CCNP Practice Test | IP Switched Networks (SWITCH)

Which command is used to verify the IP Source Guard configuration on a switch?

A. SW# show ip arp

B. SW# show ip verify source

C. SW# show monitor

D. SW# show ip dhcp snooping

Which of the following factor is used to determine which port becomes the Root port in a parallel link topology?

A. Upstream cost path

B. Downstream Port ID

C. Upstream Port ID

D. Downstream Bridge ID

Which code is used to set the RSPAN?

A. #remote-span

B. #set remote span

C. #set span remote

D. #set remote-span

Which is not a function of the internal spanning-tree instance?

A. Increases the amount of BPDUs sent

B. Sends information about MST instances

C. Is the only instance sending BPDUs

D. It is used to send M-Records

What is the default time set for the max age timer?

A. 20 seconds

B. 15 seconds

C. 2 seconds

D. 17 seconds

Which of the following is a feature of the IP Source Guard?

A. Confirms URL source addresses

B. Verifies destination IP addresses

C. It is configured on trusted ports

D. Matches IP addresses to ports

Which statements describe the elements of GLBP operation? (Choose three)

A. For each GLBP forwarder configured, an additional MAC address is used

B. The AVG responds to all ARP requests using a round-robin load-balancing

C. As soon as you enable a GLBP group, that group is operating so customization should be configured prior to enabling the group

D. The show glbp command will display detailed information about each virtual gateway or forwarder

E. PCs send ARP requests only after a GLBP group is established

Select the statements that describe the configuration of HSRP authentication. (Choose four)

A. The default authentication type is MD5 authentication

B. The default authentication type is text authentication

C. MD5 strings as keys on a key chain is less flexible because you can't define multiple keys with different validity times

D. Configuring HSRP authentication can prevent rouge Layer 3 devices from joining HSRP groups

E. If the MD5 digest on the incoming packets differs from the digest of the device, the HSRP packet will be rejected

F. If the authentication is text on one device and MD5 on the other devices, HSRP packets will be rejected

Which scenarios would indicate the Root Bridge? (Choose two)

A. Highest priority, if MAC is tied

B. Lowest priority

C. Highest MAC

D. Lowest MAC, if priority is tied

Identify the recommended practices for securing web access. (Choose two)

A. Use the ip http secure-server command to use a secure server

B. Enable dynamic trunking protocol negotiation

C. Disable web access to a switch if it is not needed

D. If using web access, use HTTP

Which command will place the switch in a mode so that it does not affect the VLAN database?

A. vtp mode server

B. vtp mode client

C. vtp mode transparent

How can you prevent attackers from flooding a switch using bogus MACs?

A. Do not limit the number of concurrent allowed MAC addresses

B. Enable port security to lock down ports

C. Enable CDP on ports that connect to outside networks

D. Use BPDU filters when possible

Refer to the exhibit. You have configured two routers as VRRP virtual routers that are members of the same VRRP group.
What should you configure to ensure that suboptimal paths are not used if an uplink fails on the VRRP master?

Refer to the exhibit. You have configured two routers as VRRP virtual routers that are members of the same VRRP group.<br />What should you configure to ensure that suboptimal paths are not used if an uplink fails on the VRRP master?

A. STP

B. VSS

C. EtherChannel

D. Tracking

Which STP information is used to determine the optimal route to reach a Root Bridge?

A. Flags

B. Sender Bridge ID

C. Root Path Cost

D. Maximum Age

What statements accurately describe the negotiation of power levels between devices using Cisco PoE and IEEE standards? (Choose two)

A. With 802.3af and 802.3at, the switch sends out a 340 kHz test tone on the Ethernet cable

B. The powered device can provide the switch with power class information

C. The switch must automatically detect that a device needs power when connected

D. The switch must first establish the data link before it can send power to the device

Which port states enables sending and receiving of data?

A. Blocked

B. Learning

C. Listening

D. Forwarding

Which of the following allows you to filter out telnet and web traffic between servers in the same server farm but allow them to communicate with certain other protocols?

A. RACL

B. PACL

C. PVLAN

D. VACL

Which of the following is a feature of ARP spoofing?

A. Utilizes grateful ARP Replies

B. Attacker can only capture messages

C. Disables the ARP cache

D. Uses packet capture software

Which of the following code is used to change the cost of a switch?

A. #spanning-tree vlan 10 assign cost 5

B. #spanning-tree vlan 10 change cost 5

C. #spanning-tree vlan 10 cost 5

D. #spanning-tree switch 10 cost 5

Identify the statements that accurately apply to Secure Shell (SSH). (Choose three)

A. Use SSH version 2 if available

B. SSH Version 2 can be turned on using the ip ssh version 2 command

C. It is less secure than Telnet

D. It does not exchange using plain text

Which is a step in recovering the root-inconsistency state?

A. RootGuard removes inconsistent state

B. Creation of two root bridges is required

C. Identify and remove source of BPDUs

D. Higher MAC address becomes Root Bridge

A port has entered an error-disabled state. The reason for the state is unknown. The switch has not had its error-disable settings altered from their default settings. Which command must be issued first to determine the reason for the error-disabled state?

A. SW#show errdisable recovery

B. SW#show interfaces status

C. SW(config)#errdisable detect cause all

D. SW(config)#errdisable recovery cause all

Which command setting can be set to encrypt the data traffic?

A. Access-list

B. IfAdminStatus

C. Security model

D. Readview

Which of the following is a feature of isolated VLANs?

A. Devices can't connect to any other peers

B. Two layer connectivity within each VLAN

C. Device communication within community

D. Devices within the VLAN communicate

Which is an element of the DORA process?

A. Optimize

B. Acknowledge

C. Randomize

D. Driver

If a distribution layer switch goes off line and then comes back online, which NIP mode applied to other distribution layer switches will assist it in determining the correct time?

A. Peer mode

B. Server mode

C. Client mode

D. Broadcast mode

Which STP implementation allows for a custom number of STP instances where VLANs can be grouped into?

A. PVRST+

B. MST

C. CST

D. PVST+

You are verifying VLAN configurations and issue the "show vlan" command. Ethernet 0/2 should be part of VLAN 20, but it is not listed. What can be done to correct this?

A. Issue the no shutdown command on the port.

B. Configure it as an access port.

C. Use a valid VLAN number.

D. Create VLAN 20.

Which command would you use to verify the RSPAN configuration on the source switch?

A. show monitor

B. show switch virtual

C. show port-security

D. show switch

Which of the following is a function of the "ip verify source" command?

A. Enables IP address verification

B. Disables DHCP discovery messages

C. Maps IP addresses to MAC address

D. Allows inbound offers from all ports

Which tracking options does HSRP have available? (Choose two)

A. HSRP can track objects such as the IP routing table

B. HSRP can track interfaces

C. HSRP can track objects such as MAC addresses

D. HSRP can track objects based on CPU

Which statements accurately describe the differences between end-to-end and local VLANs? (Choose two)

A. With end-to-end VLANs, all switches need to know all VLANs

B. With end-to-end VLANs, traffic flow is predictable

C. With local VLANs, broadcast messages flood all switches

D. With end-to-end VLANs, design is scalable

E. With local VLANs, redundant paths can be easily built

Which of the following is not a purpose of the Root Bridge with the STP?

A. Maintains network topology

B. Acts as reference point of the network

C. It is the ending point of the network

D. Propagates timers

Refer to the GLBP configuration on switch SW4. If switch SW4 has a higher priority than the current active virtual forwarder (AVF), how long will switch SW4 wait before taking over the role as AVF?

A. 300 minutes

B. 5 minutes

C. 700 milliseconds

D. 200 milliseconds

Which is not a best practice recommended for UDLD implementation?

A. Enable the UDLD in normal mode

B. Enable in global configuration

C. Set to UDLD aggressive mode

D. Deploy on all fiber optic connections

What are the recommended PortFast configurations? (Choose two)

A. On a switch port connected to a high volume database server

B. On a switch port that is configured as a trunk

C. On a switch port connecting to another switch

D. On a switch port interfacing with a router

Which feature best describes FlexLinks?

A. Enables the Spanning Tree Protocol

B. The failover can be as low as 1 second

C. Is a layer 1 mechanism

D. Updates MAC address tables

Which of the following is a feature of DHCP snooping?

A. Untrusted ports allow request messages

B. Every port becomes trusted

C. Monitors flow of BPDU messages

D. Untrusted ports allow inbound offers

Which statement about UDLD and LoopGuard is incorrect?

A. UDLD protects against miswiring

B. Both can operate together

C. UDLD is an STP feature

D. LoopGuard is an STP feature

At what level is MST path cost configured?

A. On an instance-by-instance basis

B. On the spanning-tree topology level

C. On a switch by switch basis

D. On a region-by-region basis

You are in the process of configuring a Layer 2 EtherChannel. You need to configure the EtherChannel to load balance traffic across the links in the bundle based on the Layer 2 address of the transmitting host. Which command should you use?

A. port-channel load-balance src-port

B. port-channel load-balance src-dst-ip

C. port-channel load-balance dst-port

D. port-channel load-balance src-mac

You need to ensure that a GLBP host is guaranteed to always receive the same virtual MAC address as long as that virtual MAC address is participating in the GLBP group. Which command should you use?

A. glbp preempt

B. glbp priority

C. glbp weighting

D. glbp load-balancing

Which of the following is not a part of the IEEE 802.1x configuration checklist?

A. Enable ports forwarding status

B. Set up RADIUS servers

C. Create authentication method list

D. Requires functioning of AAA

Which command should you use to configure EtherChannel load balancing based on the Layer 2 information of the sender and receiver?

A. port-channel load-balance src-dst-ip

B. port-channel load-balance src-dst-port

C. port-channel load-balance src-dst-mac

D. port-channel load-balance src-ip

Which term represents the association of destination ports with source ports?

A. Source VLAN

B. SPAN session

C. Egress source port

D. Ingress source port

You are configuring VTP on the newly added switch.
Which command is used to force a switch to forward advertisements that it receives and prevents the switch from affecting VLAN configurations on other devices in the network?

A. switch(config)#vtp mode client

B. switch(config)#vtp mode transparent

C. switch(config)#vtp v2-mode

D. switch(config)#vtp mode server

Review the switch configuration. What can be determined from this configuration?

A. Losing interface fa0/23 would prevent SW4 from forwarding.

B. The hold time is 200 msec.

C. The initial weight priority is 110.

D. The virtual gateway address is 10.1.10.2.

Which is not a step when creating an EtherChannel bundle?

A. Request a connection between switches

B. Identify ports to use on each switch

C. Configure channel group on interface

D. Configure port-channel interface

Which guideline should be followed when adding a new switch to an existing VTP management domain?

A. Set the switch to server mode before connecting it to the network

B. Change the VTP domain information while the switch is in server mode

C. Set the switch to transparent mode before connecting it to the network

D. Change the VTP clients to reset the configuration revision number

Which of the following are examples of switch attacks? (Choose two)

A. Bluejacking

B. War driving

C. MAC flooding

D. VLAN hopping

In what situations is a core layer required? (Choose two)

A. When there are multiple adjacent buildings with the appropriate amount of fiber

B. When the campus network is contained within a building block

C. The campus network is expected to change in complexity and expand geographically

D. When the campus network design needs to be retained but growth is expected

Which of the following are best practices when configuring a secure password on a switch? (Choose three)

A. Use enable secret command

B. Use AAA authentication when possible

C. Use "enable password" command

D. Use service password-encryption to secure all other passwords

While calculating your results take a moment to complete our simple survey!

How likely is it that you would recommend LearnCisco.net
to a friend or colleague?

Why?

While calculating your results take a moment to complete our simple survey!

How likely is it that you would recommend LearnCisco.net to a friend or colleague?

Why?

How likely is it that you would recommend LearnCisco.net
to a friend or colleague?