Cisco 640-802 Online Practice Questions and Exam Preparation

Cisco 640-802 Online Questions & Answers

• Question 11:

  Refer to the exhibit.

  

  The speed of all serial links is E1 and the speed of all Ethernet links is 100 Mb/s. A static route will be established on the Manchester router to direct traffic toward the Internet over the most direct path available. What configuration on the Manchester router will establish a route toward the Internet for traffic that originates from workstations on the Manchester LAN?

  A. ip route 0.0.0.0 255.255.255.0 172.16.100.2
  B. ip route 0.0.0.0 0.0.0.0 128.107.1.1
  C. ip route 0.0.0.0 255.255.255.252 128.107.1.1
  D. ip route 0.0.0.0 0.0.0.0 172.16.100.1
  E. ip route 0.0.0.0 0.0.0.0 172.16.100.2
  F. ip route 0.0.0.0 255.255.255.255 172.16.100.2
  E. ip route 0.0.0.0 0.0.0.0 172.16.100.2

  ---

  We use default routing to send packets with a remote destination network not in the routing table to the next-hop router. You should generally only use default routing on stub networks--those with only one exit path out of the network.

  According to exhibit, all traffic towards Internet that originates from workstations should forward to Router R1.

  Syntax for default route is:

  ip route .

• Question 12:

  What command is used to verify the DLCI destination address in a Frame Relay static configuration?

  A. show frame-relay pvc
  B. show frame-relay lmi
  C. show frame-relay map
  D. show frame relay end-to-end
  C. show frame-relay map

  ---

  Sample "show frame-relay map" output:

  R1#sh frame map

  Serial0/0 (up): ip 10.4.4.1 dlci 401(0x191,0x6410), dynamic,

  broadcast,, status defined, active

  Serial0/0 (up): ip 10.4.4.3 dlci 403(0x193,0x6430), dynamic,

  broadcast,, status defined, active

  Serial0/0 (up): ip 10.4.4.4 dlci 401(0x191,0x6410), static,

  CISCO, status defined, active

• Question 13:

  Which command would you configure globally on a Cisco router that would allow you to view directly connected Cisco devices?

  A. enable cdp
  B. cdp enable
  C. cdp run
  D. run cdp
  C. cdp run

  ---

  CDP is enabled on Cisco routers by default. If you prefer not to use the CDP capability, disable it with the no cdp run command. In order to reenable CDP, use the cdp run command in global configuration mode. The "cdp enable" command is an interface command, not global.

• Question 14:

  SIMULATION A network associate is adding security to the configuration of the Corp1 router. The user on host C should be able to use a web browser to access financial information from the Finance Web Server. No other hosts from the LAN nor the Core should be able to use a web browser to access this server. Since there are multiple resources for the corporation at this location including other resources on the Finance Web Server, all other traffic should be allowed. The task is to create and apply an access-list with no more than three statements that will allow ONLY host C web access to the Finance Web Server. No other hosts will have web access to the Finance Web Server. All other traffic is permitted.

  

  Access to the router CLI can be gained by clicking on the appropriate host. All passwords have been temporarily set to "cisco". The Core connection uses an IP address of 198.18.247.65 The computers in the Hosts LAN have been assigned addresses of 192.168.240.1 - 192.168.240.254 host A 192.168.240.1 host B 192.168.240.2 host C 192.168.240.3

  Correct Answer. Check the answer below
  Check the answer below

  ---

  Corp1#conf t Corp1(config)# access-list 128 permit tcp host 192.168.240.1 host 172.22.141.26 eq www Corp1(config)# access-list 128 deny tcp any host 172.22.141.26 eq www Corp1(config)# access-list 128 permit ip any any Corp1(config)#int fa0/1 Corp1(config-if)#ip access-group 128 out Corp1(config-if)#end Corp1#copy run startup-config

• Question 15:

  Which command is used to display the collection of OSPF link states?

  A. show ip ospf link-state
  B. show ip ospf lsa database
  C. show ip ospf neighbors
  D. show ip ospf database
  D. show ip ospf database

  ---

  The "show ip ospf database" command displays the link states. Here is an example: Here is the lsa database on R2.

  

• Question 16:

  Refer to the exhibit.

  

  According to the routing table, where will the router send a packet destined for 10.1.5.65?

  A. 10.1.1.2
  B. 10.1.2.2
  C. 10.1.3.3
  D. 10.1.4.4
  C. 10.1.3.3

  ---

  The destination IP address 10.1.5.65 belongs to 10.1.5.64/28, 10.1.5.64/29 and 10.1.5.64/27 subnets but the "longest prefix match" algorithm will choose the most specific subnet mask -> the prefix "/29 will be chosen to route the packet. Therefore the next-hop should be 10.1.3.3 ->.

• Question 17:

  What can be done to secure the virtual terminal interfaces on a router? (Choose two.)

  A. Administratively shut down the interface.
  B. Physically secure the interface.
  C. Create an access list and apply it to the virtual terminal interfaces with the access-group command.
  D. Configure a virtual terminal password and login process.
  E. Enter an access list and apply it to the virtual terminal interfaces using the access-class command.
  D. Configure a virtual terminal password and login process.
  E. Enter an access list and apply it to the virtual terminal interfaces using the access-class command.

  ---

  It is a waste to administratively shut down the interface. Moreover, someone can still access the virtual terminal interfaces via other interfaces -> We cannot physically secure a virtual interface because it is "virtual" ->.

  To apply an access list to a virtual terminal interface we must use the "access-class" command. The "access-group" command is only used to apply an access list to a physical interface -> C is not correct. The most simple way to secure the

  virtual terminal interface is to configure a username and password to prevent unauthorized login.

• Question 18:

  Refer to the exhibit.

  

  In this VLSM addressing scheme, what summary address would be sent from router A?

  A. 172.16.0.0 /16
  B. 172.16.0.0 /20
  C. 172.16.0.0 /24
  D. 172.32.0.0 /16
  E. 172.32.0.0 /17
  F. 172.64.0.0 /16
  A. 172.16.0.0 /16

  ---

  Router A receives 3 subnets: 172.16.64.0/18, 172.16.32.0/24 and 172.16.128.0/18.

  All these 3 subnets have the same form of 172.16.x.x so our summarized subnet must be also in that form -> Only A, B or .

  The smallest subnet mask of these 3 subnets is /18 so our summarized subnet must also have its subnet mask equal or smaller than /18.

  -> Only answer A has these 2 conditions ->.

• Question 19:

  Which three features are added in SNMPv3 over SNMPv2?

  A. Message Integrity
  B. Compression
  C. Authentication
  D. Encryption
  E. Error Detection
  A. Message Integrity
  C. Authentication
  D. Encryption

  ---

  Cisco IOS software supports the following versions of SNMP:

  +

  SNMPv1 ?The Simple Network Management Protocol: A Full Internet Standard, defined in RFC 1157. (RFC 1157 replaces the earlier versions that were published as RFC 1067 and RFC 1098.) Security is based on community strings.

  +

  SNMPv2c ?The community-string based Administrative Framework for SNMPv2. SNMPv2c (the "c" stands for "community") is an Experimental Internet Protocol defined in RFC 1901, RFC 1905, and RFC 1906. SNMPv2c is an update of the protocol operations and data types of SNMPv2p (SNMPv2 Classic), and uses the community-based security model of SNMPv1.

  +

  SNMPv3 ?Version 3 of SNMP. SNMPv3 is an interoperable standards-based protocol defined in RFCs 2273 to 2275. SNMPv3 provides secure access to devices by a combination of authenticating and encrypting packets over the network. The security features provided in SNMPv3 are as follows:

  ?Message integrity: Ensuring that a packet has not been tampered with in transit.

  ?Authentication: Determining that the message is from a valid source.

  ?Encryption: Scrambling the contents of a packet prevent it from being learned by an unauthorized source.

• Question 20:

  Refer to the exhibit.

  

  A junior network administrator was given the task of configuring port security on SwitchA to allow only PC_A to access the switched network through port fa0/1. If any other device is detected, the port is to drop frames from this device. The administrator configured the interface and tested it with successful pings from PC_A to RouterA, and then observes the output from these two show commands.

  Which two of these changes are necessary for SwitchA to meet the requirements? (Choose two.)

  A. Port security needs to be globally enabled.
  B. Port security needs to be enabled on the interface.
  C. Port security needs to be configured to shut down the interface in the event of a violation.
  D. Port security needs to be configured to allow only one learned MAC address.
  E. Port security interface counters need to be cleared before using the show command.
  F. The port security configuration needs to be saved to NVRAM before it can become active.
  B. Port security needs to be enabled on the interface.
  D. Port security needs to be configured to allow only one learned MAC address.

  ---

  From the output we can see that port security is disabled so this needs to be enabled. Also, the maximum number of devices is set to 2 so this needs to be just one if we want the single host to have access and nothing else.