Welcome to your CCNA-IP_SERVICE 1. 1. Which method will allow you to use RFC 1918 addresses for Internet requests? A. CIDR B. Classful addressing C. NAT D. VPN None 2. 2. In the following exhibit, what is the inside local IP address? A. 192.168.1.2 Host A B. 192.168.1.1 Router A Gi0/0 C. 179.43.44.1 Router A S0/0 D. 198.23.53.3 web server None 3. 3. In the following exhibit, what is the inside global IP address? A. 192.168.1.2 Host A B. 192.168.1.1 Router A Gi0/0 C. 179.43.44.1 Router A S0/0 D. 198.23.53.3 web server None 4. 4. In the following exhibit, what is the outside global IP address? A. 192.168.1.2 Host A B. 192.168.1.1 Router A Gi0/0 C. 179.43.44.1 Router A S0/0 D. 198.23.53.3 web serve None 5. 5. Which command will allow you to view the NAT translations active on the router? A. Router#show ip nat translations B. Router#show nat translations C. Router#debug ip nat translations D. Router#show translations nat None 6. 6. Which command will display an overview of the current number of active NAT translations on the router, as well as other overview information? A. Router#show ip nat translations B. Router#show ip nat summary C. Router#show ip nat status D. Router#show ip nat statistics None 7. 7. In the following exhibit, which command will configure static NAT for the internal web server? A. RouterA(config)#ip nat inside source static 192.168.1.3 179.43.44.1 B. RouterA(config)#nat source static 192.168.1.3 179.43.44.1 C. RouterA(config)#ip nat static 192.168.1.3 179.43.44.1 D. RouterA(config)#ip nat source static 192.168.1.3 179.43.44.1 None 8. 8. In the following exhibit, the enterprise owns the address block of 179.43.44.0/28. Which command will create a NAT pool for Dynamic NAT? A. RouterA(config)#ip nat pool EntPool 179.43.44.0/28 B. RouterA(config)#ip pool EntPool 179.43.44.2 179.43.44.15netmask 255.255.255.0 C. RouterA(config)#ip nat pool EntPool 179.43.44.1 179.43.44.15netmask 255.255.255.240 D. RouterA(config)#ip nat pool EntPool 179.43.44.2 179.43.44.15netmask 255.255.255.0 None 9. 9. When configuring dynamic NAT, why must you configure an access list? A. The access list allows incoming access from outside global addresses. B. The access list allows outgoing access from inside local addresses. C. The access list allows outgoing access from outside local addresses. D. The access list allows outgoing access from inside global addresses. None 10. 10. Which command will wipe out all current NAT translations in the NAT table? A. Router#no ip nat translation B. Router#clear ip nat translation C. Router#clear ip nat translation * D. Router#clear ip nat None 11. 11. Which command will allow you to see real-time network address translations? A. Router#show ip translations B. Router#debug ip nat C. Router#debug ip translations D. Router#show ip nat None 12. 12. In the following exhibit, which command will configure Port Address Translation? A. RouterA(config)#access-list 1 permit 192.168.1.00.0.0.255RouterA(config)#ip nat pool EntPool 179.43.44.1179.43.44.1RouterA(config)#ip nat inside source list 1 poolEntPoolB. RouterA(config)#ip nat pool EntPool 179.43.44.1179.43.44.1netmask 255.255.255.0RouterA(config)#ip nat source pool EntPoolC. RouterA(config)#access-list 1 permit 192.168.1.00.0.0.255RouterA(config)#ip nat pool EntPool 179.43.44.1179.43.44.1 netmask 255.255.255.0RouterA(config)#ip nat inside source list 1 poolEntPool overloadD. RouterA(config)#access-list 1 permit 192.168.1.00.0.0.255RouterA(config)#ip nat pool EntPool 179.43.44.1179.43.44.1netmask 255.255.255.0RouterA(config)#ip nat inside source list 1 poolEntPool A. Option A B. Option B C. Option C D. Option D None 13. 13. Which command will allow your router to synchronize with a time source of 129.6.15.28? A. Router(config)#ntp server 129.6.15.28 B. Router#ntp server 129.6.15.28 C. Router(config)#ntp client 129.6.15.28 D. Router#ntp client 129.6.15.28 None 14. 14. Which command configures the router or switch to trust its internal time clock? A. Router(config)#ntp server B. Router(config)#ntp master C. Router(config)#ntp clock source D. Router(config)#ntp trusted None 15. 15. Which command will allow you to see if the router or switch is using NTP? A. Router#show clock detail B. Router#show ntp C. Router#show time D. Router#show time source None 16. 16. Which command will allow you to view the time details from a configured server? A. Router#show clock detail B. Router#show ntp detail C. Router#show ntp associations detail D. Router#show ntp skew None 17. 17. Which protocol and port does NTP use for time synchronization by default? A. TCP/161 B. TCP/123 C. UDP/69 D. UDP/123 None 18. 18. Which command will help you diagnose if the router or switch is getting an answer back from an NTP server? A. Router#show ntp B. Router#show ip ntp C. Router#debug ntp packets D. Router#debug ntp messages None 19. 19. Which is a best practice for setting up NTP? A. Always configure the time source to a DNS address. B. Configure all devices to a public NTP server. C. Configure all devices to different NTP servers for redundancy. D. Configure all devices as master servers. None 20. 20. Which command will allow you to view the time drift observed by NTP? A. Router#show ntp B. Router#show ip ntp status C. Router#show ntp status D. Router#debug ntp drift None 21. 21. Which command sets the time zone of a router for Pacific Standard Time? A. Router(config)#clock timezone pacific B. Router(config)#clock timezone pst -8 0 C. Router(config)#timezone pacific D. Router(config)#timezone pst -8 None 22. 22. You are configuring NTP on your switch. You want to configure the switch so if any interface fails, NTP will still be available. Which type of interface should you use? Choose the best answer. A. Tunnel interface B. NTP interface C. Loopback interface D. Switched Virtual Interface (SVI) None 23. 23. Which command will configure NTP to use the internal loopback interface? A. Switch(config)#ntp source loopback 0 B. Switch(config)#ntp loopback 0 C. Switch(config)#ntp master loopback 0 D. Switch(config)#ntp clock loopback 0 None 24. 24. Which command will set the router’s internal clock to 2:24 August 1, 2019? A. Router(config)#clock set 2:24:00 1 august 2019 B. Router#clock set 2:24:00 1 august 2019 C. Router(config)#clock set 2:24:00 august 1 2019 D. Router#clock 2:24:00 1 august 2019 None 25. 25. Which statement is correct about reverse lookups? A. A reverse lookup is when the request needs to be reversed to another DNS server. B. A reverse lookup is the resolution of an IP address to FQDN. C. A reverse lookup is when the DNS queried can answer the request without asking another DNS server. D. A reverse lookup is the resolution of an FQDN to an IP address. None 26. 26. Which record type is used for an IPv4 address mapping to FQDN for DNS queries? A. The A record B. The CName record C. The PTR record D. The AAAA record None 27. 27. What gets appended to hostname queries for DNS resolution? A. The DNS domain name B. The DNS zone C. The host header D. The hostname PTR record None 28. 28. Which is the most secure method of name resolution for routers and switches? A. DNS B. PTR records C. Static hostname entries D. LLMNR None 29. 29. Which type of DNS record holds the IPv4 IP address for a hostname? A. The A record B. The CName record C. The PTR record D. The AAAA record None 30. 30. What limits the amount of time that a DNS entry is available in the DNS cache? A. An A record B. TTL C. SOA D. Default of 5 minutes None 31. 31. Which message is sent from the DHCP client to the DHCP server to confirm the offer of an IP address? A. Acknowledgment B. Discover C. Offer D. Request None 32. 32. What form of communication does a DHCP client use to initially acquire an IP address? A. Layer 3 broadcast B. Layer 3 multicast C. Layer 3 802.1Q D. Layer 3 unicast None 33. 33. At what point of the lease time will the client ask for a renewal of the IP address from the DHCP server? A. One-quarter of the lease B. One-half of the lease C. Seven-eighths of the lease D. End of the lease None 34. 34. Which statement is correct about the DHCP process? A. The DHCP server is responsible for maintaining the life cycle of an IP address. B. DHCP uses multicasting between the client and server. C. The DHCP client is responsible for maintaining the life cycle of an IP address. D. The DHCP lease is negotiated between client and server. None 35. 35. Which transport protocol does DHCP use? A. UDP B. ICMP C. TCP D. RARP None 36. 36. What happens when a router or switch detects a duplicate IP address for a DHCP process? A. The IP address is still served to the client. B. The IP address is removed from the DHCP pool. C. The DHCP server will halt. D. The DHCP will serve the IP address in the future. None 37. 37. Which version of SNMP offers authentication and encryption? A. SNMP version 1 B. SNMP version 2e C. SNMP version 2c D. SNMP version 3 None 38. 38. What is the database of variables that SNMP uses to allow for collection of data? A. Object identifiers (OIDs) B. Management information base C. SNMP agent D. SNMP community string None 39. 39. What is the component that an SNMP agent sends information to? A. Syslog B. Network management station C. Object identifier D. Management information base None 40. 40. What type of SNMP message is sent to a network management station when an interface goes down? A. Get-request message B. Get-response message C. Set-request message D. Trap message None 41. 41. Which of the following is a hierarchical set of variables that make up the management information base? A. Object identifiers (OIDs) B. The SNMP community string C. The SNMP agent D. SNMP messages None 42. 42. What is the difference between trap messages and inform messages for SNMP? A. Trap messages are always encrypted. B. Inform messages do not use acknowledgments. C. Trap messages always use acknowledgments. D. Inform messages always use acknowledgments. None 43. 43. Which security method does SNMP version 2c employ? A. Encryption B. User authentication C. Community strings D. Message integrity None 44. 44. Which of the following can be used in conjunction with an SNMP agent configuration for added security? A. Encrypted communities B. Access control lists C. SNMP callback security D. SHA-256 None 45. 45. Which command(s) will configure SNMPv2c to trap messages to a network management station in the event of component failure? A. Option A B. Option B C. Option C D. Option D None 46. 46. Which protocol and port number does SNMP use for trap and inform messages to the NMS? A. UDP/161 B. TCP/162 C. UDP/162 D. UDP/514 None 47. 47. Which command will allow you to verify the network management station that is configured to receive trap notifications? A. Switch#show snmp B. Switch#show snmp community C. Switch#show snmp host D. Switch#show snmp notifications None 48. 48. When you configure SNMPv3 for a restricted OID, what is the first step? A. Configuring a group B. Configuring a view C. Configuring a user D. Configuring a community None 49. 49. Which protocol and port number does syslog use? A. UDP/161 B. TCP/162 C. UDP/162 D. UDP/514 None 50. 50. Which command will configure the severity level of syslog events that will be sent to the syslog server for debugging? A. Router(config)#syslog debugging B. Router(config)#logging debugging C. Router(config)#logging trap debugging D. Router(config)#log-level debugging None 51. 51. Which command will send all warnings to the syslog server? A. Switch(config)#logging server 4 B. Switch(config)#logging trap 4 C. Switch(config)#logging trap 5 D. Switch(config)#logging server 5 None 52. 52. Which command will send logging with time stamps rather than sequence numbers? A. Switch(config)#logging timestamps log datetime B. Switch(config)#logging timestamps datetime C. Switch(config)#service datetime timestamps D. Switch(config)#service timestamps log datetime None 53. 53. Which command will limit console logging to the severity level of alerts? A. Router(config)#logging console 0 B. Router(config-line)#logging level 0 C. Router(config)#logging console 7 D. Router(config-line)#logging level 7 None 54. 54. Which command will configure logging stored in RAM to include only logs with a severity level of emergencies and alerts? A. Switch(config)#logging buffered 1 B. Switch(config)#logging 1 C. Switch(config)#logging buffered 2 D. Switch(config)#logging 2 None 55. 55. Which command will allow you to see the commands you previously entered? A. Switch#show commands B. Switch#show log C. Switch#show history D. Switch#show buffer None 56. 56. What severity is being logged to in the following exhibit? A. Informational (6) B. Notifications (5) C. Warnings (4) D. Debugging (7) None 57. 57. You need to check the current CPU utilization on a router. Which command will achieve this? A. Router#show cpu B. Router#show cpu-stats C. Router#show processes D. Router#show environment cpu None 58. 58. Which command will direct logging to the internal log space? A. Router(config)#logging buffered B. Router(config)#logging internal C. Router(config)#logging ram D. Router(config)#logging console None 59. 59. What is the default destination to which Cisco devices send syslog messages? A. Broadcasts to a syslog server B. Console C. TTY D. NVRAM None 60. 60. What is the default level for syslog facility logging? A. Notification (5) B. Informational (6) C. Warning (4) D. Debugging (7) None 61. 61. Which command will allow you to verify the active DHCP server that has assigned an IP address to the router? A. Router#show dhcp lease B. Router#show ip dhcp lease C. Router#show ip lease D. Router#show ip interface None 62. 62. Which statement is true about the Offer packet of DHCP? A. The layer 3 destination is a unicast to the DHCP client. B. The layer 2 destination is the MAC address of the DHCP client. C. The layer 2 source is the MAC address of the server. D. The layer 3 source is a link-local address of the client. None 63. 63. Which command will configure a DHCP relay agent on an interface to the DHCP server of 10.10.1.101? A. Router(config)#ip dhcp server 10.10.1.101 B. Router(config-if)#ip dhcp server 10.10.1.101 C. Router(config-if)#ip relay-agent 10.10.1.101 D. Router(config-if)#ip helper-address 10.10.1.101 None 64. 64. Which DHCP field helps a DHCP server decide which scope to serve to the DHCP relay agent? A. CIADDR B. GIADDR C. SIADDR D. CHADDR None 65. 65. In the following exhibit, what is required on the network to allow Host A to receive an IP address from the existing DHCP server? A. A second DHCP server on the Host A network B. A DHCP relay agent on Router B interface Gi0/0 C. A DHCP relay agent on Switch A D. A DHCP relay agent on Router A interface Gi0/0 None 66. 66. Which command will allow you to diagnose DHCP relay agent messages on a router or switch? A. Router#debug dhcp B. Router#show ip dhcp detail C. Router#debug ip dhcp server packet D. Router#debug ip dhcp None 67. 67. What is DHCPv6 used for when a network is configured for Stateless Address Autoconfiguration (SLAAC)? A. Stateful configuration of clients for IPv6 addressing B. Configuration of clients with the IPv6 network IDs C. Configuration of clients with IPv6 options D. Stateless configuration of clients for IPv6 addressing None 68. 68. The DHCP server in the network went down. What happens to clients that have obtained IP addresses from the DHCP server? A. They lose their IP address immediately. B. They lose their IP address after one-half of their lease has expired. C. They lose their IP address after seven-eighths of their lease has expired. D. They lose their IP address after their entire lease has expired. None 69. 69. Which statement is correct about stateful DHCPv6? A. Stateful DHCPv6 supplies the network ID and host ID. B. Stateful DHCPv6 supplies the network ID, host ID, and default router. C. Stateful DHCPv6 communicates via broadcasts. D. Stateful DHCPv6 works in conjunction with SLAAC. None 70. 70. Which command will configure a router interface to obtain its IP address via a stateful DHCPv6? A. RouterA(config)#ipv6 address dhcp gi 0/0 B. RouterA(config-if)#ipv6 address dhcpv6 C. RouterA(config-if)#ipv6 address dhcp D. RouterA(config)#ipv6 address stateless None 71. 71. What happens if you delete a current lease on the DHCP server? A. The server will contact the client to immediately relinquish the IP address. B. The client will immediately renew its lease for the current IP address. C. The server will offer the IP address to another node, which will cause a duplicate address. D. The server will offer the IP address to another node, at which time the original client will relinquish the IP address. None 72. 72. What happens at the client when the lease for an IP address reaches seven-eighths of the lease cycle? A. The DHCP client will perform a DHCP rebinding. B. Nothing. The DHCP client will retain the lease. C. The DHCP client will renew its lease. D. The DHCP client will relinquish the use of the IP address None 73. 73. How do routers classify traffic for QoS? A. Access control lists B. Layer 2 ASICs C. Route tables D. Frame filters None 74. 74. Which measurement describes the variation of consecutive packet time from source to destination? A. Bandwidth B. Delay C. Jitter D. Loss None 75. 75. Which is a true statement about the Class of Service field? A. The Class of Service field is a layer 3 field. B. The Class of Service field is only present in 802.1Q frames. C. The Class of Service field is present from end to end of a transmission. D. The Class of Service field is 6 bits. None 76. 76. What is the measurement of packets discarded due to congestion of queues? A. Bandwidth B. Delay C. Jitter D. Loss None 77. 77. Which DSCP marking has the highest priority? A. DSCP AF 43 B. DSCP EF 46 C. DSCP AF 11 D. DSCP AF 00 None 78. 78. What is the recommended maximum delay VoIP traffic should not exceed? A. 10 ms B. 90 ms C. 150 ms D. 300 ms None 79. 79. Which QoS queue has priority over all other queues in the scheduler? A. CBWFQ B. LLQ C. FIFO D. CIR None 80. 80. Which method helps combat queue starvation for QoS queuing? A. LLQ B. Policing C. CBWFQ D. FIFO None 81. 81. Which statement is correct about shaping of traffic for QoS? A. Shaping holds packets in the queue over the configured bit rate to cause delay. B. Shaping drops packets over the configured bit rate to cause loss. C. Shaping holds packets in the queue over the configured bit rate to cause jitter. D. Shaping slows packets in the queue over the configured bit rate to adhere to the speed. None 82. 82. Which QoS method uses a round-robin scheduler for packet queuing? A. LLQ B. FIFO C. CBWFQ D. PQ None 83. 83. Which statement is correct about policing of traffic for QoS? A. Policing holds packets in the queue over the configured bit rate to cause delay. B. Policing drops packets over the configured bit rate to cause loss. C. Policing holds packets in the queue over the configured bit rate to cause jitter. D. Policing slows packets in the queue over the configured bit rate to adhere to the bit rate. None 84. 84. Why should QoS policing be implemented? A. To help police LAN applications B. To maintain a contracted CIR C. To help police WAN applications D. To maintain a contracted burst rate None 85. 85. How do congestion avoidance tools help to prevent tail drop? A. When the queue depth is full, a percentage of TCP packets are dropped. B. When the queue depth is empty, a percentage of TCP packets are dropped. C. When the queue depth is below the minimum threshold, a percentage of TCP packets are dropped. D. When the queue depth is above the minimum threshold, a percentage of TCP packets are dropped. None 86. 86. If a traffic is marked with AF31 and another traffic pattern is marked with AF41, which statement explains the traffic markings? A. AF31 marked traffic has a better queue than AF41 marked traffic. B. AF41 marked traffic has a better queue than AF31 marked traffic. C. Both AF31 and AF41 marked traffic has an equal queue. D. During high congestion, AF41 queues will be dropped and AF31 queues won’t. None 87. 87. What is required before generating the encryption keys for SSH on a router or switch? A. Setting the time and date B. Setting the hostname and domain name C. Setting the key strength D. Setting the key repository None 88. 88. Which command will enable SSH version 2 for logins? A. Router(config)#ip ssh version 2 B. Router(config-line)#version 2 C. Router(config-ssh)#version 2 D. Router(config)#ssh version 2 None 89. 89. Which command will configure the router or switch to allow SSH as a protocol for management with a fallback of Telnet? A. Switch(config)#login ssh telnet B. Switch(config-line)#login ssh telnet C. Switch(config-line)#transport ssh telnet D. Switch(config)#transport ssh telnet None 90. 90. Why should Telnet be replaced with SSH? A. Telnet has weak encryption. B. SSH allows for file copy. C. SSH makes it easier to create ACLs for access. D. SSH is encrypted. None 91. 91. You have created the SSH encryption keys, but you cannot enable SSH version 2. What is the problem? A. The time and date need to be corrected. B. The key strength needs to be 768 bits or higher. C. The DNS server is not configured. D. There is no host record for the switch or router. None 92. 92. Which command will configure a local user for SSH access? A. Router(config)#username user1 password Password20! B. Router(config)#account user1 Router(config-acct)#password Password20! C. Router(config)#user user1 Password20! D. Router(config)#user-account user1 password Password20! None 93. 93. Which command will generate the encryption keys for SSH? A. Router(config)#generate crypto key rsa B. Router(config)#crypto key generate rsa C. Router(config)#crypto generate key rsa D. Router#crypto key generate rsa None 94. 94. You want to turn on local authentication so that a user must supply a username and password when managing the switch. You have created the username and password combinations on the switch. Which command will direct SSH and Telnet to use this authentication model? A. Switch(config)#new aaa model B. Switch(config)#local authentication C. Switch(config-line)#local authentication D. Switch(config-line)#login local None 95. 95. Which banner will be displayed first when a user connects to a Cisco device via SSH? A. MOTD banner B. Login banner C. Exec banner D. Incoming banner None 96. 96. Which command will restore configuration to the running-config for a device from a server? A. Switch#archive tftp: running-config B. Switch#restore tftp://192.168.1.2 running-config C. Switch#copy tftp: running-config D. Switch#copy server: running-config None 97. 97. Which command will begin the upgrade of an IOS from a TFTP server? A. Switch#copy tftp flash B. Switch#copy tftp ios C. Switch#copy tftp nvram D. Switch#upgrade tftp flash None 98. 98. Which command will allow you to boot a router from a TFTP server for the image of c2900-universalk9-mz.SPA.151-4.M4.bin on the TFTP server of 192.168.1.2? A. Router#boot tftp://192.168.1.2 B. Router(config)#boot tftp://192.168.1.2 c2900-universalk9-mz.SPA.151-4.M4.bin C. Router(config)#boot system tftp://192.168.1.2 c2900-universalk9-mz.SPA.151-4.M4.bin D. Router(config)#boot system c2900-universalk9-mz.SPA.151-4.M4.bin tftp://192.168.1.2 None 99. 99. You’re upgrading the flash memory on a 2900 router with a brand-new flash card. What needs to be done to restore the IOS? A. The new flash memory will have a mini-IOS installed. You will need to upgrade it from the mini-IOS. B. The router will boot into the ROMMON, and from there you will need to TFTP download the IOS. C. Nothing needs to be done because the IOS is not storage on the flash memory card. D. Format the flash card with the FAT operating system and copy the IOS image to the card. None 100. 100. Which command(s) are required before you can use an FTP server for backing up configuration? Assume that the username is USER and the password is USERPASS. A. Router(config)#ip ftp username USER password USERPASS B. Router(config)#ftp USER password USERPASS C. Router(config)#ip ftp username USER Router(config)#ip ftp password USERPASS D. Router(config)#username USER password USERPASS None 1 out of 100 Time's up
