Topic 9, Mix Questions Set

QUESTION NO: 361

Which three statements about IPv6 prefixes are true? (Choose three.)

A. FF00:/8 is used for IPv6 multicast.
B. FE80::/10 is used for link-local unicast.
C. FC00::/7 is used in private networks.
D. 2001::1/127 is used for loopback addresses.
E. FE80::/8 is used for link-local unicast.
F. FEC0::/10 is used for IPv6 broadcast.

 

 

Answer: A,B,C

---

QUESTION NO: 362

After you configure the Loopback0 interface, which command can you enter to verify the status of the interface and determine whether fast switching is enabled?

A. Router#show ip interface loopback 0
B. Router#show run
C. Router#show interface loopback 0
D. Router#show ip interface brief

 

 

Answer: A

 

---

QUESTION NO: 363

Which three statements about link-state routing are true? (Choose three.)

A. Routes are updated when a change in topology occurs.
B. Updates are sent to a multicast address by default.
C. OSPF is a link-state protocol.
D. Updates are sent to a broadcast address.
E. RIP is a link-state protocol.
F. It uses split horizon.

 

 

Answer: A,B,C

---

QUESTION NO 364:

Which NAT function can map multiple inside addresses to a single outside address?

A. PAT
B. SFTP
C. RARP
D. ARP
E. TFTP

 

Answer: A

---

QUESTION NO: 365

What is the first step in the NAT configuration process?

A. Define inside and outside interfaces.
B. Define public and private IP addresses.
C. Define IP address pools.
D. Define global and local interfaces.

 

 

Answer: A

 

---

QUESTION NO: 366

Which two commands can you enter to verify that a configured NetFlow data export is operational? (Choose two.)

 

A. show ip flow export
B. show ip cache flow
C. ip flow ingress
D. ip flow egress
E. interface ethernet 0/0
F. ip flow-export destination

Answer: A, B

 

---

QUESTION NO: 367

What are three characteristics of satellite Internet connections? (Choose three.)

A. Their upload speed is about 10 percent of their download speed.
B. They are frequently used by rural users without access to other high-speed connections.
C. They are usually at least 10 times faster than analog modem connections.
D. They are usually faster than cable and DSL connections.
E. They require a WiMax tower within 30 miles of the user location.
F. They use radio waves to communicate with cellular phone towers.

 

Answer: A,B,C

 

---

QUESTION NO: 368

A corporation wants to add security to its network. The requirements are:
* Host C should be able to use a web browser (HTTP) to access the Finance Web Server.
* Other types of access from host C to the Finance Web Server should be blocked.
* All access from hosts in the Core or local LAN to the Finance Web Server should be blocked.
* All hosts in the Core and on local LAN should be able to access the Public Web Server.

You have been tasked to create and apply a numbered access list to a single outbound interface. This access list can contain no more than three statements that meet these requirements.

 

Access to the router CLI can be gained by clicking on the appropriate host.

* All passwords have been temporarily set to “cisco”.

* The Core connection uses an IP address of 198.18.209.65.

* The computers in the Hosts LAN have been assigned addresses of 192.168.78.1 – 192.168.78.254.
* host A 192.168.78.1
* host B 192.168.78.2
* host C 192.168.78.3
* host D 192.168.78.4
* The Finance Web Server has been assigned an address of 172.22.146.17.
* The Public Web Server in the Server LAN has been assigned an address of 172.22.146.18.

 

Answer:

We should create an access-list andapply it to the interface thatis connected to the Server LAN because it canfilter out traffic from both S2 and Core networks.To see which interface this is, use the “show ip int brief” command:

From this, we know that the servers are located on the fa0/1 interface, so we will place our numbered access list here in the outbound direction.

Corp1#configure terminal
Our access-list needs to allow host C – 192.168125.3to theFinance Web Server 172.22.109.17 via HTTP(port 80), so our first line is this:

Corp1(config)#access-list 100 permit tcp host 192.168.125.3 host 172.22.109.17eq 80

Then, our next two instructions are these:
This can be accomplished with one command (which we need to do as our ACL needs to be no more than 3 lines long), blocking all other access to the finance web server:
Corp1(config)#access-list 100 deny ip any host 172.22.109.17

Our last instruction is to allow allhosts in the Core and onthe local LANaccesstothe PublicWeb Server (172.22.109.18)

Corp1(config)#access-list 100 permit ip host 172.22.109.18 any
Finally, apply this access-list to Fa0/1 interface (outbound direction)

 

Corp1(config)#interface fa0/1
Corp1(config-if)#ip access-group 100 out

 

Notice: We have to apply the access-list to Fa0/1 interface (not Fa0/0 interface) so that the access-list can filter traffic coming from both theLAN and the Core networks. To verify, just click on host Cto open its web browser. In the address box type http://172.22.109.17 to check if you are allowed to access Finance Web Server or not. If your configuration is correct then you can access it.

Click on other hosts (A, B and D) and check to make sure you can’t access Finance Web Server from these hosts. Then, repeat to make sure they can reach the public server at 172.22.109.18. Finally, save the configuration

Corp1(config-if)#end
Corp1#copy running-config startup-config