cap15-16

Refer to the exhibit. Based on the output that is shown, what type of NAT has been implemented?. dynamic NAT with a pool of two public IP addresses. static NAT with a NAT pool. PAT using an external interface. static NAT with one entry.

Match the steps with the actions that are involved when an internal host with IP address 192.168.10.10 attempts to send a packet to an external server at the IP address 209.165.200.254 across a router R1 that is running dynamic NAT. (Not all options are used.). step 1. step 2. step 3. step 4. step 5.

Refer to the exhibit. What has to be done in order to complete the static NAT configuration on R1?. R1 should be configured with the command ip nat inside source static 209.165.200.200 192.168.11.11 . Interface S0/0/0 should be configured with the command ip nat outside . Interface Fa0/0 should be configured with the command no ip nat inside . R1 should be configured with the command ip nat inside source static 209.165.200.1 192.168.11.11 .

Refer to the exhibit. Given the commands as shown, how many hosts on the internal LAN off R1 can have simultaneous NAT translations on R1?. 1. 255. 244. 10.

What is a potential disadvantage when implementing HSRP as compared to GLBP?. HSRP does not provide load balancing with multiple active routers. HSRP does not function in a multivendor environment. HSRP does not have the capability to support IPv6 addresses. HSRP provides default gateway failover only when the active router fails.

What are three advantages of using private IP addresses and NAT? (Choose three.). creates multiple public IP addresses. reduces CPU usage on customer routers. hides private LAN addressing from outside devices that are connected to the Internet. improves the performance of the router that is connected to the Internet. conserves registered public IP addresses. permits LAN expansion without additional public IP addresses.

A network engineer wants to synchronize the time of a router with an NTP server at the IPv4 address 209.165.200.225. The exit interface of the router is configured with an IPv4 address of 192.168.212.11. Which global configuration command should be used to configure the NTP server as the time source for this router?. ntp peer 209.165.200.225. ntp peer 192.168.212.11. ntp server 192.168.212.11. ntp server 209.165.200.225.

Which router command is required to configure VRRP to support IPv6?. standby 1 ipv6 FE80::1:1. fhrp version vrrp v3. standby 6 ipv6 autoconfig. vrrp 22 address-family ipv6.

A networking engineer is configuring an NTP client to have access to multiple NTP servers but wants one server to have priority over the others. Which command will achieve this?. ntp server 2001:DB8:0:0:800:200C:417A version 4h. ntp max-associations 1. ntp server 203.0.113.1 prefer. ntp master 1.

What is a feature or purpose of NTP peers?. NTP peers are NTP clients that share a common NTP server. An NTP client that loses connection with an NTP server can synchronize the time with an NTP peer. NTP peers query each other to synchronize their clocks. An NTP peer that loses connection with another NTP peer loses all NTP synchronization.

Which two NTP details are displayed by issuing the show ntp associations command on a switch configured to use NTP? (Choose two.). reference time. NTP server IP address. reference clock IP address. “Clock is synchronized” statement. NTP uptime.

Refer to the exhibit. A network administrator has configured R2 for PAT. Why is the configuration incorrect?. The overload keyword should not have been applied. The ACL does not define the list of addresses to be translated. The static NAT entry is missing. NAT-POOL2 is bound to the wrong ACL.

Refer to the exhibit. NAT is configured on RT1 and RT2. The PC is sending a request to the web server. What IPv4 address is the source IP address in the packet between RT2 and the web server?. 192.0.2.2. 172.16.1.10. 172.16.1.254. 209.165.200.245. 203.0.113.10. 192.168.1.5.

A network administrator would like to ensure that router R1 is always elected the active router for an HSRP group. Which set of commands would ensure the required results?. R1(config-if)# ip address 192.168.1.100 255.255.255.0 R1(config-if)# standby 1 ip 192.168.1.1 R1(config-if)# standby 1 priority 150 R1(config-if)# no shutdown. R1(config-if)# ip address 192.168.1.250 255.255.255.0 R1(config-if)# standby 1 ip 192.168.1.1 R1(config-if)# no shutdown. R1(config-if)# ip address 192.168.1.100 255.255.255.0 R1(config-if)# standby 1 ip 192.168.1.1 R1(config-if)# standby 1 priority 1 R1(config-if)# no shutdown. R1(config-if)# ip address 192.168.1.100 255.255.255.0 R1(config-if)# standby 1 ip 192.168.1.1 R1(config-if)# standby 1 priority 255 R1(config-if)# standby 1 preempt R1(config-if)# no shutdown.

Refer to the exhibit. What two statements describe the NTP status of the router? (Choose two.). The router is serving as an authoritative time source. The software clock for the router must be configured with the set clock command so that NTP will function properly. The router is attached to a stratum 2 device. The router is serving as a time source for the device at 192.168.1.1. The IP address of the time source for the router is 192.168.1.1.

Refer to the exhibit. A network administrator has just configured address translation and is verifying the configuration. What three things can the administrator verify? (Choose three.). A standard access list numbered 1 was used as part of the configuration process. Two types of NAT are enabled. One port on the router is not participating in the address translation. Address translation is working. Three addresses from the NAT pool are being used by hosts. The name of the NAT pool is refCount.

Refer to the exhibit. What statement is true about the output of the show standby command?. The router is currently forwarding packets. This router is tracking two properly operating interfaces. The current priority of this router is 120. This router is in the HSRP down state because its tracked interfaces are down.

Match the step number to the sequence of stages that occur during the HSRP failover process. (Not all options are used.). step 1. step 2. step 3. step 4.

Refer to the exhibit. An organization has two remote sites which are connected by a GRE tunnel through an ISP cloud network. The organization has two routers (CPE1 and CPE2) at each of the remote sites which connect to the ISP routers, SP1 and SP2. Which two nodes are the GRE tunnel endpoints to connect the two remote sites? (Choose two.). Host A. CPE1. SP1. SP2. CPE2. Host B.

Which protocol creates a virtual point-to-point connection to tunnel unencrypted traffic between Cisco routers from a variety of protocols?. GRE. IKE. OSPF. IPsec.

How many bytes of overhead are added to each IP packet while it is transported through a GRE tunnel?. 8. 32. 16. 24.

Refer to the exhibit. Which IP address is configured on the physical interface of the CORP router?. 10.1.1.2. 209.165.202.134. 209.165.202.133. 10.1.1.1.

What is an IPsec protocol that provides data confidentiality and authentication for IP packets?. IKE. RSA. ESP. AH.

What two encryption algorithms are used in IPsec VPNs? (Choose two.). PSK. 3DES. IKE. DH. AES.

Which two identification methods are used by LISP instead of traditional IP addresses? (Choose two.). xTR. RLOCs. MRs. PxTRs. EIDs.

Which LISP header is used to provide a secure boundary between multiple organizations?. outer LISP UDP header. outer LISP IP header. Instance ID. RLOC.

How is routing handled within a LISP site?. through the use of virtual tunnels. through the use of virtual controllers. through the use of an interior routing protocol. through the use of RLOCs.

What is the purpose of a VNI when a company is using VXLANs?. to map Layer 2 to Layer 3 packets. to facilitate the discovery of underlay Layer 3 networks. to uniquely identify overlay networks. to create a database of EID-to-RLOC mappings.

What is the purpose of VTEPs when using VXLANs?. propagate map replies to end devices. originate or terminate tunnels. identify virtual segments within an organization. provide replies to internal devices when an external device is cloud-based.

What are three characteristics of the generic routing encapsulation (GRE) protocol? (Choose three.). Developed by the IETF, GRE is a secure tunneling protocol that was designed for Cisco routers. By default, GRE does not include any flow control mechanisms. GRE provides encapsulation for a single protocol type that is traveling through the VPN. GRE tunnels support multicast traffic. GRE uses AES for encryption unless otherwise specified. GRE creates additional overhead for packets that are traveling through the VPN.

By the use of sequence numbers, which function of the IPsec security services prevents spoofing by verifying that each packet is non-duplicated and unique?. anti-replay protection. confidentiality. authentication. data integrity.

Match the LISP term to the definition. (Not all options are used.). EID. MR. MS. RLOC.

What is the purpose of a proxy ETR used with LISP?. to communicate with a non-LISP site. to send map request packets to the MR on behalf of an ETR. to perform a DNS lookup for any EID within an LISP site. to register any EID addresses that are not within the mapping database.

Which algorithm is considered insecure for use in IPsec encryption?. AES. 3DES. SHA-1. RSA.

Refer to the exhibit. What algorithm is being used to provide public key exchange?. SHA. RSA. Diffie-Hellman. AES.

What is the first step in establishing an IPsec VPN?. creation of a secure tunnel to negotiate a security association policy. detection of interesting traffic. negotiation of ISAKMP policies. creation of an IPsec tunnel between two IPsec peers.