Q1. Which SDM template disables routing and supports the maximum number of unicast MAC addresses?

A. VLAN

B. access

C. default

D. routing

View Answer

Q2. A network engineer is setting up a new switched network. The network is expected to grow and add many new VLANs in the future. Which Spanning Tree Protocol should be used to reduce switch resources and managerial burdens that are associated with multiple spanning-tree instances?

A. RSTP

B. PVST

C. MST

D. PVST+

E. RPVST+

View Answer

Q3. Refer to the exhibit.

Switch A, B, and C are trunked together and have been properly configured for VTP. Switch B has all VLANs, but Switch C is not receiving traffic from certain VLANs. What would cause this issue?

A. A VTP authentication mismatch occurred between Switch A and Switch B.

B. The VTP revision number of Switch B is higher than that of Switch A.

C. VTP pruning is configured globally on all switches and it removed VLANs from the trunk interface that is connected to Switch C.

D. The trunk between Switch A and Switch B is misconfigured.

View Answer

Q4. Which statement about Cisco devices learning about each other through Cisco Discovery Protocol is true?

A. Each device sends periodic advertisements to multicast address 01:00:0C:CC:CC:CC.

B. Each device broadcasts periodic advertisements to all of its neighbors.

C. Each device sends periodic advertisements to a central device that builds the network topology.

D. Each device sends periodic advertisements to all IP addresses in its ARP table.

View Answer

Q5. Refer to the exhibit.

What is the result of the configuration?

A. The EtherChannels would not form because the load-balancing method must match on the devices.

B. The EtherChannels would form and function properly even though the load-balancing and EtherChannel modes do not match.

C. The EtherChannels would form, but network loops would occur because the load- balancing methods do not match.

D. The EtherChannels would form and both devices would use the dst-ip load-balancing method because Switch1 is configured with EtherChannel mode active.

View Answer

Q6. An administrator recently configured all ports for rapid transition using PortFast. After testing, it has been determined that several ports are not transitioning as they should. What is the reason for this?

A. RSTP has been enabled per interface and not globally.

B. The STP root bridge selection is forcing key ports to remain in non-rapid transitioning mode.

C. STP is unable to achieve rapid transition for trunk links.

D. The switch does not have the processing power to ensure rapid transition for all ports.

View Answer

Q7. Which SDM template is the most appropriate for a Layer 2 switch that provides connectivity to a large number of clients?

A. VLAN

B. default

C. access

D. routing

View Answer

Q8. After port security is deployed throughout an enterprise campus, the network team has been overwhelmed with port reset requests. They decide to configure the network to automate the process of re-enabling user ports. Which command accomplishes this task?

A. switch(config)# errdisable recovery interval 180

B. switch(config)# errdisable recovery cause psecure-violation

C. switch(config)# switchport port-security protect

D. switch(config)# switchport port-security aging type inactivity

E. switch(config)# errdisable recovery cause security-violation

View Answer

Q9. Refer to the exhibit.

How can the traffic that is mirrored out the GigabitEthernet0/48 port be limited to only traffic that is received or transmitted in VLAN 10 on the GigabitEthernet0/1 port?

A. Change the configuration for GigabitEthernet0/48 so that it is a member of VLAN 10.

B. Add an access list to GigabitEthernet0/48 to filter out traffic that is not in VLAN 10.

C. Apply the monitor session filter globally to allow only traffic from VLAN 10.

D. Change the monitor session source to VLAN 10 instead of the physical interface.

View Answer

Q10. A DHCP configured router is connected directly to a switch that has been provisioned with DHCP snooping. IP Source Guard with the ip verify source port-security command is configured under the interfaces that connect to all DHCP clients on the switch. However, clients are not receiving an IP address via the DHCP server. Which option is the cause of this issue?

A. The DHCP server does not support information option 82.

B. The DHCP client interfaces have storm control configured.

C. Static DHCP bindings are not configured on the switch.

D. DHCP snooping must be enabled on all VLANs, even if they are not utilized for dynamic address allocation.

View Answer