Cisco 640-802 Online Practice Questions and Exam Preparation

Cisco 640-802 Online Questions & Answers

• Question 101:

  What are the benefits of using Netflow? (Choose three.)

  A. Network, Application and User Monitoring
  B. Network Planning
  C. Security Analysis
  D. Accounting/Billing
  A. Network, Application and User Monitoring
  C. Security Analysis
  D. Accounting/Billing

  ---

  NetFlow traditionally enables several key customer applications including:

  +

  Network Monitoring ?NetFlow data enables extensive near real time network monitoring capabilities. Flow-based analysis techniques may be utilized to visualize traffic patterns associated with individual routers and switches as well as on a network-wide basis (providing aggregate traffic or application based views) to provide proactive problem detection, efficient troubleshooting, and rapid problem resolution.

  +

  Application Monitoring and Profiling ?NetFlow data enables network managers to gain a detailed, time-based, view of application usage over the network. This information is used to plan, understand new services, and allocate network and application resources (e.g. Web server sizing and VoIP deployment) to responsively meet customer demands.

  +

  User Monitoring and Profiling ?NetFlow data enables network engineers to gain detailed understanding of customer/user utilization of network and application resources. This information may then be utilized to efficiently plan and allocate access, backbone and application resources as well as to detect and resolve potential security and policy violations.

  +

  Network Planning ?NetFlow can be used to capture data over a long period of time producing the opportunity to track and anticipate network growth and plan upgrades to increase the number of routing devices, ports, or higher- bandwidth interfaces. NetFlow services data optimizes network planning including peering, backbone upgrade planning, and routing policy planning. NetFlow helps to minimize the total cost of network operations while maximizing network performance, capacity, and reliability. NetFlow detects unwanted WAN traffic, validates bandwidth and Quality of Service (QOS) and allows the analysis of new network applications. NetFlow will give you valuable information to reduce the cost of operating your network.

  +

  Security Analysis ?NetFlow identifies and classifies DDOS attacks, viruses and worms in real-time. Changes in network behavior indicate anomalies that are clearly demonstrated in NetFlow data. The data is also a valuable forensic tool to understand and replay the history of security incidents.

  +

  Accounting/Billing ?NetFlow data provides fine-grained metering (e.g. flow data includes details such as IP addresses, packet and byte counts, timestamps, type-of-service and application ports, etc.) for highly flexible and detailed resource utilization accounting. Service providers may utilize the information for billing based on time-of-day, bandwidth usage, application usage, quality of service, etc. Enterprise customers may utilize the information for departmental charge-back or cost allocation for resource utilization.

• Question 102:

  Refer to the exhibit.

  

  When running EIGRP, what is required for RouterA to exchange routing updates with RouterC?

  A. AS numbers must be changed to match on all the routers
  B. Loopback interfaces must be configured so a DR is elected
  C. The no auto-summary command is needed on Router A and Router C
  D. Router B needs to have two network statements, one for each connected network
  A. AS numbers must be changed to match on all the routers

  ---

  This question is to examine the understanding of the interaction between EIGRP routers.

  The following information must be matched so as to create neighborhood.

  EIGRP routers to establish, must match the following information:

  1.

  AS Number;

  2.

  K value.

• Question 103:

  Refer to exhibit.

  

  A network administrator cannot establish a Telnet session with the indicated router. What is the cause of this failure?

  A. A Level 5 password is not set.
  B. An ACL is blocking Telnet access.
  C. The vty password is missing.
  D. The console password is missing.
  C. The vty password is missing.

  ---

  The login keyword has been set, but not password. This will result in the "password required, but none set" message to users trying to telnet to this router.

• Question 104:

  Which statement is correct regarding the operation of DHCP?

  A. A DHCP client uses a ping to detect address conflicts.
  B. A DHCP server uses a gratuitous ARP to detect DHCP clients.
  C. A DHCP client uses a gratuitous ARP to detect a DHCP server.
  D. If an address conflict is detected, the address is removed from the pool and an administrator must resolve the conflict.
  E. If an address conflict is detected, the address is removed from the pool for an amount of time configurable by the administrator.
  F. If an address conflict is detected, the address is removed from the pool and will not be reused until the server is rebooted.
  D. If an address conflict is detected, the address is removed from the pool and an administrator must resolve the conflict.

  ---

  An address conflict occurs when two hosts use the same IP address. During address assignment, DHCP checks for conflicts using ping and gratuitous ARP. If a conflict is detected, the address is removed from the pool. The address will not

  be assigned until the administrator resolves the conflict.

  (Reference: http://www.cisco.com/en/US/docs/ios/12_1/iproute/configuration/guide/1cddhcp.html)

• Question 105:

  What is the default Syslog facility level?

  A. local4
  B. local5
  C. local6
  D. local7
  D. local7

  ---

  By default, Cisco IOS devices, CatOS switches, and VPN 3000 Concentrators use facility local7 while Cisco PIX Firewalls use local4 to send syslog messages. Moreover, most Cisco devices provide options to change the facility level from their default value.

  Reference: http://www.ciscopress.com/articles/article.asp?p=426638

• Question 106:

  Refer to the exhibit.

  

  The following commands are executed on interface fa0/1 of 2950Switch.

  2950Switch(config-if)# switchport port-security 2950Switch(config-if)# switchport port-security mac-address sticky 2950Switch(config-if)# switchport port-security maximum 1

  The Ethernet frame that is shown arrives on interface fa0/1. What two functions will occur when this frame is received by 2950Switch? (Choose two.)

  A. The MAC address table will now have an additional entry of fa0/1 FFFF.FFFF.FFFF.
  B. Only host A will be allowed to transmit frames on fa0/1.
  C. This frame will be discarded when it is received by 2950Switch.
  D. All frames arriving on 2950Switch with a destination of 0000.00aa.aaaa will be forwarded out fa0/1.
  E. Hosts B and C may forward frames out fa0/1 but frames arriving from other switches will not be forwarded out fa0/1.
  F. Only frames from source 0000.00bb.bbbb, the first learned MAC address of 2950Switch, will be forwarded out fa0/1.
  B. Only host A will be allowed to transmit frames on fa0/1.
  D. All frames arriving on 2950Switch with a destination of 0000.00aa.aaaa will be forwarded out fa0/1.

  ---

  The configuration shown here is an example of port security, specifically port security using sticky addresses. You can use port security with dynamically learned and static MAC addresses to restrict a port's ingress traffic by limiting the MAC addresses that are allowed to send traffic into the port. When you assign secure MAC addresses to a secure port, the port does not forward ingress traffic that has source addresses outside the group of defined addresses. If you limit the number of secure MAC addresses to one and assign a single secure MAC address, the device attached to that port has the full bandwidth of the port.

  Port security with sticky MAC addresses provides many of the same benefits as port security with static MAC addresses, but sticky MAC addresses can be learned dynamically. Port security with sticky MAC addresses retains dynamically learned MAC addresses during a link-down condition.

• Question 107:

  Refer to the exhibit.

  

  A technician is troubleshooting host connectivity issues on the switches. The hosts in VLANs 10 and 15 on Sw11 are unable to communicate with hosts in the same VLANs on Sw12. Hosts in the Admin VLAN are able to communicate. The port-to-VLAN assignments are identical on the two switches. What could be the problem?

  A. The Fa0/1 port is not operational on one of the switches.
  B. The link connecting the switches has not been configured as a trunk.
  C. At least one port needs to be configured in VLAN 1 for VLANs 10 and 15 to be able to communicate.
  D. Port FastEthernet 0/1 needs to be configured as an access link on both switches.
  E. A router is required for hosts on SW11 in VLANs 10 and 15 to communicate with hosts in the same VLAN on Sw12.
  B. The link connecting the switches has not been configured as a trunk.

  ---

  In order for hosts in the same VLAN to communicate with each other over multiple switches, those switches need to be configured as trunks on their connected interfaces so that they can pass traffic from multiple VLANs.

• Question 108:

  Which two commands can be used to verify a trunk link configuration status on a given Cisco switch interface? (Choose two.)

  A. show interface trunk
  B. show interface interface
  C. show ip interface brief
  D. show interface vlan
  E. show interface switchport
  A. show interface trunk
  E. show interface switchport

  ---

  Example output from these two commands: SW3#show interface trunk Port Mode Encapsulation Status Native vlan Fa0/19 auto n-802.1q trunking 1 Fa0/20 auto n-802.1q trunking 1 Fa0/21 auto n-802.1q trunking 1 Fa0/22 auto n-802.1q trunking 1 Port Vlans allowed on trunk Fa0/19 1-4094 Fa0/20 1-4094 Fa0/21 1-4094 Fa0/22 1-4094

  SW1#show interface fast 0/2 switchport Name: Fa0/2 Switchport: Enabled Administrative Mode: dynamic desirable Operational Mode: down Administrative Trunking Encapsulation: dot1q Negotiation of TrunkinG. On Access Mode VLAN: 1 (default) Trunking Native Mode VLAN: 1 (default) Voice VLAN: none

• Question 109:

  Users on the 172.17.22.0 network cannot reach the server located on the 172.31.5.0 network. The network administrator connected to router Coffee via the console port, issued the show ip route command, and was able to ping the server.

  

  Based on the output of the show ip route command and the topology shown in the graphic, what is the cause of the failure?

  A. The network has not fully converged.
  B. IP routing is not enabled.
  C. A static route is configured incorrectly.
  D. The FastEthernet interface on Coffee is disabled.
  E. The neighbor relationship table is not correctly updated.
  F. The routing table on Coffee has not updated.
  C. A static route is configured incorrectly.

  ---

  The default route or the static route was configured with incorrect next-hop ip address 172.19.22.2. The correct IP address will be 172.18.22.2 to reach server located on 172.31.5.0 network. IP route 0.0.0.0 0.0.0.0 172.18.22.2

• Question 110:

  Refer to the exhibit.

  

  In the Frame Relay network, which IP addresses would be assigned to the interfaces with point-to-point PVCs?

  A. DLCI 16: 192.168.10.1 /24 DLCI 17: 192.168.10.1 /24 DLCI 99: 192.168.10.2 /24 DLCI 28: 192.168.10.3 /24
  B. DLCI 16: 192.168.10.1 /24 DLCI 17: 192.168.11.1 /24 DLCI 99: 192.168.12.1 /24 DLCI 28: 192.168.13.1 /24
  C. DLCI 16: 192.168.10.1 /24 DLCI 17: 192.168.11.1 /24 DLCI 99: 192.168.10.2 /24 DLCI 28: 192.168.11.2 /24
  D. DLCI 16: 192.168.10.1 /24 DLCI 17: 192.168.10.2 /24 DLCI 99: 192.168.10.3 /24 DLCI 28: 192.168.10.4 /24
  C. DLCI 16: 192.168.10.1 /24 DLCI 17: 192.168.11.1 /24 DLCI 99: 192.168.10.2 /24 DLCI 28: 192.168.11.2 /24

  ---

  With point to point PVC's, each connection needs to be in a separate subnet. The R2-R1 connection (DLCI 16 to 99) would have each router within the same subnet. Similarly, the R3-R1 connection would also be in the same subnet, but it must be in a different one than the R2-R1 connection.