CCNA 1 Final Exam

the amount of traffic that is currently crossing the network

A network technician is measuring the transfer of bits across the company backbone for a mission critical application. The technician notices that the network throughput appears lower than the bandwidth expected. Which three factors could influence the differences in throughput? (Choose three.) the amount of traffic that is currently crossing the network the sophistication of the encapsulation method applied to the data the type of traffic that is crossing the network the latency that is created by the number of network devices that the data is crossing the bandwidth of the WAN connection to the Internet the reliability of the gigabit Ethernet infrastructure of the backbone

show interfaces (The show interfaces command can be used on both routers and switches to see speed, duplex, media type, MAC address, port type, and other Layer 1/Layer 2-related information.)

A network technician suspects that a particular network connection between two Cisco switches is having a duplex mismatch. Which command would the technician use to see the Layer 1 and Layer 2 details of a switch port?

Bits

A physical layer PDU used when physically transmitting data over the medium

nslookup (Traceroute (tracert) is a utility that generates a list of hops that were successfully reached along the path from source to destination.This list can provide important verification and troubleshooting information. The ipconfig utility is used to display the IP configuration settings on a Windows PC. The Netstat utility is used to identify which active TCP connections are open and running on a networked host. Nslookup is a utility that allows the user to manually query the name servers to resolve a given host name. This utility can also be used to troubleshoot name resolution issues and to verify the current status of the name servers.)

A technician can ping the IP address of the web server of a remote company but cannot successfully ping the URL address of the same web server. Which software utility can the technician use to diagnose the problem?

the destination port number (Each web browser client application opens a randomly generated port number in the range of the registered ports and uses this number as the source port number in the datagram that it sends to a server. The server then uses this port number as the destination port number in the reply datagram that it sends to the web browser. The PC that is running the web browser application receives the datagram and uses the destination port number that is contained in this datagram to identify the client application.)

A user opens three browsers on the same PC to access www.cisco.com to search for certification course information. The Cisco web server sends a datagram as a reply to the request from one of the web browsers. Which information is used by the TCP/IP protocol stack in the PC to identify which of the three web browsers should receive the reply?

DHCP (The DHCP protocol is used to request, issue, and manage IP addressing information. CSMA/CD is the access method used with wired Ethernet. ICMP is used to test connectivity. SNMP is used with network management and FTP is used for file transfer.)

A wireless host needs to request an IP address. What protocol would be used to process the request?

cancellation (Cladding and immunization from electrical hazards are characteristics for fiber-optic cabling. A woven copper braid or metallic foil is used as a shield for the inner coaxial cable conductor. Cancellation is a property of UTP cabling where two wires are located adjacent to one another so each magnetic field cancels out the adjacent magnetic field.)

Characteristic or UTP cabling

when a faster delivery mechanism is needed when applications do not need to guarantee delivery of the data (UDP is a stateless protocol, which means that neither device on either end of the conversation must keep track of the conversation. As a stateless protocol, UDP is used as the Layer 4 protocol for applications that need speedy (best-effort) delivery. An example of such traffic is the transport of digitized voice or video.)

In what two situations would UDP be the preferred transport protocol over TCP?

Full-Duplex

Point-to-point communications where both devices can transmit and receive on the medium at the same time are known as

secretin (Telnet accesses a network device through the virtual interface configured with the line VTY command. The password configured under this is required to access the user EXEC mode. The password configured under the line console 0 command is required to gain entry through the console port, and the enable and enable secret passwords are used to allow entry into the privileged EXEC mode.)

Refer to the exhibit. A network administrator is configuring access control to switch SW1. If the administrator has already logged into a Telnet session on the switch, which password is needed to access privileged EXEC mode?

BB:BB:BB:BB:BB:BB (When a host sends information to a distant network, the Layer 2 frame header will contain a source and destination MAC address. The source address will be the originating host device. The destination address will be the router interface that connects to the same network. In the case of host A sending information to host B, the source address is AA:AA:AA:AA:AA:AA and the destination address is the MAC address assigned to the R2 Ethernet interface, BB:BB:BB:BB:BB:BB.)

Refer to the exhibit. If host A sends an IP packet to host B, what will the destination address be in the frame when it leaves host A?

Data

The general term for the PDU used at the application layer.

line console 0

The password configured under the ______ command is required to gain entry through the console port

QoS mechanisms

These enable the establishment of queue management strategies that enforce priorities for different categories of application data. Thus, this queuing enables voice data to have priority over transaction data, which has priority over web data.

Fault tolerant networks

These limit the impact of a failure because the networks are built in a way that allows for quick recovery when such a failure occurs. These networks depend on multiple or redundant paths between the source and destination of a message.

network and transport

These two OSI model layers have the same functionality as two layers of the TCP/IP model.

Telnet

This accesses a network device through the virtual interface configured with the line VTY command.

Scalable Network

This can expand quickly to support new users and applications without impacting the performance of the service being delivered to existing users

Tab

This completes the remainder of parameters or arguments within a command.

an SSH connection

This connection provides a secure CLI session with encryption to a Cisco switch

Cloud Computing

This extends IT's capabilities without requiring investment in new infrastructure, training new personnel, or licensing new software. These services are available on-demand and delivered economically to any device anywhere in the world without compromising security or function.

TCP (Transmission Control Protocol)

This is a Layer 4 protocol of the OSI model which has several responsibilities in the network communication process. It divides large messages into smaller segments which are more efficient to send across the network. It also controls the size and rate of segments exchanged between clients and servers.

the LLC sublayer places information in the frame allowing multiple Layer 3 protocols to use the same network interface and media. (The Logical Link Control (LLC) defines the software processes that provide services to the network layer protocols. The information is placed by LLC in the frame and identifies which network layer protocol is being used for the frame. This information allows multiple Layer 3 protocols, such as IPv4 and IPv6, to utilize the same network interface and media.)

This is a characteristic of the LLC sublayer

Quality of service (QoS)

This is a mechanism for managing congestion and ensuring reliable delivery of content to all users.

Powerline Networking

This is a trend for home networking that uses existing electrical wiring to connect devices to the network wherever there is an electrical outlet, saving the cost of installing data cables.

BYOD

This is about end users having the freedom to use personal tools to access information and communicate across a business or campus network.

Smart home technology

This is integrated into every-day appliances allowing them to interconnect with other devices, making them more 'smart' or automated.

It encourages competition and promotes choices.

This is of advantage of using a protocol that is defined by an open standard.

Application data

This is passed down the protocol stack on its way to be transmitted across the network media. During the process, various protocols add information to it at each level. At each stage of the process, a PDU (protocol data unit) has a different name to reflect its new functions. The PDUs are named according to the protocols of the TCP/IP suite

It interfaces between the users and the kernel.

This is the function of the shell in an OS

Ctrl-Z

This is the key combination to exit from configuration mode to privileged mode

VLAN 1

This is the switch interface that would be used by an administrator to configure an IP address so that the switch can be managed remotely

Ctrl-R

This key combination will redisplay the line just typed, thus making it easier for the user to press Enter and reissue the ping command.

segment

This name is assigned to the transport layer PDU

TCP

This protocol is responsible for controlling the size of segments and the rate at which segments are exchanged between a web client and a web server.

audio conference, financial transactions, web page

Three bank employees are using the corporate network. The first employee uses a web browser to view a company web page in order to read some announcements. The second employee accesses the corporate database to perform some financial transactions. The third employee participates in an important live audio conference with other corporate managers in branch offices. If QoS is implemented on this network, what will be the priorities from highest to lowest of the different data types?

the amount of traffic, type of traffic, and latency created by the network devices the data has to cross.

Throughput usually does not match the specified bandwidth of physical links due to multiple factors. These factors include:

Ctrl-Shift-6

To interrupt an IOS process such as ping or traceroute, a user enters this key combination.

a layered network model assists in protocol design and prevents technology in one layer from affecting other layers.

Two benefits of using a layered network model

It is not affected by EMI or RFI. It is more expensive than UTP cabling is. (Fiber-optic cabling supports higher bandwidth than UTP for longer distances. Fiber is immune to EMI and RFI, but costs more, requires more skill to install, and requires more safety precautions.)

Two characteristics of fiber-optic cable

destination MAC address to a destination IPv4 address (ARP, or the Address Resolution Protocol, works by mapping a destination MAC address to a destination IPv4 address. The host knows the destination IPv4 address and uses ARP to resolve the corresponding destination MAC address)

What addresses are mapped by ARP?

The address is returned to the pool for reuse when the lease expires. (When a DCHP address is issued to a host, it is for a specific lease time. Once the lease expires, the address is returned to the DHCP pool.)

A PC obtains its IP address from a DHCP server. If the PC is taken off the network for repair, what happens to the IP address configuration?

to check the frame for possible transmission errors

A frame is transmitted from one networking device to another. Why does the receiving device check the FCS (Frame check sequence) field in the frame?

physical layer (The NIC has responsibilities in both Layer 1 and Layer 2. The NIC encodes the frame as a series of signals that are transmitted onto the local media. This is the responsibility of the physical layer of the OSI model. The signal could be in the form of electrical, optical, or radio waves.)

A network administrator is troubleshooting connectivity issues on a server. Using a tester, the administrator notices that the signals generated by the server NIC are distorted and not usable. In which layer of the OSI model is the error categorized?

the amount of traffic that is currently crossing the network, the type of traffic that is crossing the network, and the latency that is created by the number of network devices that the data is crossing.

A network engineer is measuring the transfer of bits across the company backbone for a mission critical database application. The engineer notices that the network throughput appears lower than the bandwidth expected. Which three factors could influence the differences in throughput?

partial mesh (Partial mesh topologies provide high availability by interconnecting multiple remote sites, but do not require a connection between all remote sites. A mesh topology requires point-to-point links with every system being connected to every other system. A point-to-point topology is where each device is connected to one other device. A hub and spoke uses a central device in a star topology that connects to other point-to-point devices.)

A network team is comparing physical WAN topologies for connecting remote sites to a headquarters building. Which topology provides high availability and connects some, but not all, remote sites

The command is being entered from the wrong mode of operation; it must be in interface configuration mode, not global configuration mode

A network technician is attempting to configure an interface by entering the following command: SanJose(config)# ip address 192.168.2.1 255.255.255.0. The command is rejected by the device. What is the reason for this?

data link layer addressing, detection of errors through CRC calculations , delimiting groups of bits into frames (Through the framing process, delimiters are used to identify the start and end of the sequence of bits that make up a frame. Data link layer addressing is added to enable a frame to be delivered to a destination node. A cyclic redundancy check (CRC) field is calculated on every bit and added to the frame. If the CRC value contained in the arriving frame is the same as the one the receiving node creates, the frame will be processed.)

What are the three primary functions provided by Layer 2 data encapsulation?

10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 (The private IP address blocks that are used inside companies are as follows: 10.0.0.0 /8 (any address that starts with 10 in the first octet) 172.16.0.0 /12 (any address that starts with 172.16 in the first two octets through 172.31.255.255) 192.168.0.0 /16 (any address that starts with 192.168 in the first two octets))

What are the three ranges of IP addresses that are reserved for internal private use?

Multicast transmission can be used by routers to exchange routing information, a single packet can be sent to a group of hosts, and routers will not forward multicast addresses in the range of 224.0.0.0 to 224.0.0.255. (Broadcast messages consist of single packets that are sent to all hosts on a network segment. These types of messages are used to request IPv4 addresses, and map upper layer addresses to lower layer addresses. A multicast transmission is a single packet sent to a group of hosts and is used by routing protocols, such as OSPF and RIPv2, to exchange routes. The address range 224.0.0.0 to 224.0.0.255 is reserved for link-local addresses to reach multicast groups on a local network.)

What are three characteristics of multicast transmission?

using the source MAC addresses of frames to build and maintain a MAC address table and utilizing the MAC address table to forward frames via the destination MAC address (Important actions that a switch performs are as follows: When a frame comes in, the switch examines the Layer 2 source address to build and maintain the Layer 2 MAC address table.It examines the Layer 2 destination address to determine how to forward the frame. When the destination address is in the MAC address table, then the frame is sent out a particular port. When the address is unknown, the frame is sent to all ports that have devices connected to that network.

What are two actions performed by a Cisco switch?

port numbering and use of checksum (Both TCP and UDP use source and destination port numbers to distinguish different data streams and to forward the right data segments to the right applications. Error checking the header and data is done by both protocols by using a checksum calculation to determine the integrity of the data that is received. TCP is connection-oriented and uses a 3-way handshake to establish an initial connection. TCP also uses window to regulate the amount of traffic sent before receiving an acknowledgment. UDP is connectionless and is the best protocol for carry digitized VoIP signals.)

What are two characteristics shared by TCP and UDP?

Fast-forward Switching and fragment-free switching (Store-and forward switching accepts the entire frame and performs error checking using CRC before forwarding the frame. Store-and-forward is often required for QOS analysis. Fast-forward and fragment-free are both variations of the cut-through switching method where only part of the frame is received before the switch begins to forward it.)

What are two examples of the cut-through switching method?

It is straightforward to troubleshoot. It is easy to add and remove end devices.

What are two features of a physical, star network topology?

to retain contents when power is removed and to store the startup configuration file

What are two functions of NVRAM?

routing packets toward the destination and encapsulating PDUs from the transport layer (The OSI network layer provides several services to allow communication between devices: addressing encapsulation routing de-encapsulation Error detection, placing frames on the media, and collision detection are all functions of the data link layer.)

What are two services provided by the OSI network layer?

to identify missing segments at the destination and to re-assemble the segments at the remote location

What are two ways that TCP uses the sequence numbers in a segment?

destination and source port numbers (The destination and source port numbers are used to identify exactly which protocol and process is requesting or responding to a request.)

What important information is added to the TCP/IP transport layer header to ensure communication and connectivity with a remote network device?

source and destination IP address (IP is a Layer 3 protocol. Layer 3 devices can open the Layer 3 header to inspect the Layer 3 header which contains IP-related information including the source and destination IP addresses)

What information is added during encapsulation at OSI Layer 3?

Network capabilities are extended without requiring investment in new infrastructure, personnel, or software.

What is a benefit of using cloud computing in networking

resource sharing without a dedicated server

What is a key characteristic of the peer-to-peer networking model?

sliding window (TCP uses windows to attempt to manage the rate of transmission to the maximum flow that the network and destination device can support while minimizing loss and retransmissions. When overwhelmed with data, the destination can send a request to reduce the of the window. This congestion avoidance is called sliding windows.)

What is the TCP mechanism used in congestion avoidance?

2001:0:0:abcd::1 (The IPv6 address 2001:0000:0000:abcd:0000:0000:0000:0001 in its most compressed format would be 2001:0:0:abcd::1. The first two hextets of zeros would each compress to a single zero. The three consecutive hextets of zeros can be compressed to a double colon ::. The three leading zeros in the last hextet can be removed. The double colon :: can only be used once in an address.)

What is the most compressed representation of the IPv6 address 2001:0000:0000:abcd:0000:0000:0000:0001?

CSMA/CA (Carrier Sense Multiple Access w/Collision Avoidance) (Carrier sense multiple access with collision avoidance (CSMA/CA) is used with wireless networking technology to mediate media contention. Carrier sense multiple access with collision detection (CSMA/CD) is used with wired Ethernet technology to mediate media contention. Priority ordering and token passing are not used (or not a method) for media access control.)

What method is used to manage contention-based access on a wireless network

It converts IPv6 packets into IPv4 packets. (NAT64 is typically used in IPv6 when networks are being transitioned from IPv4 to IPv6. It allows the IPv6 networks to connect to IPv4 networks (such as the Internet), and works by translating the IPv6 packets into IPv4 packets.)

What purpose does NAT64 serve in IPv6?

link-local (Link-local IPv6 addresses start with FE80::/10, which is any address from FE80:: to FEBF::. Link-local addresses are used extensively in IPv6 and allow directly connected devices to communicate with each other on the link they share.)

What type of IPv6 address is FE80::1?

public addresses

What types of addresses make up the majority of addresses within the /8 block IPv4 bit space?

It forwards the frame out of all ports except for the port at which the frame was received.

What will a Layer 2 switch do when the destination MAC address of a received frame is not in the MAC table?

It will discard the frame. (In an Ethernet network, each NIC in the network checks every arriving frame to see if the destination MAC address in the frame matches its own MAC address. If there is no match, the device discards the frame. If there is a match, the NIC passes the frame up to the next OSI layer.)

What will a host on an Ethernet network do if it receives a frame with a destination MAC address that does not match its own MAC address?

login block-for 60 attempts 5 within 60 (The login block-for command sets a limit on the maximum number of failed login attempts allowed within a defined period of time. If this limit is exceeded, no further logins are allowed for the specified period of time. This helps to mitigate brute-force password cracking since it will significantly increase the amount of time required to crack a password. The exec-timeout command specifies how long the session can be idle before the user is disconnected. The service password-encryption command encrypts the passwords in the running configuration. The banner motd command displays a message to users who are logging in to the device.)

When applied to a router, which command would help mitigate brute-force password attacks against the router?

on as many different network segments as possible (Because some types of traffic will be only on specific network segments, packet captures for analysis should be performed on as many segments as possible.)

When planning for network growth, where in the network should packet captures take place to assess network traffic?

console line (Debug messages, like other IOS log messages, are sent to the console line by default. Sending these messages to the terminal lines requires the terminal monitor command.)

Where are Cisco IOS debug output messages sent by default?

WPA (Wi-fi Protected Access)

Which WLAN security protocol generates a new dynamic key each time a client establishes a connection with the AP?

It is not affected by EMI or RFI. It is the most expensive type of LAN cabling.

Which characteristics describe fiber optic cable?

.com (Top-level domains represent a country or type of organization, such as .com or .edu)

Which domain name would be an example of a top-level domain?

Privileged EXEC Mode

the enable and enable secret passwords are used to allow entry into this.

User EXEC Mode

limited number of basic monitoring commands the first entrance intro the CLI of an IOS device

Packet

network layer PDU

There is connectivity between this device and the device at 192.168.100.1.* There are 4 hops between this device and the device at 192.168.100.1.* (The output displays a successful Layer 3 connection between a host computer and a host at 19.168.100.1. It can be determined that 4 hops exist between them and the average transmission time is 1 milliseconds. Layer 3 connectivity does not necessarily mean that an application can run between the hosts.)

Refer to the exhibit. On the basis of the output, which two statements about network connectivity are correct? There is connectivity between this device and the device at 192.168.100.1 The connectivity between these two hosts allows for videoconferencing calls. There are 4 hops between this device and the device at 192.168.100.1 The average transmission time between the two hosts is 2 milliseconds. This host does not have a default gateway configured.

The asterisk designates which file system is the default file system.

Refer to the exhibit. What is the significance of the asterisk (*) in the exhibited output?

assists in protocol design fosters competition between vendors prevents a technology that functions at one layer from affecting any other layer provides a common language for describing network functionality It helps in visualizing the interaction between each layer and protocols between each layer

Some vendors have developed their own reference models and protocols. Today, if a device is to communicate on the Internet, the device must use the TCP/IP model. The benefits of using a layered model are:

network layer

The OSI _______ is equivalent to the TCP/IP internet layer.

transport layer

The OSI ________ is functionally equivalent to the TCP/IP transport layer

data link and physical layers

The OSI _________ layers together are equivalent to the TCP/IP network access layer.

malware that was written to look like a video game (A Trojan horse is malicious code that has been written specifically to look like a legitimate program. This is in contrast to a virus, which simply attaches itself to an actual legitimate program. Viruses require manual intervention from a user to spread from one system to another, while a worm is able to spread automatically between systems by exploiting vulnerabilities on those devices.)

Which example of malicious code would be classified as a Trojan horse? malware that was written to look like a video game malware that requires manual user intervention to spread between systems malware that attaches itself to a legitimate program and spreads to other programs when launched malware that can automatically spread from one system to another by exploiting a vulnerability in the target

store-and-forward switching

Which frame forwarding method receives the entire frame and performs a CRC check to detect errors before forwarding the frame?

the lower metric value that is associated with the destination network

Which parameter does the router use to choose the path to the destination when there are multiple routes available?

Real-Time Transport Protocol

Which protocol supports rapid delivery of streaming media?

FE80::/10 (Link-local addresses are in the range of FE80::/10 to FEBF::/10. The original IPv6 specification defined site-local addresses and used the prefix range FEC0::/10, but these addresses were deprecated by the IETF in favor of unique local addresses. FDEE::/7 is a unique local address because it is in the range of FC00::/7 to FDFF::/7. IPv6 multicast addresses have the prefix FF00::/8.)

Which range of link-local addresses can be assigned to an IPv6-enabled interface? FEC0::/10 FDEE::/7 FE80::/10 FF00::/8

A student has two web browser windows open in order to access two web sites. The transport layer ensures the correct web page is delivered to the correct browser window. (The source and destination port numbers are used to identify the correct application and window within that application.)

Which scenario describes a function provided by the transport layer? A student is using a classroom VoIP phone to call home. The unique identifier burned into the phone is a transport layer address used to contact another network device on the same network. A student is playing a short web-based movie with sound. The movie and sound are encoded within the transport layer header. A student has two web browser windows open in order to access two web sites. The transport layer ensures the correct web page is delivered to the correct browser window. A corporate worker is accessing a web server located on a corporate network. The transport layer formats the screen so the web page appears properly no matter what device is being used to view the web site.

A console port is not used for packet forwarding.

Which statement describes a characteristic of the Cisco router management ports?

The size of each subnet may be different, depending on requirements. (In variable-length subnet masking, bits are borrowed to create subnets. Additional bits may be borrowed to create additional subnets within the original subnets. This may continue until there are no bits available to borrow.)

Which statement is true about variable-length subnet masking?

UDP is a low overhead protocol that doesn't provide sequencing or flow control mechanisms. UDP provides basic connectionless transport layer functions and relies on application layer protocols for error detection. (UDP is a simple protocol that provides the basic transport layer functions. It has much lower overhead than TCP because it is not connection-oriented and does not offer the sophisticated retransmission, sequencing, and flow control mechanisms that provide reliability.)

Which three statements characterize UDP?

ROM maintains instructions for POST diagnostics and stores bootstrap program

Which two statements describe the functions or characteristics of ROM in a router?

Compression and Encryption (The presentation layer deals with common data format. Encryption, formatting, and compression are some of the functions of the layer. Addressing occurs in the network layer, session control occurs in the session layer, and authentication takes place in the application or session layer.)

Which two tasks are functions of the presentation layer?

straight-through (A rollover cable is a Cisco proprietary cable used to connect to a router or switch console port. A straight-through (also called patch) cable is usually used to interconnect a host to a switch and a switch to a router. A crossover cable is used to interconnect similar devices together, for example, between two switches, two routers, and two hosts.)

Which type of UTP cable is used to connect a PC to a switch port?

to enable a receiving host to forward the data to the appropriate application

Why are port numbers included in the TCP header of a segment?

to identify the network address of the destination network

Why does a Layer 3 device perform the ANDing process on a destination IP address and subnet mask?

to identify where a packet was lost or delayed on a network

Why would a network administrator use the tracert utility?

Frame

data link layer PDU