CCNA (200-301) Practice Exam #4

Question 1 of 54

1. Question

The previous network engineer had configured the R1 with the wrong static route commands. You are responsible to troubleshoot the network by matching the wrong static commands with the issues. All the commands from the left side are configured on the R1.

Sort elements

Wrong prefix
Wrong neighbor address
Wrong interface on R1
Wrong neighbor link local
Missing outgoing interface

ipv6 route 2000:2:2:2::/64 2000:1:2:3::2
ipv6 route 2000:1:1:1::/64 2000:1:2:3::3
ipv6 route 2000:1:1:1::/64 G0/2
ipv6 route 2000:1:1:1::/64 S0/1/1 FE80::FF:FE00:1
ipv6 route 2000:1:1:1::/64 FE80::FF:FE00:2

Question 2 of 54

2. Question

You are responsible to configure a static route on R1’s outgoing interface, in order to support traffic between the subnets. R2 is already configured. Type the command to configure a static route on R1’s outgoing interface.

R1(config)#

Question 3 of 54

3. Question

The router R2 has been configured with the ipv6 address 2000:1:1:1::1/64 command on its G0/1 interface as shown in the figure. The router creates a link-local address of FE80::FF:FE00:11 as well. The interface is working. Which of the following routes will the router add to its IPv6 routing table? (Choose two answers.)

A route for 2000:1:1:1::/64
A route for 2000:1:1:1::1/128
A route for FE80::FF:FE00:11/64
A route for FE80::FF:FE00:11/128
A route for 2000:1:2:3::/64

Question 4 of 54

4. Question

PC1, PC2, and Router R1 all connect to the same VLAN and IPv6 subnet. PC1 wants to send its first IPv6 packet to PC2. What protocol or message will PC1 use to discover the MAC address to which PC1 should send the Ethernet frame that encapsulates this IPv6 packet?

NDP NS
DHCP
ARP
RARP

Question 5 of 54

5. Question

Type the ipv6 related configuration commands that match the descriptions below.

Type the command that enables IPv6 routing on the router –

Type the command that configures the interface with ipv6 address 2002:1:2:3::4/64 –

Type the command that enables IPv6 on that interface and cause the router to use DHCP to try to lease an IPv6 address –

Question 6 of 54

6. Question

Which is the most preferred and secure way of connecting to a WLC GUI to configure a new WLAN?

SSH
HTTP
HTTPS
FTP

Question 7 of 54

7. Question

Which of the following controller interfaces map a WLAN to a VLAN?

Management interface
Virtual interface
Service port interface
Dynamic interface

Question 8 of 54

8. Question

Which of the following options is the maximum number of WLANs you can configure on a Cisco wireless controller?

5
152
251
512

Question 9 of 54

9. Question

You are responsible to configure a switch to put interfaces F0/1 and F0/2 into the same Layer 2 EtherChannel. Which of the following terms will you use in the configuration commands?

EtherChannel
Channel-group
Ethernet-Channel
PortChannel

Question 10 of 54

10. Question

Cisco uses the term ‘distribution switch’ to refer to switches used to connect to endpoint devices.

True
False

Question 11 of 54

11. Question

Type the commands that correspond to the following descriptions.

List details about the state of STP on the switch, including the state of each port.

Change the bridge priority of the switch to 8192 for the VLAN 20

Set the STP mode to pvst

Question 12 of 54

12. Question

STP and RSTP open up the LAN to several different types of possible security exposures. One of the problems is:

An attacker could connect a switch to one of these ports, one with a low STP/RSTP priority value, and become the root switch. The new STP/RSTP topology could have worse performance than the desired topology.

Type the Cisco’s feature that helps defeat the security risk.

Question 13 of 54

13. Question

RSTP and STP elect designated ports on each LAN segment with the same rules and tiebreakers.

True
False

Question 14 of 54

14. Question

Match the Ethernet speeds with the RSTP default costs:

Sort elements

20,000
2000
20
200

1 Gbps
10 Gbps
1 Tbps
100 Gbps

Question 15 of 54

15. Question

When you open a web browser and type in the hostname www.examsdigest.com, your computer does not send an IP packet with a destination IP address www.examsdigest.com; it sends an IP packet to an IP address used by the web server for Examsdigest. TCP/IP needs a way to let a computer find the IP address used by the listed hostname.

That method uses the Domain Name System (DNS).

True
False

Question 16 of 54

16. Question

Which of the following protocols is used from PC1 to learn information from some other device on the same network?

ping
DNS
DHCP
ARP

Question 17 of 54

17. Question

Which of the following statements are functions of a routing protocol? (Choose two answers.)

Learning routes and putting those routes into the routing table for routes advertised to the router by its neighboring routers
Advertising known routes to neighboring routers
Learning routes for subnets directly connected to the router
Forwarding IP packets based on a packet’s destination IP address

Question 18 of 54

18. Question

Answer the following fill-in-the-blank question:

The host sends packets to its default gateway if the IP address is in a different subnet than the host.

Question 19 of 54

19. Question

Which of the following address check a router when making a decision about routing TCP/IP packets?

Destination MAC address
Source IP address
Source MAC address
Destination IP address

Question 20 of 54

20. Question

Which of the following options is a security feature that rejects invalid and malicious ARP packets and prevents a class of man-in-the-middle attacks?

DoS
DAI
Packet secure
ARP protect

Question 21 of 54

21. Question

You are responsible to enable DHCP snooping on the SW1. The R1 is a DHCP relay agent that needs to be trusted. SW1 places all the ports on VLAN 8.

Type the commands in order to configure DHCP snooping on the SW1 based on the diagram below.

!start configuration
SW1#

SW1(config)#

SW1(config)#

SW1(config)#

SW1(config-if)#

Question 22 of 54

22. Question

What devices can be used to implement DHCP Snooping? (Choose two answers)

Hub
Layer 2 switches
Routers
Layer 3 switches
Access Points

Question 23 of 54

23. Question

Your PC connects to a LAN and uses DHCP to lease an IP address for the first time. Of the usual four DHCP messages that flow between the PC (DHCP client) and the DHCP server, which ones do the server send? (Choose two answers)

Acknowledgment
Request
Offer
Discover

Question 24 of 54

24. Question

Given the following OSPF network commands, type the wildcard masks to match the requirements.

Requirement: Match addresses that begin with 110.20
Command: network 110.20.0.0 . . .

Requirement: Match addresses that begin with 192
Command: network 192.2.0.0 . . .

Requirement: Match addresses that begin with 170.20.5
Command: network 110.2.5.0 . . .

Requirement: Match all addresses
Command: network 0.0.0.0 . . .

Requirement: Match only one address 53.48.3.78
Command:network 53.48.3.78 . . .

Question 25 of 54

25. Question

The senior network engineer typed the following commands on the R1.

R1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#interface g0/0/0
R1(config-if)#ip ospf cost 6
R1(config-if)#interface g0/1/0
R1(config-if)#ip ospf cost 7
R1(config-if)#^Z
R1#

What command will you type in order to confirm the OSPF interface costs?

R1#

Question 26 of 54

26. Question

Type the command that lists the interfaces on which the OSPF protocol is enabled.

R1#

Question 27 of 54

27. Question

A network engineer connects routers R5 and R6 to the same Ethernet LAN and configures them to use OSPFv2. Which answers describe a combination of settings that would prevent the two routers from becoming OSPF neighbors?

Both routers’ interface IP addresses are in the same subnet
Both routers’ OSPF process uses process ID 3
Both routers’ OSPF process uses router ID 42.42.42.42
Both routers’ interfaces use an OSPF Dead interval of 80

Question 28 of 54

28. Question

Your company plans to start using public cloud service and now you are considering different WAN options. Your main concern is security by keeping the data private while also providing good QoS services. Which of the following options are under consideration? (Choose two answers.)

Using private WAN connections directly to the cloud provider
Using an Internet connection without VPN
Using an Internet connection with VPN
Using an intercloud exchange

Question 29 of 54

29. Question

Match the cloud “As a Service” models with the respective descriptions.

Sort elements

Infrastructure as a Service
Software as a Service
Platform as a Service

A form of cloud computing that delivers fundamental compute, network, and storage resources to consumers on-demand, over the internet, and on a pay-as-you-go basis.
A software distribution model in which a third-party provider hosts applications and makes them available to customers over the Internet.

A complete development and deployment environment in the cloud, with resources that enable you to deliver everything from simple cloud-based apps to sophisticated, cloud-enabled enterprise applications.

Question 30 of 54

30. Question

Your company decides to move away from manual configuration methods, to start making changes by editing centralized configuration files. The issues you are facing with non-centralized configuration files are:

1) You don’t know who engineer made the changes in the configuration file.
2) You don’t know the changes in the configuration file over time.

Which of the following tools should your company use to solve these issues?

version control system
centralized control system
configuration control system
automatic control system

Question 31 of 54

31. Question

Which of the following configuration management tools uses agentless architecture for managing network devices?

Ansible
Puppet
Chef
Chef and Puppet

Question 32 of 54

32. Question

You are connected on a router R1, type the command to connect to R2 using SSH.

Use the following login credentials in order to get access to R2.
R2’s IP address: 145.167.2.1
username: userexamsdigest
password: passexamsdigest

R1#

R2>

Question 33 of 54

33. Question

The commands `ping` and `traceroute` send messages in the network to test connectivity and rely on other devices to send back a reply

True
False

Question 34 of 54

34. Question

Answer the following fill-in-the-blank by typing the range of the Class C public IP networks.

–

Question 35 of 54

35. Question

Which of the following addresses are valid Class C network IDs? (Choose two answers)

195.0.0.0
22.22.3.0
222.0.0.0
191.255.255.0
127.0.0.0

Question 36 of 54

36. Question

The senior network engineer asked you to type the last usable address for a host from the last subnet according to the following details:

Network 9.0.0.0 (Class A)
Mask 255.255.0.0 (for all subnets)

Question 37 of 54

37. Question

Match the IP addresses to their default subnet mask:

Sort elements

255.255.0.0
255.255.255.0
255.0.0.0

188.187.186.185
204.203.202.201
55.44.22.11

Question 38 of 54

38. Question

A network designer asked you how many subnets (S) bits does he need to create 100 subnets? (Type only the number)

Question 39 of 54

39. Question

Match the dotted-decimal notation (DDN) with the equivalent binary mask

Sort elements

255.255.255.252
255.192.0.0
255.255.224.0
255.255.255.240

11111111.11111111.11111111.11111100
11111111.11000000.00000000.00000000
11111111.11111111.11100000.00000000
11111111.11111111.11111111.11110000

Question 40 of 54

40. Question

Your senior network engineer tells you to configure the DHCP server to lease the last 100 usable IP addresses in subnet 12.5.4.0/23. Which of the following IP addresses could be leased as a result of your new configuration?

12.5.1.156
12.5.5.200
12.5.4.254
12.5.255.200

Question 41 of 54

41. Question

Which of the following answers lists the prefix (CIDR) format equivalent of 255.192.0.0?

/8
/9
/10
/11

Question 42 of 54

42. Question

The broadcast address from the IP address 67.68.67.68/12 is 67.79.255.255.

True
False

Question 43 of 54

43. Question

The senior network engineer assigned you the following tasks. You are responsible to type next to each task the command that produces the corresponding result:

Create and store the keys required by SSH:

Configure the switch as a DHCP client to discover its IPv4 address, mask, and default gateway:

Configure the switch’s default gateway IPv4 address to 192.155.2.1:

List the currently used configuration:

List the commands in the current history buffer:

Question 44 of 54

44. Question

In which of the following modes of the CLI could you configure the duplex setting for interface Fast Ethernet 0/2?

Global configuration mode
Enable mode
Interface configuration mode
VLAN mode

Question 45 of 54

45. Question

Configure the speed, duplex, and add a description on the Switch Examsdigest following the given configuration details.

Configuration details:

Interface = Fast Ethernet 0/1
Duplex = full
Speed = 100
Description = Link to Printer on 1st floor

Examsdigest#

Enter configuration commands, one per line. End with CNTL/Z.

Examsdigest(config)#

Examsdigest(config-if)#

Examsdigest(config-if)#

Examsdigest(config-if)#

Examsdigest(config-if)# exit

Question 46 of 54

46. Question

The outputs below are used to verify the DHCP-Learned information on a switch on the Vlan 1. Your role is to type the commands that produce the following outputs.

Examsdigest#
Temp IP addr: 192.168.1.101 for peer on Interface: Vlan1 Temp sub net mask: 255.255.255.0
DHCP Lease server: 192.168.1.1, state: 3 Bound
DHCP transaction id: 1966
Lease: 86400 secs, Renewal: 43200 secs, Rebind: 75600 secs
Temp default-gateway addr: 192.168.1.1
Next timer fires after: 11:59:45
Retry count: 0 Client-ID: cisco-0023.e21b.4cc0-Vl1
Hostname: Examsdigest

Examsdigest#
Vlan1 is up, line protocol is up
Hardware is EtherSVI, address is 0023.e21b.4cc0 (bia 0023.e21b.4cc0)
Internet address is 192.168.1.101/24
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
! lines omitted for brevity

Question 47 of 54

47. Question

Configure the interface VLAN 5 of the switch to learn the IP address with DHCP.

Examsdigest#

Enter configuration commands, one per line. End with CNTL/Z.

Examsdigest(config)#

Examsdigest(config-if)#

Examsdigest(config-if)#

Examsdigest(config-if)# ^Z

Examsdigest#
00:38:20: %LINK-3-UPDOWN: Interface Vlan1, changed state to up
00:38:21: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up

Question 48 of 54

48. Question

You have been tasked to configure the IPv4 address on the switch only on the VLAN 1 following the details below.

IP address: 199.255.240.100
Subnet mask: 255.255.255.0
Default gateway: 199.255.240.1

!Configure the IPv4 address and the subnet mask here

Examsdigest#

Examsdigest(config)#

Examsdigest(config-if)#

Examsdigest(config-if)# no shutdown

00:25:07: %LINK-3-UPDOWN: Interface Vlan1, changed state to up
00:25:08: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up

Examsdigest(config-if)# exit

!Configure the default gateway here

Examsdigest(config)#

Question 49 of 54

49. Question

Follow the steps below to configure the basic passwords for the Console, Telnet, and Enable.

Step 1. Configure the enable password. The password should be examsdigest

Examsdigest#
Examsdigest(config)#

Step 2. Configure the console password. The password should be examsdigest

Examsdigest#(config)#
Examsdigest#(config-line)#
Examsdigest#(config-line)# login
Examsdigest#(config-line)# exit

Step 3. Configure the Telnet (vty) password for all 16 vty lines. The password should be examsdigest

Examsdigest#(config)#
Examsdigest#(config-line)#
Examsdigest#(config-line)# login
Examsdigest#(config-line)# end
Examsdigest#

Question 50 of 54

50. Question

A Layer 2 switch configuration places all its physical ports into VLAN 2. The IP addressing plan shows that address 175.28.1.150 (with mask 255.255.255.0) is reserved for use by this new LAN switch and that 175.28.1.254 is already configured on the router connected to that same VLAN. The switch needs to support SSH connections into the switch from any subnet in the network. Which of the following commands are part of the required configuration in this case? (Choose two answers.)

The switch cannot support SSH because all its ports connect to VLAN 2, and the IP address must be configured on interface VLAN 1.
The ip address 175.28.1.150 255.255.255.0 command in interface vlan 2 configuration mode.
The ip default-gateway 175.28.1.254 command in global configuration mode.
The ip address 172.16.2.250 255.255.255.0 command in interface vlan 1 configuration mode.
The ip default-gateway 175.28.1.150 command in global configuration mode.

Question 51 of 54

51. Question

Match the access-list statements with their logic.

Sort elements

access-list 101 deny udp any gt 10455 host 30.3.3.3 eq 25
access-list 101 deny udp any lt 10455 host 30.3.3.3 eq 25
access-list 101 deny udp host 30.3.3.3 gt 10455 any eq 25
access-list 101 deny udp host 30.3.3.3 lt 10455 any eq 25

Deny packets with a UDP header, any source IP address with source port greater than 10455, a destination IP address 30.3.3.3 and a destination port equal to 25.
Deny packets with a UDP header, any source IP address with source port less than 10455, a destination IP address 30.3.3.3 and a destination port equal to 25.
Deny packets with a UDP header, a source IP address 30.3.3.3 and a source port greater than 10455, any destination IP address 30.3.3.3 with destination port equal to 25.
Deny packets with a UDP header, a source IP address 30.3.3.3 and a source port less than 10455, any destination IP address 30.3.3.3 with destination port equal to 25.

Question 52 of 54

52. Question

Convert the following binary masks to decimal masks.

Binary mask: 11111111.11111111.11000000.00000000
Decimal mask: . . .

Binary mask: 11111111.11100000.00000000.00000000
Decimal mask: . . .

Binary mask: 11111110.00000000.00000000.00000000
Decimal mask: . . .

Binary mask: 11111111.11111100.00000000.00000000
Decimal mask: . . .

Question 53 of 54

53. Question

Convert the following decimal masks to binary masks.

Decimal mask: 255.255.192.0
Binary mask: . . .

Decimal mask: 224.0.0.0
Binary mask: . . .

Decimal mask: 255.255.128.0
Binary mask: . . .

Decimal mask: 255.255.255.240
Binary mask: . . .

Question 54 of 54

54. Question

Examine the following show command output on a router configured for dynamic NAT:

— Inside Source
access-list 1 pool examsdigest
pool examsdigest: netmask 255.255.255.240
start 190.1.1.1 end 190.1.1.10
type generic, total addresses 10, allocated 10 (100%), misses 595

You are responsible to find out why users are not being able to reach the Internet.

The cause is not related to dynamic NAT
The command output does not provide any clue to identify the problem
Dynamic NAT can't use Standard ACLs
The NAT pool does not have enough entries to fulfill the user's requests

Anastasia-Instructor September 3, 2022

Quiz Summary

Information

Results

Results

Categories

1. Question

The previous network engineer had configured the R1 with the wrong static route commands. You are responsible to troubleshoot the network by matching the wrong static commands with the issues. All the commands from the left side are configured on the R1.

Sort elements

2. Question

You are responsible to configure a static route on R1’s outgoing interface, in order to support traffic between the subnets. R2 is already configured. Type the command to configure a static route on R1’s outgoing interface.

R1(config)#

3. Question

4. Question

PC1, PC2, and Router R1 all connect to the same VLAN and IPv6 subnet. PC1 wants to send its first IPv6 packet to PC2. What protocol or message will PC1 use to discover the MAC address to which PC1 should send the Ethernet frame that encapsulates this IPv6 packet?

5. Question

Type the ipv6 related configuration commands that match the descriptions below.

Type the command that enables IPv6 routing on the router –

Type the command that configures the interface with ipv6 address 2002:1:2:3::4/64 –

Type the command that enables IPv6 on that interface and cause the router to use DHCP to try to lease an IPv6 address –

6. Question

Which is the most preferred and secure way of connecting to a WLC GUI to configure a new WLAN?

7. Question

Which of the following controller interfaces map a WLAN to a VLAN?

8. Question

Which of the following options is the maximum number of WLANs you can configure on a Cisco wireless controller?

9. Question

You are responsible to configure a switch to put interfaces F0/1 and F0/2 into the same Layer 2 EtherChannel. Which of the following terms will you use in the configuration commands?

10. Question

Cisco uses the term ‘distribution switch’ to refer to switches used to connect to endpoint devices.

11. Question

Type the commands that correspond to the following descriptions.

List details about the state of STP on the switch, including the state of each port.

Change the bridge priority of the switch to 8192 for the VLAN 20

Set the STP mode to pvst

12. Question

STP and RSTP open up the LAN to several different types of possible security exposures. One of the problems is:

An attacker could connect a switch to one of these ports, one with a low STP/RSTP priority value, and become the root switch. The new STP/RSTP topology could have worse performance than the desired topology.

Type the Cisco’s feature that helps defeat the security risk.

13. Question

RSTP and STP elect designated ports on each LAN segment with the same rules and tiebreakers.

14. Question

Match the Ethernet speeds with the RSTP default costs:

Sort elements

15. Question

That method uses the Domain Name System (DNS).

16. Question

Which of the following protocols is used from PC1 to learn information from some other device on the same network?

17. Question

Which of the following statements are functions of a routing protocol? (Choose two answers.)

18. Question

Answer the following fill-in-the-blank question:

The host sends packets to its default gateway if the IP address is in a different subnet than the host.

19. Question

Which of the following address check a router when making a decision about routing TCP/IP packets?

20. Question

Which of the following options is a security feature that rejects invalid and malicious ARP packets and prevents a class of man-in-the-middle attacks?

21. Question

You are responsible to enable DHCP snooping on the SW1. The R1 is a DHCP relay agent that needs to be trusted. SW1 places all the ports on VLAN 8.

Type the commands in order to configure DHCP snooping on the SW1 based on the diagram below.

!start configuration SW1#

SW1(config)#

SW1(config)#

SW1(config)#

SW1(config-if)#

22. Question

What devices can be used to implement DHCP Snooping? (Choose two answers)

23. Question

Your PC connects to a LAN and uses DHCP to lease an IP address for the first time. Of the usual four DHCP messages that flow between the PC (DHCP client) and the DHCP server, which ones do the server send? (Choose two answers)

24. Question

Given the following OSPF network commands, type the wildcard masks to match the requirements.

Requirement: Match addresses that begin with 110.20 Command: network 110.20.0.0 . . .

Requirement: Match addresses that begin with 192 Command: network 192.2.0.0 . . .

Requirement: Match addresses that begin with 170.20.5 Command: network 110.2.5.0 . . .

Requirement: Match all addresses Command: network 0.0.0.0 . . .

Requirement: Match only one address 53.48.3.78 Command:network 53.48.3.78 . . .

25. Question

The senior network engineer typed the following commands on the R1.

What command will you type in order to confirm the OSPF interface costs?

!start configuration
SW1#

Requirement: Match addresses that begin with 110.20
Command: network 110.20.0.0 . . .

Requirement: Match addresses that begin with 192
Command: network 192.2.0.0 . . .

Requirement: Match addresses that begin with 170.20.5
Command: network 110.2.5.0 . . .

Requirement: Match all addresses
Command: network 0.0.0.0 . . .

Requirement: Match only one address 53.48.3.78
Command:network 53.48.3.78 . . .

1) You don’t know who engineer made the changes in the configuration file.
2) You don’t know the changes in the configuration file over time.

Use the following login credentials in order to get access to R2.
R2’s IP address: 145.167.2.1
username: userexamsdigest
password: passexamsdigest

The commands `ping` and `traceroute` send messages in the network to test connectivity and rely on other devices to send back a reply

Network 9.0.0.0 (Class A)
Mask 255.255.0.0 (for all subnets)