Cisco 640-802 Online Practice Questions and Exam Preparation

Cisco 640-802 Online Questions & Answers

• Question 171:

  If IP routing is enabled, which two commands set the gateway of last resort to the default gateway? (Choose two.)

  A. ip default-gateway 0.0.0.0
  B. ip route 172.16.2.1 0.0.0.0 0.0.0.0
  C. ip default-network 0.0.0.0
  D. ip default-route 0.0.0.0 0.0.0.0 172.16.2.1
  E. ip route 0.0.0.0 0.0.0.0 172.16.2.1
  C. ip default-network 0.0.0.0
  E. ip route 0.0.0.0 0.0.0.0 172.16.2.1

  ---

  Both the "ip default-network" and "ip route 0.0.0.0 0.0.0.0 (next hop)" commands can be used to set the default gateway in a Cisco router.

• Question 172:

  In which circumstance are multiple copies of the same unicast frame likely to be transmitted in a switched LAN?

  A. during high traffic periods
  B. after broken links are re-established
  C. when upper-layer protocols require high reliability
  D. in an improperly implemented redundant topology
  E. when a dual ring topology is in use
  D. in an improperly implemented redundant topology

  ---

  If we connect two switches via 2 or more links and do not enable STP on these switches then a loop (which creates multiple copies of the same unicast frame) will occur. It is an example of an improperly implemented redundant topology.

• Question 173:

  Which statement describes the process ID that is used to run OSPF on a router?

  A. It is globally significant and is used to represent the AS number.
  B. It is locally significant and is used to identify an instance of the OSPF database.
  C. It is globally significant and is used to identify OSPF stub areas.
  D. It is locally significant and must be the same throughout an area.
  B. It is locally significant and is used to identify an instance of the OSPF database.

  ---

  The Process ID for OSPF on a router is only locally significant and you can use the same number on each router, or each router can have a different number-it just doesn't matter. The numbers you can use are from 1 to 65,535. Don't get this confused with area numbers, which can be from 0 to 4.2 billion.

• Question 174:

  The output of the show frame-relay pvc command shows "PVC STATUS = INACTIVE". What does this mean?

  A. The PVC is configured correctly and is operating normally, but no data packets have been detected for more than five minutes.
  B. The PVC is configured correctly, is operating normally, and is no longer actively seeking the address of the remote router.
  C. The PVC is configured correctly, is operating normally, and is waiting for interesting traffic to trigger a call to the remote router.
  D. The PVC is configured correctly on the local switch, but there is a problem on the remote end of the PVC.
  E. The PVC is not configured on the local switch.
  D. The PVC is configured correctly on the local switch, but there is a problem on the remote end of the PVC.

  ---

  The PVC STATUS displays the status of the PVC. The DCE device creates and sends the report to the DTE devices. There are 4 statuses:

  +

  ACTIVE: the PVC is operational and can transmit data

  +

  INACTIVE: the connection from the local router to the switch is working, but the connection to the remote router is not available + DELETED: the PVC is not present and no LMI information is being received from the Frame Relay switch

  +

  STATIC: the Local Management Interface (LMI) mechanism on the interface is disabled (by using the "no keepalive" command). This status is rarely seen so it is ignored in some books.

• Question 175:

  Which IPv6 address is the all-router multicast group?

  A. FF02::1
  B. FF02::2
  C. FF02::3
  D. FF02::4
  B. FF02::2

  ---

  

• Question 176:

  Which two statements describe the process identifier that is used in the command to configure OSPF on a router? (Choose two.) Router(config)# router ospf 1

  A. All OSPF routers in an area must have the same process ID.
  B. Only one process number can be used on the same router.
  C. Different process identifiers can be used to run multiple OSPF processes
  D. The process number can be any number from 1 to 65,535.
  E. Hello packets are sent to each neighbor to determine the processor identifier.
  C. Different process identifiers can be used to run multiple OSPF processes
  D. The process number can be any number from 1 to 65,535.

  ---

  Multiple OSPF processes can be configured on a router using multiple process ID's. The valid process ID's are shown below:

  Edge-B(config)#router ospf ?

  <1-65535> Process ID

• Question 177:

  What are three characteristics of satellite Internet connections? (Choose three.)

  A. Their upload speed is about 10 percent of their download speed.
  B. They are frequently used by rural users without access to other high-speed connections.
  C. They are usually at least 10 times faster than analog modem connections.
  D. They are usually faster than cable and DSL connections.
  E. They require a WiMax tower within 30 miles of the user location.
  F. They use radio waves to communicate with cellular phone towers.
  A. Their upload speed is about 10 percent of their download speed.
  B. They are frequently used by rural users without access to other high-speed connections.
  C. They are usually at least 10 times faster than analog modem connections.

• Question 178:

  Which command sequence can you enter to create VLAN 20 and assign it to an interface on a switch?

  A. Switch(config)#vlan 20 Switch(config)#Interface gig x/y Switch(config-if)#switchport access vlan 20
  B. Switch(config)#Interface gig x/y Switch(config-if)#vlan 20 Switch(config-vlan)#switchport access vlan 20
  C. Switch(config)#vlan 20 Switch(config)#Interface vlan 20 Switch(config-if)#switchport trunk native vlan 20
  D. Switch(config)#vlan 20 Switch(config)#Interface vlan 20 Switch(config-if)#switchport access vlan 20
  E. Switch(config)#vlan 20 Switch(config)#Interface vlan 20 Switch(config-if)#switchport trunk allowed vlan 20
  A. Switch(config)#vlan 20 Switch(config)#Interface gig x/y Switch(config-if)#switchport access vlan 20

• Question 179:

  SIMULATION

  A corporation wants to add security to its network. The requirements are:

  Host C should be able to use a web browser (HTTP) to access the Finance Web Server.

  Other types of access from host C to the Finance Web Server should be blocked.

  All access from hosts in the Core or local LAN to the Finance Web Server should be blocked.

  All hosts in the Core and on local LAN should be able to access the Public Web Server.

  You have been tasked to create and apply a numbered access list to a single outbound interface. This access list can contain no more than three statements that meet these requirements.

  Access to the router CLI can be gained by clicking on the appropriate host.

  All passwords have been temporarily set to “cisco”.

  The Core connection uses an IP address of 198.18.209.65.

  The computers in the Hosts LAN have been assigned addresses of 192.168.78.1 – 192.168.78.254.

  -

  host A 192.168.78.1

  -

  host B 192.168.78.2

  -

  host C 192.168.78.3

  -

  host D 192.168.78.4

  The Finance Web Server has been assigned an address of 172.22.146.17.

  The Public Web Server in the Server LAN has been assigned an address of 172.22.146.18.

  

  

  Corp1(config)#access-list 100 permit tcp host 192.168.125.3 host 172.22.109.17 eq 80

  Correct Answer. Check the answer below
  Check the answer below

  ---

  We should create an access-list and apply it to the interface that is connected to the Server LAN because it can filter out traffic from both S2 and Core networks. To see which interface this is, use the “show ip int brief” command:

  

  From this, we know that the servers are located on the fa0/1 interface, so we will place our numbered access list here in the outbound direction.

  Corp1#configure terminal

  Our access-list needs to allow host C – 192.168125.3 to the Finance Web Server 172.22.109.17 via HTTP (port 80), so our first line is this:

  Then, our next two instructions are these:

  Other types of access from host C to the Finance Web Server should be blocked.

  All access from hosts in the Core or local LAN to the Finance Web Server should be blocked.

  This can be accomplished with one command (which we need to do as our ACL needs to be no more than 3 lines long), blocking all other access to the finance web server:

  Corp1(config)#access-list 100 deny ip any host 172.22.109.17

  Our last instruction is to allow all hosts in the Core and on the local LAN access to the Public Web Server (172.22.109.18)

  Corp1(config)#access-list 100 permit ip host 172.22.109.18 any

  Finally, apply this access-list to Fa0/1 interface (outbound direction)

  Corp1(config)#interface fa0/1Corp1(config-if)#ip access-group 100 out

  Notice: We have to apply the access-list to Fa0/1 interface (not Fa0/0 interface) so that the access-list can filter traffic coming from both the LAN and the Core networks.

  To verify, just click on host C to open its web browser. In the address box type http://172.22.109.17 to check if you are allowed to access Finance Web Server or not. If your configuration is correct then you can access it.

  Click on other hosts (A, B and D) and check to make sure you can't access Finance Web Server from these hosts. Then, repeat to make sure they can reach the public server at 172.22.109.18. Finally, save the configuration

  Corp1(config-if)#endCorp1#copy running-config startup-config

• Question 180:

  Which option is a valid IPv6 address?

  A. 2001:0000:130F::099a::12a
  B. 2002:7654:A1AD:61:81AF:CCC1
  C. FEC0:ABCD:WXYZ:0067::2A4
  D. 2004:1:25A4:886F::1
  D. 2004:1:25A4:886F::1

  ---

  An IPv6 address is represented as eight groups of four hexadecimal digits, each group representing 16 bits (two octets). The groups are separated by colons (:). An example of an IPv6 address is 2001:0db8:85a3:0000:0000:8a2e:0370:7334. The leading 0's in a group can be collapsed using ::, but this can only be done once in an IP address.