CCNA Switching and Network Access Practice Test 24 — 15 Questions

Question 1

You are connected to SW1 via console. SW1 is a Layer 2 switch connected to two other switches (SW2 and SW3) via trunk links. The network administrator wants to ensure that SW1 becomes the root bridge for VLAN 10 and VLAN 20. Currently, SW2 is the root for both VLANs. Configure SW1 to become the root bridge for these VLANs using the Cisco-recommended macro STP commands.

Accepted Answer

spanning-tree vlan 10 root primary; spanning-tree vlan 20 root primary. The 'spanning-tree vlan <vlan> root primary' command is the Cisco-recommended macro that sets the bridge priority to 24576, which is lower than the default 32768, making SW1 the root bridge for those VLANs. Option A correctly uses this macro. Option C, while it could achieve the same goal by setting priority to 4096, is not the macro command and would be considered a static configuration; the question specifically asks for the appropriate macro commands. Option B sets priority to 28672 as a secondary root, and Option D is invalid syntax.

Answer

spanning-tree vlan 10 root secondary; spanning-tree vlan 20 root secondary

Answer

spanning-tree vlan 10 priority 4096; spanning-tree vlan 20 priority 4096

Answer

spanning-tree vlan 10 root; spanning-tree vlan 20 root

Question 2

You are connected to SW1 via console. SW1 is a Layer 2 switch with two ports (G0/1 and G0/2) connected to a host. The host should be able to send and receive traffic on VLAN 10 and VLAN 20. Configure the two ports as a trunk link to the host, but ensure that the trunk only carries VLANs 10 and 20, and set the native VLAN to VLAN 99.

Accepted Answer

interface range gigabitethernet0/1-2
switchport mode trunk
switchport trunk allowed vlan 10,20
switchport trunk native vlan 99. The correct configuration sets the ports as trunk, restricts allowed VLANs to exactly 10 and 20 with 'switchport trunk allowed vlan 10,20', and sets the native VLAN to 99 with 'switchport trunk native vlan 99'. This matches every requirement in the question: trunk mode, only VLANs 10 and 20 carried, native VLAN 99.

Answer

interface range gigabitethernet0/1-2
switchport mode trunk
switchport trunk allowed vlan 10-20
switchport trunk native vlan 99

Answer

interface range gigabitethernet0/1-2
switchport mode trunk
switchport trunk allowed vlan 10,20
switchport native vlan 99

Answer

interface range gigabitethernet0/1-2
switchport mode trunk
switchport trunk allowed vlan 10,20
switchport trunk native vlan 1

Question 3

You are connected to SW1 via console. SW1 is a multilayer switch with SVIs for VLAN 10 (192.168.10.1/24) and VLAN 20 (192.168.20.1/24). Hosts in VLAN 10 and VLAN 20 need to communicate with each other. Currently, inter-VLAN routing is not working. You need to enable routing on SW1 and verify that the SVIs are operational.

Accepted Answer

Enable IP routing using the 'ip routing' global configuration command.. The 'ip routing' command enables Layer 3 routing on the multilayer switch, allowing SVIs to route between VLAN 10 and VLAN 20. Option B is unnecessary because directly connected SVIs do not require a routing protocol; routing protocols are only needed for routes learned from other routers, and 'ip routing' must still be enabled. Option C would require converting the physical interfaces to routed ports, which would break the existing Layer 2 VLAN topology and is not the intended solution. Option D provides an external router-on-a-stick solution but does not enable routing on SW1 itself, which is the required task. Therefore, only option A correctly enables inter-VLAN routing on SW1.

Answer

Configure a routing protocol such as OSPF or EIGRP on the SVIs.

Answer

Assign IP addresses to the physical interfaces connected to the hosts.

Answer

Create a trunk port and connect a router to perform router-on-a-stick.

Question 4

You are connected to SW1 via console. SW1 is a Layer 2 switch. Port G0/1 connects to a PC that should be allowed only one MAC address. Currently, the port is configured with default settings. You need to enable port security on G0/1, set the maximum MAC addresses to 1, configure the port to shut down if a violation occurs, and ensure that the first learned MAC address is sticky (i.e., saved to the running config).

Accepted Answer

interface G0/1
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky. Enabling port security and setting maximum MAC addresses to 1 limits the port to one device. The violation shutdown mode disables the port if another MAC attempts to use it. Sticky MAC learning dynamically learns the first MAC and saves it to the running configuration.

Answer

interface G0/1
switchport port-security
switchport port-security maximum 1
switchport port-security violation protect
switchport port-security mac-address sticky

Answer

interface G0/1
switchport port-security
switchport port-security maximum 2
switchport port-security violation shutdown
switchport port-security mac-address sticky

Answer

interface G0/1
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address 0000.1111.2222

Question 5

You are connected to SW1 via the console. SW1 is a Layer 2 switch. Ports G0/1 and G0/2 are connected to two PCs that should be in VLAN 10 (Sales). Port G0/3 is a trunk link to another switch. The PCs are currently unable to communicate because the ports are in VLAN 1. Configure the switch to place the ports in the correct VLAN and ensure the trunk is properly configured with 802.1Q encapsulation and native VLAN 99.

Accepted Answer

Create VLAN 10, assign G0/1 and G0/2 as access ports in VLAN 10, configure G0/3 as trunk with encapsulation dot1q and native VLAN 99.. It creates VLAN 10, assigns the access ports G0/1 and G0/2 to VLAN 10, and configures G0/3 as a trunk with 802.1Q encapsulation and native VLAN 99. This matches the requirements: PCs in VLAN 10, trunk using dot1q (the standard for Cisco switches), and native VLAN 99. The commands would be: vlan 10, interface range g0/1-2, switchport mode access, switchport access vlan 10; interface g0/3, switchport trunk encapsulation dot1q, switchport mode trunk, switchport trunk native vlan 99.

Answer

Create VLAN 10, assign G0/1 and G0/2 as access ports in VLAN 10, configure G0/3 as trunk with encapsulation isl and native VLAN 99.

Answer

Create VLAN 10, assign G0/1 and G0/2 as trunk ports in VLAN 10, configure G0/3 as trunk with encapsulation dot1q and native VLAN 99.

Answer

Create VLAN 10, assign G0/1 and G0/2 as access ports in VLAN 10, configure G0/3 as trunk with encapsulation dot1q and native VLAN 1.

Question 6

You are connected to SW1 via the console. SW1 is a Layer 2 switch with two VLANs: VLAN 10 (Sales) and VLAN 20 (Engineering). A router R1 is connected to port G0/1 on SW1 for inter-VLAN routing. Currently, the router is not routing between VLANs because the trunk is not configured correctly. Configure the switch port as a trunk and ensure the router can route between VLANs using subinterfaces (Router-on-a-Stick).

Accepted Answer

Configure the switch port as a trunk with 802.1Q encapsulation and allow VLANs 10 and 20.. The switch port was in access mode, which only carries one VLAN. Changing it to trunk with 802.1Q encapsulation allows multiple VLANs to traverse to the router. The allowed VLAN list restricts to VLANs 10 and 20 for security.

Answer

Configure the switch port as an access port in VLAN 10 and add VLAN 20 as a secondary VLAN.

Answer

Configure the switch port as a trunk with ISL encapsulation and allow all VLANs.

Answer

Configure the switch port as a trunk with 802.1Q encapsulation and allow VLANs 1, 10, and 20.

Question 7

You are connected to SW1 via the console. SW1 is a Layer 2 switch with two links to SW2 configured as an EtherChannel using LACP. The EtherChannel is not coming up. Interface G0/2 was accidentally configured as an access port in VLAN 10, while G0/1 is configured as a trunk. The administrator wants to use LACP to bundle the links. Troubleshoot and fix the configuration to bring up the EtherChannel.

Accepted Answer

Change interface G0/2 to trunk mode and ensure both interfaces have the same allowed VLAN list.. For an EtherChannel to form, all member interfaces must have matching configuration, including trunk mode and allowed VLANs. Since G0/1 is a trunk and G0/2 is an access port in VLAN 10, the mismatch prevents the EtherChannel from bundling. Changing G0/2 to trunk mode and ensuring both interfaces have the same allowed VLAN list resolves the inconsistency.

Answer

Change interface G0/1 to access VLAN 10 to match G0/2.

Answer

Remove the access VLAN configuration from G0/2 and leave it as a default switchport (dynamic desirable).

Answer

Change the EtherChannel mode from LACP to PAgP on both switches.

Question 8

You are connected to SW1 via the console. SW1 is a Layer 2 switch with two VLANs: VLAN 10 (Sales) and VLAN 20 (Engineering). Port G0/1 is connected to a sales PC, and port G0/2 is connected to an engineering PC. You need to ensure that each PC is in the correct VLAN. However, the sales PC is currently unable to ping the engineering PC because they are in different VLANs. You have a router R1 connected to SW1 via port G0/3. Configure inter-VLAN routing using Router-on-a-Stick on R1, and ensure SW1's port G0/3 is properly configured as a trunk.

Accepted Answer

Configure subinterfaces on R1 with encapsulation dot1Q and assign IP addresses in VLAN 10 and VLAN 20. Configure SW1 interface G0/3 as a trunk port.. Router-on-a-Stick requires the router's physical interface to be divided into subinterfaces, each tagged with 802.1Q encapsulation for a specific VLAN and assigned an IP address that serves as that VLAN's default gateway. The switch port facing the router must be configured as a trunk so it can carry tagged frames for both VLAN 10 and VLAN 20. This combination lets R1 route between the two VLANs while SW1 remains a Layer 2 device.

Answer

Configure a routed port on SW1 G0/3 and assign an IP address. Then configure static routes on R1 to reach each VLAN.

Answer

Configure SW1 interface G0/3 as an access port in VLAN 10. Then configure R1 with a single IP address in VLAN 10 and enable proxy ARP.

Answer

Configure SW1 interface G0/3 as a trunk port. Then configure R1 with a single IP address on the physical interface and enable VLAN routing using the 'vlan' command.

Question 9

You are connected to SW1 via the console. SW1 is a Layer 2 switch with two redundant links to SW2 (G0/1 and G0/2). The network administrator wants to use both links for load balancing and redundancy by configuring EtherChannel. You need to configure a Layer 2 EtherChannel using LACP on both switches. The port-channel should be in VLAN 1.

Accepted Answer

interface port-channel 1
switchport mode access
switchport access vlan 1
interface range GigabitEthernet0/1-2
channel-group 1 mode active. EtherChannel bundles multiple physical links into a single logical link for load balancing and redundancy. LACP (mode active) negotiates the bundle automatically. The port-channel interface must be configured with the desired switchport settings.

Answer

interface port-channel 1
switchport mode trunk
switchport trunk allowed vlan 1
interface range g0/1-2
channel-group 1 mode desirable

Answer

interface port-channel 1
switchport mode access
switchport access vlan 1
interface range g0/1-2
channel-group 1 mode passive

Answer

interface port-channel 1
switchport mode access
switchport access vlan 1
interface g0/1
channel-group 1 mode active
interface g0/2
channel-group 2 mode active

Question 10

You are connected to SW1 via the console. SW1 is a Layer 2 switch connected to multiple PCs. The network administrator wants to implement port security on port G0/1 to allow only one MAC address and to shut down the port if a violation occurs. Additionally, the administrator wants the MAC address to be learned dynamically and added to the running configuration as sticky. Configure port security on G0/1 accordingly.

Accepted Answer

SW1(config)# interface G0/1
SW1(config-if)# switchport port-security
SW1(config-if)# switchport port-security maximum 1
SW1(config-if)# switchport port-security mac-address sticky
SW1(config-if)# switchport port-security violation shutdown. The requirement is one MAC, sticky learning, and shutdown on violation. The correct sequence enables port security, sets maximum 1, enables sticky MAC learning, and sets violation mode to shutdown. Sticky learning dynamically learns the MAC and writes it into the running configuration as a sticky secure MAC address.

Answer

SW1(config)# interface G0/1
SW1(config-if)# switchport port-security
SW1(config-if)# switchport port-security maximum 1
SW1(config-if)# switchport port-security mac-address sticky
SW1(config-if)# switchport port-security violation protect

Answer

SW1(config)# interface G0/1
SW1(config-if)# switchport port-security
SW1(config-if)# switchport port-security maximum 1
SW1(config-if)# switchport port-security mac-address 0000.1111.2222
SW1(config-if)# switchport port-security violation shutdown

Answer

SW1(config)# interface G0/1
SW1(config-if)# switchport port-security
SW1(config-if)# switchport port-security maximum 1
SW1(config-if)# switchport port-security mac-address sticky
SW1(config-if)# switchport port-security violation restrict

Question 11

You are connected to SW1 via the console. SW1 is a Layer 2 switch with an access port G0/1 connected to a server. The network administrator has noticed that the server is sending BPDUs, which could cause network instability. You need to configure PortFast and BPDU Guard on port G0/1 to prevent BPDU-related issues and ensure the port transitions to forwarding state immediately.

Accepted Answer

interface G0/1
spanning-tree portfast
spanning-tree bpduguard enable. PortFast allows an access port to bypass STP listening/learning states, providing immediate connectivity. BPDU Guard protects the network by shutting down the port if a BPDU is received, preventing potential loops from unauthorized switches.

Answer

interface G0/1
spanning-tree portfast
spanning-tree guard root

Answer

interface G0/1
spanning-tree portfast
spanning-tree bpdufilter enable

Answer

interface G0/1
spanning-tree portfast
spanning-tree bpduguard default

Question 12

You are connected to SW1 via the console. SW1 is a Layer 2 switch. Port GigabitEthernet0/1 connects to a PC in VLAN 10, and port GigabitEthernet0/2 connects to a server in VLAN 20. Both ports are currently in VLAN 1. Configure SW1 to assign GigabitEthernet0/1 to VLAN 10 and GigabitEthernet0/2 to VLAN 20, and verify the configuration.

Accepted Answer

interface GigabitEthernet0/1
switchport mode access
switchport access vlan 10
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 20
end
show vlan brief. The correct configuration sets each access port to access mode and assigns the appropriate VLAN (10 for Gi0/1, 20 for Gi0/2), then verifies with 'show vlan brief'. Access mode is required because each port connects to a single end device (PC or server) in one VLAN. 'show vlan brief' displays VLAN-to-port assignments, confirming the change.

Answer

interface GigabitEthernet0/1
switchport mode trunk
switchport trunk allowed vlan 10
interface GigabitEthernet0/2
switchport mode trunk
switchport trunk allowed vlan 20
end
show interfaces trunk

Answer

vlan 10
name PC_VLAN
vlan 20
name Server_VLAN
interface GigabitEthernet0/1
switchport mode access
switchport access vlan 10
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 20
end
show vlan brief

Answer

interface GigabitEthernet0/1
switchport access vlan 10
interface GigabitEthernet0/2
switchport access vlan 20
end
show vlan brief

Question 13

You are connected to SW1 via the console. SW1 is a Layer 2 switch with two links to SW2: G0/1 and G0/2. The administrator wants to combine these two links into an EtherChannel using LACP. Configure an EtherChannel on SW1 for these ports and verify.

Accepted Answer

interface range g0/1-2
channel-group 1 mode active. LACP (IEEE 802.3ad) uses 'active' or 'passive' modes; at least one side must be active for the bundle to form. Configuring both G0/1 and G0/2 under an interface range with 'channel-group 1 mode active' correctly places both physical interfaces into EtherChannel 1 using LACP in active negotiation mode, which is the standard Cisco-recommended configuration for LACP on both ends.

Answer

interface range g0/1-2
channel-group 1 mode desirable

Answer

interface g0/1
channel-group 1 mode active
interface g0/2
channel-group 1 mode passive

Answer

interface port-channel 1
channel-group 1 mode active

Question 14

You are connected to SW1 via the console. SW1 is a Layer 2 switch connected to a PC on port G0/1. The network administrator wants to secure the port by allowing only two MAC addresses and enabling sticky MAC learning. Additionally, if a violation occurs, the port should be put into error-disabled state. Configure port security on G0/1 with maximum MAC addresses of 2, sticky learning, and shutdown violation mode.

Accepted Answer

SW1(config-if)# switchport port-security
SW1(config-if)# switchport port-security maximum 2
SW1(config-if)# switchport port-security mac-address sticky
SW1(config-if)# switchport port-security violation shutdown. The correct configuration enables port security, sets the maximum MAC addresses to 2, enables sticky learning, and sets the violation mode to shutdown. This meets all requirements: limiting MAC addresses, sticky learning, and error-disabling the port on violation.

Answer

SW1(config-if)# switchport port-security
SW1(config-if)# switchport port-security maximum 2
SW1(config-if)# switchport port-security mac-address sticky
SW1(config-if)# switchport port-security violation restrict

Answer

SW1(config-if)# switchport port-security
SW1(config-if)# switchport port-security maximum 2
SW1(config-if)# switchport port-security mac-address sticky
SW1(config-if)# switchport port-security violation protect

Answer

SW1(config-if)# switchport port-security
SW1(config-if)# switchport port-security maximum 2
SW1(config-if)# switchport port-security mac-address 0000.1111.2222
SW1(config-if)# switchport port-security violation shutdown

Question 15

You are connected to SW1 via the console. SW1 is a Layer 2 switch with two VLANs (10 - Sales, 20 - Engineering). Port G0/1 is connected to a PC in VLAN 10, and port G0/2 is connected to a PC in VLAN 20. The switch needs to be configured to allow inter-VLAN communication using an external router connected to port G0/3. Currently, the PCs cannot communicate across VLANs. Configure the switch to support Router-on-a-Stick with VLAN 10 as the native VLAN on the trunk.

Accepted Answer

Configure G0/1 as access VLAN 10, G0/2 as access VLAN 20, G0/3 as trunk with native VLAN 10, and allow VLANs 10 and 20 on the trunk.. Router-on-a-Stick requires the switch port facing the router (G0/3) to be a trunk carrying both VLANs, with the native VLAN matching the router's subinterface configuration. Setting native VLAN 10 and allowing VLANs 10 and 20 on the trunk ensures both VLANs can reach the router's subinterfaces for inter-VLAN routing. The access ports G0/1 and G0/2 must remain access ports in their respective VLANs.

Answer

Configure G0/1 as access VLAN 10, G0/2 as access VLAN 20, G0/3 as trunk with native VLAN 1, and allow VLANs 10 and 20 on the trunk.

Answer

Configure G0/1 as access VLAN 10, G0/2 as access VLAN 20, G0/3 as trunk with native VLAN 10, but do not allow VLAN 10 on the trunk.

Answer

Configure G0/1 as trunk with native VLAN 10, G0/2 as trunk with native VLAN 20, G0/3 as trunk with native VLAN 10, and allow VLANs 10 and 20 on all trunks.