Cisco Certified Network Associate (CCNA)1,334 questions across 134 pages are complete and free, with no account or card.
1334 questions in this bank
Free access · progress saved on this device
Which protocol uses the SSL?
Answer: B
HTTPS (port 443, TCP): HTTPS combines HTTP with a security protocol (Secure Sockets Layer [SSL]/Transport Layer Security[TLS]). DNS (port 53, TCP, and UDP): DNS is used to resolve Internet names to IP addresses.
Source: Adapted from community discussion — Vlad_Is_Love_ua
Refer to the exhibit. The router R1 is in the process of being configured. Routers R2 and R3 are configured correctly for the new environment. Which two commands must be configured on R1 for PC1 to communicate to all PCs on the 10.10.10.0/24 network? (Choose two.)
Answer: A
Refer to the exhibit. A packet sourced from 172.18.33.2 is destined for 172.18.32.38. Where does the router forward the packet?
Answer: D
Refer to the exhibit. An administrator is configuring a new WLAN for a wireless network that has these requirements: • Dual-band clients that connect to the WLAN must be directed to the 5-GHz spectrum. • Wireless clients on this WLAN must be able to apply VLAN settings on the returned RADIUS attributes. Which two actions meet these requirements? (Choose two.)
Answer: AC
The requirements state that dual-band clients connecting to the WLAN should be directed to the 5-GHz spectrum, and wireless clients on this WLAN must be able to apply VLAN settings on the returned RADIUS attributes. Let's analyze the options: A. Enable the Client Band Select option. This option encourages dual-band clients to connect to the 5-GHz spectrum, so it meets the first requirement. B. Enable the Coverage Hole Detection option. Coverage Hole Detection is not directly related to the specified requirements. C. Enable the Allow AAA Override option. AAA Override allows RADIUS attributes to override WLAN settings. This is relevant to the second requirement. D. Set the MFP Client Protection option to Required. MFP (Management Frame Protection) is not directly related to the specified requirements. E. Enable the Aironet IE option. The Aironet IE (Information Element) is not directly related to the specified requirements. Therefore, the correct options are: A. Enable the Client Band Select option. C. Enable the Allow AAA Override option.
Source: Adapted from community discussion — 16BitRun
How does a network administrator securely manage an AP in lightweight mode?
Answer: D
D is correct Access to this GUI is usually secured using HTTPS, ensuring encryption of data exchanged between the administrator's web browser and the WLC.
Source: Adapted from community discussion — [Removed]
Which type of protocol is VRRP?
Answer: A
A. allows two or more routers to act as a default gateway VRRP (Virtual Router Redundancy Protocol) is a standard protocol that allows multiple routers to work together in order to provide high availability for a network's default gateway. The routers share an IP address and a virtual MAC address, and one router is elected as the active router while the others act as backups. If the active router fails, one of the backup routers takes over to maintain seamless network connectivity. Option A accurately describes the purpose of VRRP, making it the correct choice. VRRP is commonly used to ensure continuous operation of the default gateway, which is crucial for maintaining connectivity in a network.
Source: Adapted from community discussion — 16BitRun
Refer to the exhibit. The switch cat9k-acc-1 connects users to the campus LAN. Printing services are inaccessible through the network. Which interface issue is causing the connectivity problems?
Answer: C
This was the AI answer The interface issue causing the connectivity problems on the switch cat9k-acc-1, which is hindering access to printing services through the network, is most likely option D: "The interface output queue cannot process the Ethernet frames." This conclusion is drawn from the fact that there were 1 underrun, 1 collision, and 1 interface reset observed in the output of the "show interfaces gigabitethernet 1/0/1" command. These indicators suggest that the interface is struggling to handle the volume of Ethernet frames efficiently, leading to dropped frames and potential connectivity issues for services like printing. Additionally, excessive collisions (option B) and a large number of broadcast packets (option C) could also potentially cause connectivity problems but are not directly supported by the provided information. The presence of underruns and interface resets points more towards an issue with the interface's output queue processing capability.
Source: Adapted from community discussion — Starlord2535
Which standard is required when more than one distribution system port and only one IP address are configured for a Cisco WLC?
Answer: A
GPTs answer(802.1q): In a Cisco Wireless LAN Controller (WLC) deployment where more than one distribution system port is configured and only one IP address is used, the standard required is IEEE 802.1Q. IEEE 802.1Q is a standard for Virtual LANs (VLANs) that provides a method for tagging Ethernet frames with VLAN information. It allows multiple VLANs to share a single physical connection and helps in separating broadcast domains in a network. When using multiple distribution system ports on a Cisco WLC with a single IP address, VLAN tagging (802.1Q) is typically employed to differentiate between different VLANs and maintain logical separation. Each VLAN can be associated with a specific distribution system port on the WLC. Make sure that the switches and other network devices in your infrastructure also support and are configured to handle 802.1Q VLAN tagging to ensure proper communication between the WLC and the rest of the network.
Source: Adapted from community discussion — squagmire
Which capability does TFTP provide?
Answer: A
A. loads configuration files on systems without data storage devices TFTP (Trivial File Transfer Protocol) is a simple file transfer protocol that is often used to transfer configuration files or firmware to network devices, such as routers or switches, during the boot process. TFTP is lightweight and lacks advanced features like authentication or encryption, making it suitable for basic file transfer operations in situations where security is not a primary concern. Therefore, option A accurately describes one of the primary capabilities of TFTP. It is commonly used to load configuration files onto systems, particularly those without extensive data storage devices, during the initialization or configuration process.
Source: Adapted from community discussion — 16BitRun
Which action protects a network from VLAN hopping attacks?
Answer: B
Changing the native VLAN to an unused VLAN ID helps protect a network from VLAN hopping attacks. VLAN hopping is a type of attack where an attacker sends frames from one VLAN into another VLAN by exploiting the way some switches handle VLAN information. Changing the native VLAN to an unused VLAN ID helps mitigate this risk by making it more difficult for an attacker to gain unauthorized access to different VLANs.
Source: Adapted from community discussion — KAM2023
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
200-301 practice, question 241. 1334 questions available.
Version 1.0.0. How we source questions