Đề Thi Trắc Nghiệm CCNA Full

Cisco 640-802 Cisco Certified Network Associate (CCNA) Version: 9.4 Cisco 640-802 Exam Topic 1, Volume A QUESTION NO: Refer to the exhibit What could be possible causes for the "Serial0/0 is down" interface status? (Choose two.) A A Layer problem exists B The bandwidth is set too low C A protocol mismatch exists D An incorrect cable is being used E There is an incorrect IP address on the Serial 0/0 interface Answer: A,D Explanation: QUESTION NO: Before installing a new, upgraded version of the IOS, what should be checked on the router, and which command should be used to gather this information? (Choose two.) A the amount of available ROM B the amount of available flash and RAM memory C the version of the bootstrap software present on the router D show version E show processes F show running-config Answer: B,D Explanation: "Pass Any Exam Any Time." - www.actualtests.com Cisco 640-802 Exam QUESTION NO: Refer to the exhibit Which two statements are true about interVLAN routing in the topology that is shown in the exhibit? (Choose two.) A Host E and host F use the same IP gateway address B Router1 and Switch2 should be connected via a crossover cable C Router1 will not play a role in communications between host A and host D D The FastEthernet 0/0 interface on Router1 must be configured with subinterfaces E Router1 needs more LAN interfaces to accommodate the VLANs that are shown in the exhibit F The FastEthernet 0/0 interface on Router1 and Switch2 trunk ports must be configured using the same encapsulation type Answer: D,F Explanation: QUESTION NO: Refer to the exhibit Which two statements are true about the loopback address that is configured on RouterB? (Choose two.) "Pass Any Exam Any Time." - www.actualtests.com Cisco 640-802 Exam A It ensures that data will be forwarded by RouterB B It provides stability for the OSPF process on RouterB C It specifies that the router ID for RouterB should be 10.0.0.1 D It decreases the metric for routes that are advertised from RouterB E It indicates that RouterB should be elected the DR for the LAN Answer: B,C Explanation: QUESTION NO: If you are a network administrator, how will you explain VTP configuration to a new technician? (Choose three.) A In the VTP client mode, a switch is unable to update its local VLAN database B Configure a trunk link between the switches to forward VTP updates C In the VTP server mode, a switch is able to update a switch in the VTP transparent mode D In the VTP transparent mode, a switch will forward the received updates to other switches E A switch in the VTP server mode only updates switches in the VTP client mode that have a higher VTP revision number F A switch in the VTP server mode will update switches in the VTP client mode regardless of the configured VTP domain membership "Pass Any Exam Any Time." - www.actualtests.com Cisco 640-802 Exam Answer: A,B,D Explanation: VTP operates in one of three modes: Server - In this VTP mode you can create, remove, and modify VLANs You can also set other configuration options like the VTP version and also turn on/off VTP pruning for the entire VTP domain VTP servers advertise their VLAN configuration to other switches in the same VTP domain and synchronize their VLAN configuration with other switches based on messages received over trunk links VTP server is the default mode The VLANs information are stored on NVRAM and they are not lost after a reboot Client - VTP clients behave the same way as VTP servers, but you cannot create, change, or delete VLANs on the local device In VTP client mode, VLAN configurations are not saved in NVRAM QUESTION NO: Cisco IOS (originally Internetwork Operating System) is the software used on the vast majority of Cisco Systems routers and all current Cisco network switches Which two of the following devices could you configure as a source for the IOS image in the boot system command? (Choose two.) A RAM B NVRAM C flash memory D HTTP server E TFTP server F Telnet server Answer: C,E Explanation: QUESTION NO: What are two reasons a network administrator would use CDP? (Choose two.) A to obtain VLAN information from directly connected switches B to determine the status of network services on a remote device C to determine the status of the routing protocols between directly connected routers "Pass Any Exam Any Time." - www.actualtests.com Cisco 640-802 Exam D to verify the type of cable interconnecting two devices E to verify Layer connectivity between two devices when Layer fails F to obtain the IP address of a connected device in order to telnet to the device Answer: E,F Explanation: Cisco Discovery Protocol (CDP) is primarily used to obtain protocol addresses of neighboring devices and discover the platform of those devices CDP can also be used to show information about the interfaces your router uses CDP is an independent media protocol and runs on all Cisco-manufactured devices including routers, bridges, access servers, and switches It should be noted that CDP is a protocol which works on the layer2 By default, multicast advertise is sent every 60 seconds to 01-00-0 c-cc-cc-cc as the destination address When reaching the holdtime of 180 seconds , if not receiving the advertise from neighboring devices yet, the information of neighboring devices will be cleared Cisco Discovery Protocol (CDP) is a proprietary protocol designed by Cisco to help administrators collect information about both locally attached and remote devices By using CDP, you can gather hardware and protocol information about neighbor devices, which is useful info for troubleshooting and documenting the network You can use: Show cdp neighbor Show cdp neighbor details Commands to gather the information of connected neighbors QUESTION NO: Refer to the exhibit Both switches are using a default configuration Which two destination addresses will host use to send data to host 1? (Choose two.) "Pass Any Exam Any Time." - www.actualtests.com Cisco 640-802 Exam A the IP address of host B the IP address of host C the MAC address of host D the MAC address of host E the MAC address of the Fa0/0 interface of the R1 router F the MAC address of the Fa0/1 interface of the R1 router Answer: A,F Explanation: QUESTION NO: Exhibit: "Pass Any Exam Any Time." - www.actualtests.com Cisco 640-802 Exam Refer to the exhibit The router has been configured with these commands: What are the two results of this configuration? (Choose two.) A The default route should have a next hop address of 64.100.0.3 B Hosts on the LAN that is connected to FastEthernet 0/1 are using public IP addressing C The address of the subnet segment with the WWW server will support seven more servers D The addressing scheme allows users on the Internet to access the WWW server E Hosts on the LAN that is connected to FastEthernet 0/1 will not be able to access the Internet without address translation "Pass Any Exam Any Time." - www.actualtests.com Cisco 640-802 Exam Answer: D,E Explanation: Since the hosts on the Fast Ethernet 0/1 network are using private RFC 1918 IP addressing (192.168.10.0/24) their IP addresses will need to be translated into a publicly routable address in order to access the Internet However, the server is using the 198.133.219.9 IP address, which is publicly routable and so Internet users can indeed access this server (assuming that the 198.133.219.9 IP address has been correctly assigned to the network) QUESTION NO: 10 Your Company has installed IP phones Both the phones and the office computers connect to the same device The phone traffic and the office computer data traffic must be on different networks to ensure maximum throughput for the phone data Which network device can be best connected to the phones and computers, and which technology will be performed on this device? (Choose two.) A hub B router C switch D stp E subinterfaces F VLAN Answer: C,F Explanation: You can configure VLANs on the switch to distinguish two types of data traffic QUESTION NO: 11 Which two benefits can be obtained by using VTP in a switching environment? (Choose two.) A Allowing frames from multiple VLANs to use a single interface B Allowing switches to read frame tags C Maintaining VLAN consistency across a switched network D Allowing VLAN information to be automatically propagated throughout the switching environment "Pass Any Exam Any Time." - www.actualtests.com Cisco 640-802 Exam E It allows ports to be assigned to VLANs automatically Answer: C,D Explanation: VTP minimizes the possible configuration inconsistencies that arise when changes are made These inconsistencies can result in security violations, because VLANs can crossconnect when duplicate names are used They also could become internally disconnected when they are mapped from one LAN type to another, for example, Ethernet to ATM LANE ELANs or FDDI 802.10 VLANs VTP provides a mapping scheme that enables seamless trunking within a network employing mixed-media technologies VTP provides the following benefits: QUESTION NO: 12 Which two statements are true about the command ip route 172.16.3.0 255.255.255.0 192.168.2.4? (Choose two.) A It establishes a static route to the 172.16.3.0 network B It configures the router to send any traffic for an unknown destination to the 172.16.3.0 network C It creates a static route to the 192.168.2.0 network D It uses the default administrative distance E It configures the router to send any traffic for an unknown destination out the interface with the address 192.168.2.4 F It is a route that would be used last if other routes to the same destination exist Answer: A,D Explanation: This question is to examine the static route-related concept ip route 172.16.3.0 255.255.255.0 192.168.2.4 This is a static route configuration command 172.16.3.0 is the destination network, 192.168.2.4 is the next hop The administrative distance is not configured, so the default administrative distance is used The correct answers are A and D "Pass Any Exam Any Time." - www.actualtests.com 10 Cisco 640-802 Exam Which three statements about VTP features are true? (Choose Three) A When properly configured, VTP minimizes VLAN misconfigurations and configuration inconsistencies B To configure a switch to be part of two VTP domains, each domain must have its own Password C Client, server, and transparent are valid VTP modes D When properly configured, VTP maintains VLAN configuration consistency and accelerates trunk link negotiation E VTP works at Layer of the OSI model and requires that a management VLAN IP address be configured F VTP pruning is used to increase available bandwidth in trunk links G Each broadcast domain on a switch can have its own Unique VTP Domain Answer: A,C,F Reference:"Understanding VLAN Trunk Protocol (VTP)" http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c52.shtml#v tp_modes QUESTION NO: 607 At which layer of the OSI model does PPP perform? A Layer B Layer C Layer D Layer Answer: A Explanation: QUESTION NO: 608 DRAG DROP Refer to the exhibit below PC_1 is sending packets to the FTP server Consider the packets as they leave Router A interface Fa0/0 towards RouterB "Pass Any Exam Any Time." - www.actualtests.com 459 Cisco 640-802 Exam Answer: Explanation: Source MAC: 0000.0c93.9999 Destination MAC:0000.0c89.3333 Source IP: 172.16.21.7 "Pass Any Exam Any Time." - www.actualtests.com 460 Cisco 640-802 Exam Destination IP: 172.16.34.250 QUESTION NO: 609 Which ip address would a network technician ping on the local host, to test the ip stack? A 224.0.0.9 B 224.0.0.5 C 127.0.0.1 D 255.255.255.255 Answer: C Explanation: QUESTION NO: 610 Which command allows you to verify the encapsulation type (CISCO or IETF) for a frame Relay link? A show frame-relay map B show frame-relay pvc C show frame-relay lmi D show interfaces serial Answer: A Explanation: QUESTION NO: 611 When you are troubleshooting an ACL issue on a router, which command can help you to verify which interfaces are affected by the ACL? A show ip interface B show interface C list ip interface D show ip access-list E show access-list Answer: A "Pass Any Exam Any Time." - www.actualtests.com 461 Cisco 640-802 Exam Explanation: QUESTION NO: 612 Which two data integrity algorithms are commonly used in VPN solutions? (Choose two) A RSA B HMAC-SHA-1 C DH2 D HMAC-MD5 E DH1 Answer: B,D Explanation: QUESTION NO: 613 Refer to the graphic Host A is communicating with the server What will be the source MAC address of the frames received by Host A from the server? A the MAC address of the server network interface B the MAC address of host A C the MAC address of router interface e D the MAC address of router interface e0 Answer: D "Pass Any Exam Any Time." - www.actualtests.com 462 Cisco 640-802 Exam Explanation: Whereas switches can only examine and forward packets based on the contents of the MAC header, routers can look further into the packet to discover the network for which a packet is destined Routers make forwarding decisions based on the packet's network-layer header (such as an IPX header or IP header) These network-layer headers contain source and destination network addresses Local devices address packets to the router's MAC address in the MAC header After receiving the packets, the router must perform the following steps: Check the incoming packet for corruption, and remove the MAC header The router checks the packet for MAC-layer errors The router then strips off the MAC header and examines the networklayer header to determine what to with the packet Examine the age of the packet The router must ensure that the packet has not come too far to be forwarded For example, IPX headers contain a hop count By default, 15 hops is the maximum number of hops (or routers) that a packet can cross If a packet has a hop count of 15, the router discards the packet IP headers contain a Time to Live (TTL) value Unlike the IPX hop count, which increments as the packet is forwarded through each router, the IP TTL value decrements as the IP packet is forwarded through each router If an IP packet has a TTL value of 1, the router discards the packet A router cannot decrement the TTL value to and then forward the packet Determine the route to the destination Routers maintain a routing table that lists available networks, the direction to the desired network (the outgoing interface number), and the distance to those networks After determining which direction to forward the packet, the router must build a new header (If you want to read the IP routing tables on a Windows 95/98 workstation, type ROUTE PRINT in the DOS box.) Build the new MAC header and forward the packet Finally, the router builds a new MAC header for the packet The MAC header includes the router's MAC address and the final destination's MAC address or the MAC address of the next router in the path QUESTION NO: 614 Which encapsulation type is a Frame Relay encapsulation type that is supported by Cisco routers? A Q9333-AAnnexA B ANSI Annex D C HDLC D IETF "Pass Any Exam Any Time." - www.actualtests.com 463 Cisco 640-802 Exam Answer: D Explanation: QUESTION NO: 615 Which Cisco IOS diagnostics command can disrupt the operation of a router under high-load conditions? A debug all B show running-config C show processes cpu D logging host ip address Answer: A Explanation: Initial Troubleshooting Once you notice any of the symptoms from the Symptoms of High CPU Utilization: •Check for a possible security issue Commonly, high CPU utilization is caused by a security issue, such as a worm or virus operating in your network This is especially likely to be the cause if there have not been recent changes to the network Usually, a configuration change, such as adding additional lines to your access lists can mitigate the effects of this problem Cisco Product Security Advisories and Notices contains information on detection of the most likely causes and specific workarounds For additional information, refer to: o100 Questions and Answers about Internet Threats oCisco Product Security Advisories and Notices oCisco Threat Defense System •Make sure all debugging commands in your router are turned off by issuing the undebug all or no debug all commands For more information on the use of debugging commands, refer to Using Debug Commands •Are you able to issue show commands on the router? If yes, start collecting more information immediately, using these showcommands •Is the router inaccessible? Can you reproduce this problem? If yes, power-cycle the router and, before reproducing the problem, configure the scheduler interval 500 command This schedules low priority processes to run every 500 milliseconds, which provides time for you to run some commands, even if CPU usage is at 100 percent On Cisco 7200 and Cisco 7500 Series Routers, use the scheduler allocate 3000 1000 command •Does the router show symptoms of high CPU utilization at brief and unpredictable intervals? If yes, periodically collect the output of the show processes cpu command, which shows if the high CPU utilization is caused by interrupts or by a certain process Use this UNIX script and, based on the first findings, modify the script to collect data needed for further investigation of the issue "Pass Any Exam Any Time." - www.actualtests.com 464 Cisco 640-802 Exam From the following Link: http://www.cisco.com/en/US/products/hw/routers/ps133/products_tech_note09186a00800a70f2.sh tml QUESTION NO: 616 Which Cisco IOS command can help to determine the timing of various debug events, relative to each other, when you are debugging a complicated router issue? A service timestamps log datetime msec B clock calendar-valid C show clock detail D service timestamps debug datetime msec Answer: A Explanation: QUESTION NO: 617 What are the possible trunking modes for a switch port? (Choose three.) A transparent B auto C on D desirable E client F forwarding Answer: B,C,D Explanation: QUESTION NO: 618 Refer to the exhibit "Pass Any Exam Any Time." - www.actualtests.com 465 Cisco 640-802 Exam What is the reason that the interface status is "administratively down, line protocol down"? A There is no encapsulation type configured B There is a mismatch in encapsulation types C The interface is not receiving any keepalives D The interface has been configured with the shutdown command E The interface needs to be configured as a DTE device F The wrong type of cable is connected to the interface Answer: D Explanation: QUESTION NO: 619 What are two security appliances that can be installed in a network? (Choose two.) A ATM B IDS C IOS D IOX E IPS F SDM Answer: B,E Explanation: QUESTION NO: 620 A TCP/IP transfer is diagrammed in the exhibit "Pass Any Exam Any Time." - www.actualtests.com 466 Cisco 640-802 Exam A window size of three has been negotiated for this transfer Which message will be returned from the receiver to the sender as part of this TCP/IP transfer? A Send ACK 1-3 B Send ACK C Send ACK D Send ACK 4-6 E Send ACK F Send ACK Answer: C Explanation: QUESTION NO: 621 Which two locations can be configured as a source for the IOS image in the boot system command? (Choose two.) A RAM B NVRAM C flash memory D HTTP server E TFTP server F Telnet server Answer: C,E Explanation: "Pass Any Exam Any Time." - www.actualtests.com 467 Cisco 640-802 Exam QUESTION NO: 622 What is the default administrative distance of OSPF? A 90 B 100 C 110 D 120 Answer: C Explanation: QUESTION NO: 623 Which command shows your active Telnet connections? A show cdp neigbors B show session C show users D show vty logins Answer: B Explanation: QUESTION NO: 624 Refer to the exhibit "Pass Any Exam Any Time." - www.actualtests.com 468 Cisco 640-802 Exam NAT Overload is enabled on R1 Which statement is true when host A communicates with the web server? A The web server uses 209.165.200.226 as the destination address and 80 as the destination port when sending packets to host A B Host A uses 192.168.25.254 as the destination address and 80 as the source port when sending packets to the web server C The web server uses 209.165.200.225 as the destination address and 3648 as the destination port when sending packets to host A D Host A uses 209.165.200.198 as the destination address and 3648 as the destination port when sending packets to the web server Answer: C Explanation: QUESTION NO: 625 Refer to the exhibit "Pass Any Exam Any Time." - www.actualtests.com 469 Cisco 640-802 Exam Host A pings interface S0/0 on router What is the TTL value for that ping? A 252 B 253 C 254 D 255 Answer: B Explanation: QUESTION NO: 626 Refer to exhibit "Pass Any Exam Any Time." - www.actualtests.com 470 Cisco 640-802 Exam A network administrator cannot establish a Telnet session with the indicated router What is the cause of this failure? A A Level password is not set B An ACL is blocking Telnet access C The vty password is missing D The console password is missing Answer: C Explanation: QUESTION NO: 627 "Pass Any Exam Any Time." - www.actualtests.com 471 Cisco 640-802 Exam What are three reasons that an organization with multiple branch offices and roaming users might implement a Cisco VPN solution instead of point-to-point WAN links? (Choose three.) A reduced cost B better throughput C broadband incompatibility D increased security E scalability F reduced latency Answer: A,D,E Explanation: QUESTION NO: 628 On which options are standard access lists based? A destination address and wildcard mask B destination address and subnet mask C source address and subnet mask D source address and wildcard mask Answer: D Explanation: QUESTION NO: 629 Which command can be used from a PC to verify the connectivity between hosts that connect through a switch in the same LAN? A ping address B tracert address C traceroute address D arp address Answer: A Explanation: "Pass Any Exam Any Time." - www.actualtests.com 472 Cisco 640-802 Exam QUESTION NO: 630 What is the result of issuing the frame-relay map ip 192.168.1.2 202 broadcast command? A defines the destination IP address that is used in all broadcast packets on DCLI 202 B defines the source IP address that is used in all broadcast packets on DCLI 202 C defines the DLCI on which packets from the 192.168.1.2 IP address are received D defines the DLCI that is used for all packets that are sent to the 192.168.1.2 IP address Answer: D Explanation: QUESTION NO: 631 Which command would you configure globally on a Cisco router that would allow you to view directly connected Cisco devices? A enable cdp B cdp enable C cdp run D run cdp Answer: C Explanation: "Pass Any Exam Any Time." - www.actualtests.com 473 [...]... Refer to the exhibit Given the output shown from this Cisco Catalyst 2950, what is the most likely reason that interface FastEthernet 0/10 is not the root port for VLAN 2? A This switch has more than one interface connected to the root network segment in VLAN 2 B This switch is running RSTP while the elected designated switch is running 802.1d Spanning Tree C This switch interface has a higher path cost... elected designated switch is running 802.1d Spanning Tree C This switch interface has a higher path cost to the root bridge than another in the topology D This switch has a lower bridge ID for VLAN 2 than the elected designated switch Answer: C Explanation: This question is to check the STP technology When STP is running in a network with loops, ports will transition into the forwarding state or the blocking... encryption, MPEG, and MIDI The Session Layer (Layer 5) defines how to start, control, and end communication sessions This includes the control and management of multiple bidirectional messages so that the application can be notified if only some of a series of messages are completed This allows the presentation layer to have a seamless view of an incoming stream of data The presentation layer can be... switch(config-if)#switchport port-security maximum 1 D switch(config-if)#switchport mode access switch(config-if)#switchport port-security mac-address 1 Answer: C Explanation: This question is to examine the layer 2 security configuration In order to satisfy the requirements of this question, you should perform the following configurations in the interface mode: First, configure the interface mode as the access mode "Pass Any... on London to direct all traffic destined for 172.16.0.0/22 to 10.1.1.2 F Configure Manchester to advertise a static default route to London Answer: E Explanation: QUESTION NO: 26 Refer to the exhibit This command is executed on 2960Switch: 2960Switch(config)# mac-address-table static 0000.00aa.aaaa vlan 10 interface fa0/1 "Pass Any Exam Any Time." - www.actualtests.com 19 Cisco 640-802 Exam Which two... of these statements correctly identify results of executing the command? (Choose two.) A Port security is implemented on the fa0/1 interface B MAC address 0000.00aa.aaaa does not need to be learned by this switch C Only MAC address 0000.00aa.aaaa can source frames on the fa0/1 segment D Frames with a Layer 2 source address of 0000.00aa.aaaa will be forwarded out fa0/1 E MAC address 0000.00aa.aaaa will... configured and installed in the center of a square office A few wireless users are experiencing slow performance and drops while most users are operating at peak efficiency What are three likely causes of this problem? (Choose three.) A mismatched TKIP encryption B null SSID C cordless phones D mismatched SSID E metal file cabinets F antenna type or direction Answer: C,E,F Explanation: A Cordless phones... correct? (Choose three.) A 802.1 Q native VLAN frames are untagged by default B 802.1 Q trunking ports can also be secure ports C 802.1 Q trunks can use 10 Mb/s Ethernet interfaces D 802.1 Q trunks require full- duplex, point-to-point connectivity E 802.1 Q trunks should have native VLANs that are the same at both ends Answer: A,C,E Explanation: By default, 802.1Q trunk defined Native VLAN in order to forward... administrator was given the task of configuring port security on SwitchA to allow only PC_A to access the switched network through port fa0/1 If any other device is detected, the port is to drop frames from this device The administrator configured the interface and tested it with successful pings from PC_A to RouterA, and then observes the output from these two show commands "Pass Any Exam Any Time." - www.actualtests.com... address E Port security interface counters need to be cleared before using the show command F The port security configuration needs to be saved to NVRAM before it can become active Answer: B,D Explanation: This question is to examine the layer 2 port security According to the exhibit, we know that the port security is configured to restrict the interface in the event of a violation So A is wrong The port