Do I Know This Already Chapter 8

An engineer's desktop PC connects to a switch at the main site. A router at the main site connects to each branch office through a serial link, with one small router and switch at each branch. Which of the following commands must be configured on the branch office switches, in the listed configuration mode, to allow the engineer to telnet to the branch office switches? (Choose three answers.) a. The ip address command in VLAN configuration mode b. The ip address command in global configuration mode c. The ip default-gateway command in VLAN configuration mode d. The ip default-gateway command in global configuration mode e. The password command in console line configuration mode f. The password command in vty line configuration mode

A (The ip address command in VLAN configuration mode) , D (The ip default-gateway command in global configuration mode) , and F (The password command in vty line configuration mode ) . To allow access through Telnet, the switch must have password security enabled, at a minimum using the password vty line configuration subcommand. Additionally, the switch needs an IP address (configured under one VLAN interface) and a default gateway when the switch needs to communicate with hosts in a different subnet.

An engineer had formerly configured a Cisco 2960 switch to allow Telnet access so that the switch expected a password of mypassword from the Telnet user. The engineer then changed the configuration to support Secure Shell. Which of the following commands could have been part of the new configuration? (Choose two answers.) a. A username name password password vty mode subcommand b. A username name password password global configuration command c. A login local vty mode subcommand d. A transport input ssh global configuration command

B (A username name password password global configuration command) and C (A login local vty mode subcommand) . SSH requires the use of usernames in addition to a password. Using the username global command would be one way to define usernames (and matching passwords) to support SSH. The vty lines would also need to be configured to require the use of usernames, with the login local vty subcommand being one such option. The transport input ssh command could be part of a meaningful configuration, but it is not a global configuration command (as claimed in one wrong answer). Likewise, one answer refers to the username command as a command in vty config mode, which is also the wrong mode.

Which of the following is required when configuring port security with sticky learning? a. Setting the maximum number of allowed MAC addresses on the interface with the switchport port-security maximum interface subcommand b. Enabling port security with the switchport port-security interface subcommand c. Defining the specific allowed MAC addresses using the switchport port-security mac-address interface subcommand d. All the other answers list required commands

B (Enabling port security with the switchport port-security interface subcommand) . The setting for the maximum number of MAC addresses has a default of 1, so the switchport port-security maximum command does not have to be configured. With sticky learning, you do not need to predefine the specific MAC addresses either. However, you must enable port security, which requires the switchport port-security interface subcommand.

The following command was copied and pasted into configuration mode when a user was telnetted into a Cisco switch: banner login this is the login banner Which of the following is true about what occurs the next time a user logs in from the console? a. No banner text is displayed. b. The banner text "his is" is displayed. c. The banner text "this is the login banner" is displayed. d. The banner text "Login banner configured, no text defined" is displayed.

B (The banner text "his is" is displayed.) . The first nonblank character after the banner login phrase is interpreted as the beginning delimiter character. In this case, it's the letter t. So, the second letter t—the first letter in "the"—is interpreted as the ending delimiter. The resulting login banner is the text between these two ts—namely, "his is."

Imagine that you have configured the enable secret command, followed by the enable password command, from the console. You log out of the switch and log back in at the console. Which command defines the password that you had to enter to access privileged mode? a. enable password b. enable secret c. Neither d. The password command, if it's configured

B (enable secret) . If both commands are configured, IOS accepts only the password as configured in the enable secret command.

In which of the following modes of the CLI could you configure the duplex setting for interface Fast Ethernet 0/5? a. User mode b. Enable mode c. Global configuration mode d. VLAN mode e. Interface configuration mode

E (Interface configuration mode ) . Cisco switches can be configured for speed (with the speed command) and duplex (with the duplex command) in interface configuration mode.

Which of the following describes a way to disable IEEE standard autonegotiation on a 10/100 port on a Cisco switch? a. Configure the negotiate disable interface subcommand b. Configure the no negotiate interface subcommand c. Configure the speed 100 interface subcommand d. Configure the duplex half interface subcommand e. Configure the duplex full interface subcommand f. Configure the speed 100 and duplex full interface subcommands

F (Configure the speed 100 and duplex full interface subcommands ) . Cisco switches do not have a command to disable autonegotiation of speed and duplex. Instead, a switch port that has both speed and duplex configured disables autonegotiation.