Which three guidelines would help contribute to creating a strong password policy? (Choose three.

)
Deliberately misspell words when creating passwords.
Create passwords that are at least 8 characters in length.
Use combinations of upper case, lower case, and special characters

Which option correctly defines the capacity through the local loop guaranteed to a customer by the service
provider?
CIR

Which data link layer encapsulation protocol is used by default for serial connections between two Cisco
routers?
HDLC

Compared with IDS systems, what can IPS systems do to provide further protection of computer systems?
stop the detected attack from executing

Which IEEE 802.16 broadband wireless technology allows users to connect to the ISP at speeds comparable to
DSL and cable?
WiMAX

A network administrator has changed the VLAN configurations on his network switches over the past weekend.
How can the administrator determine if the additions and changes improved performance and availability on the
company intranet?
Conduct a performance test and compare with the baseline that was established previously.

Which type of ACL will permit traffic inbound into a private network only if an outbound session has already
been established between the source and destination?
reflexive

Which two statements are true about IPv6 link local addresses?
They begin with the 2000::/3 prefix.
They are assigned by IANA to an organization.

A company is looking for a WAN solution to connect its headquarters site to four remote sites. What are two
advantages that dedicated leased lines provide compared to a shared Frame Relay solution? (Choose two.)
reduced jitter
reduced latency

What are two effective measures for securing routers?

Protect all active router interfaces by configuring them as passive interfaces.
Configure remote administration through VTY lines for Telnet access.

An issue of response time has recently arisen on an application server. The new release of a software package
has also been installed on the server. The configuration of the network has changed recently. To identify the
problem, individuals from both teams responsible for the recent changes begin to investigate the source of the
problem. Which statement applies to this situation?
It will be difficult to isolate the problem if two teams are implementing changes independently.

What is tunneling?
encapsulating an entire packet within another packet for transmission over a network

What functionality do access control lists provide in the implementation of dynamic NAT on a Cisco router?
define which addresses can be translated
Which technology is used to dynamically map next hop, network layer addresses to virtual circuits in a Frame
Relay network?
Inverse ARP

An administrator learns of an e-mail that has been received by a number of users in the company. This e-mail
appears to come from the office of the administrator. The e-mail asks the users to confirm their account and
password information. Which type of security threat does this e-mail represent?
phishing

What is the result of adding the global command service password-encryption to the configuration of a router?
All services must provide an encrypted password to function.

While troubleshooting a problem with an e-mail server, an administrator observes that the switch port used by
the server shows "up, line protocol up". The administrator cannot ping the server. At which layer of the OSI
model is the problem most likely to be found?
network layer

Where does a service provider assume responsibility from a customer for a WAN connection?
demaration point

What will be the result of adding the command ip dhcp excluded-address 192.168.24.1 192.168.24.5 to the
configuration of a local router that has been configured as a DHCP server?
The DHCP server will not issue the addresses ranging from 192.168.24.1 to 192.168.24.5

Which statement is true about PAP in the authentication of a PPP session?

PAP uses a two-way handshake.

An administrator is configuring a dual stack router with IPv6 and IPv4 using RIPng. The administrator receives
an error message when trying to enter the IPv4 routes into RIPng. What is the cause of the problem?
IPv4 is incompatible with RIPng.

Which statement is true about NCP?

Each network protocol has a corresponding NCP.

Which Frame Relay flow control mechanism is used to signal routers that they should reduce the flow rate of
frames?
FECN

A network administrator is instructing a technician on best practices for applying ACLs. Which suggestion
should the administrator provide?
Extended ACLs should be applied closest to the source that is specified by the ACL.

Which three physical network problems should be checked when a bottom-up troubleshooting approach has
been chosen to troubleshoot network performance? (Choose three.)
cable connectivity
high CPU utilization rates
high collision counts

When would the multipoint keyword be used in Frame Relay PVCs configuration?
when participating routers are in the same subnet

When NAT is in use, what is used to determine the addresses that can be translated on a Cisco router
access control lost
When Frame Relay encapsulation is used, what feature provides flow control and exchanges information about
the status of virtual circuits?
LMI

Which IP address and wildcard mask would be used in an ACL to block traffic from all hosts on the same subnet
as host 192.168.16.43/28?
access-list 10 deny 192.168.16.43 0.0.0.16

Which combination of Layer 2 protocol and authentication should be used to establish a link without sending
authentication information in plain text between a Cisco and a non-Cisco router?
PPP with CHAP

A network technician analyzes the network and notices late collisions. The collisions occur accompanied by
jabber that originates from the server. What is the likely cause of the problem?
web server CPU overload

A network administrator is tasked with maintaining two remote locations in the same city. Both locations use the
same service provider and have the same service plan for DSL service. When comparing download rates, it is
noticed that the location on the East side of town has a faster download rate than the location on the West side of
town. How can this be explained?
The service provider is closer to the location on the East side.

Which three statements accurately describe attributes of a security policy?

It creates a basis for legal action if necessary.
It defines a process for managing security violations.
It defines acceptable and unacceptable use of network resources.

Where does a service provider assume responsibility from a customer for a WAN connection?
demarcation point

A network administrator is instructing a technician on best practices for applying ACLs. Which suggestion
should the administrator provide?
Extended ACLS should be applied closest to the source that is specified by the ACL

Which two statements are true about creating and applying access lists?
There is an implicit deny at the end of all access lists
One access list per port, per protocol, per direction is permitted

What are two effective measures for securing routers?

Use quotes or phrases to create a pass phrase
disable the HTTP server service

While troubleshooting a problem with an e-mail server, an administrator observes that the switch port used by
the server shows "up, line protocol up". The administrator cannot ping the server. At which layer of the OSI
model is the problem most likely to be found
Network layer

While configuring a Frame Relay connection, when should a static Frame Relay map be used?
broadcast traffic and multicast traffic over the PVC must be controlled

What are two LCP options that can be configured for PPP?
CHAP
stacker
Which encapsulation protocol when deployed on a Cisco router over a serial interface is only compatible with
another Cisco router?
HDLC

When configuring a Frame Relay connection, what is the purpose of Inverse ARP?
to create a mapping of DLCI to Layer 3 addresses that belong to remote peers

Because of a remote-procedure call failure, a user is unable to access an NFS server. At what layer of the TCP/I
model does this problem occur?
application layer

What are two main components of data confidentiality?

Encapsulation
Encryption

Which statement is true about wildcard masks?

Ip address bits that must be checked are identified by a "0" in the wildcard mask

A technician is editing and reapplying ACL 115 to a router, what is the result of adding the commandaccess-l i
s115 permit tcp any 172.16.0.0 0.0.255.255 established to the ACL when it is reapplied to the router?
Responses to traffic that originates from the 172.16.0.0/16 network are allowed

What are the symptoms when the s0/0/0 interface on a router is attached to an operational CSU/DSU that is
generating a clock signal, but the far end router on the point-to-point link has not been activated?
show controllers indicates cable type DTE V.35.show interfaces s0/0/0 indicates serial up,line protocol down

What are two major characteristics of a worm?

exploits known vulnerabilities
copies itself to the host and selects new targets

A system administrator must provide Internet connectivity for ten hosts in a small remote office. The ISP has
assigned two public IP addresses to this remote office. How can the system administrator configure the router to
provide Internet access to all ten users at the same time?
Configure dynamic NAT with overload

What is the result when the command permit tcp 192.168.4.0 0.0.3.255 any eq 23 is entered in a named access
control list and applied on the inbound interface of a router?
Telnet traffic originating from 192.168.4.0/22 is permitted OUT

An administrator is configuring a dual stack router with IPv6 and IPv4 using RIPng. The administrator receives
an error message when trying to enter the IPv4 routes into RIPng. What is the problem?
IPv4 is incompatible with RIPng

Which two functions are provided by the Local Management Interface (LMI) that is used in Frame Relay
networks?
simple flow control
exchange of info about the status of virtual circuits

What can a network administrator do to recover from a lost router password?

boot the router to ROM monitor mode and config the router to ignore the startup confi when it initializes

Which variable is permitted or denied by a standard access control list?

source IP address
What will be the result of adding the command ip dhcp excluded-address 192.168.24.1 192.168.24.5 to the
configuration of a local router that has been configured as a DHCP server?
The DHCP server will not issue the addresses ranging from 192.168.24.1 to 192.168.24.5

Which combination of authentication and Layer 2 protocol should be used to establish a link between a Cisco
and a non-Cisco router without sending authentication information in plain text?
CHAP and PPP

Refer to the exhibit. Every time the administrator reboots this router, the boot process ends in setup mode. What
is a possible problem?
The configuration register is set to ignore the startup configuration.

A host connected to Fa0/0 is unable to acquire an IP address from the DHCP server. The output of the debug ip
dhcp server command shows "DHCPD: there is no address pool for 10.1.1.1". What is the problem?
The pool of addresses for the 10Network pool is incorrect.

Refer to the exhibit. What is the meaning of the term dynamic in the output of the command?
The Serial0/0/1 interface acquired 172.16.3.1 from a DHCP server.

Which statement correctly describes how Router1 processes an FTP request that enters interface s0/0/0 and is
destined for an FTP server at IP address 192.168.1.5?
The router matches the incoming packet to the statement that was created by the access-list 101 permit ip any
192.168.1.0 0.0.0.255 command and allows the packet into the router.

Refer to the exhibit. A network administrator is trying to connect R1 remotely to make configuration changes.
Based on the exhibited command output, what will be the result when attempting to connect to R1?
a successful connection and ability to make configuration changes
Refer to the exhibit. A network administrator is creating a prototype to verify the new WAN design. However,
the communication between the two routers cannot be established. Based on the output of the commands, what
can be done to solve the problem? Configure RA with a clock rate command.

Refer to the exhibit. From the output of the show interfaces and ping commands, at which layer of the OSI
model is a fault indicated?
Network
Refer to the exhibit. Which data transmission technology is being represented?
TDM

Refer to the exhibit. R1 is performing NAT overload for the 10.1.1.0/24 inside network. Host A has sent a packet
to the web server. What is the destination IP address of the return packet from the web server?
172.30.20.1:3333

Refer to the exhibit. All devices are configured as shown in the exhibit. PC1 is unable to ping the default
gateway. What is the cause of the problem?
Port Fa0/2 on S2 is assigned to the wrong VLAN.
Refer to the exhibit. A network administrator is attempting to configure a Frame Relay network. The
administrator enters the commands as shown in the exhibit on R2, but the Frame Relay PVCs are inactive. What
is the problem?
The incorrect DLCI numbers are being configured on R2.

Headquarters is connected through the Internet to branch office A and branch office B. Which WAN technology
would be best suited to provide secure connectivity between headquarters and both branch offices? VPN
Refer to the exhibit. This serial interface is not functioning correctly. Based on the output shown, what is the
most likely cause?
PPP negotiation failure

Refer to the exhibit. RIPv2 has been configured on all routers in the network. Routers R1 and R3 have
not received any RIP routing updates. What will fix the issue?
Enable RIP authentication on R2.
the corporate network that is shown has been assigned network 172.16.128.0/19 for use at branch office LANs.
If VLSM is used, what mask should be used for addressing hosts at Branch4 with minimal waste from unused
addresses? /22
Refer to the exhibit. Partial results of the show access-lists and show ip interface FastEthernet 0/1 commands for
router Router1 are shown. There are no other ACLs in effect. Host A is unable to telnet to host B. Which action
will correct the problem but still restrict other traffic between the two networks?
Reverse the order of the TCP protocol statements in the ACL

Refer to the exhibit. Results of the show vlan and show vtp status commands for switches S1 and S2 are
displayed in the exhibit. VLAN 11 was created on S1. Why is VLAN 11 missing from S2?

The VTP domain names do not match.

Refer to the exhibit. A network administrator is trying to configure a router to use SDM. After this configuratio
shown in the exhibit is applied, the SDM interface of the router is still not accessible. What is the cause of the
problem?
The username and password are not configured correctly.

Refer to the exhibit. Which DHCP requests will R1 answer?

requests that are received on the FastEthernet 0/0 interface

A network administrator is trying to backup the IOS software on R1 to the TFTP server. H
receives the error message that is shown in the exhibit, and cannot ping the TFTP server from R1. What is an
action that can help to isolate this problem?
Check that R1 has a route to the network where the TFTP server resides.

A network administrator has issued the commands that are shown on Router1 and Router2.
A later review of the routing tables reveals that neither router is learning the LAN network of the neighbor
router. What is most likely the problem with the RIPng configuration?
The RIPng process is not enabled on interfaces.

Refer to the exhibit. Which statement is true about the CSU/DSU device?
It provides termination for the digital signal and ensures connection integrity through error correction and line
monitoring
An ACL called Managers already exists on this router. What happens if the network administrator issues the
commands as shown in the exhibit? The existing ACL is modified to include the new command.
Which statement correctly describes how Router1 processes an FTP request that enters interface s0/0/0 and is
destined for an FTP server at IP address 192.168.1.5?
The router is tested for potential security problems and any necessary changes are made
A technician issues the show interface s0/0/0 command on R1 while troubleshooting a
network problem. What two conclusions can be determined by from the output shown? (Choose two.)
The bandwidth has been set to the value of a T1 line
There is no failure indicated in an OSI Layer 1 or Layer 2
Refer to the exhibit. Why are the routers unable to establish a PPP session?
The usernames are misconfigured.
Refer to the exhibit. A host connected to Fa0/0 is unable to acquire an IP address from this DHCP server. The
output of the debug ip dhcp server command shows "DHCPD: there is no address pool for 192.168.1.1". Wha is
the problem?
The pool of addresses for the 192Network pool is incorrect.

Refer to the exhibit. Company ABC expanded its business and recently opened a new branch office in another
country.IPv6 addresses have been used for the company network.The data servers Server1 and Server2 run
applications which require end-to-end functionality, with unmodified packets that are forwarded from the source
to the destination.The edge routers R1 and R2 support dual stack configuration. What solution should be
deployed at the edge of the company network in order to successfully interconnect both offices?
a manually configured IPv6 between the edge routers R1 and R2

The network administrator creates a standard access control list on Router1 to prohibit traffic from the
172.16.1.0/24 network from reaching the 172.16.2.0/24 network while still permitting Internet access for all
networks. On which router interface and in which direction should it be applied? interface Fa0/1, Outbound