1Which information is used by routers to forward a data packet toward its destination?
destination IP address
2A computer has to send a packet to a destination host in the same LAN. How will the packet be sent?
The packet will be sent directly to the destination host.
3A router receives a packet from the Gigabit 0/0 interface and determines that the packet needs to be forwarded out the Gigabit 0/1 interface. What will the router do next?
create a new Layer 2 Ethernet frame to be sent to the destination
4Which IPv4 address can a host use to ping the loopback interface?
127.0.0.1
5A computer can access devices on the same network but cannot access devices on other networks. What is the probable cause of this problem?
The computer has an invalid default gateway address.
6Which statement describes a feature of the IP protocol?
IP relies on upper layer services to handle situations of missing or out-of-order packets.
7Why is NAT not needed in IPv6?
Any host or user can get a public IPv6 network address because the number of available IPv6 addresses is extremely large.
8Which parameter does the router use to choose the path to the destination when there are multiple routes available?
the lower metric value that is associated with the destination network
9What are two services provided by the OSI network layer?
routing packets toward the destination, encapsulating PDUs from the transport layer
10Within a production network, what is the purpose of configuring a switch with a default gateway address?
The default gateway address is used to forward packets originating from the switch to remote networks.
11What is a basic characteristic of the IP protocol?
connectionless
12Which field in the IPv4 header is used to prevent a packet from traversing a network endlessly?
Time-to-Live
13What is one advantage that the IPv6 simplified header offers over IPv4?
efficient packet handling
14What IPv4 header field identifies the upper layer protocol carried in the packet?
Protocol
15Match the packets with their destination IP address to the exiting interfaces on the router.
172.17.6.15 → FastEthernet0/0, 172.17.14.8 → FastEthernet0/1, 172.17.12.10 → FastEthernet1/0, 172.17.10.5 → FastEthernet1/1, 172.17.8.20 → Serial0/0/0
16What information does the loopback test provide?
The TCP/IP stack on the device is working correctly.
17What routing table entry has a next hop address associated with a destination network?
remote routes
18How do hosts ensure that their packets are directed to the correct network destination?
They search in their own local routing table for a route to the network destination address and pass this information to the default gateway.
19When transporting data from real-time applications, which IPv6 header field can be used to maintain the same path?
Flow Label
20What statement describes the function of the Address Resolution Protocol?
ARP is used to discover the MAC address of any host on the local network.
21Under which two circumstances will a switch flood a frame out of every port except the port that the frame was received on?
The frame has the broadcast address as the destination address, The destination address is unknown to the switch.
22Which statement describes the treatment of ARP requests on the local link?
They are received and processed by every device on the local network.
23Which destination address is used in an ARP request frame?
FFFF.FFFF.FFFF
24A network technician issues the arp -d command on a PC after the router is reconfigured. What is the result?
The ARP cache is cleared.
25PC1 sends a frame to PC3 but PC3 MAC is not in the table. What will the switch do?
The switch will forward the frame to all ports except the incoming port.
26Which two types of IPv6 messages are used in place of ARP for address resolution?
neighbor solicitation, neighbor advertisement
27What is the aim of an ARP spoofing attack?
to associate IP addresses to the wrong MAC address
28PC1 sends an ARP request to Fileserver1. Which MAC address will it receive?
the MAC address of the G0/0 interface on R1
29Where are IPv4-to-Layer 2 Ethernet address mappings maintained on a host computer?
ARP cache
30What important information is examined in the Ethernet frame header by a Layer 2 device in order to forward data onward?
destination MAC address
31Match the commands to the correct actions.
banner motd → displays a message, password class → provides console security, hostname CL1 → configures a name
32What is the fastest way to test if the banner is properly configured?
Exit privileged EXEC mode and press Enter.
33Match the description to the access method.
SSH → encrypted remote, console → preferred out-of-band, AUX → dialup remote, Telnet → unsecure remote
34Match the phases to the functions during the boot up process of a Cisco router.
POST & bootstrap, load IOS, load startup config
35Match the command with the device mode.
service password-encryption → R1(config)#, enable → R1>, copy running-config startup-config → R1#, login → R1(config-line)#, ip address 192.168.4.4 255.255.255.0 → R1(config-if)#
36What are two functions of NVRAM?
to retain contents when power is removed,to store the startup configuration file
37A router boots and enters setup mode. What is the reason for this?
The configuration file is missing from NVRAM
38The global configuration command ip default-gateway 172.16.100.1 is applied to a switch. What is the effect of this command?
The switch can be remotely managed from a host on another network
39What happens when the transport input ssh command is entered on the switch vty lines?
Communication between the switch and remote users is encrypted
40A user PC has successfully transmitted packets to [www.cisco.com](http://www.cisco.com). Which IP address does the user PC target in order to forward its data off the local network?
172.20.0.254
41Match the configuration mode with the command that is available in that mode.
R1> enable,R1# copy running-config startup-config,R1(config-line)# login,R1(config)# interface fastethernet 0/0
42Which three commands are used to set up secure access to a router through a connection to the console interface?
line console 0,password cisco,login
43Consider the IP address configuration shown from PC1. What is a description of the default gateway address?
It is the IP address of the Router1 interface that connects the PC1 LAN to Router1
44Which two functions are primary functions of a router?
packet forwarding,path selection
45What is the effect of using the Router# copy running-config startup-config command on a router?
The contents of NVRAM will change
46What will happen if the default gateway address is incorrectly configured on a host?
The host cannot communicate with hosts in other networks
47What are two potential network problems that can result from ARP operation?
On large networks with low bandwidth, multiple ARP broadcasts could cause data communication delays,Network attackers could manipulate MAC address and IP address mappings in ARP messages with the intent of intercepting network traffic
48Which interfaces in each router are active and operational?
R1: G0/0 and S0/0/0,R2: G0/1 and S0/0/0
49Which term describes a field in the IPv4 packet header used to identify the next level protocol?
protocol
50Which term describes a field in the IPv4 packet header that contains an 8-bit binary value used to determine the priority of each packet?
differentiated services
51Which term describes a field in the IPv4 packet header that contains a 32-bit binary value associated with an interface on the sending device?
source IPv4 address
52Which term describes a field in the IPv4 packet header used to detect corruption in the IPv4 header?
header checksum
53A network administrator is connecting a new host to the Payroll LAN. The host needs to communicate with remote networks. What IP address would be configured as the default gateway on the new host?
10.27.14.148
54Which term describes a field in the IPv4 packet header that contains a unicast, multicast, or broadcast address?
destination IPv4 address
55Which term describes a field in the IPv4 packet header used to limit the lifetime of a packet?
TTL
56Which term describes a field in the IPv4 packet header that contains a 4-bit binary value set to 0100?
version
57Which term describes a field in the IPv4 packet header used to identify the next level protocol?
protocol
58Which term describes a field in the IPv4 packet header that contains a 4-bit binary value set to 0100?
version
59What property of ARP causes cached IP-to-MAC mappings to remain in memory longer?
Entries in an ARP table are time-stamped and are purged after the timeout expires
60What property of ARP allows MAC addresses of frequently used servers to be fixed in the ARP table?
A static IP-to-MAC address entry can be entered manually into an ARP table
61What property of ARP allows MAC addresses of frequently used servers to be fixed in the ARP table?
A static IP-to-MAC address entry can be entered manually into an ARP table
62What property of ARP allows hosts on a LAN to send traffic to remote networks?
Local hosts learn the MAC address of the default gateway
63A network administrator is connecting a new host to the Registrar LAN. The host needs to communicate with remote networks. What IP address would be configured as the default gateway on the new host?
192.168.235.234
64What property of ARP forces all Ethernet NICs to process an ARP request?
The destination MAC address FF-FF-FF-FF-FF-FF appears in the header of the Ethernet frame
65What property of ARP causes a reply only to the source sending an ARP request?
The source MAC address appears in the header of the Ethernet frame
66What property of ARP causes the request to be flooded out all ports of a switch except for the port receiving the ARP request?
The destination MAC address FF-FF-FF-FF-FF-FF appears in the header of the Ethernet frame
67What property of ARP causes the NICs receiving an ARP request to pass the data portion of the Ethernet frame to the ARP process?
The type field 0x806 appears in the header of the Ethernet frame
68What property of ARP causes the NICs receiving an ARP request to pass the data portion of the Ethernet frame to the ARP process?
The type field 0x806 appears in the header of the Ethernet frame
69A network administrator is connecting a new host to the Service LAN. The host needs to communicate with remote networks. What IP address would be configured as the default gateway on the new host?
172.29.157.156
70A network administrator is connecting a new host to the Medical LAN. The host needs to communicate with remote networks. What IP address would be configured as the default gateway on the new host?
192.168.191.189
71A network administrator is connecting a new host to the Registrar LAN. The host needs to communicate with remote networks. What IP address would be configured as the default gateway on the new host?
192.168.225.223
72A network administrator is connecting a new host to the Manager LAN. The host needs to communicate with remote networks. What IP address would be configured as the default gateway on the new host?
10.118.62.196
73A network administrator is connecting a new host to the Store LAN. The host needs to communicate with remote networks. What IP address would be configured as the default gateway on the new host?
172.19.98.230
74A network administrator is connecting a new host to the Store LAN. The host needs to communicate with remote networks. What IP address would be configured as the default gateway on the new host?
172.20.132.13
75A network administrator is connecting a new host to the Service LAN. The host needs to communicate with remote networks. What IP address would be configured as the default gateway on the new host?
192.168.167.166
76A network administrator is connecting a new host to the Medical LAN. The host needs to communicate with remote networks. What IP address would be configured as the default gateway on the new host?
192.168.201.200
77What is the prefix length notation for the subnet mask 255.255.255.224?
/27
78How many valid host addresses are available on an IPv4 subnet that is configured with a /26 mask?
62
79Which subnet mask would be used if 5 host bits are available?
255.255.255.224
80A network administrator subnets the 192.168.10.0/24 network into subnets with /26 masks. How many equal-sized subnets are created?
4
81Match the subnetwork to a host address that would be included within the subnetwork.
192.168.1.32/27 → 192.168.1.33-62, 192.168.1.64/27 → 192.168.1.65-94, 192.168.1.96/27 → 192.168.1.97-126
82An administrator wants to create four subnetworks from the network address 192.168.1.0/24. What is the network address and subnet mask of the second useable subnet?
192.168.1.64 255.255.255.192
83How many bits must be borrowed from the host portion of an address to accommodate a router with five connected networks?
three
84How many host addresses are available on the 192.168.10.128/26 network?
62
85How many host addresses are available on the network 172.16.128.0 with a subnet mask of 255.255.252.0?
1022
86What three blocks of addresses are defined by RFC 1918 for private network use?
10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16
87Refer to the exhibit. An administrator must send a message to everyone on the router A network. What is the broadcast address for network 172.16.16.0/22?
172.16.19.255
88A site administrator has been told that a particular network at the site must accommodate 126 hosts. Which subnet mask would be used that contains the required number of host bits?
255.255.255.128
89Considering the addresses already used and having to remain within the 10.16.10.0/24 network range, which subnet address could be assigned to the network containing 25 hosts?
10.16.10.64/27
90What is the usable number of host IP addresses on a network that has a /26 mask?
62
91Which address prefix range is reserved for IPv4 multicast?
224.0.0.0 – 239.255.255.255
92Match the network with the correct IP address and prefix that will satisfy the usable host addressing requirements for each network.
Network A 192.168.0.128/25, Network B 192.168.0.0/26, Network C 192.168.0.96/27, Network D 192.168.0.80/30
93A high school in New York is videoconferencing with a school in Russia. The admin receives 192.168.25.10 as the IP of the remote school. Why will this not work?
This is a private IP address.
94Which three addresses are valid public addresses?
198.133.219.17, 128.107.12.117, 64.104.78.227
95A message is sent to all hosts on a remote network. Which type of message is it?
directed broadcast
96A company has a network address of 192.168.1.64/26 and wants two subnetworks with 10 hosts and 18 hosts. Which two networks would achieve that?
192.168.1.64/27, 192.168.1.96/28
97Which address is a valid IPv6 link-local unicast address?
FE80
98Which of these addresses is the shortest abbreviation for 3FFE:1044:0000:0000:00AB:0000:0000:0057?
3FFE:1044:0:0\:AB
99A network administrator has received the IPv6 prefix 2001\:DB8
/48. Without subnetting into the interface ID, how many subnets can be created?
100Given IPv6 prefix 2001\:db8
/48, what will be the last subnet created if the prefix is changed to /52?
101Consider the following range of addresses 2001:0DB8\:BC15:00A0
to 2001:0DB8\:BC15:00AF
102What type of IPv6 address is FE80
1?
103With a hierarchical IPv6 addressing scheme using site, sub-site, and subnet, what is the maximum number of subnets achieved per sub-site?
16
104What is used in the EUI-64 process to create an IPv6 interface ID?
the MAC address of the interface
105What is the prefix for the host address 2001\:DB8\:BC15\:A:12AB
1/64?
106An IPv6 device sends a packet with destination FF02
1. What is the target?
107Match the IPv6 address with the IPv6 address type.
108Which IPv6 prefix is reserved for communication between devices on the same link?
FE80
109Which type of IPv6 address refers to any unicast address assigned to multiple hosts?
anycast
110What are two types of IPv6 unicast addresses?
loopback, link-local
111Which service provides dynamic global IPv6 addressing to end devices without using a server that keeps a record of available IPv6 addresses?
SLAAC
112Which protocol supports Stateless Address Autoconfiguration (SLAAC) for dynamic assignment of IPv6 addresses to a host?
ICMPv6
113The IPv4 packets and IPv6 packets coexist in the same network.
dual-stack
114The IPv6 packet is transported inside an IPv4 packet.
tunneling
115IPv6 packets are converted into IPv4 packets, and vice versa.
translation
116A technician uses the ping 127.0.0.1 command. What is the technician testing?
the TCP/IP stack on a network host
117An administrator is troubleshooting connectivity between PC1 and PC2 using tracert. Where should troubleshooting begin?
R1
118Which protocol is used by the traceroute command to send and receive echo-requests and echo-replies?
ICMP
119Which ICMPv6 message is sent when the IPv6 hop limit field of a packet is decremented to zero and the packet cannot be forwarded?
time exceeded
120A user executes a traceroute over IPv6. When would a router drop the packet?
when the value of the Hop Limit field reaches zero
121What is the purpose of ICMP messages?
to provide feedback of IP packet transmissions
122What source IP address does a router use by default when the traceroute command is issued?
the IP address of the outbound interface
123a link-local address
169.254.1.5
124a TEST-NET address
192.0.2.123
125an experimental address
240.2.6.255
126a private address
172.19.20.5
127a loopback address
127.0.0.1
128A user issues a ping 192.135.250.103 command and receives a response code of 1. What does this represent?
host unreachable
129Which subnet would include the address 192.168.1.96 as a usable host address?
192.168.1.64/26
130What are the three IPv6 addresses displayed when the route from PC1 to PC2 is traced?
2001\:DB8:1:1
131A host is transmitting a broadcast. Which host or hosts will receive it?
all hosts in the same subnet
132A host is transmitting a unicast. Which host or hosts will receive it?
one specific host
133A user issues a ping 2001\:db8\:FACE:39
10 command and receives a response code of 3. What does this represent?
134A host is transmitting a multicast. Which host or hosts will receive it?
a specially defined group of hosts
135Which is the compressed format of the IPv6 address 2001:0db8:0000:0000:0000\:a0b0:0008:0001?
2001\:db8
136Which is the compressed format of the IPv6 address fe80:09ea:0000:2200:0000:0000:0fe0:0290?
fe80:9ea:0:2200
137Which is the compressed format of the IPv6 address 2002:0042:0010\:c400:0000:0000:0000:0909?
2002:42:10\:c400
138Which is the compressed format of the IPv6 address 2001:0db8:0000:0000:0ab8:0001:0000:1000?
2001\:db8
139Which is the compressed format of the IPv6 address 2002:0420:00c4:1008:0025:0190:0000:0990?
2002:420\:c4:1008:25:190
140Which is the compressed format of the IPv6 address 2001:0db8:0000:0000:0000\:a0b0:0008:0001?
2001\:db8
141Which is the compressed format of the IPv6 address fe80:0000:0000:0000:0220:0b3f\:f0e0:0029?
fe80
142Which is the compressed format of the IPv6 address 2001:0db8:0000:0000:0000\:a0b0:0008:0001?
2001\:db8
143Which is the compressed format of the IPv6 address 2002:0042:0010\:c400:0000:0000:0000:0909?
2002:42:10\:c400
144Which is the compressed format of the IPv6 address fe80:09ea:0000:2200:0000:0000:0fe0:0290?
fe80:9ea:0:2200
145A user issues a ping 2001\:db8\:FACE:39
10 command and receives a response code of 2. What does this represent?
146A user issues a ping 192.135.250.103 command and receives a response code of 1. What does this represent?
host unreachable
147A user issues a ping fe80:65ab\:dcc1
100 command and receives a response code of 3. What does this represent?
148A user issues a ping 10.10.14.67 command and receives a response code of 0. What does this represent?
network unreachable
149A user issues a ping fe80:65ab\:dcc1
100 command and receives a response code of 4. What does this represent?
150A user issues a ping 198.133.219.8 command and receives a response code of 0. What does this represent?
network unreachable
151A user issues a ping 2001\:db8:3040:114
88 command and receives a response code of 4. What does this represent?
152A user issues a ping 2001\:db8\:FACE:39
10 command and receives a response code of 2. What does this represent?
153Which action is performed by a client when establishing communication with a server via the use of UDP at the transport layer?
The client randomly selects a source port number.
154Which transport layer feature is used to guarantee session establishment?
TCP 3-way handshake
155What is the complete range of TCP and UDP well-known ports?
0 to 1023
156What is a socket?
the combination of a source IP address and port number or a destination IP address and port number
157A PC is downloading a large file from a server. The TCP window is 1000 bytes. The server is sending the file using 100-byte segments. How many segments will the server send before it requires an acknowledgment from the PC?
10 segments
158Which factor determines TCP window size?
the amount of data the destination can process at one time
159What does a client do when it has UDP datagrams to send?
It just sends the datagrams.
160Which three fields are used in a UDP segment header?
Length, Source Port, Checksum
161What are two roles of the transport layer in data communication on a network?
identifying the proper application for each communication stream, tracking the individual communication between applications on the source and destination hosts
162What information is used by TCP to reassemble and reorder received segments?
sequence numbers
163What important information is added to the TCP/IP transport layer header to ensure communication and connectivity with a remote network device?
destination and source port numbers
164Which two characteristics are associated with UDP sessions?
Destination devices receive traffic with minimal delay, Received data is unacknowledged
165Which flag in the TCP header is used in response to a received FIN in order to terminate connectivity between two network devices?
ACK
166Which protocol or service uses UDP for a client-to-server communication and TCP for server-to-server communication?
DNS
167What is a characteristic of UDP?
UDP reassembles the received datagrams in the order they were received.
168What kind of port must be requested from IANA in order to be used with a specific application?
registered port
169Which three application layer protocols use TCP?
SMTP, FTP, HTTP
170Which three statements characterize UDP?
UDP provides basic connectionless transport layer functions, UDP is a low overhead protocol that does not provide sequencing or flow control mechanisms, UDP relies on application layer protocols for error detection
171Which two fields are included in the TCP header but not in the UDP header?
window, sequence number
172Which field in the TCP header indicates the status of the three-way handshake process?
control bits
173Why does HTTP use TCP as the transport layer protocol?
because HTTP requires reliable delivery
174Which two types of applications are best suited for UDP?
applications that handle reliability themselves, applications that can tolerate some data loss, but require little or no delay
175How are port numbers used in the TCP/IP encapsulation process?
If multiple conversations occur that are using the same service, the source port number is used to track the separate conversations.
176In what two situations would UDP be better than TCP as the preferred transport protocol?
when a faster delivery mechanism is needed, when applications do not need to guarantee delivery of the data
177What are three responsibilities of the transport layer?
meeting the reliability requirements of applications, multiplexing multiple communication streams from many users or applications on the same network, identifying the applications and services on the client and server that should handle transmitted data
178Which three statements describe a DHCP Discover message?
The destination IP address is 255.255.255.255, The message comes from a client seeking an IP address, All hosts receive the message, but only a DHCP server replies.
179Which two protocols may devices use in the application process that sends email?
SMTP, POP3
180What is true about the Server Message Block protocol?
Clients establish a long term connection to servers.
181What is the function of the HTTP GET message?
to request an HTML page from a web server
182Which OSI layer provides the interface between the applications used to communicate and the underlying network over which messages are transmitted?
application
183Which networking model is being used when an author uploads one chapter document to a file server of a book publisher?
client/server
184What do the client/server and peer-to-peer network models have in common?
Both models support devices in server and client roles.
185In what networking model would eDonkey, eMule, BitTorrent, Bitcoin, and LionShare be used?
peer-to-peer
186What is a common protocol that is used with peer-to-peer applications such as WireShare, Bearshare, and Shareaza?
Gnutella
187What is a key characteristic of the peer-to-peer networking model?
resource sharing without a dedicated server
188The application layer of the TCP/IP model performs the functions of what three layers of the OSI model?
session, presentation, application
189What is an example of network communication that uses the client-server model?
A workstation initiates a DNS request when the user types [www.cisco.com](http://www.cisco.com) in the address bar of a web browser.
190Which layer in the TCP/IP model is used for formatting, compressing, and encrypting data?
application
191What is an advantage of SMB over FTP?
SMB clients can establish a long-term connection to the server.
192A manufacturing company subscribes to certain hosted services from its ISP. The services that are required include hosted world wide web, file transfer, and e-mail. Which protocols represent these three key applications?
FTP, HTTP, SMTP
193Which application layer protocol uses message types such as GET, PUT, and POST?
HTTP
194What type of information is contained in a DNS MX record?
the domain name mapped to mail exchange servers
195Which three protocols operate at the application layer of the TCP/IP model?
FTP, POP3, DHCP
196Which protocol is used by a client to communicate securely with a web server?
HTTPS
197Which applications or services allow hosts to act as client and server at the same time?
P2P applications
198What are two characteristics of peer-to-peer networks?
decentralized resources, resource sharing without a dedicated server
199Which scenario describes a function provided by the transport layer?
A student has two web browser windows open in order to access two web sites. The transport layer ensures the correct web page is delivered to the correct browser window.
200Which three layers of the OSI model provide similar network services to those provided by the application layer of the TCP/IP model?
session layer, application layer, presentation layer
201A PC that is communicating with a web server has a TCP window size of 6,000 bytes when sending data and a packet size of 1,500 bytes. Which byte of information will the web server acknowledge after it has received two packets of data from the PC?
3001
202A PC that is communicating with a web server has a TCP window size of 6,000 bytes when sending data and a packet size of 1,500 bytes. Which byte of information will the web server acknowledge after it has received three packets of data from the PC?
4501
203A PC that is communicating with a web server has a TCP window size of 6,000 bytes when sending data and a packet size of 1,500 bytes. Which byte of information will the web server acknowledge after it has received four packets of data from the PC?
6001
204A client creates a packet to send to a server. The client is requesting TFTP service. What number will be used as the destination port number in the sending packet?
69
205A client creates a packet to send to a server. The client is requesting FTP service. What number will be used as the destination port number in the sending packet?
21
206A client creates a packet to send to a server. The client is requesting SSH service. What number will be used as the destination port number in the sending packet?
22
207A client creates a packet to send to a server. The client is requesting HTTP service. What number will be used as the destination port number in the sending packet?
80
208A client creates a packet to send to a server. The client is requesting POP3 service. What number will be used as the destination port number in the sending packet?
110
209A client creates a packet to send to a server. The client is requesting telnet service. What number will be used as the destination port number in the sending packet?
23
210A client creates a packet to send to a server. The client is requesting SNMP service. What number will be used as the destination port number in the sending packet?
161
211A client creates a packet to send to a server. The client is requesting SMTP service. What number will be used as the destination port number in the sending packet?
25
212A client creates a packet to send to a server. The client is requesting HTTPS service. What number will be used as the destination port number in the sending packet?
443Which component is designed to protect against unauthorized communications to and from a computer?
213Which command will block login attempts on RouterA for a period of 30 seconds if there are 2 failed login attempts within 10 seconds?
RouterA(config)# login block-for 30 attempts 2 within 10
214What is the purpose of the network security accounting function?
to keep track of the actions of a user
215What type of attack may involve the use of tools such as nslookup and fping?
reconnaissance attack
216Match each weakness with an example.
security policy weakness – The network administrator did not fully consider the implications of unauthorized users accessing the network; configuration weakness – When implementing an access list on a router, a network engineer did not filter a type of malicious traffic; technological weakness – A network engineer is examining the operating system of a network device for vulnerabilities
217Match the type of information security threat to the scenario.
Information theft, Identity theft, Data loss or manipulation, Disruption of service
218Which example of malicious code would be classified as a Trojan horse?
malware that was written to look like a video game
219What is the difference between a virus and a worm?
Worms self-replicate but viruses do not
220Which attack involves a compromise of data that occurs between two end points?
man-in-the-middle attack
221Which type of attack involves an adversary attempting to gather information about a network to identify vulnerabilities?
reconnaissance
222Match the description to the type of firewall filtering.
Stateful packet inspection – Prevents or allows access based on whether the traffic is in response to requests from internal hosts; URL filtering – Prevents or allows access based on web addresses or keywords; Application filtering – Prevents or allows access based on the port numbers used in the request; Packet filtering – Prevents or allows access based on the IP or MAC addresses of the source and destination
223What is the purpose of the network security authentication function?
to require users to prove who they are
224Which firewall feature is used to ensure that packets coming into a network are legitimate responses to requests initiated from internal hosts?
stateful packet inspection
225When applied to a router, which command would help mitigate brute-force password attacks against the router?
login block-for 60 attempts 5 within 60
226Identify the steps needed to configure a switch for SSH.
hostname, domain name, crypto key generation, vty lines configured for SSH and login local, user account created with password
227What feature of SSH makes it more secure than Telnet for a device management connection?
login information and data encryption
228What is the advantage of using SSH over Telnet?
SSH provides secure communications to access hosts
229What is the role of an IPS?
detecting and blocking of attacks in real time
230A user is redesigning a network for a small company and wants to ensure security at a reasonable price. What approach is the user implementing?
layered
231What is an accurate description of redundancy?
designing a network to use multiple paths between switches to ensure there is no single point of failure
232A network administrator is upgrading a small business network to give high priority to real-time applications traffic. What two types of network services is the network administrator trying to accommodate?
voice, video
233What is the purpose of a small company using a protocol analyzer utility to capture network traffic on the network segments where the company is considering a network upgrade?
to document and analyze network traffic requirements on each network segment
234Refer to the exhibit. An administrator is testing connectivity to a remote device with the IP address 10.1.1.1. What does the output of this command indicate?
The connection timed out while waiting for a reply from the remote device
235Which method is used to send a ping message specifying the source address for the ping?
Issue the ping command without specifying a destination IP address (extended ping mode)
236A network engineer is analyzing reports from a recently performed network baseline. Which situation would depict a possible latency issue?
an increase in host-to-host ping response times
237Which statement is true about Cisco IOS ping indicators?
‘U’ may indicate that a router along the path did not contain a route to the destination address and that the ping was unsuccessful
238A user reports a lack of network connectivity. The technician takes control of the user machine and attempts to ping other computers on the network and these pings fail. The technician pings the default gateway and that also fails. What can be determined for sure by the results of these tests?
Nothing can be determined for sure at this point
239A network technician issues the C:> tracert -6 [www.cisco.com](http://www.cisco.com) command on a Windows PC. What is the purpose of the -6 command option?
It forces the trace to use IPv6
240Why would a network administrator use the tracert utility?
to identify where a packet was lost or delayed on a network
241A ping fails when performed from router R1 to directly connected router R2. The network administrator then issues the show cdp neighbors command. Why?
The network administrator wants to verify Layer 2 connectivity
242A network engineer is troubleshooting connectivity issues among interconnected Cisco routers and switches. Which command should the engineer use to find the IP address information, host name, and IOS version of neighboring network devices?
show cdp neighbors detail
243What information about a Cisco router can be verified using the show version command?
the value of the configuration register
244Which command should be used on a Cisco router or switch to allow log messages to be displayed on remotely connected sessions using Telnet or SSH?
terminal monitor
245Which command can an administrator issue on a Cisco router to send debug messages to the vty lines?
terminal monitor
246By following a structured troubleshooting approach, a network administrator identified a network issue after a conversation with the user. What is the next step that the administrator should take?
Establish a theory of probable causes
247Users are complaining that they are unable to browse certain websites on the Internet. An administrator can successfully ping a web server via its IP address, but cannot browse to the domain name of the website. Which troubleshooting tool would be most useful in determining where the problem is?
nslookup
248An employee complains that a Windows PC cannot connect to the Internet. A network technician issues the ipconfig command on the PC and is shown an IP address of 169.254.10.3. Which two conclusions can be drawn?
The PC cannot contact a DHCP server. The PC is configured to obtain an IP address automatically.
249Refer to the exhibit. Host H3 is having trouble communicating with host H1. The network administrator suspects a problem exists with the H3 workstation and wants to prove that there is no problem with the R2 configuration. What tool could the network administrator use on router R2 to prove that communication exists to host H1 from the interface on R2, which is the interface that H3 uses when communicating with remote networks?
an extended ping
250Refer to the exhibit. Baseline documentation for a small company had ping round trip time statistics of 36/97/132 between hosts H1 and H3. Today the network administrator checked connectivity by pinging between hosts H1 and H3 that resulted in a round trip time of 1458/2390/6066. What does this indicate to the network administrator?
Something is causing a time delay between the networks.
251Which network service automatically assigns IP addresses to devices on the network?
DHCP
252Which command can an administrator execute to determine what interface a router will use to reach remote networks?
show ip route
253On which two interfaces or ports can security be improved by configuring executive timeouts?
console ports vty ports
254When configuring SSH on a router to implement secure network management, a network engineer has issued the login local and transport input ssh line vty commands. What three additional configuration actions have to be performed to complete the SSH configuration?
Generate the asymmetric RSA keys. Configure the correct IP domain name. Create a valid local username and password database.
255What is considered the most effective way to mitigate a worm attack?
Download security updates from the operating system vendor and patch all vulnerable systems.
256Which statement describes the ping and tracert commands?
Tracert shows each hop, while ping shows a destination reply only.
257A technician is to document the current configurations of all network devices in a college, including those in off-site buildings. Which protocol would be best to use to securely access the network devices?
SSH
258Which command has to be configured on the router to complete the SSH configuration?
transport input ssh
259An administrator decides to use “WhatAreyouwaiting4” as the password on a newly installed router. Which statement applies to the password choice?
It is strong because it uses a passphrase.
260An administrator decides to use “pR3s!d7n&0” as the password on a newly installed router. Which statement applies to the password choice?
It is strong because it uses a minimum of 10 numbers, letters and special characters.
261An administrator decides to use “5\\$74#033!” as the password on a newly installed router. Which statement applies to the password choice?
It is strong because it uses a minimum of 10 numbers, letters and special characters.
262An administrator decides to use “pR3s!d7n&0” as the password on a newly installed router. Which statement applies to the password choice?
It is strong because it uses a minimum of 10 numbers, letters and special characters.
263An administrator decides to use “12345678!” as the password on a newly installed router. Which statement applies to the password choice?
It is weak because it uses a series of numbers or letters.
264An administrator decides to use “admin” as the password on a newly installed router. Which statement applies to the password choice?
It is weak because it is often the default password on new devices.
265An administrator decides to use “Feb121978” as the password on a newly installed router. Which statement applies to the password choice?
It is weak because it uses easily found personal information.
266An administrator decides to use “password” as the password on a newly installed router. Which statement applies to the password choice?
It is weak because it is a commonly used password.
267An administrator decides to use “RobErT” as the password on a newly installed router. Which statement applies to the password choice?
It is weak since it uses easily found personal information.
268An administrator decides to use “Elizabeth” as the password on a newly installed router. Which statement applies to the password choice?
It is weak because it uses easily found personal information.
269A network technician is troubleshooting an issue and needs to verify the IP addresses of all interfaces on a router. What is the best command to use to accomplish the task?
show ip interface brief
270Students who are connected to the same switch are having slower than normal response times. The administrator suspects a duplex setting issue. What is the best command to use to accomplish the task?
show interfaces
271A user wants to know the IP address of the PC. What is the best command to use to accomplish the task?
ipconfig
272A student wants to save a router configuration to NVRAM. What is the best command to use to accomplish the task?
copy running-config startup-config
273A support technician needs to know the IP address of the wireless interface on a MAC. What is the best command to use to accomplish the task?
ipconfig getifaddr en0
274A network technician is troubleshooting an issue and needs to verify all of the IPv6 interface addresses on a router. What is the best command to use to accomplish the task?
show ipv6 interface
275A teacher is having difficulties connecting his PC to the classroom network. He needs to verify that a default gateway is configured correctly. What is the best command to use to accomplish the task?
ipconfig
276Only employees connected to IPv6 interfaces are having difficulty connecting to remote networks. The analyst wants to verify that IPv6 routing has been enabled. What is the best command to use to accomplish the task?
show running-config
277An administrator is troubleshooting connectivity issues and needs to determine the IP address of a website. What is the best command to use to accomplish the task?
nslookup
278What is a characteristic of UDP?
UDP reassembles the received datagrams in the order they were received.