Cisco 100-150 Online Practice Questions and Exam Preparation

Cisco 100-150 Online Questions & Answers

• Question 41:

  A Cisco switch is not accessible from the network. You need to view its running configuration. Which out-of-band method can you use to access it?

  A. SNMP
  B. Console
  C. SSH
  D. Telnet
  B. Console

  ---

  Explanation

  When a Cisco switch is not accessible from the network, the recommended out-of-band method to access its running configuration is through the console port . Out-of-band management involves accessing the network device through a dedicated management channel that is not part of the data network. The console port provides direct access to the switch's Command Line Interface (CLI) without using the network, which is essential when the switch cannot be accessed remotely via the network.

• Question 42:

  You need to connect a computer's network adapter to a switch using a 1000BASE-T cable. Which connector should you use?

  A. Coax
  B. RJ-11
  C. OS2 LC
  D. RJ-45
  D. RJ-45

  ---

  Explanation

  1000BASE-T Cable: This refers to Gigabit Ethernet over twisted-pair cables (Cat 5e or higher). Connector: RJ-45 connectors are used for Ethernet cables, including those used for 1000BASE-T. Coax: Used for cable TV and older Ethernet standards like 10BASE2. RJ-11: Used for telephone connections. OS2 LC: Used for fiber optic connections.

• Question 43:

  Which component of the AAA service security model provides identity verification?

  A. Authorization
  B. Auditing
  C. Authentication
  D. Accounting
  C. Authentication

  ---

  Explanation

  The AAA service security model consists of three components: Authentication, Authorization, and Accounting.

  Authentication: This is the process of verifying the identity of a user or device. It ensures that only legitimate users can access the network or service.

  Authorization: This determines what an authenticated user is allowed to do or access within the network.

  Auditing/Accounting: This component tracks the actions of the user, including what resources they access and what changes they make.

• Question 44:

  A user reports that they cannot access a specific website, but they can access other sites. Which tool should be used first to determine if the issue is related to DNS?

  A. tracert
  B. nslookup
  C. ping
  D. ipconfig
  B. nslookup

  ---

  Explanation

  The nslookup command is used to query DNS servers to resolve domain names into IP addresses. If the query fails, it indicates a potential DNS issue.

• Question 45:

  Which information is included in the header of a UDP segment?

  A. IP addresses
  B. Sequence numbers
  C. Port numbers
  D. MAC addresses
  C. Port numbers

  ---

  Explanation

  The header of a UDP (User Datagram Protocol) segment includes port numbers . Specifically, it contains the source port number and the destination port number, which are used to identify the sending and receiving applications. UDP headers do not include IP addresses or MAC addresses, as those are part of the IP and Ethernet frame headers, respectively. Additionally, UDP does not use sequence numbers, which are a feature of TCP (Transmission Control Protocol) for ensuring reliable delivery of data segments

• Question 46:

  A network administrator needs to verify the IP address assigned to a Windows computer. Which command should they use?

  A. ping
  B. ipconfig
  C. nslookup
  D. tracert
  B. ipconfig

  ---

  Explanation

  The ipconfig command in Windows displays the current IP address configuration of the device, including assigned IP address, subnet mask, and default gateway.

• Question 47:

  A Cisco PoE switch is shown in the following image. Which type of port will provide both data connectivity and power to an IP phone?

  

  A. Port identified with number 2
  B. Ports identified with numbers 3 and 4
  C. Ports identified with number 6
  D. Ports identified with number 7
  C. Ports identified with number 6

  ---

  Explanation

  In the provided image of the Cisco PoE switch, the ports identified with number 6 are the standard RJ-45 Ethernet ports typically found on switches that provide both data connectivity and Power over Ethernet (PoE). PoE ports are designed to supply power to devices such as IP phones, wireless access points, and other PoE- enabled devices directly through the Ethernet cable.

  Ports:

  2: Console port (for management and configuration) 3 and 4: Specific function ports (often for management)

  6: RJ-45 Ethernet ports (capable of providing PoE)

  7: SFP ports (for fiber connections, typically do not provide PoE)

• Question 48:

  A local company requires two networks in two new buildings. The addresses used in these networks must be in the private network range.

  Which two address ranges should the company use? (Choose 2.)

  Note: You will receive partial credit for each correct selection.

  A. 172.16.0.0 to 172.31.255.255
  B. 192.16.0.0 to 192.16.255.255
  C. 11.0.0.0 to 11.255.255.255
  D. 192.168.0.0 to 192.168.255.255
  A. 172.16.0.0 to 172.31.255.255
  D. 192.168.0.0 to 192.168.255.255

  ---

  Explanation

  The private IP address ranges that are set aside specifically for use within private networks and not routable on the internet are as follows:

  1.Class A: 10.0.0.0 to 10.255.255.255

  2.Class B: 172.16.0.0 to 172.31.255.255

  3.Class C: 192.168.0.0 to 192.168.255.255

  These ranges are defined by the Internet Assigned Numbers Authority (IANA) and are used for local communications within a private network.

  Given the options: A. 172.16.0.0 to 172.31.255.255 falls within the Class B private range.

  B. 192.16.0.0 to 192.16.255.255 is not a recognized private IP range.

  C. 11.0.0.0 to 11.255.255.255 is not a recognized private IP range.

  D.

  192.168.0.0 to 192.168.255.255 falls within the Class C private range.

  Therefore, the correct selections that the company should use for their private networks are A and D .

• Question 49:

  Which type of attack occurs when an attacker sends a large number of TCP SYN packets without completing the three-way handshake?

  A. ARP poisoning
  B. DNS spoofing
  C. SYN flood
  D. Man-in-the-middle attack
  C. SYN flood

  ---

  Explanation

  A SYN flood attack occurs when an attacker overwhelms a target system with a large number of incomplete TCP handshake requests, exhausting resources and preventing legitimate connections.

• Question 50:

  What is the purpose of the show ip route command on a Cisco router?

  A. Displays the running configuration of the router
  B. Shows the status of all interfaces
  C. Lists all known IP routes and how they were learned
  D. Displays the MAC address table
  C. Lists all known IP routes and how they were learned

  ---

  Explanation

  The show ip route command provides details on the router’s routing table, showing both directly connected networks and dynamically learned routes.