Question 1

What command will display the forward / filter table?

Accepted Answer

The Command show mac address-table displays the forward/filter table on the switch.

Question 2

You want to run the new 802.1w on your switches. which of the following would enable this protocol?

Accepted Answer

802.1w is the also called Rapid Spanning Tree Protocol. It is not enabled by default on Cisco switches, but it is a better STP to run since it has all the fixes that the Cisco extensions provide with 802.1d

Question 3

You have two switches connected together with two crossover cables for redundancy, and STP is disabled. Which of the following will happen between the switches?

Accepted Answer

If spanning tree is disabled on a switch and you have redundant links to another switch, broadcast stroms will occur, among other possible problems.

Question 4

Which switching technology reduces the size of a broadcast domain?

Accepted Answer

Virtual LANs break up broadcast domains in layer 2 switched internetworks.

Question 5

You want to improve network performance by increasing the bandwidth available to hosts and limit the size of the broadcast domains. Which of the following options will achieve this goal?

Accepted Answer

By creating and implementing VLANs in your switched network, you can break up broadcast domains at layer2. For hosts on different VLANs to communicate, you must have a router or layer 3 switch.

Question 6

A switch has been configured configured for three different VLANs : VLAN2, VLAN3 and VLAN4. A router has been added to provide communication between the VLANs. What minimum type of interface necessary on the router if only one connection is to be ma…

Accepted Answer

Although you can use either 100Mbps or 1Gbps Ethernet, the 100Mbps is necessary at a minimum and is the best answer to this question. You need to trunk the link from the switch to the router to make this connection work with inter-VLAN communication.

Question 7

Which of the following commands sets a trunk port on a 2960 switch?

Accepted Answer

To set a switch port to trunk mode, which allows the data of all VLAN information to pass down the link, use the switchport mode trunk command.

Question 8

You connect a host to a switch port, but the new host cannot log into the server that is plugged into the same switch. What could the problem be?

Accepted Answer

This question is a little Vague, but the best answer is that the VLAN membership for the port is not configured

Question 9

Which of the following is an example of a standard IP access list?

Accepted Answer

Standard IP access lists use the numbers 1 - 99 and 1300 - 1999 and filter based on source IP address only. Option C is incorrect because the mask must be in wildcard format.

Question 10

You need to create an access list that will prevent hosts in the network range of 192.168.160.0 to 192.168.191.0 . Which of the following lists will you use?

Accepted Answer

The range of 192.168.160.0 to 192.168.191.0 is a block size of 32. The network address is 192.168.160.0 and the mask would be 255.255.224.0, which for an access list must be a wildcard format of 0.0.31.255 . The 31 is used for a block size of 32. The wildcard is always one less than the block size.

Question 11

What router command allows you to determine whether an IP access list is enabled on a particular interface?

Accepted Answer

Of the available choices only the show ip interface command will tell you which interfaces have access lists applied. show access - lists will not show you which interfaces have an access list applied.

Question 12

If you wanted to deny all Telnet connections to only network 192.168.10.0, which command could you use?

Accepted Answer

The extended access list ranges are 100 - 199 and 2000 - 2699, so the access-list number of 100 is valid. Telnet uses TCP, so the protocol TCP is valid. Now you just need to look for the source and destination address. only the third option has the correct sequence of parameters. Option B may work, but the question specifically states "only" to network 192.168.10.0, and the wildcard in option B is too broad.

Question 13

Which command would you use to apply an access list to a router interface?

Accepted Answer

To apply an access list , the proper command is ip access - group 101 in.

Question 14

What is the most common attack on a network today?

Accepted Answer

The most common attack on a network today is a denial of service (DoS) because they are the easiest attack to achieve.

CISCO Certification Questions