Cisco Certified Network Associate (CCNA)1,334 questions across 134 pages are complete and free, with no account or card.
1334 questions in this bank
Free access · progress saved on this device
Which goal is achieved by the implementation of private IPv4 addressing on a network?
Answer: A
the question is indeed strange. in CCNA courser it was mentioned several time that NAT is not considered as a security means. So, i would answer like - the goal of using IPv4 private range is to optimize the network address usage
Source: Adapted from community discussion — Niko9988
Which type of attack is mitigated by dynamic ARP inspection?
Answer: C
worm and malware are clearly wrong. you could assume that DDOS is correct, but it is not the primary reason of ARP poisoning. Hence, the given answer is correct
Source: Adapted from community discussion — vadiminski
What is a function of a remote access VPN?
Answer: D
What are two functions of a server on a network? (Choose two.)
Answer: AE
The correct answers are: A. Handles requests from multiple workstations at the same time. E. Runs applications that send and retrieve data for workstations that make requests. A. Correct .Servers are designed to handle requests from multiple clients or workstations simultaneously. This is one of their primary functions in a network environment. Examples of server types include web servers, file servers, and database servers. E. Correct. One of the main functions of a server is to run applications that serve data and services to workstations that request them. This can include applications like web servers, email servers, and database servers.
Source: Adapted from community discussion — Utshav
What are two recommendations for protecting network ports from being exploited when located in an office space outside of an IT closet? (Choose two.)
Answer: DE
I was thinking static ARP entries would also prevent ports from being exploited but I guess the other two are actually better choices.
Source: Adapted from community discussion — ProgSnob
Refer to the exhibit. A network administrator must permit SSH access to remotely manage routers in a network. The operations team resides on the 10.20.1.0/25 network. Which command will accomplish this task?
Answer: D
Is the question really from Cisco? No wonder Cisco is losing market share to competitors year by year. It has deny entries before permit entries, which are causing the issue. That's an intended mistake which requires the examinees to identify and choose an answer to rectify. However, apart from that, there are also other issues. The last entry, it's permitting outbound traffic to the operations team, and limiting the port to 22 on the operations side computers! Who told you the client side port of an SSH session is 22 as well? As for the 'correct' answer, D, it's actually deleting the whole ACL, and not just the single entry in the command. If you want to remove the whole ACL and write a new one, why don't you simply execute no access-list 2699? Do you think the Cisco employees who created those questions can pass CCNA?
Source: Adapted from community discussion — Joshua25
A port security violation has occurred on a switch port due to the maximum MAC address count being exceeded. Which command must be configured to increment the security-violation count and forward an SNMP trap?
Answer: C
Protect - drops the packet with unknown src address until you remove a secure mac address to drop below the max value. no trap is sent. Restrict- same but violation increments and TRAP sent to SNMP manager. shutdown- puts interface in error disabled and sends a trap to the manager
Source: Adapted from community discussion — dave1992
What is a practice that protects a network from VLAN hopping attacks?
Answer: C
VLAN Hopping is an attack where the attacker is able to send traffic from one VLAN into another, one of the attacks is the "Double Tagging". To prevent a Double Tagging attack, keep the native VLAN of all trunk ports different from user VLANs. LINK: https://cybersecurity.att.com/blogs/security-essentials/vlan-hopping-and-mitigation
Source: Adapted from community discussion — RODCCN
Where does a switch maintain DHCP snooping information?
Answer: D
Keep in mind a CAM table, and a MAC table are the same thing! Therefore, since they are each listed, you can eliminate both as potential answers. One way to remember is that CAM is MAC spelled backward.
Source: Adapted from community discussion — Networknovice
A network administrator must configure SSH for remote access to router R1. The requirement is to use a public and private key pair to encrypt management traffic to and from the connecting client. Which configuration, when applied, meets the requirements?
Answer: D
crypto key generate rsa [general-keys | usage-keys | signature | encryption] [label key-label] [exportable] [modulus modulus-size] [storage devicename :] [redundancy] [on devicename :] modulus modulus-size By default, the modulus of a certification authority (CA) key is 1024 bits. The recommended modulus for a CA key is 2048 bits. The range of a CA key modulus is from 350 to 4096 bits. As the default key is 1024 bits. So that the answer D is correct
Source: Adapted from community discussion — dicksonpwc
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
200-301 practice, question 941. 1334 questions available.
Version 1.0.0. How we source questions