201.Refer to the exhibit. What is the correct addressing for a frame and packet received by Host B from Host A?
A: Destination MAC: 0011.43da.2c98
Source MAC: 0070.0e8f.088a
Destination IP: 192.168.60.5
Source IP: 192.168.24.5
B: Destination MAC: 0011.43da.2c98
Source MAC: 00b0.d0ef.5f6a
Destination IP: 192.168.60.5
Source IP: 192.168.24.5
C: Destination MAC: 0011.43da.2c98
Source MAC: 0070.0e8f.088a
Destination IP: 192.168.60.5
Source IP: 192.168.60.1
D: Destination MAC: 0011.43da.2c98
Source MAC: 0070.0e97.af4e
Destination IP: 192.168.60.5
Source IP: 192.168.60.2
Correct Answers: A
202.Refer to the exhibit. The network administrator has verified that a functioning cable connects Switch1 and Switch2. From the output that is shown, what two pieces of information can the administrator validly conclude? (Choose two.)
A:Using a source MAC address of 0009.11f3.8848, Switch2 is sending frames to Switch1.
B:Interface fa0/1 on Switch1 is in a shutdown state.
C:The status of fa0/2 should be checked on Switch2.
D:There is likely to be an IP address issue on Switch1 fa0/1.
E:The interface is functional at OSI Layer 1.
Correct Answers: C, E
203.You and a co-worker have established wireless communication directly between your wireless laptops. What type of wireless topology has been created?
A: BSS
B: ESS
C: IBSS
D: SSID
Correct Answers: C
204.Refer to the exhibit. Two buildings on the San Jose campus of a small company must be connected to use Ethernet with a bandwidth of at least 100 Mbps. The company is concerned about possible problems from voltage potential differences between the two
buildings. Which media type should be used for the connection?
A: UTP cable
B: STP cable
C: coaxial cable
D: fiber optic cable
Correct Answers: D
205.What is the maximum data rate specified for IEEE 802.11b WLANs?
A: 10 Mbps
B: 11 Mbps
C: 54 Mbps
D: 100 Mbps
Correct Answers: B
206.Refer to the output of the two show commands in the exhibit. If an administrator tries to ping host 10.1.8.5 from host 10.1.6.100, how will the ICMP packets be processed by Router A?
A: The packets will be discarded.
B: The packets will be routed out the S0/0 interface.
C: The packets will be routed out the S0/1 interface.
D: The packets will be routed out the Fa0/0 interface.
Correct Answers: C
207.A network administrator is configuring the routers in the graphic for OSPF. The OSPF process has been started and the networks have been configured for Area 0 as shown in the diagram. The network administrator has several options for configuring RouterB to ensure that it will be preferred as the designated router (DR) for the 172.16.1.0 /24 LAN segment. What configuration tasks could be used to establish this preference? (Choose three.)
A:Configure the priority value of the Fa0/0 interface of RouterB to a higher value than any other interface on the Ethernet network.
B:Change the router id of Router B by assigning the IP address 172.16.1.130/24 to the Fa0/0 interface of RouterB.
C:Configure a loopback interface on RouterB with an IP address higher than any IP address on the other routers.
D:Change the priority value of the Fa0/0 interface of RouterB to zero.
E:Change the priority values of the Fa0/0 interfaces of RouterA and RouterC to zero.
F:No further configuration is necessary.
Correct Answers: A, C, E
208.IP addresses and routing for the network are configured as shown in the exhibit. The network administrator issues the show ip eigrp neighbors command from Router1 and receives the output shown below the topology. Which statement is true?
A: It is normal for Router1 to show one active neighbor at a time to prevent routing loops.
B: Routing is not completely configured on Router3.
C: The IP addresses are not configured properly on the Router1 and Router3 interfaces.
D: The no auto-summary command configured on the routers prevents Router1 and Router2 from forming a neighbor relationship.
Correct Answers: B
Exam CISCO-640-802 v12(2.93) Part 21
Exam CISCO-640-802 v12(2.93) Part 20
191.Which are valid modes for a switch port used as a VLAN trunk? (Choose three.)
A:transparent
B:auto
C:on
D:desirable
E:blocking
F:forwarding
Correct Answers: B, C, D
192.Drop
Drag and drop question. Drag the items to the proper locations.
Correct Answers:
193.Refer to the exhibit. A problem with network connectivity has been observed. It is suspected that the cable connected to switch port Fa0/9 on Switch1 is disconnected. What would be an effect of this cable being disconnected?
A: Host B would not be able to access the server in VLAN9 until the cable is reconnected.
B: Communication between VLAN3 and the other VLANs would be disabled.
C: The transfer of files from Host B to the server in VLAN9 would be significantly slower.
D: For less than a minute, Host B would not be able to access the server in VLAN9. Then normal network function would resume.
Correct Answers: D
194.Refer to the graphic. How many collision domains are shown?
A: one
B: two
C: three
D: four
E: six
F: fourteen
Correct Answers: B
195.Refer to the exhibit. The network administrator is in a campus building distant from Building B. WANRouter is hosting a newly installed WAN link on interface S0/0. The new link is not functioning and the administrator needs to determine if the correct cable has been attached to the S0/0 interface. How can the administrator accurately verify the correct cable type on S0/0 in the most efficient manner?
A: Telnet to WANRouter and execute the command show interfaces S0/0
B: Telnet to WANRouter and execute the command show processes S0/0
C: Telnet to WANRouter and execute the command show running-configuration
D: Telnet to WANRouter and execute the command show controller S0/0
E: Physically examine the cable between WANRouter S0/0 and the DCE.
F: Establish a console session on WANRouter and execute the command show interfaces S0/0
Correct Answers: D
196.Refer to the exhibit. For what two reasons has the router loaded its IOS image from the location that is shown? (Choose two.)
198.Refer to the exhibit. A technician is troubleshooting a host connectivity problem. The host is unable to ping a server connected to Switch_A. Based on the results of the testing, what could be the problem?
197.LAB
Correct Answers: A, C
E:Cisco routers will first attempt to load an image from TFTP for management purposes.
D:Router1 defaulted to ROMMON mode and loaded the IOS image from a TFTP server.
C:Router1 cannot locate a valid IOS image in flash memory.
B:Router1 is acting as a TFTP server for other routers.
A:Router1 has specific boot system commands that instruct it to load IOS from a TFTP
server.
A: A remote physical layer problem exists.
B: The host NIC is not functioning.
C: TCP/IP has not been correctly installed on the host.
D: A local physical layer problem exists.
Correct Answers: D
199.A routing protocol is required that supports:
1) routing update authentication
2) an addressing scheme that conserves IP addresses
3) multiple vendors
4) a network with over 50 routers
Which routing protocol fulfills these requirements?
A: RIPv1
B: RIPv2
C: EIGRP
D: OSPF
Correct Answers: D
200.LAB
Exam CISCO-640-802 v12(2.93) Part 18
171.Drop
Drag and drop question. Drag the items to the proper locations.
Correct Answers:
172.Refer to the exhibit. What can be determined about routes that are learned from the router at IP address 190.171.23.12?
A: HQ_Router last received an update from 190.171.23.12 at 3:30 am.
B: If HQ_Router does not receive an update from 190.171.23.12 in 30 seconds, all routes from that source will be removed from the routing table.
C: If HQ_Router does not receive an update from 190.171.23.12 in 30 seconds, all routes from that source will be flagged with a hold-down timer.
D: 190.171.23.12 is expected to send an update to HQ_Router for network 190.172.0.0 in 3 minutes and 30 seconds.
Correct Answers: B
173.Refer to the exhibit. A network associate needs to configure the switches and router in the graphic so that the hosts in VLAN3 and VLAN4 can communicate with the enterprise server in VLAN2. Which two Ethernet segments would need to be configured as trunk links? (Choose two.)
A:A
B:B
C:C
D:D
E:E
F:F
Correct Answers: C, F
174.Which tables of EIGRP route information are held in RAM and maintained through the use of hello and update packets? (Choose two.)
A:neighbor table
B:SPF table
C:RTP table
D:topology table
E:query table
F:DUAL table
Correct Answers: A, D
175.Refer to the exhibit. The FMJ manufacturing company is concerned about unauthorized access to the Payroll Server. The Accounting1, CEO, Mgr1, and Mgr2 workstations should be the only computers with access to the Payroll Server. What two technologies should be implemented to help prevent unauthorized access to the server? (Choose two.)
A:access lists
B:encrypted router passwords
C:STP
D:VLANs
E:VTP
F:wireless LANs
Correct Answers: A, D
176.A router learns about a remote network from EIGRP, OSPF, and a static route. Assuming all routing protocols are using their default administrative distance, which route will
the router use to forward data to the remote network?
A: The router will use the static route.
B: The router will use the OSPF route.
C: The router will use the EIGRP route.
D: The router will load balance and use all three routes.
Correct Answers: A
177.Refer to the exhibit. A new subnet with 12 hosts has been added to the network. Which subnet address should this network use to provide enough useable addresses while wasting the fewest addresses?
A: 192.168.10.80/28
B: 192.168.10.80/29
C: 192.168.10.96/28
D: 192.168.10.96/29
Correct Answers: C
178.An access list has been designed to prevent HTTP traffic from the Accounting Department from reaching the HR server attached to the Holyoke router. Which of the following access lists will accomplish this task when grouped with the e0 interface on the Chicopee router?
A: permit ip any any
deny tcp 172.16.16.0 0.0.0.255 172.17.17.252 0.0.0.0 eq 80
B: permit ip any any
deny tcp 172.17.17.252 0.0.0.0 172.16.16.0 0.0.0.255 eq 80
C: deny tcp 172.17.17.252 0.0.0.0 172.16.16.0 0.0.0.255 eq 80
permit ip any any
D: deny tcp 172.16.16.0 0.0.0.255 172.17.17.252 0.0.0.0 eq 80
permit ip any any
Correct Answers: D
179.What is one reason that WPA encryption is preferred over WEP?
A: A WPA key is longer and requires more special characters than the WEP key.
B: The access point and the client are manually configured with different WPA key values.
C: WPA key values remain the same until the client configuration is changed.
D: The values of WPA keys can change dynamically while the system is used.
Correct Answers: D
180.Refer to the exhibit. The network administrator must complete the connection between the RTA of the XYZ Company and the service provider. To accomplish this task, which two devices could be installed at the customer site to provide a connection through the local loop to the central office of the provider? (Choose two.)
A:WAN switch
B:PVC
C:ATM switch
D:multiplexer
E:CSU/DSU
F:modem
Correct Answers: E, F
Exam CISCO-640-802 v12(2.93) Part 17
161.Which of the following are key characteristics of PPP? (Choose three.)
A:can be used over analog circuits
B:maps Layer 2 to Layer 3 address
C:encapsulates several routed protocols
D:supports IP only
E:provides error correction
Correct Answers: A, C, E
162.The network administrator of the Oregon router adds the following command to the
router configuration: ip route 192.168.12.0 255.255.255.0 172.16.12.1. What are the results of adding this command? (Choose two.)
D: incorrect IP address mapping
C: mismatched encapsulation types
B: incorrect DLCI
A: mismatched LMI types
165.A Cisco router that was providing Frame Relay connectivity at a remote site was replaced with a different vendor's frame relay router. Connectivity is now down between the central and remote site. What is the most likely cause of the problem?
Correct Answers: B
E: The switch will forward the frame to all ports except the port on which it was received.
D: The switch will remove the destination MAC from the switch table.
C: The switch will return a copy of the frame out the source port.
B: The switch will forward the frame to a specific port.
A: The switch will not forward unicast frames.
164.What will an Ethernet switch do if it receives a unicast frame with a destination MAC that is listed in the switch table?
Correct Answers: B, E
F:SDM
E:IPS
D:IOX
C:IOS
B:IDS
A:ATM
163.What are two security appliances that can be installed in a network? (Choose two.)
Correct Answers: A, C
F:Traffic for network 172.16.12.0 is forwarded to the 192.168.12.0 network.
E:This route is automatically propagated throughout the entire network.
D:Traffic for all networks is forwarded to 172.16.12.1.
C:Traffic for network 192.168.12.0 is forwarded to 172.16.12.1.
B:The command invokes a dynamic routing protocol for 192.168.12.0.
A:The command establishes a static route.
Correct Answers: C
166.Hotspot
Hotspot question. Click on the correct location or locations in the exhibit.
Correct Answers:
167.The Ethernet networks connected to router R1 in the graphic have been summarized for router R2 as 192.1.144.0/20. Which of the following packet destination addresses will R2 forward to R1, according to this summary? (Choose two.)
A:192.1.159.2
B:192.1.160.11
C:192.1.138.41
D:192.1.151.254
E:192.1.143.145
F:192.1.1.144
Correct Answers: A, D
168.Refer to the output from the show running-config command in the exhibit. What should the administrator do to allow the workstations connected to the FastEthernet 0/0 interface to obtain an IP address?
A: Apply access-group 14 to interface FastEthernet 0/0.
B: Add access-list 14 permit any any to the access list configuration.
C: Configure the IP address of the FastEtherent 0/0 interface to 10.90.201.1.
D: Add an interface description to the FastEthernet 0/0 interface configuration.
Correct Answers: C
169.A network administrator would like to implement NAT in the network shown in the graphic to allow inside hosts to use a private addressing scheme. Where should NAT be configured?
A: Corporate router
B: Engineering router
C: Sales router
D: all routers
E: all routers and switches
Correct Answers: A
170.If an ethernet port on a router was assigned an IP address of 172.16.112.1/20, what is the maximum number of hosts allowed on this subnet?
A: 1024
B: 2046
C: 4094
D: 4096
E: 8190
Correct Answers: C
GNS3
What is GNS3 I hear you cry? Well, imho, it is the best tool on the market to practice router configuration without having an actual router in front of you. What sets it apart is that it is a Cisco IOS emulator, not one of those nasty simulators that constrain the commands that can be used. The caveat is that you will need a Cisco IOS, for example I use the 3660 Crypto IOS. I have a support contract with Cisco so I can access an IOS however if you look around enough you will be able to find a Cisco IOS for yourself.
GNS3 is actually the graphical front-end of Dynamips/Dynagen and allows you to drag-and-drop routers onto a stage, connect them up, run IOS on them, and save their configs, just as if you had your own network. It can be a little confusing to set up first of all so I will present a step-by-step guide below of how to install and configure GNS3 including a couple of advanced options which will allow you to run Cisco Security Device Manager (SDM) on your PC.
Installation and Configuration
This process needs to be done only the once.
1. Download GNS3 from http://www.gns3.net/download and choose the installer which includes Dynamips, WinPCap and the binary version of GNS3 and install, accepting the various licence agreements etc.
2. You now need a Cisco IOS. Get one from http://www.cisco.com if you have a CCO account with Support or find an IOS on Google.
3. Now open up GNS3.
4. Go to Edit-->IOS Images and Hypervisors and you should get a screen similar to below.
5. In the Settings section you need to point to the IOS image you copied in Step 2 then click on Save. The value of the IDLE PC section will be blank and leave blank for now. Now click on Close.
6. Now go to Edit-->Preferences then click on Dynamips on the left-hand side. You should get a screen similar to below.
7. The executable path should point to the dynamips-wxp.exe in the Program Files directory. Change the Working Directory to a desired folder then click on the Test button. You should see that Dynamips has successfully started, if so click Apply then OK. If not you should double-check the Executable Path and the Working Directory:
8. On the main screen drag a router onto the main screen then right-click on it and show hostname. Now click on Emulation Mode.
9. Click on the Play button on the tool bar to start the Cisco IOS.
10. In the bottom pane marked “Console” type console R0 to set up a console session with your router similar to below.
11. Say “No” to initial configuration dialog until you get to the Router> prompt. Now type enable to go into Enable mode.
12. Go back to the GNS3 session (screenshot in Step 8) KEEPING THE CONSOLE SESSION OPEN.
13. Type idlepc get your-router-name for example idlepc get R0 and wait for some idlepc values to be displayed. Make a note of these values and click Cancel.
14. By default Dynamips will take up 100% of your CPU usage and you need to specify an idlepc value to get that changed. Close down the console session and go to Design Mode in GNS3. Open up Task Manager on your PC (usually CTRL-ALT-DELETE) then go to the Performance tab.
15. Go to Edit-->IOS Images and Hypervisors and select the IOS you identified in Step 4 then click on Edit. Enter the first idlepc value you wrote down from Step 13 then click on Save then Close.
16. Go back into Emulation mode then start the IOS again then console to the router. View the CPU utilisation in Task Manager and see if it falls below 5%. If it stays at 100% then go back to step 15 and change the idlepc value to the next one in the list. Repeat this until you get an idlepc value that has the CPU utilisation at around 5% or less.
You have now successfully installed and configured GNS3.
Configuring a Serial Interface on a Router
By default the 3660 image that I use comes with 2 FastEthernet interfaces. In order to simulate WAN links you need to add serial interfaces to the router as outlined below.
1. Right-click on your router in Design Mode then click Configure then on your router name.
2. Click on the slots tab and change slot 1 (or any other slot other than slot 0) to NM-4T. This will provide you with 4 serial interfaces. NOTE THAT THE SLOT NAME MAY BE DIFFERENT DEPENDING ON WHICH IOS YOU USE.
3. Click on Apply then OK.
Adding a switch module to your router
Follow the same steps as you did for configuring a serial interface but choose the NM-16ESW module from the drop-down list.
Connecting two or more routers
You will come to the point where configuring just one router is not sufficient such as when you want to run a routing protocol. The following guidelines show you how to connect routers together.
1. Drag two or more routers onto the stage and configure their slots if required. Display their hostnames by pressing the ABC button on the toolbar.
This is a personal preference and allows you to track which router is which.
2. Now click on the interface button on the toolbar and select Manual.
The interface button changes to a red cross.
Now left-click on a router and select an interface which you want a cable connected to. Now click the router to which you want to connect to and select the interface on that router for the other end of the link. You should now see the link has been drawn. Once you have finished configuring the interfaces click the interface button (red cross) to get out of interface configuration mode (the icon will revert to the telephone jack symbol). The picture below shows three routers with a FastEthernet connection and the other with a Serial link (zig-zag line).
3. Notice that each link has got a red dot on it. When you go back into Emulation Mode and start the IOS, each dot should turn to green which denotes that each router has successfully started the IOS.
Saving your configuration
After all your hard work on the command line you will probably want to save your configuration and reuse it on another day. Follow the steps below to save your work:
1. In Emulation Mode go to FileSave As and save your topology where you want as a .net file. When it comes to reusing this topology just double-click on the .net file to open it up in GNS3.
2. On each router save your config using copy run start
3. Back in Emulation Mode type save /all to save all of the configs into the .net file. If you want to save the config of only one router you can replace the keyword all with the name of the router you wish to save the config of.
Configuring a host in the network (Advanced)
There may be an occasion when you want to connect a host in your topology such as running Cisco’s Security Device Manager (use of this may figure in future CCNA exams). To do this you must first configure a Loopback Adapter on your PC.
1. Go to Control Panel-->Add Hardware then click Next
2. Yes I have already connected the hardware
3. Scroll to the bottom and click on Add a new hardware device then Next
4. Install the hardware that I manually select from a list (Advanced)
5. Click on Network Adapters then Next
6. Select Microsoft as the Manufacturer then on Microsoft Loopback Adapter under Network Adapter then click Next then Next again.
7. Open up Control Panel-->Network Connections to see the adapter in place.
Now that you have created a loopback adapter you will want to connect it to a router. To do this, follow these steps:
1. In the GNS3 installation directory run the Network Device List.bat file which will give you the Ethernet address of your Loopback Adapter.
Notice the second adapter shown where description is MS Loopback Driver. I have renamed the adapter as Loopback Adapter for SDM. We are interested in the NIO_gen_eth string.
2. Go into GNS3 and drag a cloud onto the stage.
3. Right-click the cloud and select configure.
4. Choose your cloud from the list.
5. In the Generic Ethernet NIO section select your Loopback Adapter from the drop-down list (the one that matches what is shown in Step 1) and click on Add, Apply, the OK.
6. Now connect a FastEthernet port on your router to the cloud as you would connect two routers.
7. Configure an IP address and subnet mask on the router interface connected to the cloud and bring the interface up.
8. Go to Control Panel-->Network Connections and right-click your adapter. Choose Properties then Internet Protocol (TCP/IP) and give it an IP address in the same subnet as the router’s FastEthernet interface with the same subnet mask and with a default gateway matching the IP address of the router’s interface.
Example:
Router’s FastEthernet 0/0 interface connected to the cloud:
On the router I would have something like:
Router(config)#int fa0/0
Router(config-if)#ip address 192.168.1.1 255.255.255.0
Router(config-if)#no shut
On the PC I would have something like:
IP address = 192.168.1.2
Subnet Mask = 255.255.255.0
Default Gateway = 192.168.1.1
You should now be able to ping between your PC and the router
Running SDM (Advanced)
There may be a need to practice using the Cisco Security Device Manager (SDM) for your exam and the following steps show you how to configure it.
1. Download and install SDM from the www.cisco.com or from a share on the web.
2. Choose to only install SDM to your PC, NOT to the router.
3. Once installed you need to configure your router with the following commands:
Router#conf t
Router(config)#username your_username privilege 15 secret 5
Router(config)#ip http server
Router(config)#ip http secure-server
Router(config)#ip http authentication local
Router(config)#line vty 0 4
Router(config-line)#login local
Router(config-line)#transport input telnet ssh
Router(config-line)#privilege level 15
Router(config-line)#line cons 0
Router(config-line)#login local
Router(config-line)#transport input telnet ssh
Router(config-line)#privilege level 15
Router(config-line)#exit
Router(config)#crypto key generate rsa gen mod 1024
4. Now double-click the SDM icon and enter the IP address of the router and tick the box asking about HTTPS then click on Launch.
5. Ensure you allow popups on your browser.
6. Enter username and password as defined after step 3.
7. Say yes to allow SDM to install.
You should now have a screen similar to the one below although this may be because I used a username and password of “cisco” which are the default.
8. Select a new username and password for the router then click OK. You should see the screen below then click OK.
9. You should now be in SDM and able to configure the router.
From Subnettingmadeeasy
