Cisco Certified Network Associate (CCNA)1,334 questions across 134 pages are complete and free, with no account or card.
1334 questions in this bank
Free access · progress saved on this device
Which two spanning-tree states are bypassed on an interface running PortFast? (Choose two.)
Answer: BC
In addition, you should not confuse yourself with port states(discussed in Rapid Spanning Tree)where the states are discarding, learning and forwarding only.
Source: Adapted from community discussion — SVN05
Which IPv6 address block forwards packets to a multicast address rather than a unicast address?
Answer: D
Multicast: FF00/8 -- FF00:: - FFFF:: Global Unicast: 2000::/3, 2001::/3, 2002::/4, 2001:db8::/32 Link Local Unicast: FE80::/10 -- FE80:: - FEBF:: Unique Local Unicast: FC00::/7 -- FC00:: - FDFF:: Loopback: ::1/128 Correct Answer: C
Source: Adapted from community discussion — boghota
DRAG DROP - Drag and drop the management connection types from the left onto the definitions on the right. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
An engineer is configuring data and voice services to pass through the same port. The designated switch interface fastethernet0/1 must transmit packets using the same priority for data when they are received from the access port of the IP phone. Which configuration must be used?
Answer: D
I think answer is correct. Set the priority of data traffic received from the Cisco IP Phone access port: •cos value—Configure the "phone" to override the priority received from the "PC or the attached device" with the specified CoS value. The value is a number from 0 to 7, with 7 as the highest priority. The default priority is cos 0. So, If we set the value 7 here it means, port will prioritize the voice traffic over data traffic. •trust—Configure the phone access port to trust the priority received from the "PC or the attached device". When traffic from pc is trusted, it will consider both voice and data traffic as same priority. (Since voice traffic is prioritised over data traffic by default.)
Source: Adapted from community discussion — Mahfuj_01
Refer to the exhibit. Which change to the configuration on Switch2 allows the two switches to establish an EtherChannel?
Answer: C
LACP:- Active + Active = Ether Channel Active + Passive = Ether Channel Passive + Active = Ether Channel Passive + Passive = No
Source: Adapted from community discussion — Nikisan
Refer to the exhibit. An engineer must configure the interface that connects to PC1 and secure it in a way that only PC1 is allowed to use the port. No VLAN tagging can be used except for a voice VLAN. Which command sequence must be entered to configure the switch?
Answer: C
The port must be configured as trunk or access; an interface in the default mode (dynamic auto) cannot be configured as a secure port. https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuration_guide/b_consolidated_config_guide_3850_chapter_011111.html
Source: Adapted from community discussion — AbdullahMohammad251
Which protocol must be implemented to support separate authorization and authentication solutions for wireless APs?
Answer: B
Correct: B Authentication and Authorization RADIUS combines authentication and authorization. The access-accept packets sent by the RADIUS server to the client contain authorization information. This makes it difficult to decouple authentication and authorization. TACACS+ uses the AAA architecture, which separates AAA. This allows separate authentication solutions that can still use TACACS+ for authorization and accounting. For example, with TACACS+, it is possible to use Kerberos authentication and TACACS+ authorization and accounting. After a NAS authenticates on a Kerberos server, it requests authorization information from a TACACS+ server without having to re-authenticate. The NAS informs the TACACS+ server that it has successfully authenticated on a Kerberos server, and the server then provides authorization information. Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/13838-10.html
Source: Adapted from community discussion — Ronild
Refer to the exhibit. What are two conclusions about this configuration? (Choose two.)
Answer: AE
It is under the root ID entry, so means root port for this sw is shown. In addition, there might be multipule designated ports there is no point to show them under this entry.
Source: Adapted from community discussion — diudiuQIdama
A Cisco engineer must configure a single switch interface to meet these requirements: ✑ Accept untagged frames and place them in VLAN 20 Accept tagged frames in VLAN 30 when CDP detects a Cisco IP phone
Which command set must the engineer apply?
Answer: B
B should be the answer. With D, the interface operates in trunk mode. So the access configuration is not taken into account and the vlan 20 will be tagged.
Source: Adapted from community discussion — foreach
What does a switch use to build its MAC address table?
Answer: C
The answer given is correct The switch looks at the source address of an incoming frame before it looks at the destination address. It's the source MAC addresses that are used to build the all-important MAC address table.
Source: Adapted from community discussion — abdelkader163
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
200-301 practice, question 561. 1334 questions available.
Version 1.0.0. How we source questions