CCNA – Switch Questions 2
Here you will find answers to Switch Questions – Part 2
Question 1
In which circumstance are multiple copies of the same unicast frame likely to be transmitted in a switched LAN?
A. after broken links are re-established
B. in an improperly implemented redundant topology
C. when upper-layer protocols require high reliability
D. during high traffic periods
E. when a dual ring topology is in use
Answer: B
Explanation
If we connect two switches via 2 or more links and do not enable STP on these switches then a loop (which creates multiple copies of the same unicast frame) will occur. It is an example of an improperly implemented redundant topology.
Question 2
An administrator would like to configure a switch over a virtual terminal connection from locations outside of the local LAN. Which of the following are required in order for the switch to be configured from a remote location? (Choose two)
A. The switch must be configured with an IP address, subnet mask, and default gateway.
B. The switch must be connected to a router over a VLAN trunk.
C. The switch must be reachable through a port connected to its management VLAN.
D. The switch console port must be connected to the Ethernet LAN.
E. The switch management VLAN must be created and have a membership of at least one switch port.
F. The switch must be fully configured as an SNMP agent.
Answer: A C
Explanation
In order to remote access to a switch from outside of the local LAN (in a different subnet) we have to:
+ Configure an IP address on a VLAN on that switch, this VLAN is known as the management VLAN (it is usually VLAN 1)
+ Specify the default gateway for that switch so that it can send traffic to this gateway
Below shows an example of configuring remote access for a switch (suppose the management VLAN on the switch is 192.168.1.10/24 and the default-gateway IP address is 192.168.1.254)
Switch(config)#ip default-gateway 192.168.1.254
Switch(config)#interface vlan 1
Switch(config)#ip address 192.168.1.10 255.255.255.0
Switch(config)#no shutdown
Question 3
Refer to the exhibit. A junior network administrator was given the task of configuring port security on SwitchA to allow only PC_A to access the switched network through port fa0/1. If any other device is detected, the port is to drop frames from this device. The administrator configured the interface and tested it with successful pings from PC_A to RouterA, and then observes the output from these two show commands.
Which two of these changes are necessary for SwitchA to meet the requirements? (Choose two)
A. Port security needs to be globally enabled.
B. Port security needs to be enabled on the interface.
C. Port security needs to be configured to shut down the interface in the event of a violation.
D. Port security needs to be configured to allow only one learned MAC address.
E. Port security interface counters need to be cleared before using the show command.
F. The port security configuration needs to be saved to NVRAM before it can become active.
Answer: B D
Explanation
As we see in the output, the “Port Security” is in “Disabled” state (line 2 in the output). To enable Port security feature, we must enable it on that interface first with the command:
SwitchA(config-if)#switchport port-security
-> B is correct.
Also from the output, we learn that the switch is allowing 2 devices to connect to it (switchport port-security maximum 2) but the question requires allowing only PC_A to access the network so we need to reduce the maximum number to 1 -> D is correct.
Question 4
A company implements video conferencing over IP on their Ethernet LAN. The users notice that the network slows down, and the video either stutters or foils completely. What is the most likely reason for this?
A. minimum cell rate (MCR)
B. quality of service (QoS)
C. modulation
D. packet switching exchange (PSE)
E. reliable transport protocol (RTP)
Answer: B
Explanation
If the QoS is not configured correctly on the network, video traffic can slow down all your traffic. That company implemented video traffic and the network slows down -> maybe they don’t configure QoS so video traffic (which is very high and bursty) and data traffic have the same priority and video traffic eats all the bandwidth. QoS can solve this problem by giving higher priority for data (or voice) traffic over video traffic.
Question 5
Computer 1 is consoles into switch A. Telnet connections and pings run from the command prompt on switch A fail. Which of the following could cause this problem?
A. switch A does not have a cdp entry for switch B or router JAX
B. switch A does not have an IP address
C. port 1 on switch A should be an access port rather than a trunk port
D. switch A is not directly connected to router JAX
E. switch A does not have a default gateway assigned
Answer: B
Explanation
It’s a hard question to answer although it looks simple! From the output above we are sure that switch A does not have an IP address (on both Fa0/1 and on VLAN 1) so it can not ping or telnet to any other device -> B is correct.
Another answer seems to be correct is answer E – switch A does not have a default gateway assigned. We know that Switch A can not telnet to other device outside its subnet without having a default gateway. But the question only says “Telnet connections and pings run from the command prompt on switch A fail” without telling us where Switch A is trying to telnet or ping to. If it tries to connect to the outside network then E is correct. If it only want to connect to a device inside its subnet then a default gateway is not necessary.
So the best answer for this question is B!
Question 6
Refer to the exhibit. Give this output for SwitchC, what should the network administrator’s next action be?
A. Check the trunk encapsulation mode for SwitchC’s fa0/1 port.
B. Check the duplex mode for SwitchC’s fa0/1 port.
C. Check the duplex mode for SwitchA’s fa0/2 port.
D. Check the trunk encapsulation mode for SwitchA’s fa0/2 port.
Answer: C
Question 7
Refer to the graphic
A host is connected to switch port Fa0/3 with a crossover cable. However, the port indicator on switch port Fa0/3 is not on, and the host can not communicate with hosts that belong to VLAN2 on the same switch. Based on the information given, where is the problem?
A. The switch has been assigned an incorrect subnet mask T1
B. Switch port Fa0/3 is not configured as a trunk port
C. Switch port Fa0/3 has been blocked by STP
D. The switch and the hosts must be in the same subnet
E. The cable type is wrong
Answer: E
Explanation
To specify when we use crossover cable or straight-through cable, we should remember:
Group 1: Router, Host, Server
Group 2: Hub, Switch
One device in group 1 + One device in group 2: use straight-through cable
Two devices in the same group: use crossover cable
In this case we connect a switch and a host so we need a straight-through cable -> E is correct.
Question 8
Refer to the exhibit. Some 2950 series switches are connected to the conference area of the corporate headquarters network. The switches provide two to three jacks per conference room to host laptop connections for employees who visit the headquarters office. When large groups of employees come from other locations, the network administrator often finds that hubs have been connected to wall jacks in the conference area although the ports on the access layer switches were not intended to support multiple workstations.
What action could the network administrator take to prevent access by multiple laptops through a single switch port and still leave the switch functional for its intended use?
A. Configure static entries in the switch MAC address table to include the range of addresses used by visiting employees.
B. Configure an ACL to allow only a single MAC address to connect to the switch at one time.
C. Use the mac-address-table 1 global configuration command to limit each port to one source MAC address.
D. Implement Port Security on all interfaces and use the port-security maximum 1 command to limit port access to a single MAC address
E. Implement Port Security on all interfaces and use the port-security mac-address sticky command to limit access to a single MAC address
F. Implement Port Security at global configuration mode and use the port-security maximum 1 command to allow each switch only one attached hub
Answer: D
Explanation
The Port Security filters frames based on its MAC so it can effectively prevent people connecting to the switch via hubs.
Question 9
Which of the following statements are true regarding bridges and switches? (Choose 3)
A. Switches are primarily software based while bridges are hardware based.
B. Both bridges and switches forward Layer 2 broadcasts.
C. Bridges are frequently faster than switches.
D. Switches have a higher number of ports than most bridges.
E. Bridges define broadcast domains while switches define collision domains.
F. Both bridges and switches make forwarding decisions based on Layer 2 addresses.
Answer: B D F
Question 10
A network administrator must configure 200 switch ports to accept traffic from only the currently attached host devices. What would be the most efficient way to configure MAC-level security on all these ports?
A. Visually verify the MAC addresses and then telnet to the switches to enter the switchport-port security mac-address command.
B. Have end users e-mail their MAC addresses. Telnet to the switch to enter the switchport-port security mac-address command.
C. Use the switchport port-security MAC address sticky command on all the switch ports that have end devices connected to them.
D. Use show mac-address-table to determine the addresses that are associated with each port and then enter the commands on each switch for MAC address port-security.
Answer: C
Explanation
We can use the “interface range” command (for example “interface range FastEthernet 0/1 – 48″) to configure many ports as the same time and use the “port-security MAC address sticky” command (without a specific MAC address) to dynamically learn the attached MAC Address and place it into the switch’s running-configuration -> C is correct.
Please any one send me , the latest dumps for CCNA. I am ready to write for that exam in next week.This is my mail ID: suresh42m@gmail.com
hi, i cant understand what the problem with switch A fa0/2 pls smbdy explain;)
HI kv, assume u’re referring to Q6. SW-C receive input error, so the problem is on the other side on the same link, i.e. SW-A issue. Encapsulation is set properly on both ends, by seeing the interface on SW-C is up and running. Otherwise there will be no connection.
Q1: I found this ans for this quest is E, in my dump.
Could you explain further more about other option in this Q, thanks alot.
Thank U Alboma !!
@ curiousity, same with me but i think the dumb is wrong bc in a dual ring topology, a token is passed round and whoever has the token is the one permited to send data.
In ethernet switches, evry body has equal right to send data and when the redundant links are not managed by STP, there will be loop ie multiple copies of the same unicast frame will be sent out in a switched environment.
@9tut , pls help us and explain better bc i have seen 3 dumps with ‘E’ as the ans and i will write my exam on 22nd Aug. Thanks
@clare – i agree with you. i think the right answer is B. :-) dumps are wrong on that question.
Please any one send me , the latest dumps for CCNA magednasr@mail.com
hi 9tut.
Q1, there are some dumps which say the answer is E ( when a dual ring topology is in use).
plz help me to understand. becz i think in a dual ring that might happen..?
thanks
Great job 9tut, thanks for all your job on this website
DID IT!!…907…thx 9tut!!!!..CCNA certified….tons of questions from this site…read from top to bottom every question, because you will not know what pops up…q5 on exam!!!!..study that one….good luck to all…can’t stress enough…read EVERY question on this site…
@Question 6
if we simulate a Trunk link and Duplex Mismatch on packet tracer the show interface command is
“FastEthernet0/1 is down, line protocol is down (disabled)” Compared to the questions “FastEthernet0/1 is down, line protocol is down (disabled)”
Is this a packet tracer fault or it has do something else in SWA’s config
Thanks in advance :)
can some body tell me the correct answer of Q1 in my dump it is E but here its B :/
thanks a lot 9tut………
Can some one send me the latest dumps containing 635 questions …!!! on clomr@live.com
would be thankful
Thanks
please send me the latest dumps for ccna i am ready to give exams on Monday
please send me the latest dumps for ccna i am ready to give exams on Monday,
my email is star_chaudry@yahoo.com
THANKS FOR 9TUT!!!! IT HELPED ME A LOT TO PASS EXAM YESTERDAY…. I GOT 933.
I GOT ALL QUESTIONS ONLY FROM THIS SITE.
TNQ!!
Just cleared my exam with a perfect perfomance (1000/1000)…..GRATITUDES: First and foremost to the almighty God for everythng he has been since i started preparing for this exam abt a year ago! the Todd lamlle (6th edition), this book gave me the foundation i needed and i consider myself one of the fastest subnetting geek thanks to Todd’s chapter on subnetting…then seriously, who wud forget this guy (9tut) thanks alot man,i finished my exam 40 minutes before time thanks to the speed you gave me in simulations…examcollection, thanks alot guys i ddint see any qn that i hadnt met in the dumps before, then the CBT nuggets videos….they cleared (enhanced) all of the concepts i have learned from all of the materials i have already mentioned! thank you all so much…..i will DONATE when i get my credit card! keep the good work going 9tut
ABOUT MY EXAM:
I had total of 50 questions….
Had three simulations….ACL2, same as here at 9tut but modified as the third table of modifications above and i was dealing with host B plus different IP addresses, EIGRP almost the same as here, had to change the AS in router Home 2 from somethng 21 to 221 and add the appropriate networks also i had to delete and add some networks from router Home 1 (central router) and finaly the VTP…same as here just different question to follow the same procedures in resolving
NB: i ddnt see anythng that i had not come across before
for any other enquiries find me at ropamson@gmail.com …..best of luck for everybody working on CCNA
@chris
The 2950 and some 4000 switches support only 802.1Q trunking and provide no options for changing the trunk type.
Q2) why is the E answer is wrong ?
@fadi
My guess is because you dont acually HAVE to create another management VLAN for this to work, even though it is best practice, it’s not something you Must do. (you already have an mgmt vlan in vlan 1 which is default, if you haven’t changed anything prior to this.
But then again, I am not ccna, taking my test at the end of november :)
friends, in case, if somebody fails ccna at first attempt, the re-exam will be after 5 days///
my question is ‘ do we have to pay the exam fee again for re-exam ?
thanks
Yes, you have to pay again.
:/
TY 9tut.
Today I have passed the CCNA. (860/825)
50 questions 3 labs (VTP, EIGRP, ACL). 35 from 9tut.
Also thanks a lot Brar and Sekhar (still valid from examcollection)
Ty again 9tut
from here none
@9tut
I am going to give exam in next month,will these be valid for that time,plz confirm me
Thanks in advance
@9tut
I am going to give exam in next month,will these be valid for that time,please confirm me
Thanks in advance
@Jeet: No one can guarantee that. Just read the “Share your CCNA Experience” before you take the exam and you will know.
Question 4
A company implements video conferencing over IP on their Ethernet LAN. The users notice that the network slows down, and the video either stutters or foils completely. What is the most likely reason for this?
A. minimum cell rate (MCR)
B. quality of service (QoS)
C. modulation
D. packet switching exchange (PSE)
E. reliable transport protocol (RTP)
Answer correct is E
Explanation
http://packetlife.net/blog/2009/jan/17/rtp-eigrp/
@ 9TUT, is the answer provided by David above correct,if not what is the explanation tha support the B answer,I followed his link but i dont realy understand the explanation, thanks
@David, @Renolph: The answer should be QoS. That company implemented video traffic and the network slows down -> maybe they don’t configure QoS so video traffic (which is very big and bursty) and data traffic have the same priority and video traffic eats all the bandwidth. QoS can solve this problem by giving higher priority for data (or voice) traffic over video traffic.
I also updated the explanation for that question.
Valid Que :D
Q:5
@Renolph, the correct answer is Qos. Try this if you access to a lab, lower your bandwith & see the results. Qos if not configured correctly on the network can slow down all your traffic.
Question 1.
In my opinion both A and B can be correct ANSWERS.
In case when switch does not have the destination host MAC address in the MAC Table it floods the switched network (let’s say 10 switches). So the correct answer option this question lacks is: “When switch does not have the destination MAC address of the unicast packet in his table”.
A. When the port is disconnected and reconnected the MAC table entries for that Port are deleted. Let’s say that some other host in the network, that in his ARP cache holds the information about the host that has been disconnected, sends a unicast packet to this previously disconnected host. The switch has not learned the MAC address of the reconnected host, because it didn’t send any data. So in this case switch floods the unicast packet through all of his ports.
B. Normally broadcasts are the major problem in incorrect redundant topology, unicasts are forwarded according to the MAC table rules. But in the same scenario as in case “A”, unicasts would also be caught in a loop. Of course in case of a broadcast/unicast storm in a network, switches go crazy and a lot of mess happens…
could you send me the latest dumps of CCNA exam, please? My email ID is: azur_devil@hotmail.it Thanks!
Question 1,5 on CCNA 2nd try today
Seriously though, who is nomarl? In many ways, from what you’ve described, you’re waaay more nomarl than your friend. She doesn’t understand what being a friend really is. She doesn’t understand how lucky she is to have a selfless friend like you.No one would blame you if you felt the need to distance yourself. If you need to, start to take small steps to protect yourself. When I finally decided it was ok to do that, it helped me a great deal.(((HUGS)))
Hi Career cert,I appeared for exam using the exrawomx for IUWNE. It was not good enough, it has changed and there were only a couple of questions from this. TI as I have heard is the real deal. Request you to pls post the same asap. Great site !
didn’t understand questio #2. i guess choice E. The switch management VLAN must be created and have a membership of at least one switch port. is also correct answer… plz explain
An administrator would like to configure a switch over a virtual terminal connection from locations outside of the local LAN. Which of the following are required in order for the switch to be configured from a remote location? (Choose two)
@9tut
A. The switch must be configured with an IP address, subnet mask, and default gateway.
B. The switch must be connected to a router over a VLAN trunk.
C. The switch must be reachable through a port connected to its management VLAN.
D. The switch console port must be connected to the Ethernet LAN.
E. The switch management VLAN must be created and have a membership of at least one switch port.
F. The switch must be fully configured as an SNMP agent.
I think the correct answer is A&E. E should is better choice than C. switches must be configured with management vlan to be accessible remotely. vlan is a management interface, not a port to be connected to.
I’m almost ready to write the exam….can someone plz send me the latest dumps and also, which version of exam cert to use?
TY, your help is greatly appreciated
George
My bad….my email is GR2712@hotmail.com
I’m almost ready to write the exam….can someone plz send me the latest dumps and also, which version of exam cert to use?
TY, your help is greatly appreciated..
George April 12th, 2013 My bad….my email is GR2712@hotmail.com
George
@examtaker Q2 toy wrote answer E is OK, but:
1 – we always have VLAN1 which is the management by default, you don’t have to create any, (however you CAN make another VLAN and set is as management VLAN)
2 if one port is in any VLAN, it does not mean, it has proper cable attached to it…
.
so better asnwer is still C
Q5 WAS ON MY EXAM TODAY
i passed today ccna 1000/1000 alhumdulillah
Labs were VTP, EIGRP and ACL2. i prepared for exams from from 9tut, sekhar and spike and it worked. Best of luck mate.
Can i get the latest dumps by tomorrow please
email shadokid555@hotmail.com dumps please!
about question 4, If donot config QoS policy, why video traffic either stutters or fails completely?
Q2 – for the love of God, I don’t understand why B is not the correct answer. We DO need a router if we want to access the switch OUTSIDE the local LAN, right?
Could someone pls explain? Thx