CCNA 4 Final Exam – Connecting Networks (Version 5.0)
1 Why is it useful categorize networks by size when discussing network design?
Knowing the number of connected devices will define how many additional layers will be added to the three-tier hierarchical network design.
Knowing the number of connected devices will define how many multilayer switches will be necessary at the core layer.
A high-level redundancy at the access layer may be better implemented if the number of connected devices is know.
The complexity of networking infrastructure will vary according to the number of connected devices.*
2 Which two statements are true regarding a PPP connection between two Cisco routers? (Choose two.)
Only a single NCP is allowed between the two routers.
NCP terminates the link when data exchange is complete.
With CHAP authentication, the routers exchange plain text passwords.
LCP tests the quality of the link.*
LCP manages compression on the link.*
NCP terminates the link when data exchange is complete.
With CHAP authentication, the routers exchange plain text passwords.
LCP tests the quality of the link.*
LCP manages compression on the link.*
3 What is a disadvantage of a packet-switched network compared to a circuit-switched network?
fixed capacity
higher latency*
less flexibility
higher cost
higher latency*
less flexibility
higher cost
4 Which statement describes a characteristic of dense wavelength division multiplexing (DWDM)?
it assigns incoming electrical signals to specific frequencies.
it can be used in long-range communications, like connections between ISPs.*
it enables bidirectional communications over one pair of copper cables.
it supports the SONET standard, but not the SDH standard.
it can be used in long-range communications, like connections between ISPs.*
it enables bidirectional communications over one pair of copper cables.
it supports the SONET standard, but not the SDH standard.
5
Refer to the exhibit. A network administrator is troubleshooting the OSPF network. The 10.10.0.0/16 network is not showing up in the routing table of Router1. What is the probable cause of this problem?
The OSPF process is configured incorrectly on Router1.
There is an incorrect wildcard mask statement for network 10.10.0.0/16 on Router2.*
The OSPF process is not running on Router2.
The serial interface on Router2 is down.
There is an incorrect wildcard mask statement for network 10.10.0.0/16 on Router2.*
The OSPF process is not running on Router2.
The serial interface on Router2 is down.
6 The security policy in a company specifies that the staff in the sales department must use a VPN to connect to the corporate network to access the sales data when they travel to meet customers. What component is needed by the sales staff to establish a remote VPN connection?
VPN appliance
VPN concentrator
VPN client software*
VPN gateway
VPN concentrator
VPN client software*
VPN gateway
7 A network administrator is troubleshooting the dynamic NAT that is configured on router R2. Which command can the administrator use to see the total number of active NAT translations and the number of addresses that are allocated from the NAT pool?
R2# show ip nat translations
R2# clear ip nat translation
R2# show running-config
R2# show ip nat statistics*
R2# clear ip nat translation
R2# show running-config
R2# show ip nat statistics*
8 Which three parts of a Frame Relay Layer 2 PDU are used for congestion control? (Choose three.)
the FECN bit*
the BECN bit*
the C/R bit
the 10-bit DLCI
the Extended Address field
the DE bit*
the BECN bit*
the C/R bit
the 10-bit DLCI
the Extended Address field
the DE bit*
9 Which two statements correctly describe asymmetric encryption used with an IPsec VPN? (Choose two.)
The same encryption keys must be manually configured on each device.
Public key encryption is a type of asymmetric encryption.*
Encryption and decryption use a different key.*
A shared secret key is used to perform encryption and descryption.
AES is an example of an asymmetric encryption protocol.
Public key encryption is a type of asymmetric encryption.*
Encryption and decryption use a different key.*
A shared secret key is used to perform encryption and descryption.
AES is an example of an asymmetric encryption protocol.
10 Which WAN technology can serve as the underlying network to carry multiple types of network traffic such as IP, ATM, Ethernet, and DSL?
MPLS*
ISDN
Ethernet WAN
Frame Relay
ISDN
Ethernet WAN
Frame Relay
11 Drag and droop
Place the options in the following order:
PAP Characteristics
uses two-way handshake
single challenge
weak authentication
clear text passwords
PAP Characteristics
uses two-way handshake
single challenge
weak authentication
clear text passwords
CHAP Characteristics
uses three-way handshake
repeated challenges
strong authentication
encrypted passwords
uses three-way handshake
repeated challenges
strong authentication
encrypted passwords
12 Which command can be used to check the information about congestion on a Frame Relay link?
show frame-relay lmi
show interfaces
show frame-relay pvc*
show frame-relay map
show interfaces
show frame-relay pvc*
show frame-relay map
13 Which two statements describe remote access VPNs? (Choose two.)
Client software is usually required to be able to access the network.*
Remote access VPNs are used to connect entire networks, such as a branch office to headquarters.
Remote access VPNs support the needs of telecommuters and mobile users.*
A leased line is required to implement remote access VPNs.
End users are not aware that VPNs exists.
Remote access VPNs are used to connect entire networks, such as a branch office to headquarters.
Remote access VPNs support the needs of telecommuters and mobile users.*
A leased line is required to implement remote access VPNs.
End users are not aware that VPNs exists.
14
Refer to the exhibit. Which three steps are required to configure Multilik PPP on the HQ router? (Choose three.)
Bind the multilink bundle to the Fast Ethernet interface.
Enable PPP encapsulation on the multilink interface.
Assign the serial interfaces to the multilink bundle.*
Create and configure the multilink interface.*
Assign the Fast Ethernet interface to the multilink bundle
Enable PPP encapsulation on the serial interfaces.*
Enable PPP encapsulation on the multilink interface.
Assign the serial interfaces to the multilink bundle.*
Create and configure the multilink interface.*
Assign the Fast Ethernet interface to the multilink bundle
Enable PPP encapsulation on the serial interfaces.*
15 What are two examples of network problems that are found at the data link layer? (Choose two.)
incorrect interface clock rates
late collisions and jabber
framing errors*
electromagnetic interface
encapsulation errors*
late collisions and jabber
framing errors*
electromagnetic interface
encapsulation errors*
16 What is the protocol that provides ISPs the ability to send PPP frames over DSL networks?
CHAP
ADSL
PPPoE*
LTE
ADSL
PPPoE*
LTE
17 What is required for a host to use an SSL VPN to connect to a remote network device?
The host must be connected to wired network.
A site-to-site VPN must be preconfigured.
A web browser must be installed on the host.*
VPN client software must be installed.
A site-to-site VPN must be preconfigured.
A web browser must be installed on the host.*
VPN client software must be installed.
18
Refer to the exhibit. A network administrator has implemented the configuration in the displayed output. What is missing from the configuration that would be preventing OSPF routing updates from passing to the Frame Relay service provider?
The command to disable split horizon has not been issued.
The passive-interface command has not been issued on interface serial 0/1/0
The directly connected neighbor should have been identified by using static mapping.
The broadcast keyword has not been issued.*
The passive-interface command has not been issued on interface serial 0/1/0
The directly connected neighbor should have been identified by using static mapping.
The broadcast keyword has not been issued.*
19
Refer to the exhibit. An administrator is configuring NAT to provide Internet access to the inside network. After the configurtation is completed, users are unable to access the internet. What is the cause of the problem?
The inside and outside interfaces are backwards.
The ACL is referencing the wrong network address.
The NAT inside source command is referring to the wrong ACL.*
The NAT pool is using an invalid address range.
The ACL is referencing the wrong network address.
The NAT inside source command is referring to the wrong ACL.*
The NAT pool is using an invalid address range.
20 A company connects to one ISP via multiple connections. What is the name given to this type of connection?
multihomed
single-homed
dual-multihomed
dual-homed*
single-homed
dual-multihomed
dual-homed*
21
Refer to the exhibit. On the basis of the output, which two statements about network connectivity are correct? (Choose two.)
There is connectivity between this device and the device at 192.168.100.1.*
The average transmission time between the two hosts is 2 miliseconds.
This host does not have a default gateway configured.
The connectivity between these two hosts allows for videoconferencing calls.
There are 4 hops between this device and the device at 192.168.100.1.*
The average transmission time between the two hosts is 2 miliseconds.
This host does not have a default gateway configured.
The connectivity between these two hosts allows for videoconferencing calls.
There are 4 hops between this device and the device at 192.168.100.1.*
22 A network administrator is configuring a PPP link with the commands:
R1(config-if)# encapsulation ppp
R1(config-if)# ppp quality 70
R1(config-if)# encapsulation ppp
R1(config-if)# ppp quality 70
What is the effect of these commands?
The NCP will send a message to the sending device if the link usage reaches 70 percent.
The PPP link will be closed down if the link quality drops below 70 percent.*
The LCP establishment phase will not start until the bandwidth reaches 70 percent or more.
The PPP link will not be established if more than 30 percent of options cannot be accepted.
The PPP link will be closed down if the link quality drops below 70 percent.*
The LCP establishment phase will not start until the bandwidth reaches 70 percent or more.
The PPP link will not be established if more than 30 percent of options cannot be accepted.
23 Which IEEE standard defines the WiMax technology?
802.5
802.11
802.16*
802.3
802.11
802.16*
802.3
24 Which three flows associated with consumer applications are supported by NetFlow collectors? (Choose three.)
accounting*
network monitoring*
error correction
bandwidth regulation
quality of service
billing*
network monitoring*
error correction
bandwidth regulation
quality of service
billing*
25
Refer to the exhibit. What kind of NAT is being configured on R1?
NAT overload
dynamic NAT
port forwarding*
PAT
dynamic NAT
port forwarding*
PAT
26
Place the options in the following order:
Outside global
- not scored -
Outside local
Inside global
- not scored -
Inside local
27 What is the default location for Cisco routers and switches to send critical logging events?
syslog server
virtual terminal
console port*
auxiliary port
virtual terminal
console port*
auxiliary port
28 In the data gathering process, which type of device will listen for traffic, but only gather traffic statistics?
SNMP agent
NetFlow collector*
syslog server
NMS
NetFlow collector*
syslog server
NMS
29 What is a characteristic of Frame Relay that allows customer data transmissions to dynamically “burst” over their CIR for short periods of time?
The combination of LMI status messages and Inverse ARP messages enables the CIR to be exceeded.
The physical circuits of the Frame Relay network are shared between subscribers and there may be times when unused bandwidth is available.*
BECN and FECN messages notify the router that the CIR can be exceeded.
Bursting is enabled by the configuration of multiple subinterfaces on one physical interface.
The physical circuits of the Frame Relay network are shared between subscribers and there may be times when unused bandwidth is available.*
BECN and FECN messages notify the router that the CIR can be exceeded.
Bursting is enabled by the configuration of multiple subinterfaces on one physical interface.
30 Which SNMP message type informs the network management system (NMS) immediately of certain specified events?
GET response
SET request
GET request
Trap*
SET request
GET request
Trap*
31 Which statement is a characteristic of SNMP MIBs?
The SNMP agent uses the SNMP manager to access information within the MIB.
The MIB structure for a given device includes only variables that are specific to that device or vendor.
The MIB organizes variables in a flat manner.
The NMS must have access to the MIB in order for SNMP to operate properly.*
The MIB structure for a given device includes only variables that are specific to that device or vendor.
The MIB organizes variables in a flat manner.
The NMS must have access to the MIB in order for SNMP to operate properly.*
32 What benefit does NAT64 provide?
It allows sites to connect IPv6 hosts to an IPv4 network by translating the IPv6 addresses to IPv4 addresses.*
It allows sites to connect multiple IPv4 hosts to the Internet via the use of a single public IPv4 address.
It allows sites to use private IPv4 addresses, and thus hides the internal addressing structure form hosts on public IPv4 networks.
It allows sites to use private IPv6 addresses and translates them to global IPv6 addresses.
It allows sites to connect multiple IPv4 hosts to the Internet via the use of a single public IPv4 address.
It allows sites to use private IPv4 addresses, and thus hides the internal addressing structure form hosts on public IPv4 networks.
It allows sites to use private IPv6 addresses and translates them to global IPv6 addresses.
33 What is the expected behavior of an ADSL service?
The user can select the upload and download rates based on need.
The download and upload rates are the same.
The upload rate is faster than the download rate.
The download rate is faster than the upload rate.*
The download and upload rates are the same.
The upload rate is faster than the download rate.
The download rate is faster than the upload rate.*
34 The DLCI number assigned to a Frame Relay circuit is to be manually added on a point-to-point link. Which three subinterface commands could be used to complete the configuration? (Choose three.)
frame-relay map ip ip-address dlci
frame-relay map ip ip-address dlci broadcast
no shutdown
ip address ip-address mask*
encapsulation farme-relay
bandwidth kilobits*
frame-relay interface dlci dlci*
frame-relay map ip ip-address dlci broadcast
no shutdown
ip address ip-address mask*
encapsulation farme-relay
bandwidth kilobits*
frame-relay interface dlci dlci*
35 A group of Windows PCs in a new subnet has been added to an Ethernet network. When testing the connectivity, a technician finds that these PCs can access local network resources but not the Internet resources. To troubleshoot the problem, the technician wants to initially confirm the IP address and DNS configurations on the PCs, and also verify connectivity to the local router. Which three Windows CLI commands and utilities will provide the necesary information? (Choose three.)
tracert
telnet
ping*
netsh interface ipv6 show neighbor
nslookup*
arp -a
ipconfig*
telnet
ping*
netsh interface ipv6 show neighbor
nslookup*
arp -a
ipconfig*
36
Refer to the exhibit. Router R1 was configured by a network administrator to use SNMP version 2. The following commands were issued:
R1(config)# snmp-server community batonaug ro SNMP_ACL
R1(config)# snmp-server contact Wayne World
R1(config)# snmp-server host 192.168.1.3 version 2c batonaug
R1(config)# ip access-list standard SNMP_ACL
R1(config-std-nacl)# permit 192.168.10.3
R1(config)# snmp-server contact Wayne World
R1(config)# snmp-server host 192.168.1.3 version 2c batonaug
R1(config)# ip access-list standard SNMP_ACL
R1(config-std-nacl)# permit 192.168.10.3
Why is the administrator not able to get any information from R1?
The snmp-server community command needs to include the rw keyword.
The snmp-server location command is missing.
There is a problem with the ACL configuration.*
The snmp-server enable traps command is missing.
The snmp-server location command is missing.
There is a problem with the ACL configuration.*
The snmp-server enable traps command is missing.
37 Which broadband technology would be best for a small office that requires fast upstream connections?
DSL
Cable
fiber-to-the-home*
WiMax
Cable
fiber-to-the-home*
WiMax
38
Refer to the exhibit. The inside local IP address of PC-A is 192.168.0.200. What will be the inside global address of packets from PC-A after they are translated by R1?
192.168.0.1
172.16.0.1
209.165.200.225*
10.0.0.1
192.168.0.200
172.16.0.1
209.165.200.225*
10.0.0.1
192.168.0.200
39 What is a type of VPN that is generally transparent to the end user?
remote access
public
site-to-site*
private
public
site-to-site*
private
40 Which two statements about DSL are true? (Choose two.)
user connections are aggregated at a DSLAM located at the CO*
uses RF signal transmission
users are on a shared medium
local loop can be up to 3.5 miles (5.5km)*
physical and data link layers are defined by DOCSIS
uses RF signal transmission
users are on a shared medium
local loop can be up to 3.5 miles (5.5km)*
physical and data link layers are defined by DOCSIS
41
Refer to the exhibit. Which three events will occur as a result of the configuration shown on R1? (Choose three.)
Only traffic that originates from the GigabitEthernet 0/1 interface will be monitored.*
Messages that are sent to the syslog server will be limited to levels 3 or lower.*
Messages that are sent to the syslog server will use 192.168.1.5 as the destination IP address.*
The syslog messages will contain the IP address the GigabitEthernet 0/1 interface.
Messages that are sent to the syslog server will be limited to levels 3 and higher.
For multiple occurrences of the same error, only the first three messages will be sent to the server.
Messages that are sent to the syslog server will be limited to levels 3 or lower.*
Messages that are sent to the syslog server will use 192.168.1.5 as the destination IP address.*
The syslog messages will contain the IP address the GigabitEthernet 0/1 interface.
Messages that are sent to the syslog server will be limited to levels 3 and higher.
For multiple occurrences of the same error, only the first three messages will be sent to the server.
42 Which two characteristics describe time-division multiplexing? (Choose two.)
Traffic is allocated bandwidth across a single wire based on preassigned time slots.*
Bandwidth is allocated to channels based on whether a station has data to transmit.
Encoding technology provides high data throughput in a minimum RF spectrum by supporting parallel data transmission.
Data capacity across a single link increases as bits from multiple sources are transmitted using interleaved slices of time.*
Depending on the configured layer 2 protocol, data is transmitted across two or more channels via the use of time slots.
Bandwidth is allocated to channels based on whether a station has data to transmit.
Encoding technology provides high data throughput in a minimum RF spectrum by supporting parallel data transmission.
Data capacity across a single link increases as bits from multiple sources are transmitted using interleaved slices of time.*
Depending on the configured layer 2 protocol, data is transmitted across two or more channels via the use of time slots.
43 Which two specialized troubleshooting tools can monitor the amount of traffic that passes through a switch? (Choose two.)
TDR
DTX cable analyzer
NAM*
digital multimeter
portable network analyzer*
DTX cable analyzer
NAM*
digital multimeter
portable network analyzer*
44 Which circumstance would result in an enterprise deciding to implement a corporate WAN?
when its employees become distributed across many branch locations*
when the enterprise decides to secure its corporate LAN
when the network will span multiple buildings
when the number of employees exceeds the capacity of the LAN
when the enterprise decides to secure its corporate LAN
when the network will span multiple buildings
when the number of employees exceeds the capacity of the LAN
45 Which algorithm is considered insecure for use in IPsec encryption?
RSA
3DES*
SHA-1
AES
3DES*
SHA-1
AES
46 What is one advantage to designing networks in bulding block fashion for large companies?
fewer required physical resources
increased network access time
coarse security control
failure isolation*
increased network access time
coarse security control
failure isolation*
47 Which two technologies are implemented by organizations to support teleworker remote connections? (Choose two.)
CMTS
VPN*
CDMA
IPsec*
DOCSIS
VPN*
CDMA
IPsec*
DOCSIS
48 A branch office uses a leased line to connect to the corporate network. The lead network engineer confirms connectivity between users in the branch office, but none of the users can access corporate headquarters. System logs indicate that nothing has changed in the branch office network. What should the engineer consider next to resolve this network outage?
The network technician for the branch office should troubleshoot the switched infrastructure.
The server administrator in the branch office should reconfigured the DHCP server.
The service provider for the branch office should troubleshoot the issue starting from the point of demarcation.*
The system administartor in the branch office should reconfigure the default gateway on the user PCs.
The server administrator in the branch office should reconfigured the DHCP server.
The service provider for the branch office should troubleshoot the issue starting from the point of demarcation.*
The system administartor in the branch office should reconfigure the default gateway on the user PCs.
49
Refer to the exhibit. Which IP address is configured on the physical interface of the CORP router?
10.1.1.1
209.165.202.134
10.1.1.2
209.165.202.133*
209.165.202.134
10.1.1.2
209.165.202.133*
50 How many 64 kb/s voice channels are combined to produce a T1 line?
8
32
24*
16
32
24*
16
51 Which network module maintains the resources that employees, partners, and customers rely on to effectively create, colaborate, and interact with information?
services
access-distribution
data-center*
enterprise edge
access-distribution
data-center*
enterprise edge
52 Which broadband solution is appropriate for a home user who needs a wired connection not limited by distance?
ADSL
cable*
DSL
WiMax
cable*
DSL
WiMax
53 A network administrator is asked to design a system to allow simultaneous access to the Internet for 250 users. The ISP can only supply five public IP addresses for this network. What technology can the administrator use to accomplish this task?
classless interdomain routing
variable length subnet masks
classful subnetting
port-based Network Address Translation*
variable length subnet masks
classful subnetting
port-based Network Address Translation*
54 What is the purpose of a message hash in a VPN connection?
It ensures that the data is coming from the correct source.
It ensures that the data cannot be duplicated and replayed to the destination.
It ensures that the data has not changed while in transit.*
It ensures that the data cannot be read in plain text.
It ensures that the data cannot be duplicated and replayed to the destination.
It ensures that the data has not changed while in transit.*
It ensures that the data cannot be read in plain text.
55 Which type of traffic would most likely have problems when passing through a NAT device?
DNS
Telnet
HTTP
ICMP
IPsec*
Telnet
HTTP
ICMP
IPsec*
56 Users are reporting longer delays in authentication and in accessing network resources during certain time periods of the week. What kind of information should network engineers check to find out if this situation is part of a normal network behavior?
network configuration files
syslog records and messages
debug output and packet captures
the network performance baseline*
syslog records and messages
debug output and packet captures
the network performance baseline*
57 What are three benefits of using Frame Relay for WAN connectivity? (Choose three.)
mature technology*
QoS support using the IP precedence field
integrated encryption
one physical interface that can be used for several circuits*
reasonable cost*
seamless direct connectivity to an Ethernet LAN
QoS support using the IP precedence field
integrated encryption
one physical interface that can be used for several circuits*
reasonable cost*
seamless direct connectivity to an Ethernet LAN
58 What type of information is collected by Cisco NetFlow?
interface errors
traffic statistics*
memory usage
CPU usage
traffic statistics*
memory usage
CPU usage
59 Which technology requires the use of PPPoE to provide PPP connections to customers?
dialup ISDN modem
T1
DSL*
dialup analog modem
T1
DSL*
dialup analog modem
60 Under which two categories of WAN connections does Frame Relay fit? (Choose two.)
packet-switched*
private infrastructure*
public infrastructure
Internet
dedicated
private infrastructure*
public infrastructure
Internet
dedicated
61 What are three characteristics of the generic routing encapsulation (GRE) protocol? (Choose three.)
GRE tunnels support multicast traffic.*
GRE creates additional overload for packets that are traveling through the VPN.*
GRE uses AES for encryption unless otherwise specified
By default, GRE does not include any flow control mechanisms.*
Developed by the IETF, GRE is a secure tunneling protocol that was designed for Cisco routers.
GRE provides encapsulation for a single protocol type that is traveling through the VPN.
GRE creates additional overload for packets that are traveling through the VPN.*
GRE uses AES for encryption unless otherwise specified
By default, GRE does not include any flow control mechanisms.*
Developed by the IETF, GRE is a secure tunneling protocol that was designed for Cisco routers.
GRE provides encapsulation for a single protocol type that is traveling through the VPN.
62 An intercity bus company wants to offer constat Internet connectivity to the users traveling on the buses. Which two types of WAN infrastructure would meet the requirements? (Choose two.)
cellular*
dedicated
private infrastructure
circuit-switched
public infrastructure*
dedicated
private infrastructure
circuit-switched
public infrastructure*
63 What is used as the default event logging destination for Cisco routers and switches?
syslog server
terminal line
workstation
console line*
terminal line
workstation
console line*
