CCNP SWITCH TEST 1 QUESTIONS
AND CORRECT ANSWERS
ALREADY PASSED
Which feature do you implement so that an interface enters the root inconsistent state if
it receives a superior BPDU?
A. BPDU filter
B. root guard
C. BPDU guard
D. loop guard - Answer-B
A network engineer wants to ensure Layer 2 isolation of customer traffic using a private
VLAN.
Which configuration must be made before the private VLAN is configured?
A. Disable VTP and manually assign VLANs.
B. Ensure all switches are configured as VTP server mode.
C. Configure VTP Transparent Mode.
D. Enable VTP version 3. - Answer-C
What is the command for configuring root guard?
A. (config)# spanning-tree guard root
B. (config-if)# spanning-tree guard root
C. (config)# spanning-tree rootguard default
D. (config-if)# spanning tree guard root - Answer-B
A Switch has been configured with the VLAN dot1q tag native command.
Which statement describes what the switch does with untagged frames that it receives
on a trunked interface?
A. Untagged frames are forwarded via the default VLAN
B. It drops the untagged frames
C. The trunked port is put in err-disable state
D. Untagged frames are forwarded via the native VLAN - Answer-B
Which three functions does Dynamic ARP Inspection perform with invalid IP-to MAC
address bindings? (Choose three.)
A. accepts
B. deletes
C. discards
, D. bypasses
E. intercepts
F. logs - Answer-C, E, F
Which two options are advantages of deploying VTPv3? (Choose two)
A. It stores the VTP domain password securely as a SHA-1 hash
B. It adds on FCS field at the end of each VTP frame for consistency checking
C. It supports the propagation of private VLANs.
D. It supports the use of AES to encrypt VTP messaging
E. It can be configured to allow only one VTP server to make changes to the VTP
domain - Answer-C, E
Which two statements about CDP are true? (Choose two.)
A. CDP uses a TLV to advertise the native VLAN
B. CDP is not supported with SNMP
C. CDP is supported on Frame Relay sub interfaces.
D. CDP runs on OSI layer 2
E. CDP runs on OSI layer 1 - Answer-A, D
In which two ways can a port respond to a port-security violation? (Choose two.)
A. The port enters the err-disabled state.
B. The Security Violation counter is incremented and the port sends an SNMP trap.
C. The Security Violation counter is incremented and the port sends a critical syslog
message to the console.
D. The port triggers an EEM script to notify support staff and continues to forward traffic
normally.
E. The port immediately begins to drop all traffic.
F. The port enters the shutdown state. - Answer-A,B
Which two statements about 802.1Q are true? (Choose two.)
A. It encapsulates the original Ethernet frame and adds a VLAN identifier.
B. It increases the maximum size an Ethernet frame to 1094 bytes.
C. It is a Cisco proprietary protocol.
D. When It is enabled, it forces a recalculation of the frame check sequence field.
E. It supports 8-byte VLAN identifiers.
F. It adds a 32-bit field to the Ethernet frame between the source MAC address and
length fields. - Answer-D, F
In which two ways are IEEE STP BPDUs forwarded if VLAN 99 is configured as native?
(Choose two.)
A.VLAN 1 STP BPDU tagged through VLAN 1
B. VLAN 1 STP BPDU untagged through VLAN 1
C. VLAN 1 STP BPDU tagged through VLAN 99
D. VLAN 1 STP BPDU untagged through VLAN 99
E. VLAN 1 STP BPDU tagged through VLAN 1 and 99
F. VLAN 1 STP BPDU untagged through VLAN 1 and 99 - Answer-A,D
AND CORRECT ANSWERS
ALREADY PASSED
Which feature do you implement so that an interface enters the root inconsistent state if
it receives a superior BPDU?
A. BPDU filter
B. root guard
C. BPDU guard
D. loop guard - Answer-B
A network engineer wants to ensure Layer 2 isolation of customer traffic using a private
VLAN.
Which configuration must be made before the private VLAN is configured?
A. Disable VTP and manually assign VLANs.
B. Ensure all switches are configured as VTP server mode.
C. Configure VTP Transparent Mode.
D. Enable VTP version 3. - Answer-C
What is the command for configuring root guard?
A. (config)# spanning-tree guard root
B. (config-if)# spanning-tree guard root
C. (config)# spanning-tree rootguard default
D. (config-if)# spanning tree guard root - Answer-B
A Switch has been configured with the VLAN dot1q tag native command.
Which statement describes what the switch does with untagged frames that it receives
on a trunked interface?
A. Untagged frames are forwarded via the default VLAN
B. It drops the untagged frames
C. The trunked port is put in err-disable state
D. Untagged frames are forwarded via the native VLAN - Answer-B
Which three functions does Dynamic ARP Inspection perform with invalid IP-to MAC
address bindings? (Choose three.)
A. accepts
B. deletes
C. discards
, D. bypasses
E. intercepts
F. logs - Answer-C, E, F
Which two options are advantages of deploying VTPv3? (Choose two)
A. It stores the VTP domain password securely as a SHA-1 hash
B. It adds on FCS field at the end of each VTP frame for consistency checking
C. It supports the propagation of private VLANs.
D. It supports the use of AES to encrypt VTP messaging
E. It can be configured to allow only one VTP server to make changes to the VTP
domain - Answer-C, E
Which two statements about CDP are true? (Choose two.)
A. CDP uses a TLV to advertise the native VLAN
B. CDP is not supported with SNMP
C. CDP is supported on Frame Relay sub interfaces.
D. CDP runs on OSI layer 2
E. CDP runs on OSI layer 1 - Answer-A, D
In which two ways can a port respond to a port-security violation? (Choose two.)
A. The port enters the err-disabled state.
B. The Security Violation counter is incremented and the port sends an SNMP trap.
C. The Security Violation counter is incremented and the port sends a critical syslog
message to the console.
D. The port triggers an EEM script to notify support staff and continues to forward traffic
normally.
E. The port immediately begins to drop all traffic.
F. The port enters the shutdown state. - Answer-A,B
Which two statements about 802.1Q are true? (Choose two.)
A. It encapsulates the original Ethernet frame and adds a VLAN identifier.
B. It increases the maximum size an Ethernet frame to 1094 bytes.
C. It is a Cisco proprietary protocol.
D. When It is enabled, it forces a recalculation of the frame check sequence field.
E. It supports 8-byte VLAN identifiers.
F. It adds a 32-bit field to the Ethernet frame between the source MAC address and
length fields. - Answer-D, F
In which two ways are IEEE STP BPDUs forwarded if VLAN 99 is configured as native?
(Choose two.)
A.VLAN 1 STP BPDU tagged through VLAN 1
B. VLAN 1 STP BPDU untagged through VLAN 1
C. VLAN 1 STP BPDU tagged through VLAN 99
D. VLAN 1 STP BPDU untagged through VLAN 99
E. VLAN 1 STP BPDU tagged through VLAN 1 and 99
F. VLAN 1 STP BPDU untagged through VLAN 1 and 99 - Answer-A,D
