100-150 Practice Test 17 — 15 Questions

Question 1

Which protocol is recommended for secure remote management of Cisco network devices over insecure networks?

Accepted Answer

SSH. Secure Shell (SSH) provides a secure, encrypted tunnel for remote command-line access. Unlike Telnet, which transmits data in plaintext and exposes administrative credentials to sniffing attacks, SSH ensures that both the connection and the session data are encrypted. Using SSH is a mandatory security best practice for any modern network infrastructure to protect against unauthorized access and credential theft while managing network devices from remote locations.

Answer

Telnet

Answer

HTTP

Answer

SNMPv1

Question 2

A network technician is terminating a new Cat 6a cable run in an office. The cable will connect a workstation to a wall jack. Which connector type should the technician use to terminate the cable?

Accepted Answer

RJ-45. Twisted-pair copper Ethernet cabling, including Cat 6a, is terminated with RJ-45 connectors. These eight-pin connectors mate with standard Ethernet ports on workstations, switches, and patch panels, supporting the four-pair signaling needed for gigabit and multi-gigabit speeds. Fiber connectors and coaxial connectors serve entirely different media types.

Answer

BNC

Answer

RJ-11

Answer

LC

Question 3

A network administrator is planning to deploy IPv6 on a Cisco router. The administrator needs to assign a global unicast address to the GigabitEthernet0/0 interface. Which of the following addresses is a valid global unicast IPv6 address that can be manually configured on the interface?

Accepted Answer

2001:DB8:ACAD:1::1. Global unicast IPv6 addresses are in the range 2000::/3, which includes 2001:DB8::/32. The address 2001:DB8:ACAD:1::1 falls within this range and can be manually configured on an interface. Link-local addresses (FE80::/10), multicast addresses (FF00::/8), and the loopback address (::1) are not global unicast and serve different purposes. Therefore, the correct choice is the address in the 2001:DB8::/32 range.

Answer

FE80::1

Answer

FF02::1

Answer

::1

Question 4

A network administrator is configuring a router interface with the IP address 192.168.10.1 and subnet mask 255.255.255.224. The administrator needs to determine the number of usable host addresses available on this subnet. How many usable host addresses are provided by this subnet mask?

Accepted Answer

30. The subnet mask 255.255.255.224 corresponds to a /27 prefix length. This leaves 5 bits for host addresses, yielding 2^5 = 32 total addresses. After reserving one address for the network and one for the broadcast, 30 usable host addresses remain. This is the correct calculation for the given subnet mask.

Answer

62

Answer

14

Answer

32

Question 5

A company uses the 172.16.0.0/16 private address block. The network architect needs to create subnets that each support at least 500 hosts while maximizing the number of subnets available. Which subnet mask should be chosen?

Accepted Answer

255.255.254.0. The design requires at least 500 hosts per subnet while maximizing subnet count from 172.16.0.0/16. A /23 mask provides 510 usable hosts, just above the threshold, and yields 128 subnets. A /22 would provide more hosts but fewer subnets, while a /24 would not meet the host requirement. Therefore, 255.255.254.0 is the optimal balance between host capacity and subnet quantity.

Answer

255.255.252.0

Answer

255.255.248.0

Answer

255.255.255.0

Question 6

A network technician is investigating why a user cannot reach a public website by its hostname, even though the user can ping the website's IP address successfully. The workstation's default gateway and IP configuration are correct. Which command should the technician run to verify whether the workstation's configured DNS servers are responding?

Accepted Answer

nslookup www.example.com. The ability to ping the IP address while the hostname fails isolates the problem to name resolution. Running nslookup against the configured DNS server shows whether that server answers and what it returns, distinguishing a nonresponsive DNS server from a wrong record or a client-side DNS setting problem. This makes it the most direct diagnostic for the reported symptom.

Answer

ping www.example.com

Answer

arp -a

Answer

tracert 203.0.113.10

Question 7

A technician is configuring DHCP snooping on a Cisco switch to prevent rogue DHCP servers. On which type of port should the technician apply the 'ip dhcp snooping trust' command?

Accepted Answer

Ports connected to legitimate DHCP servers or uplinks. DHCP snooping is a security feature that acts like a firewall between untrusted hosts and trusted DHCP servers. It builds a binding database of leased IP addresses to prevent various attacks. Correctly identifying trusted versus untrusted ports is the most critical step in implementing this feature without disrupting legitimate network services.

Answer

All access ports

Answer

Only ports connected to printers

Answer

Ports connected to end-user workstations

Question 8

Which TWO of the following are primary benefits of implementing a hierarchical network design like the Cisco Three-Tier Model?

Accepted Answer

It provides improved scalability and modularity.. Hierarchical designs provide scalability, modularity, and simplified management by dividing the network into Core, Distribution, and Access layers. This structure limits the scope of failure domains and makes troubleshooting more predictable. Mastering these concepts is essential for building robust networks that can grow with organizational needs without requiring a complete redesign of the underlying topology or complex routing protocols.

Answer

It eliminates the need for routing protocols.

Answer

It completely prevents all Layer 2 loops.

Answer

It ensures that all devices use a flat addressing scheme.

Question 9

What is the function of the Default Gateway in an IP configuration?

Accepted Answer

To provide a path for traffic destined for remote networks. The default gateway is the IP address of the local router interface that provides the path to external networks. When a device attempts to send data to an IP address outside its own subnet, it encapsulates the frame for the gateway's MAC address. Without a correctly configured default gateway, endpoints remain isolated within their local segment and cannot reach the internet or other remote subnets.

Answer

To resolve domain names to IP addresses

Answer

To manage the local broadcast domain traffic

Answer

To perform dynamic IP address assignment

Question 10

Refer to the exhibit. Why is the router unable to reach the internet?

Accepted Answer

The default route is missing.. The routing table shows only local subnets and lacks a gateway of last resort, which is required for routing traffic to external networks like the internet. Without a default route (0.0.0.0/0), the router does not know where to send packets destined for non-local addresses. Configuring a static default route pointing to the ISP is the standard fix to enable internet access on this device.

Answer

The interface is shut down.

Answer

The subnet mask is incorrect.

Answer

The router has no IP address assigned.

Question 11

A network administrator is troubleshooting a workstation that cannot connect to the network. The workstation's NIC shows a link light, but the switch port is not forwarding traffic. The administrator suspects a duplex mismatch. Which symptom is most indicative of a duplex mismatch?

Accepted Answer

High number of late collisions and CRC errors. Late collisions and CRC errors are the hallmark of a duplex mismatch. When one side is full-duplex and the other half-duplex, the full-duplex side may transmit while the half-duplex side is sending, causing collisions that are detected late. This results in CRC errors and reduced throughput. The other symptoms are not typical of duplex mismatch.

Answer

Intermittent connectivity with no error counters increasing

Answer

No link light on the switch port

Answer

The switch port shows up/up but MAC address table is empty

Question 12

Refer to the exhibit. An administrator is configuring subnets on a Cisco router. Based on the output, what is the broadcast address for the subnet connected to Gig0/0?

Accepted Answer

172.16.5.15. The interface 172.16.5.1/28 belongs to the subnet starting at 172.16.5.0. Since the /28 mask provides 16 addresses (block size of 16), the range is 172.16.5.0 to 172.16.5.15. The broadcast address is the last address in the subnet, which is 172.16.5.15. Identifying broadcast addresses is essential for troubleshooting traffic propagation and verifying proper segmentation in multi-interface router environments.

Answer

172.16.5.16

Answer

172.16.5.31

Answer

172.16.5.255

Question 13

While troubleshooting a connectivity issue, a technician discovers a switch port is in the 'err-disabled' state. What is the standard first step to attempt to bring the port back online after identifying and fixing the root cause?

Accepted Answer

Issue the 'shutdown' followed by 'no shutdown' commands.. The 'err-disabled' state is a feature that automatically shuts down a port when certain error conditions are detected, such as port security violations or duplex mismatches. To recover the port manually, the interface must be reset. This process ensures that the administrator acknowledges the error and confirms that the underlying issue has been resolved.

Answer

Reload the entire switch to clear the buffer.

Answer

Change the VLAN assignment of the port.

Answer

Clear the MAC address table for that interface.

Question 14

Which transmission medium is best suited for long-distance data communication with high immunity to electromagnetic interference?

Accepted Answer

Fiber Optic Cable. Fiber optic cable is the best choice for long-distance data communication with high immunity to electromagnetic interference (EMI) because it transmits data as pulses of light through a glass or plastic core rather than electrical signals. Since light is unaffected by electromagnetic fields, fiber is completely immune to EMI and radio frequency interference (RFI). Additionally, fiber has much lower attenuation than copper, allowing signals to travel many kilometers without repeaters, making it ideal for long-haul networks.

Answer

Shielded Twisted Pair (STP)

Answer

Unshielded Twisted Pair (UTP)

Answer

Coaxial Cable

Question 15

A network administrator is configuring a point-to-point link between two routers and wants to use the most efficient subnet mask that allows for only two usable host addresses. However, the administrator is told to use a /28 mask instead for future expansion. How many usable host addresses are provided by a /28 mask?

Accepted Answer

14 usable host addresses. Determining the number of usable hosts requires identifying the total number of bits remaining for the host portion after the subnet mask is applied. For a /28 prefix, 4 bits are available for hosts, resulting in 16 total addresses. Subtracting the network ID and the broadcast address leaves 14 addresses that can be assigned to devices.

Answer

2 usable host addresses

Answer

6 usable host addresses

Answer

30 usable host addresses