An engineer is configuring NAT to translate the source subnet of 10.10.0.0/24 to any of three addresses 192.168.30.1, 192.168.3.2, 192.168.3.3 . Which configuration should be used?
A. enable configure terminal ip nat pool mypool 192.168.3.1 192.168.3.3 prefix-length 30 route-map permit 10.10.0.0 255.255.255.0 ip nat outside destination list 1 pool mypool interface g1/1 ip nat inside interface g1/2 ip nat outside
B. enable configure terminal ip nat pool mypool 192.168.3.1 192.168.3.3 prefix-length 30 access-list 1 permit 10.10.0.0 0.0.0.255 ip nat outside destination list 1 pool mypool interface g1/1 ip nat inside interface g1/2 ip nat outside
C. enable configure terminal ip nat pool mypool 192.168.3.1 192.168.3.3 prefix-length 30 access-list 1 permit 10.10.0.0 0.0.0.255 ip nat inside source list 1 pool mypool interface g1/1 ip nat inside interface g1/2 ip nat outside
D. enable configure terminal ip nat pool mypool 192.168.3.1 192.168.3.3 prefix-length 30 access-list 1 permit 10.10.0.0 0.0.0.255 interface g1/1 ip nat inside interface g1/2 ip nat outside
Correct Answer: C
An office has 8 floors with approximately 30-40 users per floor What command must be configured on the router Switched Virtual Interface to use address space efficiently?
A. ip address 192.168.0.0 255.255.0.0
B. ip address 192.168.0.0 255.255.254.0
C. ip address 192.168.0.0 255.255.255.128
D. ip address 192.168.0.0 255.255.255.224
Correct Answer: B
Which device performs stateful inspection of traffic?
A. firewall
B. switch
C. access point
D. wireless controller
Correct Answer: A
What criteria is used first during the root port selection process?
A. local port ID
B. lowest path cost to the root bridge
C. lowest neighbora's bridge ID
D. lowest neighbora's port ID
Correct Answer: B
Router R2 is configured with multiple routes to reach network 10 1.1.0/24 from router R1. What protocol is chosen by router R2 to reach the destination network 10.1.1.0/24?
A. eBGP
B. static
C. OSPF
D. EIGRP
Correct Answer: B
A network administrator enabled port security on a switch interface connected to a printer. What is the next configuration action in order to allow the port to learn the MAC address of the printer and insert it into the table automatically?
A. enable dynamic MAC address learning
B. implement static MAC addressing.
C. enable sticky MAC addressing
D. implement auto MAC address learning
Correct Answer: C
Which configuration ensures that the switch is always the root for VLAN 750?
A. Switch(config)#spanning-tree vlan 750 priority 38003685
B. Switch(config)#spanning-tree vlan 750 root primary
C. Switch(config)#spanning-tree vlan 750 priority 614440
D. Switch(config)#spanning-tree vlan 750 priority 0
Correct Answer: D
An engineer must configure an OSPF neighbor relationship between router R1 and R3 The authentication configuration has been configured and the connecting interfaces are in the same 192.168 1.0/30 sublet. What are the next two steps to complete the configuration? (Choose two.)
A. configure the hello and dead timers to match on both sides
B. configure the same process ID for the router OSPF process
C. configure the same router ID on both routing processes
D. Configure the interfaces as OSPF active on both sides.
E. configure both interfaces with the same area ID
Correct Answer: AE
What protocol allows an engineer to back up 20 network router configurations globally while using the copy function?
A. SMTP
B. SNMP
C. TCP
D. FTP
Correct Answer: B
Which state does the switch port move to when PortFast is enabled?
A. learning
B. forwarding
C. blocking
D. listening
Correct Answer: B
What are two roles of Domain Name Services (DNS)? (Choose Two)
A. builds a flat structure of DNS names for more efficient IP operations
B. encrypts network Traffic as it travels across a WAN by default
C. improves security by protecting IP addresses under Fully Qualified Domain Names (FQDNs)
D. enables applications to identify resources by name instead of IP address
E. allows a single host name to be shared across more than one IP address
Correct Answer: DE
How do TCP and UDP differ in the way they guarantee packet delivery?
A. TCP uses checksum, acknowledgement, and retransmissions, and UDP uses checksums only.
B. TCP uses retransmissions, acknowledgement and parity checks and UDP uses cyclic redundancy checks only.
C. TCP uses checksum, parity checks, and retransmissions, and UDP uses acknowledgements only.
D. TCP uses two-dimensional parity checks, checksums, and cyclic redundancy checks and UDP uses retransmissions only.
Correct Answer: A
A device detects two stations transmitting frames at the same time. This condition occurs after the first 64 bytes of the frame is received interface counter increments?
A. collision
B. CRC
C. runt
D. late collision
Correct Answer: D
Which technology is used to improve web traffic performance by proxy caching?
A. WSA
B. Firepower
C. ASA
D. FireSIGHT
Correct Answer: A
Using direct sequence spread spectrum, which three 2.4-GHz channels are used to limit collisions?
A. 1,6.11
B. 1,5,10
C. 1,2,3
D. 5,6,7
Correct Answer: A
Which type of attack can be mitigated by dynamic ARP inspection?
A. worm
B. malware
C. DDoS
D. man-in-the-middle
Correct Answer: D
What are two benefits of controller-based networking compared to traditional networking?
A. controller-based increases network bandwidth usage, while traditional lightens the load on the network.
B. controller-based inflates software costs, while traditional decreases individual licensing costs
C. Controller-based reduces network configuration complexity, while traditional increases the potential for errors
D. Controller-based provides centralization of key IT functions. While traditional requires distributes management function
E. controller-based allows for fewer network failure, while traditional increases failure rates.
Correct Answer: CD
What software defined architecture plane assists network devices with making packet-forwarding decisions by providing Layer 2 reachability and Layer 3 routing information?
A. data plane
B. control plane
C. policy plane
D. management plane
Correct Answer: B
Which WAN access technology is preferred for a small office / home office architecture?
A. broadband cable access
B. frame-relay packet switching
C. dedicated point-to-point leased line
D. Integrated Services Digital Network switching.
Correct Answer: A
The SW1 interface g0/1 is in the down/down state.which two configurations are valid reasons for the interface conditions?(choose two)
A. There is a duplex mismatch
B. There is a speed mismatch
C. There is a protocol mismatch
D. The interface is shut down
E. The interface is error-disabled
Correct Answer: DE
which type of IPv6 address is publicly routable in the same way as IPv4 public address?
A. global unicast
B. link-local
C. unique local
D. multicast
Correct Answer: A
Refer to the exhibit.which configuration on RTR-1 denies SSH access from PC-1 to any RTP-1 interface and allows all other traffic?
A. access-list 100 deny tcp host 172.16.1.33 any eq 22 access-list 100 permit ip any any interface GigabitEthernet0/0 ip access-group 100 in
B. access-list 100 deny top host 172.16.1.33 any eq 22 access-list 100 permit ip any any line vty 0 15 access-class 100 in
C. access-list 100 deny tcp host 172.16.1.33 any eq 23 access-list 100 permit ip any any interface GigabitEthernet0/0 ip access-group 100 in
D. access-list 100 deny tcp host 172.16.1.33 any eq 23 access-list 100 permit ip any any line vty 0 15 access-class 100 in
Correct Answer: B
The service password-encryption command is entered on a router. What is the effect of this configuration?
A. restricts unauthorized users from viewing clear-text passwords in the running configuration
B. encrypts the password exchange when a VPN tunnel is established
C. prevents network administrators from configuring clear-text passwords
D. protects the VLAN database from unauthorized PC connections on the switch
Correct Answer: A
what occurs to frames during the process of frame flooding?
A. Frames are sent to every port on the switch in the same VLAN except from the originating port
B. Frames are sent to every port on the switch that has a matching entry in the MAC address table.
C. Frames are sent to all ports, including those that are assigned to other VLANs.
D. Frames are sent to every port on the switch in the same VLAN.
Correct Answer: A
What is the primary purpose of a First Hop Redundancy Protocol?
A. It allows directly connected neighbors to share configuration information.
B. It allows a router to use bridge priorities to create multiple loop-free paths to a single destination.
C. It reduces routing failures by allowing Layer 3 load balancing between OSPF neighbors that have the same link metric.
D. It reduces routing failures by allowing more than one router to represent itself, as the default gateway of a network.
Correct Answer: D
Refer to the exhibit,what commands are needed to add a subinterface to Ethernet0/0 on R1 to allow for VLAN 20.with IP address 10.20.20.1/24?
A. R(config)#interface ethernet0/0 R(config)#encapsulation dot1q 20 R(config)#ip address 10.20.20.1 255.255.255.0
B. R(config)#interface ethernet0/0.20 R(config)#encapsulation dot1q 20 R(config)#ip address 10.20.20.1 255.255.255.0
C. R(config)#interface ethernet0/0 R(config)#ip address 10.20.20.1 255.255.255.0
D. R(config)#interface ethernet0/0.20 R(config)#ip address 10.20.20.1 255.255.255.0
Correct Answer: B
Refer to the exhibit.To which device does Router 1 send packets that are destined to host 10.10.13.165?
A. Router2
B. Router3
C. Router4
D. Router5
Correct Answer: B
Refer to the exhibit.The loopback 1 interface of the Atlanta router must reach the loopback 3 interface of the Washington router.Which two static host routes must be configured on the New York router?(choose two)
A. ipv6 route 2000::1/128 2012::2
B. ipv6 route 2000::3/128 2023::3
C. ipv6 route 2000::3/128 s0/0/0
D. ipv6 route 2000::1/128 s0/0/1
E. ipv6 route 2000::1/128 2012::1
Correct Answer: BE
Refer to the exhibit. A packet is being sent across router R1 to host 172.16.3.14. To which destination does the router send the packet?
A. 207.165.200.246 via Serial0/1/0
B. 207.165.200.254 via Serial0/0/0
C. 207.165 200.254 via Serial0/0/1
D. 207.165.200.250 via Serial0/0/0
Correct Answer: C
Which goal is achieved by the implementation of private IPv4 addressing on a network?
A. allows servers and workstations to communicate across public network boundaries
B. provides a reduction in size of the forwarding table on network routers
C. allows communication across the Internet to other private networks
D. provides an added level of protection against Internet exposure
Correct Answer: D
Refer to the exhibit. A network administrator assumes a task to complete the connectivity between PC A and the File Server Switch A and Switch B have been partially configured with VLANs 10, 11, 12, and 13 What is the next step in the configuration?
A. Add PDA to VLAN 10 and the File Server to VLAN 11 for VLAN segmentation
B. Add VLAN 13 to the trunk links on Switch A and Switch B for VLAN propagation
C. Add a router on a stick between Switch A and Switch B allowing for Inter VLAN routing
D. Add PC A to the same subnet as the File Server allowing for intra-VLAN communication
Correct Answer: B
When a WPA2-PSK WLAN is configured in the Wireless LAN Controller, what is the minimum number of characters that is required in ASCII formar?
A. 6
B. 8
C. 12
D. 18
Correct Answer: B
Refer to the exhibit Which outcome is expected when PC_A sends data to PC_B?
A. The switch rewrites the source and destination MAC addresses with its own
B. The source and destination MAC addresses remain the same
C. The source MAC address is changed
D. The destination MAC address is replaced with ffff.ffff.ffff
Correct Answer: B
An engineer needs to configure LLDP to send the port description time length value (TLV). What command sequence must be implemented?
A. switch#lldp port-description
B. switch(config)#lldp port-description
C. switch(config-line}#lldp port-description
D. switch(config-if)#lldp port-description
Correct Answer: B
Refer to the exhibit. Which switch becomes the root bridge?
A. S1
B. S2
C. S3
D. S4
Correct Answer: B
When the active router in an HSRP group fails, what router assumes the role and forwards packets?
A. forwarding
B. backup
C. standby
D. listening
Correct Answer: C
An organization secures its network with multi-factor authentication using an authenticator app on employee smartphones. How is the applic secured in the case of a user’s smartphone being lost or stolen?
A. The application requires the user to enter a PIN before it provides the second factor
B. the application challenges a user by requiring an administrator password to reactivate when the smartphone is rebooted
C. The application requires an aadministrator password to reactivate after a configured interval
D. The application verifies that the user is in a specific location before it provides the second factor
Correct Answer: A
Refer to the exhibit. What action establishes the OSPF neighbor relationship without forming an adjacency?
A. modify priority
B. modify process ID
C. modify hello interval
D. modity network type
Correct Answer: C
Refer to the exhibit. An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate directly to enable privilege mode via Telnet using a local username and password?
A. R1(config)#username admin R1(config-if)#line vty 0 4 R1(config-line)#password p@ss1234
B. R1(config)#username admin R1(config-if)#line vty 0 4 R1(config-line)#password p@ss1234 R1(config-line)#transport input telnet
C. R1(config)#username admin secret p@ss1234 R1(config-if)#line vty 0 4 R1(config-line)#login local R1(config)#enable secret p@ss1234
D. R1(config)#username admin privilege 15 secret p@ss1234 R1(config-if)#line vty 0 4 R1(config-line)#login local
Correct Answer: D
Which result occurs when PortFast is enabled on an interface that is connected to another switch?
A. Spanning tree may fail to detect a switching loop in the network that causes broadcast storms
B. VTP is allowed to propagate VLAN configuration information from switch to switch automatically
C. Root port choice and spanning tree recalculation are accelerated when a switch link goes down
D. After spanning tree converges PortFast shuts down any port that receives BPDUs.
Correct Answer: A
Refer to the exhibit. If OSPF is running on this network,how does Router 2 handle traffic from Site B to 10.10.13.128/25 at Site A?
A. It sends packets out of interface Fa0/2 only.
B. It sends packets out of interface Fa0/1 only.
C. It cannot send packets to 10.10.13 128/25
D. It load-balances traffic out of Fa0/1 and Fa0/2
Correct Answer: C
Refer to the exhibit.Which type of route does R1 use to reach host 10.10.13.10/32?
A. default route
B. network route
C. host route
D. floating static route
Correct Answer: B
Refer to the exhibit.which route type is configured to reach the internet?
A. network route
B. floating static route
C. host route
D. default route
Correct Answer: D
Which MAC address is recognized as a VRRP virtual address?
A. 0000.5E00.010a
B. 0005.3711.0975
C. 0000.0C07.AC99
D. 0007.C070/AB01
Correct Answer: A
How does Cisco DNA Center gather data from the network?
A. Devices establish an IPsec tunnel to exchange data with the controller
B. Devices use the call-home protocol to periodically send data to the controller.
C. Network devices use different services like SNMP, syslog, and streaming telemetry to send data to the controller.
D. The Cisco CLI Analyzer tool gathers data from each licensed network device .and streams it to the controller.
Correct Answer: C
A user configured OSPF and advertised the Gigabit Ethernet interface in OSPF By default, which type of OSPF network does thisinterface belong to?
A. point-to-multipoint
B. point-to-point
C. broadcast
D. nonbroadcast
Correct Answer: C
what is the difference regrading reliability and communication type between TCP and UDP?
A. TCP is reliable and is a connectionless protocol; UDP is not reliable and is a connection-oriented protocol.
B. TCP is not reliable and is a connectionless protocol; UDP is reliable and is a connection-oriented protocol.
C. TCP is reliable and is a connection-oriented protocol; UDP is not reliable and is a connectionless protocol.
D. TCP is not reliable and is a connection-oriented protocol; UDP is reliable and is a connectionless protocol.
Correct Answer: C
An engineer is asked to protect unused ports that are configured in the default VLAN on a switch. Which two steps will fulfill the request? (Choose two)
A. Configure the ports in an EtherChannel.
B. Administratively shut down the ports
C. Configure the port type as access and place in VLAN 99
D. Configure the ports as trunk ports
E. Enable the Cisco Discovery Protocol
Correct Answer: BC
If a notice-level messaging is sent to a syslog server, which event has occurred?
A. A network device has restarted
B. An ARP inspection has failed
C. A routing instance has flapped
D. A debug operation is running
Correct Answer: C