www.ccna4u.org www.ccna4u.net www.ccna4u.

info

CCNA 640-802 Pass4sure v3.00 (5 Jan,2010)

Topic 10
Update (60 questions)

By - CiscoChamp

www.ccna4u.org www.ccna4u.net www.ccna4u.info

www.ccna4u.org www.ccna4u.net www.ccna4u.info

www.ccna4u.org www.ccna4u.net www.ccna4u.info

www.ccna4u.org www.ccna4u.net www.ccna4u.info

www.ccna4u.org www.ccna4u.net www.ccna4u.info

www.ccna4u.org www.ccna4u.net www.ccna4u.info

www.ccna4u.org www.ccna4u.net www.ccna4u.info

www.ccna4u.org www.ccna4u.net www.ccna4u.info

www.ccna4u.org www.ccna4u.net www.ccna4u.info

10

www.ccna4u.org www.ccna4u.net www.ccna4u.info

11

www.ccna4u.org www.ccna4u.net www.ccna4u.info

12

www.ccna4u.org www.ccna4u.net www.ccna4u.info

13

www.ccna4u.org www.ccna4u.net www.ccna4u.info

14

www.ccna4u.org www.ccna4u.net www.ccna4u.info

15

www.ccna4u.org www.ccna4u.net www.ccna4u.info

16

www.ccna4u.org www.ccna4u.net www.ccna4u.info

17

www.ccna4u.org www.ccna4u.net www.ccna4u.info

18

www.ccna4u.org www.ccna4u.net www.ccna4u.info

19

www.ccna4u.org www.ccna4u.net www.ccna4u.info

20

www.ccna4u.org www.ccna4u.net www.ccna4u.info

21

www.ccna4u.org www.ccna4u.net www.ccna4u.info

22

www.ccna4u.org www.ccna4u.net www.ccna4u.info

23

www.ccna4u.org www.ccna4u.net www.ccna4u.info

24

www.ccna4u.org www.ccna4u.net www.ccna4u.info

25

www.ccna4u.org www.ccna4u.net www.ccna4u.info

26

www.ccna4u.org www.ccna4u.net www.ccna4u.info

27

www.ccna4u.org www.ccna4u.net www.ccna4u.info

28

www.ccna4u.org www.ccna4u.net www.ccna4u.info

29

www.ccna4u.org www.ccna4u.net www.ccna4u.info

30

www.ccna4u.org www.ccna4u.net www.ccna4u.info

31

www.ccna4u.org www.ccna4u.net www.ccna4u.info

Answer :
BD
This question is to examine the differences between RIPv1 and RIPv2.
RIPv1
A classful distance vector routing protocol
Does not support VLSM
Routing updates are broadcast
Support auto-summarization.
RIPv2
A classless distance vector routing protocol
Support VLSM
Routing updates are multicast
Support manual route summarization.

32

www.ccna4u.org www.ccna4u.net www.ccna4u.info

33

www.ccna4u.org www.ccna4u.net www.ccna4u.info

Answer: B
This question is to examine the use of ACL.
According to the information provided in the exhibit, 172.16.16.0 can reach SVR by using SSH. SVR can reach
172.16.16.0 by using telnet.
So the correct answer is B.

This question is to examine the show version command.

By using the show version command, you can display information such as Cisco IOS software version, hardware
platform, flash and memory size.
So the correct answer is D.

34

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the DHCP-related knowledge.

To display address conflicts found by a Dynamic Host Configuration Protocol (DHCP) server when addresses are offered
to the client, use the show ip dhcp conflict command in privileged EXEC mode.
The server uses ping to detect conflicts. The client uses gratuitous Address Resolution Protocol (ARP) to detect clients.
If an address conflict is detected, the address is removed from the pool and the address is not assigned until an
administrator resolves the conflict.
The correct answer is A..

35

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the BPDU Guard
To prevent loops from occurring in a network, the PortFast mode is supported only on nontrunking access ports
because these ports typically do not transmit or receive BPDUs. The most secure implementation of PortFast is to
enable it only on ports that connect end stations to switches. Because PortFast can be enabled on nontrunking ports
connecting two switches, spanning tree loops can occur because BPDUs are still being transmitted and received on
those ports.
The PortFast BPDU guard feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is
received on that port. When the BPDU guard feature is enabled on the switch, spanning tree shuts down PortFastconfigured interfaces that receive BPDUs, instead of putting them into the spanning tree blocking state. In a valid
configuration, PortFast-configured interfaces do not receive BPDUs. If a PortFast-configured interface receives a BPDU,
an invalid configuration exists, such as connection of an unauthorized device. The BPDU guard feature provides a
secure response to invalid configurations because the administrator must manually put the interface back in service.
So the correct answer is D.

This question is to check the trunking protocol.

IGP is an interior gateway protocol and also a routing protocol, such as OSPF and EIGRP.
802.1q and ISL are trunking protocols which can be used to carry the traffic of multiple VLANs over a single link. ISL is
a Cisco proprietary protocol.
802.3u (100Base-T) is 100 Mbps Ethernet standard.
Andswer B D

36

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the data link layer protocols.

LAPB: Link Access Procedure Balanced for x.25
PPP: Point-to-Point Protocol
HDLC: High-Level Data Link Control
Frame-relay and the three protocols above are data link layer protocols. HDLC is the default serial encapsulation
protocol.
The correct answer is C.

37

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the command show arp.

The show arp command is used to check the corresponding relationship between IP address and MAC address of a
device.
So the correct answer is B.

38

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the CDP protocol configuration.

Cisco Discovery Protocol (CDP) is primarily used to obtain protocol addresses of neighboring devices and discover the
platform of those devices.
The cdp run command is used to enable CDP globally on the router.
To enable CDP on an interface, use the cdp enable command.
The correct answer is C.

39

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the STP protocol.

STP (802.1d) is used to prevent Layer 2 loops.
802.1q is a Frame Relay protocol which belongs to VLAN.
SAP is a concept of the OSI model.
So the correct answers are A and D.

This question is to examine the concept of the private IP address.

Class A: 10.0.0.0 --10.255.255.255

40

www.ccna4u.org www.ccna4u.net www.ccna4u.info

Class B: 172.16.0.0--172.31.255.255
Class C: 192.168.0.0--192.168.255.255
The three classes of addresses shown above cannot be used on the Internet, they can only be used for the interior LAN
addressing scheme. Because of the practical exhaustion of the IPv4 address space, private IP addresses are generated
to save the address resources.
The correct answer is C.

This question is to examine the OSI model.

Two hosts are communicating through Internet. The communication process includes encapsulation and deencapsulation.
From down to top, de-encapsulation is required.
From top to down, encapsulation is required.
So the correct answer is C.

41

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the IP addressing scheme.

According to this question, we can know that the real examination point is the valid IP address range of the
192.168.5.32/28 network, which is 192.168.5.33~192.168.5.46.
The correct answer is C.

This question is to examine the static route-related concept.

ip route 172.16.3.0 255.255.255.0 192.168.2.4
This is a static route configuration command. 172.16.3.0 is the destination network, 192.168.2.4 is the next hop.
The administrative distance is not configured, so the default administrative distance is used.
The correct answers are A and D.

42

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the Cisco IOS management.

Prior to backing up an IOS image to a TFTP server, the following actions should be taken:
Ensure the accessibility between the TFTP server and the device.
Use the show version command to examine the IOS information to ensure that the network server has adequate space
for the IOS image.
So we choose A, C, D.

43

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the trace route command.

When checking the network connectivity, we often use the ping command or the trace route command. And the trace
route command can also trace the network path of Internet routers that packets take as they are forwarded from your
computer to a destination address.
The correct answer is C.

44

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the network addressing scheme.

When designing a network, Cisco recommends three layers structure: Core Layer, Convergence Layer and Access Layer.
IP addresses will be assigned to different subnets.
The benefits by doing this are: ease of management and troubleshooting, reducing routing table entries and router's
burden after continuous IP addresses are summarized.
The correct answers are A and D.

This question is to examine QoS.

45

www.ccna4u.org www.ccna4u.net www.ccna4u.info

Quality of Service is a network security mechanism, which is used to resolve the network delay problem. This
mechanism is essential to multimedia application. When the network is overloaded, QoS will prevent a possible delay in
the important data transmission and ensure the efficient operation of the network.
The correct answer is B.

This question is to examine the OSI reference model.

The Application layer is responsible for identifying and establishing the availability of the intended communication
partner and determining whether sufficient resources for the intended communication exist.
The correct answer is D.

46

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the use of NAT.

A global address pool is defined here.
ip nat pool pool_name start-ip end-ip IP prefix-length number
According to this question, the subnet mask is /21.
The correct answer is A.

47

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the show ip arp command.

To display the Address Resolution Protocol (ARP) cache, where SLIP addresses appear as permanent ARP table entries,
use the show ip arp EXEC command.
Age in minutes of the cache entry. A hyphen (-) means the address is local.
The correct answer is B.

This question is to examine the concept of the distance vector routing protocol.

48

www.ccna4u.org www.ccna4u.net www.ccna4u.info

After a distance-vector routing protocol is started on each router, the routing tables are updated with all route
information gathered from neighbor routers and send periodic updates regardless of topology changes. For example,
RIP updates are sent every 30 seconds by default. The correct answers are A and D.

This question is to examine the ARP working principle.

When Host A doesn't know the MAC address of Host B,the ARP request will be broadcast so that all hosts on the LAN
can see this request. If the IP is not local,the router will check its routing table to see whether there is a route to the
destination network.If there is ,the router will reply with its own MAC address.
So C is correct.

49

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the MAC address structure.

The MAC address is expressed as a 48-bit hexadecimal number. The first 24-bit number is to identify the
vendor/manufacturer, also called OUI. The latter 24-bit is assigned by the vendor.
The correct answer is C.

50

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the show int command.

According to the information provided in the exhibit, we can know that the data link protocol used in this network is the
Frame Relay protocol.
LMI enq sent
So the correct answer is C.

51

www.ccna4u.org www.ccna4u.net www.ccna4u.info

52

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the layer 2 port security.

According to the exhibit, we know that the port security is configured to restrict the interface in the event of a violation.
So A is wrong.
The port security should be enabled on the interface, not globally.
So the correct answers are B and D.

53

www.ccna4u.org www.ccna4u.net www.ccna4u.info

This question is to examine the IP addressing scheme.

In the serial port network, only two IP addresses can be assigned. In order to save IP addresses, we often use the /30
subnet mask.
So the correct answer is D.

54