ccna-4-modul1

download klik >> download-ccna-4-modul-1

1.At which two layers of the OSI model does a WAN operate? (Choose two.)

Physical Layer

Data Link Layer

 

Why is the call setup time of a circuit-switched WAN implementation considered a drawback?

Data cannot be transferred until a circuit has been established.

 

2.Which networking device is typically used to concentrate the dial-in and dial-out traffic of multiple users to and from a network?

access server

3.What can cause a reduction in available bandwidth on a cable broadband connection?

number of subscribers

4.Which three WAN devices can be found in the cloud? (Choose three.)

ATM switches

core routers

Frame Relay switches

5.Which statement is true about data connectivity between a customer and a service provider?

The segment between the demarcation point and the central office is known as the “last mile.”

6.What are two advantages of an analog PSTN WAN connection? (Choose two.)

low cost

availability

7.Which two devices are commonly used as data communications equipment? (Choose two.)

Modem

CSU/DSU

8.For digital lines, which device is used to establish the communications link between the customer  equipment and the local loop?

CSU/DSU

9.A U.S. company requires a WAN connection used only to transfer sales data from individual stores to the home office. All transfers will occur after business hours. The required bandwidth for this connection is estimated to be less than 38 kbps. Which type of connection requires the least investment for this company?

analog dialup

10.Which switching type will allow the communication devices in the provider network to be shared and  only allocated to an individual subscriber during data transfer?

packet-switched

Which three features are identified with Frame Relay connections? (Choose three.)

CIR

DLCI

PVC

Which term describes a device that will put data on the local loop?

DCE

Which statement is true about the differences between a WAN and a LAN?

A WAN often relies on the services of carriers, such as telephone or cable companies, but a LAN does not.

What three terms are associated with ISDN PRI? (Choose three.)

circuit switching

data bearer channels

time-division multiplexing

Which statement about WAN protocols is correct?

Most WAN protocols use HDLC or a variant of HDLC as a framing mechanism.

Which statement is true of the functionality of the layers in the hierarchical network model?

The distribution layer aggregates WAN connections at the edge of the campus.

Which packet-switched WAN technology offers high-bandwidth connectivity capable of managing data, voice, and video all on the same infrastructure?

metro Ethernet

A company needs a WAN connection that is capable of transferring voice, video, and data at a minimum data rate of 155 Mbps. Which WAN connection is the best choice?

ATM

Which WAN technology uses a fixed payload of 48 bytes and is transported across both switched and permanent virtual circuits?

ATM

What type of connectivity is established when VPNs are used from the remote site to the private network?

Tunnels

What is an advantage of packet-switched technology over circuit-switched technology?

Packet-switched networks can efficiently use multiple routes inside a service provider network.

 

ccna-4-modul2

download klik >> download-ccna-4-modul-2

1. Which two statements are true about time-division multiplexing (TDM)? (Choose two.)

TDM relies on Layer 3 protocols to operate.

*****Multiple sources can transmit over a single channel.

*****Original data streams must be reconstructed at the destination.

TDM methods vary depending on the Layer 2 protocol that is used.

It allows information from multiple channels to be allocated bandwidth on multiple wires.

2. What does the demarcation point represent in data communication physical circuits?

DTE/DCE interface on the device connecting to the Internet

location of the firewall or router

*****physical point at which the public network ends and the private customer network begins

tag assigned to the physical block where a cross-connect occurs

3. Which serial communications DTE/DCE interface standard is used to provide high-speed connectivity of up to 52 Mbps

between LANs and is found on many high-end Cisco routers?

EIA/TIA 232 (RS-232)

EIA/TIA 422 (RS-422)

EIA/TIA 423 (RS-423)

*****EIA/TIA-612/613 (HSSI)

ITU V.35

4. Why are serial connections preferred over parallel connections for long transmission lengths?

Parallel connections do not support error checking.

Parallel connections are subject to excessive attenuation.

*****Parallel connections are subject to clock skew and to crosstalk between wires.

Parallel connections transmit over only two wires and therefore transmit data more slowly.

5. Which three statements are correct about HDLC encapsulation? (Choose three.)

HDLC does not support CDP.

HDLC and PPP are compatible.

HDLC supports PAP and CHAP authentication.

*****HDLC implementation in Cisco routers is proprietary.

*****HDLC is the default serial interface encapsulation on Cisco routers.

*****HDLC uses frame delimiters to mark the beginnings and ends of frames.

ccna-4-modul3

download klik >> download-ccna-4-modul-3

1

Refer to the exhibit. Router R1 has been configured for Frame Relay connectivity to routers R2 and R3. Which set of configura

options for routers R2 and R3 would provide each router connectivity to R1?

R2(config)# interface serial0/0/1

R2(config-if)# frame-relay map ip 10.1.1.1 102

R3(config)# interface serial0/0/1

R3(config-if)# frame-relay map ip 10.1.2.1 103

R2(config)# interface serial0/0/1

R2(config-if)# frame-relay map ip 10.1.1.1 102

R2(config-if)# frame-relay map ip 10.1.2.3 301

R3(config)# interface serial0/0/1

R3(config-if)# frame-relay map ip 10.1.2.1 103

R3(config-if)# frame-relay map ip 10.1.1.2 201

R2(config)# interface serial0/0/1.201 point-to-point

R2(config-if)# no frame-relay invers-arp

R3(config)# interface serial0/0/1.301 point-to-point

R3(config-if)# no frame-relay invers-arp

*****R2(config)# interface serial0/0/1.201 point-to-point

R2(config-if)# frame-relay interface-dlci 201

R3(config)# interface serial0/0/1.301 point-to-point

2

Refer to the exhibit. Router R1 has been configured for Frame Relay connectivity to routers R2 and R3. What configuration option

should be configured on the R2 and R3 serial interfaces in order for all routers to ping each other successfully?

R2(config-if)# frame-relay interface-dlci 201 broadcast

R3(config-if)# frame-relay interface-dlci 301 broadcast

R2(config-if)# frame-relay map ip 10.1.1.1 201 broadcast

R3(config-if)# frame-relay map ip 10.1.1.1 301 broadcast

*****R2(config-if)# frame-relay map ip 10.1.1.3 201 broadcast

R3(config-if)# frame-relay map ip 10.1.1.2 301 broadcast

R2(config-if)# frame-relay map ip 10.1.1.1 201 broadcast

R2(config-if)# frame-relay map ip 10.1.1.3 201 broadcast

R3(config-if)# frame-relay map ip 10.1.1.1 301 broadcast

R3(config-if)# frame-relay map ip 10.1.1.2 301 broadcast

3 What best describes the use of a data-link connection identifier (DLCI)?

local address identifying a destination router across a Frame Relay network

*****locally significant address used to identify a virtual circuit

logical address identifying the interface between a router and a Frame Relay switch

logical address used to identify the DCE

4 What is created between two DTEs in a Frame Relay network?

ISDN circuit

limited access circuit

switched parallel circuit

*****virtual circuit

5 Which two items allow the router to map data link layer addresses to network layer addresses in a Frame Relay network? (Choos

ARP

RARP

Proxy ARP

*****Inverse ARP

*****LMI status messages

ICMP

ccna-4-modul4

download klik >> download-ccna-4-modul-4

1. Which two statements are true regarding network security? (Choose two.)

Securing a network against internal threats is a lower priority because company employees represent a low security risk.

*****Both experienced hackers who are capable of writing their own exploit code and inexperienced individuals who

download exploits from the Internet pose a serious threat to network security.

Assuming a company locates its web server outside the firewall and has adequate backups of the web server, no further

security measures are needed to protect the web server because no harm can come from it being hacked.

Established network operating systems like UNIX and network protocols like TCP/IP can be used with their default settings

because they have no inherent security weaknesses.

*****Protecting network devices from physical damage caused by water or electricity is a necessary part of the security

policy.

2. Which two statements are true about network attacks? (Choose two.)

Strong network passwords mitigate most DoS attacks.

Worms require human interaction to spread, viruses do not.

Reconnaissance attacks are always electronic in nature, such as ping sweeps or port scans.

*****A brute-force attack searches to try every possible password from a combination of characters.

*****Devices in the DMZ should not be fully trusted by internal devices, and communication between the DMZ and internal devices should be authenticated to prevent attacks such as port redirection.

3. Users are unable to access a company server. The system logs show that the server is operating slowly because it is

receiving a high level of fake requests for service. Which type of attack is occurring?

reconnaissance

access

*****DoS

worm

virus

Trojan horse

4. An IT director has begun a campaign to remind users to avoid opening e-mail messages from suspicious sources. Which

type of attack is the IT director trying to protect users from?

DoS

DDoS

*****virus

access

reconnaissance

5. Which two statements regarding preventing network attacks are true? (Choose two.)

The default security settings for modern server and PC operating systems can be trusted to have secure default security

settings.

Intrusion prevention systems can log suspicious network activity, but there is no way to counter an attack in progress without

user intervention.

*****Physical security threat mitigation consists of controlling access to device console ports, labeling critical cable runs,

installing UPS systems, and providing climate control.

Phishing attacks are best prevented by firewall devices.

*****Changing default usernames and passwords and disabling or uninstalling unnecessary services are aspects of

device hardening.

ccna-4-modul5

download klik  >> download-ccna-4-modul-5

1. By default, how is IP traffic filtered in a Cisco router?

blocked in and out of all interfaces

blocked on all inbound interfaces, but permitted on all outbound interfaces

*****permitted in and out of all interfaces

blocked on all outbound interfaces, but permitted on all inbound interfaces

2. Which three parameters can ACLs use to filter traffic? (Choose three.)

packet size

*****protocol suite

*****source address

*****destination address

source router interface

destination router interface

3. How do Cisco standard ACLs filter traffic?

by destination UDP port

by protocol type

*****by source IP address

by source UDP port

by destination IP address

4. Which two statements are correct about extended ACLs? (Choose two)

Extended ACLs use a number range from 1-99.

Extended ACLs end with an implicit permit statement.

*****Extended ACLs evaluate the source and destination addresses.

*****Port numbers can be used to add greater definition to an ACL.

Multiple ACLs can be placed on the same interface as long as they are in the same direction.

5. Where should a standard access control list be placed?

close to the source

*****close to the destination

on an Ethernet port

on a serial port

ccna-4-modul6

download klik >> download-ccna-4-modul-6

1. Which two statements about DSL are true? (Choose two.)

users are on a shared medium

uses RF signal transmission

*****local loop can be up to 3.5 miles (5.5km)

physical and data link layers are defined by DOCSIS

*****user connections are aggregated at a DSLAM located at the CO

2. Which two Layer 1 requirements are outlined in the Data-over-Cable Service Interface Specification (DOCSIS)? (Choose

two.)

*****channel widths

access method

maximum data rate

*****modulation techniques

compression techniques

3. Which two statements are valid solutions for a cable ISP to reduce congestion for users? (Choose two.)

use higher RF frequencies

*****allocate an additional channel

*****subdivide the network to reduce users on each segment

reduce the length of the local loop to 5.5 kilometers or less

use filters and splitters at the customer site to separate voice from data traffic

4. A technician has been asked to configure a broadband connection for a teleworker. The technician has been instructed that

all uploads and downloads for the connection must use existing phone lines. Which broadband technology should be used?

cable

*****DSL

ISDN

POTS

5. After conducting research to learn about common remote connection options for teleworkers, a network administrator has

decided to implement remote access over broadband to establish VPN connections over the public Internet. What is the result

of this solution?

A reliable connection is established at greater speeds than what is offered from dialup over POTS. Security is increased, but

username and password information are sent in plain text.

*****The connection has increased security and reliable connectivity. Users need a remote VPN router or VPN client

software.

Security and reliability are increased at a substantial loss in throughput, which is considered acceptable when supporting a

single user environment.

Reliability and security are increased without the need for additional equipment, when compared to dialup connections using

POTS.

ccna-4-modul7

download klik >> download-ccna-4-modul-7

1. Refer to the exhibit. A network technician determines DHCP clients are not working properly. The clients are receiving IP

configuration information from a DHCP server configured on the router but cannot access the Internet. From the output in the

graphic, what is the most likely problem?

The DHCP server service is not enabled.

The inside interface for DCHP is not defined.

The DHCP pool is not bound to the interface.

*****The pool does not have a default router defined for the clients.

All the host addresses have been excluded from the DHCP pool.

2. Refer to the exhibit. On the basis of the configuration shown, how should the pool of the excluded addresses be assigned to

key hosts on the network, such as router interfaces, printers, and servers?

*****The addresses are statically assigned by the network administrator.

The DHCP server dynamically assigns the addresses.

The addresses must be listed under the DHCP pool of addresses before they are available for static assignment.

The addresses must be listed under the DHCP pool of addresses before they are available for dynamic assignment.

3. Refer to the exhibit. According to the output, how many addresses have been successfully assigned by this DHCP server?

1

2

6

7

*****8

9

4. What are two benefits of NAT? (Choose two.)

*****It saves public IP addresses.

*****It adds a degree of privacy and security to a network.

It increases routing performance.

It makes troubleshooting routing issues easier.

It makes tunneling with IPsec less complicated.

5. What is true regarding the differences between NAT and PAT?

PAT uses the word “overload” at the end of the access-list statement to share a single registered address.

Static NAT allows an unregistered address to map to multiple registered addresses.

Dynamic NAT allows hosts to receive the same global address each time external access is required.

*****PAT uses unique source port numbers to distinguish between translations.

ccna-4-modul8

download klik >> download-ccna-4-modul-8

1. Which two pieces of information are typically found on a logical network diagram? (Choose two.)

cable types

connector types

*****interface identifiers

*****DLCI for virtual circuits

operating system versions

2. Excessive broadcasts are generally a symptom of a problem at which layer?

physical

*****data link

network

transport

3. What is one example of a physical layer problem?

incorrect encapsulation

incorrect STP configuration

incorrect ARP mapping

*****incorrect clock rate

4. Which two components should be taken into consideration when establishing a network baseline? (Choose two.)

*****information about the network design

IP addressing allocation on the network

requirements about the service provider setup

requirements for access control lists to regulate traffic

*****expected performance under normal operating conditions

5. Refer to the exhibit. Which two steps should be taken during the process of creating network documentation? (Choose two.)

Record the information about the devices discovered in the Campus network only.

*****Record the information about the devices discovered in the entire network, including the remote locations.

*****Transfer any information about the devices from the network configuration table that corresponds to a component of the topology diagram.

Transfer only the Layer 2 and Layer 3 information about the devices from the network configuration table that corresponds to a

component of the topology diagram.

Transfer the recorded information about the devices from the network configuration table gathered during peak network

utilization that corresponds to a component of the topology diagram.

ccna-4-final

download klik >> download-ccna-4-final

1. A technician has been asked to run Cisco SDM one-step lockdown on the router of a customer. What will be the result of this process?
Traffic is only forwarded from SDM-trusted Cisco routers.
Security testing is performed and the results are saved as a text file stored in NVRAM.
*****The router is tested for potential security problems and any necessary changes are made.

All traffic entering the router is quarantined and checked for viruses before being forwarded.

2. Refer to the exhibit. A network administrator is trying to configure a router to use SDM but it is not functioning correctly. What could be the problem?
The username and password are not configured correctly.
The authentication method is not configured correctly.
The HTTP timeout policy is not configured correctly.
*****The vtys are not configured correctly.

3. Refer to the exhibit. How is the TCP/IP configuration information specified by the default-router and dns-server commands made available?
The TCP/IP information is forwarded to a 10.0.1.3 to be supplied to DHCP clients.
*****The TCP/IP information is used by DHCP clients that are configured to request a configuration from R1.

The TCP/IP information is supplied to any DHCP client on the network connected to the FastEthernet 0/0 interface of R1.
The TCP/IP information is applied to each packet that enters R1 through the FastEthernet 0/0 interface that are hosts on the 10.0.1.0 /24 network except packets from addresses 10.0.1.2, 10.0.1.16, and 10.0.1.254.

4. What is a major characteristic of a worm?
malicious software that copies itself into other executable programs
tricks users into running the infected software
a set of computer instructions that lies dormant until triggered by a specific event
*****exploits vulnerabilities with the intent of propagating itself across a network

5. Refer to the exhibit. What can be concluded from the exhibited output of the debug ip nat command?
The 10.1.1.225 host is exchanging packets with the 192.168.0.10 host.
The native 10.1.200.254 address is being translated to 192.168.0.10.
*****The 192.168.0.0/24 network is the inside network.
Port address translation is in effect.