testking cisco 640-816

BeITCert

ified.c

om

QUESTION NO: 1

To allow or prevent load balancing to network 172.16.3.0/24, which of the following commands

could be used in R2? (Choose two.)

A. R2(config-if)#clock rate

B. R2(config-if)#bandwidth

C. R2(config-if)#ip ospf cost

D. R2(config-if)#ip ospf priority

E. R2(config-router)#distance ospf

Answer: B,C

QUESTION NO: 2

After the network has converged, what type of messaging, if any, occurs between R3 and R4?

Cisco 640-816: Practice Exam

"Pass Any Exam. Any Time." - 100% Guaranteed 2

BeITCert

ified.c

om

A. No messages are exchanged

B. Hellos are sent every 10 seconds.

C. The full database from each router is sent every 30 seconds.

D. The routing table from each router is sent every 60 seconds.

Answer: B

QUESTION NO: 3

OSPF is configured using default classful addressing. With all routers and interfaces operational,

how many networks will be in the routing table of R1 that are indicated to be learned by OSPF?

A. 2

B. 3

C. 4

D. 5

E. 6

F. 7

Answer: C

QUESTION NO: 4



BeITCert

ified.c

om

R1 is configured with the default configuration of OSPF. From the following list of IP addresses

configured on R1, which address will the OSPF process select as the router ID?

A. 192.168.0.1

B. 172.16.1.1

C. 172.16.2.1

D. 172.16.2.225

Answer: A

QUESTION NO: 5 DRAG DROP

Riverside Towing is redesigning the network that connects its three locations. The administrator

gave the networking team 192 168.45 0 to use for addressing the entire network. After subnetting

the address, the team is ready to assign the addresses. The administrator plans to configure ip

subnet-zero and use RIP v2 as the routing protocol. As a member of the networking team, you

must address the network and at the same time conserve unused addresses for future growth.

With those goals in mind, drag the host addresses on the left to the correct router interface. One of

the routers is partially configured. Move your mouse over a router to view its configuration. Not all

of the host addresses on the left are necessary.

Answer:



BeITCert

ified.c

om

Explanation:

Cars Fa0/0 IP = 192.168.45.249/26

Trucks S0/1 IP = 192.168.45.165/30

Trucks Fa0/0 IP = 192.168.45.197/28

Vans Fa0/0 IP = 192.168.45.108/25

QUESTION NO: 6

Which two statements describe characteristics of IPv6 unicast addressing? (Choose two.)

A. Global addresses start with 2000::/3.

B. Link-local addresses start with FE00::/12.

C. Link-local addresses start with FF00::/10.

D. There is only one loopback address and itis :: 1.

E. If a global address is assigned to an interface, then that is the only allowable address for the

interface.

Answer: A,D

QUESTION NO: 7

Refer to the exhibit. Given the partial configuration shown in the exhibit, why do internal

workstations on the 192.168.1.0 network fail to access the Internet?

A. A NAT pool has not been defined.

B. The wrong interface is overloaded.

C. NAT has not been applied to the inside and outside interfaces.

D. The access list has not been applied to the proper interface to allow traffic out of the internal

network.



BeITCert

ified.c

om

Answer: C

QUESTION NO: 8

Refer to the exhibit. Hosts in network 192.168.2.0 are unable to reach hosts in network

192.168.3.0. Based on the output from RouterA, what are two possible reasons for the failure?

(Choose two.)

A. Interface S0/0 on RouterB is administratively down.

B. Interface S0/0 on RouterA is configured with an incorrect subnet mask.

C. Interface S0/0 on RouterA is not receiving a clock signal from the CSU/DSU.

D. The IP address that is configured on S0/0 of RouterB is not in the correct subnet.

E. The encapsulation that is configured on S0/0 of RouterB does not match the encapsulation that

is configured on S0/0 of RouterA.

F. The cable that is connected to S0/0 on RouterA is faulty.

Answer: C,E

Explanation:

Based on the information provided in the exhibit, we know that Serial0/0 is up, line protocol is

down, under normal circumstances there are three states:

1. serial0/0 up, line protocol is up The interface is up and the line protocol is up

2. serial0/0 down, line protocol is down The interface is down and there is something wrong with

the physical layer.

3. serial0/0 up, line protocol is down The interface is up, but the encapsulation format is not

matching ,clock rate issues

QUESTION NO: 9

A network administrator is explaining VTP configuration to a new technician. What should the

network administrator tell the new technician about VTP configuration? (Choose three.)



BeITCert

ified.c

om

A. A switch in the VTP client modecannot update its local VLAN database.

B. A trunk link must be configured between the switches to forward VTP updates.

C. A switch in the VTP server mode can update a switch in the VTP transparent mode.

D. A switch in the VTP transparent mode will forward updates that it receives to other switches.

E. A switch in the VTP server mode only updates switches in the VTP client mode that have a

higher VTP revision number.

F. A switch in the VTP server mode will update switches in the VTP client mode regardless of the

configured VTP domain membership.

Answer: A,B,D

QUESTION NO: 10

Refer to the exhibit. What statement is true of the configuration for this network?

A. The configuration that is shown provides inadequate outside address space for translation of

the number of inside addresses that are supported.

B. Because of the addressing on interface FastEthernet0/1, the Serial0/0 interface address will not

support the NAT configuration as shown

C. The number 1 referred to in the ip nat inside source command references access-list number 1.

D. ExternalRouter must be configured with static routes to networks 172.16.1.0/24 and

172.16.2.0/24.

Answer: C



BeITCert

ified.c

om

QUESTION NO: 11

Refer to the exhibit. Which mask is correct to use for the WAN link between the routers that will

provide connectivity while wasting the least amount of addresses?

A. /23

B. /24

C. /25

D. /30

Answer: D

QUESTION NO: 12

Refer to the exhibit. What can be determined about the interfaces of the Main_Campus router from

the output shown?

A. The LAN interfaces are configured on different subnets.

B. Interface FastEthernet 0/0 is configured as a trunk.

C. The Layer 2 protocol of interface Serial 0/1 is NOT operational.

D. The router is a modular router with five FastEthernet interfaces.

E. Interface FastEthernet 0/0 is administratively deactivated.



BeITCert

ified.c

om

Answer: B

QUESTION NO: 13

What are two characteristics of Frame Relay point-to-point subinterfaces? (Choose two.)

A. They create split-horizon issues.

B. They require a unique subnet within a routing domain.

C. They emulate leased lines.

D. They are ideal for full-mesh topologies.

E. They require the use of NBMA options when using OSPF.

Answer: B,C

QUESTION NO: 14

Refer to the exhibit. Which switch provides the spanning-tree designated port role for the network

segment that services the printers?

A. Switch1

B. Switch2

C. Switch3

D. Switch4

Answer: C

Explanation:



BeITCert

ified.c

om

Printers are connected by hubs. Decide the switch that provides the spanning-tree designated port

role between Switch3 and Switch4. They have the same priority 32768. Compare their MAC

addresses. Switch3 with a smaller MAC address will provide a designated port for printers.

Designated port A designated port is one that has been determined as having the best

(lowest) cost. A designated port will be marked as a forwarding port.

QUESTION NO: 15

A new switch is being added to the River Campus LAN. You will work to complete this process by

first configuring the building_210 switch with an IP address and default gateway. For the switch

host address, you should use the last available IP address on the management subnet. In

addition, the switch needs to be configured to be in the same VTP domain as the building_100

switch and also needs to be configured as a VTP client. Assume that the IP configuration and VTP

configuration on building_100 are complete and correct.

The configuration of the router is not accessible for this exercise. You must accomplish the

following tasks:

Determine and configure the IP host address of the new switch.

Determine and configure the default gateway of the new switch.

Determine and configure the correct VTP domain name for the new switch.

Configure the new switch as a VTP client.

A. PENDING - Please send us your suggestions for this question.

Answer: A



BeITCert

ified.c

om


Drag each feature of the left to the appropriate routing protocol on the right.

Answer:

Explanation:

RIP Version 1

Sends frequent updates

Less complex configuration

Susceptible to routing loops

Exchanges full routing table in updates

OSPF

Faster convergence

Uses only event-triggered updates

Same topology information held by all routers

Requires more memory and processing power



BeITCert

ified.c

om

QUESTION NO: 17

What is the advantage of using a multipoint interface instead of point-to-point subinterfaces when

configuring a Frame Relay hub in a hub-and-spoke topology?

A. It avoids split-horizon issues with distance vector routing protocols.

B. IP addresses can be conserved if VLSM is not being used for subnetting.

C. A multipoint interface offers greater security compared to point-to-point subinterface

configurations.

D. The multiple IP network addresses required for a multipoint interface provide greater

addressing flexibility over point-to-point configurations.

Answer: B

Explanation:

Frame Relay supports two types of interfaces: point-to-point and multipoint. The one you choose

determines whether you need to use the configuration commands that ensure IP address to data-

link connection identifier (DLCI) mappings. After configuring the PVC itself, you must tell the router

which PVC to use in order to reach a specific destination.

Let's look at these options:

1. Point-to-point subinterface - With point-to-point subinterfaces, each pair of routers has

its own subnet. If you put the PVC on a point-to-point subinterface, the router assumes that there

is only one point-to-point PVC configured on the subinterface. Therefore, any IP packets with a

destination IP address in the same subnet are forwarded on this VC.

This is the simplest way to configure the mapping and is therefore the recommended method. Use

the frame-relay interface-dlci command to assign a DLCI to a specified Frame Relay subinterface.

2. Multipoint networks - Multipoint networks have three or more routers in the same subnet. If you

put the PVC in a point-to-multipoint subinterface or in the main interface (which is multipoint by

default), you need to either configure a static mapping or enable inverse Address Resolution

Protocol (ARP) for dynamic mapping.

QUESTION NO: 18



BeITCert

ified.c

om

Refer to the exhibit. Given the output for this command, if the router ID has not been manually set,

what router ID will OSPF use for this router?

A. 10.1.1.2

B. 10.154.154.1

C. 172.16.5.1

D. 192.168.5.3

Answer: C

QUESTION NO: 19

An access list has been designed to prevent Telnet traffic from the Graphics Department from

reaching the HR server attached to the Eastfield router but allow Telnet traffic to other

destinations. Given the following access list:

access-list 101 deny tcp any any eq 23 permit ip any any

On which router, interface, and in what direction should the access list be placed to most efficiently

implement this list? (Choose three.)

A. Westfield

B. Eastfield

C. e0

D. s0

E. in

F. out



BeITCert

ified.c

om

Answer: B,C,F

QUESTION NO: 20

Which two of these statements regarding RSTP are correct? (Choose two.)

A. RSTP cannot operate with PVST+.

B. RSTP defines new port roles.

C. RSTP defines no new port states.

D. RSTP is a proprietary implementation of IEEE 802.1 D STP.

E. RSTP is compatible with the original IEEE 802.1 D STP.

Answer: B,E

Explanation:

When network topology changes, rapid spanning tree protocol (IEEE802.1W, referred to as RSTP)

will speed up significantly the time to re-calculate spanning tree. RSTP not only defines the role of

other ports: alternative port and backup port, but also defines status of 3 ports: discarding status,

learning status, forwarding status.

RSTP is designed to be compatible and interoperable with the STP. However, the advantages of

the fast re-convergence, introduced by the RSTP are lost when it interoperate with STP bridges.

In order to ensure compatibility with STP bridges, each RSTP bridge listens on its ports for

configuration messages having the STP format. When a port receives such configuration message

it starts behaving as a standard 802.1d STP bridge port. Other ports continue to behave according

the RSTP.

QUESTION NO: 21

Refer to the exhibit. How should Switch1 and Switch2 be connected in order to allow full

communication between all of the hosts?



BeITCert

ified.c

om

A. Exhibit A

B. Exhibit B

C. Exhibit C

D. Exhibit D

E. Exhibit E

F. Exhibit F

Answer: F

QUESTION NO: 22

A router is running three routing processes: RIP, OSPF, and EIGRP, each configured with default

characteristics. Each process learns a route to the same remote network. If there are no static

routes to the destination and none of the routes were redistributed, which route will be placed in

the IP routing table?



BeITCert

ified.c

om

A. the route learned through EIGRP

B. the route learned through OSPF

C. the route learned through RIP

D. the route with the lowest metric

E. all three routes with the router load balancing

Answer: A

QUESTION NO: 23



BeITCert

ified.c

om

A static map to the LA-GROUP location is required. Which command should be used to create this

map?

A. frame-relay map ip 172.30.0.3 21 broadcast

B. frame-relay map ip 172.30.0.3 888 broadcast

C. frame-relay map ip 172.30.0.3 866 broadcast

D. frame-relay map ip 172.30.0.3 792 broadcast

Answer: D



BeITCert

ified.c

om

QUESTION NO: 24



BeITCert

ified.c

om

What destination Layer 2 address will be used in the frame header containing a packet for host

172.30.0.4?

A. 21

B. 833

C. 866

D. 792

Answer: D



BeITCert

ified.c

om

QUESTION NO: 25

Which command reveals the last method used to powercycle a router?

A. show reload

B. show boot

C. show running-config

D. show version

Answer: D

QUESTION NO: 26

Workstation A has been assigned an IP address of 192.0.2.24/28. Workstation B has been

assigned an IP address of 192.0.2.100/28. The two workstations are connected with a straight-

through cable. Attempts to ping between the hosts are unsuccessful. What two things can be done

to allow communications between the hosts? (Choose two.)

A. Replace the straight-through cable with a crossover cable.

B. Change the subnet mask of the hosts to/25.

C. Change the subnet mask of the hosts to /26.

D. Change the address of Workstation A to 192.0.2.15.

E. Change the address of Workstation B to 192.0.2.111.

Answer: A,B


Drag each description on the left to the appropriate term on the right. Not all descriptions are used.

Answer:



BeITCert

ified.c

om

Explanation:

Holddown timer - prevents a router from improperly reinstating a route from a regular routing table

Split horizon - prevents information about a route from being sent in the direction from which the

route was learned

Defining a maximum - prevents invalid updates from looping the internetwork indefinitely

Route poisoning - causes a routing protocol to advertise an infinite metric for a failed route

Triggered update - decreases convergence time by immediately sending route information in

response to a topology change

QUESTION NO: 28

Which statement about IPv6 is true?

A. Addresses are not hierarchical and are assigned at random.

B. Only one IPv6 address can exist on a given interface.

C. There are 2.7 billion addresses available.

D. Broadcasts have been eliminated and replaced with multicasts.

Answer: D

Explanation:

This question is to check the concept of IPv6.

IPv4 supports three address types: unicast, multicast and broadcast.

In IPv6, broadcasts have been eliminated and replaced with multicasts. At the same time, IPv6

introduces another address type - anycast.

QUESTION NO: 29



BeITCert

ified.c

omRefer to the exhibit. The network is converged. After link-state advertisements are received from

Router_A, what information will Router_E contain in its routing table for the subnets 208.149.23.64

and 208.149.23.96?

A. 208.149.23.64(110/13] via 190.173.23.10,00:00:07, FastEthemet0/0

208.149.23.96(110/13] via 190.173.23.10,00:00:16, FastEthemet0/0

B. 208.149.23.64(110/1] via 190.172.23.10,00:00:07, Serial1/0

208.149.23.96(110/3] via 190.173.23.10,00:00:16, FastEthemetO/0

C. 208.149.23.64(110/13] via 190.173.23.10,00:00:07, Serial1/0

208.149.23.96(110/13] via 190.173.23.10,00:00:16, Serial1/0

208.149.23.96(110/13] via 190.173.23.10,00:00:16, FastEthemetO/0

D. 208.149.23.64(110/3] via 190.172.23.10,00:00:07, Serial1/0

208.149.23.96(110/3] via 190.173.23.10,00:00:16, Serial1/0

Answer: A

QUESTION NO: 30

Refer to the exhibit. Which two statements about the configuration of the switch interface are

correct? (Choose two.)

A. The switchport belongs only to VLAN 2.

B. By default, all switch ports are members of VLAN 1005.

C. Interface fa0/0 will be in both VLAN 1 (by default) and VLAN 2.

D. The exhibit shows interface fa0/0 to be dynamically mapped to VLAN 2.



BeITCert

ified.c

om

E. A network host can be connected to this interface.

Answer: A,E

Explanation:

On a Cisco switch, ports are assigned to a single VLAN. These ports are referred to as access

ports and provide a connection for end users or node devices, such as a router or server. By

default all devices are assigned to VLAN 1, known as the default VLAN . After creating a VLAN,

you can manually assign a port to that VLAN and it will be able to communicate only with or

through other devices in the VLAN. In this case, the port has been manually assigned to VLAN 2,

not the default value of VLAN 1.

QUESTION NO: 31

You are a network technician for CP. You enter the following line into the router:

R1(config)# access-list 106 deny tcp 192.168.254.0 0.0.0.255 any eq www

What is the effect of this configuration?

A. Web pages from the Internet cannot be accessed by hosts in the 192.168.254.0 LAN.

B. The change has no effect on the packets being filtered.

C. No hosts in the 192.168.254.0 LAN except 192.168.254.7 can access web pages from the

Internet.

D. All traffic from the 192.168.254.0 LAN to the Internet is permitted.

Answer: B



BeITCert

ified.c

om

Explanation:

Traffic that comes into the router is compared to ACL entries based on the order that the entries

occur in the router. New statements are added to the end of the list. The router continues to look

until it has a match. If no matches are found when the router reaches the end of the list, the traffic

is denied. For this reason, you should have the frequently hit entries at the top of the list. There is

an "implied deny" for traffic that is not permitted. A single-entry ACL with only one "deny" entry has

the effect of denying all traffic. You must have at least one "permit" statement in an ACL or all

traffic is blocked. In this example, since the statement will be added to the end of the access list,

and since there is already an entry that permits all IP traffic, the www traffic will be allowed, all

traffic will never reach this access list entry.

QUESTION NO: 32

You are a network administrator. The following graphic shows the topology and configuration

information of the network. You have configured the router to enable communication between the

VLANs. You are required to configure switch port fa0/1 to establish a link with router R1 using the

IEEE standard protocol, which IOS commands should be used? (Choose three.)

A. SW1(config)# interface fastethernet 0/1

B. SW1(config-if)# switchport trunk encapsulation dot1q

C. SW1(config-if)# switchport mode access

D. SW1(config-if)# switchport mode trunk



BeITCert

ified.c

om

Answer: A,B,D

Explanation:

.

QUESTION NO: 33

A network administrator wants to ensure that only the server can connect to port Fa0/1 on a

Catalyst switch. The server is plugged into the switch Fa0/1 port and the network administrator is

about to bring the server online. What can the administrator do to ensure that only the MAC

address of the server is allowed by switch port Fa0/1? (Choose two.)

A. Configure an access list on the switch to deny server traffic from entering any port other than

Fa0/1.

B. Configure port security on Fa0/1 to reject traffic with a source MAC address other than that of

the server.

C. Configure port Fa0/1 to accept connections only from the static IP address of the server.

D. Configure the MAC address of the server as a static entry associated with port Fa0/1.

Answer: B,D

Explanation:

You can use port security to block input to an Ethernet, Fast Ethernet, or Gigabit Ethernet port

when the MAC address of the station attempting to access the port is different from any of the

MAC addresses specified for that port.

When a secure port receives a packet, the source MAC address of the packet is compared to the

list of secure source addresses that were manually configured or autoconfigured (learned) on the

port. If a MAC address of a device attached to the port differs from the list of secure addresses,

the port either shuts down permanently (default mode), shuts down for the time you have

specified, or drops incoming packets from the insecure host. The port's behavior depends on how

you configure it to respond to a security violation.

When a security violation occurs, the Link LED for that port turns orange, and a link-down trap is

sent to the Simple Network Management Protocol (SNMP) manager. An SNMP trap is not sent if

you configure the port for restrictive violation mode. A trap is sent only if you configure the port to

shut down during a security violation.

QUESTION NO: 34

Refer to the exhibit. Some 2950 series switches are connected to the conference area of the

corporate headquarters network. The switches provide two to three jacks per conference room to

host laptop connections for employees who visit the headquarters office. When large groups of

employees come from other locations, the network administrator often finds that hubs have been



BeITCert

ified.c

om

connected to wall jacks in the conference area although the ports on the access layer switches

were not intended to support multiple workstations.

What action could the network administrator take to prevent access by multiple laptops through a

single switch port and still leave the switch functional for its intended use?

A. Configure static entries in the switch MAC address table to include the range of addresses used

by visiting employees.

B. Configure an ACL to allow only a single MAC address to connect to the switch at one time.

C. Use the mac-address-table 1 global configuration command to limit each port to one source

MAC address.

D. Implement Port Security on all interfaces and use the port-security maximum 1 command to

limit port access to a single MAC address.

E. Implement Port Security on all interfaces and use the port-security mac-address sticky

command to limit access to a single MAC address.

F. Implement Port Security at global configuration mode and use the port-security maximum 1

command to allow each switch only one attached hub.

Answer: D

QUESTION NO: 35

This output is generated by a switch that has 24 ports, however, some of the ports missing from

VLAN1. Why?



BeITCert

ified.c

omA. The missing ports are configured as trunk ports.

B. The missing ports are in VLAN 86.

C. The missing ports are administratively disabled.

D. The missing ports have a status problem such as a speed or duplex mismatch.

Answer: A

Explanation:

The show vlan command displays the VLAN information and ports in all VLANs. This command

displays only the ports in access mode. The missing ports must be configured as trunks.

QUESTION NO: 36

What can be determined from the router output shown in the graphic?



BeITCert

ified.c

omA. 200.1.1.64 is a default route.

B. The output shows that there are three default routes.

C. The output came from router R2.

D. The output came from a router that has four physical interfaces.

E. EIGRP is in use in this network.

Answer: E

Explanation:

In the routing table the "D" letter marks the route learned from EIGRP routing protocol. Based on

the routing table above, there are 4 directly connected IP interfaces, 2 EIGRP learned routes

(which means that EIGRP is in use on this network) and a static default route was also configured.

QUESTION NO: 37

The following is the graphic and routing table for router R1. Based on the output of the R1# show

ip route command and the information displayed in the graphic, which of the following is a potential

routing problem?



BeITCert

ified.c

omA. the use of summarization for discontiguous networks

B. the use of CIDR with a routing protocol that does not support it

C. the use of VLSM with a routing protocol that does not support it

D. the use of the no auto-summary command with a protocol that does not support summarization

E. the use of the ip route 0.0.0.0 0.0.0.0 command with a routing protocol that does not support it

Answer: A

Explanation:

By default, EIGRP will automatically summarize networks at their network boundary, which can

cause problems with dis-contiguous IP networks. Since the IP routing table does indeed show a

summary route to null 0, the default behavior of EIGRP was not modified. In this network, it would

be best to disable the automatic summarization feature of EIGRP.

QUESTION NO: 38

A company with 25 computers decides to connect its network to the Internet. The company would

like for all of the computers to have access to the Internet at the same time, but the company only

has four usable public IP addresses. What should be configured on the router so that all

computers can connect to the Internet simultaneously?

A. static NAT



BeITCert

ified.c

om

B. global NAT

C. dynamic NAT

D. static NAT with ACLs

E. dynamic NAT with overload

Answer: E

Explanation:

NAT overload, also called many to one NAT or Port Address Translation (PAT) allows for many IP

hosts to share a single IP address when connecting to the outside. In this case, the use of

dynamic NAT with overloading will allow for the 25 hosts to use an IP address from the NAT pool,

which will contain the 4 public IP addresses.

QUESTION NO: 39

The Company frame relay network is displayed as follows:

Which statement describes DLCI 17?

A. DLCI 17 describes a PVC on R2. It cannot be used on R3 or R1.

B. DLCI 17 describes the dial-up circuit from R2 and R3 to the service provider.

C. DLCI 17 describes the ISDN circuit between R2 and R3.

D. DLCI 17 is the Layer 2 address used by R2 to describe a PVC to R3.

Answer: D

Explanation:

DLCI-Data Link Connection Identifier Bits: The DLCI serves to identify the virtual connection so

that the receiving end knows which information connection a frame belongs to. Note that this DLCI

has only local significance. Frame Relay is strictly a Layer 2 protocol suite



BeITCert

ified.c

om

QUESTION NO: 40

When receiving a unicast frame with a destination MAC that is listed in the switch table, what will

an Ethernet switch do?

A. The switch will return a copy of the frame out the source port.

B. The switch will forward the frame to a specific port.

C. The switch will not forward unicast frames.

D. The switch will remove the destination MAC from the switch table.

E. The switch will forward the frame to all ports except the port on which it was received.

Answer: B

QUESTION NO: 41

Based on the exhibit provided, which access layer switch port will assume the discarding role at

the end of an RSTP election process?

A. Switch 4, port fa0/11

B. Switch 3, port Gi0/1

C. Switch 4, port fa0/2

D. Switch 3, port Gi0/2

Answer: A

QUESTION NO: 42

Study the exhibit presented carefully. What is the most efficient summarization that can be used

by R1 to advertise its networks to R2?



BeITCert

ified.c

omA. 172.1.0.0/22

B. 172.1.4.0/24

172.1.5.0/24

172.1.6.0/24

172.1.7.0/24

C. 172.1.4.0/22

D. 172.1.0.0/21

Answer: C

QUESTION NO: 43

Refer to the exhibit. SwX was taken out of the production network for maintenance.

It will be reconnected to the Fa0/16 port of Sw-AC3. What happens to the network when it is

reconnected and a trunk exists between the two switches?



BeITCert

ified.c

om

SwX#show vlan | SwX#show vtp stat

Sw-AC3#show vtp stat



BeITCert

ified.c

om

Sw-AC3#show vlan

A. All existing switches will have the students,admin,faculty,Servers,Management,Production,and

no-where VLANs.

B. All VLANs except the default VLAN will be removed from all switches.

C. The VLANs Servers,Managements,Production,and no-where will be removed from existing

switches.

D. The VLANs Servers,Management,Production,and no-where will replace the VLANs on SwX.

Answer: C

QUESTION NO: 44

A network administrator is trying to add a new router into an established OSPF network. The

networks attached to the new router do not appear in the routing tables of the other OSPF routers.

Given the information in the partial configuration shown below, what configuration error is causing

this problem?

Router (config)# router ospf 1

Router (config-router)# network 10.0.0.0 255.0.0.0 area 0

A. The process id is configured improperly.

B. The OSPF area is configured improperly.

C. The network wildcard mask is configured improperly.

D. The network number is configured improperly.

E. The AS is configured improperly.

F. The network subnet mask is configured improperly.

Answer: C

Explanation:

The network command specifies the IP address (10.10.10.0) followed by the wildcard mask (not

the subnet mask) and the area that is to be associated with the OSPF address range (in this case,

area 0). The wildcard mask indicates in binary how much of the IP address much be matched with

0s indicating that the bits must match and 1 indicating that they may vary. Thus 0.0.0.255 or

00000000.00000000.00000000.11111111 indicates that any bit in the last octet can vary while all

bits in the first 3 octets must match the network address (in other words, 10.10.10.xx)

Incorrect Answers:

A: This is not the problem, assuming that all 10.X.X.X networks are to be configured for OSPF.

D: Here the process ID is 99, which is valid.



BeITCert

ified.c

om

QUESTION NO: 45

Based on the topology table that is shown in the exhibit and assuming that variance is not

configured for EIGRP, which route or routes should appear in the routing table?

A. D 192.168.2.0/24 [90/3815424] via 192.168.8.18, 00:27:50, Serial0/2

B. D 192.168.2.0/24 [90/2707456] via 192.168.8.22, 00:27:50, Serial0/0 [90/3815424] via

192.168.8.18, 00:27:50, Serial0/2

C. D 192.168.8.24/30 [90/2681856] via 192.168.8.22, 00:27:50, Serial0/0

D. D 192.168.8.20 (2707456/2195456), Serial0/1

Answer: C

QUESTION NO: 46

Refer to the topology and partial router configurations shown in the exhibit. The network is fully

operational and all routing tables are converged. Which route will appear in the output of the show

ip route command issued on the Branch router?



BeITCert

ified.c

omA. S* 0.0.0.0/0 [1/0] via 192.168.10.82

B. R 172.16.11.4/30 [120/1] via 192.168.10.82, 00:00:22, Serial0/0

C. R 192.168.10.80/30 [120/0] via 192.168.10.81, 00:00:22, Serial0/0

D. R 192.168.11.0/24 [120/1] via 192.168.10.81, 00:00:22, Serial0/0

E. C 192.168.12.0/24 is directly connected, FastEthernet0/0

Answer: A

QUESTION NO: 47

PPP is short for Point-to-Point Protocol. Which PPP subprotocol negotiates authentication

options?

A. ISDN

B. LCP

C. NCP

D. SLIP

E. DLCI

Answer: B

Explanation:

LCP: A method of establishing, configuring, maintaining, and terminating the point-to-point

connection.

Link-establishment phase LCP packets are sent by each PPP device to configure and test the

link. These packets contain a field called the Configuration Option that allows each device to see

the size of the data, compression, and authentication. If no Configuration Option field is present,

then the default configurations are used.



BeITCert

ified.c

om

QUESTION NO: 48

What is the purpose of the command shown below?

vtp password Fl0r1da

A. It is used to validate the sources of VTP advertisements sent between switches.

B. It is used to access the VTP server to make changes to the VTP configuration.

C. It allows two VTP servers to exist in the same domain, each configured with different

passwords.

D. It is the password required when promoting a switch from VTP client mode to VTP server

mode.

E. It is used to prevent a switch newly added to the network from sending incorrect VLAN

information to the other switches in the domain.

Answer: A

QUESTION NO: 49

Why has the network shown in the exhibit failed to converge?

A. The no auto-summary command needs to be applied to the routers.

B. The network numbers have not been properly configured on the routers.

C. The subnet masks for the network numbers have not been properly configured.

D. The autonomous system number has not been properly configured.

E. The bandwidth values have not been properly configured on the serial interfaces.

Answer: A

Explanation:

To restore the default behavior of automatic summarization of subnet routes into network-level

routes, use the auto-summary command in router configuration mode. To disable this function and

transmit subprefix routing information across classful network boundaries, use the no form of this

command. Without disabling auto summarization, each router will advertise the 192.168.20.0/24

route, and the specific /26 networks will not be known.



BeITCert

ified.c

om

QUESTION NO: 50

Which IP addressing scheme is correct about the topology displayed in the exhibit?

A. host 1 - 192.168.10.22/24;

host 2 - 192.168.10.23/24;

host 3 -192.168.11.23/24

B. host 1 - 192.168.10.22/24;

host 2 - 192.168.10.23/24;

host 3 192.168.10.24/24

C. host 1 - 192.168.10.22/24;

host 2 - 192.168.11.23/24;

host 3 - 192.168.10.23/24

D. host 1 - 192.168.11.22/24;

host 2 - 192.168.11.23/24;

host 3 -192.168.10.24/24

Answer: C

Explanation:

Hosts in the same VLAN must belong to the same IP subnet. In this case, hosts A and C should

have IP addresses in one subnet, and host B should have an IP address in a separate subnet.

Only choice A is correct.

Incorrect Answers:



BeITCert

ified.c

om

A: In this case, all three hosts are in the same 192.168.10.0/24 subnet, even though there are 2

different VLANs

B: In this case, hosts A and B are both in the 192.168.10.0/24 subnet, but they are in different

VLANs

D: Here hosts A and B are both in the 192.168.11.0/24 subnet even though they are in different

VLANs.

QUESTION NO: 51

Which of the following statements describe the network shown in the graphic? (Choose two.)

A. There are two broadcast domains in the network.

B. There are five collision domains in the network.

C. There are four collision domains in the network.

D. There are seven collision domains in the network.

E. There are six broadcast domains in the network.

F. There are four broadcast domains in the network.

Answer: A,D

QUESTION NO: 52

Part of the Company WAN is shown below:

Refer to the exhibit. Subnet 10.1.3.0/24 is unknown to router RTB. Which router command will

prevent router RTB from dropping a packet destined for the 10.1.3.0/24 network if a default route

is configured?



BeITCert

ified.c

om

A. ip default-network

B. network 10.1.1.0

C. ip classless

D. network 10.1.1.0 0.0.0.255 area 0

Answer: C

QUESTION NO: 53

You are a network administrator . You have added a new subnet with 60 hosts to the company

network. To provide enough usable addresses while wasting the fewest addresses, which subnet

address should this network use?

A. 192.168.1.64/27

B. 192.168.1.64/26

C. 192.168.1.56/27

D. 192.168.1.56/26

Answer: B

Explanation:

.



BeITCert

ified.c

om

QUESTION NO: 54

Match the proper relationship between each category and its corresponding router output line.

Each router output line is the result of a show ip interface command. Not all categories are used

1. Layer 1 problem

2. Layer 2 problem

3. Layer 3 problem

4. port operational

5. port disabled

I) Serial0/1 is up, line protocol is up

II) Serial0/1 is up, line protocol is down

III) Serial0/1 is down, line protocol is down

IV) Serial0/1 is administratively down, line protocol is down

A. I-4;II-2;III-1;IV-5

B. I-4;II-3;III-1;IV-5

C. I-4;II-3;III-2;IV-5

D. I-4;II-2;III-1;IV-3

Answer: A

Explanation:

.

QUESTION NO: 55

For the following access list statements, which one will block all traffic with a destination TCP port

number of 5190 while not affecting other traffic?

A. access-list 180 deny tcp any any eq 5190

B. access-list 180 deny tcp any eq 5190 any

C. access-list 180 deny ip any eq 5190 any

D. access-list 180 deny tcp any eq 5190

E. access-list 180 deny telnet any any 5190

Answer: A

Explanation:

Creating an extended ACL: These lists are created and applied to an interface as either inbound

or outbound packet filters. They are implemented in this format: Access-list [list number] [permit |

deny] [protocol] [source address] [source-mask] [destination address] [destination-mask] [operator]

[port] [log] List Number -A number between 100 and 199 (Think of it as the name of the list.)

Permit | Deny -Whether to permit or deny this packet of information if conditions match Protocol -



BeITCert

ified.c

om

Type of protocol for this packet (i.e., IP, ICMP, UDP, TCP, or protocol number) Source Address -

Number of the network or host that the packet is from (Use the dotted-decimal format

192.168.1.12 or use the keyword ANY as an abbreviation for an address of 0.0.0.0

255.255.255.255 or use HOST and the dotted-decimal address.) Source Mask -The network mask

to use with the source address (Cisco masks are a little different, 0 = octet must match exactly;

255 = octet is not significant or doesn't matter.) Destination Address -The address that the packet

is going to, or ANY Destination Mask -The network mask to use with the destination address (if

you specify one) Operator (optional entry)-This applies to TCP or UDP ports only eq=equal lt=less

than gt=greater than neq=not equal range=a range of ports; you must specify two different port

numbers est=established connections Port (optional entry)-TCP/UDP destination port number or

service Log -Whether to log (if logging is enabled) this entry to the console

A sample inbound ACL would be: access-list 100 deny ip 10.0.0.0 0.255.255.255 any log access-

list 100 deny ip 172.16.0.0 0.15.255.255 any log access-list 100 deny ip 192.168.0.0 0.0.255.255

any log access-list 100 deny ip any host 127.0.0.1 log access-list 100 permit ip any [your network

IP address] [your network mask] est access-list 100 deny ip [your network IP address] [your

network mask] any log access-list 100 deny tcp any any eq 22222 access-list 100 deny tcp any

any range 60000 60020 log access-list 100 deny udp any any eq snmp log access-list 100 permit

ip any any

Reference: http://articles.techrepublic.com.com/5100-1035_11-1058307.html

QUESTION NO: 56

Multiple copies of the same unicast frame are likely to be transmitted in a switched LAN in which

circumstance?

A. when a dual ring topology is in use

B. in an improperly implemented redundant topology

C. when upper-layer protocols require high reliability

D. after broken links are re-established

E. during high traffic periods

Answer: B

Explanation:

A redundant topology eliminates single points of failure, but it also causes broadcast storms,

multiple frame copies, and MAC address table instability problems. Multiple Frame Copies--when

a new switch is added, the other switches may not have learned its correct MAC address. The

host may send a unicast frame to the new switch. The frame is sent through several paths at the

same time. The new switch will receive several copies of the frame. This causes MAC database

instability. MAC database instability results when multiple copies of a frame arrive on different

ports of a switch. Layer 2 has no mechanism to stop the loop. This is the main reason for the

Spanning Tree Protocol(STP) IEEE 802.1d which was developed to prevent routing loops.



BeITCert

ified.c

om

If multiple connections between switches are created for redundancy purposes, network loops can

occur iin an imprperly designed topology. Spanning Tree Protocol (STP) is used to stop network

loops while still permitting redundancy.

QUESTION NO: 57

You are a network Administrator. Telnet has been used by unauthorized users to gain access to a

company router. You want to configure and apply an access list to allow Telnet access to the

router, but only from your computer. To allow only the IP address 172.16.3.3 to have Telnet

access to the router, which group of commands would be the best choice?

A. access-list 101 permit tcp any host 172.16.3.3 eq telnet

interface s0/0

ip access-group 101 in

B. access-list 3 permit host 172.16.3.3

line vty 0 4

access-class 3 in

C. access-list 101 permit tcp any host 172.16.3.3 eq telnet

access-list 101 permit ip any any

interface s0/0


D. access-list 3 permit host 172.16.3.3

line vty 0 4


Answer: B

Explanation:

To restrict incoming and outgoing connections between a particular vty (into a Cisco device) and

the addresses in an access list, use the access-class command in line configuration mode.

Example:

The following example defines an access list that permits only hosts on network 192.89.55.0 to

connect to the virtual terminal ports on the router:

access-list 12 permit 192.89.55.0 0.0.0.255

line 1 5

access-class 12 in

Reference:

http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_command_reference_chapter

09186a00800873c8.html#wp1017389



BeITCert

ified.c

om

QUESTION NO: 58

You work as a network engineer, study the exhibit carefully. The routers are running RIPv2. Which

one of the following addressing schemes could meet the needs of this network yet waste the

fewest addresses?

A. Network 1: 192.168.10.0/27

Network 2: 192.168.10.64/28

Network 3: 192.168.10.96/29

Serial link 1: 192.168.10.112/30

Serial link 2: 192.168.10.116/30

B. Network 1: 192.168.10.0/26

Network 2: 192.168.10.64/27

Network 3: 192.168.10.96/28

Serial link 1: 192.168.10.112/30

Serial link 2: 192.168.10.116/30

C. Network 1: 192.168.10.0/26

Network 2: 192.168.10.64/28

Network 3: 192.168.10.80/29

Serial link 1: 192.168.10.88/30

Serial link 2: 192.168.10.96/30

D. Network 1: 192.168.10.0/26

Network 2: 192.168.10.64/26

Network 3: 192.168.10.128/26

Serial link 1: 192.168.20.0/24

Serial link 2: 192.168.30.0/24

Answer: B

QUESTION NO: 59



BeITCert

ified.c

om

A network administrator wants to ensure that only the server can connect to port Fa0/1 on a

Catalyst switch. The server is plugged into the switch Fa0/1 port and the network administrator is

about to bring the server online. What can the administrator do to ensure that only the MAC

address of the server is allowed by switch port Fa0/1? (Choose two.)

A. Configure port Fa0/1 to accept connections only from the static IP address of the server.

B. Configure the MAC address of the server as a static entry associated with port Fa0/1.

C. Configure port security on Fa0/1 to reject traffic with a source MAC address other than that of

the server.

D. Employ a proprietary connector type on Fa0/1 that is incompatible with other host connectors.

Answer: B,C

Explanation:

You can use port security to block input to an Ethernet, Fast Ethernet, or Gigabit Ethernet port

when the MAC address of the station attempting to access the port is different from any of the

MAC addresses specified for that port.

When a secure port receives a packet, the source MAC address of the packet is compared to the

list of secure source addresses that were manually configured or autoconfigured (learned) on the

port. If a MAC address of a device attached to the port differs from the list of secure addresses,

the port either shuts down permanently (default mode), shuts down for the time you have

specified, or drops incoming packets from the insecure host. The port's behavior depends on how

you configure it to respond to a security violation.

When a security violation occurs, the Link LED for that port turns orange, and a link-down trap is

sent to the Simple Network Management Protocol (SNMP) manager. An SNMP trap is not sent if

you configure the port for restrictive violation mode. A trap is sent only if you configure the port to

shut down during a security violation.

QUESTION NO: 60

To support the following IP addressing scheme, which routing protocols will be used? (Choose

three.)

Network 1 - 192.168.10.0 /26

Network 2 - 192.168.10.64 /27

Network 3 - 192.168.10.96 /27

Network 4 - 192.168.10.128 /30

Network 5 - 192.168.10.132 /30

A. EIGRP

B. IGRP

C. OSPF



BeITCert

ified.c

om

D. RIP version 2

E. RIP version 1

F. VTP

G. CDP

Answer: A,C,D

Explanation:

EIGRP and OSPF support Variable Length Subnet Masks (VLSM) and provide for both automatic

and manual route summarization configurations. RIPv2 is an enhanced version of RIP, and

overcame some of the limitations of RIP by introducing support for VLSM.

Incorrect Answers:

B: IGRP and RIP are relatively old and simplistic routing protocols that were developed before the

concepts of VLSM and route summarization.

E: IGRP and RIP are relatively old and simplistic routing protocols that were developed before the

concepts of VLSM and route summarization.

F: VTP is the VLAN Trunking Protocol, used in switched LAN environments to carry VLAN

information. It is not a routing protocol.

G: CDP is the Cisco Discovery Protocol, used between neighboring Cisco devices to automatically

discover information. It is not a routing protocol.

QUESTION NO: 61

A network administrator would like to implement NAT in the network shown in the graphic to allow

inside hosts to use a private addressing scheme. Where should NAT be configured?

A. Corporate router



BeITCert

ified.c

om

B. Engineering router

C. Sales router

D. all routers

E. all routers and switches

Answer: A

Explanation:

NAT should always be configured on the border device. It can be a either a border router or a PIX

firewall connecting to the Internet.

QUESTION NO: 62

Look at the graphic in the following. With the output from the router, can you determine which of

the following are correct? (Choose two.)

A. Router R uses a link-state routing protocol.

B. Router R will send routing updates out the Serial0/1 interface.

C. Router R will receive routing updates on the Serial0/0 interface.

D. Router R will send routing updates out the Serial0/0 interface.



BeITCert

ified.c

om

Answer: C,D

Explanation:

.

QUESTION NO: 63

Identify the four valid IPv6 addresses. (Choose four.)

A. 2000::

B. 2002:c0a8:101::42

C. 2003:dead:beef:4dad:23:46:bb:101

D. ::192:168:0:1

E. 2001:3452:4952:2837::

F. ::

Answer: B,C,D,F

Explanation:

From RFC 1884: IP Version 6 Addressing Architecture

There are three conventional forms for representing IPv6 addresses as

text strings:

1. The preferred form is x:x:x:x:x:x:x:x, where the 'x's are the

hexadecimal values of the eight 16-bit pieces of the address.

Examples:

FEDC:BA98:7654:3210:FEDC:BA98:7654:3210

1080:0:0:0:8:800:200C:417A

Note that it is not necessary to write the leading zeros in an

individual field, but there must be at least one numeral in

every field (except for the case described in 2.).

2. Due to the method of allocating certain styles of IPv6

addresses, it will be common for addresses to contain long

strings of zero bits. In order to make writing addresses

containing zero bits easier a special syntax is available to

compress the zeros. The use of "::" indicates multiple groups

of 16-bits of zeros. The "::" can only appear once in an



BeITCert

ified.c

om

address. The "::" can also be used to compress the leading

and/or trailing zeros in an address.

For example the following addresses:

1080:0:0:0:8:800:200C:417A a unicast address

FF01:0:0:0:0:0:0:43 a multicast address

0:0:0:0:0:0:0:1 the loopback address

0:0:0:0:0:0:0:0 the unspecified addresses

may be represented as:

1080::8:800:200C:417A a unicast address

FF01::43 a multicast address

::1 the loopback address

:: the unspecified addresses

3. An alternative form that is sometimes more convenient when

dealing with a mixed environment of IPv4 and IPv6 nodes is

x:x:x:x:x:x:d.d.d.d, where the 'x's are the hexadecimal values

of the six high-order 16-bit pieces of the address, and the 'd's

are the decimal values of the four low-order 8-bit pieces of the

address (standard IPv4 representation). Examples:

0:0:0:0:0:0:13.1.68.3

0:0:0:0:0:FFFF:129.144.52.38

or in compressed form:

::13.1.68.3

::FFFF:129.144.52.38

Reference : http://www.faqs.org/rfcs/rfc1884.html

.

QUESTION NO: 64



BeITCert

ified.c

om

Company Widgets is redesigning the network that connects its three locations, The administrator

gave the networking team 192.168.186.0 to use for addressing the entire network. After subnetting

the address, the team is ready to assign the addresses. The administrator plans to configure ip

subnet-zero and use RIP v2 as the routing protocol. As a member of the networking team, you

must address the network and at the same time conserve unused addresses for future growth.

With those goals in mind, assign the correct host addresses for the router interface. One of the

routers is partially configured. Not all of the host addresses are necessary.

I) 192.168.186.173/26

II) 192.168.186.129/30

III) 192.168.186.128/30

IV) 192.168.186.152/28

V) 192.168.186.143/29

VI) 192.168.186.3/25

A. 1-VI;2-II;3-I;4-IV

B. 1-VI;2-I;3-II;4-V

C. 1-V;2-II;3-II;4-IV

D. 1-VI;2-I;3-III;4-IV

Answer: A

Explanation:

.

QUESTION NO: 65

In order to establish a secure terminal connection to a remote network device, which protocol will

you use?

A. SNMPv1



BeITCert

ified.c

om

B. WEP

C. SSH

D. SNMPv2

E. ARP

F. Telnet

Answer: C

QUESTION NO: 66

In an improperly implemented redundant topology, multiple copies of the same unicast frame are

likely to be transmitted in a switched LAN

A. False

B. True

Answer: B

Explanation:

.

QUESTION NO: 67

What does STATUS=ACTIVE indicate based on the output of the show frame-relay pvc

command?

A. The Frame Relay switch is correctly programmed with the DLCI and is operational.

B. The router R1 is actively broadcasting to establish a link to the Frame Relay switch.

C. The router R1 is connected to the local Frame Relay switch, but not to the far end device.

D. The PVC is experiencing congestion.

Answer: A



testking cisco 640-816

Documents

vtp transparent

restrictive

simplistic

vtp client

port turns

local addresses

ip addressing

drops incoming