the inspection rule to the untrusted interface in the outbound direction.
You want to protect the internal network from external threats while allowing legitimate IP traffic from the internal network to communicate with the external network.
Which of the following command sets should you issue? (Select the best answer.)
RouterA(config)#access-list 102 deny ip 192.168.10.0 0.0.0.255 any log
RouterA(config)#access-list 102 permit icmp any host 1.2.3.5 unreachable
RouterA(config)#access-list 102 deny ip any any
RouterA(config)#interface s0/0
RouterA(config-if)#ip access-group 102 in
RouterA and RouterB are OSPF routers that are configured with matching hello timer values, dead timer values, and authentication passwords. Both routers are operating in OSPF Area 0 and have been configured to operate on the same subnet. However, the routers cannot communicate.
Which of the following could be the problem? (Select 2 choices.)
mismatched MTU values
a passive interface config
Which of the following commands should you issue from global configuration mode to configure a Cisco router to operate as an NTP server?