Cisco 100-150 Cisco Certified Support Technician Networking Exam Exam Practice Test

A firewall can direct all web traffic to a specific IP address.

True: Firewalls can be configured to perform Network Address Translation (NAT) and port forwarding, which can direct all web traffic (typically on port 80 and 443) to a specific internal IP address.

A firewall can block traffic to specific ports on internal computers.

True: Firewalls can be configured with access control lists (ACLs) or rules to block traffic to specific ports on internal computers, enhancing security by restricting unwanted or harmful traffic.

A firewall can prevent specific apps from running on a computer.

False: Firewalls typically control traffic flow and do not prevent specific applications from running on a computer. Application control is usually managed by endpoint security software or application control systems.

Directing Web Traffic: Firewalls can manage traffic redirection using NAT and port forwarding rules to route web traffic to designated servers or devices within the network.

Blocking Specific Ports: Firewalls can enforce security policies by blocking or allowing traffic based on port numbers, ensuring that only permitted traffic reaches internal systems.

Application Control: While firewalls manage network traffic, preventing applications from running typically requires software specifically designed for endpoint protection and application management.

References:

Understanding Firewalls: Firewall Capabilities

Network Security Best Practices: Network Security Guide

The command that will display the output provided, which includes capability codes, local interface details, device IDs, hold times, and platform port ID capabilities, is the show cdp neighbor command. This command is used in Cisco devices to display current information about neighboring devices detected by Cisco Discovery Protocol (CDP), which includes details such as the interface through which the neighbor is connected, the type of device, and the port ID of the device1.

References :=

•Cisco - show cdp neighbors

The provided output is from the Cisco Discovery Protocol (CDP) neighbor table. The show cdp neighbor command displays information about directly connected Cisco devices, including Device ID, Local Interface, Holdtime, Capability, Platform, and Port ID.

•A. show mac-address-table: Displays the MAC address table on the switch.

•C. show inventory: Displays information about the hardware inventory of the device.

•D. show ip interface: Displays IP interface status and configuration.

Thus, the correct answer is B. show cdp neighbor.

References :=

•Cisco CDP Neighbor Command

•Understanding CDP

The CIDR (Classless Inter-Domain Routing) notation for the subnet mask 255.255.252.0 is /22. This notation indicates that the first 22 bits of the IP address are used for network identification, and the remaining bits are used for host addresses within the network1.

References :=

•Subnet Cheat Sheet – 24 Subnet Mask, 30, 26, 27, 29, and other IP Address CIDR Network References

=========================

•Subnet Mask to CIDR Notation: The given subnet mask is 255.255.252.0. To convert this to CIDR notation:

•Convert the subnet mask to binary: 11111111.11111111.11111100.00000000

•Count the number of consecutive 1s in the binary form: There are 22 ones.

•Therefore, the CIDR notation is /22.

References:

•Understanding Subnetting and CIDR: Cisco CIDR Guide

Understanding How Layer 2 Switches Handle Unknown MAC Addresses

Switches operate at Layer 2 (Data Link Layer) of the OSI model and maintain a MAC address table (CAM table) to forward frames efficiently.

When a switch receives a frame, it checks its MAC address table to see if it knows the destination MAC address.

If the destination MAC address is not in the table (meaning the switch does not know which port leads to PC-C), the switch follows the flooding behavior.

What Happens When Switch1 Receives a Frame from PC-A to PC-C?

Switch1 checks its MAC table:

The source MAC (PC-A) is recorded in the table on port G0/1.

The destination MAC (PC-C) is not in the table.

Switch1 does not know where PC-C is:

It floods the frame out of all active ports except the port it was received on (G0/1).

This means the frame is sent to:

Switch2 (via G0/23)

PC-B (via G0/2)

Switch2 receives the frame and follows the same process:

If Switch2 has PC-C's MAC in its table, it forwards the frame appropriately.

If not, it floods the frame again until PC-C replies.

Once PC-C responds, Switch1 and Switch2 learn its MAC address and update their tables.

Why Other Options Are Incorrect:

❌ A. Switch1 queries Switch2 for the MAC address of PC-C.

Incorrect: Switches do not query other switches directly for MAC addresses. Instead, they rely on learning MAC addresses dynamically through frame forwarding.

❌ B. Switch1 drops the frame and sends an error message back to PC-A.

Incorrect: Switches do not drop frames for unknown MAC addresses. Instead, they flood the frames out all ports except the incoming port.

❌ D. Switch1 sends an ARP request to obtain the MAC address of PC-C.

Incorrect:

ARP (Address Resolution Protocol) is only used to resolve IP addresses to MAC addresses.

Since PC-A is sending a frame (Layer 2), not an IP packet (Layer 3), ARP is not involved here.

Conclusion

Since Switch1 does not know the destination MAC address, it floods the frame out all active ports except the port it was received on. This is the default behavior of Layer 2 switches when they encounter an unknown MAC address.

Thus, the correct answer is:✔ C. Switch1 floods the frame out all active ports except port G0/1.

References

Cisco CCNA 200-301 Official Guide – MAC Address Table & Frame Forwarding

RFC 894 – Standard for Ethernet Frame Forwarding

Cisco Networking Essentials – Switch Flooding Behavior

The primary purpose of assigning an IP address to the management VLAN interface on a Layer 2 switch is to facilitate remote management of the switch. By configuring an IP address on the management VLAN, network administrators can access the switch’s Command Line Interface (CLI) remotely using protocols such as Telnet or Secure Shell (SSH). This allows for convenient configuration changes, monitoring, and troubleshooting without needing physical access to the switch1.

References :=

•Understanding the Management VLAN

•Cisco - VLAN Configuration Guide

•Remote Management of Switches

Assigning an IP address to the management VLAN interface (often the VLAN 1 interface by default) on a Layer 2 switch allows network administrators to remotely manage the switch using protocols such as Telnet or SSH. This IP address does not affect the switch's ability to route traffic between VLANs but provides a means to access and configure the switch through its Command Line Interface (CLI).

•A: The switch does not act as a default gateway; this is typically a function of a Layer 3 device like a router.

•B: The switch does not resolve URLs; this is typically a function of DNS servers.

•C: The switch can relay DHCP requests but does not typically provide DHCP services itself; this is usually done by a dedicated DHCP server or router.

Thus, the correct answer is D. To enable access to the CLI on the switch through Telnet or SSH.

References :=

•Cisco VLAN Management Overview

•Cisco Catalyst Switch Management

When prioritizing trouble tickets, the most critical issues affecting business operations or high-impact activities should be addressed first. Here's a breakdown of the tickets:

Ticket 1: Relocation of a printer, while necessary, is not urgent and does not impact critical operations.

Ticket 2: An ongoing webinar losing internet access is critical, especially if the webinar is time-sensitive and involves multiple participants.

Ticket 3: Slower response time for a cloud-based application is important but typically not as urgent as a complete loss of internet access for a live event.

Ticket 4: Wireless access down in the cafeteria affects users but does not have the same immediate impact as a live webinar losing connectivity.

Thus, the correct answer is B. Ticket 2: An online webinar is taking place in the conference room. The video conferencing equipment lost internet access.

References :=

IT Help Desk Best Practices

Prioritizing IT Support Tickets

The AAA service security model consists of three components: Authentication, Authorization, and Accounting.

•Authentication: This is the process of verifying the identity of a user or device. It ensures that only legitimate users can access the network or service.

•Authorization: This determines what an authenticated user is allowed to do or access within the network.

•Auditing/Accounting: This component tracks the actions of the user, including what resources they access and what changes they make.

Thus, the correct answer is C. Authentication.

References :=

•Cisco AAA Overview

•Understanding AAA (Authentication, Authorization, and Accounting)

WPA2-Personal, also known as WPA2-PSK (Pre-Shared Key), is the wireless security option that uses a pre-shared key to authenticate clients. This method is designed for home and small office networks and doesn’t require an authentication server. Instead, every user on the network uses the same key or passphrase to connect1.

References :=

•What is a Wi-Fi Protected Access Pre-Shared Key (WPA-PSK)?

•Exploring WPA-PSK and WiFi Security

=========================

•WPA2-Personal: This wireless security option uses a pre-shared key (PSK) for authentication. Each client that connects to the network must use this key to gain access. It is designed for home and small office networks where simplicity and ease of use are important.

•WPA2-Enterprise: Unlike WPA2-Personal, WPA2-Enterprise uses 802.1x authentication with an authentication server (such as RADIUS) and does not rely on a pre-shared key.

•802.1x: This is a network access control protocol for LANs, particularly wireless LANs. It provides an authentication mechanism to devices wishing to attach to a LAN or WLAN.

•802.1q: This is a networking standard that supports VLAN tagging on Ethernet networks and is not related to wireless security.

References:

•Cisco Documentation on WPA2 Security: Cisco WPA2

•Understanding Wireless Security: Wireless Security Guide

The correct matching of the security options to their characteristics is as follows:

WPA2-Enterprise: Uses a RADIUS server for authentication

WEP: Uses a minimum of 40 bits for encryption

WPA2-Personal: Uses AES and a pre-shared key for authentication

Here’s why each security option matches the characteristic:

WPA2-Enterprise uses a RADIUS server for authentication, which provides centralized Authentication, Authorization, and Accounting (AAA) management for users who connect and use a network service.

WEP (Wired Equivalent Privacy) is an outdated security protocol that uses a minimum of 40 bits for encryption (and up to 104 bits), which is relatively weak by today’s standards.

WPA2-Personal (Wi-Fi Protected Access 2 - Personal) uses the Advanced Encryption Standard (AES) for encryption and a pre-shared key (PSK) for authentication, which is shared among users to access the network.

These security options are essential for protecting wireless networks from unauthorized access and ensuring data privacy.

•Statement B: "The same default gateway IPv4 address is configured on each host on the local network." This is true because all hosts on the same local network (subnet) use the same default gateway IP address to send packets destined for other networks.

•Statement D: "The default gateway is the IPv4 address of the router interface connected to the same local network as the host." This is true because the default gateway is the IP address of the router's interface that is directly connected to the local network.

•Statement A: "The IPv4 address of the default gateway must be the first host address in the subnet." This is not necessarily true. The default gateway can be any address within the subnet range.

•Statement C: "The default gateway is the Loopback0 interface IPv4 address of the router connected to the same local network as the host." This is not true; the default gateway is the IP address of the router's physical or logical interface connected to the local network.

•Statement E: "Hosts learn the default gateway IPv4 address through router advertisement messages." This is generally true for IPv6 with Router Advertisement (RA) messages, but not typically how IPv4 hosts learn the default gateway address.

References:

•Cisco Default Gateway Configuration: Cisco Default Gateway

To store files that will be accessible by every user on a network, you would need a server. A server is a computer system that provides data to other computers. It can serve data to systems on a local network (LAN) or a wide network (WAN) over the internet. In this context, a file server would be set up to store and manage files, allowing users on the network to access them from their own devices1.

References :=

What is a Server?

Understanding Servers and Their Functions

A server is a computer designed to process requests and deliver data to other computers over a local network or the internet. In this case, to store files that will be accessible by every user on the network, a file server is the appropriate endpoint device. It provides a centralized location for storing and managing files, allowing users to access and share files easily.

A. Access point: Provides wireless connectivity to a network.

C. Hub: A basic networking device that connects multiple Ethernet devices together, making them act as a single network segment.

D. Switch: A networking device that connects devices on a computer network by using packet switching to forward data to the destination device.

Thus, the correct answer is B. Server.

References :=

File Server Overview (Cisco)

Server Roles in Networking (Cisco)

When devices within a VLAN are unable to reach addresses outside their VLAN, it typically indicates that they do not have a configured path to external networks. The engineer should configure a default gateway for VLAN2. The default gateway is the IP address of the router’s interface that is connected to the VLAN, which will route traffic from the VLAN to other networks12.

References :=

•Understanding and Configuring VLAN Routing and Bridging on a Router Using the IRB Feature

•VLAN 2 not able to ping gateway - Cisco Community

=========================

•VLANs: Virtual Local Area Networks (VLANs) logically segment network traffic to improve security and performance. Devices within the same VLAN can communicate directly.

•Default Gateway: For devices in VLAN2 to communicate with devices outside their VLAN, they need a default gateway configured. The default gateway is typically a router or Layer 3 switch that routes traffic between different VLANs and subnets.

•Additional VLAN: Not needed in this scenario as the issue is related to routing traffic outside VLAN2, not creating another VLAN.

•Default Route: While a default route on the router may be necessary, the primary issue for devices within VLAN2 is to have a configured default gateway.

•Static Route: This is used on routers to manually specify routes to specific networks but does not address the need for a default gateway on the client devices.

References:

•Cisco VLAN Configuration Guide: Cisco VLAN Configuration

•Understanding and Configuring VLANs: VLANs Guide