CCNA4 Practice Final Exam v5.03

Which three algorithms can be used to encrypt user data in an IPSec VPN framework? (Choose three.) A.3DES B.AES C.Diffie-Hellman D.DES E.ESP F.SHA

A. 3DES B. AES D. DES

Which two Layer 1 requirements are outlined in the Data-over-Cable Service Interface Specification (DOCSIS)? (Choose two.) A.channel widths B.access method C.maximum data rate D.modulation techniques E.compression techniques

A. Channel Widths D. modulation techniques

What is a type of VPN that is generally transparent to the end user? A.site-to-site B.remote access C.public D.private

A. site-to-site

Which statement best describes a WAN? A.A WAN interconnects LANs over long distances. B.A WAN is a public utility that enables access to the Internet. C.WAN is another name for the Internet. D.A WAN is a LAN that is extended to provide secure remote network access.

A.A WAN interconnects LANs over long distances.

Which WAN technology uses a fixed payload of 48 bytes and is transported across both switched and permanent virtual circuits? A.ATM B.ISDN C.Frame Relay D.metro Ethernet

A.ATM

A network administrator has moved the company intranet web server from a switch port to a dedicated router interface. How can the administrator determine how this change has affected performance and availability on the company intranet? A.Conduct a performance test and compare with the baseline that was established previously. B.Determine performance on the intranet by monitoring load times of company web pages from remote sites. C.Interview departmental administrative assistants and determine if they think load time for web pages has improved. D.Compare the hit counts on the company web server for the current week to the values that were recorded in previous weeks.

A.Conduct a performance test and compare with the baseline that was established previously.

Refer to the exhibit. A network administrator has configured router Edge_Router as shown in the output. Connectivity is failing between Edge_Router and a non-Cisco router running Frame Relay. What should be done to repair this Layer 2 connectivity? A.Issue the ietf keyword when enabling Frame Relay on interface serial 0/1/0. B.Issue the broadcast keyword when performing static mapping on interface serial 0/1/0. C.Correct the IP address used in the frame-relay map command. D.Issue the frame-relay lmi-type ansi command on interface serial 0/1/0. E.Modify the OSPF process-id from 10 to 1.

A.Issue the ietf keyword when enabling Frame Relay on interface serial 0/1/0.

Refer to the exhibit. Which three events will occur as a result of the configuration shown on R1? (Choose three.) A.Messages that are sent to the syslog server will be limited to levels 3 or lower. B.Messages that are sent to the syslog server will be limited to levels 3 and higher. C.Only traffic that originates from the GigabitEthernet 0/1 interface will be monitored. D.Messages that are sent to the syslog server will use 192.168.1.5 as the destination IP address. E.The syslog messages will contain the IP address the GigabitEthernet 0/1 interface. F.For multiple occurrences of the same error, only the first three messages will be sent to the server.

A.Messages that are sent to the syslog server will be limited to levels 3 or lower. GigabitEthernet 0/1 interface will be monitored. D.Messages that are sent to the syslog server will use 192.168.1.5 as the destination IP address. E.The syslog messages will contain the IP address the GigabitEthernet 0/1 interface.

Which two statements about NetFlow are true? (Choose two.) A.NetFlow can be used to create baseline documentation. B.NetFlow can be used to collect performance indicators such as interface errors, CPU usage, and memory usage. C.NetFlow can be used to monitor traffic statistics, including packet payload content. D.NetFlow is a Cisco-specific feature that enables the collection of detailed traffic profiles. E.NetFlow is a network monitoring and event reporting tool. F.NetFlow traffic collectors use a "pull" based model to acquire traffic statistics from ports of interest.

A.NetFlow can be used to create baseline documentation. D.NetFlow is a Cisco-specific feature that enables the collection of detailed traffic profiles.

Which three statements are true regarding the Frame Relay LMI? (Choose three.) A.The LMI provides a virtual circuit (VC) status mechanism. B.The LMI type must always be manually configured. C.The available LMI types are CHAP and PAP. D.The LMI types supported by Cisco routers are CISCO and IETF. E.The LMI type configured on the router must match the one used on the Frame Relay switch. F.The LMI uses reserved DLCIs to exchange messages between the DTE and DCE.

A.The LMI provides a virtual circuit (VC) status mechanism. E.The LMI type configured on the router must match the one used on the Frame Relay switch. F.The LMI uses reserved DLCIs to exchange messages between the DTE and DCE.

Refer to the exhibit. A PC at address 10.1.1.45 is unable to access the Internet. What is the most likely cause of the problem? A.The NAT pool has been exhausted. B.The wrong netmask was used on the NAT pool. C.Access-list 1 has not been configured properly. D.The inside and outside interfaces have been configured backwards.

A.The NAT pool has been exhausted.

What is IPsec? A.a specification for the way in which a group of protocols and algorithms combine to create VPNs B.a protocol that is used to create a VPN at Layer 2 of the OSI model C.a 56-bit authentication and encryption method that must be used to create VPN tunnels D.a means by which routers and VPN gateways read and forward packets with encrypted packet headers

A.a specification for the way in which a group of protocols and algorithms combine to create VPNs

Which three items are normally included when a log message is generated by a syslog client and forwarded to a syslog server? (Choose three.) A.date and time of message B.ID of sending device C.length of message D.message ID E.checksum field F.community ID

A.date and time of message B.ID of sending device D.message ID

What are two examples of network problems that are found at the data link layer? (Choose two.) A.encapsulation errors B.framing errors C.electromagnetic interference D.incorrect interface clock rates E.late collisions and jabber

A.encapsulation errors B.framing errors

What are three parameters that are used by NetFlow to classify traffic? (Choose three.) A.ingress interface B.TOS field C.egress interface D.number of packets E.number of bytes F.port number

A.ingress interface B.TOS field F.port number

How many addresses will be available for dynamic NAT translation when a router is configured with the following commands? Router(config)#ip nat pool TAME 209.165.201.23 209.165.201.30 netmask 255.255.255.224 Router(config)#ip nat inside source list 9 pool TAME A.7 B.8 C.9 D.10 E.24 F.31

B. 8

What are two significant benefits that are provided by IPsec? (Choose two.) A.authentication B.encryption C.automatic creation of a public network D.automatic creation of a private network E.encapsulation

B. Encryption E. Encapsulation

Open the PT activity. Perform the tasks in the activity instructions and then answer the question. What is the IP address or range of IP addresses that are used as the inside global address for packets that originate from PC1 and are going to the server? A.209.165.200.231 B.209.165.200.225 - 200.165.200.229 C.209.165.200.231 - 209.165.200.239 D.192.168.10.21 E.192.168.10.1 - 192.168.10.254

B.209.165.200.225 - 200.165.200.229

Which two products are part of the Cisco Collaboration Architecture? (Choose two.) A.Cisco Borderless End Point B.Cisco TelePresence C.Cisco Unified Communications D.Cisco Unified Computing E.Cisco Virtual Private Network

B.Cisco TelePresence C.Cisco Unified Communications

A technician has been asked to configure a broadband connection for a teleworker. The technician has been instructed that all uploads and downloads for the connection must use existing phone lines. Which broadband technology should be used? A.cable B.DSL C.ISDN D.POTS

B.DSL

Which statement is true about NCP? A.Link termination is the responsibility of NCP. B.Each network protocol has a corresponding NCP. C.NCP establishes the initial link between PPP devices. D.NCP tests the link to ensure that the link quality is sufficient.

B.Each network protocol has a corresponding NCP.

What is the purpose of the Cisco Enterprise Architecture? A.It replaces the three-layer hierarchical model with a flat network approach. B.It provides an enterprise-wide system network architecture that helps protect, optimize, and grow the network infrastructure that supports the business processes of a company. C.It provides services and functionality to the core layer by grouping various components into a single component that is located in the access layer. D.It reduces overall network traffic by grouping server farms, the management server, corporate intranet, and e-commerce routers in the same layer.

B.It provides an enterprise-wide system network architecture that helps protect, optimize, and grow the network infrastructure that supports the business processes of a company.

Open the PT Activity. Perform the tasks in the activity instructions and then answer the question. Which message is displayed on the web browser? A.Well done! B.PPP is working! C.PPP configured! D.Configured correctly!

B.PPP is working!

What are two characteristics of DSL technology? (Choose two.) A.Uploads typically offer larger transfer rates than downloads. B.Service providers deploy DSL in the local loop of the telephone network. C.DSL download rates are reduced by large volumes of POTS voice traffic. D.Filters and splitters allow POTS and DSL traffic to share the same medium. E.DSL is a shared medium that allows many users to share bandwidth available from the DSLAM.

B.Service providers deploy DSL in the local loop of the telephone network. D.Filters and splitters allow POTS and DSL traffic to share the same medium.

Which statement is true about the operation of a site-to-site VPN connection? A.The data is encrypted and decrypted by the sending and target hosts. B.The data is encrypted and decrypted by VPN gateways at both the sending and receiving sides. C.The data is encrypted by the sending host and decrypted by the VPN gateway at the receiving side. D.The data is encrypted by the VPN gateway at the sending side and decrypted by the target host.

B.The data is encrypted and decrypted by VPN gateways at both the sending and receiving sides.

What is the default location for Cisco routers and switches to send critical logging events? A.auxiliary port B.console port C.syslog server D.virtual terminal

B.console port

What can cause a reduction in available bandwidth on a cable broadband connection? A.smaller cells B.number of subscribers C.committed information rate D.distance from the central office of the provider

B.number of subscribers

Users are reporting longer delays in authentication and in accessing network resources during certain time periods of the week. What kind of information should network engineers check to find out if this situation is part of a normal network behavior? A.syslog records and messages B.the network performance baseline C.debug output and packet captures D.network configuration files

B.the network performance baseline

How many 64 kb/s voice channels are combined to produce a T1 line? A.8 B.16 C.24 D.32

C. 24

Refer to the exhibit. R3 has the following configuration: R3# show running-config -some output text omitted- interface serial0 bandwidth 128 ip address 192.168.11.2 255.255.255.0 encapsulation frame-relay frame-relay map ip 192.168.11.2 30 broadcast After the command R3# debug frame-relay packet is executed, a ping is issued from R3 to R1 but is unsuccessful. Based on the output of the debug command shown in the graphic and the router configuration, what is the problem? A.No clock rate has been configured on interface s0. B.There is an incorrect DLCI number in the map statement. C.An incorrect IP address exists in the map statement. D.The encapsulation frame-relay command is missing the broadcast keyword.

C.An incorrect IP address exists in the map statement.

A user is unable to connect to the Internet. The network administrator decides to use the top-down troubleshooting approach. Which action should the administrator perform first? A.Run the tracert command to identify the faulty device. B.Check the patch cable connection from the PC to the wall. C.Enter an IP address in the address bar of the web browser to determine if DNS has failed. D.Run the ipconfig command to verify the IP address, subnet mask, and gateway on the PC.

C.Enter an IP address in the address bar of the web browser to determine if DNS has failed

Refer to the exhibit. What type of Layer 2 encapsulation will be used for connection D on the basis of this configuration on a newly installed router: RtrA(config)# interface serial0/0/0 RtrA(config-if)# ip address 128.107.0.2 255.255.255.252 RtrA(config-if)# no shutdown A.Ethernet B.Frame Relay C.HDLC D.PPP

C.HDLC

How does STDM allocate bandwidth on a serial connection? A.It statically assigns bandwidth based upon pre-assigned time slots. B.It ensures each of the time slices are assigned to individual conversations. C.It keeps track of conversations that require extra bandwidth. It then dynamically reassigns unused time slices on an as-needed basis. D.It ensures that bandwidth is allocated to each channel or time slot regardless of whether the station using the channel has data to transmit.

C.It keeps track of conversations that require extra bandwidth. It then dynamically reassigns unused time slices on an as-needed basis.

How does an SNMP trap aid network monitoring and management? A.It reports to the management station by responding to polls. B.It collects information for the management station by using polling devices. C.It sends an alert message to the management station when a threshold is reached. D.It flags attempts to begin a DoS attack on the network.

C.It sends an alert message to the management station when a threshold is reached.

What makes the Cisco EasyVPN application a useful tool for VPN implementation? A.It provides encryption algorithms unavailable in other systems. B.It ensures that remote workers actually use the VPN for connectivity. C.It simplifies the configuration tasks for the device that is used as the VPN server. D.It allows a greater variety of network devices to be used for VPN connections.

C.It simplifies the configuration tasks for the device that is used as the VPN server

Refer to the exhibit. A small office uses an ISR to provide connectivity for both wired and wireless computers. One day, a sales person who is using a laptop cannot connect to Server1 through the wireless network. A network technician attempts to determine if the problem is on the wireless or the wired network. The technician pings successfully from the wireless laptop to the default gateway IP address on the ISR. What should be the next troubleshooting step? A.Ping from the laptop to PC1. B.Ping from Server1 to PC1. C.Ping from Server1 to its gateway IP address. D.Ping from the laptop to the Ethernet port on the cable modem.

C.Ping from Server1 to its gateway IP address.

Refer to the exhibit. While planning an upgrade, a network administrator uses the Cisco NetFlow utility to analyze data flow in the current network. What generated the most packets? A.ICMP B.TCP-Telnet C.TCP-other D.UDP-DNS E.UDP-other

C.TCP-other

What is the relationship between the DE and the CIR in Frame Relay? A.When the CIR is exceeded, an Inverse ARP DE message notifies the source to reduce frame transmission speed. B.The DE bit will indicate when the CIR committed burst size should be applied. C.When the CIR on a given DLCI is exceeded, the DE bit of frames above the CIR is set. D.The XON/XOFF flow control mechanism sets the DE bit when the CIR is exceeded.

C.When the CIR on a given DLCI is exceeded, the DE bit of frames above the CIR is set.

Which basic network module of the Enterprise Architecture is the fundamental component of a campus design? A.data center B.services module C.access-distribution D.enterprise edge

C.access-distribution

An administrator needs to configure a router so that internal network servers are accessible from the Internet. Each server is configured with a private IPv4 address. What type of NAT should the administrator configure? A.PAT B.dynamic NAT C.static NAT D.NAT overloading

C.static NAT

Which is a clientless VPN solution for mobile workers? A.GRE B.IPsec C.SSH D.SSL

D. SSL

Which IEEE standard defines the WiMax technology? A.802.3 B.802.5 C.802.11 D.802.16

D.802.16

Which PPP protocol allows a device to specify an IP address for routing over the PPP link? A.PAP B.CHAP C.LCP D.IPCP

D.IPCP

For a VPN, which technology provides secure remote access over broadband? A.QoS B.ADSL C.LTE D.IPsec

D.IPsec

Refer to the exhibit. Based on the configuration of R1, which device is the inside host and what is the inside local address of this host? A.PC-A with address 64.100.0.100 B.PC-A with address 209.165.200.225 C.PC-B with address 64.100.0.100 D.PC-B with address 209.165.200.225

D.PC-B with address 209.165.200.225

The output of the show ip interface brief command indicates that Serial0 is up but the line protocol is down. What are two possible causes for the line protocol being in the down state? (Choose two.) A.The clock rate is not set on the DTE. B.An incorrect default gateway is set on the router. C.A network is missing from the routing protocol configuration. D.The encapsulation on the Serial0 interface is incorrect. E.Keepalives are not being sent by the remote device.

D.The encapsulation on the Serial0 interface is incorrect. E.Keepalives are not being sent by the remote device.

Refer to the exhibit. A ping from R1 to 10.1.1.2 is successful, but a ping from R1 to any address in the 192.168.2.0 network fails. What is the cause of this problem? A.There is no gateway of last resort at R1. B.The serial interface between the two routers is down. C.A default route is not configured on R1. D.The static route for 192.168.2.0 is incorrectly configured.

D.The static route for 192.168.2.0 is incorrectly configured.

Refer to the exhibit. A network administrator is troubleshooting the OSPF network. The 10.10.0.0/16 network is not showing up in the routing table of Router1. What is the probable cause of this problem? A.The serial interface on Router2 is down. B.The OSPF process is not running on Router2. C.The OSPF process is configured incorrectly on Router1. D.There is an incorrect wildcard mask statement for network 10.10.0.0/16 on Router2.

D.There is an incorrect wildcard mask statement for network 10.10.0.0/16 on Router2.

Which two technologies are implemented by organizations to support teleworker remote connections? (Choose two.) A.CMTS B.CDMA C.DOCSIS D.VPN E.IPsec

D.VPN E.IPsec

The security policy in a company specifies that the staff in the sales department must use a VPN to connect to the corporate network to access the sales data when they travel to meet customers. What component is needed by the sales staff to establish a remote VPN connection? A.VPN gateway B.VPN appliance C.VPN concentrator D.VPN client software

D.VPN client software

Refer to the exhibit. A network administrator has configured routers RTA and RTB, but cannot ping from serial interface to serial interface. Which layer of the OSI model is the most likely cause of the problem? A.application B.transport C.network D.data link E.physical

D.data link

What is a disadvantage of a packet-switched network compared to a circuit-switched network? A.higher cost B.fixed capacity C.less flexibility D.higher latency

D.higher latency

Which three parts of a Frame Relay Layer 2 PDU are used for congestion control? (Choose three.) A.the 10-bit DLCI B.the Extended Address field C.the C/R bit D.the FECN bit E.the BECN bit F.the DE bit

D.the FECN bit E.the BECN bit F.the DE bit

In the Cisco Enterprise Architectures network design approach what is the purpose of the enterprise edge module? A.to provide access to IP telephony services, wireless controller services, and unified services B.to provide high-speed connectivity and protection for servers C.to forward traffic from one local network to another D.to provide Internet, VPN, and WAN connections

D.to provide Internet, VPN, and WAN connections

A company has been assigned the 203.0.113.0/27 block of IP addresses by the ISP. The company has over 6000 internal devices. What type of NAT would be most appropriate for the employee workstations of the company? A.static NAT B.dynamic NAT C.port forwarding D.PAT off the external router interface E.dynamic NAT overload using the pool of addresses

E.dynamic NAT overload using the pool of addresses