Assessment System

Skip to Time Left | Skip to Navigation | Skip to Assessment Items

Take Assessment - EWAN Final Exam - CCNA Exploration: Accessing

the WAN (Version 4.0)
Top of Form
00:51:45 3100967

Time Remaining:
Bottom of Form

Top of Form

Page:
Nex 1
Showing 1 of 4 <Prev
t>
GO
Bottom of Form
1 Top of Form

Refer to the exhibit. A technician issues the show interface s0/0/0 command on R1 while
troubleshooting a network problem. What two conclusions can be determined by from the output
shown? (Choose two.)
The bandwidth has been set to the value of a T1 line.
 This interface should be configured for PPP encapsulation.

There is no failure indicated in an OSI Layer 1 or Layer 2.

The physical connection between the two routers has failed.

The IP address of S0/0/0 is invalid, given the subnet mask being used.
Bottom of Form

2 Top of Form
Why is serial communication preferred over parallel communication for long distance
Serial cables contain a single wire, resulting in faster transmission speeds.

Serial cables can take advantage of clock skew to increase the rate of transmission.

Parallel cables are more susceptible to crosstalk, resulting in more retransmissions.

Parallel cables send a single bit at a time making them slower than serial cables.
Bottom of Form

3 Top of Form
Which variable is permitted or denied by a standard access control list?
protocol type

source IP address

source MAC address

destination IP address

destination MAC address

Bottom of Form

4 Top of Form
A network administrator is instructing a technician on best practices for applying ACLs. Which two
suggestions should the administrator provide? (Choose two.)
Named ACLs are less efficient than numbered ACLs.

Standard ACLs should be applied inside the core layer.

Place standard ACLs as close to the destination as possible.

ACLs applied to outbound interfaces require fewer router resources.

 Extended ACLs should be applied closest to the source that is specified by the ACL.
Bottom of Form

5 Top of Form

Refer to the exhibit. Which data transmission technology is being represented?

TDM

PPP

HDLC

SLIP
Bottom of Form

6 Top of Form
Refer to the exhibit. A network administrator has issued the commands that are shown
on Router1 and Router2. A later review of the routing tables reveals that neither router
is learning the LAN network of the neighbor router. What is most likely the problem
with the RIPng configuration?
The serial interfaces are in different subnets.

The RIPng process is not enabled on interfaces.

The RIPng processes do not match between Router1 and Router2.

The RIPng network command is missing from the IPv6 RIP configuration.
Bottom of Form

7 Top of Form
A technician is editing and reapplying ACL 115 to a router, what is the result of adding the comman
access-list 115 permit tcp any 172.16.0.0 0.0.255.255 established to the ACL when it is reapplie
the router?
All traffic that comes from 172.16.0.0/16 will be allowed.

All TCP traffic that is destined for 172.16.0.0/16 is permitted.

Any SYN packets that are sent to 172.16.0.0/16 will be permitted.

Responses to traffic that originates from the 172.16.0.0/16 network are allowed.
Bottom of Form

8 Top of Form
What will be the result of adding the command ip dhcp excluded-address 10.10.4.1 10.10.4.5
configuration of a local router that has been configured as a DHCP server?
 Traffic that is destined for 10.10.4.1 and 10.10.4.5 will be dropped by the router.

Traffic will not be routed from clients with addresses between 10.10.4.1 and 10.10.4.5.

The DHCP server will not issue the addresses ranging from 10.10.4.1 to 10.10.4.5.
The router will ignore all traffic that comes from the DHCP servers with addresses 10.10.4.1 an
10.10.4.5.
Bottom of Form

9 Top of Form
What are three attributes of a security policy? (Choose three.)
It provides step-by-step procedures to harden routers and other network devices.

It defines acceptable and unacceptable use of network resources.

It focuses primarily on attacks from outside of the organization.

It defines a process for managing security violations.

It should not need to be altered once implemented.

It creates a basis for legal action if necessary.

Bottom of Form

10 Top of Form
What does an access control list determine when used with NAT on a Cisco router?
addresses that are to be translated

addresses that are assigned to a NAT pool

addresses that are allowed out of the router

addresses that are accessible from the inside network

Bottom of Form

11 Top of Form
Which option correctly defines the capacity through the local loop guaranteed to a customer by the
service provider?
BE

DE
 CIR

CBIR
Bottom of Form

12 Top of Form
A network administrator is working with an applications team to fix a problem that a server based
application is having with response time. The administrator has examined the network portions of
data path and identified several possible problem areas. The applications team has simultaneousl
identified potential issues with the current release of software. The network administrator begins
addressing the network issues while the applications team implements software patches.

Which statement applies to this situation?

Changes to the network will reveal problems that are caused by the new patches.

Scheduling will be more difficult if the network and software teams work independently.

It will be difficult to isolate the problem if two teams are implementing changes independently.

Results from changes will be easier to reconcile and document if each team works in isolation.
Bottom of Form

13 Top of Form
Which Frame Relay flow control mechanism is used to signal routers that they should reduce the f
rate of frames?
DE

BE

CIR

FECN

CBIR
Bottom of Form

14 Top of Form
 Refer to the exhibit. R1 is performing NAT overload for the 10.1.1.0/24 inside network. Host A has
sent a packet to Web Server. What is the destination IP address of the return packet from Web Se
when received at R1?
10.1.1.2:80

10.1.1.2:1234

172.30.20.1:1234

172.30.20.1:3333
Bottom of Form

15 Top of Form
A technician has been asked to run the Cisco SDM one-step lockdown on a customer router. Wha
be the result of this process?
It will guarantee that the network is secure.

It will implement all security configurations that Cisco AutoSecure offers.

It will automatically apply all recommended security-related configuration changes.

It will guarantee that all traffic is quarantined and checked for viruses before being forwarded.
Bottom of Form

Top of Form

Showing 1 of 4 Nex Page: <Prev

t> 1
 GO
Bottom of Form

All contents copyright 1992-2009 Cisco Systems, Inc. Privacy Statement and
Trademarks
Top of Form
1

Bottom of Form

Assessment System

Skip to Time Left | Skip to Navigation | Skip to Assessment Items

Take Assessment - EWAN Final Exam - CCNA Exploration: Accessing

the WAN (Version 4.0)
Top of Form
00:51:07 3059539

Time Remaining:
Bottom of Form

Top of Form

Page:
Nex 2
Showing 2 of 4 <Prev
t>
GO
Bottom of Form
16 Top of Form
 Refer to the exhibit. RIPv2 has been configured on all routers in the network. Routers R1 and R3 h
not received any RIP routing updates. What will fix the issue?
Enable RIP authentication on R2.

Issue the ip directed-broadcast command on R2.

Change the subnet masks to 10.11.12.0/8 and 172.16.40.0/16 on R2.

Enable CDP on R2 so that the other routers will receive routing updates.
Bottom of Form

17 Top of Form
Which encapsulation protocol when deployed on a Cisco router over a serial interface is only
compatible with another Cisco router?
PPP

SLIP

HDLC

Frame Relay
Bottom of Form

18 Top of Form
What are two major characteristics of a worm? (Choose two.)
 exploits known vulnerabilities

attaches itself to another program

executed by a predefined time or event

masquerades as an accepted program

copies itself to the host and selects new targets

Bottom of Form

19 Top of Form

Refer to the exhibit. A network administrator is attempting to configure a Frame Relay network. Th
administrator enters the commands as shown in the exhibit on R2, but the Frame Relay PVCs are
inactive. What is the problem?
The incorrect DLCI numbers are being configured on R2.

The S0/0/0 interface on R2 needs to be point-to-point.

The frame-relay map commands are missing the cisco keyword at the end.

A single router interface cannot connect to more than one Frame Relay peer at a time.
 Bottom of Form

20 Top of Form
An administrator issues the command confreg 0x2142 at the rommon 1> prompt. What is the effe
when this router is rebooted?
Contents in RAM will be erased.

Contents in RAM will be ignored.

Contents in NVRAM will be erased.

Contents in NVRAM will be ignored.

Bottom of Form

21 Top of Form
Which additional functionality is available on an interface when the encapsulation is changed from
HDLC to PPP?
flow control

error control

authentication

synchronous communication
Bottom of Form

22 Top of Form
 Refer to the exhibit. From the output of the show interfaces commands, at which OSI layer is a fa
indicated?
application

transport

network

data link

physical
Bottom of Form

23 Top of Form

Refer to the exhibit. Which option displays the correct ACL that would need to be applied inbound
the S0/0/0 interface on R2 in order to permit any type of network traffic and block all FTP traffic
coming from hosts on the 172.16.10.0/24 network going to the Internet?
 Bottom of Form

24 Top of Form
When Frame Relay encapsulation is used, what feature provides flow control and exchanges
information about the status of virtual circuits?
LCP

LMI

DLCI

Inverse ARP
Bottom of Form

25 Top of Form
A system administrator must provide Internet connectivity for ten hosts in a small remote office. Th
ISP has assigned two public IP addresses to this remote office. How can the system administrator
 configure the router to provide Internet access to all ten users at the same time?
Configure DHCP and static NAT.

Configure dynamic NAT for ten users.

Configure static NAT for all ten users.

Configure dynamic NAT with overload.

Bottom of Form

26 Top of Form

Refer to the exhibit. Headquarters is connected through the Internet to branch office A and branch
office B. Which WAN technology would be best suited to provide secure connectivity between
headquarters and both branch offices?
ATM

VPN

ISDN

Frame Relay
 broadband DSL
Bottom of Form

27 Top of Form
Which three guidelines would help contribute to creating a strong password policy? (Choose three
Once a good password is created, do not change it.

Deliberately misspell words when creating passwords.

Create passwords that are at least 8 characters in length.

Use combinations of upper case, lower case, and special characters.

Write passwords in locations that can be easily retrieved to avoid being locked out.

Use long words found in the dictionary to make passwords that are easy to remember.
Bottom of Form

28 Top of Form

Refer to the exhibit. An ACL called Managers already exists on this router. What happens if the
network administrator issues the commands as shown in the exhibit?
The commands are added to the end of the existing ACL.

The existing Managers ACL will be overwritten by the new ACL.

The router will output an error message and no changes will be made.

A duplicate Managers ACL will be created that will contain only the new commands.
Bottom of Form

29 Top of Form
Which statement is true about wildcard masks?
Inverting the subnet mask will always create the wildcard mask.

The wildcard mask performs the same function as a subnet mask.

A network or subnet bit is identified by a "1" in the wildcard mask.

 IP address bits that must be checked are identified by a "0" in the wildcard mask.
Bottom of Form

30 Top of Form
What is the function of an intrusion detection system on a network?
to restrict access to only authorized users

to detect attacks against a network and send logs to a management console

to prevents attack against the network and provide active defense mechanisms
to detect and prevent most viruses and many Trojan horse applications from spreading in the
network
Bottom of Form

Top of Form

Page:
Nex 2
Showing 2 of 4 <Prev
t>
GO
Bottom of Form

All contents copyright 1992-2009 Cisco Systems, Inc. Privacy Statement and
Trademarks
Top of Form
2

Bottom of Form

Assessment System
Skip to Time Left | Skip to Navigation | Skip to Assessment Items

Take Assessment - EWAN Final Exam - CCNA Exploration: Accessing

the WAN (Version 4.0)
Top of Form
00:50:29 3016583

Time Remaining:
Bottom of Form

Top of Form

Page:
Nex 3
Showing 3 of 4 <Prev
t>
GO
Bottom of Form
31 Top of Form

Refer to the exhibit. The network administrator creates a standard access control list to prohibit tra
from the 192.168.1.0/24 network from reaching the 192.168.2.0/24 network while still permitting
Internet access for all networks. On which router interface and in which direction should it be appli
 interface Fa0/0, inbound

interface Fa0/0, outbound

interface Fa0/1, inbound

interface Fa0/1, outbound

Bottom of Form

32 Top of Form
A network administrator has changed the VLAN configurations on his network switches over the p
weekend. How can the administrator determine if the additions and changes improved performanc
and availability on the company intranet?
Conduct a performance test and compare with the baseline that was established previously.
Interview departmental secretaries and determine if they think load time for web pages has
improved.
Determine performance on the intranet by monitoring load times of company web pages from
remote sites.
Compare the hit counts on the company web server for the current week to the values that we
recorded in previous weeks.
Bottom of Form

33 Top of Form

Refer to the exhibit. Router1 is not able to communicate with its peer that is connected to this
interface. Based on the output as shown, what is the most likely cause?
 interface reset

unplugged cable

improper LMI type

PPP negotiation failure

Bottom of Form

34 Top of Form

Refer to the exhibit. Why are the routers unable to establish a PPP session?
Interface serial 0/0/0 on CTRL must connect to interface serial 0/0/1 on BR_1.

The CHAP passwords must be different on the two routers.

The clock rate is configured on the wrong end of the link.

The IP addresses are on different subnets.

The usernames are misconfigured.

Bottom of Form

35 Top of Form
 Refer to the exhibit. What is placed in the address field in the header of a frame that will travel from
the Orlando router to the DC router?
DLCI 123

DLCI 321

10.10.10.25

10.10.10.26

MAC address of the DC router

Bottom of Form

36 Top of Form
At what physical location does the responsibilty for a WAN connection change from the user to the
service provider?
demilitarized zone (DMZ)

demarcation point

local loop

cloud
Bottom of Form

37 Top of Form
 Refer to the exhibit. A network administrator is considering updating the IOS on Router1. What
version of IOS is currently installed on Router1?
1

12.4

15

1841
Bottom of Form

38 Top of Form
An administrator is unable to receive e-mail. While troubleshooting the problem, the administrator
able to ping the local mail server IP address successfully from a remote network and can success
resolve the mail server name to an IP address via the use of the nslookup command. At what OS
layer is the problem most likely to be found?
physical layer

data link layer

network layer

application layer
Bottom of Form

39 Top of Form
A network technician accidentally deleted the IOS image from flash and rebooted the router. Whic
two options can be used to restore the IOS image? (Choose two.)
Perform a system restore through SDM.

Download the image from a TFTP server through a network connection.

Download the image from a TFTP server through a console connection.

 Establish an FTP session through an SSH connection for the image download.

Use the Xmodem protocol to download the image through a console connection.
Bottom of Form

40 Top of Form

Refer to the exhibit. Which statement correctly describes how Router1 processes an FTP request
enters interface s0/0/0 and is destined for an FTP server at IP address 192.168.1.5?
The router matches the incoming packet to the statement that was created by the
deny icmp 192.168.1.0 0.0.0.255 any command, continues comparing the packet to the
remaining statements in ACL 201 to ensure that no subsequent statements allow FTP, and the
the router drops the packet.
The router reaches the end of ACL 101 without matching a condition and drops the packet
because there is no statement that was created by the access-list 101 permit ip any any
command.
The router matches the incoming packet to the statement that was created by the
permit ip any 192.168.1.0 0.0.0.255 command and allows the packet into the router.
It matches the incoming packet to the statement that was created by the access-list 201 perm
ip any any command and allows the packet into the router.
Bottom of Form

41 Top of Form
 Refer to the exhibit. Based on the output as shown, which two statements correctly define how the
router will treat Telnet traffic that comes into interface FastEthernet 0/1? (Choose two).
Telnet to 172.16.10.0/24 is denied.

Telnet to 172.16.20.0/24 is denied.

Telnet to 172.16.0.0/24 is permitted.

Telnet to 172.16.10.0/24 is permitted.

Telnet to 172.16.20.0/24 is permitted.

Bottom of Form

42 Top of Form
While configuring a router using RIPng and dual-stack technology with IPv4 and IPv6, the
administrator receives an error message when inputting IPv4 routes. What could cause the error
message?
IPv4 is not compatible with RIPng

RIPng is incompatible with dual-stack technology.

The router interfaces have been configured with incorrect addresses.

When IPv4 and IPv6 are configured on the same interface, all IPv4 addresses are shut down i
favor of the newer technology.
Bottom of Form

43 Top of Form
 Refer to the exhibit. All devices are configured as shown in the exhibit. PC1 is unable to ping the
default gateway. What is the cause of the problem?
The default gateway is in the wrong subnet.

STP has blocked the port that PC1 is connected to.

Port Fa0/2 on S2 is assigned to the wrong VLAN.

S2 has the wrong IP address assigned to the VLAN30 interface.

Bottom of Form

44 Top of Form
Which statement about a VPN is true?
VPN link establishment and maintenance is provided by LCP.

DLCI addresses are used to identify each end of the VPN tunnel.

VPNs use virtual Layer 3 connections that are routed through the Internet.

Only IP packets can be encapsulated by a VPN for tunneling through the Internet.
Bottom of Form

45 Top of Form
What course of action will ensure data confidentiality?
 Protect data from eavesdropping.

Guarantee that no alterations are made to the data.

Ensure that only authorized users may save the data.

Prevent unauthorized users from logging into the data network.

Bottom of Form

Top of Form

Page:
Nex 3
Showing 3 of 4 <Prev
t>
GO
Bottom of Form

All contents copyright 1992-2009 Cisco Systems, Inc. Privacy Statement and
Trademarks
Top of Form
3

Bottom of Form

Assessment System

Skip to Time Left | Skip to Navigation | Skip to Assessment Items

Take Assessment - EWAN Final Exam - CCNA Exploration: Accessing

the WAN (Version 4.0)
Top of Form
00:49:54 2990648

Time Remaining:
Bottom of Form

Top of Form

Page:
Nex 4
Showing 4 of 4 <Prev
t>
GO
Bottom of Form
46 Top of Form
A network administrator is tasked with maintaining two remote locations in the same city. Both
locations use the same service provider and have the same service plan for DSL service. When
comparing download rates, it is noticed that the location on the East side of town has a faster
download rate than the location on the West side of town. How can this be explained?
The West side has a high volume of POTS traffic.

The West side of town is downloading larger packets.

The service provider is closer to the location on the East side.

More clients share a connection to the DSLAM on the West side.

Bottom of Form

47 Top of Form

Refer to the exhibit. A technician is teaching a trainee to interpret the results of various Frame Rel
troubleshooting commands. What conclusion can be drawn from the output that is shown?
Neighboring routers should use DLCI 177 to reach the Branch router.

DLCI 177 will be used to identify all broadcasts that are sent out the Branch router.
 The Branch router has the address 192.168.3.1 configured for the S0/0/0 interface.

To reach 192.168.3.1, the Branch router will use the virtual circuit that is identified by DLCI 177
Bottom of Form

48 Top of Form

Refer to the exhibit. Which configuration command would result in the output in the exhibit?
ip nat inside source static 10.1.200.254 172.16.76.3

ip nat inside source static 10.1.200.254 192.168.0.10

ip nat inside source static 172.16.76.3 10.1.200.254

ip nat inside source static 172.16.76.3 192.168.0.10

ip nat inside source static 192.168.0.10 172.16.76.3

ip nat inside source static 192.168.0.10 10.1.200.254

Bottom of Form

49 Top of Form
 Refer to the exhibit. Results of the show vlan and show vtp status commands for switches S1 an
S2 are displayed in the exhibit. VLAN 11 was created on S1. Why is VLAN 11 missing from S2?
There is a Layer 2 loop.

The VTP domain names do not match.

Only one switch can be in server mode.

S2 has a higher spanning-tree priority for VLAN 11 than S1 does.

Bottom of Form

50 Top of Form
Which combination of authentication and Layer 2 protocol should be used to establish a link betwe
a Cisco and a non-Cisco router without sending authentication information in plain text?
CHAP and HDLC

CHAP and PPP

PAP and HDLC

 PAP and PPP
Bottom of Form

51 Top of Form

Refer to the exhibit. A network administrator is tasked with completing the Frame Relay topology t
interconnects two remote sites. How should the point-to-point subinterfaces be configured on HQ t
complete the topology?
frame-relay interface-dlci 103 on Serial 0/0/0.1
frame-relay interface-dlci 203 on Serial 0/0/0.2
frame-relay interface-dlci 301 on Serial 0/0/0.1
frame-relay interface-dlci 302 on Serial 0/0/0.2
frame-relay map ip 192.168.1.1 103 broadcast on Serial 0/0/0.1
frame-relay map ip 192.168.2.2 203 broadcast on Serial 0/0/0.2
frame-relay map ip 192.168.1.1 301 broadcast on Serial 0/0/0.1
frame-relay map ip 192.168.2.2 302 broadcast on Serial 0/0/0.2
Bottom of Form

52 Top of Form
 Refer to the exhibit. Communication between two peers has failed. Based on the output that is sho
what is the most likely cause?
interface reset

unplugged cable

improper LMI type

PPP negotiation failure

Bottom of Form

Top of Form

Page:
Nex 4
Showing 4 of 4 <Prev
t>
GO
Bottom of Form

All contents copyright 1992-2009 Cisco Systems, Inc. Privacy Statement and
Trademarks
 Top of Form
4

Bottom of Form