CCNA – Switch Questions
Here you will find answers about Switch Questions – Part 1
Question 1
Which two commands can be used to verify a trunk link configuration status on a Cisco switch? (choose two)
A. show interfaces trunk
B. show interfaces switchport
C. show ip interface brief
D. show interfaces vlan
Answer: A B
Explanation
The “show interfaces trunk” command and “show interfaces switchport” command can be used to verify the status of an interface (trunking or not). The outputs of these commands are shown below (port Ethernet 1/0 has been configured as trunk):
The “show ip interface brief” command only gives us information about the IP address, the status (up/down) of an interface:
The “show interfaces vlan” command only gives us information about that VLAN, not about which ports are the trunk links:
Question 2
Refer to the exhibit. The following commands are executed on interface fa0/1 of 2950Switch.
2950Switch(config-if)#switchport port-security
2950Switch(config-if)#switchport port-security mac-address sticky
2950Switch(config-if)#switchport port-security maximum 1
The Ethernet frame that is shown arrives on interface fa0/1. What two functions will occur when this frame is received by 2950Switch? (Choose two)
A. The MAC address table will now have an additional entry of fa0/1 FFFF.FFFF.FFFF.
B. Only host A will be allowed to transmit frames on fa0/1.
C. This frame will be discarded when it is received by 2950Switch.
D. All frames arriving on 2950Switch with a destination of 0000.00aa.aaaa will be forwarded out fa0/1.
E. Hosts B and C may forward frames out fa0/1 but frames arriving from other switches will not be forwarded out fa0/1.
F. Only frames from source 0000.00bb.bbbb, the first learned MAC address of 2950Switch, will be forwarded out fa0/1.
Answer: B D
Explanation
Please read the explanation at http://www.9tut.net/icnd2/icnd2-operations
Question 3
Which Cisco Catalyst feature automatically disables the port in an operational PortFast upon receipt of a BPDU?
A. BackboneFast
B. UplinkFast
C. Root Guard
D. BPDU Guard
E. BPDU Filter
Answer: D
Explanation
We only enable PortFast feature on access ports (ports connected to end stations). But if someone does not know he can accidentally plug that port to another switch and a loop may occur when BPDUs are being transmitted and received on these ports.
With BPDU Guard, when a PortFast receives a BPDU, it will be shut down to prevent a loop -> D is correct.
Question 4
Why will a switch never learn a broadcast address?
A. Broadcast frames are never sent to switches.
B. Broadcast addresses use an incorrect format for the switching table.
C. A broadcast address will never be the source address of a frame.
D. Broadcasts only use network layer addressing.
E. A broadcast frame is never forwarded by a switch.
Answer: C
Question 5
Which three statements accurately describe layer 2 Ethernet switches? (choose three)
A. Microsegmentation decreases the number of collisions on the network.
B. If a switch receives a frame for an unknown destination, it uses ARP to resolve the address.
C. Spanning Tree Protocol allows switches to automatically share vlan information.
D. In a property functioning network with redundant switched paths, each switched segment will contain one root bridge with all its ports in the forwarding state. All other switches in that broadcast domain will have only one root port.
E. Establishing vlans increases the number of broadcast domains.
F. Switches that are configured with vlans make forwarding decisions based on both layer 2 and layer 3 address information.
Answer: A D E
Explanation
Microsegmentation is a network design (functionality) where each workstation or device on a network gets its own dedicated segment (collision domain) to the switch. Each network device gets the full bandwidth of the segment and does not have to share the segment with other devices. Microsegmentation reduces and can even eliminate collisions because each segment is its own collision domain -> A is correct.
Note: Microsegmentation decreases the number of collisions but it increases the number of collision domains.
D and E are correct based on the theory of STP and VLAN.
Question 6
Switch ports operating in which two roles will forward traffic according to the IEEE 802.1w standard? (Choose two)
A. alternate
B. backup
C. designated
D. disabled
E. root
Answer: C E
Explanation
IEEE 802.1w is the standard of Rapid Spanning Tree Protocol (RSTP). There are 5 port roles in this standard: Root port, Designated port, Alternative port, Backup port and Disabled port. In these 5 port roles, only Root port and Designated port can forward traffic.
Question 7
Select the action that results from executing these commands:
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security mac-address sticky
A. A dynamically learned MAC address is saved in the startup-configuration file.
B. A dynamically learned MAC address is saved in the running-configuration file.
C. A dynamically learned MAC address is saved in the VLAN database.
D. Statically configured MAC addresses are saved in the startup-configuration file if frames from that address are received.
E. Statically configured MAC addresses are saved in the running-configuration file if frames from that address are received.
Answer: B
Explanation
The full syntax of the second command is:
switchport port-security mac-address sticky [MAC]
If we don’t specify the MAC address (like in this question) then the switch will dynamically learn the attached MAC Address and place it into your running-configuration -> B is correct.
Question 8
What is valid reason for a switch to deny port access to new devices when port security is enabled?
A. The denied MAC addresses have already been learned or configured on another secure interface in the same VLAN.
B. The denied MAC address are statically configured on the port.
C. The minimum MAC threshold has been reached.
D. The absolute aging times for the denied MAC addresses have expired.
Answer: A
Explanation
A security violation occurs in either of these situations:
* When the maximum number of secure MAC addresses is reached on a secure port and the source MAC address of the ingress traffic is different from any of the identified secure MAC addresses, port security applies the configured violation mode.
* If traffic with a secure MAC address that is configured or learned on one secure port attempts to access another secure port in the same VLAN, applies the configured violation mode.
From the second statement we can figure out A is the correct answer. But for your information we will discuss other answers as well.
Answer B is not correct because we can’t configured which MAC address will be denied. We can only configure which MAC is allowed.
We can only configure the maximum MAC threshold, not the minimum threshold -> C is not correct.
The aging times are only configured for allowed MAC addresses, not for denied MAC -> D is correct.
For your information about aging time:
When the aging type is configured with the absolute keyword, all the dynamically learned secure addresses age out when the aging time expires
This is how to configure the secure MAC address aging type on the port:
Router(config-if)# switchport port-security aging type absolute
and configure the aging time (aging time = 120 minutes)
Router(config-if)# switchport port-security aging time 120
When this command is used, all the dynamically learned secure addresses age out when the aging time expires
(Reference: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/port_sec.html)
Question 9
A network administrator needs to configure port security on a switch. Which two statements are true? (Choose two)
A. The network administrator can apply port security to dynamic access ports
B. The network administrator can configure static secure or sticky secure mac addresses in the voice vlan.
C. The sticky learning feature allows the addition of dynamically learned addresses to the running configuration.
D. The network administrator can apply port security to EtherChannels.
E. When dynamic mac address learning is enabled on an interface, the switch can learn new addresses up to the maximum defined.
Answer: C E
Explanation
Follow these guidelines when configuring port security:
+ Port security can only be configured on static access ports, trunk ports, or 802.1Q tunnel ports.
+ A secure port cannot be a dynamic access port.
+ A secure port cannot be a destination port for Switched Port Analyzer (SPAN).
+ A secure port cannot belong to a Fast EtherChannel or Gigabit EtherChannel port group.
+ You cannot configure static secure or sticky secure MAC addresses on a voice VLAN.
+ When you enable port security on an interface that is also configured with a voice VLAN, you must set the maximum allowed secure addresses on the port to at least two.
+ If any type of port security is enabled on the access VLAN, dynamic port security is automatically enabled on the voice VLAN.
+ When a voice VLAN is configured on a secure port that is also configured as a sticky secure port, all addresses seen on the voice VLAN are learned as dynamic secure addresses, and all addresses seen on the access VLAN (to which the port belongs) are learned as sticky secure addresses.
+ The switch does not support port security aging of sticky secure MAC addresses.
+ The protect and restrict options cannot be simultaneously enabled on an interface.
Question 10
Refer to the exhibit. Which statement is true?
A. The Fa0/11 role confirms that SwitchA is the root bridge for VLAN 20.
B. VLAN 20 is running the Per VLAN Spanning Tree Protocol.
C. The MAC address of the root bridge is 0017.596d.1580.
D. SwitchA is not the root bridge, because not all of the interface roles are designated.
Answer: D
Explanation
Only non-root bridge can have root port. Fa0/11 is the root port so we can confirm this switch is not the root bridge -> A is not correct.
From the output we learn this switch is running Rapid STP, not PVST -> B is not correct.
0017.596d.1580 is the MAC address of this switch, not of the root bridge. The MAC address of the root bridge is 0017.596d.2a00 -> C is not correct.
All of the interface roles of the root bridge are designated. SwitchA has one Root port and 1 Alternative port so it is not the root bridge -> D is correct.
Question 11
A technician has installed SwithchB and needs to configure it for remote access from the management workstation connected SwitchA. Which set of commands is required to accomplish this task?
A.
SwitchB(config)#interface FastEthernet 0/1
SwitchB(config)#ip address 192.168.8.252 255.255.255.0
SwitchB(config)#no shutdown
B.
SwitchB(config)#ip default-gateway 192.168.8.254
SwitchB(config)#interface vlan 1
SwitchB(config)#ip address 192.168.8.252 255.255.255.0
SwitchB(config)#no shutdown
C.
SwitchB(config)#interface vlan 1
SwitchB(config)#ip address 192.168.8.252 255.255.255.0
SwitchB(config)#ip default-gateway 192.168.8.254 255.255.255.0
SwitchB(config)#no shutdown
D.
SwitchB(config)#ip default-network 192.168.8.254
SwitchB(config)#interface vlan 1
SwitchB(config)#ip address 192.168.8.252 255.255.255.0
SwitchB(config)#no shutdown
Answer: B
Explanation
To remote access to SwitchB, it must have a management IP address on a VLAN on that switch. Traditionally, we often use VLAN 1 as the management VLAN (but in fact it is not secure).
In the exhibit, we can recognize that the Management Workstation is in a different subnet from the SwitchB. For intersubnetwork communication to occur, you must configure at least one default gateway. This default gateway is used to forward traffic originating from the switch only, not to forward traffic sent by devices connected to the switch.
Question 12
A network administrator wants to ensure that only the server can connect to port Fa0/1 on a Catalyst switch. The server is plugged into the switch Fa0/1 port and the network administrator is about to bring the server online. What can the administrator do to ensure that only the MAC address of the server is allowed by switch port Fa0/1? (Choose two)
A. Configure port Fa0/1 to accept connections only from the static IP address of the server.
B. Employ a proprietary connector type on Fa0/1 that is incompatible with other host connectors.
C. Configure the MAC address of the server as a static entry associated with port Fa0/1.
D. Bind the IP address of the server to its MAC address on the switch to prevent other hosts from spoofing the server IP address.
E. Configure port security on Fa0/1 to reject traffic with a source MAC address other than that of the server.
F. Configure an access list on the switch to deny server traffic from entering any port other than Fa0/1.
Answer: C E
Explanation
We can”configure the MAC address of the server as a static entry associated with port Fa0/1″ with this command:
Switch(config-if)#switchport port-security mac-address sticky 0000.00AA.AAAA.AAAA
and “configure port security on Fa0/1 to reject traffic with a source MAC address other than that of the server” with these commands:
Switch(config-if)#switchport port-security maximum 1 (only allow 1 MAC address and that is the static MAC address)
Also we often define what will the switch do if the security is violated:
Switch(config-if)#switchport port-security violation shutdown
Question 13
The network security policy requires that only one host be permitted to attach dynamically to each switch interface. If that policy is violated, the interface should shut down. Which two commands must the network administrator configure on the 2950 Catalyst switch to meet this policy? (Choose two)
A. Switch1(config-if)#switchport port-security maximum 1
B. Switch1(config)#mac-address-table secure
C. Switch1(config)#access-list 10 permit ip host
D. Switch1(config-if)#switchport port-security violation shutdown
E. Switch1(config-if)#ip access-group 10
Answer: A D
Sorry, the above is based on Question 11
apologies
@ Ngoroko
the diference is subnet mask is not given to default gateway thats it .
Hi EVERYONE – I WOULD LOVE TO GET THE LATEST DUMP FROM ANYONE WHO CAN GIVE IT TO ME> Please!!! I am taking the exam on May 15th and really would appreciate it.
Thank you!!!!
erica3025@gmail.com
Erica
pls email me the dumps when u get them for ccna..toju.ogbeide@yahoo.com.thanks
Can anyone pls help email latest dumps ‘adainsiu@gmail.com’ pls Thks!
Hey I m gonna sit for the exam on this May… Please send me latest Dumps to ma mail id: blasterghys@gmail.com
really confused about port security .
the source i am reading from says that “sticky” command provides static mac address security while i can see in Q7 the correct answer is dynamically !!
please help
ostazabgrino@hotmail.com
it says dynamically learned. It dynamically learns whatever device that has a mac on that port and save it on the running config. That’s the time the mac address is now statically assigned on the port. you can check on “show running-config”. I’m off to take my exam tomorrow as well. pray for me guys :D
Question 9 ???
A network administrator needs to configure port security on a switch. Which two statements are true? (Choose two)
A. The network administrator can apply port security to dynamic access ports
B. The network administrator can configure static secure or sticky secure mac addresses in the voice vlan.
C. The sticky learning feature allows the addition of dynamically learned addresses to the running configuration.
D. The network administrator can apply port security to EtherChannels.
E. When dynamic mac address learning is enabled on an interface, the switch can learn new addresses up to the maximum defined.
My question is why is A Not true as well????
Correct Answer: C E
To restrict a port dynamically on a Catalyst 3550 switch use the following commands. Note that the aging commands cannot be used with sticky MAC addresses.
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security violation shutdown
Switch(config-if)# switchport port-security maximum 1
Switch(config-if)# switchport port-security mac-address sticky
MAC addresses are gathered dynamically, with some switches supporting static entries and sticky entries. Static entries are manually entered for each port (e.g., switchport port-security mac-address mac-address) and saved in the running configuration. Sticky entries are similar to static entries except they are dynamically learned. Existing dynamic entries are converted to sticky entries when the switchport port-security mac-address sticky command is issued for a port. These former dynamic entries are saved in the running configuration as switchport port-security mac-address sticky mac-address. If the running configuration is then saved to the startup configuration then these MAC addresses will not need to be relearned on restart. Also, the maximum number of MAC addresses (e.g., switchport port-security maximum value) for the port can be set.
Thus, if there is a PC at the toher end of the port, then it learns the MAC address of the PC, and a PC is an Access Port, not a trunked port. WHAT AM I MISSING????!!!!
From 9tut.com
Question 7
Select the action that results from executing these commands:
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security mac-address sticky
A. A dynamically learned MAC address is saved in the startup-configuration file.
B. A dynamically learned MAC address is saved in the running-configuration file.
C. A dynamically learned MAC address is saved in the VLAN database.
D. Statically configured MAC addresses are saved in the startup-configuration file if frames from that address are received.
E. Statically configured MAC addresses are saved in the running-configuration file if frames from that address are received.
Answer: B
Explanation
The full syntax of the second command is:
switchport port-security mac-address sticky [MAC]
If we don’t specify the MAC address (like in this question) then the switch will dynamically learn the attached MAC Address and place it into your running-configuration -> B is correct.
***
http://www.cisco.com/en/US/docs/switches/datacenter/nexus1000/sw/4_0_4_s_v_1_2/security/configuration/guide/n1000v_security_11port.html
Dynamic Method
By default, when you enable port security on an interface, you enable the dynamic learning method. With this method, the device secures MAC addresses as ingress traffic passes through the interface. If the address is not yet secured and the device has not reached any applicable maximum, it secures the address and allows the traffic.
***
http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/port_sec.pdf
Port Security with Dynamically Learned and Static MAC Addresses
You can use port security with dynamically learned and static MAC addresses to restrict a port’s ingress
traffic by limiting the MAC addresses that are allowed to send traffic into the port
***
I think my issue is with the wording. I assumed they are asking about a dynamically learned MAC Address, but I am now thinking that “dynamic access ports” is another term altogether. Please, anyone help me on this.
Q8 is ambigous to state the least….
“What is valid reason for a switch to deny port access to new devices when port security is enabled?”
A. The denied MAC addresses have already been learned or configured on another secure interface in the same VLAN..
The question relates to NEW devices, the answer referes to LEARNED devices. If the device is new to the switch (as the question implies then how can it be denied as learned??
Question 11:
As we enter the command “interface vlan 1″ the prompt should change to
SwitchB(config-if)#
thanks
Thanks 9 tut, I am going to sit the exams in June, kindly send me the latest dumps : knndyoduor@yahoo.com
hi
I confuse about using 2 commends
SwitchB(config)#ip default-gateway 192.168.8.254
SwitchB(config)#ip default-network 192.168.8.254
plz help
@Sara
you will use the command ip default-gateway 192.168.8.254 in order to have access to the switch for management purposes (creating vlans,setting security, etc …) from your PC when this PC is located on different subnet form that switch
@ mounir
what about
SwitchB(config)#ip default-network 192.168.8.254
When can I use this command
Hi all, I am taking CCNA 640-802 exam first time on 30/05/2012. Could anyone please send me latest dumps which are valid for UK? My e-mail address is puneet_gill84@yahoo.co.uk. Many thanks.
@Sara
SwitchB(config)#ip default-gateway 192.168.8.254, as per Mounir this is for management purposes. If its not configured then remote admin techs will not be able to access the switch from a remote device.
SwitchB(config)#ip default-network 192.168.8.254 is used on routers and is used to define a network that packets will be sent to if there are no other routes in the routing table, its sort of a last resort network to send all packets too.
@ AlantheAussie @Mounir
thanks
can we configure IP address to any switch port on switch ?
@ravali
Short answer no.
Layer 2 Switch deals with MAC addresses and frames.
You can assign an IP address on the managment vlan1
To telnet, ssh etc.
config t
interface vlan 1
ip address 192.168.1.1 255.255.255.0
However you should know there are layer 3 switches(dont really need to know this for CCNA) but you can configure ip addresses on those switchports.
Config t
int fa0/1
ip address 192.168.1.1 255.255.255.0
Thanks for question 8, 9tut!
I PASSED CCNA EXAM TODAY THANKS TO ALL MIGHTY ALLAH
960/1000
Can someone explain Q5 and Q9?
@cls
Q5:
A. Microsegmentation decreases the number of collisions on the network.
yes, less collisions as there are more collision *domains*
B. If a switch receives a frame for an unknown destination.it uses ARP to resolve the address.
no, it will forward it out all trunk ports or ports on the same vlan except the port on which it came
C. Spanning Tree Protocol allows switches to automatically share vlan information.
nope, that’s what VTP does
D. In a property functioning network with redundant switched paths, each switched segment will contain one root bridge with all its ports in the forwarding state. All other switches in that broadcast domain will have only one root port.
yes, that’s the basic idea behind STP. all the traffic is directed towards 1 master switch
E. Establishing vlans increases the number of broadcast domains.
yes. 1 VLAN = 1 separate subnet = 1 broadcast domain.
F. Switches that are configured with vlans make forwarding decisions based on both layer 2 and layer 3 address information.
no… they still only care about the L2 information (whats in the frame header)
Q9:
A. The network administrator can apply port security to dynamic access ports
im not so sure about this one. it should work according to this:
http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/31sga/configuration/guide/port_sec.html#wp1101775
B. The network administrator can configure static secure or sticky secure mac addresses in the voice vlan.
the voice vlan has untagged and unchecked traffic to speed up the flow
C. The sticky learning feature allows the addition of dynamically learned addresses to the running configuration.
yes, so it does. check the link above for option A
D. The network administrator can apply port security to EtherChannels.
according to the same link above… this one is true too…
E. When dynamic mac address learning is enabled on an interface, the switch can learn new addresses up to the maximum defined.
as long as the command “switchport port-security maximum NUMBER” has been used. not so sure E is correct here
Thanking my test this july. may i have the lates dump for the CCNA exam please email me at locaboi96797@gmail.com thank you 9 tut.
Question 9
A network administrator needs to configure port security on a switch. Which two statements are true? (Choose two)
C. The sticky learning feature allows the addition of dynamically learned addresses to the running configuration.
E. When dynamic mac address learning is enabled on an interface, the switch can learn new addresses up to the maximum defined.
Answer: C E – for sure they are accurate answers, no doubt in that.
——————————————————————
A. The network administrator can apply port security to dynamic access ports
According to this link:
http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/software/release/12.1_19_ea1/configuration/guide/swvlan.html
“A dynamic-access port can belong to one normal-range VLAN (VLAN ID 1 to 1005) and is dynamically assigned by a VMPS.”
According to “CCNA Exploration 4.0: Switching and wireless” course materials:
“Dynamic VLAN – This mode is not widely used in production networks and is not explored in this course. However, it is useful to know what a dynamic VLAN is. A dynamic port VLAN membership is configured using a special server called a VLAN Membership Policy Server (VMPS). With the VMPS, you assign switch ports to VLANs dynamically, based on the source MAC address of the device connected to the port. The benefit comes when you move a host from a port on one switch in the network to a port on another switch in the network-the switch dynamically assigns the new port to the proper VLAN for that host.”
My guess is that the answer “A” refers to configuring VLANs and not configuring Port Security on switch. :/
@xallax: I read your comments above about the question 8. Are you sure the answer is A? The question sounds ambigous and I am not sure if I should write down the A or the B.
@mariah
i am very confident the answer is A.
@xallax: thank you. more i think about it, im sure its A…
I passed my ccna exam today Praise be to God! Thank you Jesus! and thanks to 9TUT for the tutorials and explanations, great site and thanks to xallax for your explanations to questions and thanks to http://www.examcollection.com for the dumps. Pls guys lets donate and help to keep this site up!
48 ques for exams including 3 simulation, I had EIGRP, Acesslist2 and VTP. Make sure the practice the simulation, use packet tracer or gns3. Best wishes to all!
hi 9tut.. I have one 3750 Switch and I want to limit bandwidth per host.. port1 must have 1mb, port2 2mb and port3 5mb.. how I can set that?… all ports of Switch is Gigabytes.
please Help me..
hi 9tut, doing a great job. Please i need the latest ccna dump i’m writing the exam in less than 2 weeks. HELP !!!!!!!!! my email is kmlydd2007@yahoo.co.uk THANK YOU
hi 9tut, doing a great job. Please i need the latest ccna dump i’m writing the exam in less than 2 weeks. HELP !!!!!!!!! my email is kmlydd2007@yahoo.co.uk THANK YOU
This is getting a bit more sucvtbeije, but I much prefer the Zune Marketplace. The interface is colorful, has more flair, and some cool features like Mixview’ that let you quickly see related albums, songs, or other users related to what you’re listening to. Clicking on one of those will center on that item, and another set of neighbors will come into view, allowing you to navigate around exploring by similar artists, songs, or users. Speaking of users, the Zune Social is also great fun, letting you find others with shared tastes and becoming friends with them. You then can listen to a playlist created based on an amalgamation of what all your friends are listening to, which is also enjoyable. Those concerned with privacy will be relieved to know you can prevent the public from seeing your personal listening habits if you so choose.
qn.11
“This default gateway is used to forward traffic originating from the switch only, not to forward traffic sent by devices connected to the switch.” 9tut wrote that about switch B, that the default gateway configured in switch B cant be used to foward packets from hosts connected in switch B:
IMO: that is not true, if there were hosts connected to switch B then they will also use the same default gateway as switch B, the only defference is that the default-gateway for the switch will be configured on the switch and that one for the host device will be configured in that host device…but they willhave the same value!
Cleared CCNA today!
All labs from 9tut.com, not all questions from 9tut though.
Gearing up for CCNP!
Thank you all, God bless you guys!!!
What does a Layer 2 switch do if it receives a frame with destination MAC address that is not found in its MAC address table?
a- send arp request to all port except the receiving port
b- flood the frame to all port except the receiving port
hi guys im taking the exam this month plz send me the latest dump
Both answers C and B seem correct on question #11. 9tut, please advise. Thank you.
@Klauss
ip default-gateway is not a valid command under vlan 1 interface (C)
It is only valid under global configuration (B)
QUESTION 8: What is valid reason for a switch to deny port access to new devices when port security is enabled?
A. The denied MAC addresses have already been learned or configured on another secure interface in the same VLAN.
B. The denied MAC address are statically configured on the port.
C. The minimum MAC threshold has been reached.
D. The absolute aging times for the denied MAC addresses have expired.
Answer is A.
But the answer on the dumps from Bruce is B.
But ofcourse the right answer is A. :-)
Plz i have a doubt:
Assuming the default switch configuration, which approach should you use to configure the extended vlan range (1006 through 4094) on a Cisco Catalyst 3750 series switch?
A.
Configure the switch to be in VTP client mode.
B.
Configure the switch to be in VTP domaint mode.
C.
Configure the switch to be in VTP transparent mode.
D.
Configure the switch to be in VTPv2.
Why the answer is C.?
i failed last 3weeks ago with 683
i passed today with 920
thanks to jesus, cbtnuggets, pass4sure and of course 9TUT!!!!
hi this is messed up,
i have a question to u .what is the pass mark in CCNA global certification?
Thanks,
@MalikCCNA
VTP only learns about normal-range VLANs (VLAN IDs 1 to 1005). Extended-range VLANs (VLAN IDs greater than 1005) are not supported by VTP or stored in the VTP VLAN database.
The switch must be in VTP transparent mode when you create extended-range VLANs.
http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/software/release/12.1_13_ea1/configuration/guide/swvtp.html#wp1205076
Please any one send me , the latest dumps for CCNA magednasr@mail.com
DID IT!!…907…thx 9tut!!!!..CCNA certified….tons of questions from this site…read from top to bottom every question, because you will not know what pops up…q2, 3, ..good luck to all…can’t stress enough…read EVERY question on this site…
Switch questions link seems to be bringing up the Drag and Drop 5 page.
@jmw: I updated the link so it work well now. Thanks for your detection!