©GRACEAMELIA 2024/2025 ACADEMIC YEAR. ALL RIGHTS RESERVED
FIRST PUBLISH OCTOBER 2024
CCNA3 v7 - ENSA Final Exam Questions and Answers
What functionality does mGRE provide to the DMVPN technology? - Ans:✔✔-It allows the creation of
dynamically allocated tunnels through a permanent tunnel source at the hub and dynamically allocated
tunnel destinations at the spokes.
Which statement accurately describes a characteristic of IPsec? - Ans:✔✔-IPsec is a framework of open
standards that relies on existing algorithms.
Which type of API would be used to allow authorized salespeople of an organization access to internal
sales data from their mobile devices? - Ans:✔✔-private
POST - Ans:✔✔-CREATE
GET - Ans:✔✔-Read
PUT/PATCH - Ans:✔✔-UPDATE
DELETE - Ans:✔✔-DELETE
What are two syntax rules for writing a JSON array? (Choose two.) - Ans:✔✔--Each value in the array is
separated by a comma.
-Values are enclosed in square brackets.
Page 1/18
, ©GRACEAMELIA 2024/2025 ACADEMIC YEAR. ALL RIGHTS RESERVED
FIRST PUBLISH OCTOBER 2024
Refer to the exhibit. An administrator is trying to configure PAT on R1, but PC-A is unable to access the
Internet. The administrator tries to ping a server on the Internet from PC-A and collects the debugs that
are shown in the exhibit. Based on this output, what is most likely the cause of the problem? - Ans:✔✔-
The inside global address is not on the same subnet as the ISP.
Refer to the exhibit. R1 is configured for NAT as displayed. What is wrong with the configuration? -
Ans:✔✔-NAT-POOL2 is not bound to ACL 1.
Refer to the exhibit. What is the purpose of the command marked with an arrow shown in the partial
configuration output of a Cisco broadband router? - Ans:✔✔-defines which addresses can be translated
A network administrator is writing a standard ACL that will deny any traffic from the 172.16.0.0/16
network, but permit all other traffic. Which two commands should be used? (Choose two.) - Ans:✔✔--
Router(config)# access-list 95 permit any
-Router(config)# access-list 95 deny 172.16.0.0 0.0.255.255
Refer to the exhibit. A network administrator needs to add an ACE to the TRAFFIC-CONTROL ACL that will
deny IP traffic from the subnet 172.23.16.0/20. Which ACE will meet this requirement? - Ans:✔✔-5 deny
172.23.16.0 0.0.15.255
If a router has two interfaces and is routing both IPv4 and IPv6 traffic, how many ACLs could be created
and applied to it? - Ans:✔✔-8
Page 2/18
, ©GRACEAMELIA 2024/2025 ACADEMIC YEAR. ALL RIGHTS RESERVED
FIRST PUBLISH OCTOBER 2024
Which three statements are generally considered to be best practices in the placement of ACLs? (Choose
three.) - Ans:✔✔--Place extended ACLs close to the source IP address of the traffic.
-Place standard ACLs close to the destination IP address of the traffic.
-Filter unwanted traffic before it travels onto a low-bandwidth link.
What is the main function of a hypervisor? - Ans:✔✔-It is used to create and manage multiple VM
instances on a host machine.
A data center has recently updated a physical server to host multiple operating systems on a single CPU.
The data center can now provide each customer with a separate web server without having to allocate
an actual discrete server for each customer. What is the networking trend that is being implemented by
the data center in this situation? - Ans:✔✔-virtualization
What is used to pre-populate the adjacency table on Cisco devices that use CEF to process packets? -
Ans:✔✔-The ARP table
Refer to the exhibit. What is the OSPF cost to reach the West LAN 172.16.2.0/24 from East? - Ans:✔✔-65
A network engineer has noted that some expected network route entries are not displayed in the
routing table. Which two commands will provide additional information about the state of router
adjacencies, timer intervals, and the area ID? (Choose two.) - Ans:✔✔--show ip ospf interface
-show ip ospf neighbor
Page 3/18
FIRST PUBLISH OCTOBER 2024
CCNA3 v7 - ENSA Final Exam Questions and Answers
What functionality does mGRE provide to the DMVPN technology? - Ans:✔✔-It allows the creation of
dynamically allocated tunnels through a permanent tunnel source at the hub and dynamically allocated
tunnel destinations at the spokes.
Which statement accurately describes a characteristic of IPsec? - Ans:✔✔-IPsec is a framework of open
standards that relies on existing algorithms.
Which type of API would be used to allow authorized salespeople of an organization access to internal
sales data from their mobile devices? - Ans:✔✔-private
POST - Ans:✔✔-CREATE
GET - Ans:✔✔-Read
PUT/PATCH - Ans:✔✔-UPDATE
DELETE - Ans:✔✔-DELETE
What are two syntax rules for writing a JSON array? (Choose two.) - Ans:✔✔--Each value in the array is
separated by a comma.
-Values are enclosed in square brackets.
Page 1/18
, ©GRACEAMELIA 2024/2025 ACADEMIC YEAR. ALL RIGHTS RESERVED
FIRST PUBLISH OCTOBER 2024
Refer to the exhibit. An administrator is trying to configure PAT on R1, but PC-A is unable to access the
Internet. The administrator tries to ping a server on the Internet from PC-A and collects the debugs that
are shown in the exhibit. Based on this output, what is most likely the cause of the problem? - Ans:✔✔-
The inside global address is not on the same subnet as the ISP.
Refer to the exhibit. R1 is configured for NAT as displayed. What is wrong with the configuration? -
Ans:✔✔-NAT-POOL2 is not bound to ACL 1.
Refer to the exhibit. What is the purpose of the command marked with an arrow shown in the partial
configuration output of a Cisco broadband router? - Ans:✔✔-defines which addresses can be translated
A network administrator is writing a standard ACL that will deny any traffic from the 172.16.0.0/16
network, but permit all other traffic. Which two commands should be used? (Choose two.) - Ans:✔✔--
Router(config)# access-list 95 permit any
-Router(config)# access-list 95 deny 172.16.0.0 0.0.255.255
Refer to the exhibit. A network administrator needs to add an ACE to the TRAFFIC-CONTROL ACL that will
deny IP traffic from the subnet 172.23.16.0/20. Which ACE will meet this requirement? - Ans:✔✔-5 deny
172.23.16.0 0.0.15.255
If a router has two interfaces and is routing both IPv4 and IPv6 traffic, how many ACLs could be created
and applied to it? - Ans:✔✔-8
Page 2/18
, ©GRACEAMELIA 2024/2025 ACADEMIC YEAR. ALL RIGHTS RESERVED
FIRST PUBLISH OCTOBER 2024
Which three statements are generally considered to be best practices in the placement of ACLs? (Choose
three.) - Ans:✔✔--Place extended ACLs close to the source IP address of the traffic.
-Place standard ACLs close to the destination IP address of the traffic.
-Filter unwanted traffic before it travels onto a low-bandwidth link.
What is the main function of a hypervisor? - Ans:✔✔-It is used to create and manage multiple VM
instances on a host machine.
A data center has recently updated a physical server to host multiple operating systems on a single CPU.
The data center can now provide each customer with a separate web server without having to allocate
an actual discrete server for each customer. What is the networking trend that is being implemented by
the data center in this situation? - Ans:✔✔-virtualization
What is used to pre-populate the adjacency table on Cisco devices that use CEF to process packets? -
Ans:✔✔-The ARP table
Refer to the exhibit. What is the OSPF cost to reach the West LAN 172.16.2.0/24 from East? - Ans:✔✔-65
A network engineer has noted that some expected network route entries are not displayed in the
routing table. Which two commands will provide additional information about the state of router
adjacencies, timer intervals, and the area ID? (Choose two.) - Ans:✔✔--show ip ospf interface
-show ip ospf neighbor
Page 3/18
