14998287-CCNA-4-Discovery-Chapter-8

14998287-CCNA-4-Discovery-Chapter-8 - 1 2 cost hopcount...

Info iconThis preview shows page 1. Sign up to view the full content.

View Full Document Right Arrow Icon
This is the end of the preview. Sign up to access the rest of the document.

Unformatted text preview: 1 Whichmechanismisusedtocreateafloatingstaticroute? 2 administrativedistance cost hopcount passiveinterface WhichistrueregardingFrameRelayLMI? TheLMItypemustbemanuallyconfigured. LMIisasignallingstandardbetweentwoDCEdevices. TherearethreeLMItypesstandardizedbyANSI,ITUT,andCisco. RoutersateachendofaFrameRelayvirtualcircuitmustalwaysusethe sameLMItype. 3 Refertotheexhibit.ThecompleteconfigurationofaFrameRelayinterfaceonthe Chicagorouterisshown.HowdoestheChicagorouterknowwhichDLCIismapped totheIPaddressoftheremoterouter? DE CIR FECN InverseARP 4 WhichbitissetbyaFrameRelayswitchtoinformthesourcestationthatthereis congestiononthenetwork? 5 BECN CIR DE FCS FECN Whichtwostatementsaboutsplittunnelsaretrue?(Choosetwo.) LocalLANprintingwillusetheVPNtunnel. ThetrafficloadontheVPNserverisincreased. Traffictothecorporatenetworkwillbeencrypted. Thereisareducedsecurityrisktothecorporatenetwork. AlltraffictravelsacrosstheVPNtunnelfromclienttoserver. TraffictopublicwebsitesandgeneralInternetnavigationisnotencrypted. 6 Refertotheexhibit.Twodirectlyconnectedroutersareunabletopingeachother throughtheonlyactiveserialinterfaces.Whatistheproblem? TheIPaddressingschemeisincorrect. LoopbacksshouldbesetonR1andR2. PPPencapsulationneedstobeconfiguredonR1. ThebandwidthsettingsmustbethesameonR1andR2. Anoshutdowncommandneedstobeconfiguredonbothserialinterfaces. 7 WhenidentifyingVPNrequirementsforendpointusers,whatcaremustbetakento protectthenetworkwhenremoteusersloginfromunsecuredpubliclocations? EnsurethatVPNusertrafficdoesnottraversethepublicnetwork. EnsurethattheVPNusertrafficdoesnotslowdowninternallysourced trafficonthenetwork. EnsurethatVPNtrafficaccessinginternalnetworkdevicesisfilteredbefore itisunencrypted. EnsurethattheincomingdatafromaVPNclientisunencryptedbefore reachingtheVPNendpoint. Ensurethatremoteuserscanonlyaccessnetworkresourcesthatare appropriatetotheirjobfunction. 8 WhataretwocomponentsanetworkdesignerconsiderswhenplanningaVPN? (Choosetwo.) 9 encryptionalgorithmforprivacyandsecurity encapsulationprotocoltousewhencreatingtheVPNtunnel switchingtechnologytooptimizeVPNWANthroughput tunnelingtechnologyforguardingagainstdatacorruption routingprotocolonthegatewayforoptimumperformance WhattoolcanhelpeasetheconfigurationofVPNserversonrouters? CiscoSDM PIXFirewall CiscoVPNConcentrator CiscoAdaptiveSecurityAppliances 10 Refertotheexhibit.Whatisplacedintheaddressfieldofaframethatwilltravel fromtheOrlandoofficetotheDCoffice? 11 MACaddressoftheOrlandorouter MACaddressoftheDCrouter 192.168.1.25 192.168.1.26 DLCI100 DLCI200 Anetworkadministratorissuedthecommandshowframerelaypvc.Theresponse fromtheroutershowsthestatusofaPVCasdeleted.Whatisthereasonforthis status? TheDLCIisusingthewrongLMItype. TheDLCIisusablebuthaslittleactivity. TheDLCIisprogrammedintheswitchbutthecircuitisnotusable. TheDLCIconfiguredontheCPEdevicedoesnotmatchtheDLCIonthe interface. 12 IPSecoperatesatwhichlayeroftheOSImodel? 13 application network datalink transport WhichthreealgorithmscanbeusedtoencryptuserdatainanIPSecVPN framework?(Choosethree.) 14 3DES AES DiffieHellman DES ESP SHA Acompanyusesserialinterfacesonitsborderroutertoconnecttobranchoffices throughWANconnections.Thesecuritypolicydictatesthattheencapsulation shouldusePPPwithauthenticationprotocolCHAP.Whichstatementistrueabout theconfigurationrequirementofCHAP? Boththeusernameandpasswordarecasesensitive. Neithertheusernamenorthepasswordiscasesensitive. Theusernameiscasesensitivebutthepasswordisnotcasesensitive. Thepasswordiscasesensitivebuttheusernameisnotcasesensitive. 15 Refertotheexhibit.WhatstatementistrueabouttheconfigurationshownforR2? R2isconfiguredastheFrameRelayswitch. R2isconfiguredasthemainsiteinamultipointFrameRelayWAN prototype. R2isconfiguredasthemainsiteinapointtopointFrameRelayWAN prototype. R2isconfiguredasaremotesiteinamultipointFrameRelayWAN prototype. R2isconfiguredasaremotesiteinapointtopointFrameRelayWAN prototype. 16 WhatisusedtoidentifythepathtothenextFrameRelayswitchinaFrameRelay network? CIR DLCI FECN BECN 17 WhichtwostatementsaretrueregardingVPNsecurity?(Choosetwo.) UsersmayonlyestablishaVPNconnectionfromsecurelocationsandnever frompublicareas. UsersthatconnecttoanetworkthroughaVPNdonothavetologinto resourcesonthenetwork. UsersthatconnecttoanetworkthroughaVPNareareconsideredtrusted usersonthenetwork. UsersmayestablishaVPNconnectionfromunsecurelocationssuchas airportsandhotellobbies. UsersthatconnecttoanetworkthroughaVPNshouldhaveaccesstoallthe resourcesonthenetwork. 18 WhichPVCstatussuggeststhattherouterrecognizestheDLCIconfiguredonits interfaceasbeingpresentontheFrameRelayswitch,butthePVCassociatedwith theDLCIisnotcapableofendtoendcommunication? active deleted inactive idle 19 WhichstatementidentifiestheIPaddressdesignforsubinterfacesthatare configuredforaFrameRelaynetwork? MultipointconfigurationsrequiretheIPaddressofeachsubinterfaceoneach routertobeinitsownsubnet. MultipointconfigurationsrequireIPaddressesforeachsubinterfaceoneach routertobeapartofthesamesubnet. PointtopointconfigurationsrequireIPaddressesforeachsubinterfaceon eachroutertobeapartofthesamesubnet. PointtopointconfigurationsdonotrequireIPaddressesoneach subinterfaceoneachrouter. MultipointconfigurationsdonotrequireIPaddressesoneachsubinterface oneachrouter. 20 Refertotheexhibit.WhichroutercommandisusedtoassociateaLayer2address withthecorrespondingLayer3address? Miller(configif)#framerelaymapip172.16.150.1110 Miller(configif)#framerelaymapip172.16.150.1112 Miller(configif)#framerelaymapip172.16.150.2110 Miller(configif)#framerelaymapip172.16.150.2112 21 AnIPaddresshasbeenassignedtotheS0/0/0interfaceofanewCiscorouter.The administratorwishestoquicklytestbasicconnectivitywiththeserialinterfaceofan adjoiningCiscorouterviatheuseofthedefaultWANprotocol.WhichWANprotocol willbeusedforthistest? 22 PPP FrameRelay DSL HDLC ATM Whatisonebenefitofusinganetworksimulationsoftwarepackage? Thenetworkdesigncanbetestedbeforeitisactuallyimplemented. Simulationsoftwarepackagesarequicklyupdatedtosupportnewnetwork technologiesanddevices. Simulateddeviceshavethesamefeaturesasactualdevices,allowingfor detectionofallpotentialproblems. Softwarepackagescansimulateallpossiblenetworktrafficconditions,giving anaccuratepredictionofnetworkperformance. 23 TwodirectlyconnectedroutersareabletopingeachotherthroughtheSerial0/0/0 interfaces.Anetworkadministratorchangestheencapsulationononerouterto PPP,andtheotherisleftatthedefaultvalue.Whatstatementwouldappearinthe outputoftheshowinterfacescommandissuedononeoftherouters? Serial0/0/0isup,lineprotocolisup Serial0/0/0isdown,lineprotocolisdown Serial0/0/0isup,lineprotocolisdown Serial0/0/0isdown,lineprotocolisup Serial0/0/0isadministrativelydown,lineprotocolisdown 24 Whatstatementcorrectlydefinesthepurposeofthesplithorizonrule? markstherouteunreachableinaroutingupdatethatissenttootherrouters limitsthenumberofsubinterfacesthatcanbeassociatedwithonephysical interface preventsroutersfromadvertisinganetworkthroughtheinterfacefrom whichtheupdatecame limitsthenumberofhopsapacketcantraversethroughthenetworkbefore itshouldbediscarded preventsroutersfromacceptinghighercostroutestonetworkspreviously markedasinaccessiblebeforethetimerexpires ...
View Full Document

This note was uploaded on 02/12/2012 for the course NETWORKING NETW204 taught by Professor Baig during the Spring '09 term at DeVry Addison.

Ask a homework question - tutors are online