Exam Code: 200-125

Exam Name: Cisco Certified Network Associate

Certification Provider: Cisco
Corresponding Certification: CCNA Routing and Switching
Website: www.vceplus.com
Free Exam: https://vceplus.com/ccna-exam-200-125/
Questions & Answers Exam Engine is rigorously checked before being put up for
sale. We make sure there is nothing irrelevant in 200-125 exam products and you get
latest questions. We strive to deliver the best 200-125 exam product for top grades in
your first attempt.
1. OSPF Neighbor Sim
Question :
The topology below is running OSPF. You are required to troubleshoot and resolve the OSPF issues between the various routers.
Use the appropriate show commands to troubleshoot the issues.

Instead of posting the output of “show run” commands we post here the commands entered on each router to reduce some useless
lines. Also you can try solving questions by yourself before reading the answers.

R1 R2 R3
interface Loopback0 ! username R6 password CISCO36
description ***Loopback*** interface Loopback0 !
ip address 192.168.1.1 description **Loopback** interface Loopback0
255.255.255.255 ip address 192.168.2.2 description **Loopback**
ip ospf 1 area 0 255.255.255.255 ip address 192.168.3.3
! ip ospf 2 area 0 255.255.255.255
interface Ethernet0/0 ! ip ospf 3 area 0
description **Connected to R1- interface Ethernet0/0 !
LAN** description **Connected to R2- interface Ethernet0/0
ip address 10.10.110.1 LAN** description **Connected to L2SW**
255.255.255.0 ip address 10.10.120.1 ip address 10.10.230.3
ip ospf 1 area 0 255.255.255.0 255.255.255.0
! ip ospf 2 area 0 ip ospf 3 area 0
interface Ethernet0/1 ! !
description **Connected to L2SW** interface Ethernet0/1 interface Serial1/0
ip address 10.10.230.1 description **Connected to L2SW** description **Connected to R4-
255.255.255.0 ip address 10.10.230.2 Branch1 office**
ip ospf hello-interval 25 255.255.255.0 ip address 10.10.240.1
ip ospf 1 area 0 ip ospf 2 area 0 255.255.255.252
! ! encapsulation ppp
router ospf 1 router ospf 2 ip ospf 3 area 0
log-adjacency-changes log-adjacency-changes !
interface Serial1/1
description **Connected to R5-
Branch2 office**
ip address 10.10.240.5
255.255.255.252
encapsulation ppp
ip ospf hello-interval 50
ip ospf 3 area 0
 !
interface Serial1/2
description **Connected to R6-
Branch3 office**
ip address 10.10.240.9
255.255.255.252
encapsulation ppp
ip ospf 3 area 0
ppp authentication chap
!
router ospf 3
router-id 192.168.3.3
!
R4 R5 R6
! ! username R3 password CISCO36
interface Loopback0 interface Loopback0 !
description **Loopback** description **Loopback** interface Loopback0
ip address 192.168.4.4 ip address 192.168.5.5 description **Loopback**
255.255.255.255 255.255.255.255 ip address 192.168.6.6
ip ospf 4 area 2 ip ospf 5 area 0 255.255.255.255
! ! ip ospf 6 area 0
interface Ethernet0/0 interface Ethernet0/0 !
ip address 172.16.113.1 ip address 172.16.114.1 interface Ethernet0/0
255.255.255.0 255.255.255.0 ip address 172.16.115.1
ip ospf 4 area 2 ip ospf 5 area 0 255.255.255.0
! ! ip ospf 6 area 0
interface Serial1/0 interface Serial1/0 !
description **Connected to R3-Main description **Connected to R3-Main interface Serial1/0
Branch office** Branch office** description **Connected to R3-Main
ip address 10.10.240.2 ip address 10.10.240.6 Branch office**
255.255.255.252 255.255.255.252 ip address 10.10.240.10
encapsulation ppp encapsulation ppp 255.255.255.252
ip ospf 4 area 2 ip ospf 5 area 0 encapsulation ppp
! ! ip ospf 6 area 0
router ospf 4 router ospf 5 ppp authentication chap
log-adjacency-changes log-adjacency-changes !
router ospf 6
router-id 192.168.3.3
!

Question 1:
Explanation

We learned it is a OSPF problem so we should check the interfaces between them first. On both R3 and R4 use “show running-
config” command to check their S1/0 interfaces

R3#show running-config
<<output omitted>>
!
interface Serial1/0
description **Connected to R4-Branch1 office**
ip address 10.10.240.1 255.255.255.252
encapsulation ppp
ip ospf 3 area 0
!
<<output omitted>>

R4#show running-config
<<output omitted>>
!
interface Serial1/0
description **Connected to R3-Main Branch office**
ip address 10.10.240.2 255.255.255.252
 encapsulation ppp
ip ospf 4 area 2
!
<<output omitted>>

In the output above we see their Area IDs are mismatched; interface S1/0 of R3 is in area 0 (R3: ip ospf 3 area 0) while interface
s1/0 of R4 is in area 2 (R4: ip ospf 4 area 2).

Question 2 :
Explanation

Continue checking their connected interfaces with the “show running-config” command:

R3#show running-config
<<output omitted>>
!
interface Serial1/1
description **Connected to R5-Branch2 office**
ip address 10.10.240.5 255.255.255.252
encapsulation ppp
ip ospf hello-interval 50
ip ospf 3 area 0
!
<<output omitted>>

R5#show running-config
<<output omitted>>
!
interface Serial1/0
description **Connected to R3-Main Branch office**
ip address 10.10.240.6 255.255.255.252
encapsulation ppp
ip ospf 5 area 0
!
<<output omitted>>

The only difference we can see here is the line “ip ospf hello-interval 50” on R3. This command sets the number of seconds R3 waits
before sending the next hello packet out this interface. In this case after configuring this command, R3 will send hello pack ets to R5
every 50 seconds. But the default value of hello-interval is 10 seconds and R5 is using it. Therefore we can think of a hello interval
mismatch problem here. You can verify with the “show ip ospf interface <interface>” command on each router.

R3#sh ip ospf int s1/1

Serial1/1 is up, line protocol is up
Internet Address 10.10.240.5/30, Area 0
Process ID 3, Router ID 192.168.3.3, Network Type POINT_TO_POINT, Cost: 64
Enabled by interface config, including secondary ip addresses
Transmit Delay is 1 sec, State POINT_TO_POINT,
Timer intervals configured, Hello 50, Dead 200, Wait 200, Retransmit 5
oob-resync timeout 200
Hello due in 00:00:28
Supports Link-local Signaling (LLS)
Index 2/2, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)

R5#sh ip ospf int s1/0

Serial1/0 is up, line protocol is up
Internet Address 10.10.240.6/30, Area 0
Process ID 5, Router ID 10.10.240.6, Network Type POINT_TO_POINT, Cost: 64
Enabled by interface config, including secondary ip addresses
Transmit Delay is 1 sec, State POINT_TO_POINT,
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:04
Supports Link-local Signaling (LLS)
 Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)

So we can see both hello and dead interval are mismatched because the dead interval always four times the value of hello inte rval,
unless you manually configure the dead interval (with the ip ospf dead-interval <seconds>command).

Question 3 :
Explanation

Continue checking their connected interfaces with the “show running-config” command:

R1#show running-config
<<output omitted>>
!
interface Ethernet0/1
description **Connected to L2SW**
ip address 10.10.230.1 255.255.255.0
ip ospf hello-interval 25
ip ospf 1 area 0
!
<<output omitted>>

R2#show running-config
<<output omitted>>
!
interface Ethernet0/1
description **Connected to L2SW**
ip address 10.10.230.2 255.255.255.0
ip ospf 2 area 0
!
<<output omitted>>

We see the hello interval on R1 is not the same as R2 (and you can verify with the “show ip ospf interface <interface> comman d”) ->
There is a hello and dead interval mismatch problem. We should configure “no ip ospf hello-interval 25” on R1.

Note: Maybe there are some versions of this question in the exam. For example there are some reports saying that Ethernet0/1 on
R1 is shutdown (and this is the correct choice in the exam). So please be careful checking the config on the routers before choosing
the correct answers.

Question 4 :
Explanation

R3#show running-config
<<output omitted>>
username R6 password CISCO36
!
interface Serial1/2
description **Connected to R6-Branch3 office**
ip address 10.10.240.9 255.255.255.252
encapsulation ppp
ip ospf 3 area 0
ppp authentication chap
!
<<output omitted>>
!
router ospf 3
router-id 192.168.3.3
!
<<output omitted>>

R6#show running-config
<<output omitted>>
username R3 password CISCO36
!
 interface Serial1/0
description **Connected to R3-Main Branch office**
ip address 10.10.240.10 255.255.255.252
encapsulation ppp
ip ospf 6 area 0
ppp authentication chap
!
<<output omitted>>
!
router ospf 6
router-id 192.168.3.3
!
<<output omitted>>

We are not sure about the configuration of ppp authentication in this case. Some reports said that only one router has the “p pp
authentication chap” command but it is just a trick and is not the problem here. The real problem here is R6 uses the same router-id
of R3 (192.168.3.3) so OSPF neighborship cannot be established. In real life, such configuration error will be shown in the c ommand
line interface (CLI). So please check carefully for this question.

2. CCNA Access List Sim

Question :

Answer and Explanation

For this question we only need to use the show running-config command to answer all the questions below

Router>enable
Router#show running-config
Question 1 :
How can we fix the problem but only allow ping to work while disabling telnet?

A – Correctly assign an IP address to interface fa0/1

B – Change the ip access-group command on fa0/0 from “in” to “out”
C – Remove access-group 106 in from interface fa0/0 and add access-group 115 in.
D – Remove access-group 102 out from interface s0/0/0 and add access-group 114 in
E – Remove access-group 106 in from interface fa0/0 and add access-group 104 in

Answer: E
Explanation

Let’s have a look at the access list 104:

The question does not ask about ftp traffic so we don’t care about the two first lines. The 3rd line denies all telnet traffi c and the 4th
line allows icmp traffic to be sent (ping). Remember that the access list 104 is applied on the inbound direction so the 5th line
“access-list 104 deny icmp any any echo-reply” will not affect our icmp traffic because the “echo-reply” message will be sent over the
outbound direction.

Question 2 :
What will happen after issuing the command “ip access-group 114 in” to the fa0/0 interface?

A – Attempts to telnet to the router would fail

B – All traffic from the 10.4.4.0 network would be allow to go through
C – TCP and UDP traffic are not allowed to pass
D – Routing protocol updates for the 10.4.4.0 network would not be accepted from the fa0/0 interface

Answer: B
Explanation

From the output of access-list 114: access-list 114 permit ip 10.4.4.0 0.0.0.255 any we can easily understand that this access list
allows all traffic (ip) from 10.4.4.0/24 network

Question 3 :
What will happen after issuing the command “access-group 115 in” on the s0/0/1 interface?

A – Hosts cannot connect to Router through s0/0/1

B – Telnet and ping would work but routing updates would fail.
C – FTP, FTP-DATA, echo, and HTTP traffic would work but telnet would fail
D – Only traffic from the 10.4.4.0 network would pass through the interface

Answer: A
Explanation

First let’s see what was configured on interface S0/0/1:

Recall that each interface only accepts one access-list, so when using the command “ip access-group 115 in” on the s0/0/1 interface
it will overwrite the initial access-list 102. Therefore any telnet connection will be accepted (so we can eliminate answer C).
B is not correct because if telnet and ping can work then routing updates can, too.
D is not correct because access-list 115 does not mention about 10.4.4.0 network. So the most reasonable answer is A.
But here raise a question…
The wildcard mask of access-list 115, which is 255.255.255.0, means that only host with ip addresses in the form of x.x.x.0 will be
accepted. But we all know that x.x.x.0 is likely to be a network address so the answer A: “no host could connect to Router th rough
s0/0/1” seems right…

But what will happen if we don’t use a subnet mask of 255.255.255.0? For example we can use an ip address of 10.45.45.0
255.255.0.0, such a host with that ip address exists and we can connect to the router through that host. Now answer A seems
incorrect!

3. CCNA Access List Sim 2

Question :
Answer and Explanation

Corp1>enable (you may enter “cisco” as it passwords here)

We should create an access-list and apply it to the interface which is connected to the Server LAN because it can filter out traffic from
both Sw-2 and Core networks. The Server LAN network has been assigned addresses of 172.22.242.17 – 172.22.242.30 so we can
guess the interface connected to them has an IP address of 172.22.242.30 (.30 is the number shown in the figure). Use the “show
running-config” command to check which interface has the IP address of 172.22.242.30.
Corp1#show running-config

We learn that interface FastEthernet0/1 is the interface connected to Server LAN network. It is the interface we will apply o ur access-
list (for outbound direction).
Corp1#configure terminal

Our access-list needs to allow host C – 192.168.33.3 to the Finance Web Server 172.22.242.23 via web (port 80)
Corp1(config)#access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80

Deny other hosts access to the Finance Web Server via web
Corp1(config)#access-list 100 deny tcp any host 172.22.242.23 eq 80

All other traffic is permitted

Corp1(config)#access-list 100 permit ip any any

Apply this access-list to Fa0/1 interface (outbound direction)

Corp1(config)#interface fa0/1
Corp1(config-if)#ip access-group 100 out

Notice: We have to apply the access-list to Fa0/1 interface (not Fa0/0 interface) so that the access-list can filter traffic coming from
both the LAN and the Core networks. If we apply access list to the inbound interface we can only filter traffic from th e LAN network.
In the exam, just click on host C to open its web browser. In the address box type http://172.22.242.23 to check if you are allowed to
access Finance Web Server via HTTP or not. If your configuration is correct then you can access it.
Click on other hosts (A, B and D) and check to make sure you can’t access Finance Web Server from these hosts.
Finally, save the configuration
Corp1(config-if)#end
Corp1#copy running-config startup-config

(This configuration only prevents hosts from accessing Finance Web Server via web but if this server supports other traffic – like FTP,
SMTP… then other hosts can access it, too.)

Notice: You might be asked to allow other host (A, B or D) to access the Finance Web Server so please read the requirement
carefully.
Some modifications (mods):
Modification 1 (Mod 1):

permit host B from accessing finance server access-list 100 permit ip host 192.168.33.2 host
172.22.242.23

deny host B from accessing other servers (not the whole access-list 100 deny ip host 192.168.33.2 172.22.242.16
network) 0.0.0.15

permit everything else access-list 100 permit ip any any

Modification 2 (Mod 2):

Only allow Host C to to access the financial server access-list 100 permit ip host 192.168.33.3 host
172.22.242.23

Not allow anyone else in any way communicate with the financial access-list 100 deny ip any host 172.22.242.23
server

Allow all other traffic access-list 100 permit ip any any

Modification 3 (Mod 3):

– Host C should be able to use a web access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80
browser(HTTP)to access the Finance Web Server

– Other types of access from host C to the Finance access-list 100 deny ip any host 172.22.242.23
Web Server should be blocked (because the requirement says we can not use more than 3 statements so
– All access from hosts in the Core or local LAN to we have to use “any” here for the hosts in the Core and hosts in local
the Finance Web Server should be blocked LAN)

– All hosts in the Core and local LAN should be access-list 100 permit ip any host
able to access the Public Web Server * (If the question asks this, surely it has to give you the IP of Public Web
Server) but in the exam you should use “access-list 100 permit ip any any”

Modification 4 (Mod 4):

 Host C should be able to use a web browser to access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80
access the financial web server

Other types of access from host C to the finance access-list 100 deny ip host 192.168.33.3 host 172.22.242.23
web server should be blocked

All hosts in the core and on the local LAN should access-list 100 permit ip any host
be able to access the Public web server * (The IP of Public Web Server will surely be given in this question) but in
the exam you should use “access-list 100 permit ip any any”

* There are some reports about the command of “All hosts in the core and on the local LAN should be able to access the Public web
server” saying that the correct command should be “access-list 100 permit ip any any”, not “access-list 100 permit ip any host (IP of
Public Web Server)”. Although I believe the second command is better but maybe you should use the first command “access-list 100
permit ip any any” instead as some reports said they got 100% when using this command (even if the question gives you the IP
address of Public Web Server). It is a bug in this sim.

(Note: Don’t forget to apply this access list to the suitable interface or you will lose points
interface fa0/1
ip access-group 100 out

And in the exam, they may slightly change the requirements, for example host A, host B instead of host C… so make sure you read
the requirement carefully and use the access-list correctly)

Notice: After typing the commands above, if you make a “ping” from other hosts (PC0, PC1, PC3) then PC4 (Finance Web Server)
can still reply because we just filter HTTP traffic, not ICMP traffic. To generate HTTP traffic, select “Web Browser” in the “Desktop”
tab of these PCs. When a web browser opens, type the IP address of Finance Web Server and you can see how traffic flows in
Simulation Mode.
4. EIGRP Troubleshooting Sim
Question :
The topology below is running EIGRP. You are required to troubleshoot and resolve the EIGRP issues between the various routers.
Use the appropriate show commands to troubleshoot the issues.

Instead of posting the output of “show run” commands we post here the commands entered on each router to reduce some useless
lines. Also you can try solving questions by yourself before reading the answers.

R1: R2: R3:

int lo0 int lo0 int lo0
ip address 10.1.1.1 255.255.255.255 ip address 10.2.2.2 255.255.255.255 ip address 10.3.3.3 255.255.255.255
int e0/0 int e0/0 int e0/0
ip address 192.168.16.1 255.255.255.0 ip address 192.168.123.2 255.255.255.0 ip address 192.168.123.3 255.255.255.0
int s1/1 int s2/1 int s2/1
 ip address 192.168.13.1 255.255.255.0 ip address 192.168.12.2 255.255.255.0 ip address 192.168.13.3 255.255.255.0
bandwidth 1000 ! !
int s1/3 router eigrp 1 router eigrp 1
ip address 192.168.12.1 255.255.255.0 network 10.2.2.2 0.0.0.0 network 10.3.3.3 0.0.0.0
! network 192.168.12.0 network 192.168.13.0
router eigrp 1 network 192.168.123.0 network 192.168.123.0
network 192.168.12.0
network 192.168.13.0
network 192.168.16.0

R4: R5: R6:

int lo0 int lo0 int lo0
ip address 10.4.4.4 255.255.255.255 ip address 10.5.5.5 255.255.255.255 ip address 10.6.6.6 255.255.255.255
int lo1 int lo1 int e0/0
ip address 10.4.4.5 255.255.255.255 ip address 10.5.5.55 255.255.255.255 ip address 192.168.16.6 255.255.255.0
int lo2 int e0/0 !
ip address 10.4.4.6 255.255.255.255 ip address 192.168.123.5 255.255.255.0 router eigrp 1
int e0/0 ! network 10.6.6.6 0.0.0.0
ip address 192.168.123.4 255.255.255.0 router eigrp 1
! network 10.5.5.5 0.0.0.0
router eigrp 2 network 10.5.5.55 0.0.0.0
network 10.4.4.4 0.0.0.0 network 10.10.10.0 0.0.0.255
network 10.4.4.5 0.0.0.0 network 192.168.123.0
network 10.4.4.6 0.0.0.0
network 192.168.123.0

Note: In the exam, this sim uses IOS version 15 so “no auto-summary” is the default setting of EIGRP. You don’t have to type it.

Question 1 :
Explanation

On R4 we see EIGRP is configured with AS 2 (router eigrp 2) while other routers are using AS 1 (router eigrp 1). Therefore R4 cannot
see other routers and vice versa.

Question 2 :
Explanation

For this question we have to check the routing table of R1 to find out the answer. Use the “show ip route” command on R1 we will get
something like this:
There are three interfaces on R5 which are Loopback0: 10.5.5.5 ; Loopback1: 10.5.5.55; Ethernet0/0: 192.168.123.5 and all of them
are advertised via 192.168.12.2 so we can conclude traffic from R1 to R5 goes through R2 (192.168.12.2 is the IP address of S2/1
interface of R2).

Note: Maybe there is another version of this question in the exam in which the answer should be “The traffic is equally load-balanced
over R2 and R3”. Therefore please check the “show ip route” output carefully to see if there are more than one route to the
destination.

Question 3 :
Explanation

From the configuration of R6 we learn that R6 is missing “network 192.168.16.0” command (the network between R1 & R6) under
EIGRP so EIGRP neighbor relationship will not be formed between them.

Note: Please check the configuration of R6 carefully. If the “network 192.168.16.0” is not missing on R6 but the “metric weights” is
configured like this:

R6:
router eigrp 1
network 10.6.6.6 0.0.0.0
network 192.168.16.0
metric weights 0 0 0 1 1 1

Then you should check if R1 has the same “metric weights” or not. If not then the answer should be “K values are mismatched”.
For your information, EIGRP K values are the scale numbers that EIGRP uses in metric calculation . Mismatched K values can
prevent neighbor relationships from being established. The syntax of “metric weights” command is:
metric weights tos k1 k2 k3 k4 k5 (with tos is the type of service and must always be zero)

Question 4 :
Explanation

R1 does not advertise its loopback 0 (10.1.1.1) to EIGRP therefore a ping to destination 10.5.5.55 (R5) from 10.1.1.1 will not be
successful because R5 does not know how to reply to R1.

5. DHCP Sim
Question 1 :
Examine the DHCP configuration between R2 and R3, R2 is configured as the DHCP server and R3 as the client.

What is the reason R3 is not receiving the IP address via DHCP?

A. On R3, DHCP is not enabled on the interface that is connected to R2.

B. On R3, the interface that is connected to R2 is in shutdown condition.

C. On R2, the interface that is connected to R3 is in shutdown condition.

D. On R2, the network statement in the DHCP pool configuration is incorrectly configured.

Answer: A

Explanation/show commands:
Question 2 :
R1 router clock is synchronized with ISP router. R2 is supposed to receive NTP updates from R1. But you observe that R2 clock
is not synchronized with R1. What is the reason R2 is not receiving NTP updates from R1?

A. R1 router Ethernet interface that is connected to R2 is placed in shutdown condition.

B. R2 router Ethernet interface that is connected to R1 is placed in shutdown condition.

C. The NTP server command not configured on R2 router.

D. The IP address that is used in the NTP configuration on R2 router is incorrect.

Answer: B

Explanation/show commands: No
picture showed to us.

Question 3 :
Why applications that are installed on PC’s in R2 LAN network 10.100.20.0/24 are unable to communicate with

server1?

A. A standard ACL statement that is configured on R1 is blocking the traffic sourced from R2 LAN network.

B. A standard ACL statement that is configured on R1 is blocking the traffic sourced from Server1 network.

C. A standard ACL statement that is configured on R2 is blocking the traffic sourced from Server1 network.

D. A standard ACL statement that is configured on R2 is blocking the traffic sourced from R2 LAN network.

Answer: C

Explanation/show commands:
Question 4 :
Users complain that they are unable to reach internet sites. You are troubleshooting internet connectivity problem at main
office. Which statement correctly identifies the problem on Router R1?

A. NAT configurations on the interfaces are incorrectly configured.

B. NAT translation statement incorrectly configured.

C. Interesting traffic for NAT ACL is incorrectly configured.

D. Only static NAT translation configured from the server, missing Dynamic NAT or Dynamic NAT overloading for internal
networks.

Answer: A

Explanation/show commands:
6. RIPv2 Sim

 Router R1 connects the main office to internet, and routers R2 and R3 are internal routers

 NAT is enabled on Router R1

 The routing protocol that is enabled between R1, R2 and R3 is RIPv2

 R1 sends default route into RIPv2 for internal routers to forward internet traffic to R1

 Server1 and Server 2 are placed in VLAN 100 and 200 respectively, and are still running on stick

Configuration with router R2.

You have console access on R1, R2, R3 and L2SW1 devices.

Use only show commands to troubleshoot the issues.

Question 1 :
Server1 and Server2 are unable to communicate with the rest of the network. Your initial check with system administrators
shows that IP address settings are correctly configured on the server side. What could be an issue?

A. The VLAN encapsulation is misconfigured on the router subinterfaces.

B. The Router is missing subinterface configuration.

C. The Trunk is not configured on the L2SW1 switch.

D. The IP address is misconfigured on the primary router interface.

Answer: A

Explanation/show command:
Question 2 :
Users in the main office complain that they are unable to reach internet sites. You observe that internet traffic that is destined
towards ISP router is not forwarded correctly on Router R1. What could be an issue?

Ping to Internet server shows the following results from R1:

R1#ping 209.165.200.225

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 209.165.200.225, timeout is 2 seconds:

…..

Success rate is 0 percent (0/5)

A. The next hop router address for the default route is incorrectly configured.

B. Default route pointing to ISP router is not configured on Router R1.

C. Default route pointing to ISP router is configured with AD of 225.

D. Router R1 configured as DHCP client is not receiving default route via DHCP from ISP router.

Answer: B

Explanation/show command:
Question 3 :
Examine R2 configuration, the traffic that is destined to R3 LAN network sourced from Router R2 is forwarded to

R1 instead R3. What could be an issue?

R2#traceroute 10.10.12.1 source 10.10.10.1

Type escape sequence to abort.
Tracing the route to 10.10.12.1
VRF info: (vrf in name/id, vrf out name/id)
1 172.16.14.1 0 msec 1 msec 0 msec
2 172.16.14.1 !H !H *
R2#
#

A. RIPv2 enabled on R3, but R3 LAN network that is not advertised into RIPv2 domain.

B. RIPv2 routing updates are suppressed between R2 and R3 using passive interface feature.

C. RIPv2 not enabled on R3.

D. No issue that is identified; this behavior is normal since default route propagated into RIPv2 domain by Router R1

Answer: C
Explanation/show command:

Question 4 :

Answer: B
Explanation/show command: