Ccna Question Zxc

download Ccna Question Zxc

of 24

Transcript of Ccna Question Zxc

  • 8/8/2019 Ccna Question Zxc

    1/24

    1. What is difference between Switch & Hub?

    Switch:

    Switches operate at Layer 2 Data Link Layer

    Address Learning

    Forward / Filter decision using MAC address

    Loop Avoidance

    Breakup collision domains

    Switches create separate collision domains but a single broadcast domain

    Hub:

    Hub operates at Layer 1 Physical Layer

    No Filtering

    No Addressing

    Hub creates single collision domain and single broadcast domain

    Make forwarding to all the ports when signal is arrived

    2. What is PING utility?

    PING Packet Internet Gopher

    A utility that verifies connections to one or more remote hosts. The ping command uses

    the ICMP echo request and echo reply packets to determine whether a particular IPsystem on a network is functional. Ping is useful for diagnosing IP network or router

    failures.

    3. What is a VLAN? What does VLAN provide?

    VLAN Virtual Local Area Network

    Vlan is a logical grouping or segmenting a network connected to administratively definedports on a switch, they provide Broadcast control, Security and Flexibility.

  • 8/8/2019 Ccna Question Zxc

    2/24

    4. What is Subnetting? Why is it used?

    Used in IP Networks to break up larger networks into smaller subnetworks. It is used toreduce network traffic, Optimized network performance, and simplify management i.e. to

    identify and isolate network problems.

    5. Difference between the Communication and Transmission?

    Communication is the process of sending and receiving data by means of a data cable that

    is connected externally.

    Transmission means the transfer of data from the source to the destination.

    6. What is RAID?

    A method used to standardize and categorize fault-tolerant disk systems. RAID levels

    provide various mixes of performance, reliability, and cost. Some servers provide three of

    the RAID levels: Level 0 (striping), Level 1 (mirroring), and Level 5 (striping & parity).

    7. What are 10Base2, 10Base5 and 10BaseT Ethernet LANs?

    10Base2 an Ethernet term meaning a maximum transfer rate of 10 Megabits persecond that uses baseband signaling, with a contiguous cable segment length of200 meters (185mts). Known as Thinnet.

    10Base5 an Ethernet term meaning a maximum transfer rate of 10 Megabits persecond that uses baseband signaling, with a contiguous cable segment length of500 meters. Known as Thicknet.

    10BaseT an Ethernet term meaning a maximum transfer rate of 10 Megabits per second

    that uses two pairs of twisted-pair baseband signaling, with a contiguous cable segmentlength of 100 meters.

    8. What are the two types of Transmission Technology available?

    Point to Point and Broadcast

    9. What is point-to-point protocol?

    An industry standard suite of protocols for the use of point-to-point links to transportmultiprotocol datagrams.

    10. What are the possible ways of data exchange?

  • 8/8/2019 Ccna Question Zxc

    3/24

    Simplex

    Half-duplex

    Full-duplex

    11. What is difference between Baseband and Broadband Transmission?

    In a baseband transmission, the entire bandwidth of the cable is consumed by a singlesignal.

    In broadband transmission, signals are sent on multiple frequencies, allowing multiple

    signals to be sent simultaneously.

    12. What is Protocol Data Unit?

    The processes at each layer of the OSI model.

    Layers PDU

    Transport Segments

    Network Packets/Datagrams

    Data Link Frames

    Physical Bits

    13. What are major types of Networks and explain?

    Peer-to-Peer Network

    Computers can act as both servers sharing resources and as clients using the resources.

    Server-based Network

    Provide centralized control of network resources and rely on server computers to provide

    security and network administration

    14. What is Passive Topology?

    When the computers on the network simply listen and receive the signal, they are referredto as passive because they dont amplify the signal in any way.

    15. What is Mesh Network?

  • 8/8/2019 Ccna Question Zxc

    4/24

    A network in which there are multiple network links between computers to provide

    multiple paths for data to travel.

    16. How Gateway is different from Routers?

    Gateway

    A device connected to multiple physical TCP/IP networks capable of routing ordelivering IP packets between them.

    Router

    Its a layer 3 device that connects 2 different networks and routes packets of data from

    one network to another. It breaks up Broadcast domain as well as Collision Domain.

    17. What is Brouter?

    Its a Hybrid device that combines the features of both bridges and routers.

    18. What is Subnet?

    A subdivision of an IP network.

    19. What is Frame relay, in which layer it comes?

    Frame relay is an industry standard, shared access, switched Data Link Layer

    encapsulation that services multiple virtual circuits and protocols between connected

    mechanism.

    Frame relay is a packet-switched technology.

    20. What is Terminal Emulation, in which layer it comes?

    The use of software, installed on PC or LAN server, that allows the PC to function as if it

    were dumb terminal directly attached to a particular type of mainframe.

    Telnet is also called as terminal emulation. It belongs to application layer.

    21. What is Beaconing?

    An FDDI frame or Token Ring frame that points to serious problem with the ring, such as

    a broken cable. The beacon frame carries the address of the station thought to be down.

    22. What are NetBIOS and NetBEUI?

    NetBIOS Network Basic Input / Output System

  • 8/8/2019 Ccna Question Zxc

    5/24

    An application-programming interface (API) that can be used by programs on a local area

    network (LAN). NetBIOS provides programs with a uniform set of commands for

    requesting the lower-level services required to manage names, conduct sessions, and senddatagrams between nodes on a network.

    NetBEUI NetBIOS Extended User Interface

    An improved version of the NetBIOS protocol, a network protocol native to Microsoft

    Networking. It is usually used in small, department-size local area networks (LANs) of 1to 200 clients. It can use Token Ring source routing as its only method of routing.

    23. What is Cladding?

    A layer of a glass surrounding the center fiber of glass inside a fiber-optic cable.

    24. What is Attenuation?

    In communication weakening or loss of signal energy, typically caused by distance.

    25. What is MAC address?

    The address for a device as it is identified at the Media Access Control (MAC) layer inthe network architecture. MAC address is usually stored in ROM on the network adapter

    card and is unique.

    26. What is ICMP?

    ICMP Internet Control Message Protocol

    It is a Network Layer Internet protocol, which can report errors and status information.We can use the ping command to send ICMP echo request messages and record the

    receipt of ICMP echo reply messages. With these messages, we can detect network or

    host communication failures and troubleshoot common TCP/IP connectivity problems.

    27. What is difference between ARP and RARP?

    ARP Address Resolution Protocol

    The protocol that traces IP addresses to MAC addresses.

    RARP Reverse Address Resolution Protocol

    The protocol within the TCP/IP stack that maps MAC addresses to IP addresses.

    28. What is the difference between TFTP and FTP application layerprotocols?

  • 8/8/2019 Ccna Question Zxc

    6/24

    TFTP Trivial File Transfer Protocol

    A stripped down version of FTP, easy to use and fast. TFTP has no Directory browsing,

    no Authentication and insecure it can only send and receive files.

    FTP File Transfer Protocol

    The TCP/IP protocol used for transmitting files between network nodes. FTP allowsaccess to both Directories and files, manipulating directories, typing file contents and

    copying files between hosts.

    29. Explain 5-4-3 rule?

    In a Ethernet network, between any two points on the network, there can be no more thanfive network segments or four repeaters, and of those five segments only three of

    segments can be populated.

    30. What MAU?

    MAU Multistation Access Unit

    31. What is the difference between routable and non- routable protocols?

    Routable protocols can work with a router and can be used to build large networks. Non-

    Routable protocols are designed to work on small, local networks and cannot be used

    with a router.

    32. What is logical link control?

    One of two sublayers of the data link layer of OSI reference model, as defined by theIEEE 802 standard. This sublayer is responsible for error detection but not correction,

    flow control and framing.

    33. What is Virtual Channel?

    A logical circuit that is created by Virtual channel links. It carries data between twoendpoints in a network.

    The other name for Virtual Channel is Virtual Circuit.

    34. What is Virtual Path?

    Along any transmission path from a given source to a given destination, a group of virtualcircuits can be grouped together into what is called path.

  • 8/8/2019 Ccna Question Zxc

    7/24

    35. What is Packet Filter?

    36. What is multicast routing?

    Sending a message to a group multicast address is called multicasting, and its routing

    algorithm is called multicast routing.

    37. What is IGP (Interior Gateway Protocol)?

    Any protocol used by an internetwork to exchange routing data within an autonomous

    system. E.g. RIP, IGRP and OSPF.

    38. What is EGP (Exterior Gateway Protocol)?

    It is the protocol the routers in neighboring autonomous systems use to identify the set of

    networks that can be reached within or via each autonomous system.

    39. What is Autonomous System?

    A group of Networks under mutual administration that share the same routing

    methodology. Autonomous Systems are subdivided by Areas and must be assigned an

    individual 16-bit number by the IANA.

    40. What is BGP (Border Gateway Protocol)?

    It is a protocol used to advertise the set of networks that can be reached within an

    autonomous system. BGP enables this information to be shared with the autonomous

    system. This is newer than EGP (Exterior Gateway Protocol).

    41. What is Gateway-to-Gateway protocol?

    It is a protocol formerly used to exchange routing information between Internet core

    routers.

    42. What is Kerberos?

    An authentication mechanism used to verify user or host identity. Kerberos usesencryption to prevent intruders from discovering passwords and gaining

    unauthorized access to files.

    43. What is OSPF (Open Shortest Path First)?

    OSPF is the first Open Standard Link State Routing Protocol.

    Its a Classless Routing Protocol meaning when updates are sent they send both IP

    address and Subnet mask.

  • 8/8/2019 Ccna Question Zxc

    8/24

    Administrative Distance is 110.

    Metric used is Cost i.e. Cost= 108

    Bandwidth

    OSPF uses algorithm to build Routing Table called Dijisktra.

    Sends only Incremental and Triggered updates. Route updates sent within the routers willbe secured with the help of MD5 encrypted password.

    Routing updates are sent as Multicast addresses i.e.

    224.0.0.5 SPF (all OSPF routers)

    224.0.0.6 Designated router and Backup Designated router

    OSPF maintains 3 types of Routing table i.e. Routing Table (Dijisktra), Topology Table(SPF) and Neighborship Table.

    In OSPF Routers can be connected in two methods i.e.

    Point-to-Point Link

    Point to Multipoint Link

    In OSPF a single large Autonomous system is break into small areas. Thereshould be atleast one area by name Area 0. Its called as Backbone Area.

    The Router that connects more than one Area is called as Area Border Routers.

    The Router that connects to other Autonomous system is called as Autonomous System

    Boundary Router.

    Router ID

    If the priority is set 1 to all the routers then there is a tie in priority, in this case it willcheck if there is any loopback address is given to any router if not the router with highest

    value of IP address will be elected as Router ID.

    This router will be then called as Designated Router and the router with less value of IP

    address after Designated Router will be called as Backup Designated Router.

  • 8/8/2019 Ccna Question Zxc

    9/24

    If a Router has all interfaces existing in single area than that router is called asInternal Router.

    Whenever a router send routing updates to DR and BDR it uses Destinationaddress as 224.0.0.6 and when DR send updates to all the routers it uses

    Destination address as 224.0.0.5.

    In OSPF routing updates are called as Link State Advertisements.

    If an OSPF router wants to send updates to other OSPF router then it should carry 3

    requirements i.e.

    Hello Packets Received

    It contains Area Id, Uptime, Password, Hello Interval, Dead Interval,Neighborship Table and Router Id.

    Point-to-Point Link Point to Multipoint Link

    Halo Interval 10 Halo Interval 30

    Dead Interval 40 Dead Interval 120

    Adjacency Built

    If both router interfaces belongs to same Area, same Password then Hallo and Dead

    Intervals should be set same.

    Neighborship Built

    If both routers are adjacent to each other then Neighborship is built in Routers.

    When one routerRA sends updates i.e. Link State Advertisements to otherrouterRB it will send that update to Topology Database of routerRB and will runan algorithm SPF on routerRB to create a new Topology Table. After thatDijisktra Algorithm is run to find the best path and that entry will be put in RoutingTable.

    The router when sends Hallo packets to other router a Neighborship Table is set on thatRouter.

    44. What is SLIP (Serial Line Internet Protocol)?

    An industry standard serial encapsulation for point-to-point connections that supportsonly a single routed protocol, TCP/IP.

  • 8/8/2019 Ccna Question Zxc

    10/24

    45. What is RIP (Routing Information Protocol)?

    Rip run on any Routers hence called as Open Standard Distance Vector Routing Protocol.

    Its a classful routing protocol meaning when updates are sent they send only IP address

    but not subnet mask.

    Administrative Distance is 120.

    Metric used is Hop counts (number of routers to cross to reach the destination).

    Rip uses algorithm name Bellman Ford Algorithm to determine the best path selection.

    Supports maximum 15 Hops.

    Supports 6 paths if there is a tie in metric i.e. same metric.

    RIP Timers

    Route update timer 30seconds

    Route invalid timer 180 seconds

    Holddown timer 180 seconds

    Route flush timer 240 seconds

    46. What are the advantages and disadvantages of the three types ofrouting tables?

    47. What is the HELLO protocol used for?

    The HELLO protocol uses time instead of distance to determine optimal routing.It is an alternative to the Routing Information Protocol.

    48. What is the difference between interior and exterior neighborgateways?

    Interior gateways connect LANs of one organization, whereas exterior gateways connectthe organization to the outside world.

    49. What protocol do DNS name servers use?

    DNS uses UDP for communication between servers. It offers a connectionlessdatagram service that guarantees neither delivery nor correct sequencing ofdelivered packets (much like IP).

  • 8/8/2019 Ccna Question Zxc

    11/24

    50. What is a DNS resource record?

    A resource record is an entry in a name servers database. There are several types of

    resource records used, including name-to-address resolution information. Resourcerecords are maintained as ASCII files.

    51. BOOTP helps a diskless workstation boot. How does it get a messageto the network looking for its ip address?

    A protocol used primarily on TCP/IP networks to configure diskless workstations.BOOTP sends a UDP message with a subnetwork broadcast address and waitsfor a reply from a server that gives it the IP address.

    52. What is anonymous FTP and why would you use it?

    Anonymous FTP enables users to connect to a host without using a valid login and

    password. Usually, anonymous FTP uses a login called anonymous or guest, with thepassword usually requesting the users ID for tracking purposes only. Anonymous FTP is

    used to enable a large number of users to access files.

    53. How do Data Link layer addresses and Network addresses differ? Givea description of each.

    Besides the names suggesting that addresses reside at different layers, otherdifferences do exist. Data Link layer addresses are assigned by the manufacturerand identify the actual hardware device. A Network layer address is a logicaladdress assigned by the network administrator to identify a device running a

    Network layer protocol, such as IP.

    54. What are the differences or similarities, if any, between repeaters, hubs,and concentrators?

    First, they are all Physical layer devices. Repeaters regenerate and amplify thesignal traveling on the wire to extend the normal distance limitation of the signal.A repeater can connect two network segments. A hub and a concentrator are thesame thing, with hub being the more common term used today. Hubs arerepeaters with 824 ports. When one machine attached to the hub sendsanything over the network, all the devices attached to the hub receive that signal.

    55. Describe, in general terms, the reasons for implementing LANsegmentation.

    It confines user traffic to a segment and addresses and solves distance limitationproblems. Segmentation also cuts down on the traffic generated by broadcastsand multicasts, and thereby increases performance. Because of the reduction ofthe size of the segment, collisions and overall traffic also are reduced.

  • 8/8/2019 Ccna Question Zxc

    12/24

    56. Which of the three switching methods is fastest, and why?

    Cut-Through switching is the fastest method because the switches read only thefirst six bytes of the frame before forwarding it.

    57. What services do bridges and switches provide?

    Bridges and switches can determine whether a frame is destined for the localnetwork segment or needs to be forwarded to another network segment basedon the destination MAC address.

    58. What are some of the advantages to using bridging and switchinginstead of routing?

    Increased overhead and latency

    Reduced overhead and latency

    Broadcast propagation

    Lower equipment costs

    Answer A is incorrect because it is a negative aspect of routing as compared toswitching. Answer B is correct because bridges and switches look only atData Link layer information, whereas routers must process all the logicaladdress information in the route tables. Answer C is incorrect becauseswitches do not have this effect. Answer D is incorrect because switches are now

    very sophisticated and can cost as much as routers.

    59. What would be the best network segmentation device if you wanted toconnect two dissimilar networks, such as Ethernet and Token-Ring?

    A bridge or a switch

    A concentrator or a hub

    A router

    A gateway

    Answer A is incorrect because bridges and switches cant perform protocoltranslation. Answer B is incorrect because neither a concentrator nor a hub cansegment a network. Answer C is correct because routers can providetranslation between dissimilar protocols, among other things.Answer D isincorrect because a gateway functions as a translator, not a segmentationdevice.

  • 8/8/2019 Ccna Question Zxc

    13/24

    60. Why is overhead or latency associated with routers? (Choose all thatapply.)

    Routers must work at layer 3, which is inherently slower.

    Routers must examine the frame header before passing it.

    Routers must hold a frame for a given period of time for security purposes.

    Routers must translate the signal, but then the signal can cut through directly.

    Answer A is correct because resolving those addresses is more timeconsuming. Answer B is correct because the router must examine andconsider the frame header detail before passing it, which slowsprocessing. Answers C and D are incorrect because they are simply notaccurate.

    61. Which of the following represents Physical layer devices?

    Repeaters, bridges, and concentrators

    Repeaters, hubs, and concentrators

    Repeaters, routers, and bridges

    Repeaters, routers, and switches

    Answer B is correct because repeaters, hubs, and concentrators comprisethe only combination that resides at the Physical layer. Answers A, C, and Dare combinations of devices that reside at different layers.

    62. How do routers make routing decisions?

    They build tables and make their decisions based on those tables.

    They perform lookups and make their decisions dynamically with discovery.

    They use hello packets to discover routes on the fly.

    They query NetBIOS cache for the appropriate paths.

    Answer A is correct because routing decisions are made based on thecontents of routing tables.Answer B is incorrect because routers are incapableof making decisions without tables already in place. Answer C is incorrectbecause hello packets are used to calculate routes when new routers are addedto a network. Answer D is incorrect because it is simply inaccurate.

  • 8/8/2019 Ccna Question Zxc

    14/24

    63. Choose the devices that are used for Data Link layer segmentation.

    Concentrators and switches

    Routers and bridges

    Bridges and switches

    Bridges and hubs

    Answer A is incorrect because concentrators reside at the Physical layer andswitches at the Data Link layer. Answer B is incorrect because routers are level 3devices and bridges are level 2 devices. Answer C is correct because bridgesand switches reside at the Data Link layer. Answer D is incorrect becausebridges reside at the Data Link layer and hubs at the Physical layer.

    64. What is an advantage of having a VLAN (Virtual LAN)?

    Traffic control between VLANs is processor intensive.

    Broadcasts of multicast traffic are contained within one VLAN.

    Theyre more flexible because they enable device assignment only on a port-by-port basis.

    With VLANs, users are not inherently isolated by group.

    Answer A is incorrect because there is nothing more or less processor intensiveabout VLANs. Answer B is incorrect because there is no such thing as abroadcast of multicast traffic; the words broadcast and multicast are mutuallyexclusive. Answer C is correct because VLANs extend the flexibility of LANsby enabling the port-by-port isolation of users and assignment to distinctVLANs if desired. Answer D is incorrect because VLANs by their definitionsegment workgroups.

    65. Which two characteristics describe Store and Forward switching?

    The entire frame is copied into the buffer.

    The frame is forwarded based on the first six bytes.

    It provides higher throughput.

    It provides error checking.

  • 8/8/2019 Ccna Question Zxc

    15/24

    Answers A and D are correct because Store and Forward switching copiesthe entire frame into the buffer before forwarding, which also provides forerror checking. Answers B and C are incorrect because they describe Cut-Through.

    66. Which two characteristics describe Cut-Through switching?

    The entire frame is copied into the buffer.

    The frame is forwarded based on the first six bytes.

    It provides higher throughput.

    It provides error checking.

    Answers B and C are correct because Cut-Through switching provides

    forwarding based on what is contained in the first six bytes of the frame,which provides higher throughput. Answers A and D are incorrect becausethey describe Store and Forward switching.

    67. Name the Cisco proprietary protocol that allows VLANs to be managedwithin domains.

    VTP (VLAN Trunking Protocol) allows multiple VLANs to be managed within asingle VTP domain.

    68. Name the three VTP modes in which a switch can operate.

    VTP switches operate in one of three modes: server, client, or transparent.

    69. Name the Cisco proprietary protocol used on Fast Ethernet VLAN trunklinks.

    ISL (Inter-Switch Link) protocol is used to encapsulate VLAN traffic over FastEthernet trunk links.

    70. At what layer of the OSI model do VLANs operate?

    VLANs operate at layer 2 of the OSI model.

    71. To allow Inter-VLAN communication, what does your router require?

    You need a router that has some kind of viable trunking connection, such as FastEthernet (ISL), and must be configured with subinterfaces.

  • 8/8/2019 Ccna Question Zxc

    16/24

    72. Choose one method of decreasing broadcasts across a switchednetwork.

    Set up an Intra-LAN.

    Set up a workgroup banded by a server cluster.

    Set up a VLAN to isolate traffic.

    Set up a firewall to isolate traffic.

    Answers A and B are incorrect because they are simply false. Answer C iscorrect because each VLAN becomes its own broadcast domain. Answer Dis incorrect because a firewall is meant to shelter internal networks from intrusionfrom the outside.

    73. Choose two benefits of VLAN implementation.

    VLANs incorporate only one router per routed subnet.

    VLANs control broadcasts.

    VLANs amplify broadcasts.

    VLANs ease security restrictions.

    VLANs provide increased network security.

    Answer A is incorrect because routers are not at all necessary for a VLAN tooperate. Answers B and E are correct because VLAN implementationcontrols broadcasts and provides isolation, therefore security. Answers Cand D are simply incorrect.

    74. What is the purpose of a trunking protocol?

    To connect the backbone of a primary VLAN to the backbone of a secondaryVLAN

    For one switch fabric to be integrated with another switch fabric

    For a VLAN on one switch to be linked to a VLAN on another switch

    To enable multiple trunking protocols to communicate

    Answers A is incorrect because it uses wrong terminology. Answer B is incorrectbecause switch fabric is a hardware-related component of a switch and belongs

  • 8/8/2019 Ccna Question Zxc

    17/24

    to one switch only. Answer C is correct because trunking protocols allowmanagement of VLANs with similar or dissimilar trunking protocols.AnswerD is incorrect because a trunking protocol does not enable multiple trunkingprotocols to communicate.

    75. Choose the encapsulation protocol used on Fast Ethernet links.

    Cisco Switch Link

    Dedicated Switch Link

    Inter-Switch Link

    VLAN Switch Link

    Answer C is correct because Inter-Switch Link protocol is the

    encapsulation protocol used on Fast Ethernet links. Answers A, B, and D isincorrect because no such links exist.

    76. At which layer of the OSI model does ISL function?

    Data Link layer

    Network layer

    Physical layer

    LLC Data Link sublayer

    Answer A is correct because ISL functions at the Data Link layer of the OSImodel.Answers B and C are incorrect because ISL does not function at thoselayers of the OSI model. Answer D is incorrect because the specific sublayerdoes not have any distinction in this context.

    77. Which method is used by VTP to convey VLAN configurationinformation within its management domain?

    Through directed broadcasts

    Through LSAs local service advertisements

    Through multicast advertisements

    Through port flooding

  • 8/8/2019 Ccna Question Zxc

    18/24

    Answer C is correct because multicast advertisement convey configurationinformation to all connected switches in the same management domain.Answers A, B, and D is incorrect because they do not convey information withinmanagement domains.

    78. In ATM LANE, what factor determines the type of trunking protocolused?

    The link type

    The encapsulation mode

    The density of VLANs

    The ATM LANE Module type

    Answer A is correct because the link type determines the type of trunkingprotocol used. Answers B and C are incorrect because they are simply false.Answer D is incorrect because the ATM LANE Module is a hardware card anddoes not affect trunking protocols.

    79. What is VTP designed to do?

    It enables an administrator to manage VLANs across multiple trunk links.

    It enables an administrator to manage VLANs across dissimilar trunkingprotocols.

    It enables an administrator to merge the management duties of more than twotrunk links together.

    It is used to synchronize VTP advertisements across multiple trunk links.

    Answer A is incorrect because trunk links do not address the aspect ofcommunication. Answer B is correct because VTP is designed to enable anadministrator to manage VLANs running dissimilar trunking protocols.Answer C is incorrect because a trunk link does not necessary entailmanagement duties on its own. Answer D is incorrect because it is simply false.

    80. What is a limitation of Intra-VLAN traffic?

    Communication is limited to VLANs directly connected to a router.

    Communication is limited to VLANs off the same switch backplane.

    Communication is limited to devices within the same VLAN.

  • 8/8/2019 Ccna Question Zxc

    19/24

    Communication is limited to devices between VLANs.

    Answer A is incorrect because VLANs are connected for Inter-VLANcommunication. Answer B is incorrect because the backplane is where traffic isactually switched, and it is a hardware component. Answer C is correct

    because that is the very definition of Intra-VLAN traffic.

    Answer D is incorrectbecause VLANs cannot talk to each other without a router.

    81. VTP (Virtual Trunking Protocol) exists at which layer and for whatpurpose?

    Layer 2, to maintain VLAN configuration consistency

    Layer 2, to maintain trunking protocol synchronization

    Layer 2, to maintain domain synchronization

    Layer 3, to maintain access lists

    Answer A is correct because VTP operates at layer 2 and maintains VLANconfiguration consistency. Although the OSI layer is correct, answers B and Care incorrect because the second portion of the answers is incorrect. Answer D isincorrect because VTP and switching do not operate at layer 3 and access listsare maintained on routers.

    82. What two basic steps are necessary to create access list filters?

    The first step is to build the list at global configuration mode using the access-listcommand followed by an access list number signifying the type. The second stepis to apply the list to an interface by using the [protocol type] access-groupcommand followed by the access list number and parameters.

    83. Identify the appropriate access list range values used to create accesslists.

    IP standard access list = 199

    IP extended access list = 100199

    IPX standard access list = 800899

    IPX extended access list = 900999

    IPX SAP filter = 10001099

    84. What is the purpose of a wildcard mask?

  • 8/8/2019 Ccna Question Zxc

    20/24

    To enable an administrator to apply an access list rule to a group of hosts orsubnets by masking off bits within an IP address, making the bit positions withinthe mask variable.

    85. Name the access list keywords.

    any = 0.0.0.0 255.255.255.255

    host = specific IP address of an end host (192.16.10.2 0.0.0.0)

    86. How does the direction in which an access list is applied affectdatagram processing?

    Access lists applied to an interface in an inbound direction determine whether adatagram received on an interface will be forwarded or blocked. Access listsapplied to an interface in an outbound direction determine whether a datagram

    already received will be forwarded out that interface.

    87. What is the access list number range used to identify an IP standardaccess list?

    0100

    1100

    199

    110

    101199

    Answer C is correct because the correct value range to identify an IPstandard access list is 199. Answers A, B, D, and E are incorrect becausethey are not ranges used to identify an IP standard access list.

    88. Which of the following represents the default wildcard mask value?

    0.0.0.0

    255.255.255.255

    0.0.255.255

    255.255.255.0

  • 8/8/2019 Ccna Question Zxc

    21/24

    Answer A is correct because, if unspecified, the default mask used is0.0.0.0. Answers B and C are incorrect because neither are the default mask.Answer D is incorrect because it is a regular mask, which is not used for wildcardmasking.

    89. Write the command that would apply access list 100 to interface E0 inan outbound direction. (Assume you are already at interface configurationmode of the Ethernet interface.)

    IP access-group 100 out

    IP access-list 100 out

    IP access-group 100 in

    IP access-group E0 out

    Answer A is correct because IP access-group 100 out is the command thatwould apply access list 100 to interface E0 in an outbound direction.Answers B, C, and D are simply incorrect.

    90. Which of the following commands creates a standard IP extendedaccess list that enables ping echo requests to be sent from any host onnetwork 166.10.0.0 to network 155.10.0.0?

    Access-list 12 permit IP 166.10.0.0.0.0.255.255 host 155.10.0.0

    Access-list 120 permit ICMP 166.10.0.0 0.0.255.155 155.10.0.0 0.0.0.255 eqecho

    Access-list 120 permit 166.10.0.0.0.0.255.255 host 155.10.0.0

    Access-list 120 permit ICMP 166.10.0.0 0.0.255.255 155.10.0.0 0.0.255.255 eqecho

    Answer A is incorrect because the access list number is not an extended listnumber. Also, the protocol type is IP not ICMP, and the destination is specifyingthe host keyword but using a subnet value instead, which is invalid. Answer B is

    incorrect because it uses an incorrect inverse mask for the destination network.Answer C is incorrect because it does not specify the protocol after the permitstatement and also is using the host keyword with the destination network.Answer D is correct because it uses a valid access list number and syntaxto forward ICMP echo requests.

    91. Write the command to view all access lists created on your routerregardless of protocol.

  • 8/8/2019 Ccna Question Zxc

    22/24

    show access-lists

    show ip access-lists

    show ipx interfaces

    show ipx servers

    Answer A is correct because show access-lists enables you to view allaccess lists created on your router regardless of protocol. Answers B, C,and D are incorrect because these commands do not enable you to perform thatspecific function.

    92. Which of the following best describes the function of the followingaccess list line?

    Access-list 87 permit 145.19.2.1 0.0.0.0 155.6.0.0 0.0.255.255

    Any host on subnet 155.6.0.0 can access host 145.19.2.1.

    It is an IPX standard access list allowing host 145.19.2.1 to access any host onsubnet 155.6.0.0.

    It is an extended IP access list allowing hosts on network 145.19.0.0 to accesshosts on network 145.19.0.0, which can access host 155.6.255.255.

    It is an IP standard access list enabling host 145.19.2.1 to access any host on

    subnet 155.6.0.0.

    Answers A and C are incorrect because they do not state the actions of thisaccess list correctly. Answer B is incorrect because this is not an IPX standardlist. Answer D is correct because it correctly describes the access listbehavior.

    93. Which of the following commands applies IPX SAP filter 1010 to aninterface in the outbound direction?

    IPX access-group 1010 out

    IPX output-sap-filter 1010

    IPX output sap-filter 1010

    IPX-sap-filter 1010 out

  • 8/8/2019 Ccna Question Zxc

    23/24

    Answer A is incorrect because it is the syntax used to define a standard orextended list. Answer B is correct because it uses the correct syntax.Answer C is incorrect because it is missing the hyphen between the output andsap commands. Answer D is incorrect because it is a completely invalidcommand.

    94. Which command can you use to display a list of access list filtersconfigured on your router for IP only?

    show IP access-lists

    show access-lists

    show IPX interfaces

    show IPX servers

    Answer A is correct because show IP access-lists enables you to display alist of access list filters configured on your router for IP only. Answers B, C,and D are incorrect because these commands do not enable that specificfunction.

    95. Write the command to bind IPX extended access list 901 to interfaceserial 0 on an inbound direction.

    IPX access-group 901 in

    IPX access-group 901 S0 out

    IPX access-group 910 in

    IPX access-group 901 out

    Answer A is correct because IPX access-group 901 in is the command thatwill bind the IPX extended access list 901 to interface serial 0 on aninbound direction. Answers B, C, and D are incorrect because they are simplyfalse.

    96. Which two of the following commands will enable Telnet traffic from allhosts on network 166.10.0.0 to be forwarded to the Telnet server137.2.10.1?

    Access-list 110 permit TCP 166.10.0.0 0.0.255.255 host 137.2.10.1 eq Telnet

    Access-list 99 permit TCP 166.10.0.0 0.0.255.255 137.2.10.1 0.0.0.0. eq 23

  • 8/8/2019 Ccna Question Zxc

    24/24

    Access-list 110 permit TCP 166.10.0.0 0.0.255.255 137.2.10.1 0.0.0.0 eq 23

    Access-list 110 permit IP 166.10.0.0 0.0.255.255 137.2.10.1 0.0.0.0. eq 23

    Answers A and C are correct. The only difference between the two is that

    Answer A uses the host keyword and the Telnet keyword instead of a portnumber. Answer B is incorrect because the access list number is 99, which isused for standard lists. Answer D is incorrect because it uses IP instead of TCPafter the permit statement.