Cisco CCST-NETWORKING Online Practice Questions and Exam Preparation

Cisco CCST-NETWORKING Online Questions & Answers

• Question 1:

  Which device protects the network by permitting or denying traffic based on IP address, port number, or application?

  A. Firewall
  B. Access point
  C. VPN gateway
  D. Intrusion detection system
  A. Firewall

  ---

  explanation:

  Explanation/Reference:

  Firewall: A firewall is a network security device that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It permits or denies traffic based on IP addresses, port numbers, or applications. Access Point: This is a device that allows wireless devices to connect to a wired network using Wi-Fi. It does not perform traffic filtering based on IP, port, or application. VPN Gateway: This device allows for secure connections between networks over the internet, but it is not primarily used for traffic filtering based on IP, port, or application. Intrusion Detection System (IDS): This device monitors network traffic for suspicious activity and policy violations, but it does not actively permit or deny traffic. References: Understanding Firewalls: Firewall Basics

• Question 2:

  Which wireless security option uses a pre-shared key to authenticate clients?

  A. WPA2-Personal
  B. 802.1x
  C. 802.1q
  D. WPA2-Enterprise
  A. WPA2-Personal

  ---

  explanation:

  Explanation/Reference:

  WPA2-Personal, also known as WPA2-PSK (Pre-Shared Key), is the wireless security option that uses a pre-shared key to authenticate clients. This method is designed for home and small office networks and doesn't require an

  authentication server. Instead, every user on the network uses the same key or passphrase to connect.

  References:

  -What is a Wi-Fi Protected Access Pre-Shared Key (WPA-PSK)?

  -Exploring WPA-PSK and WiFi Security

  =========================

  -WPA2-Personal: This wireless security option uses a pre-shared key (PSK) for authentication. Each client that connects to the network must use this key to gain access. It is designed for home and small office networks where simplicity and

  ease of use are important.

  -WPA2-Enterprise: Unlike WPA2-Personal, WPA2-Enterprise uses 802.1x authentication with an authentication server (such as RADIUS) and does not rely on a pre-shared key. -802.1x: This is a network access control protocol for LANs,

  particularly wireless LANs. It provides an authentication mechanism to devices wishing to attach to a LAN or WLAN. -802.1q: This is a networking standard that supports VLAN tagging on Ethernet networks and is not related to wireless

  security.

  References:

  Cisco Documentation on WPA2 Security: Cisco WPA2 Understanding Wireless Security: Wireless Security Guide

• Question 3:

  Which two pieces of information should you include when you initially create a support ticket? (Choose 2.)

  A. A detailed description of the fault
  B. Details about the computers connected to the network
  C. A description of the conditions when the fault occurs
  D. The actions taken to resolve the fault
  E. The description of the top-down fault-finding procedure
  A. A detailed description of the fault
  C. A description of the conditions when the fault occurs

  ---

  explanation:

  Explanation/Reference:

  Statement A: "A detailed description of the fault." This is essential for support staff to understand the nature of the problem and begin troubleshooting effectively. Statement C: "A description of the conditions when the fault occurs." This helps

  in reproducing the issue and identifying patterns that might indicate the cause of the fault.

  Statement B: "Details about the computers connected to the network." While useful, this is not as immediately critical as understanding the fault itself and the conditions under which it occurs.

  Statement D: "The actions taken to resolve the fault." This is important but typically follows the initial report.

  Statement E: "The description of the top-down fault-finding procedure." This is more of a troubleshooting methodology than information typically included in an initial support ticket.

  References:

  Best Practices for Submitting Support Tickets: Support Ticket Guidelines

• Question 4:

  A user reports that a company website is not available. The help desk technician issues a tracert command to determine if the server hosting the website isreachable over the network. The output of the command is shown as follows:

  

  What can you tell from the command output?

  A. The router at hop 3 is not forwarding packets to the IP address 192.168.1.10.
  B. The server address 192.168.1.10 is being blocked by a firewall on the router at hop 3.
  C. The server with the address 192.168.1.10 is reachable over the network.
  D. Requests to the web server at 192.168.1.10 are being delayed and time out.
  C. The server with the address 192.168.1.10 is reachable over the network.

  ---

  explanation:

  Explanation/Reference:

  The tracert command output shows the path taken to reach the destination IP address, 192.168.1.10. The command output indicates:

  -Hops 1 and 2 are successfully reached.

  -Hop 3 times out, meaning the router at hop 3 did not respond to the tracert request.

  However, this does not necessarily indicate a problem with forwarding packets, as some routers may be configured to block or not respond to ICMP requests. -Hops 4 and 5 are successfully reached, with hop 5 being the destination IP

  192.168.1.10, indicating that the server is reachable.

  Thus, the correct answer is C. The server with the address 192.168.1.10 is reachable over the network.

  References:

  -Cisco Traceroute Command

  -Understanding Traceroute

  The tracert command output indicates that the server with the address 192.168.1.10 is reachable over the network. The asterisk (*) at hop 3 suggests that the probe sent to that hop did not return a response, which could be due to a variety of

  reasons such as a firewall blocking ICMP packets or the router at that hop being configured not to respond to ICMP requests. However, since the subsequent hops (4 and 5) are showing response times, it means that the packets are indeed

  getting through and the server is reachable.

  References:

  -How to Use Traceroute Command to Read Its Results

  -How to Use the Tracert Command in Windows

• Question 5:

  Which protocol allows you to securely upload files to another computer on the internet?

  A. SFTP
  B. ICMP
  C. NTP
  D. HTTP
  A. SFTP

  ---

  explanation:

  Explanation/Reference:

  SFTP, or Secure File Transfer Protocol, is a protocol that allows for secure file transfer capabilities between networked hosts. It is a secure extension of the File Transfer Protocol (FTP). SFTP encrypts both commands and data, preventing

  passwords and sensitive information from being transmitted openly over the network. It is typically used for secure file transfers over the internet and is built on the Secure Shell (SSH) protocol1.

  References:

  -What Is SFTP? (Secure File Transfer Protocol)

  -How to Use SFTP to Safely Transfer Files: A Step-by-Step Guide

  -Secure File Transfers: Best Practices, Protocols And Tools

  The Secure File Transfer Protocol (SFTP) is a secure version of the File Transfer Protocol (FTP) that uses SSH (Secure Shell) to encrypt all commands and data. This ensures that sensitive information, such as usernames, passwords, and

  files being transferred, are securely transmitted over the network.

  -ICMP (Internet Control Message Protocol) is used for network diagnostics and is not designed for file transfer.

  -NTP (Network Time Protocol) is used to synchronize clocks between computer systems and is not related to file transfer.

  -HTTP (HyperText Transfer Protocol) is used for transmitting web pages over the internet and does not inherently provide secure file transfer capabilities.

  Thus, the correct protocol that allows secure uploading of files to another computer on the internet is SFTP.

  References:

  -Cisco Learning Network

  -SFTP Overview (Cisco)

• Question 6:

  You want to store files that will be accessible by every user on your network.

  Which endpoint device do you need?

  A. Access point
  B. Server
  C. Hub
  D. Switch
  B. Server

  ---

  explanation:

  Explanation/Reference:

  To store files that will be accessible by every user on a network, you would need aserver. A server is a computer system that provides data to other computers. It can serve data to systems on a local network (LAN) or a wide network (WAN)

  over the internet.In this context, a file server would be set up to store and manage files, allowing users on the network to access them from their own devices1.

  References:

  What is a Server?

  Understanding Servers and Their Functions

  A server is a computer designed to process requests and deliver data to other computers over a local network or the internet. In this case, to store files that will be accessible by every user on the network, a file server is the appropriate

  endpoint device. It provides a centralized location for storing and managing files, allowing users to access and share files easily. A. Access point: Provides wireless connectivity to a network. C. Hub: A basic networking device that connects

  multiple Ethernet devices together, making them act as a single network segment. D. Switch: A networking device that connects devices on a computer network by using packet switching to forward data to the destination device.

  Thus, the correct answer is B. Server.

  References:

  File Server Overview (Cisco)

  Server Roles in Networking (Cisco)

• Question 7:

  A Cisco switch is not accessible from the network. You need to view its running configuration.

  Which out-of-band method can you use to access it?

  A. SNMP
  B. Console
  C. SSH
  D. Telnet
  B. Console

  ---

  explanation:

  Explanation/Reference:

  

  Out-of-band management

  When a Cisco switch is not accessible from the network, the recommended out-of-band method to access its running configuration is through theconsole port. Out-of-band management involves accessing the network device through a

  dedicated management channel that is not part of the data network.The console port provides direct access to the switch's Command Line Interface (CLI) without using the network, which is essential when the switch cannot be accessed

  remotely via the network12.

  References:

  Out-of-band (OOB) network interface configuration guidelines Out of band management configuration

  =========================

  If you have any more questions or need further assistance, feel free to ask!

• Question 8:

  A help desk technician receives the four trouble tickets listed below. Which ticket should receive the highest priority and be addressed first?

  A. Ticket 1: A user requests relocation of a printer to a different network jack in the same office. The jack must be patched and made active.
  B. Ticket 2: An online webinar is taking place in the conference room. The video conferencing equipment lost internet access.
  C. Ticket 3: A user reports that response time for a cloud-based application is slower than usual.
  D. Ticket 4: Two users report that wireless access in the cafeteria has been down for the last hour.
  B. Ticket 2: An online webinar is taking place in the conference room. The video conferencing equipment lost internet access.

  ---

  explanation:

  Explanation/Reference:

  When prioritizing trouble tickets, the most critical issues affecting business operations or high-impact activities should be addressed first. Here's a breakdown of the tickets:

  Ticket 1: Relocation of a printer, while necessary, is not urgent and does not impact critical operations.

  Ticket 2: An ongoing webinar losing internet access is critical, especially if the webinar is time-sensitive and involves multiple participants. Ticket 3: Slower response time for a cloud-based application is important but typically not as urgent as

  a complete loss of internet access for a live event. Ticket 4: Wireless access down in the cafeteria affects users but does not have the same immediate impact as a live webinar losing connectivity. Thus, the correct answer is B. Ticket 2: An

  online webinar is taking place in the conference room. The video conferencing equipment lost internet access.

  References:

  IT Help Desk Best Practices

  Prioritizing IT Support Tickets

• Question 9:

  A Cisco PoE switch is shown in the following image. Which type of port will provide both data connectivity and power to an IP phone?

  

  A. Port identified with number 2
  B. Ports identified with numbers 3 and 4
  C. Ports identified with number 6
  D. Ports identified with number 7
  C. Ports identified with number 6

  ---

  explanation:

  Explanation/Reference:

  In the provided image of the Cisco PoE switch, the ports identified with number 6 are the standard RJ-45 Ethernet ports typically found on switches that provide both data connectivity and Power over Ethernet (PoE). PoE ports are designed to

  supply power to devices such as IP phones, wireless access points, and other PoE-enabled devices directly through the Ethernet cable.

  Ports:

  2: Console port (for management and configuration)

  3 and 4: Specific function ports (often for management)

  6: RJ-45 Ethernet ports (capable of providing PoE)

  7: SFP ports (for fiber connections, typically do not provide PoE) Thus, the correct answer is C. Ports identified with number 6.

  References:

  cisco Catalyst 2960-L Series Switches Data Sheet Cisco PoE Overview

• Question 10:

  Which information is included in the header of a UDP segment?

  A. IP addresses
  B. Sequence numbers
  C. Port numbers
  D. MAC addresses
  C. Port numbers

  ---

  explanation:

  Explanation/Reference:

  The header of a UDP (User Datagram Protocol) segment includesport numbers. Specifically, it contains the source port number and the destination port number, which are used to identify the sending and receiving applications. UDP headers do not include IP addresses or MAC addresses, as those are part of the IP and Ethernet frame headers, respectively.Additionally, UDP does not use sequence numbers, which are a feature of TCP (Transmission Control Protocol) for ensuring reliable delivery of data segments1. References: Segmentation Explained with TCP and UDP Header User Datagram Protocol (UDP) - GeeksforGeeks Which three fields are used in a UDP segment header ========================= UDP Header: The header of a UDP segment includes the following key fields: IP Addresses: These are included in the IP header, not the UDP header. Sequence Numbers: These are part of the TCP header, not UDP. MAC Addresses: These are part of the Ethernet frame header and are not included in the UDP header. References: RFC 768 - User Datagram Protocol: RFC 768 Cisco Guide on UDP: Cisco UDP Guide