network-3

QUESTION 141 Refer to the exhibit. What is the result of the configuration?. The EtherChannels would not form because the load-balancing method must match on the devices. The EtherChannels would form and function properly even though the load-balancing and EtherChannel modes do not match. The EtherChannels would form, but network loops would occur because the load- balancing methods do not match. The EtherChannels would form and both devices would use the dst-ip load-balancing method because Switch1 is configured with EtherChannel mode active.

QUESTION 142 A network engineer tries to configure storm control on an EtherChannel bundle. What is the result of the configuration. The storm control settings will appear on the EtherChannel, but not on the associated physical ports. The configuration will be rejected because storm control is not supported for EtherChannel. The storm control configuration will be accepted, but will only be present on the physical interfaces. The settings will be applied to the EtherChannel bundle and all associated physical interfaces.

QUESTION 143 A Cisco Catalyst switch that is prone to reboots continues to rebuild the DHCP snooping database. What is the solution to avoid the snooping database from being rebuilt after every device reboot?. A DHCP snooping database agent should be configured. Enable DHCP snooping for all VLANs that are associated with the switch. Disable Option 82 for DHCP data insertion. Use IP Source Guard to protect the DHCP binding table entries from being lost upon rebooting. Apply ip dhcp snooping trust on all interfaces with dynamic addresses.

QUESTION 144 Which portion of AAA looks at what a user has access to. authorization. authentication. accounting. auditing.

QUESTION 145 Which command creates a login authentication method named "login" that will primarily use RADIUS and fail over to the local user database?. (config)# aaa authentication login default radius local. (config)# aaa authentication login login radius local. (config)# aaa authentication login default local radius. (config)# aaa authentication login radius local.

QUESTION 146 What is the function of NSF?. forward traffic simultaneously using both supervisors. forward traffic based on Cisco Express Forwarding. provide automatic failover to back up supervisor in VSS mode. provide nonstop forwarding in the event of failure of one of the member supervisors.

QUESTION 147 Which configuration command ties the router hot standby priority to the availability of its interfaces?. standby group. standby priority. backup interface. standby track.

QUESTION 148 What is the default HSRP priority?. 50. 100. 120. 1024.

QUESTION 149 A server with a statically assigned IP address is attached to a switch that is provisioned for DHCP snooping. For more protection against malicious attacks, the network team is considering enabling dynamic ARP inspection alongside DHCP snooping. Which solution ensures that the server maintains network reachability in the future?. Disable DHCP snooping information option. Configure a static DHCP snooping binding entry on the switch. Trust the interface that is connected to the server with the ip dhcp snooping trust command. Verify the source MAC address of all untrusted interfaces with ip dhcp snooping verify macaddress command.

QUESTION 150 DHCP snooping and IP Source Guard have been configured on a switch that connects to several client workstations. The IP address of one of the workstations does not match any entries found in the DHCP binding database. Which statement describes the outcome of this scenario?. Packets from the workstation will be rate limited according to the default values set on the switch. The interface that is connected to the workstation in question will be put into the errdisabled state. Traffic will pass accordingly after the new IP address is populated into the binding database. The packets originating from the workstation are assumed to be spoofed and will be discarded.

QUESTION 151 Which technique allows specific VLANs to be strictly permitted by the administrator?. VTP pruning. transparent bridging. trunk-allowed VLANs. VLAN access-list. L2P tunneling.

QUESTION 152 For security reasons, the IT manager has prohibited users from dynamically establishing trunks with their associated upstream switch. Which two actions can prevent interface trunking? (Choose two.). Configure trunk and access interfaces manually. Disable DTP on a per interface basis. Apply BPDU guard and BPDU filter. Enable switchport block on access ports.

QUESTION 153 Which two protocols can be automatically negotiated between switches for trunking? (Choose two.). PPP. DTP. ISL. HDLC. DLCI. DOT1Q.

QUESTION 154 A network is running VTPv2. After verifying all VTP settings, the network engineer notices that the new switch is not receiving the list of VLANs from the server. Which action resolves this problem?. Reload the new switch. Restart the VTP process on the new switch. Reload the VTP server. Verify connected trunk ports.

QUESTION 155 After configuring new data VLANs 1020 through 1030 on the VTP server, a network engineer notices that none of the VTP clients are receiving the updates. What is the problem? www. The VTP server must be reloaded. The VTP version number must be set to version 3. After each update to the VTP server, it takes up to 4 hours propagate. VTP must be stopped and restarted on the server. Another switch in the domain has a higher revision number than the server.

QUESTION 156 A network engineer is extending a LAN segment between two geographically separated data centers. Which enhancement to a spanning-tree design prevents unnecessary traffic from crossing the extended LAN segment?. Modify the spanning-tree priorities to dictate the traffic flow. Create a Layer 3 transit VLAN to segment the traffic between the sites. Use VTP pruning on the trunk interfaces. Configure manual trunk pruning between the two locations.

QUESTION 157 The network manager has requested that several new VLANs (VLAN 10, 20, and 30) are allowed to traverse the switch trunk interface. After the command switchport trunk allowed vlan 10,20,30 is issued, all other existing VLANs no longer pass traffic over the trunk. What is the root cause of the problem?. The command effectively removed all other working VLANs and replaced them with the new VLANs. VTP pruning removed all unused VLANs. ISL was unable to encapsulate more than the already permitted VLANs across the trunk. Allowing additional VLANs across the trunk introduced a loop in the network.

QUESTION 158 When you design a switched network using VTPv2, how many VLANs can be used to carry user traffic?. 1000. 1001. 1024. 2048. 4095. 4096.

QUESTION 159 What does the command vlan dot1q tag native accomplish when configured under global configuration?. All frames within the native VLAN are tagged, except when the native VLAN is set to 1. It allows control traffic to pass using the non-default VLAN. It removes the 4-byte dot1q tag from every frame that traverses the trunk interface(s). Control traffic is tagged.

QUESTION 160 Which private VLAN access port belongs to the primary VLAN and can communicate with all interfaces, including the community and isolated host ports?. promiscuous port. isolated port. community port. trunk port.

QUESTION 161 Which private VLAN can have only one VLAN and be a secondary VLAN that carries unidirectional traffic upstream from the hosts toward the promiscuous ports and the gateway. isolated VLAN. primary VLAN. community VLAN. promiscuous VLAN.

QUESTION 162 Which database is used to determine the validity of an ARP packet based on a valid IP-to- MAC address binding. DHCP snooping database. dynamic ARP database. dynamic routing database. static ARP database.

QUESTION 163 When IP Source Guard with source IP filtering is enabled on an interface, which feature must be enabled on the access VLAN for that interface?. DHCP snooping. storm control. spanning-tree portfast. private VLAN.

QUESTION 164 Which switch feature prevents traffic on a LAN from being overwhelmed by continuous multicast or broadcast traffic?. storm control. port security. VTP pruning. VLAN trunking.

QUESTION 165 Which command would a network engineer apply to error-disable a switchport when a packetstorm is detected?. router(config-if)#storm-control action shutdown. router(config-if)#storm-control action trap. router(config-if)#storm-control action error. router(config-if)#storm-control action enable.

QUESTION 166 A network engineer configures port security and 802.1x on the same interface. Which option describes what this configuration allows. It allows port security to secure the MAC address that 802.1x authenticates. It allows port security to secure the IP address that 802.1x authenticates. It allows 802.1x to secure the MAC address that port security authenticates. It allows 802.1x to secure the IP address that port security authenticates.

QUESTION 167 Which feature describes MAC addresses that are dynamically learned or manually configured, stored in the address table, and added to the running configuration?. sticky. dynamic. static. secure.

QUESTION 168 On which interface can port security be configured?. static trunk ports. destination port for SPAN. EtherChannel port group. dynamic access point.

QUESTION 169 Based on the show spanning-tree vlan 200 output shown in the exhibit, which two statements about the STP process for VLAN 200 are true? (Choose two.). BPDUs will be sent out every two seconds. The time spent in the listening state will be 30 seconds. The time spent in the learning state will be 15 seconds. The maximum length of time that the BPDU information will be saved is 30 seconds. This switch is the root bridge for VLAN 200. BPDUs will be sent out every 10 seconds.

QUESTION 170 Which three statements are correct with regard to the IEEE 802.1Q standard? (Choose three). The IEEE 802.1Q frame format adds a 4 byte field to a Ethernet frame. The packet is encapsulated with a 26 byte header and a 4 byte FCS. The protocol uses point-to-multipoint connectivity. The protocol uses point-to-point connectivity. The IEEE 802.1Q frame uses multicast destination of 0x01-00-0c-00-00. The IEEE 802.1Q frame retains the original MAC destination address.

QUESTION 171 Refer to the exhibit. Based upon the output of show vlan on switch CAT2, what can we conclude about interfaces Fa0/13 and Fa0/14?. That interfaces Fa0/13 and Fa0/14 are in VLAN 1. That interfaces Fa0/13 and Fa0/14 are down. That interfaces Fa0/13 and Fa0/14 are trunk interfaces. That interfaces Fa0/13 and Fa0/14 have a domain mismatch with another switch. That interfaces Fa0/13 and Fa0/14 have a duplex mismatch with another switch.

QUESTION 172 VLAN maps have been configured on switch R1. Which of the following actions are taken in a VLAN map that does not contain a match clause. Implicit deny feature at end of list. Implicit deny feature at start of list. Implicit forward feature at end of list. Implicit forward feature at start of list.

QUESTION 173 Given the configuration on a switch interface, what happens when a host with the MAC address of 0003.0003.0003 is directly connected to the switch port. The host will be allowed to connect. The port will shut down. The host can only connect through a hub/switch where 0002.0002.0002 is already connected. The host will be refused access.

QUESTION 174 Refer to the exhibit. Switch 15 is configured as the root switch for VLAN 10 but not for VLAN 20. If the STP configuration is correct, what will be true about Switch 15?. All ports will be in forwarding mode. All ports in VLAN 10 will be in forwarding mode. All ports in VLAN 10 will be in forwarding mode and all ports in VLAN 20 will be in blocking mode. All ports in VLAN 10 will be in forwarding mode and all ports in VLAN 20 will be in standby mode.

QUESTION 175 Which of the following HSRP router states does an active router enter when it is preempted by a higher priority router? (Select the best answer.). active. speak. learn. listen. init. standby.

QUESTION 176 Refer to the exhibit. On the basis of the output of the show spanning-tree inconsistentports command, which statement about interfaces FastEthernet 0/1 and FastEthernet 0/2 is true?. They have been configured with the spanning-tree bpdufilter disable command. They have been configured with the spanning-tree bpdufilter enable command. They have been configured with the spanning-tree bpduguard disable command. They have been configured with the spanning-tree bpduguard enable command. They have been configured with the spanning-tree guard loop command. They have been configured with the spanning-tree guard root command.

QUESTION 177 You want to configure a switched internetwork with multiple VLANs as shown above. Which of the following commands should you issue on SwitchA for the port connected to SwitchB? (Select the best answer.). switchport mode trunk. switchport access vlan 5. switchport mode access vlan 5. switchport trunk native vlan 5.

QUESTION 178 You administer a network that uses two routers, R1 and R2, configured as an HSRP group to provide redundancy for the gateway. Router R1 is the active router and has been configured as follows. The HSRP priority for router R1 will increase to 200. Router R1 will become the standby router if the priority drops below 50. The HSRP priority for router R1 will decrease to 50 points when Fa0/2 goes down. Router R1 will wait 50 seconds before attempting to preempt the active router.

QUESTION 179 Which statement is correct about 802.1Q trunking?. Both switches must be in the same VTP domai. The encapsulation type of both ends of the trunk does not have to match. The native VLAN on both ends of the trunk must be VLAN 1. 802.1Q trunking can only be configured on a Layer 2 port. In 802.1Q trunking, all VLAN packets are tagged on the trunk link, except the native VLAN.

QUESTION 180 Which of the following commands can be issued without interfering with the operation of loop guard?. Switch(config-if)#spanning-tree guard root. Switch(config-if)#spanning-tree portfas. Switch(config-if)#switchport mode trunk. Switch(config-if)#switchport mode access.

QUESTION 181 The following command was issued on a router that is being configured as the active HSRP router standby ip 10.2.1.1 Which statement is true about this command?. This command will not work because the HSRP group information is missing. The HSRP MAC address will be 0000 0c07 ac00. The HSRP MAC address will be 0000 0c07 ac01. The HSRP MAC address will be 0000.070c ad01. This command will not work because the active parameter is missing.

QUESTION 182 Routers R1 and R2 are configured for HSRP as shown below: physical layer issues. no spanning tree loops. use of non-default HSRP timers. failure to set the command standby 35 preempt.

QUESTION 183 Which two statements about the HSRP priority are true? (Choose two). To assign the HSRP router priority in a standby group, the standby group-number priority priority-value global configuration command must be used. The default priority of a router is zero (0). The no standby priority command assigns a priority of 100 to the router. Assuming that preempting has also been configured, the router with the lowest priority in an HSRP group would become the active router. When two routers in an HSRP standby group are configured with identical priorities, the router with the highest configured IP address will become the active router.

QUESTION 184 Which three statements are true of a default HSRP configuration? (Choose three.). The Standby hello time is 2 seconds. Two HSRP groups are configured. The Standby track interface priority decrement is 10. The Standby hold time is 10 seconds. The Standby priority is 100. The Standby delay is 3 seconds.

QUESTION 185 Refer to the exhibit. What is the result of setting GLBP weighting at 105 with lower threshold 90 and upper threshold 100 on this router. Only if both tracked objects are up will this router will be available as an AVF for group 1. Only if the state of both tracked objects goes down will this router release its status as an AVF for group 1. If both tracked objects go down and then one comes up, but the other remains down, this router will be available as an AVF for group 1. This configuration is incorrect and will not have any effect on GLBP operation. If the state of one tracked object goes down then this router will release its status as an AVF for group 1.

QUESTION 186 Which describes the default load balacing scheme used by the Gateway Load Balancing Protocol (GLBP)?. Per host using a strict priority scheme. Per session using a round-robin scheme. Per session using a strict priority scheme. Per GLBP group using a strict priority scheme. Per host basis using a round robin-scheme. Per GLBP group using a round-robin scheme.

QUESTION 187 Refer to the exhibit. When troubleshooting a network problem, a network analyzer is connected to Port f0/1 of a LAN switch. Which command can prevent BPDU transmission on this port?. spanning-tree portfast bpduguard enable. spanning-tree bpduguard default. spanning-tree portfast bpdufilter default. no spanning-tree link-type shared.

QUESTION 188 Which four LACP components are used to determine which hot-standby links become active after an interface failure within an EtherChannel bundle? (Choose four.). LACP system priority. LACP port priority. interface MAC address. system ID. port number. hot-standby link identification number. interface bandwidth.

QUESTION 189 RSPAN has been configured on a Cisco Catalyst switch; however, traffic is not being replicated to the remote switch. Which type of misconfiguration is a cause. The RSPAN designated VLAN is missing the remote span command. The local and remote RSPAN switches are configured using different session IDs. The local RSPAN switch is replicating only Rx traffic to the remote switch. The local switch is overloaded with the amount of sourced traffic that must be replicated to the remote switch.

QUESTION 190 After UDLD is implemented, a Network Administrator noticed that one port stops receiving UDLD packets. This port continues to reestablish until after eight failed retries. The port then transitions into the errdisable state. Which option describes what causes the port to go into the errdisable state?. Normal UDLD operations that prevent traffic loops. UDLD port is configured in aggressive mode. UDLD is enabled globally. UDLD timers are inconsistent.

QUESTION 192 A network engineer is installing a switch for temporary workers to connect to. The engineer does not want this switch participating in Spanning Tree with the rest of the network; however, end user connectivity is still required. Which spanning-tree feature accomplishes this?. BPDUblock. BPDUfilter. BPDUignore. BPDUguard. BPDUdisable.

QUESTION 193 Refer to the exhibit. What is the result of the SPAN configuration on a Cisco switch?. Configure a SPAN session to monitor the received traffic on interface g0/4 only for VLAN 3. Configure a SPAN session to monitor the received traffic on interface g0/4 for all VLANs except VLAN 3. Configure a SPAN session to monitor the received traffic on interface g0/5 only for VLAN 3. Configure a SPAN session to monitor the received traffic on interface g0/5 for all VLANs except VLAN 3.

QUESTION 194 When SDM templates are configured, which action must be performed for the configuration to take effect?. reload. shutdown. write memory. backup config.

QUESTION 195 Which statement about the MAC address sticky entries in the switch when the copy run start command is entered is true?. A sticky MAC address is retained when the switch reboots. A sticky MAC address can be a unicast or multicast address. A sticky MAC address is lost when the switch reboots. A sticky MAC address ages out of the MAC address table after 600 seconds.

QUESTION 196 Enablement of which feature puts the port into err-disabled state when the port has PortFast enabled and it receives BPDUs?. BPDU filtering. BackboneFast. EtherChannel. BPDU guard.

QUESTION 197 Refer to the exhibit. Which configuration ensures that the Cisco Discovery Protocol packet update frequency sent from DSW1 to ALS1 is half of the default value?. DSW1(config)#cdp timer 90. DSW1(config-if)#cdp holdtime 6. DSW1(config)#cdp timer 30. DSW1(config)#cdp holdtime 90. DSW1(config-if)#cdp holdtime 30. DSW1(config-if)#cdp timer 60.

QUESTION 198 Interfaces are assigned to a VLAN, and then the VLAN is deleted. Which state are these interfaces in after the VLAN is deleted?. They remain up, but they are reassigned to the default VLAN. They go down until they are reassigned to a VLAN. They go down, but they are reassigned to the default VLAN. They remain up, but they are reassigned to the native VLAN.

QUESTION 199 Which feature is automatically configured when an administrator enables a voice VLAN?. 802.1Q trunking. PortFast. QoS. private VLANs.

QUESTION 200 Which statement describes one major issue that VTP can cause in an enterprise network when a new switch is introduced in the network in VTP mode server?. It can cause network access ports to go into err-disabled state. It can cause a network-wide VLAN configuration change if the revision number on the new switch is highe. It can cause a network-wide VLAN configuration change if the revision number on the new switch is lowe. It can cause routing loops.

QUESTION 201 A network administrator configures 10 extended VLANs ranging from VLANs 3051 to 3060 in an enterprise network. Which version of VTP supports these extended VLANs?. version 1. version 2. version 3. VTP does not recognize extended VLANs.

QUESTION 202 An engineer is configuring an EtherChannel between two switches using LACP. If the EtherChannel mode on switch 1 is configured to active, which two modes on switch 2 establish an operational EtherChannel? (Choose two.). active. auto. desirable. on. passive.