Bookmark  
   
 
cisco 640-801 ccna certification exam

Cisco 640-801 CCNA Certification Exam

Cisco Certified Network Associate Exam 640-801... Continue Below To CCNA Articles and Cisco 640-801 Questions & Answers. The real CCNA Exam has a duration on 90 minutes to complete and has approximately 45 - 65 questions.

The CCNA exam 640-801 is the qualifying exam available to candidates pursuing a single-exam option for the Cisco Certified Network Associate CCNA certification. The CCNA 640-801 exam will test materials from the new Interconnection Cisco Network Devices (ICND) course as well as the new Introduction to Cisco Networking Technologies (INTRO) course. The 640-801 certification exam will certify that the successful candidate has important knowledge and skills necessary to select, connect, configure, and troubleshoot the various Cisco networking devices. The Cisco 640-801 CCNA exam covers topics on Extending Switched Networks with VLANS, Determining IP Routes, Managing IP traffic with Access Lists, Establishing Point-to-Point connections, and Establishing Frame Relay Connections. All these objectives are designated from the Cisco.com website. Please note that exam topics and objectives may change without notice, since technologies are always changing.

The Cisco CCNA certification is just the first step into Cisco networking and is the first stepping stone to higher certifications on the Cisco cert ladder. The Cisco CCNA is a prerequisite for CCNP, CCSP, CCDP, and recommended for CCIP certifications.

CCNA 640-801 Exam Objectives:

Planning & Designing

  • Design a simple LAN using Cisco Technology
  • Design an IP addressing scheme to meet design requirements
  • Select an appropriate routing protocol based on user requirements
  • Design a simple internetwork using Cisco technology
  • Develop an access list to meet user specifications
  • Choose WAN services to meet customer requirements

Implementation & Operation

  • Configure routing protocols given user requirements
  • Configure IP addresses, subnet masks, and gateway addresses on routers and hosts
  • Configure a router for additional administrative functionality
  • Configure a switch with VLANS and inter-switch communication
  • Implement a LAN
  • Customize a switch configuration to meet specified network requirements
  • Manage system image and device configuration files
  • Perform an initial configuration on a router
  • Perform an initial configuration on a switch
  • Implement access lists
  • Implement simple WAN protocols

Troubleshooting

  • Utilize the OSI model as a guide for systematic network troubleshooting
  • Perform LAN and VLAN troubleshooting
  • Troubleshoot routing protocols
  • Troubleshoot IP addressing and host configuration
  • Troubleshoot a device as part of a working network
  • Troubleshoot an access list
  • Perform simple WAN troubleshooting

Technology

  • Describe network communications using layered models
  • Describe the Spanning Tree process
  • Compare and contrast key characteristics of LAN environments
  • Evaluate the characteristics of routing protocols
  • Evaluate TCP/IP communication process and its associated protocols
  • Describe the components of network devices
  • Evaluate rules for packet control
  • Evaluate key characteristics of WANs
CCNA Certification Exams
Cisco 640-801 CCNA Certification Exam (Cisco Certified Network Associate Exam)
Cisco 640-821 INTRO Certification Exam (Cisco Networking Technologies Exam)
Cisco 640-811 ICND Certification Exam (Cisco Interconnecting Cisco Networking Devices Exam)
Back to Cisco Certifications
Back to Certifications
 
Relevant Resources

Need Cisco Hardware for your Cert?
Call 813.852.6400 now for more information to find the best router or switch to best help you with your certification exam. Having "real" hands-on experience is extremely beneficial not just for testing, but also ensures you are actually familiar with the device you are working on.
Cisco Routers
Cisco 600/800/1000 Series Routers
Cisco 1600 Series Routers
Cisco 1700 Series Routers
Cisco 2500 Series Routers
Cisco 2600 Series Routers
Cisco 3600 Series Routers
Cisco 3700 Series Routers
Cisco 7000 Series Routers
Cisco 12000 Series Routers
Cisco Switches
Cisco 1900 Series Catalyst Switches
Cisco 2900 Series Catalyst Switches
Cisco 3500 Series Catalyst Switches
Cisco 3550 Series Catalyst Switches
Cisco 3750 Series Catalyst Switches
Cisco 4000 Series Catalyst Switches
Cisco 5000 Series Catalyst Switches
Cisco 6000 Series Catalyst Switches
cisco ccna certification

Cisco 640-801 Questions & Answers (Practice Makes Perfect)

We hope these questions and answers on the Cisco 640-801 exam help you on your CCNA certification track.


Question: What command do we use to change the name of the router to R1?
A. router(config)#hostname R1
B. router(config-router)#hostname R1
C. router(config)#host name R1
D. router(config)>hostname R1
Answer: A. router(config)#hostname R1
Explanation: The global hostname configuration command will change the hostname of a router.

Question: Which command will display the routing table?
A. show route
B. show ip route
C. show ip table
D. show ip routing table
Answer: B. show ip route
Explanation: The show ip route command will display the whole routing table. Keywords like static, ospf, rip can be added to only display those entries in the routing table.

Question: Which protocol is used to create a loop free environment in a bridged network?
A. NTP
B. FTP
C. SNMP
D. Spanning-Tree
Answer: D. Spanning-Tree
Explanation: The spanning-tree protocol is used in a bridged/switched network to create a loop free environment.

Question: We need to provision for 500 users on each segment. The network address range is 172.16.0.0/16. What is the subnet mask required?
A. 172.16.0.0/23
B. 172.16.0.0/24
C. 172.16.0.0/25
D. 172.16.0.0/26
Answer: A. 172.16.0.0/23
Explanation: In order to accommodate for 500 users on each subnet we need to use 9 bits for the host portion of the IP address 2^9 = 512 - 2 = 510 hosts on each subnet. This leaves us with 7 bits available for subnets, adding these 7 bits to the default class B network mask the subnet mask becomes 172.16.0.0/23 or 172.16.0.0 255.255.254.0

Question: Which of the following are correct?
A. ip access-list 15 permit tcp any any eq 80
B. access-list 150 permit tcp any any eq 80
C. ip access-list extended www
D. ip access-list 800 permit tcp any any eq 80
Answer: B. access-list 150 permit tcp any any eq 80
C. ip access-list extended www
Explanation: Extended ip access lists can be named, ip access-list extended name, or numbered with a range from 100 - 199.

Question: What is the correct access-list to allow a specific host to telnet anywhere but block telnet access to that host, all other traffic is allowed to pass through the router? Note that the ACL is applied inbound on the host-facing interface.
A. ip access-list 123 permit tcp host 10.1.1.1 any eq 23 ip access-list 123 deny tcp any host 10.1.1.1 eq 23 ip access-list 123 permit ip any any ip access-list 123 deny any any log
B. ip access-list 123 permit ip host 10.1.1.1 any eq 23 ip access-list 123 deny ip any host 10.1.1.1 eq 23 ip access-list 123 permit ip any any ip access-list 123 deny any any log
C. ip access-list 123 permit tcp host 10.1.1.1 any eq telnet ip access-list 123 deny tcp any host 10.1.1.1 eq telnet ip access-list 123 deny any any log ip access-list 123 permit ip any any
D.ip access-list 23 permit tcp host 10.1.1.1 any eq 23 ip access-list 23 deny tcp any host 10.1.1.1 eq 23 ip access-list 23 permit ip any any ip access-list 23 deny any any log
Answer: A. ip access-list 123 permit tcp host 10.1.1.1 any eq 23 ip access-list 123 deny tcp any host 10.1.1.1 eq 23 ip access-list 123 permit ip any any ip access-list 123 deny any any log
Explanation: In this case, in an inbound ACL: permit tcp host 10.1.1.1 any eq 23 ! this host *can make TCP connections out to the internet with dport=23 deny tcp any host 10.1.1.1 eq 23 ! this host is now protected against telnet access

Question: Which of the following are class B networks?
A. 11101100.00010000.00000000.00000000
B. 17.216.0.0
C. 172.16.0.0
D. 10101100.00010000.00000000.00000000
Answer: C. 172.16.0.0
D. 10101100.00010000.00000000.00000000
Explanation: RFC1918 (http://www.cis.ohio-state.edu/cgi-bin/rfc/rfc1918.html) specifies the address allocation for private internets. Class A: 10.0.0.0 - 10.255.255.255 (10/8 prefix) Class B: 172.16.0.0 - 172.31.255.255 (172.16/12 prefix) Class C: 192.168.0.0 - 192.168.255.255 (192.168/16 prefix)

Question: What is the correct configuration for enabling RIP version 1 in the network?
A. R1(config)#router rip R1(config-router)#network 10.0.0.0 R1(config-router)#network 192.168.1.0 R2(config)#router rip R2(config-router)#network 10.0.0.0 R2(config-router)#network 192.168.1.0
B. R1(config)#router rip R1(config)#network 10.0.0.0 R1(config)#network 192.168.1.0 R2(config)#router rip R2(config)#network 10.0.0.0 R2(config)#network 192.168.1.0
C. R1(config)#router rip version 1 R1(config-router)#network 10.0.0.0 R1(config-router)#network 192.168.1.0 R2(config)#router rip version 1 R2(config-router)#network 10.0.0.0 R2(config-router)#network 192.168.1.0
D. R1(config)#router rip R2(config)#router rip
Answer: A. R1(config)#router rip R1(config-router)#network 10.0.0.0 R1(config-router)#network 192.168.1.0 R2(config)#router rip R2(config-router)#network 10.0.0.0 R2(config-router)#network 192.168.1.0
Explanation: To enable the RIP process on a router we use the router rip global configuration command. After enabling the RIP process we specify the networks to be advertised by RIP with the network command in router configuration mode.

Question: What is the administrative distance of RIP version 2?
A. 90
B. 100
C. 110
D. 120
Answer: D. 120
Explanation:
Source Administrative Distance
Connected Interface 0
Static Route 1
EIGRP Summary Route 5
External BGP 20
Internal EIGRP 90
IGRP 100
OSPF 110
IS-IS 115
RIP 120
EGP 140
On Demand Routing (ODR) 160
External EIGRP 170
Internal BGP 200

Question: TCP is located at which layer of the OSI model?
A. Session
B. Transport
C. Network
D. Presentation
Answer: B. Transport
Explanation: TCP and UDP are both found on the transport layer of the OSI model.

Question: After performing a password recovery on our 2600 series router we need to change the config register back to the original setting. What is the default setting?
A. 0x1202
B. 0x142
C. 0x2102
D. 0x2142
Answer: C. 0x2102
Explanation: 0x2102 this setting tells the router to load the configuration file from NVRAM. This is the default setting prior to a password recovery procedure.

Question: Which of the following are considered interior routing protocols?
A. IGRP
B. BGP
C. EIGRP
D. OSPF
E. RIP
Answer: A. IGRP
C. EIGRP
D. OSPF
E. RIP
Explanation: RIP, IGRP, EIGRP and OSPF are all interior routing protocols.

Question: Which of the following statements about IGRP are true?
A. The administrative distance of IGRP is 90.
B. IGRP is Cisco proprietary.
C. IGRP is described in RFC791.
D. IGRP is classful.
E. The administrative distance of IGRP is 100.
F. IGRP is classless.
Answer: B. IGRP is Cisco proprietary.
D. IGRP is classful.
E. The administrative distance of IGRP is 100.
Explanation: Cisco developped IGRP as a robust routing protocol. Like RIPv1, IGRP is a classful routing protocol. The administrative distance is 100.

Question: Which of the following routing protocols are link-state protocols?
A. OSPF
B. BGP
C. RIP
D. EIGRP
E. IS-IS
Answer: A. OSPF
E. IS-IS
Explanation: OSPF and IS-IS are pure link-state routing protocols. EIGRP is considered a hybrid using parts of distance vector and parts of link-state routing protocols.

Question: What is the reason to assign an IP Address to VLAN1 on a Catalyst 3550 switch?
A. To enable management of the switch.
B. To enable Cisco Express Forwarding on the switch
C. To enable spanning-tree on the switch.
D. To enable routing on the switch.
Answer: A. To enable management of the switch.
Explanation: The default management VLAN is VLAN1 so if we want to use this VLAN to manage our switch we assign an IP Address to this VLAN. Cisco recommends to use a different VLAN for management.

Question: Telnet uses which tcp port?
A. 23
B. 25
C. 443
D. 22
Answer: A. 23
Explanation: Telnet uses TCP and UDP port 23. For More information on well known port numbers can be found: http://www.ietf.org/rfc/rfc1700.txt

Question: Which command will assign an IP Address (192.168.1.1/24) to interface E0?
A. router(config-if-e0)#ip address 192.168.1.1 255.255.255.0
B. router(config-if)#ip address 192.168.1.1 subnetmask 255.255.255.0
C. router(config)#ip address 192.168.1.1 255.255.255.0
D. router(config-if)#ip address 192.168.1.1 255.255.255.0
Answer: D. router(config-if)#ip address 192.168.1.1 255.255.255.0
Explanation: The ip address x.x.x.x y.y.y.y command, where x.x.x.x is the ip address and y.y.y.y is the subnetmask, in interface configuration mode will assign an ip address to that interface.

Question: In IPSec terminology, what does ESP stand for?
A. Extra Security Protocol
B. Enhanced Security Payload
C. Encapsulating Security Payload
D. Enhanced Security Protocol
Answer: C. Encapsulating Security Payload
Explanation:

Question: When trying to ping 10.1.1.1 the responses are all N. What does N mean?
A. Unknown packet
B. Network unreachable
C. Port unreachable
D. Destination unreachable
Answer: B. Network unreachable
Explanation:
Ping command codes:  
! echo reply
. time out
U destination unreachable
N network unreachable
P port unreachable
Q source quench received
M can not fragment
? unknown packet

Question: Distance Vector protocols use which methods to avoid Counting to Infinity?
A. Administrative distance
B. Spanning Tree protocol
C. Triggered updates
D. Hold-down timers
E. Hello protocol
Answer: C. Triggered updates
D. Hold-down timers
Explanation: Distance Vector protocols use hold-down timers and triggered updates to avoid counting to infinity.

Question: We want to configure fastethernet0/24 to be a trunk port on our Catalyst 2950 switch. Only if the other device in port 0/24 is also configured to be a trunk the port should become a trunk. What do we configure on the switch?
A. switch(config)#interface fastethernet 0/24 switch(config-if)#switchport mode access dynamic
B. switch(config)#interface fastethernet 0/24 trunk
C. switch(config)#interface fastethernet 0/24 switch(config-if)#switchport mode dynamic auto
D. switch(config)#interface fastethernet 0/24 switch(config-if)#switchport mode trunk desirable
Answer: C. switch(config)#interface fastethernet 0/24 switch(config-if)#switchport mode dynamic auto
Explanation: The dynamic auto keyword will make the port negotiate the link from being nontrunking to trunk mode. The port becomes a trunk when the connected device is configured to be a trunk or dynamic desirable port. If the connected device is not configured as one of those options the port remains a nontrunk port.

Question: Which of the following are VTP modes?
A. Slave Mode
B. Server Mode
C. Master Mode
D. Client Mode
E. Bridge Mode
F. Transparent Mode
G. Root Mode
Answer: B. Server Mode
D. Client Mode
F. Transparent Mode
Explanation: A switch that is member of a VTP domain can be a client, server or transparent vtp mode member of that domain.

Question: A repeater operates at which layer of the OSI model?
A. Physical layer.
B. Application layer.
C. Network layer.
D. Data Link layer.
E. Transport layer.
F. Session layer.
Answer: A. Physical layer.
Explanation: A repeater just enhances the electrical signal on the wire so therefore it is considered to operate at the physical layer.

Question: This ISDN protocol deals with concepts, aspects and interfaces issues.
A. I-series
B. Q-series
C. E-series
D. D-series
Answer: A. I-series
Explanation: E-series describe the telephone networks (PSTN) and ISDN.<br> I-series describe the ISDN concepts, aspects and interfaces. Q-series describe switching and signalling. (Q.921 & Q.931)

Question: A PRI (E1) consists of how many bearer and signaling channels?
A. 23 bearer (64k) and 1 signalling (16k)
B. 30 bearer (64k) and 1 signalling (64k)
C. 2 bearer (64k) and 1 signalling (16k)
D. 30 bearer (64k) and 1 signalling (16k)
Answer: B. 30 bearer (64k) and 1 signalling (64k)
Explanation: An PRI E1 ISDN interfaces consits of 30 64k bearer channels (B) and 1 64k signalling channel (D). It is commonly represented as 30B+D.

Question: After installing a PRI card in our router and configuring the switch type we need to configure the framing etc... What is the correct configuration?
A. Router(config)#interface PRI 0 Router(config-if)#framing esf Router(config-if)#linecode b8zs Router(config-if)#pri-group timeslots 1-24
B. Router(config)#controller t1 1/0 Router(config-controller)#framing esf Router(config-controller)#linecode b8zs Router(config-controller)#pri-group timeslots 0-23
C. Router(config)#controller t1 1/0 Router(config-controller)#framing esf Router(config-controller)#linecode b8zs Router(config-controller)#pri-group timeslots 1-24
D. Router(config)#controller t1 1/0 Router(config-controller)#pri-group timeslots 1-24
Answer: C. Router(config)#controller t1 1/0 Router(config-controller)#framing esf Router(config-controller)#linecode b8zs Router(config-controller)#pri-group timeslots 1-24
Explanation: The controller configuration enables you to configure the physical layer parameters of a channelized T1 or E1 interface. The controller t1 1/0 represents the controller for a channelized interface known to the router as serial 1/0. We then configure the encoding (B8ZS, AMI (T1) or HDB3 (E1) and framing (SF, ESF (T1) or CRC4(E1). And then we define which timeslots will be used, numbered from 1 to 24 with 24 being the D channel.

Question: Which of the following statements are true?
A. IGRP uses costs as metric
B. IGRP hold-down timer is 180 seconds
C. RIP v1 supports VLSM
D. The update timer in IGRP is 90 seconds
Answer: D. The update timer in IGRP is 90 seconds
Explanation: IGRP has a hold down timer of 280 seconds and uses bandwidth and delay as metrics. RIP v2 supports VLSM.

Question: Which of the following commands will show us the LMI type being used by the router?
A. Show interfaces
B. Show lmi
C. Show frame-relay map
D. Show frame-relay lmi
E. Show interface lmi
Answer: A. Show interfaces
D. Show frame-relay lmi
Explanation:

R1#show frame-relay lmi
LMI Statistics for interface Serial0 (Frame Relay DCE) LMI TYPE = CISCO
Invalid Unnumbered info 0     Invalid Prot Disc 0
Invalid dummy Call Ref 0       Invalid Msg Type 0
Invalid Status Message 0        Invalid Lock Shift 0
Invalid Information ID 0         Invalid Report IE Len 0
Invalid Report Request 0        Invalid Keep IE Len 0
Num Status Enq. Rcvd 72      Num Status msgs Sent 71
Num Update Status Sent 0     Num St Enq. Timeouts 0

R1#show interfaces
! output omitted...

Serial 0 is up, line protocol is up
Hardware is MCI Serial
Internet address is 10.10.10.1, subnet mask is 255.255.255.0
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255
Encapsulation FRAME-RELAY, loopback not set, keepalive set
LMI DLCI 0, LMI sent 10, LMI stat recvd 10
LMI type is ANSI Annex D
Last input 0:00:00, output 0:00:00, output hang never
Output queue 0/40, 0 drops; input queue 0/75, 0 drops


Question: How do we enable the EIGRP routing process on a router?
A. R1(config)#router eigrp R1(config-router)#network 10.0.0.0
B. R1(config)#router eigrp 100 R1(config)#network 10.0.0.0
C. R1(config)#router eigrp R1(config)#network 10.0.0.0
D. R1(config)#router eigrp 100 R1(config-router)#network 10.0.0.0
Answer: D. R1(config)#router eigrp 100 R1(config-router)#network 10.0.0.0
Explanation: To enable the EIGRP routing process on a router we use the router eigrp as_number in global configuration mode. In router configuration mode we specify the networks to be advertised.

Question: After an IOS upgrade how can we verify if the correct IOS is loaded?
A. Show log
B. Show tftp
C. Show flash
D. Show memory
Answer: C. Show flash
Explanation: The show flash command can be used to verify the content of the flash memory.

Question: In what order is the boot sequence of a router executed?
A. BootStrap,IOS,Configuration,POST
B. POST,Bootstrap,IOS,Configuration
C. POST,IOS,Configuration,BootStrap
D. IOS,POST,Configuration,BootStrap
Answer: B. POST,Bootstrap,IOS,Configuration
Explanation: The boot process is as follows:
- The router performs a POST to discover and verify the hardware
- The 2nd step is loading and running the Bootstrap from ROM
- The router finds the IOS and loads it
- The final step is finding the configuration file and loading it into running-config

Question: The flash memory in the router is not big enough to hold another IOS. We need to use a newer version of the IOS but can not delete the old one from the flash memory. How can we do this?
A. add the following line to the configuration: boot system tftp IOS_Name x.x.x.x
B. add the following line to the configuration: boot system flash IOS_Name
C. add the following line to the configuration: boot system ROM
D. This can not be done
Answer: A. add the following line to the configuration: boot system tftp IOS_Name x.x.x.x
Explanation: The boot system global configuration command allows us to alter the default behavior (first file in flash, tftp, IOS in ROM or ROMMON) of obtaining an IOS.

Question: We want to enable OSPF on E0 (area0) and S0(area1) of R1. What is the correct configuration?
A. R1(config)#router ospf 100 R1(config-router)#network 10.1.1.0 0.0.0.255 area 0 R1(config-router)#network 10.1.2.0 0.0.0.255 area 1
B. R1(config)#router ospf 100 R1(config-router)#network 10.1.1.0 255.255.255.0 area 0 R1(config-router)#network 10.1.2.0 255.255.255.0 area 1
C. R1(config)#router ospf 100 R1(config-router)#network 10.1.0.0 0.0.255.255 area 0
D. R1(config)#router ospf R1(config-router)#network 10.1.1.0 0.0.0.255 area 0 R1(config-router)#network 10.1.2.0 0.0.0.255 area 1
Answer: A. R1(config)#router ospf 100 R1(config-router)#network 10.1.1.0 0.0.0.255 area 0 R1(config-router)#network 10.1.2.0 0.0.0.255 area 1
Explanation: Using the global router ospf as_number command we enable the OSPF routing process on the router. In router configuration mode we add the networks that will be advertised in the routing process. OSPF uses wildcard masks just like access control lists.

Question: What is the easiest way to assign multiple ports of a switch to the same VLAN?
A. S1(config)#interface fastethernet 0/1 S1(config-if)#switchport mode access S1(config-if)#switchport access vlan 10 S1(config)#interface fastethernet 0/2 S1(config-if)#switchport mode access S1(config)#interface fastethernet 0/3 S1(config-if)#switchport mode access S1(config-if)#switchport access vlan 10 And this for all ports that need to be in that VLAN
B. S1(config)#interface range fastethernet 0/1 - 10 S1(config-if-range)#switchport mode access S1(config-if-range)#switchport access vlan 10
C. S1(config)#interface range fastethernet 0/1 - 10 S1(config-if)#switchport mode access S1(config-if)#switchport access vlan 10
D. S1(config)#interface fastethernet 0/1 - 10 S1(config-range)#switchport mode access S1(config-range)#switchport access vlan 10
Answer: B. S1(config)#interface range fastethernet 0/1 - 10 S1(config-if-range)#switchport mode access S1(config-if-range)#switchport access vlan 10
Explanation: The interface range fastethernet range global configuration command allows to assign parameters to more then one interface at once.

Question: Which of the following statements are true?
A. Standard accesslists are placed as close as possible to the source.
B. Extended accesslists are placed as close as possible to the source.
C. Standard accesslists are placed as close as possible to the destination.
D. Extended accesslists are placed as close as possible to the destination.
Answer: B. Extended accesslists are placed as close as possible to the source.
C. Standard accesslists are placed as close as possible to the destination.
Explanation: Because standard access lists filter only on ip address it's better to place them as close to the destination as possible, extended access lists filter on ports so it's better to stop that traffic close to the source so no bandwidth is waisted.

Question: We want to control telnet access to the router to only allow the 10.1.1.0/24 network. What is the configuration?
A. line vty 0 4 login password Fr3eT35t access-class 1 in access-list 1 permit 10.1.1.0 255.255.255.0
B. line vty 0 4 login password Fr3eT35t access-group 1 in access-list 1 permit 10.1.1.0 0.0.0.255
C. line vty 0 login password Fr3eT35t access-class 1 in access-list 1 permit 10.1.1.0 0.0.0.255
D. line vty 0 4 login password Fr3eT35t access-class 1 in access-list 1 permit 10.1.1.0 0.0.0.255
Answer: D. line vty 0 4 login password Fr3eT35t access-class 1 in access-list 1 permit 10.1.1.0 0.0.0.255
Explanation: The access-class command will use the specified access list to allow or deny telnet access to the router. The in keyword specifies to telnet connections into the router.

Question: How many hosts are available on each of the subnets of the following network 172.16.1.0/27?
A. 32
B. 30
C. 31
D. 253
Answer: B. 30
Explanation: The network of 172.16.1.0/27 has 5 bits available for hosts. Using the formula to find the hosts 2^n - 2 = 2^5 - 2 = 30 available hosts on each subnet.

Question: Which of the following networks are private internetworks?
A. 9.0.0.0/8
B. 172.15.5.0/16
C. 198.169.0.0/24
D. 192.168.1.0/24
E. 192.169.0.0/24
F. 172.16.5.0/24
G. 10.1.1.0/24
Answer: D. 192.168.1.0/24
F. 172.16.5.0/24
G. 10.1.1.0/24
Explanation: RFC1918 (http://www.cis.ohio-state.edu/cgi-bin/rfc/rfc1918.html) specifies the address allocation for private internets. Class A = 10.0.0.0 - 10.255.255.255 (10/8 prefix), Class B = 172.16.0.0 - 172.31.255.255 (172.16/12 prefix), Class C = 192.168.0.0 - 192.168.255.255 (192.168/16 prefix).

Question: What is the network address, range and broadcast address of the 3rd subnet of the following network 192.16.1.0/26? [Do include subnet zero]
A. network 192.16.1.128 hosts 192.16.1.129 - 192.16.1.190 broadcast 192.16.1.191
B. network 192.16.1.64 hosts 192.16.1.65 - 192.16.1.126 broadcast 192.16.1.127
C. network 192.16.1.129 hosts 192.16.1.130 - 192.16.1.191 broadcast 192.16.1.192
D. network 192.16.1.192 hosts 192.16.1.193 - 192.16.1.254 broadcast 192.16.1.255
Answer: A. network 192.16.1.128 hosts 192.16.1.129 - 192.16.1.190 broadcast 192.16.1.191
Explanation: We are using 2 bits of the last octet for subnetting so this leaves us 6 bits for hosts. The first two bits are set to 00 for the first subnet. So the first subnet has hosts 1 to 62 in binary 0000 0001 to 0011 1110
As we know the broadcast is all 1s, this gives us 0011 1111 or 63 so for the first subnet the broadcast address is 192.16.1.63
Now the third subnet, the 2 bits used for the subnet position are set to 10 and again 6 bits for hosts on this subnet.
Now the host range, the first host is 10 00 0001, or 129, the last host is 10 11 1110 or 190
The broadcast, 10 11 1111 or 191 giving us 192.16.1.191

Be aware that this explanation takes into account subnet zero and that is not the standard for the exam!!!

Question: What debug command do we use to check ISDN call setup/teardown?
A. Debug isdn q921
B. Debug isdn dialer
C. Debug isdn dialer events
D. Debug isdn q931
Answer: D. Debug isdn q931
Explanation: The debug isdn q931 will list ISDN messages for call setup and teardown.

Question: What command do we use to see the status of the 3 layers of ISDN?
A. Show isdn layer
B. Show dialer interface
C. Show isdn status
D. Show isdn history
Answer: C. Show isdn status
Explanation: The show isdn status command list the switchtype and the current active layers.
R1#show isdn status
The current ISDN Switchtype = basic-net3
ISDN BRI0 interface
Layer 1 Status:
Active
Layer 2 Status:
TEI = 64, State = MULTIPLE_FRAME_ESTABLISHED
Layer 3 Status:
1 Active Layer 3 Call(s)

! output omitted

Question: What is the access list configuration and placement to allow the displayed host access to the webserver and unix server only. All other hosts on the network are allowed to access all network resources.
A. On R1 access-list 100 permit tcp host 10.1.1.15 host 192.168.1.13 eq www access-list 100 permit tcp host 10.1.1.15 host 192.168.1.27 eq 23 access-list 100 deny ip host 10.1.1.15 any
B. On R1 access-list 100 permit tcp host 10.1.1.15 host 192.168.1.13 eq www access-list 100 permit tcp host 10.1.1.15 host 192.168.1.27 eq 23 access-list 100 deny ip host 10.1.1.15 any access-list 100 permit ip any any
C. On R1 access-list 99 permit tcp host 10.1.1.15 host 192.168.1.13 eq www access-list 99 permit tcp host 10.1.1.15 host 192.168.1.27 eq 23 access-list 99 deny ip host 10.1.1.15 any access-list 99 permit ip any any
D. On R2 access-list 100 permit tcp host 10.1.1.15 host 192.168.1.13 eq www access-list 100 permit tcp host 10.1.1.15 host 192.168.1.27 eq 23 access-list 100 permit ip any any
E. On R2 access-list 100 permit tcp host 10.1.1.15 host 192.168.1.13 eq www access-list 100 permit tcp host 10.1.1.15 host 192.168.1.27 eq 23 access-list 100 deny ip host 10.1.1.15 any access-list 100 permit ip any any
Answer: B. On R1 access-list 100 permit tcp host 10.1.1.15 host 192.168.1.13 eq www access-list 100 permit tcp host 10.1.1.15 host 192.168.1.27 eq 23 access-list 100 deny ip host 10.1.1.15 any access-list 100 permit ip any an
Explanation: Because we are using an extended access list we place this as close to the source as possible to make sure the traffic is not using bandwidth.

Question: Which command do we use to display the NAT table?
A. Show ip nat table
B. Show ip nat log
C. Show ip nat detail
D. Show ip nat translations
Answer: D. Show ip nat translations
Explanation: The show ip nat translations will display the current active translations

Question: What are valid hosts on the 3rd subnet of 172.16.1.0/26?
A. 172.16.1.110
B. 172.16.1.155
C. 172.16.1.130
D. 172.16.1.127
E. 172.16.1.193
F. 172.16.1.65
Answer: B. 172.16.1.155
C. 172.16.1.130
Explanation: We are using 2 bits of the last octet for subnetting so this leaves us 6 bits for hosts. The first two bits are set to 00 for the first subnet. Now the third subnet, the 2 bits used for the subnet position are set to 10 and again 6 bits for hosts on this subnet. The first host is 10 00 0001, or 129, the last host is 10 11 1110 or 190, so all hosts in that range are valid hosts for the 3rd subnet.This explanation takes the all zero's subnet into account, this is not the way on the exam!!

Question: Which STP timer is decribe here: This timer defines the time involved to change an interface from blocking state to forwarding state.
A. Forward timer
B. Delay timer
C. Forward wait
D. Max Age
E. Forward Delay
F. Hello
Answer: E. Forward Delay
Explanation: The forward delay timer defines the time involved to change an interface from blocking state to forwarding state

Question: Which feature can we implement to place a switchport in forwarding state immediately?
A. PortFast
B. BPDU Guard
C. UplinkFast
D. BackboneFast
Answer: A. PortFast
Explanation: The PortFast feature enables a port to go from blocking state to forwarding state immediately without going through the intermediate STP status changes.

Question: In STP a port is in listening state, that port in RSTP would be in ______ state.
A. learning
B. disabled
C. forwarding
D. blocking
E. discarding
Answer: E. discarding
Explanation: None

Question: PPP supports which protocols for authentication?
A. EAP
B. RADIUS
C. MS-CHAP
D. AAA
E. CHAP
F. PAP
G. 3DES
Answer: A. EAP
C. MS-CHAP
E. CHAP
F. PAP
Explanation: PPP supports PAP, CHAP. MS-CHAP and EAP.

Question: The network in the exhibit has just been installed and when trying to ping the servers we do not get a response. What needs to be configured on the router(s)?
A. R2(config)#ip route 192.168.1.0 255.255.255.0 172.16.1.2 R1(config)#ip route 10.1.1.0 255.255.255.0 172.16.1.1
B. R1(config)#ip route 192.168.1.0 255.255.255.0 172.16.1.2 R2(config)#ip route 10.1.1.0 255.255.255.0 172.16.1.1
C. R1(config)#ip route 192.168.1.0 255.255.255.0 172.16.1.1 R2(config)#ip route 10.1.1.0 255.255.255.0 172.16.1.2
D. R1(config)#ip route 192.168.1.0 255.255.255.0 172.16.1.2
Answer: B. R1(config)#ip route 192.168.1.0 255.255.255.0 172.16.1.2 R2(config)#ip route 10.1.1.0 255.255.255.0 172.16.1.1
Explanation: Routers know about connected networks by default, they are in the routing table providing the interface is in an "up/up" state. By adding static routes we can add networks to the routing table that are not directly connected to the router.

Question: When a distance vector routing protocol advertises a route with an infinite metric this is called ___________.
A. Route Poisoning
B. Split Horizon
C. Route dampening
D. Loop prevention
Answer: A. Route Poisoning
Explanation: When a router is running a distance vector protocol and it notices that a connected network is no longer valid (serial link failure for example) the router using route poisoning will advertise that route with an infinite metric.

Question: In a frame-relay network how can we find out the information of the next-hop router layer 3 address and the layer 2 address used to reach that destination?
A. Show frame-relay pvc
B. Show frame-relay detail
C. Show frame-relay lmi
D. Show frame-relay map
Answer: D. Show frame-relay map
Explanation: The show frame-relay map command displays the mappings of the layer 3 (IP) to layer 2 (DLCI) addresses.

R1#show frame-relay map
Serial0 (up): ip 192.168.1.2 dlci 147(0x34,0xC40), dynamic,
broadcast,, status defined, active>

Question: Which key sequence brings the cursor back to the first character of the displayed command?
A. CTRL - E
B. CTRL - B
C. CTRL - A
D. ESC - B
Answer: C. CTRL - A
Explanation: Ctrl+a: moves the cursor to the beginning of the line.
Ctrl+e: moves the cursor to the end of the line.
Ctrl+f: moves the cursor forward one character.
Ctrl+b: moves the cursor backward one character.
Ctrl+n: Scan command history forward.
Ctrl+p: Scan command history backward.

Question: The startup configuration is stored in _________ .
A. RAM
B. NVRAM
C. ROM
D. DRAM
Answer: B. NVRAM
Explanation: Nonvolatile RAM stores the initial or startup configuration. Some Cisco routers store configuration files in Flash memory.

Question: On a Catalyst 2950 switch what command copies the configuration file from RAM into NV RAM?
A. copy startup-config running-config
B. copy ram nvram
C. set running-config startup-config
D. copy running-config startup-config
Answer: D. copy running-config startup-config
Explanation: On IOS based switches, like the Catalyst 2950, the <b>copy running-config startup-config</b> command will copy the running configuration into NV RAM.

Question: We want to return to user exec from priviledged exec without closing the session. Which command do we use?
A. Disable
B. End
C. Logout
D. Quit
Answer: A. Disable
Explanation: We can use the disable command to exit priviledged exec, the exit command can also be used.

Question: When the duplex system led is selected, what color indicates full duplex settings on that switch port (Catalyst 2950)?
A. Solid green
B. Solid amber
C. Flashing green
D. Flashing amber
E. No LED light, off
Answer: A. Solid green
Explanation: When using the duplex system mode, a solid green LED indicates that the switchport is operating in full duplex, if it would be off then that port is operating at half duplex.

Question: This form of switching starts the forwarding process as soon as the switch receives the destination address.
A. FragmentFree
B. Cisco Express Forwarding
C. Cut-through
D. Store-and-Forward
Answer: C. Cut-through
Explanation: With Cut-Through switching the switch starts forwarding the frame after receving the destination address. This will reduce latency but there is no error checking, so errored frames are using up bandwidth before being discarded by the destination device.

Question: Using a switch we divide the network into multiple _________ domains.
A. virtual
B. bridged
C. collision
D. broadcast
Answer: C. collision
Explanation: Because a switch treats each physical port as a bus it divides the network into multiple collision domains.

Question: In the OSI model where can we find error detection and recovery?
A. Application Layer
B. Network Layer
C. Physical Layer
D. Transport Layer
Answer: D. Transport Layer
Explanation: Error detection and recovery are a few functions of the transport layer or layer 4 of the OSI model.

Question: What are benefits of using layered protocol specifications?
A. modular engineering
B. reduction in bandwidth costs
C. multivendor interoperability
D. easier to develop
E. reduction in helpdesk calls
Answer: A. modular engineering
C. multivendor interoperability
D. easier to develop
Explanation: It is easier to develop because of reduced complexity that allows for easier program changes and faster development. The modular engineering allows 1 vendor to write a piece of software for a layer and another vendor writes a lower layer piece of software to make it all work. And this brings us with vendor interoperability, producing network components that meet the same network standards allows mutltiple vendors equipment to work together in a single network.