Cisco 642-813 Online Practice Questions and Exam Preparation

Cisco 642-813 Online Questions & Answers

• Question 161:

  When IP Source Guard with source IP filtering is enabled on an interface, which feature must be enabled on the access VLAN for that interface?

  A. DHCP snooping
  B. storm control
  C. spanning-tree portfast
  D. private VLAN
  A. DHCP snooping

• Question 162:

  A manager tells the network engineer to permit only certain VLANs across a specific trunk interface. Which option can be configured to accomplish this?

  A. allowed VLAN list
  B. VTP pruning
  C. VACL
  D. L2P tunneling
  A. allowed VLAN list

• Question 163:

  A network engineer is installing a switch for temporary workers to connect to. The engineer does not want this switch participating in Spanning Tree with the rest of the network; however, end user connectivity is still required. Which spanning-tree feature accomplishes this?

  A. BPDUblock
  B. BPDUfilter
  C. BPDUignore
  D. BPDUguard
  E. BPDUdisable
  B. BPDUfilter

• Question 164:

  SWITCH.com is an IT company that has an existing enterprise network comprised of two layer 2 only switches; DSW1 and ASW1. The topology diagram indicates their layer 2 mapping. VLAN 20 is a new VLAN that will be used to provide the shipping personnel access to the server. Corporate polices do not allow layer 3 functionality to be enabled on the switches. For security reasons, it is necessary to restrict access to VLAN 20 in the following manner:

  •

  Users connecting to VLAN 20 via portfO/1 on ASW1 must be authenticated before they are given access to the network. Authentication is to be done via a Radius server:

  •

  Radius server host: 172.120.40.46

  •

  Radius key: rad123

  •

  Authentication should be implemented as close to the host as possible.

  •

  Devices on VLAN 20 are restricted to the subnet of 172.120.40.0/24.

  •

  Packets from devices in the subnet of 172.120.40.0/24 should be allowed on VLAN 20.

  •

  Packets from devices in any other address range should be dropped on VLAN 20.

  •

  Filtering should be implemented as close to the serverfarm as possible.

  The Radius server and application servers will be installed at a future date. You have been tasked with implementing the above access control as a pre-condition to installing the servers. You must use the available IOS switch features.

  

  Check the answer below

  The configuration: Step1: Console to ASW1 from PC console 1 ASW1(config)#aaa new-model ASW1(config)#radius-server host 172.120.39.46 key rad123 ASW1(config)#aaa authentication dot1x default group radius ASW1(config)#dot1x system-auth-control ASW1(config)#inter fastEthernet 0/1 ASW1(config-if)#switchport mode access ASW1(config-if)#dot1x port-control auto ASW1(config-if)#exit ASW1#copy run start Step2: Console to DSW1 from PC console 2 DSW1(config)#ip access-list standard 10 DSW1(config-ext-nacl)#permit 172.120.40.0 0.0.0.255 DSW1(config-ext-nacl)#exit DSW1(config)#vlan access-map PASS 10 DSW1(config-access-map)#match ip address 10 DSW1(config-access-map)#action forward DSW1(config-access-map)#exit DSW1(config)#vlan access-map PASS 20 DSW1(config-access-map)#action drop DSW1(config-access-map)#exit DSW1(config)#vlan filter PASS vlan-list 20 DSW1#copy run start

• Question 165:

  Which configuration command ties the router hot standby priority to the availability of its interfaces?

  A. standby group
  B. standby priority
  C. backup interface
  D. standby track
  D. standby track

• Question 166:

  What is the maximum number of switches that can be stacked using Cisco StackWise?

  A. 4
  B. 5
  C. 8
  D. 9
  E. 10
  F. 13
  D. 9

• Question 167:

  A network engineer wants to make sure that an access switch will never become a Spanning Tree root for VLAN 5. What action will accomplish this task?

  A. adjust STP priority to the maximum value
  B. disable STP globally
  C. apply root guard to all outgoing neighbor interfaces
  D. enable MSTP and use a different revision number than all other switches
  A. adjust STP priority to the maximum value

• Question 168:

  When you configure private VLANs on a switch, which port type connects the switch to the gateway router?

  A. promiscuous
  B. community
  C. isolated
  D. trunked
  A. promiscuous

• Question 169:

  A network engineer tries to configure storm control on an EtherChannel bundle. What is the result of the configuration?

  A. The storm control settings will appear on the EtherChannel, but not on the associated physical ports.
  B. The configuration will be rejected because storm control is not supported for EtherChannel.
  C. The storm control configuration will be accepted, but will only be present on the physical interfaces.
  D. The settings will be applied to the EtherChannel bundle and all associated physical interfaces.
  D. The settings will be applied to the EtherChannel bundle and all associated physical interfaces.

• Question 170:

  Which First Hop Redundancy Protocol is an IEEE Standard?

  A. GLBP
  B. HSRP
  C. VRRP
  D. OSPF
  C. VRRP