Cisco 640-864 Online Practice Questions and Exam Preparation

Cisco 640-864 Online Questions & Answers

• Question 141:

  Which model of ISR is utilized for the teleworker design profile?

  A. Cisco 1900 Series
  B. Cisco 1800 Series
  C. Cisco 800 Series
  D. Cisco 500 Series
  C. Cisco 800 Series

• Question 142:

  Which three types of WAN topologies can be deployed in the Service Provider Module? (Choose three.)

  A. ring
  B. star
  C. full mesh
  D. core/edge
  E. collapsed core
  F. partial mesh
  B. star
  C. full mesh
  F. partial mesh

• Question 143:

  DRAG DROP

  Select and Place:

  

  

  ---

  The following are recommended best practices at the distribution layer:

  Use First-Hop Redundancy Protocols. Hot Standby Router Protocol (HSRP) or Gateway Load Balancing Protocol (GLBP) should be used if you implement Layer 2 links between the Layer 2 access switches and the distribution layer.

  Use Layer 3 routing protocols between the distribution and core switches to allow for fast convergence and load balancing.

  Use the distribution switches to connect Layer 2 VLANs that span multiple access layer switches.

  Use Virtual Switching System (VSS) to eliminate the use of STP and the need for HSRP.

  Cisco Press CCDA 640-864 Official Certification Guide Fourth Edition, Chapter 3

• Question 144:

  What two features are advantages of adding a secondary WAN link at the enterprise edge? (Choose two.)

  A. provides additional bandwidth and load balancing capabilities
  B. acts as a backup link in event the primary link fails
  C. reduces capital and operational costs
  D. improves security and prevents against denial of service attacks
  E. distributes traffic proactively based on link utilization
  A. provides additional bandwidth and load balancing capabilities
  B. acts as a backup link in event the primary link fails

• Question 145:

  Which three are associated with the distribution layer within the campus design? (Choose three.)

  A. access layer aggregation
  B. route summarization
  C. network trust boundary
  D. next-hop redundancy
  E. layer 2 switching
  F. port security
  G. broadcast suppression
  A. access layer aggregation
  B. route summarization
  D. next-hop redundancy

• Question 146:

  Which two routing protocols operate over NBMA point-to-multipoint networks without the use of point-to-point sub interfaces? (Choose two.)

  A. RIPv1
  B. RIPv2
  C. IS-IS
  D. EIGRP
  E. OSPF
  D. EIGRP
  E. OSPF

• Question 147:

  Your company's Cisco routers are operating with EIGRP. You need to join networks with an acquisition's heterogeneous routers at 3 sites, operating with EIGRP and OSPF. Which describes the best practice for routing protocol deployment?

  A. Apply OSPF throughout both networks
  B. Apply one-way redistribution exclusively at each location
  C. Apply two-way redistribution exclusively at each location
  D. Apply two-way redistribution at each location with a route filter at only one location
  E. Apply two-way redistribution at each location with a route filter at each location
  F. Apply EIGRP with the same autonomous system throughout both networks
  E. Apply two-way redistribution at each location with a route filter at each location

  ---

  Without filters there is possibility of routing loops. Link: http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a008009487e.shtml

• Question 148:

  What is the first step when creating a network security policy?

  A. define what should be protected
  B. investigate how likely an attack is to occur
  C. implement measures to protect assets
  D. hire a security firm to perform penetration tests
  A. define what should be protected

• Question 149:

  Cisco Identity-Based Networking Services relies heavily on the 802.1X protocol. Which other authentication solution is used hand-in-hand with 802.1X to authenticate users for network access?

  A. RADIUS
  B. LEAP
  C. IPsec
  D. TACACS
  E. ISAKMP
  A. RADIUS

  ---

  Cisco Identity-Based Network Services The Cisco Identity-Based Network Services solution is a way to authenticate host access based on policy for admission to the network. IBNS supports identity authentication, dynamic provisioning of VLANs on a per-user basis, guest VLANs, and 802.1X with port security. The 802.1 X protocol is a standards-based protocol for authenticating network clients by permitting or denying access to the network. The 802.1 X protocol operates between the end-user client seeking access and an Ethernet switch or wireless access point (AP) providing the connection to the network. In 802.1 X terminology, clients are called supplicants, and switches and APs are called authenticates. A back-end RADIUS server such as a Cisco Access Control Server (ACS) provides the user account database used to apply authentication and authorization. With an IBNS solution, the host uses 802.IX and Extensible Authentication Protocol over LANs (EAPoL) to send the credentials and initiate a session to the network. After the host and switch establish LAN connectivity, username and password credentials are requested. The client host then sends the credentials to the switch, which forwards them to the RADIUS ACS. The RADIUS ACS performs a lookup on the username and password to determine the credentials' validity. If the username and password are correct, an accept message is sent to the switch or AP to allow access to the client host. If the username and password are incorrect, the server sends a message to the switch or AP to block the host port. Figure 13-4 illustrates the communication flow of two hosts using 802.1X and KAPoL with the switch, AP, and back-end RADIUS server.

• Question 150:

  What business trend allows employees to use personal devices to access enterprise data and systems?

  A. ISE
  B. BYOD
  C. SAN
  D. IOE
  B. BYOD