ICND2v3 – New Questions Part 3

=========================New Questions added on 1st-Jun-2018============================

Note: These new questions have not been classified into specific topics so please practice them separately. Also in this page we are testing show/hide answer button.

Question 1

What are three reasons a company needs high speed Internet access? (Choose three)

A. SAN upgrade
B. Large network device IOS upgrades
C. Peer2peer
D. IaaS
E. ?

 

Show Answer

Question 2

How do you configure a voice port?

Show Answer

Question 3

What command do you look to see native VLAN?

A. show interfaces
B. show interface trunk
C. show ip interface brief

 

Show Answer

Question 4

What are the three things that can cause congestion? (Choose three)

A. Broadcast
B. defective hardward
C. Collision domains
D. ?

 

Show Answer

Question 5

What are the results of a saturated tunnel?

Show Answer

Explanation

Load on the interface as a fraction of 255 (255/255 is completely saturated), calculated as an exponential average over 5 minutes.

Question 6

Which utility can you use to identify redundant or shadow rules?

A. The ACL trace tool in Cisco APIC-EM.
B. The ACL analysis tool in Cisco APIC-EM.
C. The Cisco APIC-EM automation scheduler.
D. The Cisco IWAN application.

 

Show Answer

Explanation

Cisco APIC-EM supports the following policy analysis features:
+ Inspection, interrogation, and analysis of network access control policies.
+ Ability to trace application specific paths between end devices to quickly identify ACLs in use and problem areas.
+ Enables ACL change management with easy identification of conflicts and shadows -> Maybe B is the most suitable answer.

Reference: http://www.cisco.com/c/en/us/td/docs/cloud-systems-management/application-policy-infrastructure-controller-enterprise-module/1-2-x/config-guide/b_apic-em_config_guide_v_1-2-x/b_apic-em_config_guide_v_1-2-x_chapter_01000.pdf

The ACL trace tool can only help us to identify which ACL on which router is blocking or allowing traffic. It cannot help identify redundant/shadow rules.

Note:

Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) is a Cisco Software Defined Networking (SDN) controller, which uses open APIs for policy-based management and security through a single controller, abstracting the network and making network services simpler. APIC-EM provides centralized automation of policy-based application profiles.

Reference: CCNA Routing and Switching Complete Study Guide

Cisco Intelligent WAN (IWAN) application simplifies the provisioning of IWAN network profiles with simple business policies. The IWAN application defines business-level preferences by application or groups of applications in terms of the preferred path for hybrid WAN links. Doing so improves the application experience over any connection and saves telecom costs by leveraging cheaper WAN links.

Shadow rules are the rules that are never matched (usually because of the first rules). For example two access-list statements:

access-list 100 permit ip any any
access-list 100 deny tcp host A host B

Then the second access-list statement would never be matched because all traffic have been already allowed by the first statement. In this case we call statement 1 shadows statement 2.

Question 7

Which two (or three) are effects of local spanning tree? (Choose two)

A. Doubles the load
B. Doubles internal switch traffic
C. Prevents span destination
D. ?

 

Answer: unknown

Question 8

What is true about the default VLAN?

A. It is VLAN 1
B. It is always the same as Native VLAN

 

Show Answer

Question 9

Which command to see information about neighbors in OSPFv3?

A. show ipv6 ospf neighbors
B. show ipv6 interface brief

 

Show Answer

Question 10

Which two actions must you take to configure a LACP between two switches, S1 and S2? (Choose two)

A. Configure mode auto command on S1.
B. Configure mode passive command on S1.
C. Configure mode desirable command on S1.
D. Configure mode auto command on S2.
E. Configure mode desirable command on S2.
F. Configure mode active command on S2.

 

Show Answer

Question 11

How can QoS be implemented?

A. Only outbound
B. Only inbound
C. Inbound and outbound

 

Show Answer

Explanation

On the inbound path, a packet is classified before it is switched. On the outbound path, a packet is classified after it is switched.

At the inbound direction, QoS can do:
+ Input marking (class-based marking or Committed Access Rate (CAR))
+ Input policing (through a class-based policer or CAR)

At the outbound direction, QoS can do:
+ Output marking
+ Output policing (through a class-based policer or CAR)
+ Queueing (Class-Based Weighted Fair Queueing (CBWFQ) and Low Latency Queueing (LLQ)), and Weighted Random Early Detection (WRED)

Reference: https://www.cisco.com/c/en/us/support/docs/quality-of-service-qos/qos-packet-marking/22141-qos-orderofop-3.html

Question 12

What do you need to reduce GRE fragmentation (Choose two)?

A. MTU 1360
B. MSS 1360
C. MTU 1400
D. MSS 1400
E. MTU 1500

 

Show Answer

Question 13

In OSPF or EIGRP, which of the following IPs will choose as router ID?

A. 192.168.x.x
B. 172.x.x.x
C. 172.x.x.x
D. 172.x.x.x

 

Show Answer

Question 14

How can you see the PPP authentication?

A. show running-config
B. show interface
C. show ip interface

 

Show Answer

Question 15

Which is the first step to configure OSPFv3 area 1?

A. (config)#ipv6 unicast-routing
B. (config)#router ospf ipv6 1

 

Show Answer

Question 16

A topology of host named X and Y connected to a switch and the switch was connected to a router as well. No other information (IP addresses, protocols, etc, nothing just the diagram). Host X cannot communicate with Host Y, why?

A. Host X has a broadcast IP address configured.
B. Host X has an invalid subnet mask.
C. Host Y has a network ID address configured.
D. Host Y has invalid IP and invalid subnet mask.

 

Answer: B

============================ New Questions added on 14th-July-2018 ============================

Question 17

A question about SVI and how to troubleshoot them (Choose three)

A. ASIC
B. Frame Size
C. IP routing
D. Encapsulation
E. Interfaces
F. ?

 

Answer: C D E

Question 18

When you use cloud services which service is more “exposed” to the cloud?

A. Desktop as a Service
B. Software as a Service
C. Infrastructure as a Service
D. Platform as a Service

 

Answer: B

Question 19

Question about Dynamic VPN? (choose three)

A. It can auto create IPSec tunnels
B. It allows dynamic addressing…
C. It does not need additional configuration on the hub for new spokes
D. It allows partial mesh topology

 

Answer: B C D

Question 20

Question for SNMPv3 what does this do? (choose two)

R1# snmp-server host 1.1.1.1 trap v3 auth md5 cisco

A. Sets the R1 password to cisco
B. Configures host 1.1.1.1 to receive informs
C. Configures host 1.1.1.1 to send informs
D. Configures host 1.1.1.1 to receive traps
E. Sets the host 1.1.1.1 password to cisco

 

Answer: D and A (although answer A is a bit unclear)

Explanation

The syntax of above command is shown below:

snmp-server host host-addr [informs | traps] [version {1 | 2c | 3 {auth | noauth | priv}}] community-string [udp–port port]

This command specify the recipient of an SNMP trap operation.

+ For host-addr, specify the name or Internet address of the host (the targeted recipient).
+ (Optional) Enter informs to send SNMP informs to the host.
+ (Optional) Enter traps (the default) to send SNMP traps to the host.
+ (Optional) Specify the SNMP version (1, 2c, or 3). Default is version 1. SNMPv1 does not support informs.
+ (Optional) For Version 3, select authentication level auth, noauth, or priv.
Note: The priv keyword is available only when the cryptographic software image is installed.

+ For community-string, when version 1 or version 2c is specified, enter the password-like community string sent with the notification operation. When version 3 is specified, enter the SNMPv3 username.
+ (Optional) For port, specify the UDP port of the notification host. Default is port 162.

Reference: https://www.cisco.com/c/en/us/td/docs/routers/ir910/software/release/1_1/configuration/guide/ir910scg/swsnmp.pdf

Question 21

What are the differences between link state vs vector routing protocols? (Choose two)

A. Vector routing protocols are faster than link state protocols
B. Link state protocols are faster than vector routing protocols
C. Vector routing protocols take up more memory than link state protocols
D. Link state protocols take up more memory than vector routing protocols

 

Answer: B D

============================ New Questions added on 18th-Oct-2018 ============================

Question 22

Drag drop question.

Native vlan – Untagged

802.1Q – Trunk

Question 23

Drag drop question about TACACS+ and RADIUS.

Answer:

TACACS+ server:
Encrypts entire packet
Port 49
TCP

RADIUS Server:
Encrypts only password
Port 1812, 1813; 1645,1646
UDP