CCNA2 questions with complete solutions latest 2023 questions with complete solution (100% correct)

CCNA2 questions with complete solutions latest 2023 questions with complete solution (100% correct)What does a correctly configured IPv4 default static route look like? (command) ip route 0.0.0.0 0.0.0.0 What is a method to launch a VLAN hopping attack? introducing a rogue switch and enabling trunking A cybersecurity analyst is using the macof tool to evaluate configurations of switches deployed in the backbone network of an organization. Which type of LAN attack is the analyst targeting during this evaluation? MAC address table overflow How does a layer 2 switch determine how to forward frames? Frame forwarding decisions are based on MAC address and port mappings in the CAM table. What is the result of interconnecting multiple Cisco LAN switches? The broadcast domain expands to all switches. An administrator is trying to remove configurations from a switch. After using the command erase startup-config and reloading the switch, the administrator finds that VLANs 10 and 100 still exist on the switch. Why were these VLANs not removed? Because these VLANs are stored in a file that is called that is located in flash memory, this file must be manually deleted. What is a secure configuration option for remote access to a network device? Configure SSH. Which wireless encryption method is the most secure? WPA2 with AES After attaching four PCs to the switch ports, configuring the SSID and setting authentication properties for a small office network, a technician successfully tests the connectivity of all PCs that are connected to the switch and WLAN. A firewall is then configured on the device prior to connecting it to the Internet. What type of network device includes all of the described features? wireless router What protocol or technology disables redundant paths to eliminate Layer 2 loops? STP Which two VTP modes allow for the creation, modification, and deletion of VLANs on the local switch? server, transparent Which three steps should be taken before moving a Cisco switch to a new VTP management domain? Configure the switch with the name of the new management domain. Select the correct VTP mode and version. Reboot the switch. A network administrator is preparing the implementation of Rapid PVST+ on a production network. How are the Rapid PVST+ link types determined on the switch interfaces? Link types are determined automatically. How will a router handle static routing differently if Cisco Express Forwarding is disabled? Ethernet multiaccess interfaces will require fully specified static routes to avoid routing inconsistencies. Compared with dynamic routes, what are two advantages of using static routes on a router? They improve network security. They use fewer router resources. What is the effect of entering the spanning-tree portfast configuration command on a switch? It enables portfast on a specific switch interface. What is the IPv6 prefix that is used for link-local addresses? FE80::/10 Which two statements are characteristics of routed ports on a multilayer switch? In a switched network, they are mostly configured between switches at the core and distribution layers. They are not associated with a particular VLAN. Successful inter-VLAN routing has been operating on a network with multiple VLANs across multiple switches for some time. When an inter-switch trunk link fails and Spanning Tree Protocol brings up a backup trunk link, it is reported that hosts on two VLANs can access some, but not all the network resources that could be accessed previously. Hosts on all other VLANS do not have this problem. What is the most likely cause of this problem? The protected edge port function on the backup trunk interfaces has been disabled. Which command will start the process to bundle two physical interfaces to create an EtherChannel group via LACP? interface range GigabitEthernet 0/? - ? What action takes place when a frame entering a switch has a multicast destination MAC address? The switch will forward the frame out all ports except the incoming port. A junior technician was adding a route to a LAN router. A traceroute to a device on the new network revealed a wrong path and unreachable status. What should be done or checked? Check the configuration of the exit interface on the new static route. What are the three PAgP channel establishment modes? auto, desirable, on A static route has been configured on a router. However, the destination network no longer exists. What should an administrator do to remove the static route from the routing table? Remove the route using the no ip route command. What two default wireless router settings can affect network security? The SSID is broadcast. A well-known administrator password is set. What is the common term given to SNMP log messages that are generated by network devices and sent to the SNMP server? traps A network administrator is adding a new WLAN on a Cisco 3500 series WLC. Which tab should the administrator use to create a new VLAN interface to be used for the new WLAN? CONTROLLER A network administrator is configuring a WLAN. Why would the administrator change the default DHCP IPv4 addresses on an AP? to reduce outsiders intercepting data or accessing the wireless network by using a well-known address range Which two functions are performed by a WLC when using split media access control (MAC)? rame translation to other protocols association and re-association of roaming clients On what switch ports should BPDU guard be enabled to enhance STP stability? all PortFast-enabled ports Which network attack is mitigated by enabling BPDU guard? rogue switches on a network Why is DHCP snooping required when using the Dynamic ARP Inspection feature? It uses the MAC-address-to-IP-address binding database to validate an ARP packet. A network administrator is configuring a new Cisco switch for remote management access. Which three items must be configured on the switch for the task? IP address, vty lines, default gateway A technician is troubleshooting a slow WLAN and decides to use the split-the-traffic approach. Which two parameters would have to be configured to do this? Configure the 5 GHz band for streaming multimedia and time sensitive traffic. Configure the 2.4 GHz band for basic internet traffic that is not time sensitive. A company has just switched to a new ISP. The ISP has completed and checked the connection from its site to the company. However, employees at the company are not able to access the internet. What should be done or checked? Ensure that the old default route has been removed from the company edge routers. Which information does a switch use to populate the MAC address table? the source MAC address and the incoming port Which type of static route is configured with a greater administrative distance to provide a backup route to a route learned from a dynamic routing protocol? floating static route What action takes place when a frame entering a switch has a unicast destination MAC address appearing in the MAC address table? The switch forwards the frame out of the specified port. What protocol or technology allows data to transmit over redundant switch links? STP What is the effect of entering the shutdown configuration command on a switch? It disables an unused port. What would be the primary reason an attacker would launch a MAC address overflow attack? so that the attacker can see frames that are destined for other hosts During the AAA process, when will authorization be implemented? Immediately after successful authentication against an AAA data source A company security policy requires that all MAC addressing be dynamically learned and added to both the MAC address table and the running configuration on each switch. Which port security configuration will accomplish this? sticky secure MAC addresses Which three Wi-Fi standards operate in the 2.4GHz range of frequencies? 802.11a, 802.11b, 802.11n To obtain an overview of the spanning tree status of a switched network, a network engineer issues the show spanning-tree command on a switch. Which two items of information will this command display? The root bridge BID. The role of the ports in all VLANs. Which method of IPv6 prefix assignment relies on the prefix contained in RA messages? SLAAC Which two protocols are used to provide server-based AAA authentication? TACACS+, RADIUS A network administrator is configuring a WLAN. Why would the administrator disable the broadcast feature for the SSID? to eliminate outsiders scanning for available SSIDs in the area Which mitigation technique would prevent rogue servers from providing false IP configuration parameters to clients? turning on DHCP snooping A network administrator configures the port security feature on a switch. The security policy specifies that each access port should allow up to two MAC addresses. When the maximum number of MAC addresses is reached, a frame with the unknown source MAC address is dropped and a notification is sent to the syslog server. Which security violation mode should be configured for each access port? restrict What protocol or technology defines a group of routers, one of them defined as active and another one as standby? HSRP