CCNA Lan Chapter #2
-
Refer to the exhibit. The exhibit shows partial output of the show running-config command. The enable password on this switch is "cisco." What can be determined from the output shown?
-
The enable password is encrypted by default.
-
An MD5 hashing algorithm was used on all encrypted passwords.
-
Any configured line mode passwords will be encrypted in this configuration.
-
This line represents most secure privileged EXEC mode password possible.
-
Welcome to our second chapter of our quiz series on the Local Area Network (LAN) as taught by the Cisco Certified Network Associate. A local area network is a computer network that links devices within a relatively small area, such as a building or group of buildings. What do you know about them?
Quiz Preview
- 2.
Refer to the exhibit. The switch and workstation are administratively configured for full-duplex operation. Which statement accurately reflects the operation of this link?
-
No collisions will occur on this link.
-
Only one of the devices can transmit at a time.
-
The switch will have priority for transmitting data.
-
The devices will default back to half duplex if excessive collisions occur.
Correct Answer
A. No collisions will occur on this link.Explanation
The correct answer is "No collisions will occur on this link." This is because both the switch and workstation are configured for full-duplex operation. In full-duplex mode, both devices can transmit and receive data simultaneously on separate channels, eliminating the possibility of collisions. Therefore, there will be no collisions on this link.Rate this question:
-
- 3.
Refer to the exhibit. What action does SW1 take on a frame sent from PC_A to PC_C if the MAC address table of SW1 is empty?
-
SW1 drops the frame.
-
SW1 floods the frame on all ports on SW1, except port Fa0/1.
-
SW1 floods the frame on all ports on the switch, except Fa0/23 and Fa0/1.
-
SW1 uses the CDP protocol to synchronize the MAC tables on both switches and then forwards the frame to all ports on SW2.
Correct Answer
A. SW1 floods the frame on all ports on SW1, except port Fa0/1.Explanation
If the MAC address table of SW1 is empty, it means that SW1 does not have any information about which MAC addresses are associated with which ports. In this case, SW1 will flood the frame on all ports on SW1, except port Fa0/1. Flooding the frame means that SW1 will send the frame out of all of its ports, except the one it received the frame on. This is done in order to ensure that the frame reaches its destination, as SW1 does not have the necessary information to make a forwarding decision based on the MAC address.Rate this question:
-
- 4.
A network administrator uses the CLI to enter a command that requires several parameters. The switch responds with "% Incomplete command". The administrator cannot remember the missing parameters. What can the administrator do to get the parameter information?
-
Append ? to the last parameter
-
Append a space and then ? to the last parameter
-
Use Ctrl-P to show a parameter list
-
Use the Tab key to show which options are available
Correct Answer
A. Append a space and then ? to the last parameterExplanation
By appending a space and then ? to the last parameter, the administrator can get the parameter information. This allows the CLI to provide a list of available options or parameters that can be used with the command.Rate this question:
-
- 5.
If a network administrator enters these commands in global configuration mode on a switch, what will be the result? Switch1(config-line)# line console 0 Switch1(config-line)# password cisco Switch1(config-line)# login
-
To secure the console port with the password "cisco"
-
To deny access to the console port by specifying 0 lines are available
-
To gain access to line configuration mode by supplying the required password
-
To configure the privilege exec password that will be used for remote access
Correct Answer
A. To secure the console port with the password "cisco"Explanation
The given commands are used to configure the console port on a switch. The command "line console 0" is used to enter the line configuration mode for the console port. The command "password cisco" is used to set the password for the console port as "cisco". The command "login" is used to enable the login authentication for the console port. Therefore, the result of entering these commands will be securing the console port with the password "cisco".Rate this question:
-
- 6.
Refer to the exhibit. What happens when Host 1 attempts to send data?
-
Frames from Host 1 cause the interface to shut down.
-
Frames from Host 1 are dropped and no log message is sent.
-
Frames from Host 1 create a MAC address entry in the running-config.
-
Frames from Host 1 will remove all MAC address entries in the address table.
Correct Answer
A. Frames from Host 1 cause the interface to shut down.Explanation
When Host 1 attempts to send data, frames from Host 1 cause the interface to shut down. This means that the interface on the receiving device will be disabled or turned off, preventing any further communication. This could be due to a configuration issue or a security measure implemented on the device.Rate this question:
-
- 7.
Which statement is true about the command banner login "Authorized personnel Only" issued on a switch?
-
The command is entered in privileged EXEC mode.
-
The command will cause the message Authorized personnel Only to display before a user logs in.
-
The command will generate the error message % Ambiguous command: "banner motd" ” to be displayed.
-
The command will cause the message End with the character “%” to be displayed after the command is entered into the switch.
Correct Answer
A. The command will cause the message Authorized personnel Only to display before a user logs in.Explanation
The command "banner login" is used to display a message before a user logs in. In this case, the message "Authorized personnel Only" will be displayed before a user can log in to the switch.Rate this question:
-
- 8.
What happens when the transport input ssh command is entered on the switch vty lines?
-
The SSH client on the switch is enabled.
-
Communication between the switch and remote users is encrypted.
-
A username/password combination is no longer needed to establish a secure remote connection to the switch.
-
The switch requires remote connections via proprietary client software.
Correct Answer
A. Communication between the switch and remote users is encrypted.Explanation
When the "transport input ssh" command is entered on the switch vty lines, it enables the SSH client on the switch. This means that communication between the switch and remote users is encrypted. It provides a secure remote connection to the switch, ensuring that data transmitted between the switch and remote users cannot be intercepted or accessed by unauthorized individuals. This command does not eliminate the need for a username/password combination, as authentication is still required to establish a secure connection. It also does not require the use of proprietary client software for remote connections.Rate this question:
-
- 9.
Refer to the exhibit. Which hosts will receive a broadcast frame sent from Host A?
-
Hosts A and B
-
Hosts B and C
-
Hosts B, C, D, and E
-
Hosts A, B, and C
-
Hosts A, B, C, D, E, and F
Correct Answer
A. Hosts B, C, D, and EExplanation
Hosts B, C, D, and E will receive a broadcast frame sent from Host A because they are all connected to the same network segment. In a broadcast, the frame is sent to all hosts on the same network segment, so all hosts connected to that segment will receive the frame.Rate this question:
-
- 10.
Which two statements about Layer 2 Ethernet switches are true? (Choose two.)
-
Layer 2 switches prevent broadcasts.
-
Layer 2 switches have multiple collision domains.
-
Layer 2 switches route traffic between different networks.
-
Layer 2 switches decrease the number of broadcast domains.
-
Layer 2 switches can send traffic based on the destination MAC address.
Correct Answer(s)
A. Layer 2 switches have multiple collision domains.
A. Layer 2 switches can send traffic based on the destination MAC address.Explanation
Layer 2 switches have multiple collision domains because they break up a network into separate collision domains, reducing the chances of collisions occurring. Additionally, Layer 2 switches can send traffic based on the destination MAC address, allowing them to make forwarding decisions based on the MAC address in the Ethernet frame header.Rate this question:
-
- 11.
Which two statements are true about EXEC mode passwords? (Choose two.)
-
The enable secret password command stores the configured password in plain text.
-
The enable secret password command provides better security than the enable password.
-
The enable password and enable secret password protect access to privileged EXEC mode.
-
The service password-encryption command is required to encrypt the enable secret password.
-
Best practices require both the enable password and enable secret password to be configured and used simultaneously.
Correct Answer(s)
A. The enable secret password command provides better security than the enable password.
A. The enable password and enable secret password protect access to privileged EXEC mode.Explanation
The first true statement is that the enable secret password command provides better security than the enable password. This is because the enable secret password is stored in an encrypted format, while the enable password is stored in plain text. The second true statement is that both the enable password and enable secret password protect access to privileged EXEC mode. This means that either one of these passwords can be used to gain access to privileged EXEC mode.Rate this question:
-
- 12.
When a collision occurs in a network using CSMA/CD, how do hosts with data to transmit respond after the backoff period has expired?
-
The hosts return to a listen-before-transmit mode.
-
The hosts creating the collision have priority to send data.
-
The hosts creating the collision retransmit the last 16 frames.
-
The hosts extend their delay period to allow for rapid transmission.
Correct Answer
A. The hosts return to a listen-before-transmit mode.Explanation
After the backoff period has expired, hosts with data to transmit in a network using CSMA/CD will return to a listen-before-transmit mode. This means that they will first listen to the network to check if it is idle before attempting to transmit their data. This helps to avoid collisions and ensures that the network is not congested with multiple hosts transmitting at the same time.Rate this question:
-
- 13.
When a switch receives a frame and the source MAC address is not found in the switching table, what action will be taken by the switch to process the incoming frame?
-
The switch will request that the sending node resend the frame.
-
The switch will issue an ARP request to confirm that the source exists.
-
The switch will map the source MAC address to the port on which it was received.
-
The switch ends an acknowledgement frame to the source MAC of this incoming frame.
Correct Answer
A. The switch will map the source MAC address to the port on which it was received.Explanation
When a switch receives a frame and the source MAC address is not found in the switching table, it will map the source MAC address to the port on which it was received. This means that the switch will update its switching table with the source MAC address and the corresponding port. This allows the switch to know the port through which the source device is connected, enabling it to forward future frames to the correct destination.Rate this question:
-
- 14.
Which two statements are true regarding switch port security? (Choose two.)
-
The three configurable violation modes all log violations via SNMP.
-
Dynamically learned secure MAC addresses are lost when the switch reboots.
-
The three configurable violation modes all require user intervention to re-enable ports.
-
After entering the sticky parameter, only MAC addresses subsequently learned are converted to secure MAC addresses.
-
If fewer than the maximum number of MAC addresses for a port are configured statically, dynamically learned addresses are added to CAM until the maximum number is reached.
Correct Answer(s)
A. Dynamically learned secure MAC addresses are lost when the switch reboots.
A. If fewer than the maximum number of MAC addresses for a port are configured statically, dynamically learned addresses are added to CAM until the maximum number is reached.Explanation
The first statement is true because dynamically learned secure MAC addresses are stored in volatile memory and are lost when the switch reboots. The second statement is true because if fewer than the maximum number of MAC addresses are configured statically, the switch will dynamically learn and add addresses to the CAM table until the maximum number is reached.Rate this question:
-
- 15.
Refer to the exhibit. The network administrator has decided to allow only secure shell connections to switch1. After the commands are applied, the administrator is able to connect to switch1 using both secure shell and telnet. What is most likely the problem?
-
Incorrect vty lines configured
-
Incorrect default gateway address
-
Incompatible Secure Shell version
-
Missing transport input ssh command
-
Vty lines that are configured to allow only telnet
Correct Answer
A. Missing transport input ssh commandExplanation
The most likely problem is that the "transport input ssh" command is missing from the vty lines configuration. This command restricts the input to only secure shell connections, but since it is missing, the switch is still allowing telnet connections as well.Rate this question:
-
- 16.
Refer to the exhibit. How many collision domains are depicted in the network?
-
1
-
2
-
4
-
6
-
8
Correct Answer
A. 2 -
- 17.
Refer to the exhibit. The switch and the hub have default configurations, and the switch has built its CAM table. Which of the hosts will capture a copy of the frame when workstation A sends a unicast packet to workstation C?
-
Workstation C
-
Workstations B and C
-
Workstations A, B, C, and the interfaces of the router
-
Workstations B, C, D, E, F, and interfaces of the router
Correct Answer
A. Workstation CExplanation
When workstation A sends a unicast packet to workstation C, only workstation C will capture a copy of the frame. This is because a unicast packet is intended for a specific destination, in this case, workstation C. The switch will use its CAM table to determine the port where workstation C is connected and will forward the packet only to that port. The hub, on the other hand, will broadcast the packet to all connected devices, but only workstation C will process it as it is the intended recipient.Rate this question:
-
- 18.
What are two ways to make a switch less vulnerable to attacks like MAC address flooding, CDP attacks, and Telnet attacks? (Choose two.)
-
Enable CDP on the switch.
-
Change passwords regularly.
-
Turn off unnecessary services.
-
Enable the HTTP server on the switch.
-
Use the enable password rather than the enable secret password.
Correct Answer(s)
A. Change passwords regularly.
A. Turn off unnecessary services.Explanation
To make a switch less vulnerable to attacks like MAC address flooding, CDP attacks, and Telnet attacks, two ways are suggested. First, changing passwords regularly helps in preventing unauthorized access and makes it difficult for attackers to guess or crack the passwords. Second, turning off unnecessary services reduces the attack surface by disabling any services that are not needed, minimizing potential vulnerabilities. By implementing these measures, the switch's security can be enhanced and the risk of attacks can be mitigated.Rate this question:
-
- 19.
Which command line interface (CLI) mode allows users to configure switch parameters, such as the hostname and password?
-
User EXEC mode
-
Privileged EXEC mode
-
Global configuration mode
-
Interface configuration mode
Correct Answer
A. Global configuration modeExplanation
Global configuration mode is the correct answer because it is the CLI mode that allows users to configure switch parameters such as the hostname and password. In this mode, users can make changes to the global settings of the switch, including configuring interfaces, setting up VLANs, and defining access control lists. It provides access to all the configuration commands and enables users to make changes that will affect the entire switch.Rate this question:
-
- 20.
Where is the startup configuration stored?
-
DRAM
-
NVRAM
-
ROM
-
Startup-config.text
Correct Answer
A. NVRAMExplanation
The startup configuration is stored in NVRAM (Non-Volatile Random Access Memory). NVRAM is a type of memory that retains its data even when the power is turned off or the device is restarted. This makes it an ideal location to store the startup configuration, as it ensures that the configuration settings are preserved and can be loaded during the boot process. Other options like DRAM (Dynamic Random Access Memory) and ROM (Read-Only Memory) are not suitable for storing the startup configuration as they do not retain data when power is lost.Rate this question:
-
Quiz Review Timeline (Updated): Mar 22, 2023 +
Our quizzes are rigorously reviewed, monitored and continuously updated by our expert board to maintain accuracy, relevance, and timeliness.
-
Current Version
-
Mar 22, 2023Quiz Edited by
ProProfs Editorial Team -
Jan 23, 2010Quiz Created by
Rodney.butler
Back to top