Cisco CCST-NETWORKING Online Practice Questions and Exam Preparation

Cisco CCST-NETWORKING Online Questions & Answers

• Question 1:

  You need to connect a computer's network adapter to a switch using a 1000BASE-T cable.

  Which connector should you use?

  A. Coax
  B. RJ-11
  C. OS2 LC
  D. RJ-45
  D. RJ-45

  ---

  Explanation/Reference:

  -1000BASE-T Cable: This refers to Gigabit Ethernet over twisted-pair cables (Cat 5e or higher).

  -Connector: RJ-45 connectors are used for Ethernet cables, including those used for 1000BASE-T.

  -Coax: Used for cable TV and older Ethernet standards like 10BASE2.

  -RJ-11: Used for telephone connections.

  -OS2 LC: Used for fiber optic connections.

  References:

  -Ethernet Standards and Cables: Ethernet Cable Guide

• Question 2:

  A host is given the IP address 172.16.100.25 and the subnet mask 255.255.252.0.

  What is the CIDR notation for this address?

  A. 172.16.100.25 /23
  B. 172.16.100.25 /20
  C. 172.16.100.25 /21
  D. 172.16.100.25 /22
  D. 172.16.100.25 /22

  ---

  Explanation/Reference:

  The CIDR (Classless Inter-Domain Routing) notation for the subnet mask 255.255.252.0 is /22. This notation indicates that the first 22 bits of the IP address are used for network identification, and the remaining bits are used for host

  addresses within the network1.

  References:

  Subnet Cheat Sheet ?24 Subnet Mask, 30, 26, 27, 29, and other IP Address CIDR Network References

  =========================

  Subnet Mask to CIDR Notation: The given subnet mask is 255.255.252.0. To convert this to CIDR notation:

  Convert the subnet mask to binary: 11111111.11111111.11111100.00000000

  Count the number of consecutive 1s in the binary form: There are 22 ones.

  Therefore, the CIDR notation is /22.

  References:

  Understanding Subnetting and CIDR: Cisco CIDR Guide

• Question 3:

  DRAG DROP Move each cloud computing service model from the list on the left to the correct example on the right Note: You will receive partial credit for each correct answer.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Three virtual machines are connected by a virtual network in the cloud. Users access a web-based graphics design application in the cloud for a monthly fee.

  A company develops applications using cloud-based resources and tools.

  IaaS (Infrastructure as a Service): Provides virtualized hardware resources that customers can use to build their own computing environments. PaaS (Platform as a Service): Offers a platform with tools and services to develop, test, and deploy applications.

  SaaS (Software as a Service): Delivers fully functional applications over the internet that users can access and use without managing the underlying infrastructure.

  References:

  Cloud Service Models: Understanding IaaS, PaaS, SaaS NIST Definition of Cloud Computing:NIST Cloud Computing

• Question 4:

  What is the most compressed valid format of the IPv6 address 2001 :0db8:0000:0016:0000:001b: 2000:0056?

  A. 2001:db8: : 16: : 1b:2:56
  B. 2001:db8: : 16: : 1b: 2000: 56
  C. 2001:db8: 16: :1b:2:56
  D. 2001:db8: 0:16: :1b: 2000:56
  D. 2001:db8: 0:16: :1b: 2000:56

  ---

  Explanation/Reference:

  IPv6 addresses can be compressed by removing leading zeros and replacing consecutive groups of zeros with a double colon (::). Here's how to compress the address 2001:0db8:0000:0016:0000:001b:2000:0056:

  Remove leading zeros from each segment:

  Replace the longest sequence of consecutive zeros with a double colon (::). In this case, the two consecutive zeros between the 16 and 1b:

  Thus, the most compressed valid format of the IPv6 address is 2001:db8:0:16::1b:2000:56.

  References:

  Cisco Learning Network

  IPv6 Addressing (Cisco)

• Question 5:

  DRAG DROP

  Move the security options from the list on the left to its characteristic on the right. You may use each security option once, more than once, or not at all.

  Note: You will receive partial credit for each correct answer.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  The correct matching of the security options to their characteristics is as follows:

  WPA2-Enterprise: Uses a RADIUS server for authentication WEP: Uses a minimum of 40 bits for encryption

  WPA2-Personal: Uses AES and a pre-shared key for authentication Here's why each security option matches the characteristic:

  WPA2-Enterpriseuses a RADIUS server for authentication, which provides centralized Authentication, Authorization, and Accounting (AAA) management for users who connect and use a network service.

  WEP (Wired Equivalent Privacy)is an outdated security protocol that uses a minimum of 40 bits for encryption (and up to 104 bits), which is relatively weak by today's standards.

  WPA2-Personal(Wi-Fi Protected Access 2 - Personal) uses the Advanced Encryption Standard (AES) for encryption and a pre-shared key (PSK) for authentication, which is shared among users to access the network. These security options are essential for protecting wireless networks from unauthorized access and ensuring data privacy.

• Question 6:

  Which information is included in the header of a UDP segment?

  A. IP addresses
  B. Sequence numbers
  C. Port numbers
  D. MAC addresses
  C. Port numbers

  ---

  Explanation/Reference:

  The header of a UDP (User Datagram Protocol) segment includesport numbers. Specifically, it contains the source port number and the destination port number, which are used to identify the sending and receiving applications. UDP headers do not include IP addresses or MAC addresses, as those are part of the IP and Ethernet frame headers, respectively.Additionally, UDP does not use sequence numbers, which are a feature of TCP (Transmission Control Protocol) for ensuring reliable delivery of data segments1. References: Segmentation Explained with TCP and UDP Header User Datagram Protocol (UDP) - GeeksforGeeks Which three fields are used in a UDP segment header ========================= UDP Header: The header of a UDP segment includes the following key fields: IP Addresses: These are included in the IP header, not the UDP header. Sequence Numbers: These are part of the TCP header, not UDP. MAC Addresses: These are part of the Ethernet frame header and are not included in the UDP header. References: RFC 768 - User Datagram Protocol: RFC 768 Cisco Guide on UDP: Cisco UDP Guide

• Question 7:

  During the data encapsulation process, which OSI layer adds a header that contains MAC addressing information and a trailer used for error checking?

  A. Network
  B. Transport
  C. Data Link
  D. Session
  C. Data Link

  ---

  Explanation/Reference:

  

  OSI model During the data encapsulation process, theData Link layerof the OSI model is responsible for adding a header that contains MAC addressing information and a trailer used for error checking.The header typically includes the source and destination MAC addresses, while the trailer contains a Frame Check Sequence (FCS) which is used for error detection1. The Data Link layer ensures that messages are delivered to the proper device on a LAN using hardware addresses and translates messages from the Network layer into bits for the Physical layer to transmit. It also controls how data is placed onto the medium and is received from the medium through the physical hardware. References: The OSI Model The 7 Layers of Networking Explained in Plain English OSI Model - Network Direction Which layer adds both header and trailer to the data? What is OSI Model | 7 Layers Explained - GeeksforGeeks

• Question 8:

  HOTSPOT

  Computers in a small office are unable to access companypro.net. You run the ipconfig command on one of the computers. The results are shown in the

  exhibit.

  You need to determine if you can reach the router.

  

  Which command should you use? Complete the command by selecting the correct options from each drop-down lists.

  Hot Area:

  

  

  ---

  Explanation/Reference:

  To determine if you can reach the router, you should use thepingcommand followed by the IP address of the router. Thepingcommand is a network utility used to test the reachability of a host on an Internet Protocol (IP) network and to

  measure the round-trip time for messages sent from the originating host to a destination computer. The Default Gateway in theipconfigresults is typically the router's IP address in a home or small office network. In this case, the Default

  Gateway is192.168.0.1, which is the address you would ping to check connectivity to the router.

  References:

  How to Use the Ping Command

  Testing Network Connectivity with the Ping Command =========================

  To determine if you can reach the router, you should use thepingcommand with the IP address of the router.

  Command:ping

  Target:192.168.0.1

  So, the completed command is:

  ping 192.168.0.1

  Step by Step Comprehensive and Detailed

  ping: The ping command sends ICMP Echo Request messages to the target IP address and waits for an Echo Reply. It is commonly used to test the reachability of a network device.

  192.168.0.1: This is the IP address of the default gateway (the router) as shown in theipconfigoutput. Pinging this address will help determine if the computer can communicate with the router.

  References:

  Using the ping Command: ping Command Guide

• Question 9:

  Which command will display the following output?

  

  A. show mac-address-table
  B. show cdp neighbor
  C. show inventory
  D. show ip interface
  B. show cdp neighbor

  ---

  Explanation/Reference:

  The command that will display the output provided, which includes capability codes, local interface details, device IDs, hold times, and platform port ID capabilities, is the show cdp neighbor command. This command is used in Cisco devices

  to display current information about neighboring devices detected by Cisco Discovery Protocol (CDP), which includes details such as the interface through which the neighbor is connected, the type of device, and the port ID of the device1.

  References:

  -Cisco - show cdp neighbors

  The provided output is from the Cisco Discovery Protocol (CDP) neighbor table. The show cdp neighbor command displays information about directly connected Cisco devices, including Device ID, Local Interface, Holdtime, Capability,

  Platform, and Port ID.

  -A. show mac-address-table: Displays the MAC address table on the switch.

  -C. show inventory: Displays information about the hardware inventory of the device.

  -D. show ip interface: Displays IP interface status and configuration.

  Thus, the correct answer is B. show cdp neighbor.

  References:

  -Cisco CDP Neighbor Command

  -Understanding CDP

• Question 10:

  Which protocol allows you to securely upload files to another computer on the internet?

  A. SFTP
  B. ICMP
  C. NTP
  D. HTTP
  A. SFTP

  ---

  Explanation/Reference:

  SFTP, or Secure File Transfer Protocol, is a protocol that allows for secure file transfer capabilities between networked hosts. It is a secure extension of the File Transfer Protocol (FTP). SFTP encrypts both commands and data, preventing

  passwords and sensitive information from being transmitted openly over the network. It is typically used for secure file transfers over the internet and is built on the Secure Shell (SSH) protocol1.

  References:

  -What Is SFTP? (Secure File Transfer Protocol)

  -How to Use SFTP to Safely Transfer Files: A Step-by-Step Guide

  -Secure File Transfers: Best Practices, Protocols And Tools

  The Secure File Transfer Protocol (SFTP) is a secure version of the File Transfer Protocol (FTP) that uses SSH (Secure Shell) to encrypt all commands and data. This ensures that sensitive information, such as usernames, passwords, and

  files being transferred, are securely transmitted over the network.

  -ICMP (Internet Control Message Protocol) is used for network diagnostics and is not designed for file transfer.

  -NTP (Network Time Protocol) is used to synchronize clocks between computer systems and is not related to file transfer.

  -HTTP (HyperText Transfer Protocol) is used for transmitting web pages over the internet and does not inherently provide secure file transfer capabilities.

  Thus, the correct protocol that allows secure uploading of files to another computer on the internet is SFTP.

  References:

  -Cisco Learning Network

  -SFTP Overview (Cisco)