Ensurepass.com Easy Test! Easy Pass! Cisco CCNP 642-813 Exam Vendor：Cisco Exam Code: 642-813 Exam Name: Implementing Cisco IP Switched Networks 2 Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 1 Which statement is true about RSTP topology changes? A. B. C. D. E. Any change in the state of the port generates a TC BPDU. Only nonedge ports moving to the forwarding state generate a TC BPDU. If either an edge port or a nonedge port moves to a block state, then a TC BPDU is generated. Only edge ports moving to the blocking state generate a TC BPDU. Any loss of connectivity generates a TC BPDU. Correct Answer: B QUESTION 2 Refer to the exhibit.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: ABDE QUESTION 3 Refer to the exhibit. Which VRRP statement about the roles of the master virtual router and the backup virtual router is true? A. B. C. D. Router A is the master virtual router, and router B is the backup virtual router. When router A fails, router B becomes the master virtual router. When router A recovers, router B maintains the role of master virtual router.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: B QUESTION 4 Which description correctly describes a MAC address flooding attack? A. B. C. D. E. F. The attacking device crafts ARP replies intended for valid hosts. The MAC address of the attacking device then becomes the destination address found in the Layer 2 frames sent by the valid network device. The attacking device crafts ARP replies intended for valid hosts.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. E. F. All switch ports in the Building Access block should be configured as DHCP trusted ports. All switch ports in the Building Access block should be configured as DHCP untrusted ports. All switch ports connecting to hosts in the Building Access block should be configured as DHCP trusted ports. All switch ports connecting to hosts in the Building Access block should be configured as DHCP untrusted ports.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. The switch ports 3/1 and 3/2 are defined as secondary VLAN isolated ports. The ports connecting to the two firewalls are defined as primary VLAN promiscuous ports. The switch ports 3/1 and 3/2 are defined as secondary VLAN community ports. The ports connecting to the two firewalls are defined as primary VLAN promiscuous ports. The switch ports 3/1 and 3/2 and the ports connecting to the two firewalls are defined as primary VLAN promiscuous ports.
Ensurepass.com Easy Test! Easy Pass! A. The spoof packets are inspected at the ingress port of switch SW_A and are permitted. B. The spoof packets are inspected at the ingress port of switch SW_A and are dropped. C. The spoof packets are not inspected at the ingress port of switch SW_A and are permitted. D. The spoof packets are not inspected at the ingress port of switch SW_A and are dropped. Correct Answer: C QUESTION 9 Which statement is true about Layer 2 security threats? A. B. C. D. E. F.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: E QUESTION 10 What does the global configuration command "ip arp inspection vlan 10-12,15" accomplish? A. B. C. D.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. E. F. Because of the invalid timers that are configured, DSw1 does not reply. DSw1 replies with the IP address of the next AVF. DSw1 replies with the MAC address of the next AVF. Because of the invalid timers that are configured, DSw2 does not reply. DSw2 replies with the IP address of the next AVF. DSw2 replies with the MAC address of the next AVF. Correct Answer: F QUESTION 12 What are two methods of mitigating MAC address flooding attacks? (Choose two.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. Interfaces FastEthernet3/1 and FastEthernet3/2 are connected to devices that are sending BPDUs with a superior root bridge parameter and no traffic is forwarded across the ports. After the sending of BPDUs has stopped, the interfaces must be shut down administratively, and brought back up, to resume normal operation.
Ensurepass.com Easy Test! Easy Pass! QUESTION 15 Why is BPDU guard an effective way to prevent an unauthorized rogue switch from altering the spanning- tree topology of a network? A. B. C. D. BPDU guard can guarantee proper selection of the root bridge. BPDU guard can be utilized along with PortFast to shut down ports when a switch is connected to the port. BPDU guard can be utilized to prevent the switch from transmitting BPDUs and incorrectly altering the root bridge election.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. If port Fa1/1 on Switch_A goes down, the standby device takes over as active. If the current standby device had the higher priority value, it would take over the role of active for the HSRP group. If port Fa1/1 on Switch_A goes down, the new priority value for the switch would be 190. If Switch_A had the highest priority number, it would not take over as active router.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. The traffic coming from Host1 and Host2 is forwarded through router R2 with no disruption. The traffic coming from Host2 is forwarded through router R2 with no disruption. Host1 sends an ARP request to resolve the MAC address for the new virtual gateway. The traffic coming from both hosts is temporarily interrupted while the switchover to make R2 active occurs. The traffic coming from Host2 is forwarded through router R2 with no disruption.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. A DHCPOFFER packet from a DHCP server received on Ports Fa2/1 and Fa2/2 is dropped. A DHCP packet received on ports Fa2/1 and Fa2/2 is dropped if the source MAC address and the DHCP client hardware address does not match Snooping database. A DHCP packet received on ports Fa2/1 and Fa2/2 is forwarded without being tested.
Ensurepass.com Easy Test! Easy Pass! R2 does not become active when the R1 serial0 interface goes down. What should be changed in the configuration to fix the problem? A. B. C. D. R2 should be configured with an HSRP virtual address. R2 should be configured with a standby priority of 100. The Serial0 interface on router R2 should be configured with a decrement value of 20. The Serial0 interface on router R1 should be configured with a decrement value of 20.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. E. F. A routed port can support VLAN subinterfaces. A routed port takes an IP address assignment. A routed port can be configured with routing protocols. A routed port is a virtual interface on the multilayer switch. A routed port is associated only with one VLAN. A routed port is a physical interface on the multilayer switch. Correct Answer: BCF QUESTION 24 Refer to the exhibit. Why are users from VLAN 100 unable to ping users on VLAN 200? A. B. C. D.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. E. F. It determines the validity of an ARP packet based on the valid MAC address-to-IP address bindings stored in the DHCP snooping database. It forwards all ARP packets received on a trusted interface without any checks. It determines the validity of an ARP packet based on the valid MAC address-to-IP address bindings stored in the CAM table.
Ensurepass.com Easy Test! Easy Pass! error messages received on the console of SW1, what is the cause of the problem? A. B. C. D. The two ends of the trunk have different duplex settings. The two ends of the trunk have different EtherChannel configurations. The two ends of the trunk have different native VLAN configurations. The two ends of the trunk allow different VLANs on the trunk.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: C QUESTION 30 A standalone wireless AP solution is being installed into the campus infrastructure. The access points appear to boot correctly, but wireless clients are not obtaining correct access. You verify that this is the local switch configuration connected to the access point: What is the most likely cause of the problem? A. B. C. D. QoS trust should not be configured on a port attached to a standalone AP.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. E. only implemented between Cisco source and destination-capable devices statistics provided by syslog, CLI, and SNMP measures delay, jitter, packet loss, and voice quality only monitors VoIP traffic flows provides active monitoring Correct Answer: CE QUESTION 33 Which two items best describe a Cisco IOS IP SLA responder? (Choose two.) A. B. C. D. E. F.
Ensurepass.com Easy Test! Easy Pass! D. results from pilot network testing Correct Answer: B QUESTION 36 Which two components should be part of a security implementation plan? (Choose two.) A. B. C. D. E.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. E. No more than one secure MAC address should be set. The default is set. The IP phone should use a dedicated port, therefore only one MAC address is needed per port. No value is needed if the switchport priority extend command is configured. No more than two secure MAC addresses should be set. Correct Answer: E QUESTION 40 Refer to the exhibit. From the configuration shown, what can be determined? A. B. C. D.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. E. This is normal operation. The standby group number does not match the VLAN number. IP addressing is incorrect. Priority commands are incorrect. Standby timers are incorrect. Correct Answer: A QUESTION 42 Three Cisco Catalyst switches have been configured with a first-hop redundancy protocol. While reviewing some show commands, debug output, and the syslog, you discover the following Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! information: What conclusion can you infer from this information? A. B. C. D. E. F. VRRP is initializing and operating correctly. HSRP is initializing and operating correctly. GLBP is initializing and operating correctly. VRRP is not exchanging three hello messages properly. HSRP is not exchanging three hello messages properly. GLBP is not exchanging three hello messages properly.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. E. F. disables EtherChannel enables port security disables Cisco Discovery Protocol enables PortFast disables trunking enables loopguard Correct Answer: ADE QUESTION 45 When configuring private VLANs, which configuration task must you do first? A. B. C. D. Configure the private VLAN port parameters. Configure and map the secondary VLAN to the primary VLAN. Disable IGMP snooping. Set the VTP mode to transparent.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. If the number of devices attempting to access the port exceeds 11, the port shuts down for 20 minutes, as configured. The port has security enabled and has shut down due to a security violation. The port is operational and has reached its configured maximum allowed number of MAC addresses. The port allows access for 11 MAC addresses in addition to the three configured MAC addresses. Correct Answer: C QUESTION 48 Refer to the exhibit.
Ensurepass.com Easy Test! Easy Pass! E. F. VRRP is configured for group 11. GLBP is configured with a single AVF. Correct Answer: C QUESTION 49 Which statement best describes implementing a Layer 3 EtherChannel? A. B. C. D. EtherChannel is a Layer 2 feature and not a Layer 3 feature. Implementation requires switchport mode trunk and matching parameters between switches. Implementation requires disabling switchport mode. A Layer 3 address is assigned to the physical interface.
Ensurepass.com Easy Test! Easy Pass! C. D. not subinterface mode, to enable a Layer 2 port to be configured for Layer 3 routing. The configured port is excluded in the calculation of the status of the SVI. The interface is missing IP configuration parameters; therefore, it will only function at Layer 2. Correct Answer: C QUESTION 52 Refer to the exhibit. Which two statements about this Layer 3 security configuration example are true? (Choose two.) A. B. C. D. E.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. Cisco Express Forwarding load balancing has been disabled. SVI VLAN 30 connects directly to the 10.1.30.0/24 network due to a valid glean adjacency. VLAN 30 is not operational because no packet or byte counts are indicated. The IP Cisco Express Forwarding configuration is capable of supporting IPv6. Correct Answer: B QUESTION 54 Which statement about the EIGRP routing being performed by the switch is true? A. B. C. D.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. The command enables loop guard and root guard. The command changes the status of loop guard from the default of disabled to enabled. The command activates loop guard on point-to-multipoint links in the switched network. The command disables EtherChannel guard. Correct Answer: B QUESTION 56 What does the interface subcommand switchport voice vlan 222 indicate? A. B. C. D. The port is configured for both data and voice traffic.
Ensurepass.com Easy Test! Easy Pass! QUESTION 59 Which two statements describe a routed switch port on a multilayer switch? (Choose two.) A. B. C. D. E. Layer 2 switching and Layer 3 routing are mutually supported. The port is not associated with any VLAN. The routed switch port supports VLAN subinterfaces. The routed switch port is used when a switch has only one port per VLAN or subnet. The routed switch port ensures that STP remains in the forwarding state.
Ensurepass.com Easy Test! Easy Pass! E. F. forwarding learning Correct Answer: AB QUESTION 63 Which two statements correctly describe characteristics of the PortFast feature? (Choose two.) A. B. C. D. E. STP is disabled on the port. PortFast can also be configured on trunk ports. PortFast is needed to enable port-based BPDU guard. PortFast is used for STP and RSTP host ports. PortFast is used for STP-only host ports.
Ensurepass.com Easy Test! Easy Pass! QUESTION 66 You are the administrator of a switch and currently all host-connected ports are configured with the portfast command. You have received a new directive from your manager that states that, in the future, any host- connected port that receives a BPDU should automatically disable PortFast and begin transmitting BPDUs. Which command will support this new requirement? A. B. C. D.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. The port has to support STP PortFast. The auxiliary VLAN is for data service and is identified by the PVID. The port hardware is set as an 802.1Q trunk. The voice service and data service use the same trust boundary. Correct Answer: C QUESTION 70 Which two statements are true about recommended practices that are to be used in a local VLAN solution design where layer 2 traffic is to be kept to a minimum? (Choose two.) A. B. C. D. E.
Ensurepass.com Easy Test! Easy Pass! C. D. E. Both switch ports attached to the hub transitions to the blocking state. A heavy traffic load could cause BPDU transmissions to be blocked and leave a switching loop. The switch port attached to LinkA immediately transitions to the blocking state. Correct Answer: BD QUESTION 72 What action should a network administrator take to enable VTP pruning on an entire management domain? A. B. C. D. Enable VTP pruning on any client switch in the domain.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. VLAN 107 does not exist on switch A. VTP is pruning VLAN 107. VLAN 107 is not configured on the trunk. Spanning tree is not enabled on VLAN 107. Correct Answer: B QUESTION 76 Which protocol will enable a group of routers to form a single virtual router and will use the real IP address of a router as the gateway address? Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. E. Proxy ARP HSRP IRDP VRRP GLBP Correct Answer: D QUESTION 77 On a multilayer Cisco Catalyst switch, which interface command is used to convert a Layer 3 interface to a Layer 2 interface? A. B. C. D. switchport no switchport switchport mode access switchport access vlan vlan-id Correct Answer: A QUESTION 78 Refer to the exhibit.
Ensurepass.com Easy Test! Easy Pass! A. B. C. The preempt feature is not enabled on the 172.16.11.111 router. The nonpreempt feature is enabled on the 172.16.11.112 router. Router 172.16.11.111 will be the active router because its HSRP priority is preferred over router 172.16.11.112. D. Router 172.16.11.112 will be the active router because its HSRP priority is preferred over router 172.16.11.111. E. The IP address 172.16.11.111 is the virtual HSRP router IP address. F. The IP address 172.16.11.
Ensurepass.com Easy Test! Easy Pass! when accessing the server farm than the Reception office experiences. Which two statements are true? (Choose two.) A. B. C. D. E. F. Changing the bridge priority of S1 to 4096 would improve network performance. Changing the bridge priority of S1 to 36864 would improve network performance. Changing the bridge priority of S2 to 36864 would improve network performance. Changing the bridge priority of S3 to 4096 would improve network performance.
Ensurepass.com Easy Test! Easy Pass! Switch(config) # spanning-tree portfast bpdufilter default A. B. C. D. If BPDUs are received by a port configured for PortFast, then PortFast is disabled and the BPDUs are processed normally. If BPDUs are received by a port configured for PortFast, they are ignored and none are sent. If BPDUs are received by a port configured for PortFast, the port transitions to the forwarding state.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. E. spanning tree issues HSRP misconfiguration VRRP misconfiguration physical layer issues transport layer issues Correct Answer: BD QUESTION 84 Refer to the exhibit. What does the command channel-group 1 mode desirable do? A. B. C. D. E.
Ensurepass.com Easy Test! Easy Pass! A. B. Interface gigabitethernet 0/1 has been configured as Layer 3 ports. Interface gigabitethernet 0/1 does not appear in the show vlan output because switchport is enabled. C. Interface gigabitethernet 0/1 does not appear in the show vlan output because it is configured as a trunk interface. D. VLAN2 has been configured as the native VLAN for the 802.1q trunk on interface gigabitethernet 0/1. E. Traffic on VLAN 1 that is sent out gigabitethernet 0/1 will have an 802.
Ensurepass.com Easy Test! Easy Pass! A. GLBP allows for router load balancing of traffic from a network segment without the different host IP configurations needed to achieve the same results with HSRP. B. GLBP allows for router load balancing of traffic from a network segment by utilizing the creation of multiple standby groups. C. GLBP and VRRP allow for MD5 authentication, whereas HSRP does not. D.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: D QUESTION 88 Refer to the exhibit. Which statement is true? A. B. C. IP traffic matching access list ABC is forwarded through VLANs 5-10. IP traffic matching VLAN list 5-10 is forwarded, and all other traffic is dropped. All VLAN traffic matching VLAN list 5-10 is forwarded, and all traffic matching access list ABC is dropped. D. All VLAN traffic in VLANs 5-10 that match access list ABC is forwarded, and all other traffic is dropped.
Ensurepass.com Easy Test! Easy Pass! QUESTION 91 Refer to the exhibit. Switch S1 has been configured with the command spanning-tree mode rapidpvst. Switch S3 has been configured with the command spanning-tree mode mst. Switch S2 is running the IEEE 802.1D instance of Spanning Tree. What is the result? A. IEEE 802.1w and IEEE 802.1s are compatible. IEEE 802.1d is incompatible. Switches S1 and S3 can pass traffic between themselves. Neither can pass traffic to switch S2. B.
Ensurepass.com Easy Test! Easy Pass! C. D. promiscuous port. VLAN 200 carries traffic from promiscuous ports to isolated, community, and other promiscuous ports in the same VLAN. VLAN 202 carries traffic between community ports and to promiscuous ports. VLAN 200 carries traffic from promiscuous ports to isolated, community, and other promiscuous ports in the same VLAN. VLAN 202 carries traffic from isolated ports to a promiscuous port. Correct Answer: B QUESTION 93 Refer to the exhibit.
Ensurepass.com Easy Test! Easy Pass! B. C. D. E. promiscuous community primary trunk Correct Answer: B QUESTION 95 In the MAC address 0000.0c07.ac03, what does the "03" represent? A. B. C. D. E. HSRP router number 3 Type of encapsulation HSRP group number VRRP group number GLBP group number Correct Answer: C QUESTION 96 A network is deployed using recommended practices of the enterprise campus network model, including users with desktop computers connected via IP phones.
Ensurepass.com Easy Test! Easy Pass! QUESTION 98 When configuring port security on a Cisco Catalyst switch port, what is the default action taken by the switch if a violation occurs? A. B. C. D. protect (drop packets with unknown source addresses) restrict (increment Security Violation counter) shut down (access or trunk port) transition (the access port to a trunking port) Correct Answer: C QUESTION 99 Refer to the above.
Ensurepass.com Easy Test! Easy Pass! QUESTION 100 Private VLANs can be configured as which three port types? (Choose three.) A. B. C. D. E. F. isolated protected private associated promiscuous community Correct Answer: AEF QUESTION 101 Refer to the exhibit. Which statement about the private VLAN configuration is true? A. Only VLAN 503 will be the community PVLAN, because multiple community PVLANs are not allowed. B. Users of VLANs 501 and 503 will be able to communicate. C.
Ensurepass.com Easy Test! Easy Pass! command in global configuration mode. B. Enter the no switchport command to disable Layer 2 functionality at the interface level. C. Each port participating in routing of Layer 3 packets must have an IP routing protocol assigned on a per-interface level. D. Routing is enabled by default on a multilayer switch, so the port can become a Layer 3 routing interface by assigning the appropriate IP address and subnet information.
Ensurepass.com Easy Test! Easy Pass! QUESTION 105 What is the result of entering the command port-channel load-balance src-dst-ip on an Ether Channel link? A. Packets are distributed across the ports in the channel based on the source and destination MAC addresses. B. Packets are distributed across the ports in the channel based on the source and destination IP addresses. C.
Ensurepass.com Easy Test! Easy Pass! guard are disabled on that port and it assumes normal STP operation. B. The access port ignores any received BPDU. C. If the port receives a BPDU, it is placed into the error-disable state. D. BPDU guard is configured only globally and the BPDU filter is required for port-level configuration. Correct Answer: C QUESTION 109 Which statement about the Port Aggregation Protocol is true? A.
Ensurepass.com Easy Test! Easy Pass! C. The native VLAN on both ends of the trunk must be VLAN 1. D. In 802.1Q trunking, all VLAN packets are tagged on the trunk link, except the native VLAN. Correct Answer: D QUESTION 112 Refer to the exhibit. Which three statements are true? (Choose three.) A. B. C. D. E. A trunk link will be formed. Only VLANs 1-1001 will travel across the trunk link. The native VLAN for switch B is VLAN 1. DTP is not running on switch A. DTP packets are sent from switch B.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. E. F. HSRP must be configured on SW1. A separate router is needed to support inter-VLAN routing. Interface VLAN 10 must be configured on the SW1 switch. The global configuration command ip routing must be configured on the SW1 switch. VLANs 10 and 15 must be created in the VLAN database mode. VTP must be configured to support inter-VLAN routing. Correct Answer: D QUESTION 114 Refer to the exhibit.
Ensurepass.com Easy Test! Easy Pass! A. All secure addresses age out and are removed from the secure address list. The security violation counter increments. B. The first address learned on the port is removed from the secure address list and is replaced with the new address. C. The interface is placed into the error-disabled state immediately, and an SNMP trap notification is sent. D.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. The traffic is forwarded to the TCAM for further processing. The traffic is forwarded to the router processor for further processing. The traffic is dropped. The traffic is forwarded without further processing. Correct Answer: C QUESTION 116 Which protocol allows for the automatic selection and simultaneous use of multiple available gateways as well as automatic failover between those gateways? A. B. C. D.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: QUESTION 118 You work as a network administrator at Company.com. Your boss is asking you about lightweight access points WALN controller associations. What is the proper sequence a lightweight access point associates with a WLAN controller? Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: QUESTION 119 Match the HSRP states on the left with the correct definition on the right. Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: QUESTION 120 Drag and drop question. Drag the items to the proper locations. Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: QUESTION 121 Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Drag and drop question. Drag the items to the proper locations. Correct Answer: QUESTION 122 Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Place the syslog message types in the left to the corresponding area on the right, based on priority from highest to lowest. Correct Answer: Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 123 Capabilities of SNMP are dependent on the version implemented. Drag the feature descriptions on the left to the respective SNMP versions on the right. Correct Answer: Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 124 Place the local and end to end VLAN functions on the left into the associated boxes on the right. Correct Answer: Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 125 Place the local and distributed VLAN functions on the left into the associated boxes on the right. Correct Answer: Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 126 Place the local and end to end VLAN functions on the left into the associated boxes on the right. Correct Answer: Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 127 Choose the associated VTP VLAN design options on the left into the corresponding fields on the right. Not all option choices will be used. Correct Answer: Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 128 Correct Answer: Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 129 Correct Answer: Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 130 Drag the steps on the left that should be part of a VLAN-based verification plan to the spaces on the right. Not all choices will be used. Correct Answer: Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 131 Correct Answer: Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 132 Correct Answer: Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 133 Correct Answer: Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 134 Correct Answer: Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 135 Correct Answer: Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 136 Refer to the Exhibit. The information of the question You will configure FastEthernet ports 0/12 through 0/24 for users who belong to VLAN 20. Also, all VLAN and VTP configurations are to be completed in global configuration mode as VLAN database mode is being deprecated by Cisco. You are required to accomplish the following tasks: 1. 2. 3. 4. Ensure the switch does not participate in VTP but forwards VTP advertisements received on trunk ports.
Ensurepass.com Easy Test! Easy Pass! QUESTION 137 The headquarter offices for a book retailer are enhancing their wiring closets with Layer3 switches. The new distribution-layer switch has been installed and a new access-layer switch cabled to it. Your task is to configure VTP to share VLAN information from the distribution-layer switch to the access-layer devices.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: DLSwitch# conf t DLSwitch(config)# vtp mode server DLSwitch(config)# vtp domain cisco DLSwitch(config)# vlan 20 DLSwitch(config)# vlan 21 DLSwitch(config)# int vlan 20 DLSwitch(config-if)# ip address 172.16.236.1 255.255.255.0 DLSwitch(config-if)# no shutdown DLSwitch(config-if)# exit DLSwitch(config)# int vlan 21 DLSwitch(config-if)# ip address 172.16.170.1 255.255.255.
Ensurepass.com Easy Test! Easy Pass! Question 1 Which spanning Tree Protocol has been implemented on SW-B? Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. E. STP/IEEE 802.1D MSTP/IEEE 802.1s PVST+ PVRST None of the above Correct Answer: C Question 2 Which bridge ID belongs to SW-B? A. B. C. D. E. F. 24623.000f.34f5.0138 32768.000d.bd03.0380 32768.000d.65db.0102 32769.000d.65db.0102 32874.000d.db03.0380 32815.000d.db03.0380 Correct Answer: A Question 3 Which port role has interface Fa0/2 of SW-A adopted for VLAN 47? A. B. C. D. E.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: D Question 5 Which bridge ID belongs to SW-A? A. B. C. D. E. F. 24623.000f.34f5.0138 32768.000d.bd03.0380 32768.000d.65db.0102 32769.000d.65db.0102 32874.000d.db03.0380 32815.000d.db03.0380 Correct Answer: D QUESTION 139 Refer to the Exhibit. Acme is a small shipping company that has an existing enterprise network comprised of 2 switches DSW1 and ASW2. The topology diagram indicates their layer 2 mapping.
Ensurepass.com Easy Test! Easy Pass! Authentication is to be done via a Radius server: Radius server host: 172.120.39.46 Radius key: rad123 Authentication should be implemented as close to the host device possible. Devices on VLAN 20 are restricted to in the address range of 172.120.40.0/24. Packets from devices in the address range of 172.120.40.0/24 should be passed on VLAN 20. Packets from devices in any other address range should be dropped on VLAN 20.
Ensurepass.com Easy Test! Easy Pass! CORE, DSW1, DSW2, ASW1 and ASW2. The topology diagram indicates their desired pre-VLAN spanning tree mapping. Previous configuration attempts have resulted in the following issues: CORE should be the root bridge for VLAN 20; however, DSW1 is currently the root bridge for VLAN 20. Traffic for VLAN 30 should be forwarding over the gig 1/0/6 trunk port between DSW1 and DSW2. However VLAN 30 is currently using gig 1/0/5.
Ensurepass.com Easy Test! Easy Pass! Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Correct answer: DSW1# conf t DSW1(config)# spanning-tree vlan 20 priority 61440 DSW1(config)# int g1/0/5 DSW1(config-if)# spanning-tree vlan 40 cost 1 DSW1(config-if)# no shut DSW1(config-if)# exit DSW1(config)# int g1/0/6 Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! DSW1(config-if)# spanning-tree vlan 30 port-priority 64 DSW1(config-if)# no shut DSW1(config-if)# end DSW1# copy running-config startup-config Verification: DSW1# show spanning-tree vlan 20 DSW1# show spanning-tree vlan 40 DSW2# show spanning-tree vlan 30 QUESTION 141 Configure the Multilayer Switch so that PCs from VLAN 2 and VLAN 3 can communicate with the Server.
Ensurepass.com Easy Test! Easy Pass! mls(config-if)# no shutdown mls(config-if)# exit mls(config)# int vlan 2 mls(config-if)# ip address 190.200.250.33 255.255.255.224 mls(config-if)# no shutdown mls(config-if)# int vlan 3 mls(config-if)# ip address 190.200.250.65 255.255.255.
Ensurepass.com Easy Test! Easy Pass! QUESTION 142 Each of these vlans has one host each on its ports SVI on vlan 1 - ip 192.168.1.11 Switch B Ports 3, 4 connected to ports 3 and 4 on Switch A Port 15 connected to Port on Router. Tasks to do: 1. Use non proprietary mode of aggregation with Switch B being the initiator Use LACP with B being in Active mode 2. Use non proprietary trunking and no negotiation Use switchport mode trunk and switchport trunk encapsulation dot1q 3.
Ensurepass.com Easy Test! Easy Pass! SW-A(config-if)# ip address 192.168.1.11 255.255.255.
Ensurepass.
Ensurepass.com Easy Test! Easy Pass! SwitchA and SwitchB. SwitchA is currently configured correctly, but will need to be modified to support the addition of SwitchB. SwitchB has a minimal configuration. You have been tasked with competing the configuration of SwitchA and SwitchB. SwitchA and SwitchB use Cisco as the enable password. Configuration Requirements for SwitchA The VTP and STP configuration modes on SwitchA should not be modified.
Ensurepass.
Ensurepass.
Ensurepass.com Easy Test! Easy Pass! HOST 2: You need to configure SwitchC so that Hosts H1 and H2 can successful ping the server S1. Also SwitchC needs to be able to ping server S1. Due to administrative restrictions and requirements you should not add/delete vlans, changes VLAN port assignments or create trunk links Company policies forbid the use of static or default routing All routes must be learned via EIGRP 65010 routing protocol. You do not have access to RouteC, RouterC is correctly configured.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: On switch C: SwitchC> enable SwitchC# conf t SwitchC(config)# int gi 0/1 SwitchC(config-if)# no switchport SwitchC(config-if)# ip address 172.16.1.1 255.255.255.0 SwitchC(config-if)# no shutdown SwitchC(config-if)# exit SwitchC(config)# int vlan 2 SwitchC(config-if)# ip address 192.168.3.33 255.255.255.224 SwitchC(config-if)# no shutdown SwitchC(config-if)# exit SwitchC(config-if)# int vlan 3 SwitchC(config-if)# ip address 192.168.3.65 255.255.255.
Ensurepass.com Easy Test! Easy Pass! Refer to the exhibit. On the basis of the information provided in the exhibit, which two sets of procedures are best practices for Layer 2 and 3 failover alignment? (Choose two.) A. Configure the D-SW1 switch as the active HSRP router and the STP root for all VLANs. Configure the D-SW2 switch as the standby HSRP router and backup STP root for all VLANs. B. Configure the D-SW1 switch as the standby HSRP router and the STP root for VLANs 11 and 110.
Ensurepass.com Easy Test! Easy Pass! trunks. After a failure, the link between ASW-1 and DSW-1 has incorrectly come back up at 10Mb/s although it is connected. Which one of the following will occur as a result of this failure? A. B. C. D.
Ensurepass.com Easy Test! Easy Pass! providing inter VLAN routing? A. B. C. D. determine which switch is the root bridge then connect a router on a stick to it configure SVIs on the core switches configure SVIs on the distribution switches configure SVIs on the access layer switches Correct Answer: C QUESTION 148 Refer to the exhibit. Which two of the following statements are true? (Choose two) Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! A. B. C. D. E. DHCP snooping is enabled for 155 VLANs DHCP snooping is enabled for a single VLAN DHCP snooping is not enabled for any VLAN Option 82 is enabled for a VLAN 155 Ports Fa0/5 and Fa0/6 should be kept shutdown as these are untrusted ports Correct Answer: BD QUESTION 149 Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: A Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 150 Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: C QUESTION 151 Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: B Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 152 Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: C QUESTION 153 Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: B Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! QUESTION 154 Download the complete collection of Exam's Real Q&As www.ensurepass.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: A QUESTION 155 Which three statements about the Multiple Spanning Tree (MST) protocol (IEEE 802.1s) are true? (Choose three.) A. An MST region is a group of MST switches that appear as a single virtual bridge to adjacent CST and MST regions. B. All switches in an MST region, except distribution layer switches, should have their priority lowered from the default value 32768. C.
Ensurepass.com Easy Test! Easy Pass! QUESTION 157 Which three features are part of the Cisco Compatible Extensions program? (Choose three.) A. B. C. D. E. F. security routing and switching VLAN and QoS analog and digital voice accounting mobility Correct Answers: ACF QUESTION 158 Refer to the exhibit. Switch S2 contains the default configuration. Switches S1 and S3 both have had the command spanning-tree mode rapid-pvst issued on them. What will be the result? A.
Ensurepass.com Easy Test! Easy Pass! QUESTION 159 Which statement is true about IP telephony calls? A. A Voice over IP (VoIP) packet consists of the voice payload, IP header, TCP header, RTP header, and Layer 2 link header. B. The voice carrier stream uses H.323 to set up, maintain, and tear down call endpoints. C. Call control signaling uses Real-Time Transport Protocol (RTP) packets that contain actual voice samples. D.
Ensurepass.com Easy Test! Easy Pass! QUESTION 161 In the use of 802.1X access control, which three protocols are allowed through the switch port before authentication takes place? (Choose three.) A. B. C. D. E. F. STP CDP EAP MD5 TACACS+ EAP-over-LAN protocols not filtered by an ACL Correct Answers: ABE QUESTION 162 Refer to the exhibit. The web servers WS_1 and WS_2 need to be accessed by external and internal users.
Ensurepass.com Easy Test! Easy Pass! Under what circumstances should an administrator prefer local VLANs over end-to-end VLANs? A. Eighty percent of traffic on the network is destined for Internet sites. B. There are common sets of traffic filtering requirements for workgroups located in multiple buildings. C. Eighty percent of a workgroup’s traffic is to the workgroup’s own local server. D. Users are grouped into VLANs independent of physical location. E.
Ensurepass.com Easy Test! Easy Pass! connected to other switches as trusted. F. DAI is supported on access and trunk ports only. Correct Answer: ACE QUESTION 167 You are implementing basic switch security best practices. Which of these is a tactic that you can use to mitigate compromises from being launched through the switch? A. B. C. D. Make all ports private VLAN ports. Place all unused ports in native VLAN 1 until needed. Proactively configure unused switch ports as access ports.
Ensurepass.com Easy Test! Easy Pass! Which of the following specifications is a companion to the IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) algorithm, and warrants the use multiple spanning-trees? A. B. C. D. E. IEEE 802.1s (MST) IEEE 802.1Q (CST) Cisco PVST+ IEEE 802.
Ensurepass.com Easy Test! Easy Pass! Correct Answer: A QUESTION 174 Which MST configuration statement is correct? A. B. C. D. E. MST configurations can be propagated to other switches using VTP. After MST is configured on a Switch, PVST+ operations will also be enabled by default. MST configurations must be manually configured on each switch within the MST region. MST configurations only need to be manually configured on the Root Bridge.
Ensurepass.com Easy Test! Easy Pass! QUESTION 176 Given the configurations on SwitchA and SwitchB, which two statements are true? (Choose two.) A. The trunk is currently using the ISL trunking protocol. B. The trunk is currently using the 802.1q trunking protocol. C. By default, the trunk can only support one VLAN, and only that single VLAN is transmitted across the trunk. D. By default, all VLANs will be transmitted across this trunk. E.
Ensurepass.com Easy Test! Easy Pass! C. The frame will be processed as a native VLAN frame. D. The frame will first be tagged, then processed as a native VLAN frame. Correct Answer: C QUESTION 179 By default, which statement is correct when an IEEE 802.1Q trunk port receives an untagged frame? A. The frame is considered in the native VLAN and forwarded to the ports associated with that VLAN. B. The frame is encapsulated and tagged as in the native VLAN. C.
Ensurepass.com Easy Test! Easy Pass! successful. C. A Layer 3 device is needed for the ping command to be successful. D. The ping command will be successful without any further configuration changes. Correct Answer: A QUESTION 181 Refer to the exhibit. VLAN 1 and VLAN 2 are configured on the trunked links between Switch A and Switch B. Port Fa 0/2 on Switch B is currently in a blocking state for both VLANs. What should be done to load balance VLAN traffic between Switch A and Switch B? A. B. C. D.
Ensurepass.com Easy Test! Easy Pass! C. Only router ACLs can be applied to a VLAN interface. D. VLAN maps can be applied to a VLAN interface. E. VLAN maps and router ACLs can be used in combination. Correct Answer: ACE QUESTION 184 Refer to the exhibit. Which statement is true about the show running-config output? A. B. C. D. E. Sw2 is configured for switch-based authentication using RADIUS. Interface FastEthernet0/6 is configured with a SmartPort macro using RADIUS.
Ensurepass.com Easy Test! Easy Pass! Refer to the exhibit. The show port-security interface fa0/1 command was issued on switch SW1. Given the output that was generated, which two security statement are true? (Choose two.) A. Interface FastEthernet 0/1 was configured with the switchport port-security aging command. B. Interface FastEthernet 0/1 was configured with the switchport port-security protect command. C.
Ensurepass.com Easy Test! Easy Pass! D. IP ACLs Correct Answer: C QUESTION 188 What are three possible router states of HSRP routers on a LAN? (Choose three.) A. B. C. D. E. F. standby established active idle backup initial Correct Answer: ACF QUESTION 189 Which statement describes Virtual Router Redundancy Protocol (VRRP)? A. B. C. D. A VRRP group has one master and at least one standby virtual router. A VRRP group has one master and one or more backup virtual routers.
Ensurepass.com Easy Test! Easy Pass! Which three protocols have been developed for IP routing redundancy to protect against first-hop router failure? (Choose three.) A. B. C. D. E. HSRP MSTP ICMP VRRP GLBP Correct Answer: ADE QUESTION 192 Which command will ensure that External_B will be the primary router for traffic using the gateway address of 172.16.15.20? A. B. C. D. On External_B add the command standby 1 priority 80. On External_A add the command standby 1 priority 110.
Ensurepass.com Members Features: 1. 2. 3. 4. Verified Answers researched by industry experts. Q&As are downloadable in PDF and VCE format. 98% success Guarantee and Money Back Guarantee. Free updates for 180 Days. View list of All Exam provided: http://www.ensurepass.com/certfications?index=A To purchase Lifetime Full Access Membership click here: http://www.ensurepass.
