Question No: 2

For security reasons, the IT manager has prohibited users from dynamically establishing trunks with their associated upstream switch. Which two actions can prevent interface trunking? (Choose two.)

A. Configure trunk and access interfaces manually.

B. Disable DTP on a per interface basis.

C. Apply BPDU guard and BPDU filter.

D. Enable switchport block on access ports.

View Answer

Question No: 3

After configuring new data VLANs 1020 through 1030 on the VTP server, a network engineer notices that none of the VTP clients are receiving the updates. What is the problem?

A. The VTP server must be reloaded.

B. The VTP version number must be set to version 3.

C. After each update to the VTP server, it takes up to 4 hours propagate.

D. VTP must be stopped and restarted on the server.

E. Another switch in the domain has a higher revision number than the server.

View Answer

Question No: 4

The network manager has requested that several new VLANs (VLAN 10, 20, and 30) are allowed to traverse the switch trunk interface. After the command switchport trunk allowed vlan 10,20,30 is issued, all other existing VLANs no longer pass traffic over the trunk. What is the root cause of the problem?

A. The command effectively removed all other working VLANs and replaced them with the new VLANs.

B. VTP pruning removed all unused VLANs.

C. ISL was unable to encapsulate more than the already permitted VLANs across the trunk.

D. Allowing additional VLANs across the trunk introduced a loop in the network.

View Answer

Question No: 5

Refer to the exhibit.

Which configuration on the HSRP neighboring device ensures that it becomes the active HSRP device in the event that port fa1/1 on Switch_A goes down?

A. Switch_B(config-if)#ip address 10.10.10.2 255.255.255.0

Switch_B(config-if)#standby 1 priority 200

Switch_B(config-if)#standby 1 preempt

Switch_B(config-if)#standby 1 ip 10.10.10.10 Switch_B(config-if)#standby 1 track interface fa 1/1

B. Switch_B(config-if)#ip address 10.10.10.2 255.255.255.0

Switch_B(config-if)#standby 1 priority 200

Switch_B(config-if)#standby 1 ip 10.10.10.10

C. Switch_B(config-if)#ip address 10.10.10.2 255.255.255.0

Switch_B(config-if)#standby 1 priority 195

Switch_B(config-if)#standby 1 preempt

Switch_B(config-if)#standby 1 ip 10.10.10.10

D. Switch_B(config-if)#ip address 10.10.10.2 255.255.255.0

Switch_B(config-if)#standby 1 priority 190

Switch_B(config-if)#standby 1 ip 10.10.10.10 Switch_B(config-if)#standby 1 track interface fa 1/1

View Answer

Question No: 6

What is the command for configuring root guard?

A. (config) spanning-tree guard root

B. (config-if) spanning-tree guard root

View Answer

Question No: 7

A server with a statically assigned IP address is attached to a switch that is provisioned for DHCP snooping. For more protection against malicious attacks, the network team is considering enabling dynamic ARP inspection alongside DHCP snooping. Which solution ensures that the server maintains network reachability in the future?

A. Disable DHCP snooping information option.

B. Configure a static DHCP snooping binding entry on the switch.

C. Trust the interface that is connected to the server with the ip dhcp snooping trust command.

D. Verify the source MAC address of all untrusted interfaces with ip dhcp snooping verify mac-address command.

View Answer

Question No: 8

Refer to the exhibit. Which statement about the interface is true?

A. The interface is down.

B. The other side of the interface is set as access.

C. The switch port command is missing from the configuration

D. The interface needs no shutdown configured.

View Answer

Question No: 9

Which First Hop Redundancy Protocol is an IEEE Standard?

A. GLBP

B. HSRP

C. VRRP

D. OSPF

View Answer

Question No: 10

Refer to the exhibit.

Which configuration ensures that the Cisco Discovery Protocol packet update frequency sent from DSW1 to ALS1 is half of the default value?

A. DSW1(config)#cdp timer 90

B. DSW1(config-if)#cdp holdtime 60

C. DSW1(config)#cdp timer 30

D. DSW1(config)#cdp holdtime 90

E. DSW1(config-if)#cdp holdtime 30

F. DSW1(config-if)#cdp timer 60

View Answer

Question No: 11

Refer to the exhibit.

Which option shows the expected result if a show vlan command is issued?

A)

B)

C)

D)

A. Exhibit A

B. Exhibit B

C. Exhibit C

D. Exhibit D

View Answer

Question No: 12

On which interface can port security be configured?

A. static trunk ports

B. destination port for SPAN

C. EtherChannel port group

D. dynamic access point

View Answer