Cisco Cisco Certifications CCST-NETWORKING Questions & Answers

• Question 1:

  DRAG DROP

  Move the security options from the list on the left to its characteristic on the right. You may use each security option once, more than once, or not at all.

  Note: You will receive partial credit for each correct answer.

  Select and Place:

  

  Correct Answer:

  

  The correct matching of the security options to their characteristics is as follows:

  WPA2-Enterprise: Uses a RADIUS server for authentication WEP: Uses a minimum of 40 bits for encryption

  WPA2-Personal: Uses AES and a pre-shared key for authentication Here's why each security option matches the characteristic:

  WPA2-Enterpriseuses a RADIUS server for authentication, which provides centralized Authentication, Authorization, and Accounting (AAA) management for users who connect and use a network service.

  WEP (Wired Equivalent Privacy)is an outdated security protocol that uses a minimum of 40 bits for encryption (and up to 104 bits), which is relatively weak by today's standards.

  WPA2-Personal(Wi-Fi Protected Access 2 - Personal) uses the Advanced Encryption Standard (AES) for encryption and a pre-shared key (PSK) for authentication, which is shared among users to access the network. These security options

  are essential for protecting wireless networks from unauthorized access and ensuring data privacy.

• Question 2:

  DRAG DROP

  Examine the connections shown in the following image. Move the cable types on the right to the appropriate connection description on the left. You may

  use each cable type more than once or not at all.

  

  Select and Place:

  

  Correct Answer:

  

  Based on the image description provided, here are the cable types matched with the appropriate connection descriptions:

  Connects Switch S1 to Router R1 Gi0/0/1 interfaceCable Type: = Straight-through UTP Cable

  Connects Router R2 Gi0/0/0 to Router R3 Gi0/0/0 via underground conduitCable Type : = Fiber Optic Cable

  Connects Router R1 Gi0/0/0 to Router R2 Gi0/0/1Cable Type: = Crossover UTP Cable Connects Switch S3 to Server0 network interface cardCable Type: = Straight-through UTP Cable

  The choices are based on standard networking practices where:

  Straight-through UTP cablesare typically used to connect a switch to a router or a network interface card.

  Fiber optic cablesare ideal for long-distance, high-speed data transmission, such as connections through an underground conduit.

  Crossover UTP cablesare used to connect similar devices, such as router-to-router connections.

  These matches are consistent with the color-coded cables in the image: green for switch connections, yellow for router-to-router connections within the same rack, and blue for inter-rack connections. The use of these cables follows the

  Ethernet cabling standards.

  Connects Switch S1 to Router R1 Gi0/0/1 interface:

  Connects Router R2 Gi0/0/0 to Router R3 Gi0/0/0 via underground conduit:

  Connects Router R1 Gi0/0/0 to Router R2 Gi0/0/1:

  Connects Switch S3 to Server0 network interface card:

  Straight-through UTP Cable: Used to connect different devices (e.g., switch to router, switch to server).

  Crossover UTP Cable: Used to connect similar devices directly (e.g., router to router, switch to switch).

  Fiber Optic Cable: Used for long-distance and high-speed connections, often between buildings or data centers.

  References:

  Network Cable Types and Uses: Cisco Network Cables Understanding Ethernet Cabling: Ethernet Cable Guide

• Question 3:

  DRAG DROP

  Move each network type from the list on the left to the correct example on the right.

  Select and Place:

  

  Correct Answer:

  

  Two home office computers are connected to a switch by Ethernet cables. Three government buildings in the same city connect to a cable company over coaxial cables.

  A cell phone connects to a Bluetooth headset.

  A financial institution connects its branches through a telecommunications service provider.

  LAN (Local Area Network): Used for connecting devices within a small geographical area such as a single building or home. MAN (Metropolitan Area Network): Covers a larger geographical area than a LAN, typically a city or campus.

  PAN (Personal Area Network): Connects devices within the range of an individual person, such as connecting a phone to a Bluetooth headset. WAN (Wide Area Network): Spans large geographical areas, connecting multiple LANs across

  cities, countries, or continents.

  References:

  Network Types Overview: Cisco Networking Basics

  Understanding Different Network Types: Network Types Guide

• Question 4:

  DRAG DROP

  Move the MFA factors from the list on the left to their correct examples on the right. You may use each factor once, more than once, or not at all.

  Note: You will receive partial credit for each correct selection.

  Select and Place:

  

  Correct Answer:

  

  The correct matching of the MFA factors to their examples is as follows:

  Entering a one-time security code sent to your device after logging in: Possession Holding your phone to your face to be recognized: Inherence Specifying your user name and password to log on to a service: Knowledge Here's why each

  factor matches the example:

  Possession: This factor is something the user has, like a mobile device. A one- time security code sent to this device falls under this category. Inherence: This factor is something the user is, such as a biometric characteristic. Facial

  recognition using a phone is an example of this factor. Knowledge: This factor is something the user knows, like a password or PIN. Multi-Factor Authentication (MFA) enhances security by requiring two or more of these factors to verify a

  user's identity before granting access.

  Entering a one-time security code sent to your device after logging in. Holding your phone to your face to be recognized. Specifying your username and password to log on to a service.

  Possession Factor: This involves something the user has in their possession. Receiving a one-time security code on a device (e.g., phone) is an example of this. Inference Factor (Inherence/Biometric): This involves something inherent to the

  user, such as biometric verification (e.g., facial recognition or fingerprint scanning). Knowledge Factor: This involves something the user knows, such as login credentials (username and password).

  References:

  Multi-Factor Authentication (MFA) Explained: MFA Guide Understanding Authentication Factors: Authentication Factors

• Question 5:

  DRAG DROP

  Move each protocol from the list on the left to the correct TCP/IP model layer on the right.

  Note: You will receive partial credit for each correct match.

  Select and Place:

  

  Correct Answer:

  

  Here's how each protocol aligns with the correct TCP/IP model layer:

  TCP (Transmission Control Protocol): This protocol belongs to theTransportlayer, which is responsible for providing communication between applications on different hosts1.

  IP (Internet Protocol): IP is part of theInternetworklayer, which is tasked with routing packets across network boundaries to their destination. FTP (File Transfer Protocol): FTP operates at theApplicationlayer, which supports application and

  end-user processes.It is used for transferring files over the network.

  Ethernet: While not a protocol within the TCP/IP stack, Ethernet is associated with theNetwork Interfacelayer, which corresponds to the link layer of the TCP/IP model and is responsible for the physical transmission of data1. The TCP/IP

  model layers are designed to work collaboratively to transmit data from one layer to another, with each layer having specific protocols that perform functions necessary for the data transmission process.

  TCP:

  IP:

  FTP:

  Ethernet:

  Transport Layer: This layer is responsible for providing communication services directly to the application processes running on different hosts. TCP is a core protocol in this layer.

  Internetwork Layer: This layer is responsible for logical addressing, routing, and packet forwarding. IP is the primary protocol for this layer. Application Layer: This layer interfaces directly with application processes and provides common

  network services. FTP is an example of a protocol operating in this layer.

  Network Layer: In the TCP/IP model, this layer includes both the data link and physical layers of the OSI model. Ethernet is a protocol used in this layer to define network standards and communication protocols at the data link and physical

  levels.

  References:

  TCP/IP Model Overview: Cisco TCP/IP Model

  Understanding the TCP/IP Model: TCP/IP Layers

• Question 6:

  DRAG DROP

  Move each protocol from the list on the left to its correct example on the right.

  Select and Place:

  

  Correct Answer:

  

  The correct matching of the protocols to their examples is as follows:

  DHCP: Assign the reserved IP address 10.10.10.200 to a web server at your company.

  DNS: Perform a query to translate companypro.net to an IP address. ICMP: Perform a ping to ensure that a server is responding to network connections.

  Here's how each protocol corresponds to its example:

  DHCP (Dynamic Host Configuration Protocol)is used to assign IP addresses to devices on a network. In this case, DHCP would be used to assign the reserved IP address 10.10.10.200 to a web server.

  DNS (Domain Name System)is used to translate domain names into IP addresses. Therefore, to translate companypro.net to an IP address, DNS would be utilized. ICMP (Internet Control Message Protocol)is used for sending error

  messages and operational information indicating success or failure when communicating with another IP address. An example of this is using the ping command to check if a server is responding to network connections.

  These protocols are essential for the smooth operation of networks and the internet.

  Perform a query to translate companypro.net to an IP address. Assign the reserved IP address 10.10.10.200 to a web server at your company. Perform a ping to ensure that a server is responding to network connections.

  DNS (Domain Name System): DNS translates human-friendly domain names like "companypro.net" into IP addresses that computers use to identify each other on the network.

  DHCP (Dynamic Host Configuration Protocol): DHCP automatically assigns IP addresses to devices on a network, ensuring that no two devices have the same IP address.

  ICMP (Internet Control Message Protocol): ICMP is used for diagnostic or control purposes, and the ping command uses ICMP to test the reachability of a host on an IP network.

  References:

  DNS Basics: What is DNS?

  DHCP Overview: What is DHCP?

  ICMP and Ping: Understanding ICMP

• Question 7:

  DRAG DROP Move each cloud computing service model from the list on the left to the correct example on the right Note: You will receive partial credit for each correct answer.

  Select and Place:

  

  Correct Answer:

  

  Three virtual machines are connected by a virtual network in the cloud. Users access a web-based graphics design application in the cloud for a monthly fee.

  A company develops applications using cloud-based resources and tools.

  IaaS (Infrastructure as a Service): Provides virtualized hardware resources that customers can use to build their own computing environments. PaaS (Platform as a Service): Offers a platform with tools and services to develop, test, and

  deploy applications.

  SaaS (Software as a Service): Delivers fully functional applications over the internet that users can access and use without managing the underlying infrastructure.

  References:

  Cloud Service Models: Understanding IaaS, PaaS, SaaS NIST Definition of Cloud Computing:NIST Cloud Computing

• Question 8:

  A host is given the IP address 172.16.100.25 and the subnet mask 255.255.252.0.

  What is the CIDR notation for this address?

  A. 172.16.100.25 /23

  B. 172.16.100.25 /20

  C. 172.16.100.25 /21

  D. 172.16.100.25 /22

  Correct Answer: D

  The CIDR (Classless Inter-Domain Routing) notation for the subnet mask 255.255.252.0 is /22. This notation indicates that the first 22 bits of the IP address are used for network identification, and the remaining bits are used for host

  addresses within the network1.

  References:

  Subnet Cheat Sheet ?24 Subnet Mask, 30, 26, 27, 29, and other IP Address CIDR Network References

  =========================

  Subnet Mask to CIDR Notation: The given subnet mask is 255.255.252.0. To convert this to CIDR notation:

  Convert the subnet mask to binary: 11111111.11111111.11111100.00000000

  Count the number of consecutive 1s in the binary form: There are 22 ones.

  Therefore, the CIDR notation is /22.

  References:

  Understanding Subnetting and CIDR: Cisco CIDR Guide

• Question 9:

  Which command will display all the current operational settings configured on a Cisco router?

  A. show protocols

  B. show startup-config

  C. show version

  D. show running-config

  Correct Answer: D

  

  Router

  Theshow running-configcommand is used on a Cisco router to display the current operational settings that are actively configured in the router's RAM. This command outputs all the configurations that are currently being executed by the

  router, which includes interface configurations, routing protocols, access lists, and other settings. Unlikeshow startup-config, which shows the saved configuration that the router will use on the next reboot,show running-configreflects the live,

  current configuration in use. References: The information is supported by multiple sources that detail the use of Cisco commands, particularly theshow running-configcommand as the standard for viewing the active configuration on a Cisco

  device123.

  show running-config: This command displays the current configuration running on the router. It includes all the operational settings and configurations applied to the router.

  show protocols: This command shows the status of configured protocols on the router but not the entire configuration.

  show startup-config: This command displays the configuration saved in NVRAM, which is used to initialize the router on startup, but not necessarily the current running configuration. show version: This command provides information about

  the router's software version, hardware components, and uptime but does not display the running configuration.

  References:

  Cisco IOS Commands: Cisco IOS Commands

• Question 10:

  What is the most compressed valid format of the IPv6 address 2001 :0db8:0000:0016:0000:001b: 2000:0056?

  A. 2001:db8: : 16: : 1b:2:56

  B. 2001:db8: : 16: : 1b: 2000: 56

  C. 2001:db8: 16: :1b:2:56

  D. 2001:db8: 0:16: :1b: 2000:56

  Correct Answer: D

  IPv6 addresses can be compressed by removing leading zeros and replacing consecutive groups of zeros with a double colon (::). Here's how to compress the address 2001:0db8:0000:0016:0000:001b:2000:0056:

  Remove leading zeros from each segment:

  Replace the longest sequence of consecutive zeros with a double colon (::). In this case, the two consecutive zeros between the 16 and 1b:

  Thus, the most compressed valid format of the IPv6 address is 2001:db8:0:16::1b:2000:56.

  References:

  Cisco Learning Network

  IPv6 Addressing (Cisco)