1. Which statement is true about 6to4 tunneling and OSPF?
The neighbor command must be specified within OSPF router configuration mode to establish the tunnel.
The neighbor address must be specified on the tunnel interface.
OSPF will automatically send out its link state database to the destination of the tunnel.
x OSPF cannot be used when establishing a 6to4 tunnel.
The neighbor address must be specified on the tunnel interface.
OSPF will automatically send out its link state database to the destination of the tunnel.
x OSPF cannot be used when establishing a 6to4 tunnel.
2
[Picture X]
Refer to the exhibit. Users on the LAN complained that they cannot access the resources on the network. A network administrator issued the debug ip udp command on R2 to verify the DHCP server operation. On the basis of the provided output, what could be the possible cause of the problem?
x The ip dhcp pool command is missing from the R2 configuration.
The ip helper-address command is missing from the R2 configuration.
The ip dhcp excluded-addresses command is missing from the R2 configuration.
The domain-name command is missing from the R3 configuration.
[Picture X]
Refer to the exhibit. Users on the LAN complained that they cannot access the resources on the network. A network administrator issued the debug ip udp command on R2 to verify the DHCP server operation. On the basis of the provided output, what could be the possible cause of the problem?
x The ip dhcp pool command is missing from the R2 configuration.
The ip helper-address command is missing from the R2 configuration.
The ip dhcp excluded-addresses command is missing from the R2 configuration.
The domain-name command is missing from the R3 configuration.
3
Which three UDP ports are associated with messages that are forwarded by default by a DHCP relay agent? (Choose three.)
x 37
51
x 53
59
x 69
80
Which three UDP ports are associated with messages that are forwarded by default by a DHCP relay agent? (Choose three.)
x 37
51
x 53
59
x 69
80
4
[Picture X]
Refer to the exhibit. R2 is a branch router and accesses all nonlocal networks via R1. The network administrator is troubleshooting why router R2 cannot access any external networks. Based on the output of the commands, what is the likely issue?
The default router for R1 is invalid.
The IPv6 address configured for R1 is invalid.
IPv6 unicast routing has not been enabled on R1.
R2 has not been configured for autoconfiguration.
[Picture X]
Refer to the exhibit. R2 is a branch router and accesses all nonlocal networks via R1. The network administrator is troubleshooting why router R2 cannot access any external networks. Based on the output of the commands, what is the likely issue?
The default router for R1 is invalid.
The IPv6 address configured for R1 is invalid.
IPv6 unicast routing has not been enabled on R1.
R2 has not been configured for autoconfiguration.
5
The network administrator changed the DHCP address pool from 10.10.0.0/16 to 10.20.0.0/16 and is now receiving complaints from users that they are unable to connect to the Internet. The administrator issues the command show ip nat translations on the border router and observes that there are no active translations present. The administrator then verifies that connectivity to the Internet from the border router is present. What should the administrator do next?
Increase the size of the existing NAT pool.
Create a new NAT pool using the 10.20.0.0/16 address space.
Change from dynamic to static NAT for all outbound connections.
x Verify that the ACL is selecting the correct addresses for translation.
The network administrator changed the DHCP address pool from 10.10.0.0/16 to 10.20.0.0/16 and is now receiving complaints from users that they are unable to connect to the Internet. The administrator issues the command show ip nat translations on the border router and observes that there are no active translations present. The administrator then verifies that connectivity to the Internet from the border router is present. What should the administrator do next?
Increase the size of the existing NAT pool.
Create a new NAT pool using the 10.20.0.0/16 address space.
Change from dynamic to static NAT for all outbound connections.
x Verify that the ACL is selecting the correct addresses for translation.
6
[Picture X]
Refer to the exhibit. A network administrator has configured a static NAT entry on router R1 for the internal web server. However, external users still cannot connect to the web server. Which procedure would resolve this problem?
Delete the current static entry and issue the ip nat outside source static 10.0.0.10 209.165.200.226 command.
x Delete the current static entry and issue the ip nat inside source static 10.1.1.10 209.165.200.226 command.
For security reasons, an outside address cannot be mapped to an internal private address and therefore the web server should be configured with a valid public address.
Remove the overload keyword from the ip nat inside source list command.
[Picture X]
Refer to the exhibit. A network administrator has configured a static NAT entry on router R1 for the internal web server. However, external users still cannot connect to the web server. Which procedure would resolve this problem?
Delete the current static entry and issue the ip nat outside source static 10.0.0.10 209.165.200.226 command.
x Delete the current static entry and issue the ip nat inside source static 10.1.1.10 209.165.200.226 command.
For security reasons, an outside address cannot be mapped to an internal private address and therefore the web server should be configured with a valid public address.
Remove the overload keyword from the ip nat inside source list command.
7
[Picture X]
Refer to the exhibit. A network administrator created a static NAT translation. The purpose of the translation is to allow outside users to use the IP address 209.165.201.1 to connect to a server that is located on the internal network at IP address 172.16.6.3. However, users are unable to connect to the server by using the supplied address. What is the most probable cause of the problem?
There is no outside global address specified.
The 172.16.0.0/16 network has not been advertised to the outside world.
Dynamic NAT must be used to allow an outside user to connect to the server.
x The network administrator reversed the addresses in the mapping command.
No access list has been configured to select the traffic that is allowed to connect to the server.
[Picture X]
Refer to the exhibit. A network administrator created a static NAT translation. The purpose of the translation is to allow outside users to use the IP address 209.165.201.1 to connect to a server that is located on the internal network at IP address 172.16.6.3. However, users are unable to connect to the server by using the supplied address. What is the most probable cause of the problem?
There is no outside global address specified.
The 172.16.0.0/16 network has not been advertised to the outside world.
Dynamic NAT must be used to allow an outside user to connect to the server.
x The network administrator reversed the addresses in the mapping command.
No access list has been configured to select the traffic that is allowed to connect to the server.
8
Which statement correctly describes the problem when NAT and IPsec implementation coexist in the network?
NAT changes the encryption keys that are used by IPsec during the key negotiation processes.
x NAT changes the IP header fields, and those changes can conflict with the integrity of IPsec protocols.
NAT changes the source and destination IP addresses that are encapsulated inside the IPsec packets.
NAT changes the TCP and UDP transport protocols that are embedded in the payload of the IPsec packets.
Which statement correctly describes the problem when NAT and IPsec implementation coexist in the network?
NAT changes the encryption keys that are used by IPsec during the key negotiation processes.
x NAT changes the IP header fields, and those changes can conflict with the integrity of IPsec protocols.
NAT changes the source and destination IP addresses that are encapsulated inside the IPsec packets.
NAT changes the TCP and UDP transport protocols that are embedded in the payload of the IPsec packets.
9
[Picture X]
Refer to the exhibit. Users on LAN_1 complained that they cannot communicate with the other users on the network. A network administrator issued show ip dhcp conflict command to verify the DHCP server operation on the router. Based on the provided outputs, what could be done to remedy the problem?
Configure the DHCP pool for a larger scope of IP addresses.
Issue the dhcp services command on router R2.
Issue the ip helper-address command under the Fa0/1 interface.
Configure the IP addresses that must be excluded from the DHCP pool.
[Picture X]
Refer to the exhibit. Users on LAN_1 complained that they cannot communicate with the other users on the network. A network administrator issued show ip dhcp conflict command to verify the DHCP server operation on the router. Based on the provided outputs, what could be done to remedy the problem?
Configure the DHCP pool for a larger scope of IP addresses.
Issue the dhcp services command on router R2.
Issue the ip helper-address command under the Fa0/1 interface.
Configure the IP addresses that must be excluded from the DHCP pool.
10
[Picture X]
Refer to the exhibit. Routers R1 and R2 cannot get DHCP addresses from router R3, which is configured as a DHCP server. After issuing the show ip socket command and troubleshooting the problem, a network administrator verifies that the R1 and R2 interfaces are up and operational. Based on the provided output, what could be the possible cause of the problem?
x The DHCP services are disabled on R3.
The IP helper address is missing from the R3 configuration.
The IP addresses from the DHCP pool have been exhausted.
Illegal addresses have been assigned to the interfaces of routers R1 and R2.
[Picture X]
Refer to the exhibit. Routers R1 and R2 cannot get DHCP addresses from router R3, which is configured as a DHCP server. After issuing the show ip socket command and troubleshooting the problem, a network administrator verifies that the R1 and R2 interfaces are up and operational. Based on the provided output, what could be the possible cause of the problem?
x The DHCP services are disabled on R3.
The IP helper address is missing from the R3 configuration.
The IP addresses from the DHCP pool have been exhausted.
Illegal addresses have been assigned to the interfaces of routers R1 and R2.
11
[Picture X]
Refer to the exhibit. Which two statements are true about DHCP snooping on Switch2? (Choose two.)
DHCP snooping is enabled for interface FastEthernet0/13 and interface FastEthernet0/14.
x DHCP snooping is not enabled for interface FastEthernet0/15 and interface FastEthernet0/16.
x DHCP snooping is configured for VLAN 10.
DHCP snooping is configured for VLAN 2.
Any interface assigned to VLAN 10 could host a DHCP server.
[Picture X]
Refer to the exhibit. Which two statements are true about DHCP snooping on Switch2? (Choose two.)
DHCP snooping is enabled for interface FastEthernet0/13 and interface FastEthernet0/14.
x DHCP snooping is not enabled for interface FastEthernet0/15 and interface FastEthernet0/16.
x DHCP snooping is configured for VLAN 10.
DHCP snooping is configured for VLAN 2.
Any interface assigned to VLAN 10 could host a DHCP server.
12
[Picture X]
Refer to the exhibit. A network administrator has configured NAT on router R1. However, R1 does not translate addresses when hosts from the 10.0.0.0 /24 LAN attempt to access the Internet. Which configuration change would correct this situation?
Append the overload keyword to the ip nat inside source list 1 pool NATPOOL command.
Change the NAT pool to be in the same subnet as the IP address of s0/0/0.
Change the netmask of the NATPOOL to 255.255.255.224.
Enter the no ip nat inside source static 10.0.0.10 209.165.200.226 command.
x Make interface Fa0/0 the inside NAT interface and S0/0/0 the outside NAT interface.
[Picture X]
Refer to the exhibit. A network administrator has configured NAT on router R1. However, R1 does not translate addresses when hosts from the 10.0.0.0 /24 LAN attempt to access the Internet. Which configuration change would correct this situation?
Append the overload keyword to the ip nat inside source list 1 pool NATPOOL command.
Change the NAT pool to be in the same subnet as the IP address of s0/0/0.
Change the netmask of the NATPOOL to 255.255.255.224.
Enter the no ip nat inside source static 10.0.0.10 209.165.200.226 command.
x Make interface Fa0/0 the inside NAT interface and S0/0/0 the outside NAT interface.
13
[Picture X]
Refer to the exhibit. Which statement accurately describes the IPv6 routing configuration?
The command ipv6 route 5432::/48 null0 was entered on the router.
The network 4000::2/128 was learned via a routing protocol.
The command ipv6 route 5000::/64 null0 was entered on the router.
The network 4001::1/128 is unreachable.
[Picture X]
Refer to the exhibit. Which statement accurately describes the IPv6 routing configuration?
The command ipv6 route 5432::/48 null0 was entered on the router.
The network 4000::2/128 was learned via a routing protocol.
The command ipv6 route 5000::/64 null0 was entered on the router.
The network 4001::1/128 is unreachable.
14
[Picture X]
Refer to the exhibit. A network administrator configured an OSPF neighbor to correct a reachability issue in a network that is using OSPF over a 6to4 tunnel. The configuration did not solve the issue, and an error message was displayed. What should the administrator do to correct the problem?
Change the version of OSPF to version 3.
Add the ipv6 ospf network broadcast command to tunnel interface 0.
Configure an OSPF neighbor on R2 that points to the tunnel endpoint of R1.
x Configure static routes on both R1 and R2 to the IPv6 address of the tunnel endpoint of the neighbor.
[Picture X]
Refer to the exhibit. A network administrator configured an OSPF neighbor to correct a reachability issue in a network that is using OSPF over a 6to4 tunnel. The configuration did not solve the issue, and an error message was displayed. What should the administrator do to correct the problem?
Change the version of OSPF to version 3.
Add the ipv6 ospf network broadcast command to tunnel interface 0.
Configure an OSPF neighbor on R2 that points to the tunnel endpoint of R1.
x Configure static routes on both R1 and R2 to the IPv6 address of the tunnel endpoint of the neighbor.
15
[Picture X]
Refer to the exhibit. Users on the LAN complained that they cannot access the Internet. Based on the provided output, what could be the possible cause of the problem?
Too few addresses are assigned to the NAT pool.
The NAT pool is configured with the wrong netmask.
An incorrect ACL is referenced during the NAT translation process.
The configurations for the inside and outside interfaces are reversed.
[Picture X]
Refer to the exhibit. Users on the LAN complained that they cannot access the Internet. Based on the provided output, what could be the possible cause of the problem?
Too few addresses are assigned to the NAT pool.
The NAT pool is configured with the wrong netmask.
An incorrect ACL is referenced during the NAT translation process.
The configurations for the inside and outside interfaces are reversed.
16
[Picture X]
Refer to the exhibit. A network technician is having issues setting up router R4 in a IPv6 network. What problem is indicated from the router output?
x IPv6 routing needs to be enabled.
The interface also requires an IPv4 address.
A routing protocol for IPv6 must be enabled.
IPv4 routes should be redistributed into IPv6.
[Picture X]
Refer to the exhibit. A network technician is having issues setting up router R4 in a IPv6 network. What problem is indicated from the router output?
x IPv6 routing needs to be enabled.
The interface also requires an IPv4 address.
A routing protocol for IPv6 must be enabled.
IPv4 routes should be redistributed into IPv6.
17
What are the three roles a router may assume with respect to DHCP? (Choose three.)
x server
forwarder
x client
remote agent
x relay agent
supplicant
What are the three roles a router may assume with respect to DHCP? (Choose three.)
x server
forwarder
x client
remote agent
x relay agent
supplicant
18
What are two things to be taken into consideration when NAT is configured in the network? (Choose two.)
x the protocols that are used in the network
x the port numbers that are used by the applications
the type of interface that is configured for NAT
the scope of the IP addresses that are configured in the NAT pool
the type of ACLs that are filtering the traffic from source to destination
What are two things to be taken into consideration when NAT is configured in the network? (Choose two.)
x the protocols that are used in the network
x the port numbers that are used by the applications
the type of interface that is configured for NAT
the scope of the IP addresses that are configured in the NAT pool
the type of ACLs that are filtering the traffic from source to destination
19
[Picture X]
Refer to the exhibit. A network administrator has implemented Network Address Translation (NAT) on router R1. However, hosts on the inside LAN cannot connect to addresses outside of the corporate network. Which option correctly identifies the problem?
Interface Fa0/0 should be configured as the outside NAT interface and S0/0/0 as the inside NAT interface.
NAT cannot use named access control lists.
x The ACL is referring to the wrong internal network.
The NAT-POOL should have included the S0/0/0 interface IP address.
The overload keyword has not been appended to the ip nat inside source command.
The static NAT entry IP address is not included in the NAT-POOL.
[Picture X]
Refer to the exhibit. A network administrator has implemented Network Address Translation (NAT) on router R1. However, hosts on the inside LAN cannot connect to addresses outside of the corporate network. Which option correctly identifies the problem?
Interface Fa0/0 should be configured as the outside NAT interface and S0/0/0 as the inside NAT interface.
NAT cannot use named access control lists.
x The ACL is referring to the wrong internal network.
The NAT-POOL should have included the S0/0/0 interface IP address.
The overload keyword has not been appended to the ip nat inside source command.
The static NAT entry IP address is not included in the NAT-POOL.
20
Which IPv6 address is used by OSPFv3 as a next hop?
x the link-local address of the neighbor
the loopback address of the neighbor
the global unicast address of the neighbor
the default gateway of the neighbor
Which IPv6 address is used by OSPFv3 as a next hop?
x the link-local address of the neighbor
the loopback address of the neighbor
the global unicast address of the neighbor
the default gateway of the neighbor
