Cisco CCST-NETWORKING Online Practice Questions and Exam Preparation

Cisco CCST-NETWORKING Online Questions & Answers

• Question 31:

  Which component of the AAA service security model provides identity verification?

  A. Authorization
  B. Auditing
  C. Authentication
  D. Accounting
  C. Authentication

  ---

  Explanation/Reference:

  The AAA service security model consists of three components: Authentication, Authorization, and Accounting.

  -Authentication: This is the process of verifying the identity of a user or device. It ensures that only legitimate users can access the network or service.-Authorization: This determines what an authenticated user is allowed to do or access

  within the network.

  -Auditing/Accounting: This component tracks the actions of the user, including what resources they access and what changes they make.

  Thus, the correct answer is C. Authentication.

  References :

  -Cisco AAA Overview

  -Understanding AAA (Authentication, Authorization, and Accounting)

• Question 32:

  A user reports that a company website is not available. The help desk technician issues a tracert command to determine if the server hosting the website isreachable over the network. The output of the command is shown as follows:

  

  What can you tell from the command output?

  A. The router at hop 3 is not forwarding packets to the IP address 192.168.1.10.
  B. The server address 192.168.1.10 is being blocked by a firewall on the router at hop 3.
  C. The server with the address 192.168.1.10 is reachable over the network.
  D. Requests to the web server at 192.168.1.10 are being delayed and time out.
  C. The server with the address 192.168.1.10 is reachable over the network.

  ---

  Explanation/Reference:

  The tracert command output shows the path taken to reach the destination IP address, 192.168.1.10. The command output indicates:

  -Hops 1 and 2 are successfully reached.

  -Hop 3 times out, meaning the router at hop 3 did not respond to the tracert request.

  However, this does not necessarily indicate a problem with forwarding packets, as some routers may be configured to block or not respond to ICMP requests. -Hops 4 and 5 are successfully reached, with hop 5 being the destination IP

  192.168.1.10, indicating that the server is reachable.

  Thus, the correct answer is C. The server with the address 192.168.1.10 is reachable over the network.

  References:

  -Cisco Traceroute Command

  -Understanding Traceroute

  The tracert command output indicates that the server with the address 192.168.1.10 is reachable over the network. The asterisk (*) at hop 3 suggests that the probe sent to that hop did not return a response, which could be due to a variety of

  reasons such as a firewall blocking ICMP packets or the router at that hop being configured not to respond to ICMP requests. However, since the subsequent hops (4 and 5) are showing response times, it means that the packets are indeed

  getting through and the server is reachable.

  References:

  -How to Use Traceroute Command to Read Its Results

  -How to Use the Tracert Command in Windows

• Question 33:

  Which two pieces of information should you include when you initially create a support ticket? (Choose 2.)

  A. A detailed description of the fault
  B. Details about the computers connected to the network
  C. A description of the conditions when the fault occurs
  D. The actions taken to resolve the fault
  E. The description of the top-down fault-finding procedure
  A. A detailed description of the fault
  C. A description of the conditions when the fault occurs

  ---

  Explanation/Reference:

  Statement A: "A detailed description of the fault." This is essential for support staff to understand the nature of the problem and begin troubleshooting effectively. Statement C: "A description of the conditions when the fault occurs." This helps

  in reproducing the issue and identifying patterns that might indicate the cause of the fault.

  Statement B: "Details about the computers connected to the network." While useful, this is not as immediately critical as understanding the fault itself and the conditions under which it occurs.

  Statement D: "The actions taken to resolve the fault." This is important but typically follows the initial report.

  Statement E: "The description of the top-down fault-finding procedure." This is more of a troubleshooting methodology than information typically included in an initial support ticket.

  References:

  Best Practices for Submitting Support Tickets: Support Ticket Guidelines

• Question 34:

  Which device protects the network by permitting or denying traffic based on IP address, port number, or application?

  A. Firewall
  B. Access point
  C. VPN gateway
  D. Intrusion detection system
  A. Firewall

  ---

  Explanation/Reference:

  Firewall: A firewall is a network security device that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It permits or denies traffic based on IP addresses, port numbers, or applications. Access Point: This is a device that allows wireless devices to connect to a wired network using Wi-Fi. It does not perform traffic filtering based on IP, port, or application. VPN Gateway: This device allows for secure connections between networks over the internet, but it is not primarily used for traffic filtering based on IP, port, or application. Intrusion Detection System (IDS): This device monitors network traffic for suspicious activity and policy violations, but it does not actively permit or deny traffic. References: Understanding Firewalls: Firewall Basics

• Question 35:

  A user initiates a trouble ticket stating that an external web page is not loading. You determine that other resources both internal and external are still reachable.

  Which command can you use to help locate where the issue is in the network path to the external web page?

  A. ping -t
  B. tracert
  C. ipconfig/all
  D. nslookup
  B. tracert

  ---

  Explanation/Reference:

  The tracert command is used to determine the route taken by packets across an IP network. When a user reports that an external web page is not loading, while other resources are accessible, it suggests there might be an issue at a certain

  point in the network path to the specific web page. The tracert command helps to diagnose where the breakdown occurs by displaying a list of routers that the packets pass through on their way to the destination. It can identify the network

  segment where the packets stop progressing,

  which is valuable for pinpointing where the connectivity issue lies. References := Cisco

  CCST Networking Certification FAQs ?CISCONET Training Solutions, Command Prompt (CMD): 10 network-related commands you should know, Network Troubleshooting Commands Guide: Windows, Macand; Linux - Comparitech, How to

  Use the Traceroute and Ping Commands to Troubleshoot Network, Network Troubleshooting Techniques: Ping, Traceroute, PathPing. -tracert Command: This command is used to determine the path packets take to reach a destination. It

  lists all the hops (routers) along the way and can help identify where the delay or failure occurs. -ping -t: This command sends continuous ping requests and is useful for determining if a host is reachable but does not provide path information.

  -ipconfig /all: This command displays all current TCP/IP network configuration values and can be used to verify network settings but not to trace a network path.

  -nslookup: This command queries the DNS to obtain domain name or IP address mapping,

  useful for DNS issues but not for tracing network paths.

  References:

  -Microsoft tracert Command: tracert Command Guide

  -Troubleshooting Network Issues with tracert: Network Troubleshooting Guide

• Question 36:

  Which address is included in the 192.168.200.0/24 network?

  A. 192.168.199.13
  B. 192.168.200.13
  C. 192.168.201.13
  D. 192.168.1.13
  B. 192.168.200.13

  ---

  Explanation/Reference:

  192.168.200.0/24 Network: This subnet includes all addresses from 192.168.200.0 to 192.168.200.255. The /24 indicates a subnet mask of 255.255.255.0, which allows for 256 addresses.

  192.168.199.13: This address is in the 192.168.199.0/24 subnet, not the 192.168.200.0/24 subnet.

  192.168.200.13: This address is within the 192.168.200.0/24 subnet. ?92.168.201.13: This address is in the 192.168.201.0/24 subnet, not the 192.168.200.0/24 subnet.

  192.168.1.13: This address is in the 192.168.1.0/24 subnet, not the 192.168.200.0/24 subnet.

  References:

  Subnetting Guide: Subnetting Basics

• Question 37:

  DRAG DROP

  Move the MFA factors from the list on the left to their correct examples on the right. You may use each factor once, more than once, or not at all.

  Note: You will receive partial credit for each correct selection.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  The correct matching of the MFA factors to their examples is as follows:

  Entering a one-time security code sent to your device after logging in: Possession Holding your phone to your face to be recognized: Inherence Specifying your user name and password to log on to a service: Knowledge Here's why each factor matches the example:

  Possession: This factor is something the user has, like a mobile device. A one- time security code sent to this device falls under this category. Inherence: This factor is something the user is, such as a biometric characteristic. Facial recognition using a phone is an example of this factor. Knowledge: This factor is something the user knows, like a password or PIN. Multi-Factor Authentication (MFA) enhances security by requiring two or more of these factors to verify a user's identity before granting access.

  Entering a one-time security code sent to your device after logging in. Holding your phone to your face to be recognized. Specifying your username and password to log on to a service.

  Possession Factor: This involves something the user has in their possession. Receiving a one-time security code on a device (e.g., phone) is an example of this. Inference Factor (Inherence/Biometric): This involves something inherent to the user, such as biometric verification (e.g., facial recognition or fingerprint scanning). Knowledge Factor: This involves something the user knows, such as login credentials (username and password).

  References:

  Multi-Factor Authentication (MFA) Explained: MFA Guide Understanding Authentication Factors: Authentication Factors

• Question 38:

  DRAG DROP

  Move each protocol from the list on the left to the correct TCP/IP model layer on the right.

  Note: You will receive partial credit for each correct match.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Here's how each protocol aligns with the correct TCP/IP model layer:

  TCP (Transmission Control Protocol): This protocol belongs to theTransportlayer, which is responsible for providing communication between applications on different hosts1.

  IP (Internet Protocol): IP is part of theInternetworklayer, which is tasked with routing packets across network boundaries to their destination. FTP (File Transfer Protocol): FTP operates at theApplicationlayer, which supports application and end-user processes.It is used for transferring files over the network.

  Ethernet: While not a protocol within the TCP/IP stack, Ethernet is associated with theNetwork Interfacelayer, which corresponds to the link layer of the TCP/IP model and is responsible for the physical transmission of data1. The TCP/IP model layers are designed to work collaboratively to transmit data from one layer to another, with each layer having specific protocols that perform functions necessary for the data transmission process.

  TCP:

  IP:

  FTP:

  Ethernet:

  Transport Layer: This layer is responsible for providing communication services directly to the application processes running on different hosts. TCP is a core protocol in this layer.

  Internetwork Layer: This layer is responsible for logical addressing, routing, and packet forwarding. IP is the primary protocol for this layer. Application Layer: This layer interfaces directly with application processes and provides common network services. FTP is an example of a protocol operating in this layer.

  Network Layer: In the TCP/IP model, this layer includes both the data link and physical layers of the OSI model. Ethernet is a protocol used in this layer to define network standards and communication protocols at the data link and physical levels.

  References:

  TCP/IP Model Overview: Cisco TCP/IP Model

  Understanding the TCP/IP Model: TCP/IP Layers

• Question 39:

  DRAG DROP

  Move each protocol from the list on the left to its correct example on the right.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  The correct matching of the protocols to their examples is as follows:

  DHCP: Assign the reserved IP address 10.10.10.200 to a web server at your company.

  DNS: Perform a query to translate companypro.net to an IP address. ICMP: Perform a ping to ensure that a server is responding to network connections.

  Here's how each protocol corresponds to its example:

  DHCP (Dynamic Host Configuration Protocol)is used to assign IP addresses to devices on a network. In this case, DHCP would be used to assign the reserved IP address 10.10.10.200 to a web server.

  DNS (Domain Name System)is used to translate domain names into IP addresses. Therefore, to translate companypro.net to an IP address, DNS would be utilized. ICMP (Internet Control Message Protocol)is used for sending error messages and operational information indicating success or failure when communicating with another IP address. An example of this is using the ping command to check if a server is responding to network connections.

  These protocols are essential for the smooth operation of networks and the internet.

  Perform a query to translate companypro.net to an IP address. Assign the reserved IP address 10.10.10.200 to a web server at your company. Perform a ping to ensure that a server is responding to network connections.

  DNS (Domain Name System): DNS translates human-friendly domain names like "companypro.net" into IP addresses that computers use to identify each other on the network.

  DHCP (Dynamic Host Configuration Protocol): DHCP automatically assigns IP addresses to devices on a network, ensuring that no two devices have the same IP address.

  ICMP (Internet Control Message Protocol): ICMP is used for diagnostic or control purposes, and the ping command uses ICMP to test the reachability of a host on an IP network.

  References:

  DNS Basics: What is DNS?

  DHCP Overview: What is DHCP?

  ICMP and Ping: Understanding ICMP

• Question 40:

  Which command will display all the current operational settings configured on a Cisco router?

  A. show protocols
  B. show startup-config
  C. show version
  D. show running-config
  D. show running-config

  ---

  Explanation/Reference:

  

  Router

  Theshow running-configcommand is used on a Cisco router to display the current operational settings that are actively configured in the router's RAM. This command outputs all the configurations that are currently being executed by the

  router, which includes interface configurations, routing protocols, access lists, and other settings. Unlikeshow startup-config, which shows the saved configuration that the router will use on the next reboot,show running-configreflects the live,

  current configuration in use. References: The information is supported by multiple sources that detail the use of Cisco commands, particularly theshow running-configcommand as the standard for viewing the active configuration on a Cisco

  device123.

  show running-config: This command displays the current configuration running on the router. It includes all the operational settings and configurations applied to the router.

  show protocols: This command shows the status of configured protocols on the router but not the entire configuration.

  show startup-config: This command displays the configuration saved in NVRAM, which is used to initialize the router on startup, but not necessarily the current running configuration. show version: This command provides information about

  the router's software version, hardware components, and uptime but does not display the running configuration.

  References:

  Cisco IOS Commands: Cisco IOS Commands