Jobs & Careers | Warranty & Testing | Privacy Policy | Asset Recovery Services

Buy Juniper & Cisco Equipment Online

Used Cisco | Used Extreme | Used Foundry | Used Nortel | New Force10 | New F5 Networks | New Juniper | Used HP


Jump to Telecom Equipment

Request a Free Quote

Sell to us or Recycle your Equipment

Watch Company Virtual Tour

Cisco certifications savings

Cisco 642-811 BCMSN Certification Exam

Building Cisco Multilayer Switched Exam 642-811... Continue Below To CCNP Articles and Cisco 642-811 Questions & Answers. The real CCNP 642-811 Exam has a duration of 75 - 90 minutes to complete and has approximately 60 - 70 questions.

The Cisco BCMSN 642-811 exam is a qualifying exam for the CCNP® Cisco Certified Network Professional as well as the CCDP® Cisco Certified Design Professional certifications. The BCMSN 642-811 exam will certify that the successful candidate has important skills and knowledge necessary to implement scalable multilayer switched networks. The BCMSN 642-811 exam includes topics on describing and implementing advanced Spanning Tree concepts, VLANs and Inter-VLAN routing, High Availability, multicasting and specific security features in switched networks. All these objectives are designated from the Cisco.com website. Please note that 642-811 BCMSN exam topics and objectives may change without notice, since technologies are always changing.

CCNP 642-811 Exam Objectives:

Describe and implement Spanning Tree operation in a hierarchical network

  • Describe and configure Spanning Tree, Rapid Spanning Tree, PVST+, PVRST, and MSTP
  • Describe and configure Spanning Tree enhancements
  • Configure link aggregation using PAgP or LACP
  • Identify a Spanning Tree topology and verify operation

Describe and implement VLANs

  • Describe best practices for VLAN implementation in the Enterprise Composite Model
  • Describe and configure VLANs including, Native, Static, and Voice (Aux)
  • Describe and configure VTP to distribute VLAN information
  • Implement a voice VLAN (i.e. trust boundary and Catalyst queuing)
  • Verify VLAN implementations

Describe and implement High Availability technologies and techniques

  • Describe Spanning Tree behavior in high availability environments
  • Implement 802.1s (MSTP) or PVRST for High Availability multi-layer switch environments
  • Describe and configure gateway redundancy protocols (e.g. HSRP and GLBP)
  • Verify High Availability configurations

Describe and implement InterVLAN routing

  • Describe and configure Inter-VLAN routing in a LAN environment
  • Describe the operation of CEF in a multi-layer switch environment
  • Describe and configure SVI and routed ports on Catalyst switches
  • Verify InterVLAN routing implementations

Describe and implement multicast forwarding

  • Describe and configure IP multicast routing in a LAN environment using PIM-SM/DM/Sparse-Dense Mode
  • Describe and verify IGMP and IGMP snooping on a Catalyst switch
  • Describe multicast IP addressing to include Layer-3 to Layer-2 mapping
  • Verify multicast operations

Describe and implement security features in a switched network

  • Describe and configure VACLs, PACLs, Private VLANs, Port Security, and 802.1x
  • Describe and configure AAA
  • Verify security implementations
CCNP Certification Exams
Cisco 642-821 BCRAN Certification Exam (Building Cisco Remote Access Networks Exam)
Cisco 642-831 CIT Certification Exam (Cisco Internet Troubleshooting Support Exam)
Cisco 642-811 BCMSN Certification Exam (Building Cisco Multilayer Switched Exam)
Cisco 642-891 Composite Certification Exam (Cisco Composite Exam)
Cisco 642-892 Composite Certification Exam (Cisco Composite Exam)
Cisco 642-801 BSCI Certification Exam (Building Scalable Cisco Internetworks Exam)
Cisco 642-901 BSCI Certification Exam (Building Scalable Cisco Internetworks Exam)
Back to Cisco Certifications
Back to Certifications

Cisco 642-811 Questions & Answers (Practice Makes Perfect)

We hope these questions and answers on the Cisco 642-811 exam help you on your CCNP certification track.


Question: Which of the following are part of the Ternary Content Addressable Memory?
A. Switching Database Manager
B. Filter Manager
C. Forwarding Information Base
D. Feature Manager
E. Routing Database Manager
Answer:A. Switching Database Manager
D. Feature Manager
Explanation: The 2 components part of the TCAM operation are:
- Feature Manager, compiles or merges ACE into entries in the TCAM table
- Switching Database Manager, when the TCAM is partitioned into different functions this configures or tunes those partitions

Question: How do we configure a switch port to be a 802.1Q trunk?
A. S1(config-if)#switchport trunk encapsulation dot1q S1(config-if)#switchport mode trunk
B. S1(config-if)#switchport trunk encapsulation 802.1Q S1(config-if)#switchport mode trunk
C. S1(config-if)#trunk encapsulation dot1q S1(config-if)#switchport mode trunk
D. S1(config-if)#switchport trunk encapsulation dot1q S1(config-if)#switchport mode access
Answer:A. S1(config-if)#switchport trunk encapsulation dot1q S1(config-if)#switchport mode trunk
Explanation: In order to configure a switchport as a trunk we set the encapsulation type with the switchport trunk encapsulation {isl | dot1q | negotiate} interface configuration command. Still in interface configuration mode we use the switchport mode trunk command to tell the swith that this port is a trunk.

Question: How do we configure the trunk to allow only vlan 5 to be trunked?
A. S1(config-if)#switchport trunk vlan 5
B. S1(config-if)#switchport trunk except vlan 5
C. S1(config-if)#switchport mode trunk allowed vlan 5
D. S1(config-if)#switchport trunk allowed vlan 5
Answer:D. S1(config-if)#switchport trunk allowed vlan 5
Explanation: The switchport trunk allowed vlan vlan_list interface configuration command defines which VLANs can be trunked over the link, by default all VLANs, 1 to 4094, are allowed over the link.

Question: If switchport mode dynamic auto is configured the port will become a trunk when _______.
A. The other end is configured as trunk or dynamic desirable.
B. The other end is configured as dynamic auto.
C. Only when the other end is configured as trunk.
D. When the other end is configured as nonegotiate.
Answer:A. The other end is configured as trunk or dynamic desirable.
Explanation: When switchport mode dynamic auto is configured the port will become a trunk when the far-end switchport is set to trunk or dynamic desirable.

Question: How do we configure a 802.1Q tunnel?
A. S1(config-if)#switchport access vlan vlan_id S1(config-if)#switchport mode dot1qtunnel
B. S1(config-if)#switchport mode access vlan vlan_id S1(config-if)#switchport mode tunnel dot1q
C. S1(config-if)#switchport mode tunnel S1(config-if-tunnel)#encapsulation dot1q
D. S1(config-if)#switchport mode tunnel encapsulation dot1q
Answer:A. S1(config-if)#switchport access vlan vlan_id S1(config-if)#switchport mode dot1qtunnel
Explanation: The switchport access vlan vlan_id defines the VLAN_ID that will be connected to the physical interface. We then use the switchport mode dot1qtunnel command to make the switch port a tunnel.

Question: Which control protocol PDUs are sent over VLAN 1 on a trunk?
A. SLB
B. TPID
C. DSCP
D. GLBP
E. SSP
F. CDP
G. STP
H. VTP
Answer:F. CDP
G. STP
H. VTP
Explanation: STP, VTP and CDP are also known as Layer 2 Control Protocol Data Units and are sent over VLAN 1 on a trunk.

Question: Which 2 requirements have to be fulfilled when using EoMPLS?
A. EoMPLS has to be configured only on the edge routers.
B. EoMPLS has to be configured only on the interior label switch routers.
C. The service provider must have VPNs in the MPLS core network.
D. The service provider must have a MPLS core network.
E. EoMPLS has to be configured on all MPLS routers.
Answer:A. EoMPLS has to be configured only on the edge routers.
D. The service provider must have a MPLS core network.
Explanation: An EoMPLS tunnel requires 2 things to be fulfilled:
- The service provider must have a MPLS core network
- EoMPLS must be configured only on the edge routers that interface with the customer networks

Question: Which of the following parameters have to be negotiated before a trunk operates correctly?
A. STP timers
B. trunking mode
C. trunk speed
D. DTP timers
E. trunk encapsulation
Answer:B. trunking mode
E. trunk encapsulation
Explanation: For a trunk to operate correctly the following parameters have to be agreed on:
- trunking mode (trunk, negotiated, nonnegotiate) - encapsulation (ISL, 802.1Q, DTP negotiated) - native VLAN (802.1Q only) - allowed VLANs

Question: Which command do we use to view the allowed VLANs on a trunk?
A. show trunk interface type mod/num trunk
B. show trunk
C. show trunk vlan
D. show interface trunk
E. show interface type mod/num trunk
Answer:E. show interface type mod/num trunk
Explanation: The show interface type mod/num trunk command will display information about allowed VLANs, encapsulation, native VLAN,...

Question: Which of the following are NOT VTP modes?
A. Client
B. Transparent
C. Server
D. Master
E. Transitional
F. Native
G. Slave
Answer:D. Master
E. Transitional
F. Native
G. Slave
Explanation: VTP has 3 modes:
- Server
- Client
- Transparent

Question: In which VTP mode can you create locally significant VLANs?
A. Transparent
B. Client
C. Native
D. Server
Answer:A. Transparent
Explanation: In transparent mode you can create VLANs on the switch but the switch does not synchronize its database with received VTP advertisments nor will it advertise its own VLAN configuration.

Question: How can we reset the VTP revision number back to zero?
A. Change the switch to client mode then change it back to server mode.
B. Change the switchs VTP domain name and then change it back to the original VTP domain name.
C. By using the clear vtp command.
D. Change the switch to transparent mode then change it back to server mode.
E. By using the clear vtp counters command.
Answer:B. Change the switchs VTP domain name and then change it back to the original VTP domain name.
D. Change the switch to transparent mode then change it back to server mode.
Explanation: We can change the VTP revision number back to zero using one of the following methods:
- change the switch to transparent mode then change it back to server mode
- change the switchs VTP domain name and then change it back to the original VTP domain name

Question: What are the 3 types of VTP advertisments?
A. Advertisment requests from transparent
B. Update advertisments
C. Keepalive advertisments
D. Synchronization advertisments
E. Subset advertisments
F. Advertisment requests from clients
G. Summary advertisments
Answer:E. Subset advertisments
F. Advertisment requests from clients
G. Summary advertisments
Explanation: VTP advertisments can occur in the following forms:
- summary advertisments, send every 300 seconds and when a database change occurs
- subset advertisments, send after a VLAN configuration change has occured
- advertisment requests from clients, clients requesting VLAN information

Question: We want to configure the VTP domain Free-tests on our switch and advertisments have to be send secure using a password. How do we achieve this?
A. S1(config)#vtp domain Free-tests S1(config-vtp)#mode server S1(config-vtp)#password password
B. S1(config)#vtp domain Free-tests S1(config)#vtp mode server S1(config-vtp)#password password
C. S1(config)#vtp domain Free-tests S1(config)#vtp mode server S1(config)#vtp password password
D. S1(config)#vtp domain Free-tests S1(config)#vtp mode server S1(config)#vtp password password MD5
Answer:C. S1(config)#vtp domain Free-tests S1(config)#vtp mode server S1(config)#vtp password password
Explanation: We use the vtp domain domain_name configuration command to name the VTP domain. Using the vtp mode [server | client | transparent] command we set the mode of the switch and the vtp password password will set the domain to secure mode by using a password to send advertisments and validate received advertisments.

Question: What are some of the benefits that VTP version 2 has over version 1?
A. Token ring support
B. Unrecognized TLV support
C. Mixed mode support
D. Version independant transparent mode
E. Authentication support
F. Encryption support
Answer:A. Token ring support
B. Unrecognized TLV support
Explanation: VTP version 2 offers the following additional features over version 1:
- version-dependant transparent mode
- token ring support
- consistency checks
- unrecognized TLV (type, length, value) support

Question: Which command do we use to display the amount of VTP advertisments send?
A. show vtp summary
B. show vtp status
C. show vtp advertisments
D. show vtp counters
Answer:D. show vtp counters
Explanation: The show vtp counters command will display error counters and VTP messages.

Question: By default which VLANs are eligible for pruning?
A. 1 to 1005
B. 1 to 4094
C. 1002 to 1005
D. 2 to 1001
E. 2 to 4094
Answer:D. 2 to 1001
Explanation: By default, VLANs 2 to 1001 are eligible for pruning, 1002 to 1005 are reserved for token ring and FDDI VLANs and are never eligible for pruning.

Question: In our new network we dont want VLAN 5 to be pruned ever. How do we achieve this?
A. S1(config)#switchport trunk pruning vlan except 5
B. S1(config)#switchport trunk pruning vlan remove 5
C. S1(config-if)#switchport mode trunk pruning vlan except 5
D. S1(config-if)#switchport trunk pruning vlan remove 5
E. S1(config-if)#switchport mode trunk pruning vlan remove 5
F. S1(config-if)#switchport trunk pruning vlan except 5
Answer:F. S1(config-if)#switchport trunk pruning vlan except 5
Explanation: When pruning is enabled we can modify the default list of eligibility by using the switchport trunk pruning vlan {add | except | none | remove } vlan_list interface configuration command.
The keywords are defined as follows:
- all, all active VLANs are eligible
- add vlan_list, adds VLANs to an already configured list
- except vlan_list, all VLANs are eligible for pruninng except the VLANs listed
- remove vlan_list, removed VLANs from an already configued list

Question: Which command will display the VTP pruning state?
A. show interface type mod/num pruning
B. show vtp pruning
C. show pruning
D. show pruning vlan
Answer:A. show interface type mod/num pruning
Explanation: The show interface type mod/num pruning command will display the VTP pruning state.

Question: Which of the following statements are true about EtherChannels?
A. All bundled ports have to be in the same VLAN.
B. When trunks are used they must pass the same VLANs.
C. Duplex settings have to be identical but speed settings can vary.
D. All ports in the EtherChannel have to be trunks.
E. When trunks are used they can carry different VLANs.
Answer:A. All bundled ports have to be in the same VLAN.
B. When trunks are used they must pass the same VLANs.
Explanation: When using ports to build the EtherChannel they need to belong to the same VLAN, trunks must carry the same VLANs and have the same native VLAN. The speed and duplex settings of the ports have to be same as before the creation of the EtherChannel and Spanning Tree settings have to be identical.

Question: How do we configure EtherChannel load balancing based on destination IP Address?
A. S1(config)#port-channel load-balance dst-ip IP_Address
B. S1(config)#port-channel load-balance dst IP_Address
C. S1(config)#port-channel load-balance
D. S1(config)#port-channel load-balance dst-ip
Answer:D. S1(config)#port-channel load-balance dst-ip
Explanation: To configure load balancing on an EtherChannel we use the port-channel load-balance method configuration command.
The following methods can be used:
- src-ip, source IP Address
- dst-ip, destination IP Address
- src-dst-ip, source and destination IP Address
- src-mac, source MAC Address (Default)
- dst-mac, destination MAC Address
- src-dst-mac, source and destination MAC Address
- src-port, source port
- dst-port, destination port
- src-dst-port, source and destination port

Question: Which protocols can be used to provide automatic EtherChannel configuration?
A. PAgP
B. LACP
C. DTP
D. DSCP
E. IGMP
F. NBAR
Answer:A. PAgP
B. LACP
Explanation: The two protocols used for automatic EtherChannel configuration are:
- PAgP, Port Aggregation Protocol (Cisco proprietary)
- LACP, Link Aggregation Control Protocol, IEEE802.3d

Question: In LACP the system priority is made up of?
A. 2-byte port number
B. 6-byte priority value
C. 2-bit priority value
D. 2-byte priority value
E. 6-byte switch MAC Address
F. 4-byte priority value
G. 4-byte switch value
Answer:D. 2-byte priority value
E. 6-byte switch MAC Address
Explanation: In LACP the switch priority consists of a 2-byte priority value followed by a 6-byte switch MAC Address.

Question: Which command do we use to verify EtherChannel negotiation?
A. show etherchannel negotiation
B. show etherchannel
C. show etherchannel port
D. show etherchannel interface
Answer:C. show etherchannel port
Explanation: The show etherchannel port command will display the channel negotiation mode.

Question: Which command will display the LACP system ID?
A. show lacp system
B. show lacp system-id
C. show lacp
D. show lacp sys-id
Answer:D. show lacp sys-id
Explanation: The show lacp sys-id command will display the LACP system ID.

Question: When an unknown unicast is received on a bridge port. What will the bridge do with that frame?
A. It will send it out of all the bridge ports.
B. It will return an icmp unreachable to the source.
C. It will drop the frame.
D. It will send it out of all its ports except the one it received the frame on.
Answer:D. It will send it out of all its ports except the one it received the frame on.
Explanation: When an unknown unicast, the destination address is not in the bridge table, the frame will be send out all of the bridge ports except the port it was received on.

Question: Which of the following are BPDUs?
A. Configuration BPDU
B. Hello BPDU
C. Topology Change Notification BPDU
D. Configuration Change Notification BPDU
E. Topology Control BPDU
Answer:A. Configuration BPDU
C. Topology Change Notification BPDU
Explanation: There are 2 type of BPDUs:
- Configuration BPDU
- Topology Change Notifications

Question: What do we call the manipulation of packets to obtain different QoS values?
A. Marking
B. Classification
C. Scheduling
D. Policing
Answer:A. Marking
Explanation: When we need to manipulate the QoS value of classified packets to obtain different values we call it marking.

Question: How do we enable QoS on a switch?
A. switch(config)#enable qos
B. no configuration needed, qos is enabled by default
C. switch(config)#mls qos
D. switch(config)#qos enable
Answer:C. switch(config)#mls qos
Explanation: The mls qos global configuration command will enable QoS on a switch.

Question: When enabling the UplinkFast feature what will be done on the switch?
A. The bridge priority is raised to 49152.
B. The bridge priority is lowered to 32767.
C. The port cost is increased by 3000.
D. The port cost is increased to 3000.
Answer:A. The bridge priority is raised to 49152.
C. The port cost is increased by 3000.
Explanation: When enabling the UplinkFast feature the bridge priority is raised to 49152 so it becomes unlikely that the switch will become the root bridge. Port cost is increased by 3000 making them undesirable for downstream neighbors to use them as paths to the root.

Question: BackboneFast uses which protocol to determine if upstream neighbors have a stable path to the root bridge?
A. Root Discovery Protocol
B. Root Link Query
C. BPDUs
D. Discovery Protocol
Answer:B. Root Link Query
Explanation: BackboneFast uses the Root Link Query protocol to determine if upstream neighbors have a stable path to the root bridge.

Question: BackboneFast has to be enabled on ______________.
A. the root bridge
B. the core switches only
C. every switch in the network
D. nowhere, it is enabled by default
Answer:C. every switch in the network
Explanation: BackboneFast has to be enabled on every switch in the network because it relies on the Root Link Query request and reply mechanism. BackboneFast is disabled by default.

Question: Which command will display the designated ports?
A. show spanning-tree summary
B. show spanning-tree port
C. show spanning-tree brief
D. show spanning-tree
Answer:C. show spanning-tree brief
Explanation: The show spanning-tree [vlan vlan id] brief will show the designated ports and designated bridge IDs on each port.

Question: Which command will display the total number of switch ports in each STP state?
A. show spanning-tree summary
B. show spanning-tree ports detail
C. show spanning-tree brief
D. show spanning-tree port
Answer:A. show spanning-tree summary
Explanation: The show spanning-tree [vlan vlan id] summary will display the total number of switch ports in each STP state.

Question: In STP which best describes a blocked port?
A. A port that is not running spanning tree.
B. A port that neither the root or designated port.
C. A port that has a normal end user connection.
D. A port that is administratively shutdown.
Answer:B. A port that neither the root or designated port.
Explanation: A blocked port is a port that is not the root port or a designated port.

Question: How do we enable the Root Guard feature?
A. switch(config-if)#spanning-tree root guard enable
B. switch(config-if)#spanning-tree guard root
C. switch(config-if)#spanning-tree rootguard
D. switch(config-if)#spanning-tree root guard
Answer:B. switch(config-if)#spanning-tree guard root
Explanation: To enable the Root Guard feature we use the spanning-tree guard root interface configuration command.

Question: What does the Root Guard feature provide?
A. A port will only be able to receive BPDUs and not forward them.
B. A port will always become the root port.
C. A port will only be able to relay BPDUs not receive them.
D. A port will always become a designated port.
Answer:C. A port will only be able to relay BPDUs not receive them.
Explanation: Root Guard designates that a port can only relay BPDUs and not receive them.

Question: How do we enable BPDU Guard on a single interface?
A. switch(config)#spanning-tree bpduguard enable
B. switch(config-if)#spanning-tree bpduguard
C. switch(config-if)#spanning-tree bpduguard enable
D. switch(config)#spanning-tree bpduguard
E. switch(config-if)#bpduguard enable
Answer:C. switch(config-if)#spanning-tree bpduguard enable
Explanation: To enable BPDU Guard we use the spanning-tree bpduguard enable interface configuration command.

Question: When BPDU Guard is enabled what will happen to the port when a BPDU is received on that port?
A. The port is put into blocking state.
B. The port is sending the BPDU back to the sender.
C. The port is put into errdisable state.
D. The port is put into listening state.
Answer:C. The port is put into errdisable state.
Explanation: When a BPDU is received on a port with BPDU guard enabled the port is put into errdisable state.

Question: Which STP feature is described by the following: "The measurement of the amount of time that elapses from the time a BPDU is expected to when it actually arrives".
A. Loop Guard
B. Rapid Spanning Tree
C. BPDU skew detection
Answer:C. BPDU skew detection
Explanation: BPDU skew detection measures the amount of time that elapses from the time a BPDU is expected to when it actually arrives. This time difference is called the skew time.

Question: What can we put in place to prevent the following: A blocked port is receiving BPDUs, the flow of BPDUs stop and the last BPDU is flushed and goes through the STP states and starts forwarding traffic.
A. Root Guard
B. Loop Guard
C. BPDU Guard
D. Link Guard
Answer:B. Loop Guard
Explanation: To prevent the following behaviour that a blocked port is receiving BPDUs and the flow of BPDUs stop then the last BPDU is flushed and goes through the STP states and starts forwarding traffic we can implement Loop Guard.

Question: The message interval of the UDLD feature can be configured between which values?
A. 7 seconds
B. 90 seconds
C. 20 seconds
D. 15 seconds
E. 10 seconds
F. 2 seconds
G. 30 seconds
Answer:A. 7 seconds
B. 90 seconds
Explanation: The default message interval of UDLD (unidirectional link detection) is 15 seconds on a Catalyst 4500 and 6500, 7 seconds on Catalyst 3550. The interval can be configured between 7 and 90 seconds.

Question: Which of the following are UDLD modes of operation?
A. Normal
B. Quiet
C. Aggressive
D. Silent
E. Desirable
Answer:A. Normal
C. Aggressive
Explanation: The two modes of UDLD operation are:
- Normal
- Aggressive

Question: If UDLD places a port in errdisable state, UDLD is operating in which mode?
A. Quick
B. Silent
C. Aggressive
D. Error Detection
Answer:C. Aggressive
Explanation: When UDLD puts the port in errdisable state UDLD is operating in aggressive mode.

Question: How do we enable UDLD in normal mode on our fibre optic switch (ie all ports are fibre optic)?
A. switch(config)#udld mode normal enable
B. switch(config)#udld enable
C. switch(config-if)#udld mode normal
D. switch(config)#udld mode normal
Answer:B. switch(config)#udld enable
Explanation: If all our ports are fibre optic ports then we can enable udld in global configuration mode using the udld enable command.

Question: On a Catalyst 3550 switch the default UDLD message time interval is?
A. 10 seconds
B. 5 seconds
C. 2 seconds
D. 30 seconds
E. 7 seconds
F. 15 seconds
Answer:E. 7 seconds
Explanation: By default the UDLD message time interval is 7 seconds on a Catalyst 3550 on Catalyst 4500 and 6500 the default is 15 seconds.

Question: How do we enable ports that are put in errdisable state by UDLD?
A. udld reset
B. clear udld *
C. clear udld
D. udld enable
Answer:A. udld reset
Explanation: To re-enable ports that UDLD aggressive mode has put into errdisable state we use the udld reset command.

Question: How do we display the global BPDU guard state?
A. show spanning-tree bpduguard
B. show spanning-tree interface
C. show spanning-tree guard
D. show spanning-tree summary
Answer:D. show spanning-tree summary
Explanation: The show spanning-tree summary command will display the global BPDU guard state.

Question: What is described by the following:
"This is the variation in the amount of delay so packets are not arriving at predictable times"
A. Delay
B. Loss
C. Variance
D. Jitter
Answer:D. Jitter
Explanation: The variation in delay is called Jitter.

Question: Which of the following are QoS types?
A. Integrated DiffServ
B. DSCP value manipulation
C. Differential Services
D. Best Effort
E. Differentiated Services
Answer:D. Best Effort
E. Differentiated Services
Explanation: The three types of QoS are:
- Best Effort
- Integrated Services model
- Differentiated Services model

Question: Integrated Services is associated with which protocol?
A. CGMP
B. ATM
C. RSTP
D. TCP
E. RSVP
Answer:E. RSVP
Explanation: Integrated services is associated with RSVP, Resource Reservation Protocol, described in RFC 1633.

Question: Match the QoS types with their behaviour.
A. Best Effort, Intergrated Services, Differentiated Services
B. No QoS, Per flow, Per hop
Answer:A. Best Effort, Intergrated Services, Differentiated Services
Explanation: In Best Effort there is no real QoS mechanism working, the packets are delivered as quick as possible. Integrated Services applies QoS on a per flow base while Differentiated Services does it on a per hop base.

Question: Using ISL the CoS is entered where?
A. The upper three bits of the User Field
B. Three bits are added to the User Field
C. Three bytes are added to the User Field
D. The lower three bits of the User Field
E. The lower three bytes of the User Field
F. The upper three bytes of the User Field
Answer:D. The lower three bits of the User Field
Explanation: The lower three bits of the User Field are used as a CoS value.

Question: The ToS byte is divided into?
A. 3 bit IP Presedence
B. 4 bit ToS value
C. 5 bit IP Presedence
D. 4 bit IP Presedence
E. 3 bit ToS value
F. 5 bit ToS value
Answer:A. 3 bit IP Presedence
B. 4 bit ToS value
Explanation: The ToS byte [Type of Service] is divided into a 3 bit IP Presedence value and 4 bit ToS value.

Question: DSCP is the abbreviation of?
A. Differentiated Service Code Point
B. Differentiated Service Classification Point
C. Differentiated Service Classification Protocol
D. Differentiated Service Code Protocol
Answer:A. Differentiated Service Code Point
Explanation: DSCP stands for Differentiated Services Code Point

Question: Which are of the following are part of the DSCP value?
A. 3 bit IP Presedence
B. 3 bit Drop Presedence
C. 3 bit ToS value
D. 3 bit Class Selector
E. 3 bit CoS value
Answer:B. 3 bit Drop Presedence
D. 3 bit Class Selector
Explanation: The DSCP value is divided into a 3 bit Class Selector and 3 bit Drop Presedence.

Question: Match the IP Presedence value with the name
A. 0,1,2,3,4,5,6,7
B. Routine, Priority, Immediate, Flash, Flash override, Critical, Internetwork Control, Network Control
Answer:B. Routine, Priority, Immediate, Flash, Flash override, Critical, Internetwork Control, Network Control
Explanation:
Name Value
Routine 0
Priority 1
Immediate 2
Flash 3
Flash Override 4
Critical 5
Internetwork Control 6
Network Control 7

Question: An IP Presedence value of 3 corresponds with?
A. Network Control
B. Immediate
C. Critical
D. Flash
Answer:D. Flash
Explanation:
Name Value
Routine 0
Priority 1
Immediate 2
Flash 3
Flash Override 4
Critical 5
Internetwork Control 6
Network Control 7

Question: When using the Class Selector field, a value of 5 is also known as?
A. Best Effort
B. Assured Forwarding
C. Internetwork Control
D. Expedited Forwarding
Answer:D. Expedited Forwarding
Explanation: The Class Selector is divided into:
Class 0, Best Effort
Class 1 through 4 are Assured Forwarding
Class 5, Expedited Forwarding
Class 6 & 7 or Internetwork Control & Network Control

Question: What methods can we use to rate-limit traffic?
A. Weighted Policers
B. Weighted Round Robin
C. Weighted Fair Queue
D. Microflow Policers
E. Aggregate Policers
Answer:D. Microflow Policers
E. Aggregate Policers
Explanation: We use traffic policers to rate-limit traffic. We can use either microflow policers or aggregate policers.

Question: Which two methods can we use for congestion avoidance?
A. Weighted Round Robin
B. Aggregate Policers
C. FIFO
D. Tail Drop
E. Weighted Random Early Detection
Answer:D. Tail Drop
E. Weighted Random Early Detection
Explanation: A switch can avoid congestion using one of the following methods:
- Tail Drop
- Weighted Random Early Detection

Question: Scheduling, in a QoS way is also known as?
A. Egress Queueing
B. Ingress Queueing
C. Congestion Management
D. Congestion Avoidance
E. Tail Drop
Answer:A. Egress Queueing
C. Congestion Management
Explanation: Congestion Management or Egress Queueing is also known as Scheduling.

Question: When a switch port has the following queue type notation, 1p2q2t. What are its queues?
A. 1 strict priority 2 standard queues 2 WRR
B. 1 strict priority 2 WRR 2 WRED
C. 1 strict priority 2 standard queues 2 WRED
D. 1 strict priority 2 standard queues 2 Tail drop
Answer:C. 1 strict priority 2 standard queues 2 WRED
Explanation: The switch queue type notation consists of the following:
- p, the number of strict priority queues
- q, the number of standard queues
- t, the number of configurable WRED thresholds per standard queue

Question: Which command do we use to view what type of egress queues are available?
A. show interface type/mod summary
B. show interface type/mod switchport
C. show interface type/mod capabilities
D. show interface type/mod flowcontrol
Answer:C. show interface type/mod capabilities
Explanation: The show interface type/mod capabilities command will display the available types of egress queueing on IOS based switches.

Question: How do we make sure only the DSCP value is used for QoS on a switchport?
A. switch(config-if)#qos trust dscp
B. switch(config-if)#mls qos scp trust
C. switch(config-if)#mls qos trust dscp
D. switch(config-if)#mls qos dscp
Answer:C. switch(config-if)#mls qos trust dscp
Explanation: The mls qos trust {cos | dscp | ip-presendence} is used to define consistent QoS trust.

Question: How do we convert IP Presedence settings to our desired DSCP values?
A. switch(config)#mls qos map ip-prec-dscp dscp values
B. switch(config)#mls qos ip-prec-dscp dscp values
C. switch(config)#mls qos map dscp-ip-prec dscp values
D. switch(config)#mls qos map ip-presedence dscp dscp values
Answer:A. switch(config)#mls qos map ip-prec-dscp dscp values
Explanation: We use the mls qos map ip-prec-dscp dscp values global configuration command to map the IP Presedence values to internal (non-default) DSCP values.

Question: How do we classify traffic with an access-list?
A. switch(config-cmap)#match access-list
B. switch(config-cmap)#match access-list name access-list
C. switch(config-cmap)#match access-group access-list
D. switch(config-cmap)#match access-group name access-list
Answer:D. switch(config-cmap)#match access-group name access-list
Explanation: When we use an access-list to classify traffic we use the match access-group name access-list in class map configuration mode.

Question: How do we classify traffic using NBAR?
A. switch(config-cmap)#match protocol protocol name
B. switch(config)#match protocol protocol name
C. switch(config-cmap)#match nbar protocol name
D. switch(config-pmap)#match protocol protocol name
Answer:A. switch(config-cmap)#match protocol protocol name
Explanation: When we use NBAR to classify traffic we use the match protocol protocol name in class map configuration mode.

Question: What command will define a QoS policy?
A. switch(config)#policy-map policy-name
B. switch(config-cmap)#policy-map policy-name
C. switch(config-pmap)#policy-map policy-name
D. switch(config)#class-map class-name
Answer:A. switch(config)#policy-map policy-name
Explanation: To define a QoS policy we use the policy-map policy-name global configuration command.

Question: How do we apply a QoS policy to an interface?
A. switch(config-if)#policy policy-name
B. switch(config-if)#service-policy policy-name inbound
C. switch(config-if)#policy-map policy-name
D. switch(config-if)#service-policy policy-name
Answer:D. switch(config-if)#service-policy policy-name
Explanation: To apply a QoS policy to an interface we use theservice-policy [input | output] policy-name interface configuration command.

Question: What are the two default weights of the standard queues of an interface?
A. 255
B. 16
C. 32
D. 64
E. 128
F. 256
G. 4
H. 1
Answer:A. 255
G. 4
Explanation: The default value of the weight of standard queues on an interface are 4 and 255.

Question: How can we change the weight of the standard queues on an interface?
A. switch(config-if)#default-queue bandwidth weight1 weight 2
B. switch(config-if)#wrr-queue bandwidth weight1 weight 2
C. switch(config-if)#wrr-queue weight1 weight 2
D. switch(config-if)#qos-queue bandwidth weight1 weight 2
Answer:B. switch(config-if)#wrr-queue bandwidth weight1 weight 2
Explanation: In order to change the default weights of the standard queues on an interface we use the wrr-queue bandwidth weight1 weight 2 interface configuration command. The values can vary between 1 and 255.

Question: How do we enable tail drop on an interface?
A. switch(config-if)#no wrr-queue random-detect queue id
B. switch(config-if)#mls qos tail-drop enable
C. switch(config-if)#mls qos tail-drop
D. switch(config-if)#wrr-queue random-detect queue id
Answer:A. switch(config-if)#no wrr-queue random-detect queue id
Explanation: To enable tail drop we use the following interface configuration command no wrr-queue random-detect queue id.

Question: How do we enable the egress expedite queue?
A. switch(config-if)#mls priority-queue out
B. switch(config-if)#strict-priority-queue out
C. switch(config-if)#mls qos priority-queue out
D. switch(config-if)#priority-queue out
Answer:D. switch(config-if)#priority-queue out
Explanation: To enable the strict-priority queue or egress expedite queue we use the priority-queue out interface configuration command.

Question: How do we verify the QoS settings on an interface?
A. show mls qos interface
B. show mls interface detail
C. show interface
D. show mls interface
Answer:A. show mls qos interface
Explanation: To verify the QoS settings on an interface we use the show mls qos interface type mod/num command.

Question: RSTP is defined by which IEEE standard?
A. 802.1d
B. 802.5
C. 802.1w
D. 802.1s
Answer:C. 802.1w
Explanation: RSTP or Rapid Spanning Tree is defined by IEEE 802.1w.

Question: In RSTP what is the name of a port that has a less desirable but redundant path to a segement where another switch port already connects?
A. Redundant port
B. Alternate port
C. Designated port
D. Backup port
Answer:D. Backup port
Explanation: A backup port is the name of a port that has a less desirable but redundant path to a segement where another switch port already connects when using RSTP.

Question: When a port is in Discarding state in RSTP that same port would be in which state(s) using STP?
A. Listening
B. Learning
C. Blocking
D. Forwarding
E. Disabled
Answer:A. Listening
C. Blocking
E. Disabled
Explanation: When a port is in Discarding state in RSTP that same port would be in Disabled, Blocking and Learning state when using STP.

Question: When portfast and RSTP is enabled on a switch port we call that port?
A. Alternate port
B. Point-to-point port
C. Edge port
D. Backup port
Answer:C. Edge port
Explanation: An edge port is is a switch port where a single host connects and has been identified by enabling the STP portfast feature.

Question: When RSTP is synchronizing what type of messages are sent using configuration BPDUs?
A. configuration message
B. acceptance message
C. information message
D. proposal message
E. agreement message
Answer:D. proposal message
E. agreement message
Explanation: During the synchronization process of RSTP proposal and agreements are send using configuration BPDUs.

Question: When does RSTP detect a topology change?
A. When an edge port changes to forwarding state.
B. When an edge port changes to blocking state.
C. When a nonedge port changes to forwarding state.
D. When an nonedge port changes to blocking state.
Answer:C. When a nonedge port changes to forwarding state.
Explanation: RSTP detects a topology change only when a nonedge port changes to forwarding state.

Question: When a switch receives a BPDU with a TC bit set what will happen?
A. MAC addresses associated with designated port the BPDU are flushed from the CAM.
B. BPDUs with the TC bit set are sent out for 4 times the hello time.
C. BPDUs with the TC bit set are sent out for 6 times the hello time.
D. MAC addresses are flushed from the CAM.
Answer:D. MAC addresses are flushed from the CAM.
Explanation: When a switch receives a BPDU with the TC bit set it flushes all the MAC addresses associated with those nonedge designated ports.

Question: How do we configure an edge port using RSTP?
A. switch(config-if)#spanning-tree portfast
B. switch(config-if)#spanning-tree link-type edge
C. switch(config-if)#spanning-tree mst edge
D. switch(config-if)#spanning-tree rstp edge
Answer:A. switch(config-if)#spanning-tree portfast
Explanation: In order to configure an edge port in RSTP we use the spanning-tree portfast interface configuration command.

Question: How can we change a half-duplex port to a point-to-point port in RSTP?
A. switch(config-if)#spanning-tree link-type point-to-point
B. switch(config-if)#spanning-tree point-to-point
C. switch(config-if)#spanning-tree port-type point-to-point
D. switch(config-if)#spanning-tree port point-to-point
Answer:A. switch(config-if)#spanning-tree link-type point-to-point
Explanation: To configure a half-duplex to be a point-to-point link we use the spanning-tree link-type point-to-point interface configuration command.

Question: Using PVST+, 500 VLANs and 350 are active how many instances of spanning tree are running?
A. 350
B. 1
C. Can not tell
D. 500
Answer:A. 350
Explanation: When using PVST+ an instance of spanning will be running for each active VLAN.

Question: Which attributes have to be indentical on each switch running MST region?
A. configuration name
B. region name
C. revision number
D. domain name
E. instance-to-Vlan mapping table
F. Vlan-to-instance mapping table
Answer:A. configuration name
C. revision number
E. instance-to-Vlan mapping table
Explanation: Within a region all switches must run the instance of MST that is defined by the following attributes:
- MST configuration name
- MST configuration revision number
- MST instance-to-Vlan mapping table

Question: How do we enable MST on a switch?
A. switch(config)#spanning-tree mst
B. switch(config)#mst enable
C. switch(config)#spanning-tree mode mst
D. switch(config)#spanning-tree mst configuration
Answer:C. switch(config)#spanning-tree mode mst
Explanation: To enable MST on a switch we use the spanning-tree mode mst global configuration command.

Question: How do we assign the mst revision number?
A. switch(config)#spanning-tree mst revision version
B. switch(config-mst)#spanning-tree revision version
C. switch(config-mst)#revision version
D. switch(config-mst)#spanning-tree mst revision version
Answer:C. switch(config-mst)#revision version
Explanation: In order to assign the MST revision number we use the revision version MST configuration command.

Question: What is used in a single, loop-free topology inside a MST region?
A. Internal Spanning Tree
B. Common Spanning Tree
C. Instance Spanning Tree
D. Per Vlan Spanning Tree
Answer:A. Internal Spanning Tree
Explanation: Internal Spanning Tree (IST) is used like CST (Common Spanning Tree) to maintain a single, loop-free topology inside a MST region.

Question: When a multilayer switch assigns a layer 3 address to a logical interface that represents an entire VLAN it is called a _____________.
A. Switched Virtual Interface
B. Switched VLAN Interface
C. Stacked Virtual Interface
D. Integrated Routing & Bridging Interface
Answer:A. Switched Virtual Interface
Explanation: When a multilayer switch assigns a layer 3 address to a logical interface that represents an entire VLAN it is called a switched virtual interface.

Question: On our Catalyst 3550 we used one of the ports as a layer 3 port. We do not need this requirement anymore and want to change it back to a layer 2 port. How do we achieve this
A. switch(config-if)#switchport layer-2
B. switch(config-if)#switchport mode layer-2
C. switch(config-if)#switchport
D. switch(config-if)#no switchport
Answer:C. switch(config-if)#switchport
Explanation: In order to return a switchport back to be a layer 2 port we use the switchport interface configuration command.

Question: Mulitlayer switching consists of which two parts?
A. Routing engine
B. Route processor
C. SVI
D. Switching engine
Answer:B. Route processor
D. Switching engine
Explanation: Multilayer switching uses a switching engine and route processor to perform the basics of route once, switch many.

Question: Which are conditions that can cause a packet to be marked as "CEF Punt"?
A. IP TTL is less then 10.
B. More then one entry to the destination in the FIB Table
C. Encapsulation type is not supported.
D. MTU is exceeded and there is need for fragmentation.
Answer:C. Encapsulation type is not supported.
D. MTU is exceeded and there is need for fragmentation.
Explanation: none

Question: How do we change the bridge priority in mst?
A. switch(config)#spanning-tree mst priority bridge_priority instance instance_id
B. switch(config)#spanning-tree mst priority bridge_priority
C. switch(config-mst)#instance_id priority bridge_priority
D. switch(config)#spanning-tree mst instance_id priority bridge_priority
Answer:D. switch(config)#spanning-tree mst instance_id priority bridge_priority
Explanation: To change the bridge priority we use the spanning-tree mst instance_id priority bridge_priority global configuration command.

Question: How do we change the forward delay timer in MST?
A. switch(config)#spanning-tree mst forward-time seconds
B. switch(config)#spanning-tree mst forward-delay seconds
C. switch(config-mst)#spanning-tree mst forward-delay seconds
D. switch(config)#spanning-tree mst instance instance_id forward-time seconds
E. switch(config)#spanning-tree mst instance instance_id forward-delay seconds
F. switch(config-mst)#spanning-tree mst forward-time seconds
Answer:A. switch(config)#spanning-tree mst forward-time seconds
Explanation: To change the forward delay timer in MST we use the spanning-tree mst forward-time seconds global configuration command. Changing timers are for MST as a whole not for individual MST instances.

Question: How do we configure a Catalyst 3550 interface to provide Layer 3 functionality?
A. switch(config)#interface type mod/num
switch(config-if)#switchport access ip
switch(config-if)#ip address ip address mask
B. switch(config)#interface type mod/num
switch(config-if)#ip address ip address mask
C. switch(config)#interface type mod/num
switch(config-if)#switchport mode layer3
switch(config-if)#ip address ip address mask
D. switch(config)#interface type mod/num
switch(config-if)#no switchport
switch(config-if)#ip address ip address mask
Answer:D. switch(config)#interface type mod/num
switch(config-if)#no switchport
switch(config-if)#ip address ip address mask
Explanation: After specifying the correct interface we use the no switchport interface configuration command to remove Layer 2 functionality and then assign an IP Address with the ip address ip_address mask interface configuration command.

Question: How do we assign an IP Address to a SVI?
A. switch(config)#interface vlan vlan_id switch(config-if)#ip address ip address mask
B. switch(config)#interface vlan vlan_id switch(config-vlan)#ip address ip address mask
C. switch(config)#interface svi type mod/num switch(config-if)#ip address ip address mask
D. switch(config)#interface vlan vlan_id switch(config-if-svi)#ip address ip address mask
Answer:A. switch(config)#interface vlan vlan_id switch(config-if)#ip address ip address mask
Explanation: Because a SVI, switched virtual interface, can represent an entire VLAN we assign the IP address to the logical VLAN interface.

Question: What is the portion of the FIB table called that contains the Layer 2 information for the next-hop?
A. CAM
B. TCAM
C. Adjacency table
D. MAC table
Answer:C. Adjacency table
Explanation: The portion of the FIB that contains the Layer 2 information about the next-hop is called the adjacency table.

Question: What is the CEF Glean state?
A. When further processing is needed by the Layer 3 engine, like fragment the packet, compress the packet,...
B. An IP entry was not found in the adjacency table, then the packet is sent to the Layer 3 engine so an ARP request can be generated.
C. When a packet arrives and the next-hop address has an ARP entry in the adjacency table that packet is said to be in CEF Glean state.
D. An ARP entry was not found in the adjacency table, then the packet is sent to the Layer 3 engine so an ARP request can be generated.
Answer:D. An ARP entry was not found in the adjacency table, then the packet is sent to the Layer 3 engine so an ARP request can be generated.
Explanation: When an ARP entry was not found in the adjacency table, then the packet is sent to the Layer 3 engine so an ARP request can be generated, this is known as the CEF Glean state.

Question: When the FIB table is replicated across any number of independent Layer 3 forwarding engines, we are using ____________.
A. Distributed CEF
B. Expedited CEF
C. Assured CEF
D. Accelerated CEF
Answer:A. Distributed CEF
Explanation: When the FIB table is replicated across any number of independent Layer 3 forwarding engines, we are using distributed CEF.

Question: When the FIB entry is the CEF Glean state waiting for an ARP response, subsequent packets to that host are dropped so there is no need for duplicate ARP requests. This is called?
A. ARP limiting
B. ARP queueing
C. ARP discarding
D. ARP throttling
Answer:D. ARP throttling
Explanation: When the FIB entry is the CEF Glean state waiting for an ARP response, subsequent packets to that host are dropped so there is no need for duplicate ARP requests, this is called ARP throttling or throttling adjacency.

Question: On a Catalyst 3550 how do we enable CEF?
A. switch(config)#cef enable
B. switch(config0#ip cef
C. CEF is enabled by default
D. switch(config)#mls cef
Answer:C. CEF is enabled by default
Explanation: On Catalyst 3550, 4500 and 6500 (with a Supervisor 720) CEF is enabled by default and can never be disabled.

Question: What can we configure on a switch for protocols that cannot be switched or routed by CEF, eg IPX, LAT?
A. Fallback bridging
B. Integrated Routing & Bridging
C. Router-on-a-stick
D. Translational bridging
Answer:A. Fallback bridging
Explanation: We can configure fallback bridging for protocols that cannot be routed or switched by CEF, some examples of protocols are AppleTalk, IPX, SNA, LAT,..

Question: How do we configure fallback bridging?
A. switch(config)#bridge-group bridge-group vlan-bridge
B. switch(config-vlan)#bridge-group bridge-group protocol protocol_name
C. switch(config)#bridge-group bridge-group protocol protocol_name
D. switch(config)#bridge-group bridge-group protocol vlan-bridge
Answer:D. switch(config)#bridge-group bridge-group protocol vlan-bridge
Explanation: The first step is to enable fallback bridging using the bridge-group bridge-group protocol vlan-bridge global configuration command. We then use the bridge-group bridge-group interface configuration command underneath the VLAN SVI where the nonroutable traffic will be bridged.

Question: What is the maximum amount of fallback bridgegroups you can configure on a switch?
A. 128
B. 8
C. 1
D. 16
E. 32
F. 64
G. 31
Answer:G. 31
Explanation: You can configure up to 31 bridgegroups on a switch.

Question: How can we verify the configuration of a SVI?
A. show interface svi
B. show interface type mod/num switchport
C. show interface vlan vlan_id
D. show interface summary
Answer:C. show interface vlan vlan_id
Explanation: To verify the configuration of a SVI interface we use the show interface vlan vlan_id command.

Question: How do we show the entire FIB?
A. show cef
B. show cef fib
C. show cef detail
D. show ip cef
Answer:D. show ip cef
Explanation: To view the entire FIB we use the show ip cef command.

Question: When issueing the show cef not-cef-switched counters are shown for CEF Punt packets. Which of the following are not valide counters
A. Redirect
B. Options
C. Receive
D. No_adj
E. Access-List
F. Send
G. Encap
Answer:E. Access-List
F. Send
G. Encap
Explanation: The counters for the CEF punts are:
- No_adj
- No_encap
- Unsuppted
- Redirect
- Receive
- Option
- Accecss
- Frag

Question: How can we verify the STP state of the active fallback bridge groups?
A. show bridge group summary
B. show bridge group
C. show bridge group stp
D. show bridge group detail
Answer:B. show bridge group
Explanation: The show bridge group command will display a summary of all active fallback bridge groups and their STP states.

Question: In an HSRP group a router can be in what states?
A. learning
B. passive
C. backup
D. listen
E. active
F. standby
Answer:D. listen
E. active
F. standby
Explanation: In a HSRP group is elected to be the primary or active router, a standby router is also elected. The remaining routers remain in listen state.

Question: How do we set the HSRP priority?
A. switch(config-if)#standby priority priority
B. switch(config)#standby group priority priority
C. switch(config-if)#standby group priority priority
D. switch(config-if)#standby priority group priority
Answer:C. switch(config-if)#standby group priority priority
Explanation: To set the HSRP priority we use the standby group priority priority interface configuration command.

Question: How can we configure a router to immediately take over the active role if its priority is higher?
A. switch(config-if)#standby group preempt
B. switch(config-if)#standby-priority group high
C. switch(config)#standby group preempt
D. switch(config)#standby group active
E. switch(config-if)#standby group active
Answer:A. switch(config-if)#standby group preempt
Explanation: We use the standby group preempt interface configuration command if we want the switch to take the active role when its priority is the highest at any time.

Question: What can we configure the switch to make the HSRP group more secure?
A. switch(config-if)#standby group authentication string
B. switch(config-if)#standby group md5-authentication string
C. switch(config)#standby group authentication string
D. switch(config)#stanby group authentication md5 string
E. switch(config-if)#standby group authentication md5 string
Answer:A. switch(config-if)#standby group authentication string
Explanation: We can use the standby group authentication string interface configuration command to add clear text authentication to the group to prevent devices with a default configuration to participate.

Question: The default hello timer of HSRP is?
A. 3 seconds
B. 2 seconds
C. 10 seconds
D. 5 seconds
Answer:A. 3 seconds
Explanation: By default hello messages are sent every 3 seconds.

Question: What is the virtual MAC address generated by HSRP?
A. C000.0c07.acxx where xx is the HSRP group nr represented in hex
B. 0000.5e00.01xx where xx is the HSRP group nr represented in hex
C. C000.abcd.acxx where xx is the HSRP group nr represented in hex
D. 0000.0c07.acxx where xx is the HSRP group nr represented in hex
Answer:D. 0000.0c07.acxx where xx is the HSRP group nr represented in hex
Explanation: The virtual MAC address generated by HSRP is 0000.0c07.acxx where xx is the HSRP group nr represented in hex.

Question: The default VRRP priority is?
A. 100
B. 254
C. 255
D. 1
E. 0
Answer:A. 100
Explanation: The default router priority in VRRP is 100.

Question: VRRP-advertisments are sent by default every __________ seconds.
A. 2
B. 20
C. 5
D. 30
E. 1
F. 10
Answer:E. 1
Explanation: By default, VRRP-advertisments are sent every second.

Question: What could cause a router to be elected as the Active Virtual Gateway?
A. Lowest IP Address
B. Highest IP Address
C. Highest MAC Address
D. Highest priority
E. Lowest MAC Address
Answer:B. Highest IP Address
D. Highest priority
Explanation: The Active Virtual Gateway is the router that has the highest priority or the highest IP Address.

Question: Which of the following are GLBP load-balancing methods?
A. Weighted
B. Network-dependent
C. Host-dependent
D. Weighted round robin
E. Round Robin
F. Weighted Random Early Detection
Answer:A. Weighted
C. Host-dependent
E. Round Robin
Explanation: GLBP, Gateway Load Balancing Protocol can use following load-balancing methods:
- Round robin
- Weighted
- Host-dependent

Question: Which of the following are SLB load-balancing methods?
A. Weighted
B. Weighted least connection
C. Host-dependent
D. Weighted round robin
E. Round robin
Answer:B. Weighted least connection
D. Weighted round robin
Explanation: SLB, Server Load Balancing, can use the following load-balancing methods:
- weighted round robin
- weighted least connection

Question: How do we configure the load-balancing method that SLB uses?
A. switch(config-slb)#predictor {roundrobin | leastconns}
B. switch(config)#predictor {roundrobin | leastconns}
C. switch(config-slb-sfarm)#predictor {roundrobin | leastconns}
D. switch(config-slb-vserver)#predictor {roundrobin | leastconns}
Answer:C. switch(config-slb-sfarm)#predictor {roundrobin | leastconns}
Explanation: After configuring a server farm we use the predictor {roundrobin | leastconns} configuration command to set the load-balancing method. This is done underneath the server farm configuration.

Question: How can we check the status of HSRP?
A. show standby brief
B. show ip hsrp detail
C. show ip hsrp status
D. show hspr status
Answer:A. show standby brief
Explanation: The show standby brief command will display the status of HSRP.

Question: What is the range of adminstratively scoped addresses?
A. 239.0.0.0 - 239.255.255.255
B. 224.0.0.0 - 224.0.0.255
C. 224.0.0.0 - 239.255.255.255
D. 224.0.1.0 - 238.255.255.255
Answer:A. 239.0.0.0 - 239.255.255.255
Explanation: complete multicast space: 224.0.0.0 - 239.255.255.255
link-local addresses: 224.0.0.0 - 224.0.0.255
administratively scoped: 239.0.0.0 - 239.255.255.255
globally scoped: 224.0.1.0 - 238.255.255.255

Question: What can we use to make sure that packets are not injected back into the tree?
A. Split Horizon
B. Split Horizon with Poison Reverse
C. Apply access-lists
D. Reverse Path Forwarding
Answer:D. Reverse Path Forwarding
Explanation: Reverse Path Forwarding is a means to make sure packets are not being injected back into the tree at an unexpected location.

Question: IGMPv2 uses which multicast address to send a Leave Group message?
A. 224.0.0.2
B. 224.0.0.1
C. 224.0.0.5
D. 224.0.0.16
Answer:A. 224.0.0.2
Explanation: A Leave Group message is sent to the all-routers multicast address of 224.0.0.2

Question: In IGMPv1 queries are sent every ________ seconds.
A. 30
B. 90
C. 180
D. 60
E. 10
Answer:D. 60
Explanation: IGMPv1 sends out queries every 60 seconds to see if there are still hosts interested in receving the multicast on a specific segment.

Question: In PIM Sparse mode the root router is called?
A. Root
B. Master
C. Rendezvous Point
D. Reference Point
Answer:C. Rendezvous Point
Explanation: In PIM Sparse mode the root router is called the Rendezvous Point.

Question: How do we configure PIM Dense Mode?
A. switch(config-if)#ip pim dense-mode
B. switch(config-if)#ip pim mode dense
C. switch(config-if)#pim dense-mode
D. switch(config-if)#pim mode dense
E. switch(config-if)#no ip pim mode sparse
Answer:A. switch(config-if)#ip pim dense-mode
Explanation: To configure PIM dense mode we use the ip pim dense-mode interface configuration command.

Question: How do we configure a mapping agent?
A. switch(config)#ip pim send-rp-discovery
B. switch(config-if)#ip pim send-rp-discovery scope ttl
C. switch(config-if)#ip pim send-discovery scope ttl
D. switch(config)#ip pim send-rp-discovery scope ttl
Answer:D. switch(config)#ip pim send-rp-discovery scope ttl
Explanation: To configure a mapping agent we use the ip pim send-rp-discovery scope ttl global configuration command.

Question: How do we enable IGMP snooping on a new switch?
A. switch(config)#ip igmp snooping
B. switch(config-if)#ip igmp snooping
C. switch(config)#no ip cgmp
D. IGMP snooping is enabled by default
Answer:D. IGMP snooping is enabled by default
Explanation: On switch platforms that support IGMP snooping, IGMP is enabled by default.

Question: In PIMv2, what is the dynamic RP-to-group mapping called?
A. bootstrap router method
B. auto-rp method
C. dynamic-rp method
D. rendezvous point method
Answer:A. bootstrap router method
Explanation: The bootstrap router method is used by PIMv2 to dynamically map RP-to-groups.

Question: Which IETF standard defines inline power?
A. 802.3af
B. 802.3de
C. 802.5
D. 802.3b
Answer:A. 802.3af
Explanation: The IETF standard 802.3af defines inline power.

Question: What is the voltage that an IP Phone uses and can be provided via inline power or external adapter?
A. 48V AC
B. 24V DC
C. 24V AC
D. 48V DC
E. 12V AC
F. 12V DC
Answer:D. 48V DC
Explanation: IP Phones use 48V DC.

Question: Inline power is provided over which pairs of a Cat5 wiring?
A. pair 2
B. pair 3
C. pair 1
D. pair 4
Answer:A. pair 2
B. pair 3
Explanation: Inline power use pairs 2 and 3, RJ-45 pin 1,2 and 3,6.

Question: How do we configure a voice VLAN?
A. switch(config)#voice vlan vlan_id
B. switch(config-if)#voice vlan vlan_id
C. switch(config-vlan)#voice vlan vlan_id
D. switch(config-if)#switchport voice vlan vlan_id
Answer:D. switch(config-if)#switchport voice vlan vlan_id
Explanation: To configure a voice vlan we use the voice vlan {vlan_id | dot1q | untagged | none} interface configuration command.

Question: When using the untagged keyword in the voice vlan configuration, voice packets are placed into which vlan?
A. vlan 1
B. vlan specified in the configuration
C. vlan 0
D. native vlan
Answer:D. native vlan
Explanation: When using the untagged keyword in the voice vlan configuration, voice packets are placed into vlan 0.

Question: The Skinny Gateway Protocol uses which tcp port?
A. 2000
B. 2001
C. 2002
D. 2003
Answer:C. 2002
Explanation: Skinny Gateway Protocol uses TCP port 2002.

Question: RTP voice packets receive which CoS value from an IP Phone?
A. 3
B. 1
C. 2
D. 4
E. 5
Answer:E. 5
Explanation: RTP voice bearer packets receive CoS value 5, IP Presedence 5 and DSCP 46 (EF) according to the QoS rules of a Cisco IP Phone.

Question: How can we verify the inline power for a switch port?
A. show power inline
B. show inline-power
C. show ip inline-power
D. show ip power-inline
Answer:A. show power inline
Explanation: We use the show power inline command to verify the inline power of a switchport.

Question: How do we instruct an IP Phone to extend the QoS trust to its own switchport?
A. switch(config-if)#switchport extend trust
B. switch(config-if)#switchport priority extend trust
C. switch(config-if)#switchport qos extend trus
D. switch(config-if)#switchport mls qos extend trust
Answer:B. switch(config-if)#switchport priority extend trust
Explanation: To instruct an IP Phone to extend the QoS trust to its own switchport we use the switchport priority extend {cos value | trust} interface configuration command.

Question: TCP port 2001 is used by which protocol?
A. Skinny Client Control Protocol
B. Skinny Gateway Protocol
C. Skinny Voice Protocol
D. Skinny Station Protocol
Answer:D. Skinny Station Protocol
Explanation: Skinny Station Protocol used TCP port 2001.

Question: A multicast MAC address always starts with?
A. 1000.5e
B. 0000.5e
C. C000.5e
D. 0100.5e
Answer:D. 0100.5e
Explanation: A multicast MAC address always starts with 0100.5e

Question: How do manually assign a RP in PIMv1?
A. switch(config)#ip pim rp-address ip_address
B. switch(config-if)#ip pim rp-address ip_address
C. switch(config)#ip pim rendezvouspoint-address ip_address
D. switch(config)#ip pim version1 rp-address ip_address
Answer:A. switch(config)#ip pim rp-address ip_address
Explanation: To manually assign a Rendezvous point we use the ip pim rp-address ip_address global configuration command.

Question: How do we enable authentication, authorization and accounting on a switch?
A. switch(config)#aaa new-model
B. switch(config-aaa)#name name
C. switch(config)#aaa new-model enable
D. switch(config)#aaa enable
Answer:A. switch(config)#aaa new-model
Explanation: To enable AAA we use the aaa new-model global configuration command.

Question: What is the multicast MAC address of the following 224.0.10.15?
A. 0100.5e00.0b0d
B. 0100.5e00.0a0f
C. 0100.5e00.0b0f
D. 0100.5e00.0a0d
Answer:B. 0100.5e00.0a0f
Explanation: Multicast MAC addresses are formed using the 0100.5exx.xxx ethernet address where xx.xxxx are the lower 23 bits of the IP Address.
If we apply that theory here we end up with the following:
224.0.10.15 in binary
11100000.00000000.00001010.00001111
We convert the last 23 bits to hex
0.0.0a.0f
Giving us an ethernet MAC address of 0100.5e00.0a0f

Question: How do we configure the use of Tacacs+ authentication?
A. switch(config)#aaa authentication login tacacs+
B. switch(config)#aaa login tacacs+
C. switch(config-aaa)#authentication login tacacs+
D. switch(config)#authentication login tacacs+
Answer:A. switch(config)#aaa authentication login tacacs+
Explanation: To use Tacacs+ authentication we use the aaa authentication login tacacs+ global configuration command.

Question: How do we create a user database on the switch?
A. switch(config)#username name password password
B. switch(config-aaa)#username name password password
C. switch(config-database)#username name password password
D. switch(config-line)#username name password password
Answer:A. switch(config)#username name password password
Explanation: To create a user database on a switch we use the username name password password global configuration command for each user that needs access to the switch.

Question: We want to make sure that a user is allowed to use configuration commands. How do we achieve this?
A. switch(config)#aaa authorization config-commands enable
B. switch(config)#aaa authorization commands
C. switch(config)#aaa authorization config-commands allow
D. switch(config)#aaa authorization config-commands
Answer:D. switch(config)#aaa authorization config-commands
Explanation: We can use the aaa authorization config-commands to make sure a user is authorized to use configuration commands.

Question: How can we record, using aaa, reloads of a device?
A. switch(config)#aaa accounting reload
B. switch(config)#aaa accounting events
C. switch(config)#aaa accounting system
D. switch(config)#aaa accounting exec
Answer:C. switch(config)#aaa accounting system
Explanation: To record reload we use the aaa accounting system global configuration command.

Question: When using the port-security violation command, which conditions can we set?
A. system
B. reverse-access
C. disable
D. timed
E. protect
F. shutdown
G. restrict
Answer:E. protect
F. shutdown
G. restrict
Explanation: We can use the following keywords with the switchport port-security violation interface configuration command:
- shutdown, the port is put into errdisable state
- restrict, the port is allowed to stay up but packets from violating MAC addresses are dropped and a SNMP trap can be send
- protect, same as restrict but no record of the violation is kept

Question: In order to use port-based authentication the switch and the end-user PC must support which protocol?
A. EAPOL
B. WEP
C. AAA
D. EAP
Answer:A. EAPOL
Explanation: In order to use port-based authentication the switch and the end-user PC must support EAPOL, Extensible Authentication Protocol over LANs.

Question: How do we enable 802.1x on a switch?
A. switch(config)#aaa dot1x authentication
B. switch(config)#dot1x authentication
C. switch(config)#dot1x system-auth-control
D. switch(config)#system-auth-control 8021x
Answer:C. switch(config)#dot1x system-auth-control
Explanation: We use the dot1x system-auth-control global configuration command to enable 802.1x on a switch.

Question: What is the first step in configuring a VACL?
A. switch(config-vlan)#access-map map_name
B. switch(config-vlan)#vlan access-map map_name
C. switch(config)#vlan access-map map_name
D. switch(config-if)#vlan access-map map_name
Answer:C. switch(config)#vlan access-map map_name
Explanation: We first define the VACL using the vlan access-map map_name global configuration command.

Question: Which of the following are actions that can be done by a VACL?
A. forward
B. set QoS/CoS value
C. redirect
D. block
E. drop
F. allow
Answer:A. forward
C. redirect
E. drop
Explanation: A VACL can either drop a matching packet, forward it or redirect it to another interface.

Question: We want to shutdown the switchport when a MAC address is discovered on that port that is not allowed. How do we achieve this?
A. switch(config-if)#switchport port-security shutdown
B. switch(config-if)#switchport port-security errdisable shutdown
C. switch(config-if)#switchport port-security violation shutdown
D. switch(config-if)#switchport violation shutdown
Answer:C. switch(config-if)#switchport port-security violation shutdown
Explanation: In order to shutdown a switchport when a MAC address is discovered that is not allowed to be on that port we use the switchport port-security violation shutdown interface configuration command.

Question: When using a Private VLAN a secondary VLAN can be configured as?
A. Isolated
B. Public
C. Community
D. Promiscuous
E. Secondary
Answer:A. Isolated
C. Community
Explanation: When using a Private VLAN a secondary VLAN can be configured as one of the following:
- Isolated
- Community

Question: How do we associate the primary VLAN to all of the component secondary VLANs?
A. switch(config-vlan)#primary-vlan association secondary-vlan-list
B. switch(config-vlan)#secondary-vlan association primary-vlan-list
C. switch(config-vlan)#private-vlan association secondary-vlan-list
D. switch(config-vlan)#private-vlan association primary-vlan-list
Answer:C. switch(config-vlan)#private-vlan association secondary-vlan-list
Explanation: in order to associate the primary VLAN to all of the component secondary VLANs we use the private-vlan association secondary-vlan-list vlan configuration command.

Question: Which of the following are methods of switch port monitoring?
A. Host SPAN
B. Distributed SPAN
C. Remote SPAN
D. Local SPAN
E. VLAN SPAN
Answer:C. Remote SPAN
D. Local SPAN
E. VLAN SPAN
Explanation: We can use one of the following methods to do switch port monitoring:
- Local SPAN
- VLAN SPAN or VSPAN
- Remote SPAN

Question: How do we define the source for Local SPAN?
A. switch(config)#monitor-span session session source interface type mod/num both
B. switch(config)#span session session source interface type mod/num both
C. switch(config)#monitor session session source interface type mod/num both
D. switch(config)#monitor span source interface type mod/num both
Answer:C. switch(config)#monitor session session source interface type mod/num both
Explanation: The first step we do when configuring a SPAN session is define the source. We use the monitor session session source {interface type mod/num | vlan vlan_id} [rx | tx | both] global configuration command to define that required source.

Question: How do we display the active SPAN sessions?
A. show monitor
B. show span
C. show span active
D. show span detail
Answer:A. show monitor
Explanation: The show monitor command will display the active SPAN sessions.

Question: Spanning Tree is used to prevent?
A. Unidirectional links
B. Broadcast storms
C. Routing loops
D. Bridging loops
Answer:D. Bridging loops
Explanation: Spanning Tree is used to prevent bridging loops.

Question: Which of the following statements are true?
A. ISL adds a new header to the frame.
B. ISL adds a 6 byte-tag to the frame.
C. 802.1Q adds a 6 byte-tag to the frame.
D. ISL encapsulates the whole frame between its header and trailer.
E. 802.1Q encapsulates the whole frame between its header and trailer.
F. 802.1Q adds a new header to the frame.
G. ISL adds a 4 byte-tag to the frame.
H. 802.1Q adds a 4 byte-tag to the frame.
Answer:D. ISL encapsulates the whole frame between its header and trailer.
H. 802.1Q adds a 4 byte-tag to the frame.
Explanation: ISL encapsulates the whole frame between its header and trailer while 802.1Q adds a 4 byte-tag to the frame.

Question: How do we configure a LACP EtherChannel?
A. S1(config)#lacp system-priority priority S1(config)#interface type mod/num S1(config-if)#channel-protocol lacp S1(config-if)#channel-group number mode auto
B. S1(config)#interface type mod/num S1(config-if)#lacp system-priority priority S1(config-if)#channel-protocol lacp S1(config-if)#channel-group number mode active
C. S1(config)#lacp system-priority priority S1(config)#interface type mod/num S1(config-if)#channel-protocol lacp S1(config-if)#channel-group number mode active
D. S1(config)#interface type mod/num S1(config-if)#lacp system-priority priority S1(config-if)#channel-protocol lacp S1(config-if)#channel-group number mode desirable
Answer:C. S1(config)#lacp system-priority priority S1(config)#interface type mod/num S1(config-if)#channel-protocol lacp S1(config-if)#channel-group number mode active
Explanation: When configuring a LACP EtherChannel the first thing we do is set the LACP system priority with the lacp system-priority priority global configuration command. We then use the channel-protocol lacp interface command to set the protocol.
We use the channel-group number mode [on | passive | active] interface configuration command to assign the channel group number to the interface.
The key words on unconditional LACP channel no negotiation, passive, listens passively and waits to be asked or active actively ask, are used to configure the channel negotiation.

Question: The default bridge priority on a Catalyst switch is?
A. 65535
B. 65534
C. 0
D. 32768
E. 32769
Answer:D. 32768
Explanation: The default bridge priority is 32768 and can have a value between 0 and 65535.

Question: What are the 2 components of the Bridge ID?
A. Bridge Priority
B. MAC Address
C. VLAN1 IP Address
D. Highest IP Address configured on the switch.
E. Highest MAC Address in the CAM table
Answer:A. Bridge Priority
B. MAC Address
Explanation: The bridge ID consists of:
- Bridge Priority
- MAC Address

Question: A root port is a port that has _________ .
A. the lowest port cost
B. the highest port cost
C. the lowest root path cost
D. the highest root path cost
Answer:C. the lowest root path cost
Explanation: A root port is the port that has the lowest root path cost to the root bridge. The root path cost is the cummalative cost of all links leading to the root bridge.

Question: Using the new STP cost scale, what is the STP cost of a 622 Mbps link?
A. 14
B. 4
C. 19
D. 2
E. 6
Answer:E. 6
Explanation:
Link Bandwidth Old STP cost New STP cost
4 Mbps 250 250
10 Mbps 100 100
16 Mbps 63 62
45 Mbps 22 39
100 Mbps 10 19
155 Mbps 6 14
622 Mbps 2 6
1 Gbps 1 4
10 Gbps 0 2

Question: When there is more then 1 switch on the same segment, they will elect besides a root port also a ________ port.
A. backup
B. standby
C. nominated
D. designated
Answer:D. designated
Explanation: When there is more then 1 switch that have ports connected to the same network segment they will elect a designated port to forward traffic from that segment.

Question: Associate each state with its description
A. the port cannot add send or receive data,the port is allowed to send and receive BPDUs,the port can send and receive data,the port can add MAC addresses,the port is administratively shutdown
B. Blocking, Listening, Forwarding, Learning, Disabled
Answer:B. Blocking, Listening, Forwarding, Learning, Disabled
Explanation:

State

Description

Disabled In this state the port is administratively shutdown
Blocking In this state the port cannot add send or receive data
Listening In this state the port is allowed to send and receive BPDUs
Learning In this state the port can add MAC addresses,
Forwarding In this state the port can send and receive data

Question: Which debug command will show the transitioning of the port states?
A. debug spanning-tree switch state
B. debug spanning-tree state
C. debug spanning-tree bpdu
D. debug spanning-tree root
Answer:A. debug spanning-tree switch state
Explanation: The debug spanning-tree switch state will display the transistioning between the port states. The show spanning-tree interface command is not fast enough to display the transistioning.

Question: The default Max Age value is?
A. 15 seconds
B. 30 seconds
C. 2 seconds
D. 50 seconds
E. 20 seconds
F. 10 seconds
Answer:E. 20 seconds
Explanation: The default Max Age time is 20 seconds, default Forwarding Delay is 15 seconds and Hellos are send every 2 seconds by default.

Question: The default timers of STP (Hello, Forwarding Delay and Max Age) are based on an assumption of the diameter of the network. How much is that diameter?
A. 7
B. 3
C. 10
D. 15
E. 5
F. 9
Answer:A. 7
Explanation: The timers are based on the assumption that the network has a diameter of 7 switches.

Question: This is the time a port is in both listening and learning state.
A. Max Age
B. Hello
C. Transition Delay
D. Forward Delay
Answer:D. Forward Delay
Explanation: The Forward Delay is the time that a port is in both Listening and Learning state. The default value is 15 seconds.

Question: When is TCN BPDU sent?
A. When a port moves from Forwarding or Learning state into Blocking state.
B. When a port moves into Forwarding state.
C. When a port moves from Listening to Learning state.
D. When a port moves from Blocking into Listening state.
Answer:A. When a port moves from Forwarding or Learning state into Blocking state.
B. When a port moves into Forwarding state.
Explanation: A topology change occurs when a port is put into Forwarding state or a port that is in Forwarding or Learning state goes into Blocking state. Both these events will trigger a TCN (Topology Change Notification) BPDU to be send.

Question: Which of the following Spanning Tree types is Cisco Proprietary?
A. PVST
B. CST
C. STP
D. RSTP
Answer:A. PVST
Explanation: PVST or Per-VLAN Spanning Tree is Ciscos proprietary version of the Spanning Tree protocol.

Question: Which of the following statements are correct?
A. PVST requires ISL.
B. PVST can use both ISL and 802.1Q.
C. Multiple Spanning Trees allows for load balancing over redundant links.
D. PVST can coexist with CST.
Answer:A. PVST requires ISL.
C. Multiple Spanning Trees allows for load balancing over redundant links.
Explanation: Due to the PVST being Cisco proprietary it requires ISL for trunking.
Multiple Spanning Trees allows for load balancing over redundant links when the links are assigned to different VLANs.
PVST+ was developped to coexist with CST.

Question: When root path cost is the same for 2 ports what sequence will be used to determine the root port?
A. lowest root bridge ID, lowest root path cost, lowest sender bridge ID, lowest sender port ID
B. 1,2,3,4
Answer:A. lowest root bridge ID, lowest root path cost, lowest sender bridge ID, lowest sender port ID
Explanation: All STP decisions are based on the following sequence of four conditions:
1. Lowest Root Bridge ID
2. Lowest Root Path Cost
3. Lowest Sender Bridge ID
4. Lowest Sender Port ID

Question: How do we enable spanning tree on a new switch?
A. Spanning tree is enabled by default.
B. switch(config)#spanning-tree vlan 1
C. switch(config)#spanning-tree enable
D. switch(config)#spanning-tree vlan enable
Answer:A. Spanning tree is enabled by default.
Explanation: On a new switch spanning tree is enabled by default. If for some reason spanning was disabled we use the spanning-tree vlan vlan id global configuration command to re-enable spanning tree.

Question: Which two methods can we use to configure the root bridge?
A. switch(config)#spanning-tree vlan vlan id priority bridge-priority
B. switch(config)#spanning-tree priority bridge-priority
C. switch(config)#spanning-tree vlan vlan id root
D. switch(config)#spanning-tree vlan vlan id root-priority bridge-priority
Answer:A. switch(config)#spanning-tree vlan vlan id priority bridge-priority
C. switch(config)#spanning-tree vlan vlan id root
Explanation: We can use the following commands to configure a root bridge:
- switch(config)#spanning-tree vlan vlan id priority bridge-priority
- switch(config)#spanning-tree vlan vlan id root {primary|secondary}

Question: When using the primary keyword with the following command spanning-tree vlan vlan id root primary on our new 3550 switch what will be its bridge priority if you know that the current bridge has a priority of 20000.
A. 0
B. 1
C. 19999
D. 15904
Answer:D. 15904
Explanation: When we use the primary keyword the bridge priority will become 24576 if the current root bridge has a priority higher then that. If the current root bridge has a priority less then that, the new bridge priority will become 4096 less then the current root bridge priority.

Question: In a good network design the root bridge is placed where?
A. On the busiest segment.
B. Closest to the server farm.
C. Closest to the users.
D. In the center of the network.
E. On the most powerfull switch.
Answer:D. In the center of the network.
Explanation: In a good network design the root bridge is placed in the center of the Layer 2 network.

Question: When want to change the root path for a switch in Vlan 5. How do we achieve this? Be aware that this switch is also a member of other Vlans.
A. switch(config-if)#spanning-tree vlan 5 cost cost
B. switch(config-vlan)#spanning-tree cost cost
C. switch(config)#spanning-tree vlan 5 cost cost
D. switch(config-if)#spanning-tree vlan 5 cost
Answer:A. switch(config-if)#spanning-tree vlan 5 cost cost
Explanation: The spanning-tree [vlan vlan id] cost cost interface configuration command will change the cost of a port on a switch. The vlan keyword the port cost is only modified for that vlan.

Question: What is the default port priority on a switch?
A. 0
B. 256
C. 128
D. 255
Answer:C. 128
Explanation: The port priority is a value between 0 and 255, by default it is 128.

Question: How do we change the port priority on a switch?
A. switch(config-vlan)#spanning-tree port-priority value
B. switch(config-if)#spanning-tree priority value
C. switch(config-if)#spanning-tree port-priority value
D. switch(config)#spanning-tree port-priority value
Answer:C. switch(config-if)#spanning-tree port-priority value
Explanation: To change the switch port priority we use the spanning-tree [vlan vlan id] port-priority value interface configuration command. If the vlan keyword is omitted the port priority is set for all active VLANs.

Question: How do we change the Hello timer of Spanning Tree?
A. switch(config-if)#spanning-tree hello-time seconds
B. switch(config)#spanning-tree hello-time seconds
C. switch(config)#spanning-tree hello-interval seconds
Answer:B. switch(config)#spanning-tree hello-time seconds
Explanation: We use the global spanning-tree [vlan vlan id] hello-time seconds configuration command to change the interval.

Question: When modifying the Spanning Tree timers we make these changes on ______.
A. every switch in the network.
B. any switch in the network, not necessarly the root bridge.
C. the root bridge only.
D. on the fastest switch.
Answer:C. the root bridge only.
Explanation: Modifying the Spanning Tree timers only has to be done on the root bridge. The timers will be propagated through the network via Configuration BPDUs.

Question: The default value of the Max Age timer is 20 seconds, what is the minimum and maximum value?
A. 20
B. 40
C. 1
D. 6
E. 50
F. 15
Answer:B. 40
D. 6
Explanation: The Max Age timer can be set between 6 and 40 seconds.

Question: What can we enable on an access switch to put a port immediately in forwarding state?
A. Portfast
B. UplinkFast
C. BackboneFast
D. RSTP
Answer:A. Portfast
Explanation: PortFast is used to bring a port on an access switch immediately to forwarding state.

Question: When we have a redundant path to the root bridge how can we speed up the process to get the next root port start forwarding traffic?
A. Implement PortFast
B. This can not be done
C. Implement UplinkFast
D. Implement BackboneFast
Answer:C. Implement UplinkFast
Explanation: When using UplinkFast the switch keeps a records of all parallel paths to the root bridge, if the primary uplink fails it will bring the next-lowest cost rooth path out of blocking state and into forwarding state.

Question: How do we enable UplinkFast on a switch?
A. switch(config-if)#spanning-tree uplinkfast
B. switch(config)#spanning-tree uplink-fast
C. switch(config-vlan)#spanning-tree uplink-fast
D. switch(config)#spanning-tree uplinkfast
E. switch(config-if)#spanning-tree uplink-fast
F. switch(config-vlan)#spanning-tree uplinkfast
Answer:D. switch(config)#spanning-tree uplinkfast
Explanation: To enable UplinkFast we use the spanning-tree uplinkfast global configuration command.

Question: The destination address of a BPDU frame is?
A. 01-00-5e-ff-ff-ff
B. 01-00-5e- followed by the MAC address of each switch in the spanning tree topology
C. 01-08-c2-00-00-00
D. ff-ff-ff-ff-ff-ff
Answer:C. 01-08-c2-00-00-00
Explanation: BPDU frames are send to the well-known STP multicast address 01-80-c2-00-00-00.

Question: On which layer of the OSI model do we find a TCP Segment?
A. Transport
B. Session
C. Presentation
D. Physical
E. Network
F. Data Link
Answer:A. Transport
Explanation: TCP Segments are found on the Transport layer of the OSI Model.

Question: Which of the following statements are true about Layer 2 devices?
A. Bridges and switches use spanning tree to avoid loops.
B. Broadcasts and multicast frames are flooded out of all ports except the port it came from.
C. Frames destined to an unknown location are send to the default gateway.
D. Bridges and switches use a routing protocol to avoid loops.
E. Broadcasts and multicast frames are flooded out of all ports.
F. Frames destined to an unknown location are discarded.
Answer:A. Bridges and switches use spanning tree to avoid loops.
B. Broadcasts and multicast frames are flooded out of all ports except the port it came from.
Explanation: Layer 2 devices have the following functions:
- MAC addresses are learned from incoming frames source address
- A table of MAC addresses and their associated bridge and switch ports is build and maintained
- Broadcast and multicast frames are flooded out of all ports except the one the frame came from
- Frames destined to an unknown destination are flooded out of all ports except the one the frame came from
- Bridges and switches use spanning tree to avoid loops

Question: In MLS, what is used for the traditional Layer 3 routing function?
A. MPLS
B. BGP
C. Cisco Express Forwarding
D. Store-and-Forward
E. Cut-Through
Answer:C. Cisco Express Forwarding
Explanation: In MLS, Multilayer Switching, the traditional Layer 3 routing function is provided by Cisco Express Forwarding (CEF). A database of routes to every destination network is maintained and distributed to switching ASICs for very high forwarding performance.

Question: How can we divide a broadcast domain?
A. Implement Layer 3 routing
B. Implement Layer 2 bridging
C. Implement Layer 3 bridging
D. Implement VLANs
E. Implement Layer 2 switching
Answer:A. Implement Layer 3 routing
D. Implement VLANs
Explanation: We can divide broadcast domains by implementing VLANs or by segmenting the network using routers or Layer 3 switches.

Question: The traditional 80/20 rule specifies that:
A. 20 percent of network traffic is local to the segment and 80 percent is to be routed via the network backbone.
B. 80 percent of network traffic is unicast traffic and 20 percent is broadcast/multicast traffic.
C. 80 percent of network traffic is local to the segment and 20 percent is to be routed via the network backbone.
D. 20 percent of network traffic is unicast traffic and 80 percent is broadcast/multicast traffic.
Answer:C. 80 percent of network traffic is local to the segment and 20 percent is to be routed via the network backbone.
Explanation: The 80/20 rule specifies that 80 percent of the network traffic on a segment is local (switched) traffic and 20 percent of the network traffic needs to be routed via the network backbone.

Question: What can we do if the network backbone becomes congested because of the traditional 80/20 rule?
A. Implement faster links between the different networks
B. Move users logically (VLANs) and physically to stay near their workgroup
C. Implement MLS
D. Move all resources to 1 big datacentre
E. Bring resources closer to the users
Answer:B. Move users logically (VLANs) and physically to stay near their workgroup
E. Bring resources closer to the users
Explanation: The following are a few solutions a network administrator can implement to reduce the traffic of the network backbone:
- reassign resources to bring the users and servers closer together
- move applications and files to a different server to stay within the workgroup
- move users logically and physically to stay near their workgroup
- add more servers, which can bring resources closer to the workgroups

Question: What are the three layers of Ciscos Hierarchical Network Design?
A. Core
B. Backbone
C. Distribution
D. Host-to-Host
E. Internetwork
F. Access
G. Network
Answer:A. Core
C. Distribution
F. Access
Explanation:

The three layers are:

core  backbone
distribution  routing takes place here
access  switching takes place here

Question: Which of the following functions relate to the Access layer of Ciscos hierarchical network design?
A. Advanced QoS
B. Low cost per switch port
C. Security
D. High port density
E. High throughput at Layer 3
Answer:B. Low cost per switch port
D. High port density
Explanation: The following are some capabilities of the Access layer:
- low cost per switch port
- high port density
- scalable uplinks to higher layers
- user access functions, e.g. VLAN membership, traffic and protocol filtering
- resiliency through multiple uplinks

Question: Which of the following functions relate to the Core layer of Ciscos hierarchical network design?
A. High port density
B. Low cost per switch port
C. Security and Policy-Based connectivity
D. High troughput on Layer 2 and 3
E. Advanced QoS
F. High availability
G. VLAN membership
Answer:D. High troughput on Layer 2 and 3
E. Advanced QoS
F. High availability
Explanation: The following are some capabilities of the Core layer:
- very high througput on Layer 2 and 3
- no costly or unnecessary packet manipulations, e.g. access lists
- redundancy and resilience for high availability
- advanced QoS functions

Question: Which of the following switches would you find at the Access layer of Ciscos hierarchical network?
A. Catalyst 2950
B. Catalyst 6500
C. Catalyst 3550 (SMI)
D. Catalyst 3550 (EMI)
E. Catalyst 4006
Answer:A. Catalyst 2950
C. Catalyst 3550 (SMI)
Explanation: The following Catalyst switches can be found at the Access layer:
- Catalyst 2950
- Catalyst 3550 SMI
- Catalyst 4000/4500 (Sup III or IV)

These are just mentioned for exam purposes in real life any Catalyst switch, IOS or CatOS, can be used at the Access layer.

Question: If we have a remote service, i.e. different segments/VLANs, how does the traffic flows through the Cisco hierarchical network design model?
A. From Access layer to Distribution layer.
B. Access layer only.
C. From Access layer to Core layer.
D. From Distribution layer to Core layer.
Answer:A. From Access layer to Distribution layer.
Explanation: Based on the location of the network service in relation to the end user we have the following types:

Service Type Location of Service Traffic Flow
Local Same segment/VLAN Access layer only
Remote Different segment/VLAN Access to distribution layers
Enterprise Central to all campus users Access to distribution to core layers

Question: A switch/bridge is found at Layer ___ of the OSI model?
A. 2
B. 3
C. 6
D. 4
E. 1
Answer:A. 2
Explanation: Switches and bridges are found on Layer 2, the data link layer, of the OSI model.

Question: In a modular network design a collection of services related to external network access is called?
A. Enterprise edge block
B. Management block
C. Service Provider edge block
D. Core block
Answer:A. Enterprise edge block
Explanation: A enterprise edge block is a collection of services related to the external network access, along with the access and distribution switches.

Question: A switch block contains which of the following Ciscos hierarchical network design layers?
A. Access only
B. Acccess to distribution to core layers
C. Access and distribution
D. distribution to core layers
Answer:C. Access and distribution
Explanation: A switching block contains the access and distribution layers of Ciscos hierarchical network design model.

Question: Which of the following factors should be considered when designing a switch block?
A. Traffic types
B. Size and number of workgroups
C. Type of spanning tree used
D. Speed of the uplinks
E. If the core is a dual or collapsed backbone
Answer:A. Traffic types
B. Size and number of workgroups
Explanation: When sizing a switch block take in consideration some of the following:
- traffic types and patterns
- number of users to the access layer switches
- size of spanning tree domains
- size and number of common workgroups
- geographical boundaries of subnets or VLANs

Question: Click on the exhibit. What type of core does this represents?
A. Backbone Core
B. Collapsed Core
C. Redundant Core
D. Dual Core
Answer:D. Dual Core
Explanation: In a Dual Core topology the core block provide two or more redundant link to the switch block.

Question: When we design the core block what are some designs we could use?
A. Backbone Core
B. Collapsed Core
C. Redundant Core
D. ATM Core
E. Dual Core
F. Layer 3 Core
Answer:B. Collapsed Core
E. Dual Core
Explanation: There are 2 basic designs of core blocks:
- Collapsed Core
- Dual Core

Question: Which of the following resources would we find in the network management block?
A. WAN access
B. Enterprise Resource Planning servers
C. Mainframe systems
D. Intranet services
E. Syslog servers
F. IDS management applications
Answer:E. Syslog servers
F. IDS management applications
Explanation: Some of the following resources can be found in the network management block:
- network monitoring applications
- system logging servers
- authentication, authoriation and accounting servers
- policy management applications
- system administration and remote control services
- intrustion detection management applications

Question: Which of the following resources would we find in the enterprise edge block?
A. Intranet access
B. WAN access
C. Syslog servers
D. Internet access
E. Corporate email
Answer:B. WAN access
D. Internet access
Explanation: The enterprise services that are in the enterprise edge block are usually divided in the following categories:
- internet access
- remote access and vpn
- E-commerce
- WAN access

Question: What are some implications of using Layer 2 switches in the distribution layer?
A. STP must only run in the distribution layer.
B. The use of redundant Layer 3 links in the core is forfaited.
C. There is no need for a Layer 3 connection in the core.
D. STP must run in all layers to prevent bridging loops.
E. STP could increase the downtime when a link fails due to the unblocking or redundant links.
Answer:D. STP must run in all layers to prevent bridging loops.
E. STP could increase the downtime when a link fails due to the unblocking or redundant links.
Explanation: Some implications of using a Layer 2 distribution layer are:
- redundant Layer 3 gateways can still be used in the core
- each VLAN propogates across the redundant link from the access to the core layer, this could produce Layer 2 bridging loops
- STP must run in all layers to prevent bridging loops
- STP could increase the downtime when a link fails due to the unblocking or redundant links
- broadcast traffic reaches the core layer so bandwidth on uplinks and within the core is waisted

Question: How does a switch provide isolation from other connected hosts?
A. Bandwidth is shared on the switching fabric.
B. Each switchport notifies the other ports of errors being seen.
C. Errors in frames are minimized because of the half-duplex operation of a port.
D. Each switchport offers dedicated bandwidth.
E. Errors in frames are not propagated.
Answer:D. Each switchport offers dedicated bandwidth.
E. Errors in frames are not propagated.
Explanation: A switch provides isolation from other hosts by the following:
- each switch port is a collision domain. - no contention on the media because of the full-duplex operation
- each switch port offers dedicated bandwidth across a switching fabric to another switch port
- errors in frames are not propagated
- broadcast traffic can be limited to a treshold
- other methods of filtering can be implemented

Question: When a unicast frame enters the switch and the destination MAC address is not known what will happen to the frame?
A. It will be flooded out of all ports.
B. It will be discarded by the switch.
C. It will be send to the default gateway.
D. It will be discarded by the switch and an ICMP message will be send to the source.
Answer:A. It will be flooded out of all ports.
Explanation: When a unicast frame with an unknown destination MAC address enters the switch it will be flooded out of all ports, this is known as unknown unicast flooding.

Question: The Layer 2 forwarding table is also called?
A. Cached Addressable Memory
B. Content Allocated Memory
C. Content Access Memory
D. Content Addressable Memory
Answer:D. Content Addressable Memory
Explanation: The Layer 2 forwarding table or Content Addressable Memory uses the frames destination MAC Address as an index. If the address is found, the egress switch port and the appropriate VLAN ID are read from the table.

Question: When using a topology-based multilayer switching, this type is called?
A. Cisco Express Forwarding
B. Demand-based switching
C. Netflow switching
D. Netflow LAN switching
Answer:A. Cisco Express Forwarding
Explanation: When using topology-based MLS we also call it Cisco Express Forwarding.

Question: Which of the following do we find in multilayer switching but not in Layer 2 switching?
A. Forwarding Information Base
B. Content Addressable Memory
C. Security ACLs
D. QoS ACLs
Answer:A. Forwarding Information Base
Explanation: The Forwarding Information Base, FIB, or Layer 3 forwarding table is found in MLS. It contains the current routing table database.

Question: When can CEF be used to forward an IP Packet?
A. When the packet is a CDP packet.
B. When the packet is a routing protocol update.
C. When the Layer 2 source and destination address is known.
D. When no IP parameters have to be manipulated.
E. When the source and destination address is known, both Layer 2 and 3.
Answer:D. When no IP parameters have to be manipulated.
E. When the source and destination address is known, both Layer 2 and 3.
Explanation: When the source and destination address is known, both Layer 2 and 3, and no IP parameters have to be manipulated then CEF can directly forward most IP packets.

Question: After how many seconds of idle time is an entry deleted from the CAM table?
A. 90
B. 30
C. 900
D. 60
E. 600
F. 300
Answer:F. 300
Explanation: By default an entry is deleted from the CAM table after 300 seconds of idle time.

Question: How do we change the time a switch waits before deleting an entry from the CAM table?
A. S1(config)#mac aging-time seconds
B. S1(config)#cam-table aging-time seconds
C. S1(config)#mac address-table aging-time seconds
D. S1(config-address-table)#aging-time seconds
Answer:C. S1(config)#mac address-table aging-time seconds
Explanation: The mac address-table aging-time seconds global switch configuration command enables us to change the default aging time from 300 seconds to a more appropriate value if necessary. Prior to Catalyst IOS version 12.1 the command used to be mac-address-table aging-time seconds, the newer version omit the first hyphen.

Question: How do we configure a permanent entry in the CAM table?
A. S1(config)#mac address-table mac_address vlan vlan_id interface type mod/port
B. S1(config-address-tabel)#mac_address vlan vlan_id interface type mod/port
C. S1(config)#mac address-table static mac_address vlan vlan_id interface type mod/port
D. S1(config)#mac address-table mac_address vlan vlan_id interface type mod/port permanent
Answer:C. S1(config)#mac address-table static mac_address vlan vlan_id interface type mod/port
Explanation: To enter a permanent entry in the CAM table we use the mac address-table static mac_address vlan vlan_id interface type mod/port global switch configuration command.
Prior to Catalyst IOS version 12.1 the command used to be mac-address-table static mac_address vlan vlan_id interface type mod/port, the newer version omit the first hyphen.

Question: Which of the following are part of a TCAM entry?
A. Value
B. Weight
C. Mask
D. MAC Address
E. Result
F. Age
G. Length
Answer:A. Value
C. Mask
E. Result
Explanation: TCAM entries are composed of Value, Mask and Result combinations.

Question: How do we display the CAM table?
A. show address-table
B. show cam
C. show mac address-table dynamic
D. show mac-table
Answer:C. show mac address-table dynamic
Explanation: The show mac address-table dynamic command will display the CAM table.

Question: Which command can we use to display the TCAM partitions?
A. show memory partitions
B. show sdm prefer
C. show sdm partitions
D. show tcam partitions
Answer:B. show sdm prefer
Explanation: The show sdm prefer command will display the current TCAM partitioning.

Question: How do we display the size of the CAM table?
A. show mac-address-table size
B. show cam count
C. show memory address-table
D. show cam size
E. show mac-address-table count
F. show mac-address-table memory
Answer:E. show mac-address-table count
Explanation: The show mac-address-table count will display the size of the CAM table.

Question: How do we change the name of the switch?
A. S1#hostname name
B. S1(config-switch)#hostname name
C. S1(config)>hostname name
D. S1(config)#hostname name
Answer:D. S1(config)#hostname name
Explanation: As on a Cisco router, the hostname global configuration command will change the name of the switch.

Question: How do we set a password on all vty lines?
A. S1(config)#line vty 0 4 S1(config-line)#password password
B. S1(config)#line vty S1(config-line)#password password
C. S1(config)#line vty all S1(config-line)#password password
D. S1(config)#line vty 0 15 S1(config-line)#password password
Answer:D. S1(config)#line vty 0 15 S1(config-line)#password password
Explanation: To set a login password on all the vty lines, 0 15, we use the password password line configuration command.

Question: How do we assign a default gateway to the default management VLAN?
A. S1(config)#interface vlan 1 S1(config-if)#ip default-gateway ip_address
B. S1(config)#interface vlan 1 S1(config-vlan)#ip default-gateway ip_address
C. S1(config)#interface vlan 1 S1(config-if)#ip route 0.0.0.0 0.0.0.0 next_hop
D. S1(config)#ip default-gateway ip_address
Answer:A. S1(config)#interface vlan 1 S1(config-if)#ip default-gateway ip_address
Explanation: The default management VLAN is VLAN 1. We use the ip default-gateway ip_address interface configuration command to assign a default gateway to the switch. Together with an IP_Address this will allow for remote access of the switch.

Question: How do we disable CDP on a switch port?
A. S1(config-if)#cdp disable
B. S1(config-if)#no cdp enable
C. S1(config)#no cdp run interface type mod/port
D. S1(config-if)#no cdp run
Answer:B. S1(config-if)#no cdp enable
Explanation: CDP is enabled by default on all switch interfaces. To disable CDP we use the no cdp enable interface configuration command.

Question: If the flash memory is corrupted what can be done to repair it?
A. erase flash:
B. sqeeze flash:
C. delete flash:
D. format flash:
E. defrag flash:
Answer:D. format flash:
Explanation: Using the format flash command will reformat the flash memory, destroying all files. This could be appropriate when the flash memory has been corrupted.

Question: What command can we use to check that an IOS image is not corrupted after being copied into flash memory?
A. show flash:filename
B. check flash:filename
C. more flash:filename
D. verify flash:filename
Answer:D. verify flash:filename
Explanation: The verify flash:filename command will check the checksum of the file, e.g.IOS name to ensure that this hasnt been corrupted after it has been copied into flash memory.

Question: How do we display a summary of the neighbor switch names and management IP addresses?
A. show cdp entry summary
B. show cdp neighbors summary
C. show cdp neighbors brief
D. show cdp entry * protocol
E. show cdp neighbors *
Answer:D. show cdp entry * protocol
Explanation: The show cdp entry * protocol command will display a brief summary of only the neighbors switch names and management IP Addresses.

Question: How do we clear the CDP cache?
A. clear cdp neighbors
B. clear cdp table
C. clear cdp entries *
D. clear cdp cache
Answer:B. clear cdp table
Explanation: The clear cdp table command will clear the CDP cache to see what new information is being received from the neighbors.

Question: What command will display the current running environment and IOS version?
A. show running-config
B. show module
C. show history
D. show version
E. show config
Answer:D. show version
Explanation: The show version command will display the current running environment and the IOS version.

Question: When using LRE over a distance of 5000 feet what is the maximum full-duplex bandwidth?
A. 100 Mbps
B. 15 Mbps
C. 1000 Mbps
D. 5 Mbps
E. 10 Mbps
Answer:D. 5 Mbps
Explanation: LRE or Long Reach Ethernet has to the following bandwidth restrictions:
- 5 Mbps full-duplex up to 5000 feet
- 10 Mbps full-duplex up to 4000 feet
- 15 Mbps full-duplex up to 3000 feet

Question: In autonegotiation 100Base-TX uses which priority?
A. 5
B. 6
C. 7
D. 3
E. 1
F. 2
G. 4
Answer:D. 3
Explanation:
Priority Ethernet media
7 100BASE-T2 Full Duplex
6 100BASE-TX Full Duplex
5 100BASE-T2 Half Duplex
4 100BASE-T4
3 100BASE-TX
2 10BASE-T Full Duplex
1 10BASE-T

Question: 1000BASE-T is based on which IEEE standard?
A. 802.3
B. 802.1Q
C. 802.3z
D. 802.3ab
Answer:D. 802.3ab
Explanation: 1000BASE-T or "Gigabit over copper" is based on the IEEE 802.3ab standard.

Question: How can we assign common configuration settings to multiple switch ports?
A. S1(config)#interface range type module/first_port last_port
B. S1(config-if)#range type module/first_port last_port
C. S1(config)#port range type module/first_port last_port
D. S1(config-if)#interface range type module/first_port last_port
E. S1(config)#interface-range type module/first_port last_port
Answer:A. S1(config)#interface range type module/first_port last_port
Explanation: To assign common configuration settings to multiple switchports we use the interface range type module/first_port last_port global configuration command.

Question: We want to disable a port when an error is detected. How do we configure the switch?
A. S1(config-if)#errdisable detect cause all
B. S1(config-if)#disable detect cause all
C. S1(config)#errdisable detect cause all
D. S1(config)#errdisable cause all
Answer:C. S1(config)#errdisable detect cause all
Explanation: We use the errdisable detect cause [all | cause_name] global configuration command to disable a switchport when an error condition is detected.

Question: For testing purposes we need to change the configuration numerous times on multiple switch ports. How can we make do and undo these changes easily?
A. Create a macro with the command with the define macro_name interface range int_type/first_port last_port command.
B. Create a macro with the command with the define interface range macro_name int_type/first_port last_port command.
C. Create a macro with the command with the define macro_nameint_type/first_port last_port command.
D. Create a macro with the command with the macro interface range macro_name int_type/first_port last_port command.
Answer:B. Create a macro with the command with the define interface range macro_name int_type/first_port last_port command.
Explanation: If we need to make multiple configuration changes on the same switch for testing purposes and undo them we can define macros that contain those commands. We use the define interface range macro_name int_type/first_port last_port global configuration command.

Question: When a switch port is configured for being disabled on an error condition and automatic recovery how do assign the time that the port is disabled?
A. S1(config)#errdisable recovery interval seconds
B. S1(config-if)#errdisable recovery interval seconds
C. S1(config)#recovery interval seconds
D. S1(config)#errdisable recovery interval seconds cause all
Answer:A. S1(config)#errdisable recovery interval seconds
Explanation: When a errdisable causes are configured for automatic recovery we can set the time a swith port remains disable with the errdisable recovery interval seconds global configuration command. The default time is 300 seconds.

Question: How can we see a list of all ports that are in errdisable state?
A. show errdisabled
B. show status errdisabled
C. show interface status err-disabled
D. show interface errdisabled
Answer:C. show interface status err-disabled
Explanation: To view a list of all ports in errdisable state we use the show interface status err-disabled command.

Question: Which of the following will not trigger a errdisable state?
A. colguard
B. all
C. duplex-flap
D. rootguard
E. pagp-flap
Answer:A. colguard
C. duplex-flap
Explanation: An errdisable state can be triggered by one of the following:
- all
- bpduguard
- dtp-flap
- link-flap
- pagp-flap
- rootguard
- udld

Question: How can we bring a switch port manually out of errdisable state?
A. Perform a clear interface command.
B. If errdisable is configured it has to remain in that state untill the recovery time interval has elapsed.
C. Perform a shutdown and no shutdown on the interface.
D. Use the no errdisable command.
Answer:C. Perform a shutdown and no shutdown on the interface.
Explanation: To manually recover a switch port from an errdisable state we use the shutdown and no shutdown interface configuration command to "bounce" the interface.

Question: Static VLANs offer membership based on?
A. host-based
B. MAC address based
C. Priority based
D. port-based
Answer:D. port-based
Explanation: Static VLAN membership is port-based, switch ports are assigned to a specific VLAN.

Question: How do we configure a static VLAN on S1?
A. S1(config)#vlan vlan_numb
B. S1(config-if)#switchport access vlan vlan_numb
C. S1#vlan vlan_numb
D. S1(config)#vlan S1(config-vlan)#vlan vlan_numb
Answer:A. S1(config)#vlan vlan_numb
Explanation: To configure a static VLAN we use the vlan vlan_number global configuration command.

Question: Dynamic VLANs use __________ to provide membership.
A. Hostnames
B. Switch ports
C. IP Addresses
D. MAC Addresses
Answer:D. MAC Addresses
Explanation: Dynamic VLANs provide membership based on MAC Addresses. These MAC Addresses have to be entered in the database of the VMPS, VLAN Membership Policy Server.

Question: Which type of VLANs should we implement if we want to follow the 80/20 rule?
A. Local
B. Transparent
C. End-to-End
D. Dynamic
Answer:C. End-to-End
Explanation: End-to-End VLANs group the users by common requirements, i.e. the users have the same traffic flow pattern. The 80/20 rule states that 80 percent of the traffic is local to the workgroup so end-to-end VLANs are ideal for this situation. It is worth mentioning that end-to-end VLANs are not recommended because broadcast traffic will traverse the entire network.

Question: Which protocols can we use to identify VLANs?
A. STP
B. VTP
C. 802.1D
D. ISL
E. 802.1Q
Answer:D. ISL
E. 802.1Q
Explanation: VLAN identification can use one of the following protocols:
- ISL, Inter-Switch Link [Cisco proprietary]
- 802.1Q, an IEEE standard

Question: When using 802.1Q and there is no tagging on the frame, the frame belongs to the ______ VLAN.
A. native
B. universal
C. default
D. common
E. first
Answer:A. native
Explanation: When using 802.1Q, frames that belong to the native VLAN are not encapsulated with any tagging information.

Question: Which of the following are part of the 4 bytes that 802.1Q adds to the frame?
A. CoS
B. DSCP
C. CRC
D. FIB
E. TPID
F. TCI
Answer:E. TPID
F. TCI
Explanation: The first two bytes are used for the Tag Protocol Identifier (TPID) and the last 2 bytes are used for the Tag Control Information (TCI).


Cisco CCNP Certification Articles

Cisco CCNP Certification Articles Cisco CCNP Certification Articles Cisco CCNP Certification Articles
Cisco CCNA CCNP Home Lab Tutorial Assembling your Home Cisco Lab Cisco CCNP BCMSN Exam Tutorial Multicasting and the RPF Check Cisco CCNP BSCI Exam Tutorial Route Summarization
Certification Suggested Topologies for your Home CCNA CCNP Lab Cisco CCNP BCMSN Exam Tutorial Spanning Tree Protocol STP Timers Cisco CCNP BSCI Exam Tutorial the BGP Attribute MED
Cisco CCNA CCNP BCMSN Exam Tutorial Configuring Portfast and BPDU Guard Cisco CCNP BCMSN Exam Tutorial Static VLANS Cisco CCNP BSCI Exam Tutorial the Passive Interface Command and OSPF
Cisco CCNA CCNP Certification Exam Attending a Video Boot Camp Cisco CCNP BCMSN Exam Tutorial the Core Layer of Cisco's Three Layer Model Cisco CCNP BSCI Exam Tutorial Using Distribute Lists
Cisco CCNA CCNP Certification Exam Creating a Study Plan Cisco CCNP BCMSN Exam Tutorial the Four or Five STP Port States Cisco CCNP BSCI Exam Tutorial Using OSPF's Summary Address Command
Cisco CCNA CCNP Certification How and Why to Build an Etherchannel Cisco CCNP BCMSN Exam Tutorial VLAN Trunking Protocol Cisco CCNP BSCI Exam Tutorial Using the OSPF Command Area Range
Cisco CCNA CCNP Certification Introduction to BGP Attributes Cisco CCNP BCMSN Tutorial Switches QOS and Cisco's Networking Model Cisco CCNP BSCI Tutorial BGP Attribute Next_Hop
Cisco CCNA CCNP Certification OSPF E2 vs E1 Routes Cisco CCNP BSCI Certification BGP Route Reflector Tutorial Cisco CCNP BSCI Tutorial Comparing OSPF ISIS Hellos
Cisco CCNA CCNP Exam Tutorial Five Debugs you Must Know Cisco CCNP BSCI Certification Exam Five OSPF Details you must Know Cisco CCNP BSCI Tutorial Route Summarization with RIP and EIGRP
Cisco CCNA CCNP Home Labs Developing Troubleshooting Skills Cisco CCNP BSCI Certification Introduction to ISIS Terminology Cisco CCNP BSCI Tutorial the Role of the OSPF ASBR
Cisco CCNA CCNP Home Lab Setup How to Configure Reverse Telnet Cisco CCNP BSCI Certification Route Redistribution and the Seed Metric Cisco CCNP Certification BCMSN Exam Tutorial Uplinkfast
Cisco CCNA CCNP Home Lab Tutorial Cabling your Access Server Cisco CCNP BSCI Certification the BGP Attribute MED
Cisco CCNA CCNP Home Lab Tutorial Configuring an Access Server Cisco CCNP BSCI Certification the Local Preference BGP Attribute Cisco CCNP Certification BSCI Exam Tutorial Floating Static Routes
Cisco CCNA CCNP Home Lab Tutorial many Cable Types Cisco CCNP BSCI Exam Tutorial a Guide to IPV6 Addressing Cisco CCCP Certification BSCI Exam Tutorial ISIS Hellos and Adjacencies
Cisco CCNA CCNP Home Lab Tutorial Planning Ahead for IE Study Cisco CCNP BSCI Exam Tutorial BGP Adjancey States Cisco CCNP Certification BSCI Exam Tutorial Route Summarization Basics
Cisco CCNA CCNP Home Lab Tutorial Starting Over Cisco CCNP BSCI Exam Tutorial Broadcasts and the IP Helper address Command Cisco CCNP Certification FAQ
Cisco CCNA CCNP Home Lab Tutorial the 2501 Router Cisco CCNP BSCI Exam Tutorial Configuring and Troubleshooting OSPF Virtual Links Cisco CCNP Certification Introduction to BGP
Cisco CCNA CCNP Home Lab Tutorial the 2503 Router Cisco CCNP BSCI Exam Tutorial Configuring EIGRP Packet Authentication Cisco CCNP Certification the BGP Weight Attribute
Cisco CCNA CCNP Home Lab Tutorial the 2520 Router Cisco CCNP BSCI Tutorial EIGRP Stub Routing Passing the CCNA and CCNP Cisco Home Lab Faq
Cisco CCNA CCNP Tutorial Home Lab Assembly Case Study Cisco CCNP BSCI Exam Tutorial Filtering BGP Updates with Prefix Lists Cisco CCNP Certification Using the BGP Command Source
Certification Suggested Topologies for you Home CCNA CCNP Lab Cisco CCNP BSCI Exam Tutorial Introduction to Policy Routing Cisco CCNP Home Lab Tutorial on a Frame Relay Switch
Cisco CCNP Certification OSPF ASBRS Explained and Illustrated Cisco CCNP BSCI Exam Tutorial IP Version 6 Zero Compression Cisco Certification in What Order shoud you Take your CCNP Exams
Cisco CCNP BCMSN Exam Tutorial BPDU Skew Detection and Cisco Switches Cisco CCNP BSCI Exam Tutorial ISIS Router Types Cisco Certification Recertifying your CCNA and CCNP
Cisco CCNP BCMSN Exam Tutorial Changing Root Bridge Election Results Cisco CCNP BSCI Exam Tutorial Leading Zero Compression Cisco Certification the Secret Key to Getting your CCNA and CCNP
Cisco CCNP BCMSN Exam Tutorial Configuring CGMP on Routers Switches Cisco CCNP BSCI Exam Tutorial Not all Static Routes are Created Equal Four Important Commands for your CCNA CCNP Home Lab
Cisco CCNP BCMSN Exam Tutorial Dynamic Trunking Protocol DTP Cisco CCNP BSCI Exam Tutorial OSPF Route Redistribution Review How to Become a Cisco CCNP
Cisco CCNP BCMSN Exam Tutorial Dynamic VLANS VMPS Cisco CCNP BSCI Exam Tutorial OSPF Router Types Cisco CCNA and CCNP Exam Five Tipes for Exam Day Success
Cisco CCNP BCMSN Exam Tutorial Multicasting and Reserved Addresses Cisco CCNP BSCI Exam Tutorial RIP Update Packet Authentication Passing Cisco's CCNA and CCNP Exams the VLAN Dat File
Passing Cisco's CCNA and CCNP Exams Traceroute Passing Cisco's CCNA and CCNP Ping and Extended Ping Passing the CCNA and CCNP Cisco Home Lab FAQ
Passing the CCNA and CCNP Exams Setup Mode Passing the CCNA and CCNP Home Lab Shopping on EBAY Passing you CCNA and CCNP COnfiguring and Troubleshooting Router on a Stick

You are Viewing cisco 642 811 bcmsn certification exam