Home > CCNA – Drag and Drop 3

CCNA – Drag and Drop 3

February 24th, 2011 Go to comments

Here you will find answers to CCNA Drag and Drop Questions – Part 3

Question 1

Drag the security features on the left to the specific security risks they help protect against on the right. (Not all options are used)

SecurityFeatures.jpg

 

Answer:

1) VTY password: remote access to device console
2) console password: access to the console 0 line
3) access-group: access to connected networks or resources
4) service password-encryption: viewing of passwords
5) enable secret: access to privileged mode

The unselected left-box – CHAP – is used to verify the identity of the peer by means of a three-way handshake.

Question 2

Refer to the exhibit. PC-A is sending packets to the FTP server. Consider the packets as they leave RA interface Fa0/0 forwards RB. Drag the correct frame and packet address to their places in the table.

ip_mac.jpg

 

Answer:

Source MAC: 0000.0C93.9999
Destination MAC: 0000.0C89.3333
Source IP: 172.16.21.7
Destination IP: 172.16.34.250

Explanation

Remember these rules:

The IP addresses (of source and destination) of a packet never change during the transportation through the network. For example if PC-A wants to send a packet to PC-Z then the source and destination IP addresses of the packet will be the IP addresses of PC-A and PC-Z no matter how many devices they go through.

The MAC addresses, conversely, will change while passing the devices. The source MAC address is the address of the last sender and the destination MAC address is the address of the next device.

Question 3

As a network administrator, you are required to configure the network security policy. And the policy requires that only one host be permitted to attach dynamically to each switch interface. If that policy is violated, the interface should shut down. Which two commands must the network administrator configure on the 2950 Catalyst switch to meet this policy? Please choose appropriate commands and drag the items to the proper locations.

switch_port_security.jpg

 

Answer:

Appropriate commands:

SW(config-if)# switchport port-security maximum 1
SW(config-if)# switchport port-security violation shutdown

Question 4

The left describes boot sequence, while the right describes the orders. Drag the items on the left to the proper locations.

BootSequence.jpg

 

Answer:

1) Step 1: The power on self test executes.
2) Step 2: The bootstrap loader in ROM executes.
3) Step 3: The IOS is located and loaded based on boot system commands in NVRAM.
4) Step 4: The configuration file is loaded from NVRAM.
5) Step 5: If no configuration file is located, the setup dialog initiates.

Explanation

When a router boots up, it performs a series of steps, called the boot sequence, to test the hardware and load the necessary software. The boot sequence consists of the following steps:

1) Power on self test (POST): tests the hardware to verify that all components of the device are operational and present.
2) The bootstrap loader in ROM executes: The bootstrap loader is a program in ROM that is used to find where a valid Cisco IOS image is located.
3) If a valid Cisco IOS image is located, it is loaded.
4) IOS loads configuration file. Once the IOS image is loaded, it will search for a valid startup configuration in NVRAM.
5) If a valid startup configuration file cannot be found, the router will load the System Configuration Dialog (sometimes called setup mode). This mode allows you to perform the initial configuration of the router.

Question 5

Drag and Drop question. Drag the items to the proper locations.

Routing has been configured on the local router with these commands:
Local(config)# ip route 0.0.0.0 0.0.0.0 192.168.1.1
Local(config)# ip route 10.1.0.0 255.255.255.0 192.168.2.2
Local(config)# ip route 10.1.0.0 255.255.0.0 192.168.3.3

Drag each destination IP address on the top to its correct next hop address at the bottom.

ip_route.jpg

 

Answer:

Next hop 192.168.1.1:
+ 10.2.1.3
+ 10.6.8.4

Next hop 192.168.2.2:
+ 10.1.0.14
+ 10.1.0.123

Next hop 192.168.3.3:
+ 10.1.1.10
+ 10.1.4.6

Explanation

If we have many entries matching for next hop ip address then the router will choose the one with most specific path to send the packet. This is called the “longest match” rule, the route with the most bits in the mask set to “1″ will be chosen to route packet.

For example, the destination IP address of 10.1.1.10 will match two “ip route” commands:

ip route 10.1.0.0 255.255.255.0 192.168.2.2
ip route 10.1.0.0 255.255.0.0 192.168.3.3

But the first command is more specific (10.1.0.0/24 is more specific than 10.1.0.0/16) so the packet will be routed to 192.168.2.2.

Question 6

If a Cisco router has learned about network 10.1.1.0 from multiple sources, the router will select and install only one entry into the routing table. Indicate the order of preference that the router will use by dragging the routes on the left to the order of preference category on the right.

Routing_Priority.jpg

 

Answer:

1) First preference: S 10.1.1.0 is directly connected, Serial1
2) Second preference: S 10.1 1.0/24 [1/0] via 10.1.2.2
3) Third preference: D 10.1.1.0/24 [90/2172416] via 10.1.5.5, Serial0
4) Fourth preference: O 10.1.1.0/24 [ 110/789] via 10.1.3.1, Serial0
5) Fifth preference: R 10.1.1.0/24 [120/3] via 10.1.3.1, Senal0

Explanation

Administrative distance is the first criterion that a router uses to determine which routing protocol to use if two protocols provide route information for the same destination. It is a measure of the trustworthiness of the source of the routing information. The smaller the administrative distance value, the more reliable the protocol.

In this question, notice that the destination of all routes is 10.1.1.0/24 so we need to use Administrative distance of each routing protocol to specify the priority of each route. Below lists the Administrative Distance default values of popular routing protocols:

+ Directly connected: 0
+ Static route: 1
+ EIGRP (symbolize by “D”): 90
+ OSPF (symbolize by “O”): 110
+ RIP (symbolize by “R”): 120

Comments
Comment pages
  1. shshoor
    March 1st, 2013

    ques no 2 was in the exam

  2. Anonymous
    March 11th, 2013

    can somebody explain q5 it a tricky question and i dont understand it fully please. the router will compare the more specific route how 10.1.0.0 255.255.255.0, 10.1.0.0. 255.255.0.0

  3. daBeat
    March 13th, 2013

    @anonymous: mask 255.255.255.0 tells you this route will be used to forward packets with a destination address matching the first three octets of the entry in the routing table, so everything going from 10.1.0.1 to 10.1.0.254. the entry with mask 255.255.0.0 tells you that the first 2 octets need to match, so everything from 10.1.0.1 to 10.1.255.254.

    10.1.0.14 – 10.1.0.123 – 10.1.1.10 – 10.1.4.6 <– all of them match entry with mask 255.255.0.0, but the router uses the most specific route first, so for 10.1.0.14 and 10.1.0.123, router will choose the entry with mask 255.255.255.0

  4. escote girl
    March 14th, 2013

    Hi, have you by chance considered to create regarding Nintendo or PS handheld?

  5. esscort girl
    March 21st, 2013

    Wow, marvelous blog structure! How long have you ever been blogging for? you made blogging look easy. The full glance of your website is fantastic, let alone the content material!

  6. Me too
    March 21st, 2013

    Question 2 on CCNA 2nd try today But changed direction read carefully or check arrows on mail icon

  7. Arshad
    March 26th, 2013

    Question 1 and 2 was in my today exam.

  8. Chivas
    April 20th, 2013

    Question 2 and 5 where in my exam yesterday 9tut you rock….my score was not good I missed a lot on the sims acl, VPN eigrp.

  9. Big Dr.
    April 20th, 2013

    Q2 on today’s test

  10. Zahid Ismail
    May 5th, 2013

    q2 in today exam but opposite direction as asked

  11. Zain
    May 6th, 2013

    @Chivas do the labs look similar to 9tut?

  12. Brii
    May 15th, 2013

    Q 1, 2, 3, 4, 6 all valid

  13. mohamed
    May 23rd, 2013

    Please please please guys i am preparing for the exam next month, can someone be kind enough to send me the latest dumps on my e-mail : mastermalganis@hotmail.com

  14. hi to everyone
    May 27th, 2013

    can you send the latest dumps & suggestion for CCNA? goni129@hotmail.com

  15. David Okeri
    May 29th, 2013

    Pliz i will sit for the exam next month, can someone send me the latest dumps on email: olesimbe@yahoo.com

  16. Korish
    May 29th, 2013

    Q2 & Q5 came to my exam today.

  17. Anonymous
    June 1st, 2013

    I don’t really understand the question 5.

    Can you explain the answer clearly ?

    Thank you for your feedback.

  18. Anonymous
    June 2nd, 2013

    nobody react about the question 5?

  19. andrew
    June 2nd, 2013

    U should pay attention, and care about subnet mask.

    Next hop 192.168.2.2:
    + 10.1.0.14
    + 10.1.0.123

    In ip route command there’s mask /24. So U will compare first 3 octets, 10.1.0_xxx is host’s space.

  20. row
    June 4th, 2013

    passed the exam… Qn 1 in yesteday’s exam…

  21. BB
    June 22nd, 2013

    passed the exam on the 16th, got question 2

  22. Oak
    June 29th, 2013

    q4 q6 in exam today

  23. joe90
    July 22nd, 2013

    q2 in todays exam packets to the opposite direction

  24. carlos
    July 26th, 2013

    Q2valid…9tut 100%

  25. carlos
    July 26th, 2013

    9tut the latest dump you dont need another dumps…this is the right place.

  26. raghavendra
    August 10th, 2013

    somebody please explain about question 5 i dont understand that one

  27. patma
    August 11th, 2013

    Kann sein.
    patma bb4arg48

  28. シャネル 財布 メンズ 激安
    August 12th, 2013

    three. Acquire achievable State and Congressional plan initiatives and redouble efforts to reverse Federal actions that infringe on Alaska sovereign proper to control and access its land, water and wildlife resources and keep the Alaskan life-style.
    シャネル 財布 メンズ 激安 http://www.chanelhandobaggu.com/

  29. Xaby
    August 12th, 2013

    It is perfect time to make some plans for the future and it is time to be happy. I have learn this put up and if I could I desire to counsel you few interesting issues or advice. Perhaps you could write subsequent articles relating to this article. I want to learn more issues about it!| Xaby http://www.xaby.com/

  30. Taylormade R1 Fairway Wood
    August 12th, 2013

    cheap golf clubs on the wall
    Taylormade R1 Fairway Wood http://www.ridesforall.com/discount-Taylormade-R1-Fairway-Wood-sale-280.html

  31. woodrowma
    August 19th, 2013

    ist nicht logisch
    woodrowma bb4arg48

  32. Adeel
    August 26th, 2013

    Hello Guys I hope you will be fine there. I have CCNA (640-802) and CCNA security (640-554) Vouchers on special discount of 58% for World wide, with six months expiry date till you purchase. Each voucher cost 70USD.
    Details Required For CCNA Voucher For Discount Processing:
    1-Full Name. 1st Name & Last Name (as you want to appear on certificate & documents)
    2-Country.
    3-City.
    4-State.
    5-Pin Code (or Area Code)
    6-Residential Address (or where you can collect your Certificate or further correspondence
    can be received)
    7-Date of birth
    Add me on Skype through this information which is written below:
    Skype Name: rockon660
    you can also email me at this email address which is written below:
    madeelqaiser@gmail.com
    If you have any Questions feel free to contact me.
    Thanks,
    Best regards,
    Adeel

  33. betama
    August 28th, 2013

    No hablar a este tema.
    betama bb4arg48

  34. Elias
    August 29th, 2013

    Hi,

    does anybody know if there is a specific order to answer drag and drop questions? For example 1, 2, 3 not 2, 1, 3? Because by some reason VCE accepts only the specific order…

  35. chanaka
    September 1st, 2013

    i have same issue, please advice

  36. purchase steroids
    September 5th, 2013

    what would one take to reverse the effect of sustanon injection?

  37. WindzZ
    September 8th, 2013

    Hi, sorry but maybe there is a mistake in your answer of Question No.5 about [10.1.1.10]
    Your explain:
    For example, the destination IP address of 10.1.1.10 will match two “ip route” commands:
    ip route 10.1.0.0 255.255.255.0 192.168.2.2
    ip route 10.1.0.0 255.255.0.0 192.168.3.3
    But the first command is more specific (10.1.0.0/24 is more specific than 10.1.0.0/16) so the packet will be routed to 192.168.2.2.

    But your answers:
    Next hop 192.168.3.3:
    + 10.1.1.10
    + 10.1.4.6

  38. Ryan Fahey
    September 10th, 2013

    @WindzZ

    No, it does not match, look at the route again.
    10.1.0.0 255.255.255.0 192.168.2.2

    For an address to match, every octet in the mask that is “255″
    must match the address exactly.
    For this route, the first 3 octets have “255″, so it will accept any 10.1.0.X address.
    10.1.1.10 will not match because the third octet is not “0″, it is “1″.

    The route:
    10.1.0.0 255.255.0.0 192.168.3.3

    Only the first 2 octets in the mask are “255″, so it will accept any “10.1.X.X” address.
    10.1.1.10 matches this statement.

  39. Semsaffigma
    September 11th, 2013

    http://www.ckzweb.com/
    ご自分を中心に物事を考えていらっしゃるようです。食事を終えイタリアンを出たら、本当に爆破する気ならば事前にわざわざ予告などをして、!
    http://www.ckzweb.com/c-169.html
    Busnach G:The presence and possible role of monocyte infiltration in human chronic proliferative glomerulonephritis: Light microscopic, The 105 kd protein purified in this experiment was excised Largest Collection of Plush Toys 2,304 stuffed animals,?

  40. jasostrong
    September 11th, 2013

    Thanks 9tut. I made it. I passed my CCNA 200-120 today. The sim is Access-list 1 , Access-list 2 & EIGRP. A lot of new questions like Netflow, Syslog, SNMP, VRRP, and GLBP.

  41. Chris J
    September 15th, 2013

    Thanks 9tut! q1 in my exam! passed my CCNA with a score of 960!

  42. GroodoNop
    September 16th, 2013

    http://www.tonyasdarkalley.com/c-185.html
    http://www.watchdorm.com/c-121_125.html
    or appearing in the civil services and only seek to fulfill your quest for knowledge. by the Tischenko reaction or by the reaction between the labile acetic acid a fitness center featuring allnew Precor equipment,.

  43. hawel
    September 16th, 2013

    i don’t get it for question no 2 : should i have dragging from Source to Table ?

  44. ndane
    September 17th, 2013

    conglatulation
    chris i hope this site is fertile for the exam

  45. Whatsit
    September 18th, 2013

    i agree with WindzZ

    Hi, sorry but maybe there is a mistake in your answer of Question No.5 about [10.1.1.10]
    Your explain:
    For example, the destination IP address of 10.1.1.10 will match two “ip route” commands:
    ip route 10.1.0.0 255.255.255.0 192.168.2.2
    ip route 10.1.0.0 255.255.0.0 192.168.3.3
    But the first command is more specific (10.1.0.0/24 is more specific than 10.1.0.0/16) so the packet will be routed to 192.168.2.2.

    But your answers:
    Next hop 192.168.3.3:
    + 10.1.1.10
    + 10.1.4.6

    ??? surely this should say 192.168.2.2 ???

  46. Aaris
    September 22nd, 2013

    I had Question 2 and Question 5 in my exam…I failed 815 :/ retaking in a few days.

  47. Anonymous
    September 25th, 2013

    what’s the passing score for 640-802?

  48. dan
    September 25th, 2013

    usually said 825

  49. roid cycles
    September 27th, 2013

    Some really interesting details you have written on http://www.9tut.com .Aided me a lot, just what I was searching for :D .

  50. omirwelmern
    September 27th, 2013

    http://www.azurema.com/c-184.html
    115,278 I; 117,171 II we would love to have you on our team! excessive governmental interference and regulation .

Comment pages
  1. No trackbacks yet.
Add a Comment