CCNA Discovery 3 - Module 8 Exam Version 4.0 Introducing Routing and Switching in the Enterprise

1. ACLs are used primarily to filter traffic. What are two additional uses of ACLs? (Choose two.)
• specifying source addresses for authentication
• specifying internal hosts for NAT
• identifying traffic for QoS
• reorganizing traffic into VLANs
• filtering VTP packets

2. Which three statements are true concerning standard and extended ACLs? (Choose three.)
• Extended ACLs are usually placed so that all packets go through the network and are filtered at the destination.
• Standard ACLs are usually placed so that all packets go through the network and are filtered at the destination.
• Extended ACLs filter based on source address only, and must be placed near the destination if other traffic is to flow.
• Standard ACLs filter based on source address only, and must be placed near the destination if other traffic is to flow.
• Extended ACLs filter with many possible factors, and they allow only desired packets to pass through the network if placed near the source.
• Standard ACLs filter with many possible factors, and they allow only desired packets to pass through the network if placed near the source.

3. Which wildcard mask would match the host range for the subnet 192.16.5.32 /27?
• 0.0.0.32
• 0.0.0.63
• 0.0.63.255
• 0.0.0.31

4. A security administrator wants to secure password exchanges on the vty lines on all routers in the enterprise. What option should be implemented to ensure that passwords are not sent in clear text across the public network?
• Use Telnet with an authentication server to ensure effective authentication.
• Apply an access list on the router interfaces to allow only authorized computers.
• Apply an access list on the vty line to allow only authorized computers.
• Use only Secure Shell (SSH) on the vty lines.

5. Why are inbound ACLs more efficient for the router than outbound ACLs?
• Inbound ACLs deny packets before routing lookups are required.
• Inbound ACL operation requires less network bandwidth than outbound.
• Inbound ACLs permit or deny packets to LANs, which are typically more efficient than WANs.
• Inbound ACLs are applied to Ethernet interfaces, while outbound ACLs are applied to slower serial interfaces.

6. What can an administrator do to ensure that ICMP DoS attacks from the outside are mitigated as much as possible, without hampering connectivity tests initiated from the inside out?
• Create an access list permitting only echo reply and destination unreachable packets from the outside.
• Create an access list denying all ICMP traffic coming from the outside.
• Permit ICMP traffic from only known external sources.
• Create an access list with the established keyword at the end of the line.


7. Refer to the exhibit. The new security policy for the company allows all IP traffic from the Engineering LAN to the Internet while only web traffic from the Marketing LAN is allowed to the Internet. Which ACL can be applied in the outbound direction of Serial 0/1 on the Marketing router to implement the new security policy?
• access-list 197 permit ip 192.0.2.0 0.0.0.255 any
access-list 197 permit ip 198.18.112.0 0.0.0.255 any eq www
• access-list 165 permit ip 192.0.2.0 0.0.0.255 any
access-list 165 permit tcp 198.18.112.0 0.0.0.255 any eq www
access-list 165 permit ip any any
• access-list 137 permit ip 192.0.2.0 0.0.0.255 any
access-list 137 permit tcp 198.18.112.0 0.0.0.255 any eq www
• access-list 89 permit 192.0.2.0 0.0.0.255 any
access-list 89 permit tcp 198.18.112.0 0.0.0.255 any eq www


8. Refer to the exhibit. Company policy for the network that is shown indicates the following guidelines:
1) All hosts on the 192.168.3.0/24 network, except host 192.168.3.77, should be able to reach the 192.168.2.0/24 network.
2) All hosts on the 192.168.3.0/24 network should be able to reach the 192.168.1.0/24 network.
3) All other traffic originating from the 192.168.3.0 network should be denied.
Which set of ACL statements meets the stated requirements when they are applied to the Fa0/0 interface of router R2 in the inbound direction?
• access-list 101 deny ip any any
access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255
• access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255
• access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255
• access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255
access-list 101 permit ip any any
• access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.255.255


9. Refer to the exhibit. What happens if the network administrator issues the commands shown when an ACL called Managers already exists on the router?
• The new commands overwrite the current Managers ACL.
• The new commands are added to the end of the current Managers ACL.
• The new commands are added to the beginning of the current Managers ACL.
• An error appears stating that the ACL already exists.

10. What effect does the command reload in 30 have when entered into a router?
• If a router process freezes, the router reloads automatically.
• If a packet from a denied source attempts to enter an interface where an ACL is applied, the router reloads in 30 minutes.
• If a remote connection lasts for longer than 30 minutes, the router forces the remote user off.
• A router automatically reloads in 30 minutes.

11. Which two host addresses are included in the range specified by 172.16.31.64 0.0.0.31? (Choose two.)
• 172.16.31.64
• 172.16.31.77
• 172.16.31.78
• 172.16.31.95
• 172.16.31.96


12. Refer to the exhibit. The following commands were entered on RTB.
RTB(config)# access-list 4 deny 192.168.20.16 0.0.0.15
RTB(config)# access-list 4 permit any
RTB(config)# interface serial 0/0/0
RTB(config-if)# ip access-group 4 in
Which addresses do these commands block access to RTB?
• 192.168.20.17 to 192.168.20.31
• 192.168.20.16 to 192.168.20.31
• 192.168.20.16 to 192.168.20.32
• 192.168.20.16 to 192.168.20.33


13. Refer to the exhibit. A network administrator needs to configure an access list that will allow the management host with an IP address of 192.168.10.25/24 to be the only host to remotely access and configure router RTA. All vty and enable passwords are configured on the router. Which group of commands will accomplish this task?
• Router(config)# access-list 101 permit tcp any 192.168.10.25 0.0.0.0 eq telnet
Router(config)# access-list 101 deny ip any any
Router(config)# int s0/0
Router(config-if)# ip access-group 101 in
Router(config-if)# int fa0/0
Router(config-if)#ip access-group 101 in
• Router(config)# access-list 10 permit 192.168.10.25 eq telnet
Router(config)# access-list 10 deny any
Router(config)# line vty 0 4
Router(config-line)#access-group 10 in
• Router(config)# access-list 86 permit host 192.168.10.25
Router(config)# line vty 0 4
Router(config-line)# access-class 86 in
• Router(config)# access-list 125 permit tcp 192.168.10.25 any eq telnet
Router(config)# access-list 125 deny ip any any
Router(config)# int s0/0
Router(config-if)# ip access-group 125 i

14. ACL logging generates what type of syslog message?
• unstable network
• warning
• informational
• critical situation


15. Refer to the exhibit. An administrator notes a significant increase in the amount of traffic entering the network from the ISP. The administrator clears the access-list counters. After a few minutes, the administrator again checks the access-list table. What can be concluded from the most recent output shown?
• A small amount of HTTP trafic is an indication that the web server was not configured correctly.
• A larger amount of POP3 traffic (compared with SMTP traffic) indicates that there are more POP3 email clients than SMTP clients in the enterprise.
• A large amount of ICMP traffic is being denied at the interface, which can be an indication of a DoS attack.
• A larger amount of email traffic (compared with web traffic) is an indication that attackers mainly targeted the email server.


16. Hosts from the Limerick LAN are not allowed access to the Shannon LAN but should be able to access the Internet. Which set of commands will create a standard ACL that will apply to traffic on the Shannon router interface Fa0/0 implementing this security?
• access-list 42 deny 172.19.123.0 0.0.0.255 192.0.2.0 0.0.0.255
access-list 42 permit any
• access-list 56 deny 172.19.123.0 0.0.0.255
access-list 56 permit any
• access-list 61 deny 172.19.123.0 0.0.0.0
access-list 61 permit any
• access-list 87 deny ip any 192.0.2.0 0.0.0.255
access-list 87 permit ip any

17. Which ACL permits host 10.220.158.10 access to the web server 192.168.3.244?
• access-list 101 permit tcp host 10.220.158.10 eq 80 host 192.168.3.224
• access-list 101 permit tcp 10.220.158.10 0.0.0.0 host 192.168.3.224 0.0.0.0 eq 80
• access-list 101 permit host 10.220.158.10 0.0.0.0 host 192.168.3.224 0.0.0.0 eq 80
• access-list 101 permit tcp 10.220.158.10 0.0.0.0 host 192.168.3.224 eq 80


18. Refer to the exhibit. The network administrator of a company needs to configure the router RTA to allow its business partner (Partner A) to access the web server located in the internal network. The web server is assigned a private IP address, and a static NAT is configured on the router for its public IP address. Finally, the administrator adds the ACL. However, Partner A is denied access to the web server. What is the cause of the problem?
• Port 80 should be specified in the ACL.
• The public IP address of the server, 209.165.201.5, should be specified as the destination.
• The ACL should be applied on the s0/0 outbound interface.
• The source address should be specified as 198.133.219.0 255.255.255.0 in the ACL.

19. Traffic from the 64.104.48.0 to 64.104.63.255 range must be denied access to the network. What wildcard mask would the network administrator configure in the access list to cover this range?
• 0.0.15.255
• 0.0.47.255
• 0.0.63.255
• 255.255.240.0


20. Refer to the exhibit. A network administrator needs to add the command deny ip 10.0.0.0 0.255.255.255 any log to R3. After adding the command, the administrator verifies the change using the show access-list command. What sequence number does the new entry have?
• 10, and all other items are shifted down to the next sequence number
• 50
• 60

CCNA Discovery 2 - Module 2 Exam Version 4.0 Working at a Small-to-Medium Business or ISP

1. What is the first step that is used by a help desk technician in a systematic approach to helping a customer solve a problem?
• identify and prioritize alternative solutions
• isolate the cause of the problem
• define the problem
• select an evaluation process

2. Which two functions are provided by the upper layers of the OSI model? (Choose two.)
• placing electrical signals on the medium for transmission
• initiating the network communication process
• encrypting and compressing data for transmission
• segmenting and identifying data for reassembly at the destination
• choosing the appropriate path for the data to take through the network

3. What are two goals of the ISP help desk? (Choose two.)
• conserving support resources
• network optimization
• competitive scalability
• customer retention
• sales of network services

4. What is the correct encapsulation order when data is passed from Layer 1 up to Layer 4 of the OSI model?
• bits, frames, packets, segments
• frames, bits, packets, segments
• packets, frames, segments, bits
• segments, packets, frames, bits

5. Which is a function of the transport layer of the OSI model?
• routes data between networks
• converts data to bits for transmission
• delivers data reliably across the network using TCP
• formats and encodes data for transmission
• transmits data to the next directly connected device

6. A customer calls the ISP help desk after setting up a new PC with a cable modem but being unable to access the Internet. After the help desk technician has verified Layer 1 and Layer 2, what are three questions the help desk technician should ask the customer? (Choose three.)
• What is your subnet mask?
• What is your IP address?
• Is the NIC link light blinking?
• Can you ping the default gateway?
• Is the network cable properly attached to the cable modem?
• Is the network cable correctly connected to the network port on the PC?

7. What are two functions of the physical layer of the OSI model? (Choose two.)
• adding the hardware address
• converting data to bits
• encapsulating data into frames
• signal generation
• routing packets

8. An ISP help desk technician receives a call from a customer who reports that no one at their business can reach any websites, or get their e-mail. After testing the communication line and finding everything fine, the technician instructs the customer to run nslookup from the command prompt. What does the technician suspect is causing the customer's problem?
• improper IP address configuration on the host
• hardware failure of the ISR used to connect the customer to the ISP
• bad cables or connections at the customer site
• failure of DNS to resolve names to IP addresses

9. Which address is used by the router to direct a packet between networks?
• source MAC address
• destination MAC address
• source IP address
• destination IP address

10. Which statement describes the process of escalating a help desk trouble ticket?
• The help desk technican resolves the customer problem over the phone and closes the trouble ticket.
• Remote desktop utilities enable the help desk technician to fix a configuration error and close the trouble ticket.
• After trying unsuccessfully to fix a problem, the help desk technician sends the trouble ticket to the onsite support staff.
• When the problem is solved, all information is recorded on the trouble ticket for future reference.

11. Which level of support is supplied by an ISP when providing managed services?
• Level 1
• Level 2
• Level 3
• Level 4

12. Which layers of the OSI model are commonly referred to as the upper layers?
• application, presentation, session
• application, session, network
• presentation, transport, network
• presentation, network, data link
• session, transport, network

13. Which three command line utilities are most commonly used to troubleshoot issues at Layer 3? (Choose three.)
• ping
• a packet sniffer
• Telnet
• ipconfig
• Traceroute

14. Which common Layer 1 problem can cause a user to lose connectivity?
• incorrect subnet mask
• incorrect default gateway
• loose network cable
• NIC improperly installed

15. Which scenario represents a problem at Layer 4 of the OSI model?
• An incorrect IP address on the default gateway.
• A bad subnet mask in the host IP configuration.
• A firewall filtering traffic addressed to TCP port 25 on an email server.
• An incorrect DNS server address being given out by DHCP.

16. What are two basic procedures of incident management? (Choose two.)
• opening a trouble ticket
• using diagnostic tools to identify the problem
• surveying network conditions for further analysis
• configuring new equipment and software upgrades
• adhering to a problem-solving strategy
• e-mailing a problem resolution to the customer

17. A customer calls to report a problem accessing an e-commerce web site. The help desk technician begins troubleshooting using a top-down approach. Which question would the technician ask the customer first?
• Can you access other web sites?
• Is there a firewall installed on your computer?
• What is your IP address?
• Is the link light lit on your NIC card?

18. A network technician has isolated a problem at the transport layer of the OSI model. Which question would provide further information about the problem?
• Do you have a firewall that is configured on your PC?
• Do you have a link light on your network card?
• Is your PC configured to obtain addressing information using DHCP?
• What default gateway address is configured in your TCP/IP settings?
• Can you ping http://www.cisco.com?

19. In what two ways do Level 1 and Level 2 help desk technicians attempt to solve a customer's problems? (Choose three.)
• talking to the customer on the telephone
• upgrading hardware and software
• using various web tools
• making an onsite visit
• installing new equipment
• with remote desktop sharing applications

20. A customer calls the help desk about setting up a new PC and cable modem and being unable to access the Internet. What three questions would the technician ask if the bottom-up troubleshooting approach is used? (Choose three.)
• Is the NIC link light blinking?
• What is the IP address and subnet mask?
• Can the default gateway be successfully pinged?
• Is the network cable properly attached to the modem?
• Is the Category 5 cable properly connected to the network slot on the PC?
• Can you access your e-mail account?