Share your ICND2 v3.0 Experience

I will take mine Monday.
Do you know some questions that were not posted here?

Which part of the PPPoE server configuration contains the information used to assign an IP
address to a PPPoE client?
A. virtual-template interface
B. DHCP
C. dialer interface
D. AAA authentication

A or B?

Which part of the PPPoE server configuration contains the information used to assign an IP
address to a PPPoE client?
A. virtual-template interface
B. DHCP
C. dialer interface
D. AAA authentication

A or C?

@Nixie @Rick Grimes please can you share your exam experience regardless of exam grade?

@ASB
Answer: A

@ASB
I think my answer is the correct one:

Which two options are primary responsibilities of the APIC-EM controller? (Choose two)

Your answer:
It automates network actions between different device types., It makes network functions programmable. Wrong Incorrect
Correct answer:
It automates network actions between different device types., statically map IPv4 addresses to IPv6 addresses

Sorry, it was for the @Rick Grimes

@Rick Grimes
Do the access point issues fall on the exam?

@ Thefrus, I havent taken it yet. That question is weird though though, the bluetooth answer does not seem correct but everyone is going with that one

xaxa@ please could you tell me how can I open the website, because I couldn’t reach to the dump

Test in 2 days……..

Congratulation Ricky

@Wick Can you share the detail after your exam please?

@Mr Wick please share your experience here

@Rick

Which two options are primary responsibilities of the APIC-EM controller? (Choose two)

Correct answer:
It automates network actions between different device types., statically map IPv4 addresses to IPv6 addresses

The answer is wrong

what are the benefits of switch stacking ?
a. each switch can run different ios
b. each switch can have independent mac adress table
c. one licence for all stacked switches
d. switches can be added or removed drom stack without disruption
e. one master switch for all

Answer is D. E right?

@NIXIE yeah I’d certainly go with D & E.To my knowledge Differentiating Licenses or IOS in a stack will cause issues, and only 1 mac address table per stack that references all ports across the stack.

Can anyone point me in the direction where I can find the updated ICND2.PDF?

which two values are needed to run the apic-em acl analysis tool ?
A Destinanation port
B source address
C protocol
D source port
E periodic refresh
F destination adress

Dump say D F but I think the answer is B ; F no?

@alpha I believe you’re correct. Source and Destination address, so B and F. Ports are optional.

@ Nixie, you are correct. I have changed the answer to (It makes network functions programmable. , It automates network actions between different device types)

Which two circumstances can cause collision domain issues on VLAN domain? (Choose
two.)
• A. duplex mismatches on Ethernet segments in the same VLAN
• B. multiple errors on switchport interfaces
• C. congestion on the switch inband path
• D. a failing NIC in an end device
• E. an overloaded shared segment
A and C ? or c and e?

How can you disable DTP on a switch port?
• A. Configure the switch port as a trunk.
• B. Add an interface on the switch to a channel group.
• C. Change the operational mode to static access.
• D. Change the administrative mode to access

A or c?

Hi anyone can share ICND2 latest dump.

Which statement about QoS default behavior is true?
• A. Ports are untrusted by default.
• B. VoIP traffic is passed without being tagged.
• C. Video traffic is passed with a well-known DSCP value of 46.
• D. Packets are classified internally with an environment.
• E. Packets that arrive with a are untagged at the edge of an administrative domain.

A or E ?
How can you disable DTP on a switch port?
• A. Configure the switch port as a trunk.
• B. Add an interface on the switch to a channel group.
• C. Change the operational mode to static access.
• D. Change the administrative mode to access
A or c?

Which two circumstances can cause collision domain issues on VLAN domain? (Choose
two.)
• A. duplex mismatches on Ethernet segments in the same VLAN
• B. multiple errors on switchport interfaces
• C. congestion on the switch inband path
• D. a failing NIC in an end device
• E. an overloaded shared segment
A and C ? or c and e?

@asb
A. ports are untrusted by default
A. Configure the switch port as a trunk (if you read the answers you can tell the rest don’t make sence
A and C. For your last question

@ AJ
How can you disable DTP on a switch port?

Trunk does not disable the DTP .no negotiation on trunk port disable DTP

By Default DTP is disabled on access ports

So I think c is the right answer?

@Mr Wick , what is the result of your exam?

@Rick Grimes
Can you pass all your quizzes, please?

Hello,

DO someone took the exam today and can share the detail ?

Hello,

DO someone took the exam today ?

Hi guys
Passed the ICND2 this week. As people have said before it is a very hard exam with 80% of the questions being very tricky and requiring a lot of thought. I was for sure I was going to fail when I finished it

I do not want to scare you guys but I had no more than 6 questions from the entire 9tut premium questions and the posted new questions. I did have the OSPF hotspot. EIGRP sim and the drag and drop question

I am lucky enough to work in the networking industry and have put countless hours on and off into revision. I would advise just putting in some serious revision or… if you want wait for 9tut to catch up and do it that way

Everyone who takes the exam says that it was very difficult, there was nothing about 9tut, etc.
Complicated saw my friends, whatever God wants …

@Van , can you remember some questions?

It’s weird , some people said that the new questions were spot on , some say that they are not..

@Van can you share the questions u had?

This exam is very difficult, almost no questions from this site

Toshie Can you share the questions ?

What two options are causes of network slowness that can result from inter-vlan routing problem ?

A Root guard disabled on an etherchannel
B Packet Loss
C DTP disabled on a switchport
D BPDU guard enabled on a switchport
E Hardware forwarding issues

B E

Which two commands debug a ppppoe connection that has failed to establish ?

A debug ppp compression
B debug ppp negotiation
C debug dialer events
D debug ppp cbcp
E debug dialer packet

B E

Which command do you enter to determine wheter lacp is in use on a device ?

Show port-channel summary
Show Etherchannel summary

?

Which tree comands do you use to verify that IPsec over a GRE tunnel is working properly ?

A Clear crpto iskamp
B PPP encrypt mppe auto
c Show crypto engine connections active
D show crypto ipsec sa
E show crypto isakmp sa
F debug crypto isakmp

DEF

Which two types of cloud services may require you to alter the design of your network infrastructure ?

A Sudo as a service
B Platform as a service
C IAAS
D SAAS
E business as a service

CD ?

Which pupropose of the network command in the bgp configuration of a router is true

A It enables route advertisement in the bgp routing process
B It advertises any route in bgp with no additional configuration
C It advertises a valid network as local to the autonomous system of a router

A

Thourgh with three states does a bgp routing process pass when it establishes a peering session ?

A open receive
B inactive
C active
D connected
E open sent
F idle

C E F

Which encryption method does chap authentification use for the peer reponse

A EAP
B MD5
C DES
D DSS
E AES
F 3DES

B

Which two characteristics of stacked switches are true ?

A They reduce management complexity
B they are less scalable than modular switches
C They can manage multiple ip addresses across multiple switches
D they have a single management interface
E Each unit in the stack can be assigned its own ip adress

A D

Which option describes a drawback of proxy arp

A It overwrites mac adresses
B It can make it more difficult for the administrator to locale device misconfiguratons
C It dynamically esstablishes layer 2 tunnelling protocol which increase network overhead
D If proxy ARP is configured on multiple devices , the internal L2 network may become vulnerable to DDOS

D

Which layer 2 attack is specifically mitigated by changing the native vlan to an unused vlan ?

A Double tagging
B dhcp spoofing
C VLAN spoofing
D switch hopping

??

Which feature or value mus be configured to enable EIGRPv6
Router id

Which command do you enter to enable local authentification for MPPP on an interface

A l2tp authentification
B username router password x1
C ppp chap password password1
D aaa authentification ppp default local

B ?

Which options are the two differences between HSRP V1 and V2

A Only hsrpv2 can be configured to use authentification
B Only hsrpv2 send hello packet to 224.0.0.2
C only hsrpv1 send hello packet to FF02:66
D Only HSRP v1 can be configured with a group number of 4095
E Only HSRP v2 can be configured with a group number of 4095
F only hsrp v2 send hello to 224.0.0.102

EF

For which reason can a gre tunnel have an up/down status

A the tunnel source interface is up
B a tunnel destination is undefined
C the tunnel destination is routable via a route that is separate from the tunnel
D tunnel has been shut down

B ?

Which utility do you use to view IP traffic that is switched through the router to locate erros in a tcp stream

A wireshark
B packet debugging
C ethereal
D ping
E traceroute

dump say B but I think its A ?

Which command do you enter so that a port enters the forwarding state immediately when a PC is connected to it ?

A spanning-tree portfast bpdugaurd default
B spanning-tree portfast default
C spanning tree portfast trunk

B ?

Which term represents the minimum bandwidth provided in a metro ethernet connection ?

A UNI
B CIR
C EVC
D PIR

B ?

Which three effects of using local span are true ?

A it doubles the load on the forwarding engine
B It prevents span destination from using port security
C it double internal switch traffic
D It reduces the supervisor engine
E it reduces the load on the switch fabric

A B C

In which two models can control plane functionnalty be implemented ?

A Dispersed
B distributed
C fragmented
D centralized
E allocated

B D ?

Which tree fields can be marked with QoS

A Header checksum
B ip precedence
C DSCP
D total length
E discard class
F ttl

B C E ?

Can you help me answer to them?

Can you guys confirm that u got those questions in your exam?

im talking my exam next week,icnd2 can anyone help with current dumps

taking the exam in the first week of march, getting worried when people say that only 8-9 question from all the dumps are in the actual exam. What should i do having one week left?

@ alpha. Some of those do look familiar

@Toshi can you remember the other topics of the news question that u had?

@asb
How can you disable DTP on a switch port?
https://supportforums.cisco.com/t5/lan-switching-and-routing/switchport-mode-commands-that-turn-off-dtp/td-p/1311800

How can you disable DTP on a switch port?
• A. Configure the switch port as a trunk. (This is the “best” answer) though it technically doesn’t disable it it. it stops DTP packets on the interface
• B. Add an interface on the switch to a channel group. (wrong)
• C. Change the operational mode to static access (bait question it should be CONFIGURE swtichport mode access) But as you can see Answer A causes the same result and therefore the best answer
• D. Change the administrative mode to access (wrong)

If someone else disagrees. let me know your thoughs.

@9tut and everyone. This question. doesn’t make sense to me

Which Vlan bridge priority value is assigned by the set spantree root command?

Answer is: 8192

why is this the case I can’t find any cisco information on this. anyone? help? Thank you

@ Alpha, not really, something about SVI in one of them. This test is hard! Questions written really weird just to trip you up.

@ AJ

The switch with the lowest BID becomes the Root Bridge. Since the BID starts with the Bridge Priority field, essentially, the switch with the lowest Bridge Priority field becomes the Root Bridge. If there is a tie between two switches having the same priority value, then the switch with the lowest MAC address becomes the Root Bridge.

@AJ
How can you disable DTP on a switch port?
https://supportforums.cisco.com/t5/lan-switching-and-routing/switchport-mode-commands-that-turn-off-dtp/td-p/1311800

How can you disable DTP on a switch port?
• A. Configure the switch port as a trunk. (This is the “best” answer) though it technically doesn’t disable it it. it stops DTP packets on the interface
• B. Add an interface on the switch to a channel group. (wrong)
• C. Change the operational mode to static access (bait question it should be CONFIGURE swtichport mode access) But as you can see Answer A causes the same result and therefore the best answer
• D. Change the administrative mode to access (wrong)

If someone else disagrees. let me know your thoughs.

I think D should be the best answer. If you use command “switchport mode access” and verify the interface by “show interface switchport” it will show “Administrative Mode : static access” and “Negotiation of Trunking: Off”. The result same as you use “switchport mode trunk + switchport nonegotiate”.

@Toshi

Did you got the other questions i provided?

Someone from Brazil studying for the exam?

Ok my original response was deleted so I will make it brief.

I passed. It was very tough and only about 15 questions from 9tut were on it.

@Mr wick what about the question I posted above?

@alpha I would say about 5 of yours were on it.

@alpha, which dumps includes those questions .?

Passed today. Thanks @alpha about 5 of yours appear in my exam.

don’t listen to @Dora Batson same old shit!

@9tut posted New Questions on 24th-Feb-2018 can someone confirm if they have that on exam?

@ New, yes a lot of them are

Please anyone tell me if Frame Relay is include in ICND2 Exam???

Please any one please tell me if Frame Relay is include in ICND2 200-105 Exam???

Hello,

I passed exam today , the new question are valid :

I got :

Which PPPOE authentification method is the least secure –> PAP
What do you need to reduce with GRE tunnel –> reduce MTU + MSS
You implement cloud model network in your entreprise , which model is the most vulnerable ? Saas
A picture with 2 host 1 switch and 1 router , the host cant communicate what is the problem ? You have no information about IP so I chose : The host ip is misconfigured
Which choice permit congestion mangement on QOS ? FIFO CBWFQ PQ
What do you need to configure to allow voice vlan ? switchport mode access , the choice voice vlan is not available
Which 3 three protocol can you use with apic-em path trace ? ECMP SNMP SMTP

Got 2 labs : EIGRP and OSPF hotspot
Drag and drog with poison reverse etc
+ question from the news question section.

Study those and you will be fine

An other one : Which command do you type to verify local authentification is configured

Choice : show username
show run
show run | inc ppp
show run | inc username

Please anyone Please tell me if Frame Relay is include in ICND2 200-105 Exam. I want to give exam by tomorrow????

Anyone else for the test this week?

@gareth
Have you had issues with VTP, Dynamic Routing, HSRP?

@John
INCD2 does not include FRAME RELAY.
Focus on these new issues.
That worries me.

@gareth How many question from speedy’s list?

@gareth
how many question from @9tut new added ICND2v3 – New Questions Part 2?

is NetFlow part of of ICND2 exam?

Hi, This should be the correct drag and drop that Gareth mentioned.

http://vceguide.com/drag-and-drop-question-7/

@Gareth and all

Any change you can post the questions you had. I’m actually building a proper dump.

One the SIMS, were you able to us show run? What lists of commands show I remember?

what the hell….. ***On the Sims, were you able to use the command show run? What other commands should I rememeber

@Ashley Yes you can use Sh run, it is probably the most useful command for the CCNA sims. Ultimately you should know all of the basic commands pertaining to the exam objectives because even though you may not use them on the sims, questions will ask about command syntax and output.

@127.0.0.FUN

I know a few basic ones. The last time I re-certified, I only really needed to know a very select few.
ip int brief
running-config
interfaces
ip route
vlan

Anyone else for the test this week?

Yep…tomorrow morning…will give update after

Exam near the end of the week, good luck everyone else

@MegaCity4 e @EKKO
Did you study for some dump?

Which command do you type to verify local authentification is configured

Choice : show username
show run
show run | inc ppp
show run | inc username

I would say show run. This sound right to anyone else?

@toshi Booted up packet tracer and made a few local users and passwords on a switch. Sh run and sh run | inc username both verified the local accounts… very confusing lol.

People who are doing the test have come back very little here to help, right?
when they come back, they are not objective in the information. Let’s help people, please …

Passed today…
New questions are valid, in fact 90% of my test was from 9tut including the new questions (especially pt2 of the new questions). I had a few others in there that are not here but they were easy enough.
My advice is to know your stuff…i work in the industry and i done a class based course, i only used 9tut for revision and to get a feel for the questions. There’s no point in just memorizing the answers, it’s important to understand the material also or you’ll get found out in industry very quickly.

@megacity Congrats on passing! where are the “new questions”?

@127.0.0.FUN You have to have premium to see them or if you look back through the comments here, you’ll see guys have listed them here (Speedy, gareth). imho, premium is well worth it, even for the practice tests.

Guys I passed the exam this week and I will sum it up :

Which PPPOE authentification method is the least secure –> PAP
What do you need to reduce with GRE tunnel –> reduce MTU + MSS , choices like MTU 1400 or 1300 and MSS 1300 or 1600
You implement cloud model network in your entreprise , which model is the most vulnerable ? Saas
A picture with 2 host 1 switch and 1 router , the host cant communicate what is the problem ? You have no information about IP so I chose : The host ip is misconfigured

Which choice permit congestion mangement on QOS ? FIFO CBWFQ PQ
What do you need to configure to allow voice vlan ? switchport mode access , the choice voice vlan is not available
Which 3 three protocol can you use with apic-em path trace ? ECMP SNMP SMTP ? maybe ecmp is wrong
What compromise radius security –> only the password is encrypted
How do you configure static etherchannel –> mode on
Which of the following provide the highest availability? full mesh
Question with : snmp-server host host-addr md5 cisco : answer configure host to receive traps and pw cisco
what does this monitor session command mean monitor session 16 source interface Gi0/11 –>> Bidirectional span

You will be fine with those. I cant remember the other questions really

The others questions are :
Which two commands debug a PPPoE connection that has failed to establish? (Choose two)
Which command do you enter to determine wheter LACP is in use on a device?
Through with three states does a BGP routing process pass when it establishes a peering session?
Stacking question : answer like , one ip management and can use port-channel
Which feature or value must be configured to enable EIGRPv6?
Which utility do you use to view IP traffic that is switched through the router to locate erros in a TCP stream?
Which command do you enter so that a port enters the forwarding state immediately when a PC is connected to it ?
What is true about Policing : can be applied inboud+outbound ; drop traffic that exceed the CIR
How do you disable DTP ?

R1# show access-lists
Extended IP access list 175
10 deny tcp any any time-range nonworkhours (active)
20 permit tcp any any time-range workhours (inactive)
While you troubleshoot a connectivity issue to a PC behind R1, you enter the show access-lists command to generate this output. Which reason for the problem is most likely true?

A. The permit all ACL entry on R1 is inactive.
B. The ACL of R1 is misconfigured.
C. A deny all ACL entry is currently active on R1.
D. An implicit deny is causing R1 to block network traffic.

Drag and drop about poison reverse , same like here
Lab : EIGRP with different answer : loopback not advertised , K values mismatch ; different AS
OSPF hotspot ; same as here

Which command do you type to verify local authentification is configured

Choice : show username
show run
show run | inc ppp
show run | inc username

So no one has had any labs where they had to do configurations?

Congrats Gareth! What was the dumps you used beside 9tut?

congrats gareth

Hi Please share ICND2 latest pdf dump.

correct answer to:
Which choice permit congestion mangement on QOS ?
WFQ, CBWFQ, PQ

PLEASE HELP
people on the ICND1 are not helpful. They do not reply 🙁 Has any of you taken the ICND1 recently and passed?
Is the premium on 9tut ICND1 valid? please help

follow other answers from @gareth

Which two commands debug a PPPoE connection that has failed to establish? (Choose two)
– debug ppp negotiation
– debug dialer packet

Which command do you enter to determine wheter LACP is in use on a device?
Show etherchannel summary

Through with three states does a BGP routing process pass when it establishes a peering session?
Answer: Active, Open Sent, Idle

Stacking question : answer like , one ip management and can use port-channel

Which feature or value must be configured to enable EIGRPv6?
Answer: router id

Which utility do you use to view IP traffic that is switched through the router to locate erros in a TCP stream?
Answer: Wireshark

Which command do you enter so that a port enters the forwarding state immediately when a PC is connected to it ?
A. spanning-tree portfast default
B. spanning-tree portfast bpduguard default
Answer: A

What is true about Policing :
– can be applied inboud+outbound
– drop traffic that exceed the CIR

How do you disable DTP ?

Which command do you type to verify local authentification is configured?
show username
show run
show run | inc ppp
show run | inc username (Answer)

R1# show access-lists
Extended IP access list 175
10 deny tcp any any time-range nonworkhours (active)
20 permit tcp any any time-range workhours (inactive)
While you troubleshoot a connectivity issue to a PC behind R1, you enter the show access-lists command to generate this output. Which reason for the problem is most likely true?
A. The permit all ACL entry on R1 is inactive.
B. The ACL of R1 is misconfigured.
C. A deny all ACL entry is currently active on R1.
D. An implicit deny is causing R1 to block network traffic.
Answer: D

Heading to take my test now. Wish me luck!

Goodluck Ashley, Go and Rock it!!!

@titi, i took the exam a year ago and it was super easy, id say that %80 of the questions were from 9tut icnd1, I had the DHCP sim and the questions and answers were different from 9tut. This should go without saying but, know the subject matter along with studying the questions and youll be fine. SUPER EASY EXAM. GL

Has anyone taken the exam in the last few days?
Let’s help people …