1. Which two statements describe factors that influence the layout of a proposal? (Choose two.)
• Proposal layouts are required to use sans serif typefaces.
• A specific proposal layout is followed when one is specified in the RFP.
• A designer chooses the layout if a written RFP does not specify an outline.
• The software that is used to create the proposal dictates the proposal layouts.
• Proposal layouts are required to use a format that is designed by the network engineer.
2. What two items are typically included in the executive summary of a proposal? (Choose two.)
• project scope summary
• high-level implementation plan
• quotes for all needed equipment
• technical requirements for the design
• emphasis on the benefits that meet the goals of the customer
3. Which proposal section describes the intended routing protocol, security mechanisms, and addressing for the planned network?
• logical design
• physical design
• executive summary
• implementation plan
• network requirements
4. Which occurrence would indicate a failure of the design phase?
• The incorrect model switches were ordered.
• There is no customer signoff for task completion.
• New requirements are identified after implementation begins.
• The new network capacity is inadequate to support required traffic.
5. A network installation team is assigned to replace all core switches in an existing data center. No other upgrades are planned. Which kind of installation is this?
• a new installation
• a fork-lift installation
• a phased installation
• a green field installation
6. What service is provided Cisco standard warranty?
• software application maintenance
• replacement of defected hardware
• next business day delivery of replacement parts
• access to the Cisco Technical Assistance Center (TAC) 24 hours a day, 7 days a week
7. An upgraded version of the Cisco IOS has been purchased. However, the CD arrived damaged. How will this loss be covered?
• a hardware warranty
• a software warranty
• the Cisco SMARTnet Service
• an additional service contract
8. A company informs the account manager that the installation of a new edge router at the customer remote branch location cannot be done at the scheduled time because of a large order that the branch office needs to complete. As a result, the end date of the project must be adjusted to accommodate the additional time. What is the action should the account manager take?
• Cancel the order for the new edge router.
• Work with designer to redesign the branch network.
• Instruct the technician to complete the install of the router at on the date in the contract.
• Adjust the timeline documentation to show the company how the delay will affect the
• project completion date.
9. NetworkingCompany completes the installation of a network upgrade for a retail customer. All of the onsite tests complete successfully and the customer IT staff approves the results of the tests. The manager of the retail store contacts NetworkingCompany to inform the company that the store will not pay for the upgrade until a recently purchased software package is installed and tested on the network. Which two items that are contained in the proposal can the account manager refer to when discussing this issue with the store manager?(Choose two.)
• the project scope
• the bill-of-material
• the project timeline
• the terms and conditions
• the business goals of the customer
• the evaluation of the current network
10. The operation of a new branch location network is delayed because a VPN cannot be configured and established between the branch location and the main office. It is determined that the router at the main office does not have enough memory and does not have the correct Cisco IOS version image to support the VPN features. To prevent this delay, this problem should have been identified and corrected during which part of the design project?
• the preparation of the business case
• the prioritizing of the technical goals
• the characterization of the existing network
• the implementation of the approved design
11. The NetworkingCompany team is tasked to prepare an implementation schedule for a customer. It is determined that the new firewalls and wireless controllers that are specified in the design cannot be delivered and installed within the agreed upon time frame. The NetworkingCompany informs the customer of the problem. What two options can the NetworkingCompany team take to ensure the success of the project? (Choose two.)
• plan to add additional staff and resources to shorten the installation time after the new equipment is delivered
• eliminate redundancy in the design to reduce the amount of equipment that is needed
• renegotiate a new time frame with the customer to accommodate the delay
• delay the installation of the security devices and controllers until a later time
• redesign the network to use only readily available equipment and software
12. AAA Financial Services Company is performing implementation planning for a core switch upgrade. The company has 200 financial software programmers that work billable hours during the week. They have critical, scheduled money transfer transmissions that occur at hourly intervals every night. There are two, two-hour long IT maintenance windows scheduled for software upgrades, one on Saturday and one on Sunday. The bank advertises online banking as available 24 hours on business days and 21 hours on the weekends. However, a network upgrade that is necessary to replace some switches is expected to take four hours. Because of rack constraints, this time includes three hours to remove the old switches before the new switches can be installed and one hour to test the logical configuration. How should the implementation scheduling be handled
• Defer the software upgrades. Use the Saturday window to perform the hardware installation. Use the Sunday window to perform the logical testing.
• Coordinate and publish a separate four-hour downtime during Friday to perform the complete switch installation and testing process. Use the Saturday and Sunday windows to correct any outage problems after the Friday window.
• Coordinate and publish two, four-hour downtimes incorporating the published Saturday and Sunday windows. Defer any software upgrades until the new network is proven to be working
correctly with the old software. Use the Sunday window as a fallback scheduling period if there re problems necessitating backing out of the Saturday window.
• Coordinate and publish an eight-hour downtime incorporating the Saturday window. This ill allow four hours for installation and logical testing, one hour for troubleshooting and decision, and three hours to roll back to the previous configuration if the new switching cannot pass the logical testing. Defer any software upgrades until the new network is proven to be working orrectly with the old software.
13. ncluded in a Bill of Materials (BOM) for a SOHO wired implementation is a Cisco 2811 router, Catalyst 2560 switch, four PCs, three laptops, and a networked printer. Wireless LAN capability will be implemented on this network. Which two equipment types must be added to the BOM to implement this request? (Choose two.)
• DNS server
• LAN switch
• wireless NICs
• DHCP server
• wireless access points
14. A customer has just taken delivery of a Cisco 2811 router and Catalyst 3560 switch. Included with the purchase is the SMARTnet Service. Which two resources are included with SMARTnet Service? (Choose two.)
• signature file updates
• technical support from TAC
• maintenance releases for OS
• software application major releases
• software application maintenance and minor releases
15. A Cisco 1841 router has been purchased without an agreement for SMARTnet Service. What two items are guaranteed under the standard warranty? (Choose two.)
• access to TAC
• replacement of defective physical media
• advanced replacement of hardware parts
• access to a renewable standard warranty contract
• under normal use, replacement of defective hardware
16. Upon completion of a proposal, a network design team must sell their ideas to two key stakeholders. Who are these two stakeholders? (Choose two.)
• customers
• licensing boards
• cabling contractors
• internal management
• project implementation team
17. What are two important guidelines when creating a slide presentation for a meeting with a customer? (Choose two.)
• Use all capital letters on words and phrases when possible for added emphasis.
• Provide varied background graphics to enhance viewer interest.
• Use contrasting colors for background and text to aid visibility.
• Change fonts frequently to denote differences in subject matter.
• Use bulleted text to lead the discussion.
18. In order to finalize a project proposal, an account manager of a
• networking company creates the terms and conditions section. What are two clauses that should be included in this section? (Choose two.)
• cost summary
• installation steps
• change order procedures
• problem resolution process
• maintenance contract quotation
19. Which two items will a systems engineer include in an implementation plan? (Choose two.)
• references to design documents
• the business goals of the customer
• diagrams of the existing traffic flows
• the steps to install and test the network
• cost of each network device and component
20. Which statement describes a phased installation into an existing network?
• A phased installation generally takes less time and expense than a green-field installation.
• A phased installation is not suitable for large, multi-site network installations or upgrades.
• A phased installation requires detailed planning in order to avoid disruption of user services.
• A phased installation involves building an entire replacement network and migrating users over to it.
Kamis, 30 Desember 2010
CCNA Discovery 4 Module 8 Exam Answers Version 4.0
1. Which mechanism is used to create a floating static route?
• administrative distance
• cost
• hop count
• passive interface
2. IPSec operates at which layer of the OSI model?
• application
• network
• datalink
• transport
3. Which is true regarding Frame Relay LMI?
• There are three LMI types standardized by ANSI, ITU-T, and Cisco.
• Routers at each end of a Frame Relay virtual circuit must always use the same LMI type.
• The LMI type must be manually configured.
• The only function of LMI is to verify the connection between the router and the Frame Relay switch.
4. Which statement identifies the IP address design for subinterfaces that are configured for a Frame Relay network?
• Multipoint configurations require the IP address of each subinterface on each router to be in its own subnet.
• Multipoint configurations require IP addresses for each subinterface on each router to be a part of the same subnet.
• Point-to-point configurations require IP addresses for each subinterface on each router to be a part of the same subnet.
• Point-to-point configurations do not require IP addresses on each subinterface on each router.
• Multipoint configurations do not require IP addresses on each subinterface on each router.
5. Which three algorithms can be used to encrypt user data in an IPSec VPN framework? (Choose three.)
• 3DES
• AES
• Diffie-Hellman
• DES
• ESP
• SHA
6. Which flag is set by a Frame Relay switch to inform the receiving station that congestion was experienced?
• BECN
• DE
• FECN
• FCS
7. Refer to the exhibit. The complete configuration of a Frame Relay interface on the Chicago router is shown. How does the Chicago router know which DLCI is mapped to the IP address of the remote router?
• DE
• CIR
• FECN
• Inverse ARP
8. What statement correctly defines the purpose of the split horizon rule?
• marks the route unreachable in a routing update that is sent to other routers
• prevents routers from advertising a network through the interface from which the update came
• prevents routers from accepting higher cost routes to networks previously marked as inaccessible before the timer expires
• limits the number of hops a packet can traverse through the network before it should be discarded
9. Which PVC status suggests that the router recognizes the DLCI configured on its interface as being present on the Frame Relay switch, but the PVC associated with the DLCI is not capable of end-to-end communication?
• active
• deleted
• inactive
• idle
10. Refer to the exhibit. Which router command is used to associate a Layer 2 address with the corresponding Layer 3 address?
• Miller(config-if)#frame-relay map ip 172.16.150.1 110
• Miller(config-if)#frame-relay map ip 172.16.150.1 112
• Miller(config-if)#frame-relay map ip 172.16.150.2 110
• Miller(config-if)#frame-relay map ip 172.16.150.2 112
11. A network administrator issued the command show frame-relay pvc. The response from the router shows the status of a PVC as deleted. What is the reason for this status?
• The DLCI is using the wrong LMI type.
• The DLCI is usable but has little activity.
• The DLCI is programmed in the switch but the circuit is not usable.
• The DLCI configured on the CPE device does not match the DLCI.
12. What is one benefit of using a network simulation software package?
• The network design can be tested before it is actually implemented.
• Simulation software packages are quickly updated to support new network technologies and devices.
• Simulated devices have the same features as actual devices, allowing for detection of all potential problems.
• Software packages can simulate all possible network traffic conditions, giving an accurate prediction of network performance.
13. What are two components a network designer considers when planning a VPN? (Choose two.)
• encryption algorithm for privacy and security
• encapsulation protocol to use when creating the VPN tunnel
• switching technology to optimize VPN WAN throughput
• tunneling technology for guarding against data corruption
• routing protocol on the gateway for optimum performance
14. When identifying VPN requirements for endpoint users, what care must be taken to protect the network when remote users log in from unsecured public locations?
• Ensure that the user has VPN client software that allows access to all internal resources.
• Ensure that the VPN user traffic does not slow down internally sourced traffic on the network.
• Ensure that there are no obstacles to hamper the users from accessing all internal resources.
• Ensure that remote users can only access network resources that are appropriate to their job function.
15. Which two components are key elements when implementing a VPN? (Choose two.)
• concentration
• encryption
• prioritization
• compression
• encapsulation
16. What tool can help ease the configuration of VPN servers on routers?
• Cisco SDM
• PIX Firewall
• Cisco VPN Concentrator
• Cisco Adaptive Security Appliances
17. What is used to identify the path to the next frame-relay switch in a Frame Relay network?
• CIR
• DLCI
• FECN
• BECN
18. Which two statements are true regarding VPN security? (Choose two.)
• Users may only establish a VPN connection from secure locations and never from public areas.
• Users that connect to a network through a VPN do not have to log in to resources on the network.
• Users that connect to a network through a VPN are are considered trusted users on the network.
• Users may establish a VPN connection from unsecure locations such as airports and hotel lobbies.
• Users that connect to a network through a VPN should have access to all the resources on the network.
19. Refer to the exhibit. What is placed in the address field of a frame that will travel from the Orlando office to the DC office?
• MAC address of the Orlando router
• MAC address of the DC router
• 192.168.1.25
• 192.168.1.26
• DLCI 100
• DLCI 200
20. Two directly connected routers are able to ping each other through the Serial 0/0/0 interfaces. A network administrator changes the encapsulation on one router to PPP, and the other is left at the default value. What statement would appear in the output of the show interfaces command issued on one of the routers?
• Serial 0/0/0 is up, line protocol is up
• Serial 0/0/0 is down, line protocol is down
• Serial 0/0/0 is up, line protocol is down
• Serial 0/0/0 is down, line protocol is up
• Serial 0/0/0 is administratively down, line protocol is down
21. Refer to the exhibit. What statement is true about the configuration shown for R2?
• R2 is configured as the Frame Relay switch.
• R2 is configured as the main site in a multipoint Frame Relay WAN prototype.
• R2 is configured as the main site in a point-to-point Frame Relay WAN prototype.
• R2 is configured as a remote site in a multipoint Frame Relay WAN prototype.
• R2 is configured as a remote site in a point-to-point Frame Relay WAN prototype.
22. A company uses serial interfaces on its border router to connect to branch offices through WAN connections. The security policy dictates that the encapsulation should use PPP with authentication protocol CHAP. Which statement is true about the configuration requirement of CHAP?
• Both the username and password are case sensitive.
• Neither the username nor the password is case sensitive.
• The username is case sensitive but the password is not case sensitive.
• The password is case sensitive but the username is not case sensitive.
23. Which two statements about split tunnels are true? (Choose two.)
• Local LAN printing will use the VPN tunnel.
• The traffic load on the VPN server is increased.
• Traffic to the corporate network will be encrypted.
• There is a reduced security risk to the corporate network.
• All traffic travels across the VPN tunnel from client to server.
• Traffic to public web sites and general Internet navigation is not encrypted.
24. An IP address has been assigned to the S0/0/0 interface of a new Cisco router. The administrator wishes to quickly test basic connectivity with the serial interface of an adjoining Cisco router via the use of the default WAN protocol. Which WAN protocol will be used for this test?
• PPP
• Frame Relay
• DSL
• HDLC
• ATM
25. Which two statements about split tunnels are true? (Choose two.)
• Local LAN printing will use the VPN tunnel.
• The traffic load on the VPN server is increased.
• Traffic to the corporate network will be encrypted.
• There is a reduced security risk to the corporate network.
• All traffic travels across the VPN tunnel from client to server.
• Traffic to public web sites and general Internet navigation is not encrypted.
• administrative distance
• cost
• hop count
• passive interface
2. IPSec operates at which layer of the OSI model?
• application
• network
• datalink
• transport
3. Which is true regarding Frame Relay LMI?
• There are three LMI types standardized by ANSI, ITU-T, and Cisco.
• Routers at each end of a Frame Relay virtual circuit must always use the same LMI type.
• The LMI type must be manually configured.
• The only function of LMI is to verify the connection between the router and the Frame Relay switch.
4. Which statement identifies the IP address design for subinterfaces that are configured for a Frame Relay network?
• Multipoint configurations require the IP address of each subinterface on each router to be in its own subnet.
• Multipoint configurations require IP addresses for each subinterface on each router to be a part of the same subnet.
• Point-to-point configurations require IP addresses for each subinterface on each router to be a part of the same subnet.
• Point-to-point configurations do not require IP addresses on each subinterface on each router.
• Multipoint configurations do not require IP addresses on each subinterface on each router.
5. Which three algorithms can be used to encrypt user data in an IPSec VPN framework? (Choose three.)
• 3DES
• AES
• Diffie-Hellman
• DES
• ESP
• SHA
6. Which flag is set by a Frame Relay switch to inform the receiving station that congestion was experienced?
• BECN
• DE
• FECN
• FCS
7. Refer to the exhibit. The complete configuration of a Frame Relay interface on the Chicago router is shown. How does the Chicago router know which DLCI is mapped to the IP address of the remote router?
• DE
• CIR
• FECN
• Inverse ARP
8. What statement correctly defines the purpose of the split horizon rule?
• marks the route unreachable in a routing update that is sent to other routers
• prevents routers from advertising a network through the interface from which the update came
• prevents routers from accepting higher cost routes to networks previously marked as inaccessible before the timer expires
• limits the number of hops a packet can traverse through the network before it should be discarded
9. Which PVC status suggests that the router recognizes the DLCI configured on its interface as being present on the Frame Relay switch, but the PVC associated with the DLCI is not capable of end-to-end communication?
• active
• deleted
• inactive
• idle
10. Refer to the exhibit. Which router command is used to associate a Layer 2 address with the corresponding Layer 3 address?
• Miller(config-if)#frame-relay map ip 172.16.150.1 110
• Miller(config-if)#frame-relay map ip 172.16.150.1 112
• Miller(config-if)#frame-relay map ip 172.16.150.2 110
• Miller(config-if)#frame-relay map ip 172.16.150.2 112
11. A network administrator issued the command show frame-relay pvc. The response from the router shows the status of a PVC as deleted. What is the reason for this status?
• The DLCI is using the wrong LMI type.
• The DLCI is usable but has little activity.
• The DLCI is programmed in the switch but the circuit is not usable.
• The DLCI configured on the CPE device does not match the DLCI.
12. What is one benefit of using a network simulation software package?
• The network design can be tested before it is actually implemented.
• Simulation software packages are quickly updated to support new network technologies and devices.
• Simulated devices have the same features as actual devices, allowing for detection of all potential problems.
• Software packages can simulate all possible network traffic conditions, giving an accurate prediction of network performance.
13. What are two components a network designer considers when planning a VPN? (Choose two.)
• encryption algorithm for privacy and security
• encapsulation protocol to use when creating the VPN tunnel
• switching technology to optimize VPN WAN throughput
• tunneling technology for guarding against data corruption
• routing protocol on the gateway for optimum performance
14. When identifying VPN requirements for endpoint users, what care must be taken to protect the network when remote users log in from unsecured public locations?
• Ensure that the user has VPN client software that allows access to all internal resources.
• Ensure that the VPN user traffic does not slow down internally sourced traffic on the network.
• Ensure that there are no obstacles to hamper the users from accessing all internal resources.
• Ensure that remote users can only access network resources that are appropriate to their job function.
15. Which two components are key elements when implementing a VPN? (Choose two.)
• concentration
• encryption
• prioritization
• compression
• encapsulation
16. What tool can help ease the configuration of VPN servers on routers?
• Cisco SDM
• PIX Firewall
• Cisco VPN Concentrator
• Cisco Adaptive Security Appliances
17. What is used to identify the path to the next frame-relay switch in a Frame Relay network?
• CIR
• DLCI
• FECN
• BECN
18. Which two statements are true regarding VPN security? (Choose two.)
• Users may only establish a VPN connection from secure locations and never from public areas.
• Users that connect to a network through a VPN do not have to log in to resources on the network.
• Users that connect to a network through a VPN are are considered trusted users on the network.
• Users may establish a VPN connection from unsecure locations such as airports and hotel lobbies.
• Users that connect to a network through a VPN should have access to all the resources on the network.
19. Refer to the exhibit. What is placed in the address field of a frame that will travel from the Orlando office to the DC office?
• MAC address of the Orlando router
• MAC address of the DC router
• 192.168.1.25
• 192.168.1.26
• DLCI 100
• DLCI 200
20. Two directly connected routers are able to ping each other through the Serial 0/0/0 interfaces. A network administrator changes the encapsulation on one router to PPP, and the other is left at the default value. What statement would appear in the output of the show interfaces command issued on one of the routers?
• Serial 0/0/0 is up, line protocol is up
• Serial 0/0/0 is down, line protocol is down
• Serial 0/0/0 is up, line protocol is down
• Serial 0/0/0 is down, line protocol is up
• Serial 0/0/0 is administratively down, line protocol is down
21. Refer to the exhibit. What statement is true about the configuration shown for R2?
• R2 is configured as the Frame Relay switch.
• R2 is configured as the main site in a multipoint Frame Relay WAN prototype.
• R2 is configured as the main site in a point-to-point Frame Relay WAN prototype.
• R2 is configured as a remote site in a multipoint Frame Relay WAN prototype.
• R2 is configured as a remote site in a point-to-point Frame Relay WAN prototype.
22. A company uses serial interfaces on its border router to connect to branch offices through WAN connections. The security policy dictates that the encapsulation should use PPP with authentication protocol CHAP. Which statement is true about the configuration requirement of CHAP?
• Both the username and password are case sensitive.
• Neither the username nor the password is case sensitive.
• The username is case sensitive but the password is not case sensitive.
• The password is case sensitive but the username is not case sensitive.
23. Which two statements about split tunnels are true? (Choose two.)
• Local LAN printing will use the VPN tunnel.
• The traffic load on the VPN server is increased.
• Traffic to the corporate network will be encrypted.
• There is a reduced security risk to the corporate network.
• All traffic travels across the VPN tunnel from client to server.
• Traffic to public web sites and general Internet navigation is not encrypted.
24. An IP address has been assigned to the S0/0/0 interface of a new Cisco router. The administrator wishes to quickly test basic connectivity with the serial interface of an adjoining Cisco router via the use of the default WAN protocol. Which WAN protocol will be used for this test?
• PPP
• Frame Relay
• DSL
• HDLC
• ATM
25. Which two statements about split tunnels are true? (Choose two.)
• Local LAN printing will use the VPN tunnel.
• The traffic load on the VPN server is increased.
• Traffic to the corporate network will be encrypted.
• There is a reduced security risk to the corporate network.
• All traffic travels across the VPN tunnel from client to server.
• Traffic to public web sites and general Internet navigation is not encrypted.
CCNA Discovery 4 Module 7 Exam Answers Version 4.0
1. A network engineer has decided to pilot test a portion of a new network design rather than rely on a prototype for proof-of-concept. What are two advantages of pilot testing a design concept?(Choose two.)
• The test network experiences real-world network traffic.
• Users within the enterprise are not affected by the test.
• Network response can be tested in unplanned and unpredictable situations.
• Unlikely failure conditions can be conveniently tested.
• Network response can be tested in a highly controlled simulated environment.
2. While preparing a network test plan document, a network designer records all initial and modified device configurations. Which section of the document typically contains this information?
• Appendix
• Test Procedures
• Test Description
• Actual Results and Conclusions
• Anticipated Results and Success Criteria
3. Refer to the exhibit. A network designer creates a test plan that includes the specification shown. In which section of the test plan would this specification be found?
• Test Description
• Test Procedures
• Design and Topology Diagram
• Actual Results and Conclusions
• Anticipated Results and Success Criteria
4. What OSI model Layer 2 security measure can a network engineer implement when prototyping network security?
• a firewall at the network edge
• port security at the access design layer
• port security at the distribution design layer
• IP access control lists at the access design layer
5. How do designers decide which network functions need to be included in the prototype test?
• They select the functions that align with the business goals.
• They select the functions that occur at the network core.
• They select the functions that do not exist in the existing network.
• They select the functions from a list of generic network operations.
6. Refer to the exhibit. During prototype testing of the Cisco network shown, connectivity must be verified. Assuming all connections are working and CDP is enabled on all devices and interfaces, on which device was the command issued?
• R1
• S1
• R3
• S2
• R5
• S3
7. Refer to the exhibit. During prototyping, Layer 2 functionality is being tested. Based on the output shown, which two pieces of information can be determined? (Choose two.)
• Switch1 is the root bridge.
• Interface Fa0/2 on Switch1 has no role in the operation of spanning tree.
• Interface Fa0/2 on Switch1 is the alternate port used to reach the root bridge.
• Based on the entries in the “Role” column, it can be concluded that RSTP has been implemented.
• Interface Fa0/1 on Switch1 is the forwarding port selected for the entire spanning-tree topology.
8. What Rapid Spanning Tree Protocol (RSTP) state is given to the forwarding port elected for every switched Ethernet LAN segment?
• root
• backup
• alternate
• designated
9. Refer to the exhibit. During prototype testing, verification of VLAN connectivity is being performed. Based on the information shown, what command produced the output?
• show spanning-tree
• show interfaces trunk
• show cdp neighbors
• show interfaces
• show ip interface brief
10. Switch port Fa0/24 was previously configured as a trunk, but now it is to be used to connect a host to the network. How should the network administrator reconfigure switch port Fa0/24?
• Use the switchport mode access command from interface configuration mode.
• Enter the switchport nonegotiate command from interface configuration mode.
• Administratively shut down and re-enable the interface to return it to the default.
• Enter the no switchport mode trunk command in interface configuration mode.
• Use the switchport access vlan vlan number command from interface configuration mode
• to remove the port from the trunk and add it to a specific VLAN.
11. Refer to the exhibit. The redundant paths are of equal bandwidth and EIGRP is the routing protocol in use. Which statement describes the data flow from Server to PC2?
• EIGRP load balances across the R3 to R1 and R3 to R2 links.
• EIGRP load balances across the R1 to Switch3 and R2 to Switch3 paths.
• EIGRP load balances across the Switch1 to Switch3 and Switch1 to Switch2 paths.
• EIGRP does not load balance in this topology.
12. A network designer needs to determine if a proposed IP addressing scheme allows efficient route summarization and provides the appropriate amount of scalability to a design. What is useful for validating a proposed hierarchical IP addressing scheme?
• NBAR
• a pilot network
• a route summary
• a network simulator
• a physical topology ma
13. In the router command encapsulation dot1q 10, what does the number 10 represent?
• the metric used for a particular route
• the number of the VLAN associated with the encapsulated subinterface
• the priority number given to the device for the election process
• the number that must match the Fast Ethernet subinterface number
• the number used to program the router for unequal cost path load balancing
14. Refer to the exhibit. The users on the 192.168.10.192 network are not allowed Internet access. The network design calls for an extended ACL to be developed and tested. Where should the ACL be placed for the least effect on other network traffic?
• inbound on Fa0/0 of R3
• outbound on Fa0/0 of R3
• inbound on Fa0/1 of R3
• outbound on Fa0/1 of R3
• inbound on Fa0/1 of R2
• outbound on S0/0 of R2
15. Refer to the exhibit. What two measures can be taken to address the areas of weakness circled in the network design? (Choose two.)
• Provide redundant connections to all end users.
• Add another core switch to increase redundancy.
• Add a switch in the server block connecting the server farm to each core switch.
• Add an additional switch to the DMZ and direct links from the new switch to the core switches.
• Provide a redundant firewall router connecting to a second ISP, the core switches, and the DMZ.
16. Why is it important to record baseline measurements of a prototype network?
• Test results show security weaknesses after the baseline tests are run.
• The baseline is the point at which the network is operating at its fullest potential.
• Baseline measurements define a point at which network traffic has exceeded the designed capabilities of the network.
• Test results are compared to the baseline to see how the test conditions increase processor use or decrease available bandwidth.
17. Refer to the exhibit. A network administrator has been given the task of creating a design for a temporary classroom building that is to be set up outside an overcrowded school. In testing the prototype, it is found that the student PC cannot ping the teacher PC. All the switch interfaces are active and connected properly, as is interface Fa0/0 of the router. Given that only the commands shown have bee added to the router configuration, what is the source of the problem?
• The IP settings on the student PC are incorrect.
• The default gateway on the teacher PC is misconfigured.
• The router Fa0/0 interface has not been configured as a VLAN trunk.
• The Fa0/0 physical interface has not been configured with an IP address and subnet mask.
• The administrator forgot to configure a routing protocol to allow the ping packets to reach the teacher PC subnet.
18. Refer to the exhibit. Why are interfaces Fa0/11, Fa0/23, and Fa0/24 not shown in this switch output?
• Interfaces Fa0/11, Fa0/23, and Fa0/24 are trunks.
• Interfaces Fa0/11, Fa0/23, and Fa0/24 are shutdown.
• Interfaces Fa0/11, Fa0/23, and Fa0/24 are blocking.
• Interfaces Fa0/11, Fa0/23, and Fa0/24 failed diagnostics
19. Refer to the exhibit. A network technician is performing an initial installation of a new switch in the east wing. The technician removes the switch from the box, makes the connections to the network, and adds the configuration shown. The technician notifies the network administrator that the switch has been installed. When the network administrator at the home office attempts to telnet to the switch from host 192.168.0.1, the connection fails. What action should the network technician take?
• Add an enable password to the switch.
• Add a default gateway to the switch configuration.
• Configure the switch with an IP access list to permit the host connection.
• Enable the physical interfaces of the switch with the no shutdown command.
20. Refer to the exhibit. After all the interfaces have stabilized, what is the spanning-tree state of all the enabled interfaces of SW11?
• discarding
• forwarding
• learning
• listening
• The test network experiences real-world network traffic.
• Users within the enterprise are not affected by the test.
• Network response can be tested in unplanned and unpredictable situations.
• Unlikely failure conditions can be conveniently tested.
• Network response can be tested in a highly controlled simulated environment.
2. While preparing a network test plan document, a network designer records all initial and modified device configurations. Which section of the document typically contains this information?
• Appendix
• Test Procedures
• Test Description
• Actual Results and Conclusions
• Anticipated Results and Success Criteria
3. Refer to the exhibit. A network designer creates a test plan that includes the specification shown. In which section of the test plan would this specification be found?
• Test Description
• Test Procedures
• Design and Topology Diagram
• Actual Results and Conclusions
• Anticipated Results and Success Criteria
4. What OSI model Layer 2 security measure can a network engineer implement when prototyping network security?
• a firewall at the network edge
• port security at the access design layer
• port security at the distribution design layer
• IP access control lists at the access design layer
5. How do designers decide which network functions need to be included in the prototype test?
• They select the functions that align with the business goals.
• They select the functions that occur at the network core.
• They select the functions that do not exist in the existing network.
• They select the functions from a list of generic network operations.
6. Refer to the exhibit. During prototype testing of the Cisco network shown, connectivity must be verified. Assuming all connections are working and CDP is enabled on all devices and interfaces, on which device was the command issued?
• R1
• S1
• R3
• S2
• R5
• S3
7. Refer to the exhibit. During prototyping, Layer 2 functionality is being tested. Based on the output shown, which two pieces of information can be determined? (Choose two.)
• Switch1 is the root bridge.
• Interface Fa0/2 on Switch1 has no role in the operation of spanning tree.
• Interface Fa0/2 on Switch1 is the alternate port used to reach the root bridge.
• Based on the entries in the “Role” column, it can be concluded that RSTP has been implemented.
• Interface Fa0/1 on Switch1 is the forwarding port selected for the entire spanning-tree topology.
8. What Rapid Spanning Tree Protocol (RSTP) state is given to the forwarding port elected for every switched Ethernet LAN segment?
• root
• backup
• alternate
• designated
9. Refer to the exhibit. During prototype testing, verification of VLAN connectivity is being performed. Based on the information shown, what command produced the output?
• show spanning-tree
• show interfaces trunk
• show cdp neighbors
• show interfaces
• show ip interface brief
10. Switch port Fa0/24 was previously configured as a trunk, but now it is to be used to connect a host to the network. How should the network administrator reconfigure switch port Fa0/24?
• Use the switchport mode access command from interface configuration mode.
• Enter the switchport nonegotiate command from interface configuration mode.
• Administratively shut down and re-enable the interface to return it to the default.
• Enter the no switchport mode trunk command in interface configuration mode.
• Use the switchport access vlan vlan number command from interface configuration mode
• to remove the port from the trunk and add it to a specific VLAN.
11. Refer to the exhibit. The redundant paths are of equal bandwidth and EIGRP is the routing protocol in use. Which statement describes the data flow from Server to PC2?
• EIGRP load balances across the R3 to R1 and R3 to R2 links.
• EIGRP load balances across the R1 to Switch3 and R2 to Switch3 paths.
• EIGRP load balances across the Switch1 to Switch3 and Switch1 to Switch2 paths.
• EIGRP does not load balance in this topology.
12. A network designer needs to determine if a proposed IP addressing scheme allows efficient route summarization and provides the appropriate amount of scalability to a design. What is useful for validating a proposed hierarchical IP addressing scheme?
• NBAR
• a pilot network
• a route summary
• a network simulator
• a physical topology ma
13. In the router command encapsulation dot1q 10, what does the number 10 represent?
• the metric used for a particular route
• the number of the VLAN associated with the encapsulated subinterface
• the priority number given to the device for the election process
• the number that must match the Fast Ethernet subinterface number
• the number used to program the router for unequal cost path load balancing
14. Refer to the exhibit. The users on the 192.168.10.192 network are not allowed Internet access. The network design calls for an extended ACL to be developed and tested. Where should the ACL be placed for the least effect on other network traffic?
• inbound on Fa0/0 of R3
• outbound on Fa0/0 of R3
• inbound on Fa0/1 of R3
• outbound on Fa0/1 of R3
• inbound on Fa0/1 of R2
• outbound on S0/0 of R2
15. Refer to the exhibit. What two measures can be taken to address the areas of weakness circled in the network design? (Choose two.)
• Provide redundant connections to all end users.
• Add another core switch to increase redundancy.
• Add a switch in the server block connecting the server farm to each core switch.
• Add an additional switch to the DMZ and direct links from the new switch to the core switches.
• Provide a redundant firewall router connecting to a second ISP, the core switches, and the DMZ.
16. Why is it important to record baseline measurements of a prototype network?
• Test results show security weaknesses after the baseline tests are run.
• The baseline is the point at which the network is operating at its fullest potential.
• Baseline measurements define a point at which network traffic has exceeded the designed capabilities of the network.
• Test results are compared to the baseline to see how the test conditions increase processor use or decrease available bandwidth.
17. Refer to the exhibit. A network administrator has been given the task of creating a design for a temporary classroom building that is to be set up outside an overcrowded school. In testing the prototype, it is found that the student PC cannot ping the teacher PC. All the switch interfaces are active and connected properly, as is interface Fa0/0 of the router. Given that only the commands shown have bee added to the router configuration, what is the source of the problem?
• The IP settings on the student PC are incorrect.
• The default gateway on the teacher PC is misconfigured.
• The router Fa0/0 interface has not been configured as a VLAN trunk.
• The Fa0/0 physical interface has not been configured with an IP address and subnet mask.
• The administrator forgot to configure a routing protocol to allow the ping packets to reach the teacher PC subnet.
18. Refer to the exhibit. Why are interfaces Fa0/11, Fa0/23, and Fa0/24 not shown in this switch output?
• Interfaces Fa0/11, Fa0/23, and Fa0/24 are trunks.
• Interfaces Fa0/11, Fa0/23, and Fa0/24 are shutdown.
• Interfaces Fa0/11, Fa0/23, and Fa0/24 are blocking.
• Interfaces Fa0/11, Fa0/23, and Fa0/24 failed diagnostics
19. Refer to the exhibit. A network technician is performing an initial installation of a new switch in the east wing. The technician removes the switch from the box, makes the connections to the network, and adds the configuration shown. The technician notifies the network administrator that the switch has been installed. When the network administrator at the home office attempts to telnet to the switch from host 192.168.0.1, the connection fails. What action should the network technician take?
• Add an enable password to the switch.
• Add a default gateway to the switch configuration.
• Configure the switch with an IP access list to permit the host connection.
• Enable the physical interfaces of the switch with the no shutdown command.
20. Refer to the exhibit. After all the interfaces have stabilized, what is the spanning-tree state of all the enabled interfaces of SW11?
• discarding
• forwarding
• learning
• listening
CCNA Discovery 4 Module 6 Exam Answers Version 4.0
1. A network engineer researched whether there are mechanisms available to help with the transition from an IPv4 addressing structure to IPv6. What three options did the engineer find?(Choose three.)
• A protocol translation mechanism allows communication between the IPv4 and IPv6 networks.
• A packet analyzer determines the addressing structure and converts it to the appropriate IPv4 or IPv6 scheme.
• New Core devices that support IPV6 must be purchased.
• A protocol converter changes IPv4 packets into IPv6 packets and vice versa.
• A dual-stack network design allows both IPv4 and IPv6 addressing to be used on all network devices.
• Tunneling allows IPv4 packets to be encapsulated so that they can traverse IPv6 networks and vice versa.
2. When should the command no auto-summary be used?
• with RIP version 1, to enable classless routing
• with RIP version 2, to enable classless routing
• with RIP version 1, when discontigous networks exist
• with RIP version 2, when discontigous networks exist
3. Refer to the exhibit. What must an administrator do on R3 to ensure that update packets are sent with subnet mask information?
• Add the commands:
R3(config-router)# auto-summary
R3(config-router)# no version 2
• Add the commands:
R3(config-router)# version 2
R3(config-router)# no auto-summary
• Change the network statement on R3:
R3(config)# network 10.10.4.0
• Add the command:
R3(config)# ip route 0.0.0.0 0.0.0.0 s0/0
4. What best describes a discontiguous network?
• combines several classfull networking address
• contains more than one route to a destination
• implements more than one routing protocol
• separated from the rest of the hierarchical group by another network
5. Refer to the exhibit. A company has decided to add a new workgroup. If the subnetting scheme for the network uses contiguous blocks of addresses, what subnet is assigned to WGROUP3?
• 172.16.3.12/29
• 172.16.3.16/29
• 172.16.3.20/29
• 172.16.3.24/29
• 172.16.3.32/29
6. A network administrator is using the 10.0.0.0/8 network for the company. The administrator must create a masking scheme to support 750 users at the main office and 620 users at the remote office. What mask should be assigned to the 10.0.0.0/8 network to preserve the most addresses?
• 255.255.255.0
• /19
• /20
• 255.255.252.0
• /23
• /21
7. What is another format for the IPv6 address 1080:0000:0000:0000:0000:0000:1267:01A2?
• 1080::1267:01A2
• 1080:0:0:0:0:1267:01A2
• 1080::0:1267:01A2
• 1080:::::1267.01A2
8. How many bits make up an IPv6 address?
• 32
• 48
• 64
• 128
9. After activating IPv6 traffic forwarding, configuring IPv6 addresses, and globally configure RIPng, what is the remaining step to activate RIPng?
• Enter the ipv6 router rip name command and then use network statements to activate RIPng on the interfaces.
• Enter the ipv6 router rip name command and then specify which interfaces run RIPng, which are passive, and which only receive.
• Enter the interface mode for each IPv6 interface and enable RIPng with the ipv6 rip name enable command.
• Enter the interface mode for each IPv6 interface and enable the multicast group FF02::9, and then activate RIPng globally using the ipv6 router rip name command.
• Enter the router rip command, and then activate RIPng using the version command.
• RIPng then automatically runs on all IPv6 interfaces.
10. Refer to the exhibit. The IT management has determined that the new subnet for WGROUP3 needs to be broken down into four more subnets. What would the subnet mask be for the four newly created subnets within WGROUP3?
• 255.255.128.0
• 255.255.192.0
• 255.255.224.0
• 255.255.248.0
• 255.255.252.0
11. Refer to the exhibit. What is the first usable IP address that can be assigned to the WGROUP3 switch?
• 172.16.50.96/27
• 172.16.50.97/27
• 172.16.50.98/27
• 172.16.50.99/27
• 255.255.255.0
12. Refer to the exhibit. Which set of router commands is required to turn on unequal-cost load sharing so that RTRA selects the path A-B-E and the lowest cost path A-C-E to the Internet?
• RTRA(config)# router eigrp 1
RTRA(config-router)# variance 2
• RTRA(config)# router eigrp 1
RTRA(config-router)# variance 1
• RTRA(config)# router eigrp 1
RTRA(config-router)# maximum-paths 2
• RTRA(config)# router eigrp 1
RTRA(config-router)# maximum-paths 1
13. Refer to the exhibit. Assuming that the default EIGRP configuration is running on both routers, which statement is true about Router A reaching the 2.2.2.0/24 network?
• The no auto-summary command needs to be issued to disable automatic summarization.
• The network 2.2.2.0 command needs to be issued to ensure that Router A recognizes the 2.2.2.0 network.
• EIGRP supports VLSM and automatically recognizes the 2.2.2.0 network.
• EIGRP does not support VLSM; therefore it cannot be used with discontiguous networks.
14. Refer to the exhibit. The network administrator wants router RTA to send only the summarized route of 10.10.0.0/16 to RTC. Which configuration accomplishes this?
• RTA(config)# interface s0/0
RTA(config-if)# ip summary-address eigrp 101 10.10.0.0 255.255.0.0
RTA(config-if)# exit
RTA(config)# router eigrp 101
RTA(config-router)# no auto-summary
• RTA(config)# interface s0/1
RTA(config-if)# ip summary-address eigrp 101 10.10.0.0 255.255.0.0
RTA(config-if)# exit
RTA(config)# router eigrp 101
RTA(config-router)# no auto-summary
• RTA(config)# interface s0/0
RTA(config-if)# ip summary-address eigrp 101 10.10.0.0 255.255.0.0
• RTA(config)# interface s0/1
RTA(config-if)# ip summary-address eigrp 101 10.10.0.0 255.255.0.0
15. What is a good design practice when developing a hierarchical addressing scheme?
• Address the nodes in the Access Layer and work toward the Core Layer.
• Assign addresses to the Core devices before planning the addressing scheme for the server farm.
• Determine where statically configured addressing will be implemented.
• Determine what percentage of devices are wired and what percentage of devices are wireless.
16. A network administrator is asked to design a new addressing scheme for a corporate network. Presently, there are 850 users at the head office, 220 users at sales, 425 at manufacturing, and 50 at the research site. Which statement defines the correct VLSM addressing map with minimal waste using the 172.17.0.0/16 network?
• 172.17.0.0/20 head office
172.17.1.0/21 manufacturing
172.17.1.0/22 sales
172.17.3.0/26 research
• 172.17.48.0/19 head office
172.17.16.0/20 manufacturing
172.17.48.128/25 sales
172.17.48.0/26 research
• 172.17.0.0/22 head office
172.17.4.0/23 manufacturing
172.17.5.0/24 sales
172.17.6.0/26 research
• 172.17.2.0/22 head office
172.17.3.0/23 manufacturing
172.17.4.0/26 sales
172.17.4.128/25 research
17. How would the routes for networks 172.16.1.0/24, 172.16.3.0/24, and 172.16.15.0/24 be summarized?
• 172.16.0.0/20
• 172.16.0.0/21
• 172.16.0.0/22
• 172.16.0.0/24
18. What two advantages does CIDR provide to a network? (Choose two.)
• dynamic address assignment
• automatic route redistribution
• reduced routing update traffic
• easier management of summarization
• automatic summarization at classfull boundaries
19. Which statement describes MD5 authentication for neighbor authentication?
• All passwords are sent in clear text when neighbors first learn about each other.
• Only the initiating router sends its password using encrypted text when it first discovers a new router.
• All routers send their password using encrypted text only when they first learn of each other.
• All routers send their password using encrypted text each time they exchange update packets.
20. Refer to the exhibit. What are the broadcast addresses for each subnet?
• Admin – 172.16.31.0
QA – 172.16.1.127
Development – 172.16.2.255
Sales – 172.16.32.255
• Admin – 172.16.31.255
QA – 172.16.1.255
Development – 172.16.3.255
Sales – 172.16.63.255
• Admin – 172.16.31.255
QA – 172.16.1.127
Development – 172.16.3.255
Sales – 172.16.63.255
• Admin – 172.16.31.0
QA – 172.16.1.255
Development – 172.16.2.255
Sales – 172.16.32.255
21. Refer to the exhibit. The IT management is adding three VLANs to the wgroup3 switch. The current subnet will be broken down to support 14 hosts for each of the new VLANs. What will the new subnet mask be for these VLANs?
• 255.255.255.192
• 255.255.255.240
• 255.255.248.0
• 255.255.255.224
• 255.255.240.0
• 255.255.255.248
22. An administrator is configuring IPv6 on a router. The steps that have already been completed are:
1. Activate IPv6 traffic forwarding.
2. Configure IPv6 addresses.
3. Globally configure RIPng.
What is the remaining step to complete the activation of RIPng?
• Enter the ipv6 router rip name command and then use network statements to activate RIPng on the interfaces.
• Enter the ipv6 router rip name command and then specify which interfaces run RIPng, which are passive, and which only receive.
• Enter the interface mode for each IPv6 interface and enable RIPng with the ipv6 rip name enable command.
• Enter the interface mode for each IPv6 interface and enable the multicast group FF02::9, and then activate RIPng globally using the ipv6 router rip name command.
• Enter the router rip command, and then activate RIPng using the version command. RIPng then automatically runs on all IPv6 interfaces.
23. Which range includes all available networks in the 192.168.8.0/21 network?
• 192.168.8.0/24 – 192.168.14.0/24
• 192.168.8.0/24 – 192.168.15.0/24
• 192.168.8.0/24 – 192.168.16.0/24
• 192.168.8.0/24 – 192.168.17.0/24
24. Which two are best practices for creating a new IP addressing scheme for a network? (Choose two.)
• Plan and allow for significant growth.
• Assign addresses to the access layer before any other layer.
• Plan the entire addressing scheme before assigning any addresses.
• Begin with the access layer network summary addresses and work to the edge.
• Plan the addressing scheme to meet the current minimum requirement needs.
• Implement statically assigned addresses to all hosts in the distribution layer first.
25. Refer to the exhibit. Which subnet will provide sufficient addresses for the Production network with minimal waste?
• 172.16.0.192/26
• 172.16.0.192/27
• 172.16.0.224/26
• 172.16.0.160/26
• 172.16.0.144/27
26. A network designer is implementing a new network for a company. The designer is using all new Cisco equipment and has decided to select a hierarchical routing protocol for the network. The designer wishes to minimize traffic from routing updates but also needs fast routing convergence in the event of a topology change. Also, the existing IP addressing scheme requires that the selected protocol support VLSM. Which routing protocol should be chosen?
• BGP
• RIP v1
• RIP v2
• OSPF
• EIGRP
• A protocol translation mechanism allows communication between the IPv4 and IPv6 networks.
• A packet analyzer determines the addressing structure and converts it to the appropriate IPv4 or IPv6 scheme.
• New Core devices that support IPV6 must be purchased.
• A protocol converter changes IPv4 packets into IPv6 packets and vice versa.
• A dual-stack network design allows both IPv4 and IPv6 addressing to be used on all network devices.
• Tunneling allows IPv4 packets to be encapsulated so that they can traverse IPv6 networks and vice versa.
2. When should the command no auto-summary be used?
• with RIP version 1, to enable classless routing
• with RIP version 2, to enable classless routing
• with RIP version 1, when discontigous networks exist
• with RIP version 2, when discontigous networks exist
3. Refer to the exhibit. What must an administrator do on R3 to ensure that update packets are sent with subnet mask information?
• Add the commands:
R3(config-router)# auto-summary
R3(config-router)# no version 2
• Add the commands:
R3(config-router)# version 2
R3(config-router)# no auto-summary
• Change the network statement on R3:
R3(config)# network 10.10.4.0
• Add the command:
R3(config)# ip route 0.0.0.0 0.0.0.0 s0/0
4. What best describes a discontiguous network?
• combines several classfull networking address
• contains more than one route to a destination
• implements more than one routing protocol
• separated from the rest of the hierarchical group by another network
5. Refer to the exhibit. A company has decided to add a new workgroup. If the subnetting scheme for the network uses contiguous blocks of addresses, what subnet is assigned to WGROUP3?
• 172.16.3.12/29
• 172.16.3.16/29
• 172.16.3.20/29
• 172.16.3.24/29
• 172.16.3.32/29
6. A network administrator is using the 10.0.0.0/8 network for the company. The administrator must create a masking scheme to support 750 users at the main office and 620 users at the remote office. What mask should be assigned to the 10.0.0.0/8 network to preserve the most addresses?
• 255.255.255.0
• /19
• /20
• 255.255.252.0
• /23
• /21
7. What is another format for the IPv6 address 1080:0000:0000:0000:0000:0000:1267:01A2?
• 1080::1267:01A2
• 1080:0:0:0:0:1267:01A2
• 1080::0:1267:01A2
• 1080:::::1267.01A2
8. How many bits make up an IPv6 address?
• 32
• 48
• 64
• 128
9. After activating IPv6 traffic forwarding, configuring IPv6 addresses, and globally configure RIPng, what is the remaining step to activate RIPng?
• Enter the ipv6 router rip name command and then use network statements to activate RIPng on the interfaces.
• Enter the ipv6 router rip name command and then specify which interfaces run RIPng, which are passive, and which only receive.
• Enter the interface mode for each IPv6 interface and enable RIPng with the ipv6 rip name enable command.
• Enter the interface mode for each IPv6 interface and enable the multicast group FF02::9, and then activate RIPng globally using the ipv6 router rip name command.
• Enter the router rip command, and then activate RIPng using the version command.
• RIPng then automatically runs on all IPv6 interfaces.
10. Refer to the exhibit. The IT management has determined that the new subnet for WGROUP3 needs to be broken down into four more subnets. What would the subnet mask be for the four newly created subnets within WGROUP3?
• 255.255.128.0
• 255.255.192.0
• 255.255.224.0
• 255.255.248.0
• 255.255.252.0
11. Refer to the exhibit. What is the first usable IP address that can be assigned to the WGROUP3 switch?
• 172.16.50.96/27
• 172.16.50.97/27
• 172.16.50.98/27
• 172.16.50.99/27
• 255.255.255.0
12. Refer to the exhibit. Which set of router commands is required to turn on unequal-cost load sharing so that RTRA selects the path A-B-E and the lowest cost path A-C-E to the Internet?
• RTRA(config)# router eigrp 1
RTRA(config-router)# variance 2
• RTRA(config)# router eigrp 1
RTRA(config-router)# variance 1
• RTRA(config)# router eigrp 1
RTRA(config-router)# maximum-paths 2
• RTRA(config)# router eigrp 1
RTRA(config-router)# maximum-paths 1
13. Refer to the exhibit. Assuming that the default EIGRP configuration is running on both routers, which statement is true about Router A reaching the 2.2.2.0/24 network?
• The no auto-summary command needs to be issued to disable automatic summarization.
• The network 2.2.2.0 command needs to be issued to ensure that Router A recognizes the 2.2.2.0 network.
• EIGRP supports VLSM and automatically recognizes the 2.2.2.0 network.
• EIGRP does not support VLSM; therefore it cannot be used with discontiguous networks.
14. Refer to the exhibit. The network administrator wants router RTA to send only the summarized route of 10.10.0.0/16 to RTC. Which configuration accomplishes this?
• RTA(config)# interface s0/0
RTA(config-if)# ip summary-address eigrp 101 10.10.0.0 255.255.0.0
RTA(config-if)# exit
RTA(config)# router eigrp 101
RTA(config-router)# no auto-summary
• RTA(config)# interface s0/1
RTA(config-if)# ip summary-address eigrp 101 10.10.0.0 255.255.0.0
RTA(config-if)# exit
RTA(config)# router eigrp 101
RTA(config-router)# no auto-summary
• RTA(config)# interface s0/0
RTA(config-if)# ip summary-address eigrp 101 10.10.0.0 255.255.0.0
• RTA(config)# interface s0/1
RTA(config-if)# ip summary-address eigrp 101 10.10.0.0 255.255.0.0
15. What is a good design practice when developing a hierarchical addressing scheme?
• Address the nodes in the Access Layer and work toward the Core Layer.
• Assign addresses to the Core devices before planning the addressing scheme for the server farm.
• Determine where statically configured addressing will be implemented.
• Determine what percentage of devices are wired and what percentage of devices are wireless.
16. A network administrator is asked to design a new addressing scheme for a corporate network. Presently, there are 850 users at the head office, 220 users at sales, 425 at manufacturing, and 50 at the research site. Which statement defines the correct VLSM addressing map with minimal waste using the 172.17.0.0/16 network?
• 172.17.0.0/20 head office
172.17.1.0/21 manufacturing
172.17.1.0/22 sales
172.17.3.0/26 research
• 172.17.48.0/19 head office
172.17.16.0/20 manufacturing
172.17.48.128/25 sales
172.17.48.0/26 research
• 172.17.0.0/22 head office
172.17.4.0/23 manufacturing
172.17.5.0/24 sales
172.17.6.0/26 research
• 172.17.2.0/22 head office
172.17.3.0/23 manufacturing
172.17.4.0/26 sales
172.17.4.128/25 research
17. How would the routes for networks 172.16.1.0/24, 172.16.3.0/24, and 172.16.15.0/24 be summarized?
• 172.16.0.0/20
• 172.16.0.0/21
• 172.16.0.0/22
• 172.16.0.0/24
18. What two advantages does CIDR provide to a network? (Choose two.)
• dynamic address assignment
• automatic route redistribution
• reduced routing update traffic
• easier management of summarization
• automatic summarization at classfull boundaries
19. Which statement describes MD5 authentication for neighbor authentication?
• All passwords are sent in clear text when neighbors first learn about each other.
• Only the initiating router sends its password using encrypted text when it first discovers a new router.
• All routers send their password using encrypted text only when they first learn of each other.
• All routers send their password using encrypted text each time they exchange update packets.
20. Refer to the exhibit. What are the broadcast addresses for each subnet?
• Admin – 172.16.31.0
QA – 172.16.1.127
Development – 172.16.2.255
Sales – 172.16.32.255
• Admin – 172.16.31.255
QA – 172.16.1.255
Development – 172.16.3.255
Sales – 172.16.63.255
• Admin – 172.16.31.255
QA – 172.16.1.127
Development – 172.16.3.255
Sales – 172.16.63.255
• Admin – 172.16.31.0
QA – 172.16.1.255
Development – 172.16.2.255
Sales – 172.16.32.255
21. Refer to the exhibit. The IT management is adding three VLANs to the wgroup3 switch. The current subnet will be broken down to support 14 hosts for each of the new VLANs. What will the new subnet mask be for these VLANs?
• 255.255.255.192
• 255.255.255.240
• 255.255.248.0
• 255.255.255.224
• 255.255.240.0
• 255.255.255.248
22. An administrator is configuring IPv6 on a router. The steps that have already been completed are:
1. Activate IPv6 traffic forwarding.
2. Configure IPv6 addresses.
3. Globally configure RIPng.
What is the remaining step to complete the activation of RIPng?
• Enter the ipv6 router rip name command and then use network statements to activate RIPng on the interfaces.
• Enter the ipv6 router rip name command and then specify which interfaces run RIPng, which are passive, and which only receive.
• Enter the interface mode for each IPv6 interface and enable RIPng with the ipv6 rip name enable command.
• Enter the interface mode for each IPv6 interface and enable the multicast group FF02::9, and then activate RIPng globally using the ipv6 router rip name command.
• Enter the router rip command, and then activate RIPng using the version command. RIPng then automatically runs on all IPv6 interfaces.
23. Which range includes all available networks in the 192.168.8.0/21 network?
• 192.168.8.0/24 – 192.168.14.0/24
• 192.168.8.0/24 – 192.168.15.0/24
• 192.168.8.0/24 – 192.168.16.0/24
• 192.168.8.0/24 – 192.168.17.0/24
24. Which two are best practices for creating a new IP addressing scheme for a network? (Choose two.)
• Plan and allow for significant growth.
• Assign addresses to the access layer before any other layer.
• Plan the entire addressing scheme before assigning any addresses.
• Begin with the access layer network summary addresses and work to the edge.
• Plan the addressing scheme to meet the current minimum requirement needs.
• Implement statically assigned addresses to all hosts in the distribution layer first.
25. Refer to the exhibit. Which subnet will provide sufficient addresses for the Production network with minimal waste?
• 172.16.0.192/26
• 172.16.0.192/27
• 172.16.0.224/26
• 172.16.0.160/26
• 172.16.0.144/27
26. A network designer is implementing a new network for a company. The designer is using all new Cisco equipment and has decided to select a hierarchical routing protocol for the network. The designer wishes to minimize traffic from routing updates but also needs fast routing convergence in the event of a topology change. Also, the existing IP addressing scheme requires that the selected protocol support VLSM. Which routing protocol should be chosen?
• BGP
• RIP v1
• RIP v2
• OSPF
• EIGRP
CCNA Discovery 4 Module 5 Exam Answers Version 4.0
1. Which rule should be followed when implementing the security requirements of a network design?
• Always use a common security plan for all business needs.
• As standard practice, lower access restrictions for users if cost is too high.
• Avoid reducing security in order to add additional network capabilities.
• When possible, implement an IDS to protect users from spam.
2. What limitations of the 2960 switch prevent it from providing the services needed in the Distribution layer?
• It is limited to copper connections.
• It does not support QoS.
• It does not support voice VLAN capability.
• It does not support route summarization.
3. When considering converged network designs, it is important to identify appropriate service demands. What is a concern when preparing a network design to fit this environment?
• business data compensation for sensitivity to noise
• location and placement of firewalls
• voice-level quality of service
• security policy requirements
4. Which three design requirements are implemented at the access layer? (Choose three.)
• PoE
• VLANs
• high-density routing
• packet filtering
• rapidly converging routing protocols
• QoS traffic classification and marking
5. Refer to the exhibit. Which statement is true regarding how the ISP router filters traffic?
• Traffic from the 64.100.0.1 address to any destination on the Internet is denied.
• Traffic from any source address entering the ISP router interface s0/0/0 is permitted.
• Only traffic with a source address of 64.100.0.1/30 is allowed into the ISP router interface s0/0/0.
• All traffic from the 64.100.0.0/21 network can access the Internet.
• Traffic from any source address can access the 64.100.0.0/21 network.
6. Which two factors should be considered when designing a wireless LAN that provides seamless roaming capabilities? (Choose two.)
• use of a wireless controller to manage IP addressing
• type of routing protocols
• location of existing wired clients
• coverage
• position of MDF
7. What are three features of a Catalyst 2960 switch? (Choose three.)
• network layer functionality
• redundant power availability
• route summarization
• SNMP
• switch clustering
• inter-VLAN routing
8. A company lists this equipment in their network design:
Two Catalyst 4503 Layer 3 switches
One 5500 security appliance firewall
Two Catalyst 6509 switches
Two lightweight access points
Two Catalyst 2960 switches
Which two types of devices would be appropriate to use at the access layer to provide end-user connectivity? (Choose two.)
• Catalyst 4503 switches
• Cisco 1841 router
• Catalyst 6509 switches
• lightweight access points
• Catalyst 2960 switches
9. Which two statements are true regarding the following extended ACL? (Choose two.)
• access-list 101 deny tcp 172.16.3.0 0.0.0.255 any eq 20
access-list 101 deny tcp 172.16.3.0 0.0.0.255 any eq 21
access-list 101 permit ip any any
• FTP traffic originating from network 172.16.3.0/24 is denied.
• All traffic is implicitly denied.
• FTP traffic destined for the 172.16.3.0/24 network is denied.
• Telnet traffic originating on network 172.16.3.0/24 is denied.
• Web traffic originating from 172.16.3.0 is permitted.
10. Which statement applies to a large network with thousands of nodes?
• Each wireless phone is normally in a separate VLAN for security reasons.
• Multiple firewalls exist throughout the access layer for maximum security protection.
• Firewalls cannot be implemented in the multilayer switches and routers.
• Intrusion detection is more likely to be performed by a separate device rather than integrated into a switch or router
11. on campus. The college currently has only wired network device access. Which two devices must be incorporated into the network design to best accommodate roaming for wireless IP phones?(Choose two.)
• voice VLAN capable switch
• autonomous AP
• PoE switch
• Cisco wireless LAN controller
• 2960 switch with 48 100-Mb ports
• lightweight access points
12. What type of WAN service is Frame Relay?
• dedicated
• cell switched
• packet switched
• circuit switched
13. Refer to the exhibit. What is an advantage of having two links connected between the two switches shown?
• provides redundancy in case one of the switches fails
• provides connectivity to Switch1 when the link to the server fails
• provides connectivity when one of the connections between the switches fails
• provides power to the other switch when the other switch has lost AC power
14. What is the function of the access layer in the Cisco three-layer hierarchical internetworking model?
• provides QoS classification and marking
• implements a fast-converging routing protocol
• uses routed interconnections between devices
• aggregates traffic and performs route summarization
15. When applying network security, what security measure should be implemented first?
• securing the network devices
• implementing the firewalls or filters at the enterprise edge
• applying security to resources accessed by internal users
• applying ACLs to the interfaces of the routers in the internal network
16. What characteristic of a network supports high availability?
• VPNs
• high-bandwidth paths to servers
• redundancy
• wireless management
17. What is integrated into a Cisco IP phone to reduce the number of ports needed in the wiring closet?
• hub
• router
• switch
• firewall appliance
18. Which network design process identifies where to place access points?
• site survey
• risk assessment
• scalability design
• network protocol analysis
19. Using expandable, modular network devices is a key element of what network design criteria?
• availability
• performance
• scalability
• security
20. What is a primary function of a wireless LAN controller?
• tuning each AP channel for optimal coverage
• providing PoE to the wireless clients
• distributing VLAN information to the wireless clients
• serving as the point of connection between wireless clients and the wired LAN
21. What characteristic in a routing protocol allows it to support the network design criteria for availability?
• CIDR support
• fast convergence
• timed updates
• VLSM suppor
22. A network designer is evaluating the network security implementation for an organization. The designer recommends adding network security devices in front of the server farm, although network security devices have been deployed in the Enterprise Edge for two years. What type of attack can be effectively prevented with this recommendation?
• virus attack
• internal attack
• Internet attack
• phishing attack
23. Refer to the exhibit. The branch office needs constant access to the servers in the enterprise headquarters. Therefore, a backup Frame Relay link is added. A network
• administrator is configuring the routers in the branch office to make sure that when the backup Frame Relay link is used, only the traffic to access the enterprise headquarters is allowed. Which statement is true about the routing configuration on branch office edge routers?
• The command ip route 0.0.0.0 0.0.0.0 serial 0/0 50 should be configured on BE2.
• The command ip route 128.107.0.0 255.255.0.0 serial 0/0 50 should be configured on BE1.
• The command ip route 128.107.0.0 255.255.0.0 serial 0/0 50 should be configured on BE2.
• The command ip route 192.135.250.0 255.255.255.0 serial 0/0 50 should be configured on BE1.
24. An automobile sales company is establishing a new, small sales showroom in a downtown area. To update the inventory database, the new sales office will need a WAN connection to the headquarters that is located in the suburban area. The WAN connection should be around a 4 Mb/s connection. Which WAN service will provide the most economical approach to meet the requirement?
• DSL
• ATM
• T1 line
• Frame Relay
25. A network designer is selecting a WAN technology for connections between the headquarters of an organization and its branch offices. In this context, what is one advantage of choosing Frame Relay over a T1 line?
• more secure
• flexible bandwidth
• shared media across the link
• efficiency with fixed length packet size
• Always use a common security plan for all business needs.
• As standard practice, lower access restrictions for users if cost is too high.
• Avoid reducing security in order to add additional network capabilities.
• When possible, implement an IDS to protect users from spam.
2. What limitations of the 2960 switch prevent it from providing the services needed in the Distribution layer?
• It is limited to copper connections.
• It does not support QoS.
• It does not support voice VLAN capability.
• It does not support route summarization.
3. When considering converged network designs, it is important to identify appropriate service demands. What is a concern when preparing a network design to fit this environment?
• business data compensation for sensitivity to noise
• location and placement of firewalls
• voice-level quality of service
• security policy requirements
4. Which three design requirements are implemented at the access layer? (Choose three.)
• PoE
• VLANs
• high-density routing
• packet filtering
• rapidly converging routing protocols
• QoS traffic classification and marking
5. Refer to the exhibit. Which statement is true regarding how the ISP router filters traffic?
• Traffic from the 64.100.0.1 address to any destination on the Internet is denied.
• Traffic from any source address entering the ISP router interface s0/0/0 is permitted.
• Only traffic with a source address of 64.100.0.1/30 is allowed into the ISP router interface s0/0/0.
• All traffic from the 64.100.0.0/21 network can access the Internet.
• Traffic from any source address can access the 64.100.0.0/21 network.
6. Which two factors should be considered when designing a wireless LAN that provides seamless roaming capabilities? (Choose two.)
• use of a wireless controller to manage IP addressing
• type of routing protocols
• location of existing wired clients
• coverage
• position of MDF
7. What are three features of a Catalyst 2960 switch? (Choose three.)
• network layer functionality
• redundant power availability
• route summarization
• SNMP
• switch clustering
• inter-VLAN routing
8. A company lists this equipment in their network design:
Two Catalyst 4503 Layer 3 switches
One 5500 security appliance firewall
Two Catalyst 6509 switches
Two lightweight access points
Two Catalyst 2960 switches
Which two types of devices would be appropriate to use at the access layer to provide end-user connectivity? (Choose two.)
• Catalyst 4503 switches
• Cisco 1841 router
• Catalyst 6509 switches
• lightweight access points
• Catalyst 2960 switches
9. Which two statements are true regarding the following extended ACL? (Choose two.)
• access-list 101 deny tcp 172.16.3.0 0.0.0.255 any eq 20
access-list 101 deny tcp 172.16.3.0 0.0.0.255 any eq 21
access-list 101 permit ip any any
• FTP traffic originating from network 172.16.3.0/24 is denied.
• All traffic is implicitly denied.
• FTP traffic destined for the 172.16.3.0/24 network is denied.
• Telnet traffic originating on network 172.16.3.0/24 is denied.
• Web traffic originating from 172.16.3.0 is permitted.
10. Which statement applies to a large network with thousands of nodes?
• Each wireless phone is normally in a separate VLAN for security reasons.
• Multiple firewalls exist throughout the access layer for maximum security protection.
• Firewalls cannot be implemented in the multilayer switches and routers.
• Intrusion detection is more likely to be performed by a separate device rather than integrated into a switch or router
11. on campus. The college currently has only wired network device access. Which two devices must be incorporated into the network design to best accommodate roaming for wireless IP phones?(Choose two.)
• voice VLAN capable switch
• autonomous AP
• PoE switch
• Cisco wireless LAN controller
• 2960 switch with 48 100-Mb ports
• lightweight access points
12. What type of WAN service is Frame Relay?
• dedicated
• cell switched
• packet switched
• circuit switched
13. Refer to the exhibit. What is an advantage of having two links connected between the two switches shown?
• provides redundancy in case one of the switches fails
• provides connectivity to Switch1 when the link to the server fails
• provides connectivity when one of the connections between the switches fails
• provides power to the other switch when the other switch has lost AC power
14. What is the function of the access layer in the Cisco three-layer hierarchical internetworking model?
• provides QoS classification and marking
• implements a fast-converging routing protocol
• uses routed interconnections between devices
• aggregates traffic and performs route summarization
15. When applying network security, what security measure should be implemented first?
• securing the network devices
• implementing the firewalls or filters at the enterprise edge
• applying security to resources accessed by internal users
• applying ACLs to the interfaces of the routers in the internal network
16. What characteristic of a network supports high availability?
• VPNs
• high-bandwidth paths to servers
• redundancy
• wireless management
17. What is integrated into a Cisco IP phone to reduce the number of ports needed in the wiring closet?
• hub
• router
• switch
• firewall appliance
18. Which network design process identifies where to place access points?
• site survey
• risk assessment
• scalability design
• network protocol analysis
19. Using expandable, modular network devices is a key element of what network design criteria?
• availability
• performance
• scalability
• security
20. What is a primary function of a wireless LAN controller?
• tuning each AP channel for optimal coverage
• providing PoE to the wireless clients
• distributing VLAN information to the wireless clients
• serving as the point of connection between wireless clients and the wired LAN
21. What characteristic in a routing protocol allows it to support the network design criteria for availability?
• CIDR support
• fast convergence
• timed updates
• VLSM suppor
22. A network designer is evaluating the network security implementation for an organization. The designer recommends adding network security devices in front of the server farm, although network security devices have been deployed in the Enterprise Edge for two years. What type of attack can be effectively prevented with this recommendation?
• virus attack
• internal attack
• Internet attack
• phishing attack
23. Refer to the exhibit. The branch office needs constant access to the servers in the enterprise headquarters. Therefore, a backup Frame Relay link is added. A network
• administrator is configuring the routers in the branch office to make sure that when the backup Frame Relay link is used, only the traffic to access the enterprise headquarters is allowed. Which statement is true about the routing configuration on branch office edge routers?
• The command ip route 0.0.0.0 0.0.0.0 serial 0/0 50 should be configured on BE2.
• The command ip route 128.107.0.0 255.255.0.0 serial 0/0 50 should be configured on BE1.
• The command ip route 128.107.0.0 255.255.0.0 serial 0/0 50 should be configured on BE2.
• The command ip route 192.135.250.0 255.255.255.0 serial 0/0 50 should be configured on BE1.
24. An automobile sales company is establishing a new, small sales showroom in a downtown area. To update the inventory database, the new sales office will need a WAN connection to the headquarters that is located in the suburban area. The WAN connection should be around a 4 Mb/s connection. Which WAN service will provide the most economical approach to meet the requirement?
• DSL
• ATM
• T1 line
• Frame Relay
25. A network designer is selecting a WAN technology for connections between the headquarters of an organization and its branch offices. In this context, what is one advantage of choosing Frame Relay over a T1 line?
• more secure
• flexible bandwidth
• shared media across the link
• efficiency with fixed length packet size
CCNA Discovery 4 Module 1 Exam Answers Version 4.0
1. What are two mechanisms that provide redundancy for server farm implementations? (Choose two.)
• host intrusion prevention systems
• virtual private networks
• network intrusion prevention systems
• Rapid Spanning Tree Protocol
• Hot Standby Routing Protocol
2. The ability to connect securely to a private network over a public network is provided by which WAN technology?
• DSL
• Frame Relay
• ISDN
• PSTN
• VPN
3. Which three statements describe the functions of the Cisco hierarchical network design model? (Choose three.)
• Route summarization is not necessary at the core and distribution layers.
• The distribution layer is responsible for traffic filtering and isolating failures from the core.
• Two goals of the core layer are 100 percent uptime and maximizing throughput.
• The access layer provides a means of connecting end devices to the network.
• The distribution layer distributes network traffic directly to end users.
• The core layer usually employs a star topology.
4. A network designer is creating a new network. The design must offer enough redundancy to provide protection against a single link or device failure, yet must not be too complex or expensive to implement. What topology would fill these needs?
• star
• full mesh
• partial mesh
• extended star
• hub and spoke
5. Refer to the exhibit. If the firewall module has been correctly configured using best practices for network security, which statement is true about the security design for the network?
• Servers in the network are not protected from internal attacks.
• Servers in the DMZ are protected from internal and external attacks.
• Servers in the server farm are protected from internal and external attacks.
• Traffic from the external networks is not able to access the servers in the DMZ.
6. Which statement is true about a DMZ in a traditional network firewall design?
• A DMZ is designed to provide service for external access but not for internal access.
• Servers in the DMZ provide limited information that can be accessed from external networks.
• User access to the DMZ from the Internet and the internal network usually is treated the same way.
• All servers in the enterprise network should be located in a DMZ because of enhanced security measures.
7. What network connection would be most cost efficient while still meeting the security and connectivity needs of this teleworker?
• dedicated leased line connection with a dialup backup link
• Frame Relay connection with a DSL backup link
• DSL VPN connection with a dialup backup link
• ATM connection with a DSL VPN backup link
• DSL connection with no backup link
8. Refer to the exhibit. The network administrator creates a standard access control list to prohibit traffic from the 192.168.1.0/24 network from reaching the 192.168.2.0/24 network while still permitting Internet access for all networks. On which router interface and in which direction should it be applied?
• interface fa0/0, inbound
• interface fa0/0, outbound
• interface fa0/1, inbound
• interface fa0/1, outbound
9. Refer to the exhibit. The server broadcasts an ARP request for the MAC address of its default gateway. If STP is not enabled, what is the result of this ARP request?
• Router_1 contains the broadcast and replies with the MAC address of the next-hop router.
• Switch_A replies with the MAC address of the Router_1 E0 interface.
• Switch_A and Switch_B continuously flood the message onto the network.
• Switch_B forwards the broadcast request and replies with the Router_1 address.
10. What are two best practices in wireless LAN design to ensure secure wireless access to the corporate network? (Choose two.)
• Configure APs for broadcast SSID.
• Place APs as far apart as possible.
• Use a separate WLAN for employees.
• Configure WPA.
• Use wireless routers in all IDFs.
11. In a well-designed, high-availability network, which device significantly affects the most users if a failure occurs?
• desktop PC of the user
• large switch in the network core layer
• large switch in the network distribution layer
• small workgroup switch in the network access layer
12. Which two statements are true regarding network convergence? (Choose two.)
• In a large network, using the EIGRP or OSPF routing protocols rather than RIPv2 may improve convergence time.
• Using STP at the core layer improves convergence time by allowing the use of redundant links between devices.
• Route summarization improves convergence time by minimizing the size of the routing table.
• A full mesh topology improves convergence time by allowing load balancing.
• ACLs can be configured to improve convergence time.
13. Centralizing servers in a data center server farm can provide which benefit over a distributed server environment?
• It keeps client-to-server traffic local to a single subnet.
• Servers located in a data center require less bandwidth.
• It is easier to filter and prioritize traffic to and from the data center.
• Server farms are not subject to denial of service attacks.
14. Refer to the exhibit. What effect does the ACL shown have on network traffic, assuming that it is correctly applied to the interface?
• All traffic to network 172.16.0.0 is denied.
• All TCP traffic is denied to and from network 172.16.0.0.
• All Telnet traffic from the 172.16.0.0 network to any destination is denied.
• All port 23 traffic to the 172.16.0.0 network is denied.
• All traffic from the 172.16.0.0 network is denied to any other network.
15. Which Cisco IOS function can be configured at the distribution layer to filter unwanted traffic and provide traffic management?
• virus protection
• spyware protection
• VPNs
• access control lists
16. What kind of ACL inspects outbound UDP, TCP, and ICMP traffic and allows inbound access only to traffic that belongs to these established sessions?
• dynamic ACL
• time-based ACL
• reflexive ACL
• lock and key ACL
17. Which three functions are performed at the distribution layer of the hierarchical network model? (Choose three.)
• summarizing routes from the access layer
• allowing end users to access the local network
• providing the gateway of last resort for core layer devices
• preserving bandwidth at the access layer by filtering network functions
• isolating network problems to prevent them from affecting the core layer
• utilizing redundant links for load balancing to increase available bandwidth
18. Refer to the exhibit. Which two devices are part of the access design layer? (Choose two.)
• Edge2
• ISP4
• BR4
• FC-AP
• FC-CPE-1
• FC-ASW-2
19. What is true about implementing a centralized server farm topology?
• requires direct cabling from the MPOE to enhance the performance of servers
• requires the addition of high-capacity switches to each workgroup
• provides defined entry and exit points so that filtering and securing traffic is easier
• allows for placement of workgroup servers at the access layer
20. Refer to the exhibit. What happens when Host 1 attempts to send data?
• Frames from Host 1 are dropped, but no other action is taken.
• Frames from Host 1 cause the interface to shut down, and a log message is sent.
• Frames from Host 1 are forwarded, but a log message is sent.
• Frames from Host 1 are forwarded, and the mac-address table is updated.
21. Which two considerations are valid when designing access layer security?(Choose two.)
• In a large wireless network, the most efficient method to secure the WLAN is MAC address filtering.
• DoS attacks are normally launched against end-user PCs and can be mitigated by installing personal firewalls on all company PCs.
• SSH is more secure than Telnet to administer network devices.
• Disabling unused ports on the switches helps prevent unauthorized access to the network.
• All Telnet passwords are at least 6 characters long.
22. What address can be used to summarize only networks 172.16.0.0/24, 172.16.1.0/24, 172.16.2.0/24, and 172.16.3.0/24?
• 172.16.0.0/21
• 172.16.0.0/22
• 172.16.0.0 255.255.255.248
• 172.16.0.0 255.255.254.0
23. Which two items in a physical WLAN design can be identified through a site survey? (Choose two.)
• the types of antennas that are required
• the encryption techniques that are required
• the access point hardware that is required
• the different levels of access that are required
• the connection reliability that is required
24. Refer to the exhibit. Which two statements correctly describe the benefits of the network access layer design that is shown? (Choose two.)
• If host A sends a broadcast message, only hosts in VLAN10 receive the broadcast frame.
• If host A attempts to transmit data at the same time as another host, only hosts in VLAN10 are affected by the collision.
• Segmenting all voice traffic on a separate VLAN facilitates the implementation of QoS.
• VLANs improve network performance by facilitating the use of route summarization.
• VLANs at the access layer help guarantee network availability by facilitating load balancing.
25. What are three ways to ensure that an unwanted user does not connect to a wireless network and view the data? (Choose three.)
• Disable SSID broadcasting.
• Configure filters to restrict IP addresses.
• Use authentication between clients and the wireless device.
• Use NetBIOS name filtering between clients and the wireless device.
• Configure strong encryption such as WPA.
• Use a WEP compression method.
• host intrusion prevention systems
• virtual private networks
• network intrusion prevention systems
• Rapid Spanning Tree Protocol
• Hot Standby Routing Protocol
2. The ability to connect securely to a private network over a public network is provided by which WAN technology?
• DSL
• Frame Relay
• ISDN
• PSTN
• VPN
3. Which three statements describe the functions of the Cisco hierarchical network design model? (Choose three.)
• Route summarization is not necessary at the core and distribution layers.
• The distribution layer is responsible for traffic filtering and isolating failures from the core.
• Two goals of the core layer are 100 percent uptime and maximizing throughput.
• The access layer provides a means of connecting end devices to the network.
• The distribution layer distributes network traffic directly to end users.
• The core layer usually employs a star topology.
4. A network designer is creating a new network. The design must offer enough redundancy to provide protection against a single link or device failure, yet must not be too complex or expensive to implement. What topology would fill these needs?
• star
• full mesh
• partial mesh
• extended star
• hub and spoke
5. Refer to the exhibit. If the firewall module has been correctly configured using best practices for network security, which statement is true about the security design for the network?
• Servers in the network are not protected from internal attacks.
• Servers in the DMZ are protected from internal and external attacks.
• Servers in the server farm are protected from internal and external attacks.
• Traffic from the external networks is not able to access the servers in the DMZ.
6. Which statement is true about a DMZ in a traditional network firewall design?
• A DMZ is designed to provide service for external access but not for internal access.
• Servers in the DMZ provide limited information that can be accessed from external networks.
• User access to the DMZ from the Internet and the internal network usually is treated the same way.
• All servers in the enterprise network should be located in a DMZ because of enhanced security measures.
7. What network connection would be most cost efficient while still meeting the security and connectivity needs of this teleworker?
• dedicated leased line connection with a dialup backup link
• Frame Relay connection with a DSL backup link
• DSL VPN connection with a dialup backup link
• ATM connection with a DSL VPN backup link
• DSL connection with no backup link
8. Refer to the exhibit. The network administrator creates a standard access control list to prohibit traffic from the 192.168.1.0/24 network from reaching the 192.168.2.0/24 network while still permitting Internet access for all networks. On which router interface and in which direction should it be applied?
• interface fa0/0, inbound
• interface fa0/0, outbound
• interface fa0/1, inbound
• interface fa0/1, outbound
9. Refer to the exhibit. The server broadcasts an ARP request for the MAC address of its default gateway. If STP is not enabled, what is the result of this ARP request?
• Router_1 contains the broadcast and replies with the MAC address of the next-hop router.
• Switch_A replies with the MAC address of the Router_1 E0 interface.
• Switch_A and Switch_B continuously flood the message onto the network.
• Switch_B forwards the broadcast request and replies with the Router_1 address.
10. What are two best practices in wireless LAN design to ensure secure wireless access to the corporate network? (Choose two.)
• Configure APs for broadcast SSID.
• Place APs as far apart as possible.
• Use a separate WLAN for employees.
• Configure WPA.
• Use wireless routers in all IDFs.
11. In a well-designed, high-availability network, which device significantly affects the most users if a failure occurs?
• desktop PC of the user
• large switch in the network core layer
• large switch in the network distribution layer
• small workgroup switch in the network access layer
12. Which two statements are true regarding network convergence? (Choose two.)
• In a large network, using the EIGRP or OSPF routing protocols rather than RIPv2 may improve convergence time.
• Using STP at the core layer improves convergence time by allowing the use of redundant links between devices.
• Route summarization improves convergence time by minimizing the size of the routing table.
• A full mesh topology improves convergence time by allowing load balancing.
• ACLs can be configured to improve convergence time.
13. Centralizing servers in a data center server farm can provide which benefit over a distributed server environment?
• It keeps client-to-server traffic local to a single subnet.
• Servers located in a data center require less bandwidth.
• It is easier to filter and prioritize traffic to and from the data center.
• Server farms are not subject to denial of service attacks.
14. Refer to the exhibit. What effect does the ACL shown have on network traffic, assuming that it is correctly applied to the interface?
• All traffic to network 172.16.0.0 is denied.
• All TCP traffic is denied to and from network 172.16.0.0.
• All Telnet traffic from the 172.16.0.0 network to any destination is denied.
• All port 23 traffic to the 172.16.0.0 network is denied.
• All traffic from the 172.16.0.0 network is denied to any other network.
15. Which Cisco IOS function can be configured at the distribution layer to filter unwanted traffic and provide traffic management?
• virus protection
• spyware protection
• VPNs
• access control lists
16. What kind of ACL inspects outbound UDP, TCP, and ICMP traffic and allows inbound access only to traffic that belongs to these established sessions?
• dynamic ACL
• time-based ACL
• reflexive ACL
• lock and key ACL
17. Which three functions are performed at the distribution layer of the hierarchical network model? (Choose three.)
• summarizing routes from the access layer
• allowing end users to access the local network
• providing the gateway of last resort for core layer devices
• preserving bandwidth at the access layer by filtering network functions
• isolating network problems to prevent them from affecting the core layer
• utilizing redundant links for load balancing to increase available bandwidth
18. Refer to the exhibit. Which two devices are part of the access design layer? (Choose two.)
• Edge2
• ISP4
• BR4
• FC-AP
• FC-CPE-1
• FC-ASW-2
19. What is true about implementing a centralized server farm topology?
• requires direct cabling from the MPOE to enhance the performance of servers
• requires the addition of high-capacity switches to each workgroup
• provides defined entry and exit points so that filtering and securing traffic is easier
• allows for placement of workgroup servers at the access layer
20. Refer to the exhibit. What happens when Host 1 attempts to send data?
• Frames from Host 1 are dropped, but no other action is taken.
• Frames from Host 1 cause the interface to shut down, and a log message is sent.
• Frames from Host 1 are forwarded, but a log message is sent.
• Frames from Host 1 are forwarded, and the mac-address table is updated.
21. Which two considerations are valid when designing access layer security?(Choose two.)
• In a large wireless network, the most efficient method to secure the WLAN is MAC address filtering.
• DoS attacks are normally launched against end-user PCs and can be mitigated by installing personal firewalls on all company PCs.
• SSH is more secure than Telnet to administer network devices.
• Disabling unused ports on the switches helps prevent unauthorized access to the network.
• All Telnet passwords are at least 6 characters long.
22. What address can be used to summarize only networks 172.16.0.0/24, 172.16.1.0/24, 172.16.2.0/24, and 172.16.3.0/24?
• 172.16.0.0/21
• 172.16.0.0/22
• 172.16.0.0 255.255.255.248
• 172.16.0.0 255.255.254.0
23. Which two items in a physical WLAN design can be identified through a site survey? (Choose two.)
• the types of antennas that are required
• the encryption techniques that are required
• the access point hardware that is required
• the different levels of access that are required
• the connection reliability that is required
24. Refer to the exhibit. Which two statements correctly describe the benefits of the network access layer design that is shown? (Choose two.)
• If host A sends a broadcast message, only hosts in VLAN10 receive the broadcast frame.
• If host A attempts to transmit data at the same time as another host, only hosts in VLAN10 are affected by the collision.
• Segmenting all voice traffic on a separate VLAN facilitates the implementation of QoS.
• VLANs improve network performance by facilitating the use of route summarization.
• VLANs at the access layer help guarantee network availability by facilitating load balancing.
25. What are three ways to ensure that an unwanted user does not connect to a wireless network and view the data? (Choose three.)
• Disable SSID broadcasting.
• Configure filters to restrict IP addresses.
• Use authentication between clients and the wireless device.
• Use NetBIOS name filtering between clients and the wireless device.
• Configure strong encryption such as WPA.
• Use a WEP compression method.
CCNA3 - Lab 8.3.6 Configuring and Verifying VTY Restrictions
Step 1: Connect the equipment
1. Connect the S0/0/0 interface of Router 1 to the S0/0/0 interface of Router 2 using a serial cable as shown in the diagram and addressing table.
2. Connect the Fa0/0 interface of Router 1 to the Fa0/1 port of Switch 1 using a straight-through cable.
3. Connect Host 1 to the Fa0/2 port of Switch 1 using a straight-through cable, and connect Host 2 to the Fa0/3 port of Switch 1 using a straight-through cable.
4. Connect Host 3 to the Fa0/2 port of Switch 2 using a straight-through cable, and connect Host 4 to the Fa0/3 port of Switch 2 using a straight-through cable.
Step 2: Perform basic configuration on Router 1
1. Connect a PC to the console port of the router to perform configurations using a terminal emulation program.
2. On Router 1, configure the hostname, interfaces, passwords and message-of-the-day banner and disable DNS lookups according to the addressing table and topology diagram. Save the configuration.
Step 3: Perform basic configuration on Router 2
Step 4: Perform basic configuration on Switch 1 and Switch 2
Step 5: Configure the hosts with IP address, subnet mask, and default gateway
1. Configure the hosts IP address, subnet mask, and default gateway according to the table and the topology diagram.
2. Each workstation should be able to ping the attached router. If the pings were not successful, troubleshoot as necessary. Check and verify that the workstation has been assigned a specific IP address and default gateway.
Step 6: Configure dynamic routing on the routers
1. Configure RIP routing on R1. Advertise the appropriate networks.
2. Configure RIP routing on R2. Advertise the appropriate networks.
Step 7: Verify connectivity
1. If the network has converged, list four destinations that H1 should be able to ping: R1, R2, H2, H3, H4
2. Test connectivity by pinging all the destinations. If any pings fail, troubleshoot the configurations on the routers and host PCs.
3. Check the routing table on R1.
4. Verify that all routes appear in the routing table. If a route is missing, troubleshoot the router configuration.
5. Telnet from the hosts to both routers. All hosts should be able to Telnet to both routers. If Telnet fails, troubleshoot the router and host configurations.
Step 8: Configure and test an ACL that will limit Telnet access
1. Create a standard ACL that represents the LAN attached to R1. R1(config)#access-list 1 permit 192.168.15.0 0.0.0.255
2. Now that you have defined the LAN traffic, you must apply it to the vty lines. This allows users from this LAN to Telnet to this router, but will block users from other LANs from accessing Telnet on this router.
3. Test the restriction.
Step 9: Create vty restrictions for R2
1. Create a Standard ACL that will not allow hosts on the R1 LAN to Telnet to R2 but will allow hosts on the R2 LAN to Telnet to their attached router.
2. Conduct the tests to verify that this ACL achieves its goals. If it does not, troubleshoot by viewing the output of a show running-config command to verify that the ACL is present and applied correctly.
Step 10: Reflection
Why is the vty restriction ACL a good practice when configuring a router? Jawaban: if foreign hosts can Telnet into a router, they have the ability to view and modify the configuration. Security demands that Telnet be restricted. Because vty ACLs are applied to the vty lines and not to physical interfaces, this controls Telnet access to the router regardless of from where the host(s) attempt to connect on the network.
1. Connect the S0/0/0 interface of Router 1 to the S0/0/0 interface of Router 2 using a serial cable as shown in the diagram and addressing table.
2. Connect the Fa0/0 interface of Router 1 to the Fa0/1 port of Switch 1 using a straight-through cable.
3. Connect Host 1 to the Fa0/2 port of Switch 1 using a straight-through cable, and connect Host 2 to the Fa0/3 port of Switch 1 using a straight-through cable.
4. Connect Host 3 to the Fa0/2 port of Switch 2 using a straight-through cable, and connect Host 4 to the Fa0/3 port of Switch 2 using a straight-through cable.
Step 2: Perform basic configuration on Router 1
1. Connect a PC to the console port of the router to perform configurations using a terminal emulation program.
2. On Router 1, configure the hostname, interfaces, passwords and message-of-the-day banner and disable DNS lookups according to the addressing table and topology diagram. Save the configuration.
Step 3: Perform basic configuration on Router 2
Step 4: Perform basic configuration on Switch 1 and Switch 2
Step 5: Configure the hosts with IP address, subnet mask, and default gateway
1. Configure the hosts IP address, subnet mask, and default gateway according to the table and the topology diagram.
2. Each workstation should be able to ping the attached router. If the pings were not successful, troubleshoot as necessary. Check and verify that the workstation has been assigned a specific IP address and default gateway.
Step 6: Configure dynamic routing on the routers
1. Configure RIP routing on R1. Advertise the appropriate networks.
2. Configure RIP routing on R2. Advertise the appropriate networks.
Step 7: Verify connectivity
1. If the network has converged, list four destinations that H1 should be able to ping: R1, R2, H2, H3, H4
2. Test connectivity by pinging all the destinations. If any pings fail, troubleshoot the configurations on the routers and host PCs.
3. Check the routing table on R1.
4. Verify that all routes appear in the routing table. If a route is missing, troubleshoot the router configuration.
5. Telnet from the hosts to both routers. All hosts should be able to Telnet to both routers. If Telnet fails, troubleshoot the router and host configurations.
Step 8: Configure and test an ACL that will limit Telnet access
1. Create a standard ACL that represents the LAN attached to R1. R1(config)#access-list 1 permit 192.168.15.0 0.0.0.255
2. Now that you have defined the LAN traffic, you must apply it to the vty lines. This allows users from this LAN to Telnet to this router, but will block users from other LANs from accessing Telnet on this router.
3. Test the restriction.
Step 9: Create vty restrictions for R2
1. Create a Standard ACL that will not allow hosts on the R1 LAN to Telnet to R2 but will allow hosts on the R2 LAN to Telnet to their attached router.
2. Conduct the tests to verify that this ACL achieves its goals. If it does not, troubleshoot by viewing the output of a show running-config command to verify that the ACL is present and applied correctly.
Step 10: Reflection
Why is the vty restriction ACL a good practice when configuring a router? Jawaban: if foreign hosts can Telnet into a router, they have the ability to view and modify the configuration. Security demands that Telnet be restricted. Because vty ACLs are applied to the vty lines and not to physical interfaces, this controls Telnet access to the router regardless of from where the host(s) attempt to connect on the network.
CCNA3 - Lab 8.3.5 Configuring and Verifying Extended Named ACLs
Step 1: Connect the equipment
1. Connect the Serial 0/0/0 interface of Router 1 to the Serial 0/0/0 interface of Router 2 using a serial cable as shown in the diagram and addressing table.
2. Connect the Fa0/0 interface of Router 1 to the Fa0/1 port of Switch 1 using a straight-through cable.
3. Connect Host 1 to the Fa0/2 port of Switch 1 using a straight-through cable.
4. Connect Host 2 to the Fa0/3 port of Switch 1 using a straight-through cable.
Step 2: Perform basic configuration on Router 1
1. Connect a PC to the console port of the router to perform configurations using a terminal emulation program.
2. On Router 1 configure the hostname, interfaces, passwords, and message-of-the-day banner and disable DNS lookups according to the addressing table and topology diagram. Save the configuration.
Step 3: Perform basic configuration on Router 2
Step 4: Perform basic configuration on Switch 1
Step 5: Configure the hosts with IP address, subnet mask, and default gateway
1. Configure the hosts IP address, subnet mask, and default gateway according to the addressing table and the topology diagram.
2. Each workstation should be able to ping R1 and each other. If the pings are not successful, troubleshoot as necessary. Check and verify that the workstation has been assigned a specific IP address and default gateway.
Step 6: Verify that the network is functioning
1. From the attached hosts, ping the FastEthernet interface of the default gateway router.
2. Use the command show ip interface brief and check the status of each interface.
3. Ping from the Serial 0/0/0 interface of Router 1 to the Serial 0/0/0 interface of Router 2.
Was the ping successful? Jawaban: Yes
If the answer is no, troubleshoot the router configurations to find the error. Ping again until successful.
Step 7: Configure static and default routing on the routers.
1. Configure a default route on R1. Use the next hop interface on R2 as the path.
R1(config)#ip route 0.0.0.0 0.0.0.0 209.165.201.2
1. From one of the host PCs on R1, ping R2.
Why is the ping unsuccessful? Jawaban: There is no return route configured on R2 to reach the 192.168.15.0 network.
1. Configure a static route on R2 to the R1 192.168.15.0 network. Use the next hop interface on R1 as the path.
Step 8: Configure and test a simple Named Standard ACL
1. Create a Named ACL that allows H2 to reach other hosts on the local network but does not allow H2 to access remote networks. At the configuration prompt, use this command sequence:
Why do you need the third statement? Jawaban: To allow other IP traffic not covered by the ACL.
1. Apply the ACL to the interface.
Describe how you should test this ACL: Jawaban: Ping from H2 to H1 to verify that H2 can reach hosts on the local network; ping from H2 to R1 and R2. Those pings should fail. Pings from H1 to R1 or R2 should succeed.
1. Conduct the tests to verify that this ACL achieves its goals. If it does not, troubleshoot by viewing the output of a show running-config command to verify that the ACL is present and applied to the correct interface.
Step 9: Create and test a Named Extended ACL
1. Create a Named ACL that does not allow H1 to ping R2 but allows H1 to reach the local network and R1. Describe how you would test this ACL:
Jawaban: Ping successfully from H1 to H2; ping unsuccessfully to R2, but ping successfully to R1.
1. Conduct the tests to verify that this ACL achieves its goals. If it does not, troubleshoot by viewing the output of a show running-config command to verify that the ACL is present and applied to the correct interface.
Step 10: Edit a Named Standard ACL
1. You have decided to edit the Named Standard ACL. In privileged EXEC mode, view the access list statements.
2. Add a line to this Named Standard ACL to block H1 from reaching R1, but still permit H1 and H2 to reach each other. Enter configuration commands, one per line. End with CNTL/Z.
If you added a new PC to the topology, attached it to S1, and gave it the IP address 192.168.15.4/24, would it be able to reach R1?Jawaban: Yes
Step 11: Reflection
1. Why is it good practice to perform basic configurations and verify connectivity before adding ACLs to routers? Jawaban: ACLs add many possible “error points” or places where a mistake results in traffic being disrupted. It is easier to troubleshoot if you can verify that the basic configuration is working before you add ACLs. If the basic configuration fails after adding an ACL, troubleshoot the ACL.
2. What advantages do Named ACLs offer? Jawaban: The ability to give ACLs logical, easy-to-remember names; unlimited numbers, rather than being limited to a specific range of numbers.
1. Connect the Serial 0/0/0 interface of Router 1 to the Serial 0/0/0 interface of Router 2 using a serial cable as shown in the diagram and addressing table.
2. Connect the Fa0/0 interface of Router 1 to the Fa0/1 port of Switch 1 using a straight-through cable.
3. Connect Host 1 to the Fa0/2 port of Switch 1 using a straight-through cable.
4. Connect Host 2 to the Fa0/3 port of Switch 1 using a straight-through cable.
Step 2: Perform basic configuration on Router 1
1. Connect a PC to the console port of the router to perform configurations using a terminal emulation program.
2. On Router 1 configure the hostname, interfaces, passwords, and message-of-the-day banner and disable DNS lookups according to the addressing table and topology diagram. Save the configuration.
Step 3: Perform basic configuration on Router 2
Step 4: Perform basic configuration on Switch 1
Step 5: Configure the hosts with IP address, subnet mask, and default gateway
1. Configure the hosts IP address, subnet mask, and default gateway according to the addressing table and the topology diagram.
2. Each workstation should be able to ping R1 and each other. If the pings are not successful, troubleshoot as necessary. Check and verify that the workstation has been assigned a specific IP address and default gateway.
Step 6: Verify that the network is functioning
1. From the attached hosts, ping the FastEthernet interface of the default gateway router.
2. Use the command show ip interface brief and check the status of each interface.
3. Ping from the Serial 0/0/0 interface of Router 1 to the Serial 0/0/0 interface of Router 2.
Was the ping successful? Jawaban: Yes
If the answer is no, troubleshoot the router configurations to find the error. Ping again until successful.
Step 7: Configure static and default routing on the routers.
1. Configure a default route on R1. Use the next hop interface on R2 as the path.
R1(config)#ip route 0.0.0.0 0.0.0.0 209.165.201.2
1. From one of the host PCs on R1, ping R2.
Why is the ping unsuccessful? Jawaban: There is no return route configured on R2 to reach the 192.168.15.0 network.
1. Configure a static route on R2 to the R1 192.168.15.0 network. Use the next hop interface on R1 as the path.
Step 8: Configure and test a simple Named Standard ACL
1. Create a Named ACL that allows H2 to reach other hosts on the local network but does not allow H2 to access remote networks. At the configuration prompt, use this command sequence:
Why do you need the third statement? Jawaban: To allow other IP traffic not covered by the ACL.
1. Apply the ACL to the interface.
Describe how you should test this ACL: Jawaban: Ping from H2 to H1 to verify that H2 can reach hosts on the local network; ping from H2 to R1 and R2. Those pings should fail. Pings from H1 to R1 or R2 should succeed.
1. Conduct the tests to verify that this ACL achieves its goals. If it does not, troubleshoot by viewing the output of a show running-config command to verify that the ACL is present and applied to the correct interface.
Step 9: Create and test a Named Extended ACL
1. Create a Named ACL that does not allow H1 to ping R2 but allows H1 to reach the local network and R1. Describe how you would test this ACL:
Jawaban: Ping successfully from H1 to H2; ping unsuccessfully to R2, but ping successfully to R1.
1. Conduct the tests to verify that this ACL achieves its goals. If it does not, troubleshoot by viewing the output of a show running-config command to verify that the ACL is present and applied to the correct interface.
Step 10: Edit a Named Standard ACL
1. You have decided to edit the Named Standard ACL. In privileged EXEC mode, view the access list statements.
2. Add a line to this Named Standard ACL to block H1 from reaching R1, but still permit H1 and H2 to reach each other. Enter configuration commands, one per line. End with CNTL/Z.
If you added a new PC to the topology, attached it to S1, and gave it the IP address 192.168.15.4/24, would it be able to reach R1?Jawaban: Yes
Step 11: Reflection
1. Why is it good practice to perform basic configurations and verify connectivity before adding ACLs to routers? Jawaban: ACLs add many possible “error points” or places where a mistake results in traffic being disrupted. It is easier to troubleshoot if you can verify that the basic configuration is working before you add ACLs. If the basic configuration fails after adding an ACL, troubleshoot the ACL.
2. What advantages do Named ACLs offer? Jawaban: The ability to give ACLs logical, easy-to-remember names; unlimited numbers, rather than being limited to a specific range of numbers.
CCNA3 - Lab 8.3.4 Planning, Configuring and Verifying Extended ACLs
Step 1: Connect the equipment
1. Connect the Serial 0/0/0 interface of Router 1 to the Serial 0/0/0 interface of Router 2 using a serial cable.
2. Connect the Fa0/0 interface of Router 1 to the Fa0/1 port of Switch 1 using a straight-through cable.
3. Connect a console cable to each PC to perform configurations on the routers and switch.
4. Connect Host 1 to the Fa0/3 port of Switch 1 using a straight-through cable.
5. Connect Host 2 to the Fa0/2 port of Switch 1 using a straight-through cable.
6. Connect a crossover cable between Host 3 and the Fa0/0 interface of Router 2.
Step 2: Perform basic configuration on Router 1
1. Connect a PC to the console port of the router to perform configurations using a terminal emulation program.
2. On Router 1, configure the hostname, interfaces, passwords, and message-of-the-day banner and disable DNS lookups according to the addressing table and topology diagram. Save the configuration.
Step 3: Perform basic configuration on Router 2
Perform basic configuration on Router 2 and save the configuration.
Step 4: Perform basic configuration on Switch 1
Configure Switch 1 with a hostname, console, Telnet, and privileged passwords according to the addressing table and topology diagram.
Step 5: Configure the hosts with IP address, subnet mask, and default gateway
1. Configure the hosts with IP address, subnet mask, and default gateway according to the addressing table and the topology diagram.
2. Each workstation should be able to ping the attached router. If the pings are not successful, troubleshoot as necessary. Check and verify that the workstation has been assigned a specific IP address and default gateway.
Step 6: Configure RIP routing and verify end to end connectivity in the network
1. On R1, enable the RIP routing protocol and configure it to advertise both connected networks.
2. On R2, enable the RIP routing protocol and configure it to advertise both connected networks.
3. Ping from each host to the other two hosts.
Were the pings successful? yes
If the answer is no, troubleshoot the router and host configurations to find the error. Ping again until they are all successful.
Step 7: Configure Extended ACLs to control traffic
Host 3 in this network contains proprietary information. Security requirements for this network dictate that only certain devices should be allowed access to this machine. Host 1 is the only host that will be allowed to access this computer. All other hosts on this network are used for guest access and should not be allowed access to Host 3.
Step 8: Test the ACL
1. Ping Host 3 from both Hosts 1 and 2.
Can Host 1 ping Host 3? yes
Can Host 2 ping Host 3? no
1. To verify that other addresses can ping Host 3, ping Host 3 from R1.
Is the ping successful? yes
1. Display the access control list again with the show access-lists command.
Step 9: Configure and test the ACL for the next requirement
1. Host 3 is the only host that should be allowed to connect to R1 for remote management.
2. Because the source traffic could come from any direction, this ACL needs to be applied to both interfaces on R1. The traffic to be controlled would be inbound to the router.
3. Now attempt to telnet to R1 from all hosts and R2. Attempt to telnet to both R1 addresses.
Can you telnet to R1 from any of these devices? If yes, which one(s)? Jawaban: Yes, from Host 3 only.
1. View the output of the show access-lists command on R1.
Step 11: Reflection
1. Why is careful planning and testing of access control lists required? Jawaban: To verify that the intended traffic – and ONLY the intended – traffic is permitted.
2. What is an advantage of using Extended ACLs over Standard ACLs? Jawaban: Extended ACLs allow you to filter based on more information that just the source address.
1. Connect the Serial 0/0/0 interface of Router 1 to the Serial 0/0/0 interface of Router 2 using a serial cable.
2. Connect the Fa0/0 interface of Router 1 to the Fa0/1 port of Switch 1 using a straight-through cable.
3. Connect a console cable to each PC to perform configurations on the routers and switch.
4. Connect Host 1 to the Fa0/3 port of Switch 1 using a straight-through cable.
5. Connect Host 2 to the Fa0/2 port of Switch 1 using a straight-through cable.
6. Connect a crossover cable between Host 3 and the Fa0/0 interface of Router 2.
Step 2: Perform basic configuration on Router 1
1. Connect a PC to the console port of the router to perform configurations using a terminal emulation program.
2. On Router 1, configure the hostname, interfaces, passwords, and message-of-the-day banner and disable DNS lookups according to the addressing table and topology diagram. Save the configuration.
Step 3: Perform basic configuration on Router 2
Perform basic configuration on Router 2 and save the configuration.
Step 4: Perform basic configuration on Switch 1
Configure Switch 1 with a hostname, console, Telnet, and privileged passwords according to the addressing table and topology diagram.
Step 5: Configure the hosts with IP address, subnet mask, and default gateway
1. Configure the hosts with IP address, subnet mask, and default gateway according to the addressing table and the topology diagram.
2. Each workstation should be able to ping the attached router. If the pings are not successful, troubleshoot as necessary. Check and verify that the workstation has been assigned a specific IP address and default gateway.
Step 6: Configure RIP routing and verify end to end connectivity in the network
1. On R1, enable the RIP routing protocol and configure it to advertise both connected networks.
2. On R2, enable the RIP routing protocol and configure it to advertise both connected networks.
3. Ping from each host to the other two hosts.
Were the pings successful? yes
If the answer is no, troubleshoot the router and host configurations to find the error. Ping again until they are all successful.
Step 7: Configure Extended ACLs to control traffic
Host 3 in this network contains proprietary information. Security requirements for this network dictate that only certain devices should be allowed access to this machine. Host 1 is the only host that will be allowed to access this computer. All other hosts on this network are used for guest access and should not be allowed access to Host 3.
Step 8: Test the ACL
1. Ping Host 3 from both Hosts 1 and 2.
Can Host 1 ping Host 3? yes
Can Host 2 ping Host 3? no
1. To verify that other addresses can ping Host 3, ping Host 3 from R1.
Is the ping successful? yes
1. Display the access control list again with the show access-lists command.
Step 9: Configure and test the ACL for the next requirement
1. Host 3 is the only host that should be allowed to connect to R1 for remote management.
2. Because the source traffic could come from any direction, this ACL needs to be applied to both interfaces on R1. The traffic to be controlled would be inbound to the router.
3. Now attempt to telnet to R1 from all hosts and R2. Attempt to telnet to both R1 addresses.
Can you telnet to R1 from any of these devices? If yes, which one(s)? Jawaban: Yes, from Host 3 only.
1. View the output of the show access-lists command on R1.
Step 11: Reflection
1. Why is careful planning and testing of access control lists required? Jawaban: To verify that the intended traffic – and ONLY the intended – traffic is permitted.
2. What is an advantage of using Extended ACLs over Standard ACLs? Jawaban: Extended ACLs allow you to filter based on more information that just the source address.
CCNA3 - Lab 8.3.3 Configuring and Verifying Standard ACLS
Step 1: Connect the equipment
1. Connect the Serial 0/0/0 interface of Router 1 to the Serial 0/0/0 interface of Router 2 using a serial cable.
2. Connect the Fa0/0 interface of Rourter 1 to the Fa0/1 port of Switch 1 using a straight-through cable.
3. Connect a console cable to the PC to perform configurations on the routers and switch.
4. Connect H1 to the Fa0/2 port of Switch 1 using a straight-through cable.
Step 2: Perform basic configuration on Router 1
1. Connect a PC to the console port of the router to perform configurations using a terminal emulation program.
2. On Router 1, configure the hostname, interfaces, passwords, and message-of-the-day banner and disable DNS lookups according to the addressing table and topology diagram. Save the configuration.
Step 3: Perform basic configuration on Router 2
Perform basic configuration on Router 2 and save the configuration.
Step 4: Perform basic configuration on Switch 1
Configure Switch 1 with a hostname and passwords according to the addressing table and topology diagram.
Step 5: Configure the host with IP address, subnet mask, and default gateway
1. Configure the host with the proper IP address, subnet mask, and default gateway. The host should be assigned the address 192.168.200.10/24 and the default gateway of 192.168.200.1.
2. The workstation should be able to ping the attached router. If the ping is not successful, troubleshoot as necessary. Check and verify that the workstation has been assigned a specific IP address and default gateway.
Step 6: Configure RIP routing and verify end-to-end connectivity in the network
1. On Router 1, enable the RIP routing protocol and configure it to advertise both connected networks.
2. On Router 2, enable the RIP routing protocol and configure it to advertise all three connected networks.
3. Ping from Host 1 to the two loopback interfaces on Router 2.
Were the pings from Host 1 successful? Yes
If the answer is no, troubleshoot the router and host configurations to find the error. Ping again until they are both successful.
Step 7: Configure and test a standard ACL
Step 8: Test the ACL
1. From Host 1, ping the 192.168.1.1 loopback address.
Is the ping successful? No
1. From Host 1, ping the 192.168.2.1 loopback address.
Is the ping successful? No
1. Issue the show access-list command again.
How many matches are there for the first ACL statement (permit)?
Answers will vary but there should be at least 8-16 matches if the pings to the loopbacks were done.
Step 9: Reflection
1. Why is careful planning and testing of access control lists required? Jawaban: To verify that the intended traffic – and ONLY the intended – traffic is permitted.
2. What is the main limitation of standard ACLs? Jawaban: They can only filter based on source address.
1. Connect the Serial 0/0/0 interface of Router 1 to the Serial 0/0/0 interface of Router 2 using a serial cable.
2. Connect the Fa0/0 interface of Rourter 1 to the Fa0/1 port of Switch 1 using a straight-through cable.
3. Connect a console cable to the PC to perform configurations on the routers and switch.
4. Connect H1 to the Fa0/2 port of Switch 1 using a straight-through cable.
Step 2: Perform basic configuration on Router 1
1. Connect a PC to the console port of the router to perform configurations using a terminal emulation program.
2. On Router 1, configure the hostname, interfaces, passwords, and message-of-the-day banner and disable DNS lookups according to the addressing table and topology diagram. Save the configuration.
Step 3: Perform basic configuration on Router 2
Perform basic configuration on Router 2 and save the configuration.
Step 4: Perform basic configuration on Switch 1
Configure Switch 1 with a hostname and passwords according to the addressing table and topology diagram.
Step 5: Configure the host with IP address, subnet mask, and default gateway
1. Configure the host with the proper IP address, subnet mask, and default gateway. The host should be assigned the address 192.168.200.10/24 and the default gateway of 192.168.200.1.
2. The workstation should be able to ping the attached router. If the ping is not successful, troubleshoot as necessary. Check and verify that the workstation has been assigned a specific IP address and default gateway.
Step 6: Configure RIP routing and verify end-to-end connectivity in the network
1. On Router 1, enable the RIP routing protocol and configure it to advertise both connected networks.
2. On Router 2, enable the RIP routing protocol and configure it to advertise all three connected networks.
3. Ping from Host 1 to the two loopback interfaces on Router 2.
Were the pings from Host 1 successful? Yes
If the answer is no, troubleshoot the router and host configurations to find the error. Ping again until they are both successful.
Step 7: Configure and test a standard ACL
Step 8: Test the ACL
1. From Host 1, ping the 192.168.1.1 loopback address.
Is the ping successful? No
1. From Host 1, ping the 192.168.2.1 loopback address.
Is the ping successful? No
1. Issue the show access-list command again.
How many matches are there for the first ACL statement (permit)?
Answers will vary but there should be at least 8-16 matches if the pings to the loopbacks were done.
Step 9: Reflection
1. Why is careful planning and testing of access control lists required? Jawaban: To verify that the intended traffic – and ONLY the intended – traffic is permitted.
2. What is the main limitation of standard ACLs? Jawaban: They can only filter based on source address.
CCNA3 - Lab 5.4.2.4 EIGRP Configuring Automatic and Manual Route Summarization and Discontiguous Subnets
Step 1: Connect the equipment
1. Connect Router1 to Router2 and Router3 using serial cables.
2. Connect Router2 to Router3 using serial cables.
3. Connect a PC with a console cable to perform configurations on the routers.
Step 2: Perform basic configurations on the routers
1. Establish a console session with Router1 and configure hostname, passwords, and interfaces as described in the table. Save the configuration.
2. Establish a console session with Router2 and perform a similar configuration, using the addresses and other information from the table. Save the configuration.
3. Establish a console session with Router3. Configure hostname, passwords, and interfaces according to the table. Save the configuration.
Step 3: Configure EIGRP routing with default commands
1. On Gateway, configure EIGRP as the routing protocol with an autonomous system number of 100, and advertise the appropriate networks.
2. On Branch1, configure EIGRP as the routing protocol with an autonomous system number of 100, and advertise the appropriate networks:
3. Perform a similar configuration on Branch2, using EIGRP 100 and advertising the appropriate networks.
Step 4: Verify the routing configuration
1. View the routing table on Gateway.
2. Which subnets are not reported in this output? Jawaban: The subnets configured for the 172.16.0.0 and 172.17.0.0 networks are absent.
3. Why are there two paths reported for the 10.0.0.8/30 route? Jawaban: Because no bandwidth commands have been configured, EIGRP has two equal-cost paths to report.
Step 5: Remove Automatic summarization
On each of the three routers, remove automatic summarization to force EIGRP to report all subnets. A sample command is given for Gateway.
Step 6: Verify the routing configuration
View the routing table again on Gateway.
Step 7: Configure manual summarization
On Branch2, configure manual summarization to force EIGRP to summarize only the 172.17.0.0 subnets.
Step 8: Reflection
1. Although removing automatic summarization solved the issue of missing subnets, what possible problem could it cause? Jawaban: The routing table is very long, and that will slow down the lookup process.
2. How could removing automatic summarization help in troubleshooting an EIGRP network? Jawaban: Checking the output against all possible subnets will reveal which subnet(s) are missing. Those are the connections and configurations that need to be checked.
1. Connect Router1 to Router2 and Router3 using serial cables.
2. Connect Router2 to Router3 using serial cables.
3. Connect a PC with a console cable to perform configurations on the routers.
Step 2: Perform basic configurations on the routers
1. Establish a console session with Router1 and configure hostname, passwords, and interfaces as described in the table. Save the configuration.
2. Establish a console session with Router2 and perform a similar configuration, using the addresses and other information from the table. Save the configuration.
3. Establish a console session with Router3. Configure hostname, passwords, and interfaces according to the table. Save the configuration.
Step 3: Configure EIGRP routing with default commands
1. On Gateway, configure EIGRP as the routing protocol with an autonomous system number of 100, and advertise the appropriate networks.
2. On Branch1, configure EIGRP as the routing protocol with an autonomous system number of 100, and advertise the appropriate networks:
3. Perform a similar configuration on Branch2, using EIGRP 100 and advertising the appropriate networks.
Step 4: Verify the routing configuration
1. View the routing table on Gateway.
2. Which subnets are not reported in this output? Jawaban: The subnets configured for the 172.16.0.0 and 172.17.0.0 networks are absent.
3. Why are there two paths reported for the 10.0.0.8/30 route? Jawaban: Because no bandwidth commands have been configured, EIGRP has two equal-cost paths to report.
Step 5: Remove Automatic summarization
On each of the three routers, remove automatic summarization to force EIGRP to report all subnets. A sample command is given for Gateway.
Step 6: Verify the routing configuration
View the routing table again on Gateway.
Step 7: Configure manual summarization
On Branch2, configure manual summarization to force EIGRP to summarize only the 172.17.0.0 subnets.
Step 8: Reflection
1. Although removing automatic summarization solved the issue of missing subnets, what possible problem could it cause? Jawaban: The routing table is very long, and that will slow down the lookup process.
2. How could removing automatic summarization help in troubleshooting an EIGRP network? Jawaban: Checking the output against all possible subnets will reveal which subnet(s) are missing. Those are the connections and configurations that need to be checked.
CCNA3 - Lab 5.4.1.4 Implementing EIGRP
Step 1: Connect the equipment
1. Connect Router1 to Router2 and Router3 using serial cables.
2. Connect Router2 to Router3 using serial cables.
3. Connect a PC with a console cable to perform configurations on the routers.
Step 2: Perform basic configurations on the routers
1. Establish a console session with Router1 and configure hostname, passwords, and interfaces as described in the table. Save the configuration.
2. Establish a console session with Router2 and perform a similar configuration, using the addresses and other information from the table. Save the configuration.
3. Establish a console session with Router3. Configure hostname, passwords, and interfaces according to the table. Save the configuration.
Step 3: Configure EIGRP routing with default commands
1. On Gateway, configure EIGRP as the routing protocol with an autonomous system number of 100, and advertise the appropriate networks.
Gateway(config)#router eigrp 100
Gateway(config-router)#network 10.0.0.0
Gateway(config-router)#network 10.0.0.4
Predict: How will EIGRP report these subnets in the routing table?
Step 4: Configure MD5 Authentication
1. Create a keychain named discchain.
2. Configure a key 1 that has a key string of san-fran.
3. Enable the workgroup router to utilize EIGRP MD5 authentication with each of your EIGRP neighbors and to use the keychain icndchain.
Step 5: Reflection
1. What is the importance of enabling authentication on the routing updates?
Step 1: Connect the equipment
1. Connect Router1 to Router2 and Router3 using serial cables.
2. Connect Router2 to Router3 using serial cables.
3. Connect a PC with a console cable to perform configurations on the routers.
Step 2: Perform basic configurations on the routers
1. Establish a console session with Router1 and configure hostname, passwords, and interfaces as described in the table. Save the configuration.
2. Establish a console session with Router2 and perform a similar configuration, using the addresses and other information from the table. Save the configuration.
3. Establish a console session with Router3. Configure hostname, passwords, and interfaces according to the table. Save the configuration.
Step 3: Configure EIGRP routing with default commands
1. On Gateway, configure EIGRP as the routing protocol with an autonomous system number of 100, and advertise the appropriate networks.
Gateway(config)#router eigrp 100
Gateway(config-router)#network 10.0.0.0
Gateway(config-router)#network 10.0.0.4
Predict: How will EIGRP report these subnets in the routing table?
Step 4: Configure MD5 Authentication
1. Create a keychain named discchain.
2. Configure a key 1 that has a key string of san-fran.
3. Enable the workgroup router to utilize EIGRP MD5 authentication with each of your EIGRP neighbors and to use the keychain icndchain.
Step 5: Reflection
1. What is the importance of enabling authentication on the routing updates?
1. Connect Router1 to Router2 and Router3 using serial cables.
2. Connect Router2 to Router3 using serial cables.
3. Connect a PC with a console cable to perform configurations on the routers.
Step 2: Perform basic configurations on the routers
1. Establish a console session with Router1 and configure hostname, passwords, and interfaces as described in the table. Save the configuration.
2. Establish a console session with Router2 and perform a similar configuration, using the addresses and other information from the table. Save the configuration.
3. Establish a console session with Router3. Configure hostname, passwords, and interfaces according to the table. Save the configuration.
Step 3: Configure EIGRP routing with default commands
1. On Gateway, configure EIGRP as the routing protocol with an autonomous system number of 100, and advertise the appropriate networks.
Gateway(config)#router eigrp 100
Gateway(config-router)#network 10.0.0.0
Gateway(config-router)#network 10.0.0.4
Predict: How will EIGRP report these subnets in the routing table?
Step 4: Configure MD5 Authentication
1. Create a keychain named discchain.
2. Configure a key 1 that has a key string of san-fran.
3. Enable the workgroup router to utilize EIGRP MD5 authentication with each of your EIGRP neighbors and to use the keychain icndchain.
Step 5: Reflection
1. What is the importance of enabling authentication on the routing updates?
Step 1: Connect the equipment
1. Connect Router1 to Router2 and Router3 using serial cables.
2. Connect Router2 to Router3 using serial cables.
3. Connect a PC with a console cable to perform configurations on the routers.
Step 2: Perform basic configurations on the routers
1. Establish a console session with Router1 and configure hostname, passwords, and interfaces as described in the table. Save the configuration.
2. Establish a console session with Router2 and perform a similar configuration, using the addresses and other information from the table. Save the configuration.
3. Establish a console session with Router3. Configure hostname, passwords, and interfaces according to the table. Save the configuration.
Step 3: Configure EIGRP routing with default commands
1. On Gateway, configure EIGRP as the routing protocol with an autonomous system number of 100, and advertise the appropriate networks.
Gateway(config)#router eigrp 100
Gateway(config-router)#network 10.0.0.0
Gateway(config-router)#network 10.0.0.4
Predict: How will EIGRP report these subnets in the routing table?
Step 4: Configure MD5 Authentication
1. Create a keychain named discchain.
2. Configure a key 1 that has a key string of san-fran.
3. Enable the workgroup router to utilize EIGRP MD5 authentication with each of your EIGRP neighbors and to use the keychain icndchain.
Step 5: Reflection
1. What is the importance of enabling authentication on the routing updates?
CCNA3 - Lab 5.2.3 Configuring RIPv2 with VLSM, and Default Route Propagation
Step 1: Connect the equipment.
a. Connect Router3 to Router1 and Router2 with serial cables.
b. Connect Router1’s Fa0/0 interface with a straight-through cable to Switch1’s Fa0/1 interface.
c. Connect Router2’s Fa0/0 interface with a straight-through cable to Switch2’s Fa0/1 interface
d. Connect PC1 to Switch1 and PC2 to Switch 2 with straight-through cables.
e. Connect PC3 to Router3’s Fa0/0 interface with a crossover cable.
f. Connect a PC with a console cable to perform configurations on the routers and switches.
Step 2: Perform basic configurations on the routers.
a. Establish a console session with Router1 and configure hostname, passwords, and interfaces as
described in the table. Save the configuration.
b. Establish a console session with Router2 and perform a similar configuration, using the addresses
and other information from the table. Save the configuration.
c. Establish a console session with Router3. Configure hostname, passwords, and interfaces according
to the table. Note that both serials are DCE on this router. Save the configuration.
Step 3: Perform basic configurations on the switches.
a. Establish a console session with Switch1 and configure hostname and passwords according to the
table. Save the configuration.
b. Perform a similar configuration on Switch2, configuring the hostname and passwords as described for
S1. Save the configuration.
Step 4: Configure the hosts with the proper IP address, subnet mask, and default gateway.
a. Configure each host with the proper IP address, subnet mask, and default gateway. Host1 should be
assigned 172.16.1.2/24 and Host 2 should be assigned 172.16.2.2 /24. Host3, which is used to
simulate Internet access, should be assigned 209.165.201.2/24. All three PCs use their attached
router’s Fa0/0 interface as the default gateway.
b. Each workstation should be able to ping the attached router. If the ping was not successful,
troubleshoot as necessary. Check and verify that the workstation has been assigned a specific IP address and default gateway.
Step 5: Configure RIP v2 routing
a. On R1, configure RIP version 2 as the routing protocol and advertise the appropriate networks:
R1(config)#router rip
R1(config-router)#version 2
R1(config-router)#network 172.16.1.0
R1(config-router)#network 172.16.3.0
Predict: how will RIP report these subnets in the routing table? As a 172.16.0.0 summary route, as well as individual subnets of the 172.16.0.0 network.
b. From the network commands, which interfaces are participating in RIP routing?
Fa0/0, S0/0/0.
c. Perform a similar configuration on R2, setting the version, advertising the appropriate networks, and turning off auto-summarization
d. On R3, perform a similar configuration. Do not advertise the 209.165.201.0/24 network.
Step 6: Configure and redistribute a default route for Internet access.
a. From the R3 router to the host simulating the Internet, create a static route to network 0.0.0.0 0.0.0.0,
using the ip route command. This will forward any unknown-destination address traffic to the PC
simulating the Internet by setting a Gateway of Last Resort on the R3 router.
R3(config)#ip route 0.0.0.0 0.0.0.0 209.165.201.2
b. R3 will advertise this route to the other routers if this command is added to its RIP configuration:
R3(config)#router rip
R3(config-router)#default-information originate
Step 7: Verify the routing configuration.
a. View the routing table on R3:
R3#show ip route
<
Gateway of last resort is 209.165.201.2 to network 0.0.0.0
172.16.0.0/30 is subnetted, 4 subnets
R 172.16.1.0 [120/1] via 172.16.3.1, 00:00:17, Serial0/0/0
R 172.16.2.0 [120/1] via 172.16.3.5, 00:00:12, Serial0/0/1
C 172.16.3.0 is directly connected, Serial0/0/0
C 172.16.3.4 is directly connected, Serial0/0/1
C 209.165.201.0/24 is directly connected, FastEthernet0/0
S* 0.0.0.0/0 [1/0] via 209.165.201.2
How can you tell from the routing table that the subnetted network shared by R1, R2 and R3 has a
pathway for Internet traffic? Jawaban: There is a Gateway of Last Resort, and the default route shows up in the table.
b. View the routing tables on R2 and R1.
How is the pathway for Internet traffic provided in their routing tables? Jawban: There is a Gateway of Last Resort leading to R3, and the default route shows up as a distributed RIP
route.
Step 8: Verify connectivity.
a. Simulate sending traffic to the Internet by pinging from the host PCs to 209.165.201.2.
Were the pings successful? Jawaban: Ya.
b. Verify that hosts within the subnetted network can reach each other by pinging between Host1 andHost2.
Were the pings successful? Jawaban: Ya.
Step 9: Reflection.
a. How did R1 and R2 learn the pathway to the Internet for this network? Jawaban: From RIP routing updates received from the router where the route was configured (R3).
CCNA3 - Lab 5.1.2.4 Designing and Creating a Redundant Network
Step 1: Determine the minimum number of links to meet the requirements
- Identify the two links to meet requirement 1.
- Determine the cost of those two links.
- Identify the required links to meet requirement 2, 3, and 4.
- Determine if the design is within budget.
Step 2: Implement the design
- Using Packet Tracer, create the network including the redundant links specified in Step 1.
Step 3: Verify the design
- Do three paths between the east and west coast operations exist?
- Does each site have at least two links?
- Does each site on the east coast have two paths to the west coast?
- Does each site on the west coast have two paths to the east coast?
- Will one device failure affect multiple sites?
Reflection
- What network topology was implemented before adding redundancy? Jawaban: Extended Star
- What network topology is now implemented after adding redundancy? Jawaban: Partial Mesh
- What is an advantage to using the topology implemented after adding redundancy? Jawaban: redundancy minimizes the impact that the failure of a single piece of equipment has on the operation of the network.
- What is a disadvantage to using the topology implemented after redundancy was added? Jawaban: the increased cost of providing redundant links and equipment. Smaller companies may not be able to afford the cost.
- Why would a company, such as the one in this case, suddenly decide to implement the type of topology used in step b? Jawaban: In this case, the company lost 16 hours of production and $600,000 to the company. No company wants to lose sales or time that causes a loss in profit to their company.
Langganan:
Postingan (Atom)
