Cisco 200-105 Online Practice Questions and Exam Preparation

Cisco 200-105 Online Questions & Answers

• Question 561:

  Refer to the exhibit. Which of these correctly describes the results of port security violation of an unknown packet?

  

  A. port enabled; unknown packets dropped; no SNMP or syslog messages
  B. port enabled; unknown packets dropped; SNMP or syslog messages
  C. port disabled; no SNMP or syslog messages
  D. port disabled; SNMP or syslog messages
  D. port disabled; SNMP or syslog messages

  ---

  Configuring Port Security

  http://packetlife.net/blog/2010/may/3/port-security/

  We can view the default port security configuration with show port-security:

  

  Switchport Security Violations The second piece of switchport port-security that must be understood is a security violation including what it is what causes it and what the different violation modes that exist. A switchport violation occurs in one of two situations: When the maximum number of secure MAC addresses has been reached (by default, the maximum number of secure MAC addresses per switchport is limited to 1) An address learned or configured on one secure interface is seen on another secure interface in the same VLAN The action that the device takes when one of these violations occurs can be configured: Protect--This mode permits traffic from known MAC addresses to continue to be forwarded while dropping traffic from unknown MAC addresses when over the allowed MAC address limit. When configured with this mode, no notification action is taken when traffic is dropped. Restrict--This mode permits traffic from known MAC addresses to continue to be forwarded while dropping traffic from unknown MAC addresses when over the allowed MAC address limit. When configured with this mode, a syslog message is logged, a Simple Network Management Protocol (SNMP) trap is sent, and a violation counter is incremented when traffic is dropped. Shutdown--This mode is the default violation mode; when in this mode, the switch will automatically force the switchport into an error disabled (err-disable) state when a violation occurs. While in this state, the switchport forwards no traffic. The switchport can be brought out of this error disabled state by issuing the errdisable recovery cause CLI command or by disabling and re-enabling the switchport. Shutdown VLAN--This mode mimics the behavior of the shutdown mode but limits the error disabled state the specific violating VLAN.

  Reference: http://www.ciscopress.com/articles/article.asp?p=1722561

• Question 562:

  DRAG DROP

  Two EIGRP routers have failed to establish a neighbor relationship. Drag and drop the configuration parameters from the left onto the categories on the right.

  Select and Place:

  

  

• Question 563:

  Refer to the exhibit.

  Some 2950 series switches are connected to the conference area of the corporate headquarters network. The switches provide two to three jacks per conference room to host laptop connections for employees who visit the headquarters office. When large groups of employees come from other locations, the network administrator often finds that hubs have been connected to wall jacks in the conference area although the ports on the access layer switches were not intended to support multiple workstations.

  

  What action could the network administrator take to prevent access by multiple laptops through a single switch port and still leave the switch functional for its intended use?

  A. Configure static entries in the switch MAC address table to include the range of addresses used by visiting employees.
  B. Configure an ACL to allow only a single MAC address to connect to the switch at one time.
  C. Use the mac-address-table 1 global configuration command to limit each port to one source MAC address.
  D. Implement Port Security on all interfaces and use the port-security maximum 1 command to limit port access to a single MAC address.
  E. Implement Port Security on all interfaces and use the port-security mac-address sticky command to limit access to a single MAC address.
  F. Implement Port Security at global configuration mode and use the port-security maximum 1 command to allow each switch only one attached hub.
  D. Implement Port Security on all interfaces and use the port-security maximum 1 command to limit port access to a single MAC address.

• Question 564:

  Where must you configure switch-level global features on a switch stack?

  A. on the stack master
  B. on the stack master and each individual stack member
  C. on the stack master or any individual stack member
  D. on each individual stack member
  A. on the stack master

• Question 565:

  Refer to the exhibit. You are connected to the router as user Mike.

  Which command allows you to see output from the OSPF debug command?

  

  A. terminal monitor
  B. show debugging
  C. show sessions
  D. show ip ospf interface
  A. terminal monitor

• Question 566:

  What are two characteristics of a switch that is configured as a VTP client? (Choose two.)

  A. If a switch that is configured to operate in client mode cannot access a VTP server, then the switch reverts to transparent mode.
  B. On switches that are configured to operate in client mode, VLANs can be created, deleted, or renamed locally.
  C. The local VLAN configuration is updated only when an update that has a higher configuration revision number is received.
  D. VTP advertisements are not forwarded to neighboring switches that are configured in VTP transparent mode.
  E. VTP client is the default VTP mode.
  F. When switches in VTP client mode are rebooted, they send a VTP advertisement request to the VTP servers.
  C. The local VLAN configuration is updated only when an update that has a higher configuration revision number is received.
  F. When switches in VTP client mode are rebooted, they send a VTP advertisement request to the VTP servers.

  ---

  VLAN Trunking Protocol (VTP)

  VTP Modes

  Server Mode Once VTP is configured on a Cisco switch, the default mode used is Server Mode. In any given VTP management domain, at least one switch must be in Server Mode. When in Server Mode, a switch can be used to add, delete,

  and modify VLANs, and this information will be passed to all other switches in the VTP management domain. Client Mode When a switch is configured to use VTP Client Mode, it is simply the recipient of any VLANs added, deleted, or

  modified by a switch in Server Mode within the same management domain. A switch in VTP client mode cannot make any changes to VLAN information. Transparent Mode A switch in VTP Transparent Mode will pass VTP updates received

  by switches in Server Mode to other switches in the VTP management domain, but will not actually process the contents of these messages. When individual VLANs are added, deleted, or modified on a switch running in transparent mode,

  the changes are local to that particular switch only, and are not passed to other switches in the VTP management domain.

  Reference: http://archive.networknewz.com/2004/0317.html

• Question 567:

  Which feature can prevent a rogue device from assuming the role of the root bridge in a switching domain?

  A. VTP
  B. BPDU Filter
  C. DTP
  D. Root Guard
  B. BPDU Filter

• Question 568:

  Which three of these statements regarding 802.1Q trunking are correct? (Choose three.)

  A. 802.1Q native VLAN frames are untagged by default.
  B. 802.1Q trunking ports can also be secure ports.
  C. 802.1Q trunks can use 10 Mb/s Ethernet interfaces.
  D. 802.1Q trunks require full-duplex, point-to-point connectivity.
  E. 802.1Q trunks should have native VLANs that are the same at both ends.
  A. 802.1Q native VLAN frames are untagged by default.
  C. 802.1Q trunks can use 10 Mb/s Ethernet interfaces.
  E. 802.1Q trunks should have native VLANs that are the same at both ends.

  ---

  CCNA Self-Study (ICND Exam): Extending Switched Networks with Virtual LANs

  Reference: http://www.ciscopress.com/articles/article.asp?p=102157andseqNum=2

• Question 569:

  What is the effect of the switchport voice vlan 20 command?

  A. It assigns the interface to a voice VLAN
  B. It displays the voice VLAN configuration of the interface
  C. It configures priority tagging for voice traffic on VLAN 20
  D. It configures the interface as an access port
  A. It assigns the interface to a voice VLAN

• Question 570:

  In order to comply with new auditing standards, a security administrator must be able to correlate system security alert logs directly with the employee who triggers the alert.

  Which of the following should the security administrator implement in order to meet this requirement?

  A. Access control lists on file servers
  B. Elimination of shared accounts
  C. Group-based privileges for accounts
  D. Periodic user account access reviews
  D. Periodic user account access reviews