Cisco 640-802 Online Practice Questions and Exam Preparation

Cisco 640-802 Online Questions & Answers

• Question 201:

  What are three features of the IPv6 protocol? (Choose three.)

  A. optional IPsec
  B. autoconfiguration
  C. no broadcasts
  D. complicated header
  E. plug-and-play
  F. checksums
  B. autoconfiguration
  C. no broadcasts
  E. plug-and-play

  ---

  An important feature of IPv6 is that it allows plug and play option to the network devices by allowing them to configure themselves independently. It is possible to plug a node into an IPv6 network without requiring any human intervention. This feature was critical to allow network connectivity to an increasing number of mobile devices. This is accomplished by autoconfiguration. IPv6 does not implement traditional IP broadcast, i.e. the transmission of a packet to all hosts on the attached link using a special broadcast address, and therefore does not define broadcast addresses. In IPv6, the same result can be achieved by sending a packet to the link-local all nodes multicast group at address ff02::1, which is analogous to IPv4 multicast to address 224.0.0.1.

• Question 202:

  Refer to the exhibit.

  

  What commands must be configured on the 2950 switch and the router to allow communication between host 1 and host 2? (Choose two.)

  A. Router(config)# interface fastethernet 0/0 Router(config-if)# ip address 192.168.1.1 255.255.255.0 Router(config-if)# no shut down
  B. Router(config)# interface fastethernet 0/0 Router(config-if)# no shut down Router(config)# interface fastethernet 0/0.1 Router(config-subif)# encapsulation dot1q 10 Router(config-subif)# ip address 192.168.10.1 255.255.255.0 Router(config)# interface fastethernet 0/0.2 Router(config-subif)# encapsulation dot1q 20 Router(config-subif)# ip address 192.168.20.1 255.255.255.0
  C. Router(config)# router eigrp 100 Router(config-router)# network 192.168.10.0 Router(config-router)# network 192.168.20.0
  D. Switch1(config)# vlan database Switch1(config-vlan)# vtp domain XYZ Switch1(config-vlan)# vtp server
  E. Switch1(config)# interface fastethernet 0/1 Switch1(config-if)# switchport mode trunk
  F. Switch1(config)# interface vlan 1 Switch1(config-if)# ip default-gateway 192.168.1.1
  B. Router(config)# interface fastethernet 0/0 Router(config-if)# no shut down Router(config)# interface fastethernet 0/0.1 Router(config-subif)# encapsulation dot1q 10 Router(config-subif)# ip address 192.168.10.1 255.255.255.0 Router(config)# interface fastethernet 0/0.2 Router(config-subif)# encapsulation dot1q 20 Router(config-subif)# ip address 192.168.20.1 255.255.255.0
  E. Switch1(config)# interface fastethernet 0/1 Switch1(config-if)# switchport mode trunk

  ---

  The router will need to use subinterfaces, where each subinterface is assigned a VLAN and IP address for each VLAN. On the switch, the connection to the router need to be configured as a trunk using the switchport mode trunk command and it will need a default gateway for VLAN 1.

• Question 203:

  SIMULATION A network associate is adding security to the configuration of the Corp1 router. The user on host C should be able to use a web browser to access financial information from the Finance Web Server. No other hosts from the LAN nor the Core should be able to use a web browser to access this server. Since there are multiple resources for the corporation at this location including other resources on the Finance Web Server, all other traffic should be allowed. The task is to create and apply an access-list with no more than three statements that will allow ONLY host C web access to the Finance Web Server. No other hosts will have web access to the Finance Web Server. All other traffic is permitted. Access to the router CLI can be gained by clicking on the appropriate host. All passwords have been temporarily set to "cisco". The Core connection uses an IP address of 198.18.196.65. The computers in the Hosts LAN have been assigned addresses of 192.168.33.1 - 192.168.33.254 host A 192.168.33.1 host B 192.168.33.2 host C 192.168.33.3 host D 192.168.33.4 The servers in the Server LAN have been assigned addresses of 172.22.242.17 - 172.22.242.30. The Finance Web Server is assigned an IP address of 172.22.242.23.

  

  Correct Answer. Check the answer below.
  Check the answer below.

  ---

  Select the console on Corp1 router

  Configuring ACL

  Corp1>enable

  Corp1#configure terminal

  comment: To permit only Host C (192.168.33.3){source addr} to access finance server address (172.22.242.23) {destination addr} on port number 80 (web)

  Corp1(config)#access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80

  comment: To deny any source to access finance server address (172.22.242.23) {destination addr} on port number 80 (web)

  Corp1(config)#access-list 100 deny tcp any host 172.22.242.23 eq 80

  comment: To permit ip protocol from any source to access any destination because of the implicit deny any any statement at the end of ACL.

  Corp1(config)#access-list 100 permit ip any any

  Applying the ACL on the Interface

  comment: Check show ip interface brief command to identify the interface type and number by checking the IP address configured.

  Corp1(config)#interface fa 0/1

  If the ip address configured already is incorrect as well as the subnet mask. This should be corrected in order ACL to work type this commands at interface mode :

  no ip address 192.x.x.x 255.x.x.x (removes incorrect configured ipaddress and subnet mask)

  Configure Correct IP Address and subnet mask:

  ip address 172.22.242.30 255.255.255.240 ( range of address specified going to server is given as 172.22.242.17 - 172.22.242.30 )

  Comment: Place the ACL to check for packets going outside the interface towards the finance web server.

  Corp1(config-if)#ip access-group 100 out

  Corp1(config-if)#end

  Important: To save your running config to startup before exit.

  Corp1#copy running-config startup-config

  Verifying the Configuration:

  Step1: show ip interface brief command identifies the interface on which to apply access list.

  Step2: Click on each host A, B, C, and D. Host opens a web browser page, Select address box of the web browser and type the ip address of finance web server (172.22.242.23) to test whether it permits /deny access to the finance web Server.

  Step 3: Only Host C (192.168.33.3) has access to the server. If the other host can also access then maybe something went wrong in your configuration. Check whether you configured correctly and in order.

  Step 4: If only Host C (192.168.33.3) can access the Finance Web Server you can click on NEXT button to successfully submit the ACL SIM.

• Question 204:

  What is the default administrative distance of OSPF?

  A. 90
  B. 100
  C. 110
  D. 120
  C. 110

  ---

  Administrative distance is the feature that routers use in order to select the best path when there are two or more different routes to the same destination from two different routing protocols. Administrative distance defines the reliability of a

  routing protocol. Each routing protocol is prioritized in order of most to least reliable (believable) with the help of an administrative distance value.

  Default Distance Value Table

  This table lists the administrative distance default values of the protocols that Cisco supports:

  

• Question 205:

  You have been asked to come up with a subnet mask that will allow all three web servers to be on the same network while providing the maximum number of subnets. Which network address and subnet mask meet this requirement?

  A. 192.168.252.0 255.255.255.252
  B. 192.168.252.8 255.255.255.248
  C. 192.168.252.8 255.255.255.252
  D. 192.168.252.16 255.255.255.240
  E. 192.168.252.16 255.255.255.252
  B. 192.168.252.8 255.255.255.248

  ---

  A subnet mask of 255.255.255.248 will allow for up to 6 hosts to reside in this network. A subnet mask of 255.255.255.252 will allow for only 2 usable IP addresses, since we cannot use the network or broadcast address.

• Question 206:

  How is an EUI-64 format interface ID created from a 48-bit MAC address?

  A. by appending 0xFF to the MAC address
  B. by prefixing the MAC address with 0xFFEE
  C. by prefixing the MAC address with 0xFF and appending 0xFF to it
  D. by inserting 0xFFFE between the upper three bytes and the lower three bytes of the MAC address
  E. by prefixing the MAC address with 0xF and inserting 0xF after each of its first three bytes
  D. by inserting 0xFFFE between the upper three bytes and the lower three bytes of the MAC address

  ---

  The modified EUI-64 format interface identifier is derived from the 48-bit link-layer (MAC) address by inserting the hexadecimal number FFFE between the upper three bytes (OUI field) and the lower three bytes (serial number) of the link layer address.

• Question 207:

  Which command allows you to verify the encapsulation type (CISCO or IETF) for a Frame Relay link?

  A. show frame-relay lmi
  B. show frame-relay map
  C. show frame-relay pvc
  D. show interfaces serial
  B. show frame-relay map

  ---

  When connecting Cisco devices with non-Cisco devices, you must use IETF4 encapsulation on both devices. Check the encapsulation type on the Cisco device with the show frame-relay map exec command.

• Question 208:

  A network administrator needs to configure a serial link between the main office and a remote location. The router at the remote office is a non-Cisco router. How should the network administrator configure the serial interface of the main office router to make the connection?

  A. Main(config)# interface serial 0/0 Main(config-if)# ip address 172.16.1.1 255.255.255.252 Main(config-if)# no shut
  B. Main(config)# interface serial 0/0 Main(config-if)# ip address 172.16.1.1 255.255.255.252 Main(config-if)# encapsulation ppp Main(config-if)# no shut
  C. Main(config)# interface serial 0/0 Main(config-if)# ip address 172.16.1.1 255.255.255.252 Main(config-if)# encapsulation frame-relay Main(config-if)# authentication chap Main(config-if)# no shut
  D. Main(config)# interface serial 0/0 Main(config-if)#ip address 172.16.1.1 255.255.255.252 Main(config-if)#encapsulation ietf Main(config-if)# no shut
  B. Main(config)# interface serial 0/0 Main(config-if)# ip address 172.16.1.1 255.255.255.252 Main(config-if)# encapsulation ppp Main(config-if)# no shut

  ---

  With serial point to point links there are two options for the encapsulation. The default, HDLC, is Cisco proprietary and works only with other Cisco routers. The other option is PPP which is standards based and supported by all vendors.

• Question 209:

  If the primary root bridge experiences a power loss, which switch takes over?

  A. switch 0004.9A1A.C182
  B. switch 00E0.F90B.6BE3
  C. switch 00E0.F726.3DC6
  D. switch 0040.0BC0.90C5
  A. switch 0004.9A1A.C182

• Question 210:

  Refer to the exhibit.

  

  Switch port FastEthernet 0/24 on ALSwitch1 will be used to create an IEEE 802.1Q-compliant trunk to another switch. Based on the output shown, what is the reason the trunk does not form, even though the proper cabling has been attached?

  A. VLANs have not been created yet.
  B. An IP address must be configured for the port.
  C. The port is currently configured for access mode.
  D. The correct encapsulation type has not been configured.
  E. The "no shutdown" command has not been entered for the port.
  C. The port is currently configured for access mode.

  ---

  According to the output shown the switchport (layer 2 Switching) is enabled and the port is in access mode. To make a trunk link the port should configured as a trunk port, not an access port, by using the following command: (Config-if) #switchport mode trunk.