icnd1 and icnd2 explained 9tut.doc

8/15/2019 ICND1 and ICND2 explained 9tut.doc

http://slidepdf.com/reader/full/icnd1-and-icnd2-explained-9tutdoc 1/75

WAN Q ue sti ons

Here you will find answers to WAN Questions

Question 1

As a network technician, you must know the various layers of the OSI model. At which layers of the OSI

odel do

Wide Area Networks o!erate in" #$hoose two%

A. &hysical 'ayer

(. )atalink 'ayer

$. Network

'ayer ). Session

'ayer

*. +rans!ort 'ayer

. &resentation 'ayer

-. A!!lication 'ayer

Answer A

(

*/!lanation

rame 0elay is a hih2!erformance WAN !rotocol that o!erates at the !hysical and data link layers of the

OSI

reference

model.

Question 3

Network e4ui!ment su!!ortin the use of flow control mechanisms has 5een recently install ed in the

network. What is the !ur!ose of flow control in a data network"

A. It ensures that data is retransmitted if an acknowledment is not

received. (. It reassem5les sements in the correct order on the

destination device.

$. It !rovides a mechanism for the receiver to control the transmission

s!eed. ). It reulates the si6e of each dataram sement.

*. All of the a5ove are functions of flow control

Answer $



*/!lanatio

n

low control is the !rocess that control the rates at which data is transferred 5etween two end!oints, ena5lin

a



receivin device to sinal conestion to a sendin device, which allows for the sendin device to

tem!orarily halt transmission, alleviatin conestion at the receivin device.

Question

7

8ou are a network administrator workin in the communication com!any. One day, you find that the

enca!sulation has 5een altered 5y someone on a synchronous serial line and this new confiuration is not

the o!timal one. So you attem!t to return the enca!sulation to the default. Which measure will you take toreach this oal"

A. Issue the shutdown then no shutdown commands to reset the enca!sulation on the

interface. (. 0e5oot the router and allow it to reload the confiuration.

$. $onfiure the interface for H)'$

enca!sulation. ). $hane the enca!sulation to

A0&A.

Answer $

*/!lanatio

n

We can9t use the :shutdown; < :no shutdown; commands to reset the enca!sulation 5ecause it doesn9t

affect the enca!sulation ty!e 2= A is not correct.

0e5oot the router and reload the confiuration can solve this !ro5lem 5ut other confiuration will 5e erased

too 2=not a ood

choice.

+he 4uestion asks :attem!t to return the enca!sulation to the default; and the default enca!sulation on a

$isco router is H)'$ so we can confiure the interface for H)'$ enca!sulation 2= $ is the correct.

) is not correct as A0&A is not the default WAN enca!sulation of a $isco router. A0&A is the standard

*thernet version 3.> enca!sulation.

Question

?

)urin your interview for a network administrator @o5, your interviewer ives you some statements to

@ude. +he followin o!tions are all related to the confiuration of a serial link on a $isco router. 8ou

should !oint out which one is the correct. What is your answer"

A. +he clock rate command is a re4uirement for )$*

interfaces.

(. If the clock rate command is confiured, then the 5andwidth command is

re4uired. $. If the 5andwidth command is confiured, then the clock rate

command is re4uired. ). $isco routers are )$* devices.



Answer A

*/!lanatio

n

+he !ur!ose of )$* e4ui!ment is to !rovide clockin and switchin services in a network. $lock rate

doesn9t have



a default value so we have to confiure it manually #while 5andwidth does have a default value%. $isco

routers can 5e confiured as )+* or )$* devices.

Question

As a network technician, you should know how to ain information from the e/hi5it. Accordin to the

command out!ut dis!layed in the followin e/hi5it, !lease !oint out the correct descri!tion a5out

interface Serial >B>B>.

*/hi5it

0outerCshow runnin2confi

(uildin confiuration

$urrent confiuration D 5ytes

Eout!ut omitted=

interface Serial>B>B>

i! address 3>D.1F.3>>.33 3.3.3.33?

G

A. +he confiuration is incom!lete, which will cause the interface status to 5e :Serial>B>B> is down, line

!rotocol is down;

(. +he interface is usin $isco H)'$ for layer 3 enca!sulation.

$. +he confiuration is incom!lete, which will cause the interface status to 5e :Serial>B>B> is u!, line

!rotocol is down;.). A !in to the remote address 3>D.1F.3>>.33F will 5e successful.

Answer (

*/!lanatio

n

+he confiuration is correct and the :no shutdown; command was used #5ecause we don9t see a :shutdown;

line in the out!ut% so we can see at least :Serial>B>B> is u!; 2= A is not correct.

Althouh the confiuration is correct 5ut we don9t know if this interface is connected with another router or

not. If it is connected with another interface #on another router% and that interface is u!, we will see the

:Serial>B>B> is u!, line !rotocol is u!;. Otherwise we will see :Serial>B>B> is u!, line !rotocol is down; 2=

we can9t uarantee answer $ is correct.

Answer ) is the same with $ 5ecause we don9t know if the remote interface 3>D.1F.3>>.33F e/ists #and

turned u!% or not.



or WAN interface #serial interface%, the default layer 3 enca!sulation is H)'$ 2= ( is correct.



Question F

Router2#show interface serial 0/0

Serial>B> is u!, line !rotocol is

down Hardware is &owerQI$$Serial Internet address is

13.1F.1>.1B7>

+ 1>> 5ytes, (W F? J5it, )'8 3>>>> usec, rely 3B3 load 1B3

*nca!sulation H)'$, loo!5ack not set, kee!alive set #1> sec%

Eout!ut omitted=

8ou work as a network administrator. 8ou study the e/hi5its carefully. +he cor!orate office and 5ranch

office have 5een attached throuh two non2$isco routers over a hihly relia5le WAN connection over a

year. A new $isco router has 5een installed to re!lace the hardware at the 5ranch location. Since the

installation, I& communication cannot 5e verified across the link.

-iven the out!ut on router 01, what could 5e a loical first ste! to take to resolve this

!ro5lem" A. *nsure an e/act match 5etween the 5andwidth settin on 0outer1 and

0outer3

(. $hane the enca!sulation on 0outer1 to &&&.

$. $hane the 5andwidth settin on 0outer1 to match the actual line s!eed

). Kerify successful )$* communication 5etween the two sites.

*. Kerify 'ayer1 communication on the 0outer1 Serial>B> interface

Answer (

*/!lanatio

n

H)'$ is a $isco !ro!rietary !rotocol so we can9t use it when connectin to a non2$isco router. &&&

is the standard !rotocol that is widely su!!orted and used 5y many IS&s.



Question

rom the choices shown a5ove, which !ort can 5e used for a WAN +1 connection"



A. $onsole

(. Serial >

$. AI

). (0I

*. None of the other alternatives a!!ly

Answer (

*/!lanatio

n

+he console !ort is intended for local administrative access from an AS$II terminal or a com!uter usin a

terminal emulator.

Serial !orts su!!ort WAN +1 connection.

Attachment nit Interface #AI% !orts are desined to connect to an e/ternal transceiver for conversion to a

s!ecific media ty!e #such as twisted !air, coa/, or fi5er%. AI can transfer only 1 5it at a time.

(0I !orts are used for IS)N services #mostly

voice%. Question L

A WAN connection is shown 5elow

(ased on this diaram, which two devices can 5e used to com!lete the connection 5etween the WAN router

at the customer site and the service !rovider" #$hoose two%

A. $SB)S

(. modem$. WAN switch

). A+ switch

*. rame 0elay switch

. IS)N +A

Answer A

(



*/!lanation



A modem or $SB)S can !rovide clock rate so it can 5e used for the to!oloy a5ove.

+he $hannel Service nit #$S% can echo loo!5ack sinals from the !hone com!any for testin !ur!oses.

+he )ata Service nit #)S% manaes line control, and converts in!ut and out!ut 5etween 0S2373$, 0S2

??D, or K.7 frames from the 'AN and the time2division multi!le/ed #+)% )SM frames on the +21 line.

+he )S !rovides a modem2like interface 5etween the com!uter as )ata +erminal *4ui!ment #)+*% and

the $S.

Sec uri ty Te stle t

Question

Not sure a5out the re4uirement of this 4uestion 5ut it is somethin like this

(efore this switch and router can 5e !ut to use in the network, what security risks can 5e found

We are still not sure a5out the confiurations in this sim 5ut we ot some information to share with you #u!dated

on )ecem5er2>23>11. +hanks oe endola, /alla/ and many candidates who share the informationG%

ay5e this is the confiurations on 0outer and Switch #5ut notice that they are surely missin somethin%

ROUTER A CON!"URAT!ON

Gno service !assword2encry!tion

G

ena5le !assword ciscoG

username ciscouser !rivilee 1 !assword > cisco

G 5anner motd P$WelcomeG If you encountered any !ro5lem, !lease consult the administratorP$

G



line vty > ?

!assword ?t<7?rkf

loin localtrans!ort in!ut telnet ssh

G

SW!TC A CON!"URAT!ON

G

no service !assword2encry!tion

G

line console >line vty o ?

no loin

trans!ort in!ut telnet ssh #""""%line vty 1 #""""%

loin #""""%

trans!ort in!ut telnet ssh #""""%

5anner motd P$WelcomeG If you encountered any !ro5lem, !lease consult the administratorP$

Note$ This is %ust what we &ather an' &uess( !n the e)a* the confi&urations *ay +e 'ifferent so *a,e sure

you un'erstan' a+out -ena+le secret. -ena+le asswor'. -lo&in. -lo&in local. -transort inut. -line

1ty. -ser1ice asswor'encrytion. -+ann'er *ot'. -ri1ile&e. +efore ta,in& this e)a*3

+his sim has ? 4uestions

Question 1

Identify security threats on 0outerA #select 7%

A. unencry!ted !assword set(. unsecured messae on 5anner $. remote access can only 5e made throuh telnet or SSH

). user ets level 1 automatically 5y default

Answer A $ )

-uideline to answer this 4uestion

(ecause the :service !assword2encry!tion; is not set on 0outerA so the !assword to access !rivileed mode #via

the command :ena5le !assword cisco;% is unencry!ted. Also, the !assword for K+8 is unencry!ted #notice thatthe !assword :?t<7?rkf; is in fact unencry!ted% 2= A is correct.

Althouh the 5anner says :Welcome ; 5ut it does not leak any security information so it is still safe 2= ( is not

correct.

rom the command :trans!ort in!ut telnet ssh; we learn that remote access can 5e mad throuh telnet or SSH.

+his is also the default settin of $isco router 2= $ is correct.

In the :line vty > ? confiuration, the ty!e of loin is s!ecified as :loin local;. It means that the router will notuse the !assword confiured under :line vty > ? #in this case :?t<7?rkf;% 5ut it will use the user < !assword

confiured in :username ciscouser !rivilee 1 !assword cisco; command. +he command :username ciscouser

!rivilee 1 !assword cisco; will rant the !rivilee of 1 for :ciscouser; user 2= ) is correct.



Question 3

Which two of the followin are true reardin the confiuration of 0outerA #choose two%

A. at least simultaneous remote connect are !ossi5le

(. only telnet !rotocol connections to 0outer A are su!!orted

$. remotely connection to 0outerA usin telnet will succeed). console line connection will never time out due to inactivity

*. since )H$& is not used on a>B1 there is not a need to use the NA+ !rotocol

Answer A $


A is correct as we can telnet from line > to line ? #line vty o ?%.

We can use 5oth telnet and SSH to connect to this router #trans!ort in!ut telnet ssh% 2= ( is not correct.

$ is correct as we can telnet to it.

) is not correct 5ecause 5y default, the timeout is set to 1> minutes on 5oth the console and the vty !orts.

* is not correct as NA+ can 5e used even )H$& is not used.

Question 7

Select the o!tions which are security issues which need to 5e modified 5efore 0outerA is used #not sure howmany answers we can choose%

A. unencry!ted weak !assword is confiured to !rotect !rivilee mode

(. ina!!ro!riate wordin in 5anner messae$. the virtual terminal lines have weak !assword confiured

). virtual terminal lines have a !assword, 5ut it will not 5e used

*. confiuration su!!orts in2secure we5 server access

Answer A )


&rivilee mode on 0outerA is !rotected with unencry!ted !assword #via :ena5le !assword; command% 2= A is

correct.

( is not correct as mentioned a5ove.

+he !assword of K+8 lines is :?t<7?rkf;. Althouh it is unencry!ted 5ut it is not a weak !assword 5ecause ithas num5er < s!ecial characters inside 2= $ is not correct.

Althouh a !assword of :?t<7?rkf; is confiured 5ut with the command :loin local;, router will use theusername of :ciscouser; < !assword of :cisco; #confiured in :username ciscouser !rivilee 1 !assword >

cisco; command% 2= ) is correct.

(y checkin the confiuration of routerA with the :show run; command. +o su!!ort we5 server access it musthave the command :i! htt! server; 5ut it does not 2= * is not correct.

Question ?

Select three o!tions which are security issues with the current confiuration of Switch A. #$hoose three%



A. !rivilee mode is !rotected with an unencry!ted !assword

(. ina!!ro!riate wordin in 5anner messae

$. virtual terminal lines are !rotected only 5y a !assword re4uirement). 5oth the username and !assword are weak

*. telnet connections can 5e used to remotely manae the switch

. $isco user will 5e ranted !rivilee level 1 5y default

Answer not sure


We haven9t had enouh information a5out switch confiuration so we can9t 5e sure a5out the correct answers 5ut

the 5elow is a uideline

Answer ( is surely not correct as the wordin in 5anner does not leak any security information.

If under :line vty > ? you see the :loin; command 5ut it does not have a !assword then may5e answer $ is

correct. In this case if we try to telnetBssh to the switch then we will receive a messae :&assword re4uired, 5utnone set; then we are kicked out PP.

If you see !o!ular username and !assword then may5e answer ) is correct.

If the command :trans!ort in!ut ; s!ecifies :telnet; as a method then answer * is correct.

or answer , if you see somethin like this

line vty > ?

!rivilee level 1

or these lines

username ciscouser !rivilee 1 !assword cisco

and

loin local #in :line vty > ?%

then answer is correct.

AR4 Te stle t

+his is a testlet. +he testlet consists of ? 4uestions that relate to the scenario 5elow



)irections 0efer to the e/hi5it. +his testlet consists of four 4uestions that address ste!s in the !rocess of datacommunication 5etween host and the server named WWW; on another 'AN. 8ou are free to move 5ack and

forth 5etween the 4uestions to review your answers.

Question 1

In order to 5ein communicatin with the server, host sends out an A0& re4uest. How will the devices

e/hi5ited in the to!oloy res!ond to this re4uest"

A R Switch West 1 will re!ly with the A$ address of the server.

( R Hosts ) and * will res!ond that the destination is not on the local 'AN.$ R 0outer SM will forward the A0& re4uest to the I' router .

) R Switch West 1 will 5lock the re4uest since the server is not on the 'AN.

* R +he I' router will res!ond with the I& address of the WWW server. R 0outer SM will res!ond with the A$ address of its a>B> interface.

Answer

*/!lanation

(ecause the server WWW is on another 'AN of host , host knows that it has to send its !ackets to the

default ateway. +herefore, for the first time, it will send out an A0& 5roadcast messae askin for the A$address of router SM. 0outer SM receives this messae and re!lies with the A$ address of a>B> interface.

'ater, when host wants to send !ackets to WWW server, it will include the I& address of WWW server and

the A$ address of a>B> interface of SM router in the :destination I& address; and :destination A$address; fields, res!ectively.

Question 3

+he A0& re!ly has 5een received 5y host , which needs to 5uild the !acket. What information will 5e !laced

in the header of the !acket that leaves host if host is to communicate with the WWW server" #$hoose two%

A R +he destination address will 5e the I& address of interface a>B> of the I' router .

( R +he destination address will 5e the I& address of the WWW server.

$ R +he destination address will 5e the I& address of interface a>B> of router SM.) R +he source address will 5e the I& address of host .

* R +he source address will 5e the I& address of interface a>B> of router SM.

R +he destination address will 5e the I& address of interface a>B> of router SM.



Answer ( )

*/!lanation

After receivin A0& re!ly from SM router, host will !lace these fields in the header of the !ackets

Source a''resses$ the I& address of host and the A$ address of host

5estination a''resses$ the I& address of WWW server and the A$ address of SM router

Question 7

+he frame has 5een received 5y the I' router and is to 5e delivered on the local 'AN. Which two statements

descri5e the addressin of the *thernet frame that has 5een created 5y the I' router " #$hoose two%

A R +he destination address will the 5e the A$ address of the switch A !ort attached to the a>B> interface of

the I' router .

( R +he destination address will 5e the A$ address of the WWW server.$ R +he destination address will 5e the A$ address of the A switch !ort attached to the WWW server.

) R +he source address will 5e the A$ address of host .

* R +he source address will 5e the A$ address of interface a>B> of the I' router.

Answer ( *

Question ?

Host is dis!layin two World Wide We5 documents from the WWW server in two 5rowser windows at the

same time. How did the data find its way to the correct 5rowser windows"

A R +he I& source addresses of the !ackets will 5e used to direct the data to the correct 5rowser window.

( R +he 5rowsers track the data 5y the 0'.

$ R +$& !ort num5ers are used to direct the data to the correct a!!lication window.

) R +he OSI a!!lication layer tracks the conversations and directs them to the correct 5rowser.

Answer $

*/!lanation

+$& and )& !rotocol !ort num5ers are desined to distinuish multi!le a!!lications runnin on a sinle

device from one another. In the +$& and )& header, there are :Source &ort; and :)estination &ort; fieldswhich are used to indicate the messae sendin !rocess and receivin !rocess identities defined. +he

com5ination of the I& address and the !ort num5er is called :socket;.

!*le *e ntati on S!6 2

+his to!oloy contains 7 routers and 1 switch. $om!lete the to!oloy.

5ra& the aroriate 'e1ice icons to the la+ele' 5e1ice

5ra& the aroriate connections to the locations la+ele' Connections(

5ra& the aroriate !4 a''resses to the locations la+ele' !4 a''ress



#Hint use the iven host addresses and ain router information%

+o remove a device or connection, dra it away from the to!oloy.

Use infor*ation &athere' fro* the 6ain router to co*lete the confi&uration of any a''itional routers.

No !asswords are re4uired to access the ain router. +he confi terminal command has 5een disa5led for the

HQ router. +he router does not re4uire any confiuration.

$onfiure each additional router with the followin

$onfiure the interfaces with the correct I& address and ena5le the interfaces.Set the !assword to allow console access to consolew

Set the !assword to allow telnet access to telnetw

Set the !assword to allow !rivilee mode access to ri1w

Note$ 7ecause routes are not +ein& a''e' to the confi&urations you will not +e a+le to in& throu&h the

internetwor,(

All devices have ca5le autosensin ca!a5ilities disa5led.All hosts are &$9s

Answer and e/!lanation

S!ecify a!!ro!riate devices and dra them on the :)evice; 5o/es

or the device at the 5ottom2riht 5o/, we notice that it has 3 interfaces a>B3 and a>B?T moreover the linkconnects the &$ on the riht with the device on the 5ottom2riht is a straiht2throuh link 2= it is a switch

+he 4uestion stated that this to!oloy contains 7 routers and 1 switch 2= two other devices are routers

&lace them on a!!ro!riate locations as followin



#Host ) and host * will 5e automatically added after !lacin two routers. $lick on them to access neih5orin

routers%

S!ecify a!!ro!riate connections 5etween these devices

U +he router on the left is connected with the ain router throuh ast*thernet interfaces use a crosso1er

ca+le

U +he router on the riht is connected with the ain router throuh Serial interfaces use a serial ca+le

U +he router on the riht and the Switch use a strai&htthrou&h ca+le

U +he router on the left and the com!uter use a crosso1er ca+le

#+o remem5er which ty!e of ca5le you should use, follow these ti!s

2 +o connect two serial interfaces of 3 routers we use serial ca+le

R +o s!ecify when we use crossover ca5le or straiht2throuh ca5le, we should remem5er

"rou 8$ 0outer, Host, Server

"rou 2$ Hu5, SwitchOne device in rou! 1 U One device in rou! 3 use strai&htthrou&h ca+le

+wo devices in the same rou! use crosso1er ca+le

or e/am!le we use straiht2throuh ca5le to connect switch to router, switch to host, hu5 to host, hu5 to

server and we use crossover ca5le to connect switch to switch, switch to hu5, router to router, host to host %

Assin a!!ro!riate I& addresses for interfaces



rom ain router, use show runnin2confi command

(Notice that you may see different IP addresses in the real CCNA exam, the ones shown above are just used for

demonstration)

rom the out!ut we learned that the i! address of a>B> interface of the ain router is 1D3.1FL.13.1B3L.

+his address 5elons to a su5network which has

Increment 1F #B3L V 3.3.3.3?> or 1111 1111.1111 1111.1111 1111.1118 >>>>%

Network address 1D3.1FL.13.1F #5ecause 1F V 1F 11 and 1F E 1%

(roadcast address 1D3.1FL.13.1D1 #5ecause 1D1 V 1F U 1F R 1%

And we can !ick u! an i! address from the list that 5elons to this su5network 892(8:;(8<2(890 and assin it

to the a>B> interface the router on the left

se the same method for interface Serial>B> with an i! address of 1D3.1FL.13.1F1

Increment 1F

Network address 1D3.1FL.13.1F> #5ecause 1F> V 1F 1> and 1F> E 1F1%

(roadcast address 1D3.1FL.13.1 #5ecause 1F V 1F> U 1F R 1%

2= and we choose 892(8:;(8<2(8=> for Serial>B> interface of the router on the riht

Interface a>B1 of the router on the left

I& #of the com!uter on the left% 1D3.1FL.13.13DB3L

Increment 1F

Network address 1D3.1FL.13.13L #5ecause 13L V 1F L and 13L E 13D%

(roadcast address 1D3.1FL.13.1?7 #5ecause 1?7 V 13L U 1F R 1%

2= we choose 892(8:;(8<2(8>2 from the list

Interface a>B> of the router on the riht

I& #of the com!uter on the left% 1D3.1FL.13.33B3L

Increment 1F

Network address 1D3.1FL.13.33? #5ecause 33? V 1F 1? and 33? E 33%

(roadcast address 1D3.1FL.13.37D #5ecause 37D V 33? U 1F R 1%

2= we choose 892(8:;(8<2(2?; from the list

'et9s have a look at the !icture 5elow to summari6e



$onfiure two routers on the left and riht with these commands

0outer1 V router on the left

Assin a!!ro!riate I& addresses to a>B> < a>B1 interfaces

0outer1=ena5le0outer1Cconfiure terminal

0outer1#confi%Cinterface fa>B>

0outer1#confi2if%Ci! address 1D3.1FL.13.1D> 3.3.3.3?>

0outer1#confi2if%Cno shutdown

0outer1#confi2if%Cinterface fa>B1

0outer1#confi2if%Ci! address 1D3.1FL.13.1?3 3.3.3.3?>0outer1#confi2if%Cno shutdown

Set !asswords #confiure on two routers%

U $onsole !assword

0outer1#confi2if%Ce/it0outer1#confi%Cline console >

0outer1#confi2line%C!assword console!w

0outer1#confi2line%Cloin0outer1#confi2line%Ce/it

U +elnet !assword

0outer1#confi%Cline vty > ?

0outer1#confi2line%C!assword telnet!w



Answer and */!lanation

irst we have to find out the ty!es of these routers to !lace them in correct !ositions 5y usin show cd!

neih5ors command on HO* router

+here are 7 columns we should !ay more attention to

U @ocal !ntrfce @ocal !nterfaceB$ the interface on the device you are usin :show cd! neih5ors; command.In this case it is the interface of HO* router

U 4latfor*$ the !latform of neih5or device

U 4ort !5$ the neih5or device9s !ort or interface which links to the HO* router

rom the e/hi5it, the :'ocal Interface;, :&latform; and :&ort I); columns, we can identify where these four

routers should 5e !laced and their corres!ondin associated !orts



inally, we need to identify the I& addresses of four interfaces on neih5orin routers usin show runnin2

confi command

And we can easily assin corres!ondin i! addresses to four neih5or routers, which are on the same network

with HO* router9s interfaces



&lease remem5er in the real $$NA */am the routers9 ty!es, i! addresses and interfaces may 5e differentG So

make sure you understand how it worksG

Other la52sims in the I$N) 1 */am

I$N) 1 R Show $onfiuration Sim

I$N) 1 R Im!lementation SI

I$N) 1 R 0I&v3 SI

I$N) 1 R A0& +estlet

I$N) 1 R Im!lementation Sim 3

rame 0elay Sim R Hots!ot #on Dtut.com%

Other la52sims miht a!!ear in the real I$N) 1 e/am, read and understand them if you have enouh timeG

R!4 12 S!6

Question

$entral lorida Widets recently installed a new router in their A!o!ka office. $om!lete the network

installation 5y !erformin the initial router confiurations and confiurin 0I&v3 routin usin the routercommand line interface #$'I% on the A!o!ka router.

$onfiure the router !er the followin re4uirements

http://www.9tut.net/icnd1/labsim/show-configuration-sim

http://www.9tut.net/icnd1/labsim/implementation-sim

http://www.9tut.net/icnd1/labsim/ripv2-sim

http://www.9tut.net/icnd1/arp-testlet

http://www.9tut.net/icnd1/labsim/implementation-sim-2

http://www.9tut.com/ccna-hotspot-questions

http://www.9tut.net/icnd1/labsim/show-configuration-sim

http://www.9tut.net/icnd1/labsim/implementation-sim

http://www.9tut.net/icnd1/labsim/ripv2-sim

http://www.9tut.net/icnd1/arp-testlet

http://www.9tut.net/icnd1/labsim/implementation-sim-2

http://www.9tut.com/ccna-hotspot-questions



Name of the router is Ao,a

*na5le2secret !assword is cisco80

+he !assword to access user *M*$ mode usin the console is Router4ass

+he !assword to allow telnet access to the router is scan90

I&v? addresses must 5e confiured as follows

Ethernet networ, 209(8:<(208(0/2= R router has secon' assina5le host address in su5net.

Serial networ, is 892(0(2(82;/2; R router has last assina5le host address in the su5net. Interfaces should 5e

ena5led.

0outin !rotocol is 0I&v3.

(Notice: In the real exam the name, asswords, IP addresses and the ositions of the assi!nable host addresses

mi!ht be different)

!nstruction$

+o confiure the router #A!o!ka% click on the console host icon that is connected to a router 5y a serial consoleca5le #shown in the diaram as a dashed 5lack line%.

*ach of the windows can 5e minimi6ed 5y clickin on the X2Y. 8ou can also re!osition a window 5y drain it 5y the title 5ar.

+he :+a5; key and most commands that use the :$ontrol; or :*sca!e; keys are not su!!orted and are not

necessary to com!lete this simulation. +he hel! command does not dis!lay all commands of the hel! system.

Answer and */!lanation

8B Na*e the router$

0outer=ena5le

0outerCconfi terminal0outer#confi%Chostname A!o!ka

2B Ena+lesecret asswor' cisco80B$

A!o!ka#confi%Cena5le secret cisco1>

?B Set the console asswor' to Router4ass$

A!o!ka#confi%Cline console >

A!o!ka#confi2line%C!assword 0outer&assA!o!ka#confi2line%Cloin

A!o!ka#confi2line%Ce/it

>B Set the Telnet asswor' to scan90$

A!o!ka#confi%Cline vty > ?A!o!ka#confi2line%C!assword scanD>

A!o!ka#confi2line%Cloin

A!o!ka#confi2line%Ce/it

<B Confi&ure Ethernet interface on the ri&htB of router Ao,a$

+he su5net mask of the *thernet network 3>D.1F.3>1.> is 3. rom this su5net mask, we can find out theincrement 5y convertin it into 5inary form, that is B3 V 1111 1111.1111 1111.1111 1111.118> >>>>. &ay more

attention to the last 5it 1 5ecause it tells us the increment, usin the formula

Increment V 3 !lace of the last 5it 1 #starts countin from >,from riht to left%, in this case increment V 3 V 73. +herefore



Increment 73

Network address 3>D.1F.3>1.>

(roadcast address 3>D.1F.3>1.71 #5ecause 3>D.1F.3>1.73 is the second su5network, so the !revious I& R3>D.1F.3>1.71 R is the 5roadcast address of the first su5net%.

2= +he second assina5le host address of this su5network is 3>D.1F.3>1.3B3

Assin the second assina5le host address to a>B> interface of A!o!ka router

A!o!ka#confi%Cinterface a>B>A!o!ka#confi2if%Ci! address 3>D.1F.3>1.3 3.3.3.33?

A!o!ka#confi2if%Cno shutdown

A!o!ka#confi2if%Ce/it

:B Confi&ure Serial interface on the leftB of router Ao,a$

sin the same method to find out the increment of the Serial network

Serial networ, 892(0(2(82;/2;$

Increment 1F #B3L V 1111 1111.1111 1111.1111 1111.1118 >>>>%

Network address 1D3.>.3.13L #5ecause L 1F V 13L so 1D3.>.3.13L is also the network address of this su5net%(roadcast address 1D3.>.3.1?7

2= +he last assina5le host address in this su5net is 1D3.>.3.1?3B3L.

Assin the last assina5le host address to S>B>B> interface of A!o!ka router

A!o!ka#confi%Cinterface S>B>B> #or use interface S>B> if not successful%

A!o!ka#confi2if%Ci! address 1D3.>.3.1?3 3.3.3.3?>A!o!ka#confi2if%Cno shutdown

A!o!ka#confi2if%Ce/it

=B Confi&ure R!4 12 routin& rotocol$

A!o!ka#confi%Crouter ri!A!o!ka#confi2router%Cversion 3

A!o!ka#confi2router%Cnetwork 3>D.1F.3>1.>

A!o!ka#confi2router%Cnetwork 1D3.>.3.13L

A!o!ka#confi2router%Cend

Sa1e the confi&uration$

A!o!kaCco!y runnin2confi startu!2confi

inally, you should use the !in command to verify all are workin !ro!erlyG

otsot

Here you willll find answers to hots!ot 4uestions in I$N) 1 e/am

0efer to the to!oloy. sin the information shown, answer the five 4uestions shown on the Questions

ta5.



Question 1

On which router should a default route 5e

confiured" A R on the IS& router

( R on 01

$ R on 03

) R on 07

* R on 0?

Answer (

Question

3

With all links o!erational and all routers convered, which of the foll owin descri5es the messain 5etween

routers"

A R Hell os are sent every five seconds.

( R ulticasts are sent every F> seconds.$ R (roadcasts are sent every 7> seconds.

) R No messain unless the to!oloy

chanes. Answer $

Question 7

Which of the foll owin descri5es the route u!date !rocess if the interface from 0? connected to 'AN ? oes

down" A R No u!dates occur



( R 0? tell s 5oth 01 and 07 the network not accessi5le. (oth 07 and 01 u!date 03.

$ R 0? tell s only 01 the network is not accessi5le. 01 u!dates 03 and 03

u!dates 07. ) R 0? tell s only 07 the network is not accessi5le. 07 u!dates 03

and 03 u!dates 01.

Answer (

Question

?

Why would 0I& 5e used rather than static routes on 01, 03, 07, and 0?"

A R 0I& creates more accurate than static routes.

( R 0I& uses less network resources than do static routes.

$ R 0I& is su!!orted 5y more dif f erent vendors e4ui!ment than static routes.

) R 0I& re4uires less confiuration to automaticall y ad@ust when links o down than static routes.

Answer )

Question

On which router should a static route 5e confiured"

A R on the IS& router

( R on 01

$ R on 03

) R on 07

* R on 0?

Answer A

O er ati ons

Here you will find answers to o!eration 4uestions in I$N) 1 e/am

Question 1

0efer to the e/hi5it. +he @unior network su!!ort staf f !rovided the diaram as a recommended confiuration

for the first !hase of a four2!hase network e/!ansion !ro@ect. +he entire network e/!ansion will have over

1>>> users on

1? network sements and has 5een all ocated this I& address s!ace



1D3.1FL.1.1 throuh 1D3.1FL..3

1D3.1FL.1>>.1 throuh 1DL.1FL.1>>.3

What are three !ro5lems with this desin" #$hoose three%



A R +he A0*A 1 I& address s!ace is inade4uate for the num5er of

users. ( R +he A0*A 7 I& address s!ace is inade4uate for the

num5er of users. $ R A0*A 3 could use a mask of B3 to conserve I&

address s!ace.

) R +he network address s!ace that is !rovided re4uires a sinle network2wide

mask. * R +he router2to2router connection is wastin address s!ace.

R +he 5roadcast domain in A0*A 1 is too lare for I& to

function. Answer A $ *

Question

3

0efer to the e/hi5it. A technician is testin connection !ro5lems in the internetwork. What is the !ro5lem

indicated 5y the out!ut from HostA"



A R +he routin on 0outer3 is not functionin

!ro!erly. ( R An access list is a!!lied to an

interface of 0outer7. $ R +he a>B3? interface of

Switch1 is down.

) R +he ateway address of HostA is incorrect or not

confiured. Answer )

*/!lanation

When tryin to !in the I& 1D3.1FL.7.3?,you received the re!lies from that I&. It means that you can

reach the a>B> interface of 0outer1. (ut notice that the I& of host A #1D3.1FL.7.1B3?% and the I& of the

a>B> interface of 0outer 1 #1D3.1FL.7.3?B3?% are on the same network. So you don9t need a ateway

address confiured on HostA. +herefore you can9t conclude the ateway address of HostA was

confiured correctly.

'ately, you tried to use the tracert command to reach another network #1D3.1FL.?.%. In this case, a ateway

address was re4uired for reachin the network of host(. (ut the result told that :)estination host

unreacha5le; R means that Host A can not find a route to Host ( 2= +he ateway address of Host A was

incorrect #somethin other than 1D3.1FL.7.3?% or not confiured is a !ossi5ility.

A and ( are incorrect 5ecause if there is a mis2confiuration on 0outer 3 or 0outer 7 #while 0outer 1 is

confiurated correctly%, you will see at least one successful line when usin tracert command likes the 5old

line 5elow

&$=tracert 1D3.1FL.?.

+racin route to 1D3.1FL.?. over a ma/imum of 7> ho!s

8 :2 *s :2 *s >: *s 892(8:;(?(2<>

3 0e4uest timed out.



$ is incorrect 5ecause we can !in 0outer 1 2= !ort a>B3? on Switch 1 was turned on and runnin correctly



Question 7

0efer to the e/hi5it. +he internetwork is usin su5nets of the address 1D3.1FL.1.> with a su5set mask of

3.3.3.33?. +he routin !rotocol in use is 0I& version 1. Which address could 5e assined to the

ast*thernet interface on 0outerA"

A R 1D3.1FL.1.71

( R 1D3.1FL.1.F?

$ R 1D3.1FL.1.13

) R 1D3.1FL.1.1D>

* R 1D3.1FL.1.1D3

Answer )

*/!lanation

3.3.3.33? V 1111 1111.1111 1111.1111 1111.118> >>>> #5inary form%

Increment 73

irst su+networ,$ 1D3.1FL.1.> 2= 1D3.1FL.1.71 #A is incorrect 5ecause 1D3.1FL.1.71 is a 5roadcast

address%

Secon' su+networ,$ 1D3.1FL.1.73 2= 1D3.1FL.1.F7

Thir' su+networ,$ 1D3.1FL.1.F? 2= 1D3.1FL.1.D #( is incorrect 5ecause 1D3.1FL.1.F? is a network

address% ourth su+networ,$ 1D3.1FL.1.DF 2= 1D3.1FL.1.13 #$ is incorrect 5ecause 1D3.1FL.1.13 is a

5roadcast address%

ifth su+networ,$ 1D3.1FL.1.13L 2= 1D3.1FL.1.1D

Si)th su+networ,$ 1D3.1FL.1.1F> 2= 1D3.1FL.1.1D1 #) is correct 5ecause 1D3.1FL.1.1D> is the last

assina5le host address of this su5network%

Se1enth su+networ,$ 1D3.1FL.1.1D3 2= 1D3.1FL.1.33? #* is incorrect 5ecause 1D3.1FL.1.1D3 is a

network address%

Question ?

0efer to the e/hi5it. or security reasons, information a5out 0+A, includin !latform and I& addresses,

should not 5e accessi5le from the Internet. +his information should, however, 5e accessi5le to devices on



the internal networks of 0+A. Which command or series of commands will accom!lish these o5@ectives"



A R 0+A#confi%Cno cd! run

( R 0+A#confi%Cno cd! ena5le

$ R 0+A#confi%Cinterface s>B>

0+A#confi2if%Cno cd! run

) R 0+A#confi%Cinterface s>B>

0+A#confi2if%Cno cd! ena5le

Answer )

Question

0efer to the e/hi5it, &$1 !ins &$3. What three thins will $O0* router do with the data that isreceived from

&$1" #$hoose three%

A R +he data frames will 5e forwarded out interface ast*thernet>B1 of $O0*

router. ( R +he data frames will 5e forwarded out interface ast*thernet1B> of

$O0* router.

$ R $O0* router will re!lace the destination I& address of the !ackets with the I& address of &$3.



) R $O0* router will !lace the A$ address of &$3 in the destination A$ address of the frames.

* R $O0* router will !ut the I& address of the forwardin ast*thernet interface in the !lace of the

source I&

address in the !ackets.



R $O0* router will !ut the A$ address of the forwardin ast*thernet interface in the !lace of the

source

A$ address.

Answer ( )

Su+ne tti n& Q ue sti ons

Here you will find answers to su5nettin 4uestions in I$N) 1 e/am

Note If you are not sure a5out su5nettin, !lease read my S u 5 n e tt in tu to r ia l.

Question 1

0efer to the e/hi5it. +he oal of this network desin is to !rovide the most ef f icient use of I& address s!ace

in a network e/!ansion. *ach circle defines a network sement and the num5er of users re4uired on that

sement. An I& su5network num5er and default ateway address are shown for each sement.

What are three !ro5lems with the network desin as shown" #$hoose three%



A R Interface fa>B7 has an I& address that overla!s with network 1>.1.7.>B7>.



( R Interface fa>B1 has an invalid I& address for the su5net on which it

resides. $ R Interface fa>B3 has an invalid I& address for the su5net on

which it resides. ) R Network 1>.1.3.>B3 re4uires more user address

s!ace.

* R Network 1>.1.7.13LB3 re4uires more user address

s!ace.

R +he I& su5net 1>.1.1.>B7> is invalid for a sement with a sinle

server.

Answer A (

) Question 3

If an ethernet !ort on a router was assined an I& address of 13.1F.113.1B3>, what is the ma/imum

num5er of hosts all owed on this su5net"

A R 1>3?

( R 3>?F

$ R ?>D?

) R ?>DF

* R L1D>

Answer $

Question

7

0efer to the e/hi5it. +he internetwork is usin su5nets of the address 1D3.1FL.1.> with a su5net

mask of

3.3.3.33?. +he routin !rotocol in use is 0I& version 3. Which address could 5e assined

to the

ast*thernet interface on

0outerA"

A R 1D3.1FL.1.71

( R 1D3.1FL.1.F?



$ R 1D3.1FL.1.13

) R 1D3.1FL.1.1D>

* R 1D3.1FL.1.1D3

Answer )



Question ?

0efer to the e/hi5it. HostA cannot !in Host(. Assumin routin is !ro!erly confiured, what could 5e the

cause of this !ro5lem"

A R HostA is not on the same su5net as its default

ateway. ( R +he address of SwitchA is a su5net

address.

$ R +he a>B> interface on 0outerA is on a su5net that can9t 5e

used. ) R +he serial interfaces of the routers are not on the same

su5net.

* R +he a>B> interface on 0outer( is usin a 5roadcast address.

Answer )

5r a& an' 5r o Q ue sti ons

arch 3Dth, 3>11 ?3 comments

Here you will find answers to dra and dro! 4uestions in I$N) 1 e/am

Question 1

)ra the a!!ro!riate command on the left to the confiuration task it accom!lishes #not allll o!tions are used%



Answer

1% service !assword2encry!tion

3% line console > !assword

friendS>nly

7% ena5le secret noWay1n?u

?% line vty > ?

!assword 3hard3-uess

% ena5le !assword uwi11NeverNo

Question 3

$onstruct the command se4uence to confiure an I& address on a serial interface #not all o!tions are used%



Answer

1% Hu5C confiure terminal

3% Hu5#confi%C interface s>B>

7% Hu5#confi2if%C i! address 1>.L..3 3.3.33.>

?% Hu5#confi2if%C no shutdown

% Hu5#confi2if%C descri!tion +1 to

WAN */!lanation

One thin interestin in the answers is that the command i! address :1>.L..3 3.3.33.>#answer 7% is correct 5ecause 1>.L..3 3.3.3.> is not a 5roadcast address. 'et9s analy6e this

case a 5it closer

Increment ? for the third octet #3.3.33.> V 1111 1111.1111 1111.1111 11>>.>>>>

>>>>% irst su5network rane 1>.L.>.> to 1>.L.7.3

Second su5net rane 1>.L.?.> to 1>.L..3

+herefore 1>.L.7.3 and 1>.L..3 are the 5roadcast addresses 5ut not 1>.L..3. So we can assin

this address to s>B> interface.



(Notice that the command "ub(con#fi!)$i address %&'#%#'#'% '**#'**#'**# is only correct onlyif it is in

inteiface mode, which is "ub( con#fi!+ij )$)

Question 7.

)ra the commands on the left to the a!!ro!riate functions on the riht #Not all o!tions are used%

Answer.

1% i!confi /all3% tracert

7% telnet

?% !in 13.>.>.1

% arp Ra



5ra& an' 5ro Questions 2

arch 3Lth, 3>11 71 comments

Here you will find answers to I$N) 1 2)ra and )ro! Questions &art 3

Question 1As a $$NA candidate, you should master the functions of various commands. 'ook at the followin

items, some commands are listed on the left. +he related roles are listed on the riht in a wron se4uence.

&lease match them toether. #Not all o!tions are used%

Answer

1% Router#coy tft flash$ re!lace the IOS imae

3% Router#coy flash tft$ 5acku! the current IOS imae

7% Router#coy runnin&confi& tft$ make a 5acku! co!y of confiuration in 0A

?% Router#coy runnin&confi& startuconfi&$ make the confiuration in 0A the confiuration the

router will use on startu!

% Router#coy tft runnin&confi&$ mere a 5acku! confiuration with the confiuration in

0A */!lanation

irst !lease notice that 5y sayin :re!lace; we often mean chanes to NK0A and ++& while sayin

:mere; or

:add; we mean chanes to 0A. Ne/t we should review the synta/ of :co!y; command

Synta) co!y sourceD E5ase confi filename= 'estinationD Edestination filename.t/t=

1% (y default, the flash memory in a router is used to store the $isco IOS imae so the re4uirement

:re!lace the IOS imae; means that movin file somewhere to the flash memory. In the left columns we

only have one choice which has the flash as the destination 2=co!y tft! flash.



3% Same e/!lanation as a5ove, when sayin :5acku! the current IOS imae; the flash takes the role as the

source 2

=co!y flash tft!. And :5acku!; means we should co!y it to somewhere like tft! server, $)0O

7% +he runnin2confi is stored in the 0A so :make a 5acku! co!y of confiuration in 0A; means co!y

runnin confiuration from 0A so 5acku! server #tft!% 2= co!y runnin2confi tft!

?% :co!y runnin2confi startu!2confi; is a very common command so no more e/!lanation needed.



% After solvin ? 5o/es a5ove, we only have two choices left :co!y tft! runnin2confi; < :co!y flash

runnin2 confi;. +he 5ottom2riht 5o/ says :mere a 5acku! confiuration; so it should 5e the tft! server

and the command here is co!y tft! runnin2confi.

Wirele ss Q ue sti ons

Here you will find answers to Wireless Questions R &art 1

If you are not sure a5out Wireless, !lease read my Wireless tutorial and (asic Wireless +erminoloies

Question 1

Which wireless 'AN desin ensures that a mo5ile wireless user will not lose connectivity when movin

from one access !oint to another on the W'AN"

A. tili6in A$ address filterin to all ow the client A$ address to authenticate with the surroundin A&s

(. sin ada!ters and access !oints manufactured 5y the same com!any

$. Overla!!in the wireless cell coverae 5y at least

1>Z ). $onfiurin all access !oints to use the same

channel

Answer $

*/!lanatio

n

(y usin more than one Access &oint #A&% we can create overla!!in cell s to all ow roamin in a larer area

(ut we have to ensure that two A&s must have at least 1>Z coverae overla! and they use non2overla!!in

channels.

Question 3

8ou need to trou5leshoot an interference issue with the wireless 'AN. Which two devices can interfere

with the o!eration of this network 5ecause they o!erate on similar fre4uencies" #$hoose two%

A. icrowave oven(. A radio

$. +oaster

). $o!ier

*. $ordless !hone

. I& !hone

-. I!od

Answer A



*

*/!lanation

icrowave oven and cordless !hone radiate enery in the 3.? -H6 unlicensed 5and so they can interfere wit

some



W'AN standards. As the result of that, you can9t hear clearly on the !hone or can9t surf

we5. Question 7

Which of the foll owin data network would you im!lement if you wanted a wireless network that had a

relatively hih data rate, 5ut was limited to very short distances"

A. (road5and !ersonal comm. Service

#&$S% (. (road5and circuit

$.

Infrared

). S!read

s!ectrum

*. $a5le

Answer $

*/!lanatio

n

Infrared ty!icall y re4uires a line2of2siht #your +K remote control, for e/am!le% which means that it is

limited to very short distances. I am not sure if it is considered :relative hih data rate; 5ut infrared can

transfer u! to ?!5s.

Question

?

8ou need to add a wireless access !oint to a new of f ice. Which additional confiuration ste! is necessary inorder to connect to an access !oint that has SSI) 5roadcastin disa5led"

A. $onfiure o!en authentication on the A& and the

client

(. Set the SSI) value in the client software to

!u5lic

$. Set the SSI) value on the client to the SSI) confiured on the

A&

). $onfiure A$ address filterin to !ermit the client to connect to

the A&

Answer $

*/!lanatio

n

Service Set Identifier #SSI)% is the term to identify a W'AN. In most cases SSI) is 5roadcast 5y the A&,

the user only needs to select that SSI) and !rovides a correct !assword to access it. (ut in some cases for



security reason, the SSI) can 5e disa5led. sers can only access to that network if they ty!e 5oth SSI) and

!assword correctly.

Question

8ou need to secure a new access !oint on the a wireless network. Which two !ractices hel!

secure the confiuration utilities on wireless access !oints from unauthori6ed access" #$hoose

two%

A. $hanin the default SSI)

value

(. $onfiurin traf f ic

filterin

$. $hanin the mi/ed mode settin to sinle

mode



). $onfiurin a new administrator !assword

*. Assinin a !rivate I& address to the A&

Answer A

)

*/!lanation

+o im!rove security, you should chane the default SSI) value on your A&. or e/am!le, 'inksys routers

#which are !roduced 5y $isco% ty!ically have an SSI) of :linksys; 2= A is correct.

In an A& we can confiure traffic filterin 5ut it is mainly used for filterin which services clients can use,

I& ranes, !orts, we5sites, time access It has no effect on securin your A& 2= ( is not correct.

:i/ed mode; here means we can confiure A& to allow clients to use different standard like L>3.115, or

n. (ut settin it to sinle mode doesn9t have any security !rotection on it 2= $ is not correct.

We should also chane the administrator !assword 5ecause everyone can access to the admin !ae of an

A& 5y o!en a we5 5rowser and ty!e the I& address of that A& #for e/am!le htt!BB1D3.1FL.1.1%. +y!ically,

'inksys Wireless routers have a default usernameB!assword of :adminBadmin; or :adminBX5lankY; which

are easily uessed or found out 2= ) is correct.

We can access the A& 5y usin a !rivate I& address #in the same !rivate network of the A& R

1D3.1FL.1.1, for e/am!le% 2= * is not correct.

Question F

8ou need to determine the !ro!er security settins on a new W'AN2ca!a5le office. Which encry!tion ty!ewould

W&A3 use in this office"

A. &SJ

(. A*S2$$&

$. &&J via IK

). +JI&BI$


Answer (

*/!lanatio

n

Advanced *ncry!tion Standard #A*S% is the ci!her system used 5y 0SN. It is the e4uivalent of the 0$?

alorithm used 5y W&A. However the encry!tion mechanism is much more com!le/ and does not suffer

from the !ro5lems associated with W*&. A*S is a 5lock ci!her, o!eratin on 5locks of data 13L5its lon.



$$& is the security !rotocol used 5y A*S. It is the e4uivalent of +JI& in W&A. $$& com!utes a

essae

Interity $heck #I$% usin the well known, and !roven, $i!her (lock $hainin essae Authentication

$ode

#$($2A$% method. $hanin even one 5it in a messae !roduces a totally different result.



+he A*S2$$& encry!tion alorithm used in the L>3.11i #W&A3% security !rotocol. It uses the A*S 5lock

ci!her, 5ut restricts the key lenth to 13L 5its. A*S2$$& incor!orates two so!histicated cry!tora!hic

techni4ues #counter mode and $($2A$% and ada!ts them to *thernet frames to !rovide a ro5ust security

!rotocol 5etween the mo5ile client and the access !oint.

Question

What is one reason why W&A encry!tion is !referred over W*& in this

network" A. +he W&A key values remain the same until the client

confiuration is chaned.

(. +he values of W&A keys can chane dynamically while the system is used.

$. +he access !oint and the client are manually confiured with different W&A key

values. ). A W&A key is loner and re4uires more s!ecial characters than the W*&

key.


Answer (

*/!lanatio

n

Wireless *ncry!tion &rotocol #W*&% uses 0$? encry!tion and a static F?25it key so it can 5e easily 5roken a

only

?>25its are encry!ted and 3? 5its are clear2te/t IK#Initiali6ation Kector%. It was later u!raded to 13L25it, 5ut

theIK was still clear te/t meanin it took slihtly loner #minutes% to 5reak2in.

W&A was introduced in 3>>7 as a re!lacement for W*&. W&A uses +em!oral Jey Interity &rotocol

#+JI&% to automatically chane the keys. +JI& still uses 0$?T it @ust im!roves how it9s done

Question L

In an effort to increase security within the wireless network, W&A is 5ein utili6ed. Which two

statements shown 5elow 5est descri5e the wireless security standard that is defined 5y W&A" #$hoose

two%

A. It re4uires use of an o!en authentication method

(. It s!ecifies use of a static encry!tion key that must 5e chaned fre4uently to enhance security

$. It includes authentication 5y &SJ

). It s!ecifies the use of dynamic encry!tion keys that chane each time a client esta5lishes a connection

*. It re4uires that all access !oints and wireless devices use the same encry!tion key

. W&A works only with $isc> access !oints

Answer $ )



Question D

8ou need to confiure a new wireless access !oint for your network. What are three 5asic !arameters to

confiure an A&" #$hoose three%

A. Authentication method



(. 0+SB$+S

$. 0 channel

). SSI)

Answer A $

) */!lanation

(elow lists 5asic !arameters to confiure an A&

Wirele ss Q ue sti ons 2

Here you will find answers to Wireless R &art 3

If you are not sure a5out Wireless, !lease read my Wireless tutorial and (asic Wireless +erminoloies

Question 1

8ou have finished !hysicall y install in an access !oint on the ceilin at a newly o!ened of f ice. At a

minimum, which !arameter must you confiure on the access !oint in order to all ow wireless clients to

o!erate on it"

A. SSI)

(. A*S

$. +JI&

). &SJ




Answer A

Question

3

&art of the wireless 'AN is shown 5elow

What two facts can 5e determined from the diaram of the W'AN shown a5ove" #$hoose

two% A. Access !oints in each cell must 5e confiured to use channel 1

(. +he network diaram re!resents an e/tended service set #*SS%

$. +he two A&s should 5e confiured to o!erate on dif f erent channels

). +he area of overla! of the two cell s re!resents a 5asic service set #(SS%

*. +he area of overla! must 5e less than 1>Z of the area to ensure connectivity

. +here are too many hosts on this W'AN

Answer (

$ Question

7

A sinle L>3.11 access !oint has 5een confiured and install ed in the center of a s4uare sha!ed of f ice. A

few wireless users are e/!eriencin slow !erformance and dro!s while most users are o!eratin at !eak ef f

iciency. rom the list 5elow, what are three likely causes of this !ro5lem" #$hoose three%

A. Null SSI)



(. ismatched +JI& encry!tion

$. $ordless !hones

). Antenna ty!e or direction



*. ismatched

SSI) . etal file

ca5inets

Answer $ )

*/!lanation

L>3.11 o!erates in 3.? -H6 IS 5and. Some !o!ular devices and technoloies can interfere L>3.11

sinal

U Newer cordless !hones

U (luetooth

U icrowaves

U etal surface #can cause interference%

U Antenna #can reduce wireless sinal%

Question ?

+hree access !oints have 5een install ed and confiured to cover a small remote of f ice. What term

defines the wireless to!oloy"

A. SSI)

(. (SS

$. *SS

). I(SS

*. ASS

Answer $

Question

+wo workers have esta5lished wireless communication directly 5etween their wireless la!to!s. What

ty!e of wireless to!oloy has 5een created 5y these em!loyees"

A. *SS

(. I(SS

$. SSI)

). (SS

Answer (



*/!lanatio

n



Inde!endent (asic Service Set R I(SS #ad hoc mode% does not use an A&. It all ows two devices to

communicate directly.

(asic Service Set #(SS% is a sinle wireless 'AN created with an A& and all devices that associate with

that A&. */tended Service Set #*SS% consists of multi!le A&s, all owin roamin in a larer coverae

area.

Question F

L>3.15 is 5ein utili6ed in the wireless network. Which s!read s!ectrum technoloy does the L>3.15 standard

define for o!eration in this network"

A. HSS

(. I0

$. )SSS and HSS

). )SSS

*. I0, HSS and )SSS

Answer )

*/!lanatio

n

re4uency Ho!!in S!read S!ectrum #HSS% uses all fre4uencies in the 5and, ho!!in to dif f erent ones.

(y usin slihtly dif f erent fre4uencies for consecutive transmissions, a device can ho!efull y avoidinterference from other devices that use the same unlicensed 5and, succeedin at sendin data at some

fre4uencies.

)irect Se4uence S!read S!ectrum #)SSS% foll owed as the ne/t eneral class of encodin ty!e for

W'ANs. )esined for use in the 3.? -H6 unlicensed 5and, )SSS uses one of several se!arate

channels or fre4uencies.

+he oriinal L>3.11 W'AN standards used HSS, 5ut the current standards #L>3.11a, L>3.115, and

L>3.11% do not. L>3.15 uses )SSS while L>3.1a < L>3.1 use Orthoonal re4uency )ivision

ulti!le/in #O)%.

#0eference I$N)1 Of f icial */am $ertification

-uide% Question

Which I*** standard is used to define Wi2i"

A. I*** L>3.7

(. I*** L>3.

$. I*** L>3.11h

). I*** L>3.11c



*. I*** L>3.11

Answer *



Question L

An of f ice is usin an I*** L>3.115 wireless 'AN. What is the ma/imum data rate s!ecified

for this W'AN" A. 11 m5!s

(.

1>>

m5!s

$. ?

m5!s

). 1>

m5!s

*. 1>>> m5!s

. 1F m5!s

Ans

wer

A

*/!

lana

tion

+he ma/imum data rate for !o!ular W'AN standards are listed 5elow

I*** L>3.11a ? 5!s in the . -H6 IS 5and

I*** L>3.115 11 5!s in the 3.? -H6 IS 5and

I*** L>3.11 ? 5!s in the 3.? -H6 IS 5and

Shar e your !CN58 E)erie nc e

&lease share with us your e/!erience after takin the e/am I$N)1, your materials, the way

you learned, your recommendations

0 ea d m o r e

Show Confi &ur ati on Si *



+his task re4uires the use of various show commands from the $'I of 0outer1 to answer multi!le2

choice 4uestions. +his does not re4uire any confiuration.

NO+* +he show runnin&confi&uration and the show startuconfi&uration commands have 5een

disa5led in this simulation.

+o access the multi!le2choice 4uestions, click on the num5ered 5o/es on the riht of the to! !anel.+here are multi!le2choice 4uestions with this task. (e sure to answer all 4uestions 5efore leavin

this item.

Question 1

What is the su5net 5roadcast address of the 'AN connected to 0outer1"

A R 1D3.1FL.17F.1( 21D3.1FL.17F.71

$ 21D3.1FL.17F.F7

) R 1D3.1FL.17F.13* R 3.3.3.3

Answer A

*/!lanation

+he :show runnin2confiuration; and :show startu!2confiuration; have 5een disa5led as stateda5ove so we should use the show i! interface command to et information a5out the 'AN network

connected to 0outer1.



rom the out!ut we learn that the i! address of the ast*thernet interface of 0outer1 is 1D3.1FL.17F.1and the su5net mask is B3L. +herefore

Increment 1F #B3LV1111 1111.1111 1111.1111 1111.1118 >>>>%

Network address 1D3.1FL.17F.>(roadcast address 1D3.1FL.17F.1 #1 V > U 1F R 1%

2= +he 5roadcast address of this su5network is 1D3.1FL.17F.1

Question 3

What is the 5andwidth on the WAN interface of 0outer1"

A R 1F J5itBsec

( R 73 J5itBsec

$ R F? J5itBsec) R 13L J5itBsec

* R 13 J5itBsec

R 1?? J5itBsec

Answer *

*/!lanation

+o find out the 5andwidth on the WAN #serial% interface of 0outer1 we need to use the show interfacesserial >B> command



+herefore the 5andwidth on the WAN is 13 J5itBsec.

Question 7

What interfaces on 0outer1 have not had any confiurations a!!lied" #$hoose two%

A R *thernet >

( R ast*thenet >B>$ R ast*thernet >B1

) R Serial >

* R Serial >B> R Serial >B1

Answer $

*/!lanation

se the show i! interface 5rief to identify what interfaces 0outer 1 have. Notice that 0outer1 does nothave *thernet > and Serial > interfaces. ast*thernet >B> and Serial >B> were confiured with their I&

addresses therefore only ast*thernet >B1 and Serial>B1 have not had any confiurations a!!lied.

Question ?

Includin the address on the 0outer1 ast*thernet interface, how many hosts can have I& addresses onthe 'AN to which 0outer1 is connected"

A R F

( R 1?$ R F3

) R 13L

Answer (

*/!lanation



+he mask address of interface a>B> of 0outer1 is B3L #as shown in 4uestion 1%, which has four > 5its

#1111 1111.1111 1111.1111 1111.1111 0000%. +herefore there are 3? R 3 V 1? assina5le I& addresses for

hosts on the 'AN.

Question

+he hosts in the 'AN are not a5le to connect to the Internet. Which commands will correct this issue"

A R 0outer1#conf%C interface fa>B>

0outer1#conf2if%C no shutdown

( R 0outed #conf%C interface fa>B10outer1#conf2if%C no shutdown

$ R 0outer1#conf%C interface s>B>

0outer1#conf2if%C no shutdown) R 0outer1#conf%C interface s>B1

0outer1#conf2if%C no shutdown

* R 0outer1#conf%C interface s>B>0outer1#conf2if%C i! address 1>.11.13.17 3.3.3.33

R 0outer1#conf%C interface s>B1

0outerl #conf2if%C i! address 1>.11.13.17 3.3.3.33

Answer $

*/!lanation

We should check the statuses of all the interfaces on 0outer1 with the show i! interface 5rief

command

rom the out!ut, we learn that the status of Serial>B> interface which connects to IS& router is currently

:administratively down;. +his status indicates this interface is shuttin down so we need to turn it on.



otsot Routin& Question

Question 1

If the router 01 has a !acket with a destination address 1D3.1FL.1.3, what descri5es the o!eration of

the network"

A R 01 will forward the !acket out all interfaces

( R 01 will dro! this !acket 5ecause it is not a valid I& address

$ R As 01 forwards the frame containin this !acket, Sw2A will add 1D3.1FL.1.3 to its A$ ta5le

) R 01 will enca!sulate the !acket in a frame with a destination A$ address of 22222* R As 01 forwards the frame containin this !acket, Sw2A will forward it ti the device assined the I&

address of 1D3.1FL.1.3

Answer (

Question 3

sers on the 1D3.1FL.1.>B3? network must access files located on the Server 1. What route could 5econfiured on router 01 for file re4uests to reach the server"



A R i! route >.>.>.> >.>.>.> s>B>B>

( R i! route >.>.>.> >.>.>.> 3>D.1F.3>>.33F

$ R i! route 3>D.1F.3>>.> 3.3.3.> 1D3.1FL.1.3>) R i! route 1D3.1FL.1.> 3.3.3.> 3>D.1F.1>>.3>

Answer A

Quetion 7

When a !acket is sent from Host 1 to Server 1, in how many different frames will the !acket 5e

enca!sulated as it is sent across the internetwork"

A R >

( R 1$ R 3

) R 7

* R ?

Answer $ or )#de!endin on your understand, !lease read the comments to understand why%

Question ?

What must 5e confiured on the network in order for users on the Internet to view we5 !aes located

on We5 Server 3"

A R On router 03,confiure a default static route to the 1D3.1FL.1.> network

( R On router r3, confiure )NS to resolve the 0' assined to We5 Server 3 to the 1D3.1FL.1.1>

address

$ R On router 01, confiure NA+ to translate an address on the 3>D.1F.1>>.>B3? network to

1D3.1FL.1.1>) R On router 01, confiure )H$& to assin a reistered I& address on the 3>D.1F.1>>.>B3? network

to We5 Server 3

Answer $

Question

+he router address 1D3.1FL.1.3> is the default ateway for 5oth the We5 Server 3 and Host 1. What is

the correct su5net mask for this network"

A R 3.3.3.>( R 3.3.3.1D3

$ R 3.3.3.3>) R 3.3.3.33

Answer A

otsot ra*erelay Question



#In the old days, this 4uestion was a multi2choice 4uestion 5ut $isco u!raded it into a la52sim4uestion. +herefore, instead of listin all the confiuration as a5ove, you have to ty!e show frame2

relay ma! and show runnin2confi to et its confiuration%

Note If you are not sure a5out rame20elay, !lease read my rame 0elay tutorial.

http://www.9tut.com/frame-relay-tutorial

http://www.9tut.com/frame-relay-tutorial



Question 1

What destination 'ayer 3 address will 5e used in the frame header containin a !acket for host13.7>.>.?"

A R >?( R 1DF

$ R >3

) R 7??

Answer $

Question 3

A static ma! to the S2A*0 location is re4uired. Which command should 5e used to create this ma!"

A R frame2relay ma! i! 13.7>.>.7 >? 5roadcast

( R frame2relay ma! i! 13.7>.>.7 1DF 5roadcast$ R frame2relay ma! i! 13.7>.>.7 >3 5roadcast

) R frame2relay ma! i! 13.7>.>.7 7?? 5roadcast

Answer (

Question 7

Which connection uses the default enca!sulation for serial interfaces on $isco routers"

A R +he serial connection to the id*ast 5ranch office

( R +he serial connection to the )ee!South 5ranch office$ R +he serial connection to the North$entral 5ranch office

) R +he serial connection to the ultinational $ore

Answer A

Question ?

If re4uired, what !assword should 5e confiured on the router in the id*ast 5ranch office to allow a

connection to 5e esta5lished with the )u5ai router"

A R No !assword is re4uired

( R *na5le$ R Scr

) R +elnet* R $onsole

Answer A or ) #5ecause may5e there are 3 versions of this 4uestion, de!endin on the out!ut of

:show runnin2confi; command, !lease read the e/!lanation 5elow%

*/!lanation

+his 4uestion is not clear for a lon time 5ut now may5e the trick was solved. What $isco wants to ask is the word used as !assword, not the ty!e of connection, so in the e/am you miht see some strane



words for answers like :*nL5le;, :+1net;, :$>nsole;. All you have to do is to use the command :show

runnin2confi; as w/? mentioned 5elow to find the answer.

w/? commented

Q? if !assword re4uired which"in my e/am!le it was connection to NorthG

How to fiure out which !w is re4uired"

Cshow runnin2confi

1. check the interface to the router you need connection to. If there is :!!! authentication; you need a !asswordG

3. you will find the !assword on the to! of your runnin2confi out!ut

check the area

username North !assword c>nsoleusername ///// yyyyy

username

in my case it was c>nsole, in your case it can 5e no !assword needed or a different !assword.

If you are still not clear, !lease read anton[s comment

A 5i 4uestion I noticed here was a5out the 0 'a5 reardin the !assword. 8ou have to !erform a

show runnin2confi and look for S*0NA* and &ASSWO0).i.e.

username South0outer !assword c>nsol7

username North0outer !assword t71net

O5viously this has to 5e en &&& enca!sulation, if asked for a !osi5le !assword for SO+H0O+*0

you !ick c>nsol7, and for NO0+H0O+*0 you !ick t71net. If you9re runnin H)'$, i would !ick:no !assword is re4uired;.

icnd1 and icnd2 explained 9tut.doc

Documents