CCNA3 v7 - ENSA Final Exam UPDATED
ACTUAL Exam Questions and CORRECT
Answers
What functionality does mGRE provide to the DMVPN technology? - CORRECT ANSWER -
It allows the creation of dynamically allocated tunnels through a permanent tunnel source at the
hub and dynamically allocated tunnel destinations at the spokes.
Which statement accurately describes a characteristic of IPsec? - CORRECT ANSWER -
IPsec is a framework of open standards that relies on existing algorithms.
Which type of API would be used to allow authorized salespeople of an organization access to
internal sales data from their mobile devices? - CORRECT ANSWER - private
POST - CORRECT ANSWER - CREATE
GET - CORRECT ANSWER - Read
PUT/PATCH - CORRECT ANSWER - UPDATE
DELETE - CORRECT ANSWER - DELETE
What are two syntax rules for writing a JSON array? (Choose two.) - CORRECT ANSWER -
-Each value in the array is separated by a comma.
-Values are enclosed in square brackets.
Refer to the exhibit. An administrator is trying to configure PAT on R1, but PC-A is unable to
access the Internet. The administrator tries to ping a server on the Internet from PC-A and
collects the debugs that are shown in the exhibit. Based on this output, what is most likely the
, cause of the problem? - CORRECT ANSWER - The inside global address is not on the same
subnet as the ISP.
Refer to the exhibit. R1 is configured for NAT as displayed. What is wrong with the
configuration? - CORRECT ANSWER - NAT-POOL2 is not bound to ACL 1.
Refer to the exhibit. What is the purpose of the command marked with an arrow shown in the
partial configuration output of a Cisco broadband router? - CORRECT ANSWER - defines
which addresses can be translated
A network administrator is writing a standard ACL that will deny any traffic from the
172.16.0.0/16 network, but permit all other traffic. Which two commands should be used?
(Choose two.) - CORRECT ANSWER - -Router(config)# access-list 95 permit any
-Router(config)# access-list 95 deny 172.16.0.0 0.0.255.255
Refer to the exhibit. A network administrator needs to add an ACE to the TRAFFIC-CONTROL
ACL that will deny IP traffic from the subnet 172.23.16.0/20. Which ACE will meet this
requirement? - CORRECT ANSWER - 5 deny 172.23.16.0 0.0.15.255
If a router has two interfaces and is routing both IPv4 and IPv6 traffic, how many ACLs could be
created and applied to it? - CORRECT ANSWER - 8
Which three statements are generally considered to be best practices in the placement of ACLs?
(Choose three.) - CORRECT ANSWER - -Place extended ACLs close to the source IP address
of the traffic.
-Place standard ACLs close to the destination IP address of the traffic.
-Filter unwanted traffic before it travels onto a low-bandwidth link.
What is the main function of a hypervisor? - CORRECT ANSWER - It is used to create and
manage multiple VM instances on a host machine.
ACTUAL Exam Questions and CORRECT
Answers
What functionality does mGRE provide to the DMVPN technology? - CORRECT ANSWER -
It allows the creation of dynamically allocated tunnels through a permanent tunnel source at the
hub and dynamically allocated tunnel destinations at the spokes.
Which statement accurately describes a characteristic of IPsec? - CORRECT ANSWER -
IPsec is a framework of open standards that relies on existing algorithms.
Which type of API would be used to allow authorized salespeople of an organization access to
internal sales data from their mobile devices? - CORRECT ANSWER - private
POST - CORRECT ANSWER - CREATE
GET - CORRECT ANSWER - Read
PUT/PATCH - CORRECT ANSWER - UPDATE
DELETE - CORRECT ANSWER - DELETE
What are two syntax rules for writing a JSON array? (Choose two.) - CORRECT ANSWER -
-Each value in the array is separated by a comma.
-Values are enclosed in square brackets.
Refer to the exhibit. An administrator is trying to configure PAT on R1, but PC-A is unable to
access the Internet. The administrator tries to ping a server on the Internet from PC-A and
collects the debugs that are shown in the exhibit. Based on this output, what is most likely the
, cause of the problem? - CORRECT ANSWER - The inside global address is not on the same
subnet as the ISP.
Refer to the exhibit. R1 is configured for NAT as displayed. What is wrong with the
configuration? - CORRECT ANSWER - NAT-POOL2 is not bound to ACL 1.
Refer to the exhibit. What is the purpose of the command marked with an arrow shown in the
partial configuration output of a Cisco broadband router? - CORRECT ANSWER - defines
which addresses can be translated
A network administrator is writing a standard ACL that will deny any traffic from the
172.16.0.0/16 network, but permit all other traffic. Which two commands should be used?
(Choose two.) - CORRECT ANSWER - -Router(config)# access-list 95 permit any
-Router(config)# access-list 95 deny 172.16.0.0 0.0.255.255
Refer to the exhibit. A network administrator needs to add an ACE to the TRAFFIC-CONTROL
ACL that will deny IP traffic from the subnet 172.23.16.0/20. Which ACE will meet this
requirement? - CORRECT ANSWER - 5 deny 172.23.16.0 0.0.15.255
If a router has two interfaces and is routing both IPv4 and IPv6 traffic, how many ACLs could be
created and applied to it? - CORRECT ANSWER - 8
Which three statements are generally considered to be best practices in the placement of ACLs?
(Choose three.) - CORRECT ANSWER - -Place extended ACLs close to the source IP address
of the traffic.
-Place standard ACLs close to the destination IP address of the traffic.
-Filter unwanted traffic before it travels onto a low-bandwidth link.
What is the main function of a hypervisor? - CORRECT ANSWER - It is used to create and
manage multiple VM instances on a host machine.
