CCNA3 v7 - ENSA Final Exam Questions
And Answers
What functionality does mGRE provide to the DMVPN technology?
- - correct answer ✅It allows the creation of dynamically allocated
tunnels through a permanent tunnel source at the hub and
dynamically allocated tunnel destinations at the spokes.
Which statement accurately describes a characteristic of IPsec? - -
correct answer ✅IPsec is a framework of open standards that
relies on existing algorithms.
Which type of API would be used to allow authorized salespeople
of an organization access to internal sales data from their mobile
devices? - - correct answer ✅private
POST - - correct answer ✅CREATE
GET - - correct answer ✅Read
PUT/PATCH - - correct answer ✅UPDATE
DELETE - - correct answer ✅DELETE
,CCNA3 v7 - ENSA Final Exam Questions
And Answers
What are two syntax rules for writing a JSON array? (Choose two.) -
- correct answer ✅-Each value in the array is separated by a
comma.
-Values are enclosed in square brackets.
Refer to the exhibit. An administrator is trying to configure PAT on
R1, but PC-A is unable to access the Internet. The administrator
tries to ping a server on the Internet from PC-A and collects the
debugs that are shown in the exhibit. Based on this output, what is
most likely the cause of the problem? - - correct answer ✅The
inside global address is not on the same subnet as the ISP.
Refer to the exhibit. R1 is configured for NAT as displayed. What is
wrong with the configuration? - - correct answer ✅NAT-POOL2 is
not bound to ACL 1.
Refer to the exhibit. What is the purpose of the command marked
with an arrow shown in the partial configuration output of a Cisco
broadband router? - - correct answer ✅defines which addresses
can be translated
A network administrator is writing a standard ACL that will deny any
traffic from the 172.16.0.0/16 network, but permit all other traffic.
, CCNA3 v7 - ENSA Final Exam Questions
And Answers
Which two commands should be used? (Choose two.) - - correct
answer ✅-Router(config)# access-list 95 permit any
-Router(config)# access-list 95 deny 172.16.0.0 0.0.255.255
Refer to the exhibit. A network administrator needs to add an ACE
to the TRAFFIC-CONTROL ACL that will deny IP traffic from the
subnet 172.23.16.0/20. Which ACE will meet this requirement? - -
correct answer ✅5 deny 172.23.16.0 0.0.15.255
If a router has two interfaces and is routing both IPv4 and IPv6
traffic, how many ACLs could be created and applied to it? - -
correct answer ✅8
Which three statements are generally considered to be best
practices in the placement of ACLs? (Choose three.) - - correct
answer ✅-Place extended ACLs close to the source IP address of
the traffic.
-Place standard ACLs close to the destination IP address of the
traffic.
-Filter unwanted traffic before it travels onto a low-bandwidth link.
And Answers
What functionality does mGRE provide to the DMVPN technology?
- - correct answer ✅It allows the creation of dynamically allocated
tunnels through a permanent tunnel source at the hub and
dynamically allocated tunnel destinations at the spokes.
Which statement accurately describes a characteristic of IPsec? - -
correct answer ✅IPsec is a framework of open standards that
relies on existing algorithms.
Which type of API would be used to allow authorized salespeople
of an organization access to internal sales data from their mobile
devices? - - correct answer ✅private
POST - - correct answer ✅CREATE
GET - - correct answer ✅Read
PUT/PATCH - - correct answer ✅UPDATE
DELETE - - correct answer ✅DELETE
,CCNA3 v7 - ENSA Final Exam Questions
And Answers
What are two syntax rules for writing a JSON array? (Choose two.) -
- correct answer ✅-Each value in the array is separated by a
comma.
-Values are enclosed in square brackets.
Refer to the exhibit. An administrator is trying to configure PAT on
R1, but PC-A is unable to access the Internet. The administrator
tries to ping a server on the Internet from PC-A and collects the
debugs that are shown in the exhibit. Based on this output, what is
most likely the cause of the problem? - - correct answer ✅The
inside global address is not on the same subnet as the ISP.
Refer to the exhibit. R1 is configured for NAT as displayed. What is
wrong with the configuration? - - correct answer ✅NAT-POOL2 is
not bound to ACL 1.
Refer to the exhibit. What is the purpose of the command marked
with an arrow shown in the partial configuration output of a Cisco
broadband router? - - correct answer ✅defines which addresses
can be translated
A network administrator is writing a standard ACL that will deny any
traffic from the 172.16.0.0/16 network, but permit all other traffic.
, CCNA3 v7 - ENSA Final Exam Questions
And Answers
Which two commands should be used? (Choose two.) - - correct
answer ✅-Router(config)# access-list 95 permit any
-Router(config)# access-list 95 deny 172.16.0.0 0.0.255.255
Refer to the exhibit. A network administrator needs to add an ACE
to the TRAFFIC-CONTROL ACL that will deny IP traffic from the
subnet 172.23.16.0/20. Which ACE will meet this requirement? - -
correct answer ✅5 deny 172.23.16.0 0.0.15.255
If a router has two interfaces and is routing both IPv4 and IPv6
traffic, how many ACLs could be created and applied to it? - -
correct answer ✅8
Which three statements are generally considered to be best
practices in the placement of ACLs? (Choose three.) - - correct
answer ✅-Place extended ACLs close to the source IP address of
the traffic.
-Place standard ACLs close to the destination IP address of the
traffic.
-Filter unwanted traffic before it travels onto a low-bandwidth link.
