CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 – 100% Full

New Version:

How to find: Press “Ctrl + F” in the browser and fill in whatever wording is in the question to find that question/answer. If the question is not here, find it in Questions Bank.

NOTE: If you have the new question on this test, please comment Question and Multiple-Choice list in form below this article. We will update answers for you in the shortest time. Thank you! We truly value your contribution to the website.

1. What are two advantages of static routing over dynamic routing? (Choose two.)

  • Static routing is more secure because it does not advertise over the network.
  • Static routing scales well with expanding networks.
  • Static routing requires very little knowledge of the network for correct implementation.
  • Static routing uses fewer router resources than dynamic routing.
  • Static routing is relatively easy to configure for large networks.

Static routing requires a thorough understanding of the entire network for proper implementation. It can be prone to errors and does not scale well for large networks. Static routing uses fewer router resources, because no computing is required for updating routes. Static routing can also be more secure because it does not advertise over the network.

2. Refer to the exhibit. What routing solution will allow both PC A and PC B to access the Internet with the minimum amount of router CPU and network bandwidth utilization?
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 1

  • Configure a static route from R1 to Edge and a dynamic route from Edge to R1.
  • Configure a static default route from R1 to Edge, a default route from Edge to the Internet, and a static route from Edge to R1.
  • Configure a dynamic route from R1 to Edge and a static route from Edge to R1.
  • Configure a dynamic routing protocol between R1 and Edge and advertise all routes.

Two routes have to be created: a default route in R1 to reach Edge and a static route in Edge to reach R1 for the return traffic. This is a best solution once PC A and PC B belong to stub networks. Moreover, static routing consumes less bandwidth than dynamic routing.

3. What is the correct syntax of a floating static route?

  • ip route 209.165.200.228 255.255.255.248 serial 0/0/0
  • ip route 209.165.200.228 255.255.255.248 10.0.0.1 120
  • ip route 0.0.0.0 0.0.0.0 serial 0/0/0
  • ip route 172.16.0.0 255.248.0.0 10.0.0.1

Floating static routes are used as backup routes, often to routes learned from dynamic routing protocols. To be a floating static route, the configured route must have a higher administrative distance than the primary route. For example, if the primary route is learned through OSPF, then a floating static route that serves as a backup to the OSPF route must have an administrative distance greater than 110. The administrative distance on a floating static route is put at the end of the static route: ip route 209.165.200.228 255.255.255.248 10.0.0.1 120.

4. What is a characteristic of a static route that matches all packets?

  • It backs up a route already discovered by a dynamic routing protocol.
  • It uses a single network address to send multiple static routes to one destination address.
  • It identifies the gateway IP address to which the router sends all IP packets for which it does not have a learned or static route.
  • It is configured with a higher administrative distance than the original dynamic routing protocol has.

A default static route is a route that matches all packets. It identifies the gateway IP address to which the router sends all IP packets for which it does not have a learned or static route. A default static route is simply a static route with 0.0.0.0/0 as the destination IPv4 address. Configuring a default static route creates a gateway of last resort.

5. What type of route allows a router to forward packets even though its routing table contains no specific route to the destination network?

  • dynamic route
  • default route
  • destination route
  • generic route

Explanation: A static default route is a catch-all route for all unmatched networks.

6. Why would a floating static route be configured with an administrative distance that is higher than the administrative distance of a dynamic routing protocol that is running on the same router?

  • to be used as a backup route
  • to load-balance the traffic
  • to act as a gateway of last resort
  • to be the priority route in the routing table

By default, dynamic routing protocols have a higher administrative distance than static routes. Configuring a static route with a higher administrative distance than that of the dynamic routing protocol will result in the dynamic route being used instead of the static route. However, should the dynamically learned route fail, then the static route will be used as a backup.

7. A company has several networks with the following IP address requirements:

IP phones – 50
PCs – 70
IP cameras – 10
wireless access points – 10
network printers – 10
network scanners – 2

Which block of addresses would be the minimum to accommodate all of these devices if each type of device was on its own network?

  • 172.16.0.0/25
  • 172.16.0.0/24
  • 172.16.0.0/23
  • 172.16.0.0/22

The network for the PCs would require a subnet mask of /25 in order to accommodate 70 devices. That network could use IP addresses 0 through 127. Phones require a subnet mask of /26 for 50 devices (addresses 128-191). Three /28 networks are needed in order to accommodate cameras, APs, and printers. The network scanner network can use a /30. A block of addresses with a mask of /24 will accommodate this site as the minimum amount needed.

8. What happens to a static route entry in a routing table when the outgoing interface associated with that route goes into the down state?

  • The static route is removed from the routing table.
  • The router polls neighbors for a replacement route.
  • The static route remains in the table because it was defined as static.
  • The router automatically redirects the static route to use another interface.

When the interface associated with a static route goes down, the router will remove the route because it is no longer valid.

9. The network administrator configures the router with the ip route 172.16.1.0 255.255.255.0 172.16.2.2 command. How will this route appear in the routing table?

  • C 172.16.1.0 is directly connected, Serial0/0
  • S 172.16.1.0 is directly connected, Serial0/0
  • C 172.16.1.0 [1/0] via 172.16.2.2
  • S 172.16.1.0 [1/0] via 172.16.2.2

Explanation: The route will appear in the routing with a code of S (Static).

10. Graphic shows output of show ip route as follows:

A# show ip route
Gateway of last resort is not set
S 10.0.0.0/8 [1/0] via 172.16.40.2
64.0.0.0/16 is subnetted, 1 subnets
C 64.100.0.0 is directly connected, Serial0/1/0
C 128.107.0.0/16 is directly connected, Loopback2
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.40.0 is directly connected, Serial0/0/0
C 192.168.1.0/24 is directly connected,FastEthernet0/0/0
S 192.168.2.0/24 [1/0] via 172.16.40.2
C 198.132.219.0/24 is directly connected, Loopback0

Refer to the exhibit. What two commands will change the next-hop address for the 10.0.0.0/8 network from 172.16.40.2 to 192.168.1.2? (Choose two.)
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 2

  • A(config)# no network 10.0.0.0 255.0.0.0 172.16.40.2
  • A(config)# no ip address 10.0.0.1 255.0.0.0 172.16.40.2
  • A(config)# no ip route 10.0.0.0 255.0.0.0 172.16.40.2
  • A(config)# ip route 10.0.0.0 255.0.0.0 s0/0/0
  • A(config)# ip route 10.0.0.0 255.0.0.0 192.168.1.2

The two required commands are A(config)# no ip route 10.0.0.0 255.0.0.0 172.16.40.2 and A(config)# ip route 10.0.0.0 255.0.0.0 192.168.1.2.

11. Which type of static route that is configured on a router uses only the exit interface?

  • recursive static route
  • directly connected static route
  • fully specified static route
  • default static route

When only the exit interface is used, the route is a directly connected static route. When the next-hop IP address is used, the route is a recursive static route. When both are used, it is a fully specified static route.

12. Refer to the graphic. Which command would be used on router A to configure a static route to direct traffic from LAN A that is destined for LAN C?
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 3

  • A(config)# ip route 192.168.4.0 255.255.255.0 192.168.5.2
  • A(config)# ip route 192.168.4.0 255.255.255.0 192.168.3.2
  • A(config)# ip route 192.168.5.0 255.255.255.0 192.168.3.2
  • A(config)# ip route 192.168.3.0 255.255.255.0 192.168.3.1
  • A(config)# ip route 192.168.3.2 255.255.255.0 192.168.4.0

The destination network on LAN C is 192.168.4.0 and the next-hop address from the perspective of router A is 192.168.3.2.

13. Refer to the exhibit. The network administrator needs to configure a default route on the Border router. Which command would the administrator use to configure a default route that will require the least amount of router processing when forwarding packets?
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 4

  • Border(config)# ip route 0.0.0.0 0.0.0.0 198.133.219.5
  • Border(config)# ip route 0.0.0.0 0.0.0.0 198.133.219.6
  • Border(config)# ip route 0.0.0.0 0.0.0.0 s0/0/1
  • Border(config)# ip route 0.0.0.0 0.0.0.0 s0/0/0

14. What two pieces of information are needed in a fully specified static route to eliminate recursive lookups? (Choose two.)

  • the interface ID exit interface
  • the interface ID of the next-hop neighbor
  • the IP address of the next-hop neighbor
  • the administrative distance for the destination network
  • the IP address of the exit interface

A fully specified static route can be used to avoid recursive routing table lookups by the router. A fully specified static route contains both the IP address of the next-hop router and the ID of the exit interface.

15. Refer to the exhibit. What command would be used to configure a static route on R1 so that traffic from both LANs can reach the 2001:db8:1:4::/64 remote network?
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 5

  • ipv6 route ::/0 serial0/0/0
  • ipv6 route 2001:db8:1:4::/64 2001:db8:1:3::1
  • ipv6 route 2001:db8:1:4::/64 2001:db8:1:3::2
  • ipv6 route 2001:db8:1::/65 2001:db8:1:3::1

To configure an IPv6 static route, use the ipv6 route command followed by the destination network. Then add either the IP address of the adjacent router or the interface R1 will use to transmit a packet to the 2001:db8:1:4::/64 network.

16. Refer to the exhibit. Which default static route command would allow R1 to potentially reach all unknown networks on the Internet?
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 6

  • R1(config)# ipv6 route 2001:db8:32::/64 G0/0
  • R1(config)# ipv6 route ::/0 G0/0 fe80::2
  • R1(config)# ipv6 route ::/0 G0/1 fe80::2
  • R1(config)# ipv6 route 2001:db8:32::/64 G0/1 fe80::2

To route packets to unknown IPv6 networks a router will need an IPv6 default route. The static route ipv6 route ::/0 G0/1 fe80::2 will match all networks and send packets out the specified exit interface G0/1 toward R2.

17. Consider the following command:
ip route 192.168.10.0 255.255.255.0 10.10.10.2 5
Which route would have to go down in order for this static route to appear in the routing table?

  • a default route
  • a static route to the 192.168.10.0/24 network
  • an OSPF-learned route to the 192.168.10.0/24 network
  • an EIGRP-learned route to the 192.168.10.0/24 network

The administrative distance of 5 added to the end of the static route creates a floating static situation for a static route that goes down. Static routes have a default administrative distance of 1. This route that has an administrative distance of 5 will not be placed into the routing table unless the previously entered static route to the 192.168.10.0/24 goes down or was never entered. The administrative distance of 5 added to the end of the static route configuration creates a floating static route that will be placed in the routing table when the primary route to the same destination network goes down. By default, a static route to the 192.168.10.0/24 network has an administrative distance of 1. Therefore, the floating route with an administrative distance of 5 will not be placed into the routing table unless the previously entered static route to the 192.168.10.0/24 goes down or was never entered. Because the floating route has an administrative distance of 5, the route is preferred to an OSPF-learned route (with the administrative distance of 110) or an EIGRP-learned route (with the administrative distance of 110) to the same destination network.

18. Refer to the exhibit. The routing table for R2 is as follows:
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 7

Gateway of last resort is not set
10.0.0.0/30 is subnetted, 2 subnets
C 10.0.0.0 is directly connected, Serial0/0/0
C 10.0.0.4 is directly connected, Serial0/0/1
192.168.10.0/26 is subnetted, 3 subnets
S 192.168.10.0 is directly connected, Serial0/0/0
C 192.168.10.64 is directly connected, FastEthernet0/0
S 192.168.10.128 [1/0] via 10.0.0.6

What will router R2 do with a packet destined for 192.168.10.129?

  • drop the packet
  • send the packet out interface Serial0/0/0
  • send the packet out interface Serial0/0/1
  • send the packet out interface FastEthernet0/0

When a static route is configured with the next hop address (as in the case of the 192.168.10.128 network), the output of the show ip route command lists the route as “via” a particular IP address. The router has to look up that IP address to determine which interface to send the packet out. Because the IP address of 10.0.0.6 is part of network 10.0.0.4, the router sends the packet out interface Serial0/0/1.

19. A network administrator has entered a static route to an Ethernet LAN that is connected to an adjacent router. However, the route is not shown in the routing table. Which command would the administrator use to verify that the exit interface is up?

  • show ip interface brief
  • show ip protocols
  • show ip route
  • tracert

The network administrator should use the show ip interface brief command to verify that the exit interface or the interface connected to the next hop address is up and up. The show ip route command has already been issued by the administrator. The show ip protocols command is used when a routing protocol is enabled. The tracert command is used from a Windows PC.

20. Consider the following command:
ip route 192.168.10.0 255.255.255.0 10.10.10.2 5
How would an administrator test this configuration?

  • Delete the default gateway route on the router.
  • Ping any valid address on the 192.168.10.0/24 network.
  • Manually shut down the router interface used as a primary route.
  • Ping from the 192.168.10.0 network to the 10.10.10.2 addres

A floating static is a backup route that only appears in the routing table when the interface used with the primary route is down. To test a floating static route, the route must be in the routing table. Therefore, shutting down the interface used as a primary route would allow the floating static route to appear in the routing table.

21. R1 router has a serial connection to the ISP out s0/0/1. R1 router has the 10.0.30.0/24 LAN connected to G0/0. R1 has the 10.0.40.0/24 LAN connected to G0/1. Finally, R1 has the s0/0/0 10.0.50.0/24 network shared with R2. R2 also has the 10.0.60.0/24 LAN connected through G0/0. The following information is below R1.

R1# show ip route
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
10.0.0.0/8 is variably subnetted, 6 subnets, 7 masks
C 10.0.30.0/24 is directly connected, GigabitEthernet0/0
L 10.0.30.254/32 is directly connected, GigabitEthernet0/0
C 10.0.40.0/24 is directly connected, GigabitEthernet0/1
L 10.0.40.254/32 is directly connected, GigabitEthernet0/1
C 10.0.50.0/24 is directly connected, Serial0/0/0
L 10.0.50.1/32 is directly connected, Serial0/0/0
192.31.7.0/24 is variably subnetted, 2 subnets, 3 masks
C 192.31.7.96/30 is directly connected, Serial0/0/1
L 192.31.7.98/32 is directly connected, Serial0/0/1
S* 0.0.0.0/0 is directly connected, Serial0/0/1
R2 has the following information below it.
R2# show ip route
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
10.0.0.0/8 is variably subnetted, 4 subnets, 5 masks
C 10.0.50.0/24 is directly connected, Serial0/0/0
L 10.0.50.2/32 is directly connected, Serial0/0/0
C 10.0.60.0/24 is directly connected, GigabitEthernet0/0
L 10.0.60.1/32 is directly connected, GigabitEthernet0/0
S* 0.0.0.0/0 is directly connected, Serial0/0/0

Refer to the exhibit. The small company shown uses static routing. Users on the R2 LAN have reported a problem with connectivity. What is the issue?
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 8

  • R2 needs a static route to the R1 LANs.
  • R1 and R2 must use a dynamic routing protocol.
  • R1 needs a default route to R2.
  • R1 needs a static route to the R2 LAN.
  • R2 needs a static route to the Internet.

R1 has a default route to the Internet. R2 has a default route to R1. R1 is missing a static route for the 10.0.60.0 network. Any traffic that reached R1 and is destined for 10.0.60.0/24 will be routed to the ISP.

22. Which three IOS troubleshooting commands can help to isolate problems with a static route? (Choose three.)

  • show version
  • ping
  • tracert
  • show ip route
  • show ip interface brief
  • show arp

The ping, show ip route, and show ip interface brief commands provide information to help troubleshoot static routes. Show version does not provide any routing information. The tracert command is used at the Windows command prompt and is not an IOS command. The show arp command displays learned IP address to MAC address mappings contained in the Address Resolution Protocol (ARP) table.

23. An administrator issues the ipv6 route 2001:db8:acad:1::/32 gigabitethernet0/0 2001:db8:acad:6::1 100 command on a router. What administrative distance is assigned to this route?

  • 0
  • 1
  • 32
  • 100

The command ipv6 route 2001:db8:acad:1::/32 gigabitethernet0/0 2001:db8:acad:6::1 100 will configure a floating static route on a router. The 100 at the end of the command specifies the administrative distance of 100 to be applied to the route.

24. Refer to the exhibit. The network engineer for the company that is shown wants to use the primary ISP connection for all external connectivity. The backup ISP connection is used only if the primary ISP connection fails. Which set of commands would accomplish this goal?
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 9

  • ip route 198.133.219.24 255.255.255.252
    ip route 64.100.210.80 255.255.255.252
  • ip route 198.133.219.24 255.255.255.252
    ip route 64.100.210.80 255.255.255.252 10
  • ip route 0.0.0.0 0.0.0.0 s0/0/0
    ip route 0.0.0.0 0.0.0.0 s0/1/0
  • ip route 0.0.0.0 0.0.0.0 s0/0/0
    ip route 0.0.0.0 0.0.0.0 s0/1/0 10

A static route that has no administrative distance added as part of the command has a default administrative distance of 1. The backup link should have a number higher than 1. The correct answer has an administrative distance of 10. The other quad zero route would load balance packets across both links and both links would appear in the routing table. The remaining answers are simply static routes (either a default route or a floating static default route).

25. Open the PT Activity. Perform the tasks in the activity instructions and then answer the question.
Why are the pings from PC0 to Server0 not successful?

  • The static route to network 192.168.1.0 is misconfigured on Router1.
  • The static route to network 192.168.1.0 is misconfigured on Router2.​
  • The static route to network 192.168.2.0 is misconfigured on Router1.​
  • The static route to network 192.168.2.0 is misconfigured on Router2.​

Static routes should specify either a local interface or a next-hop IP address.

26. Open the PT Activity. Perform the tasks in the activity instructions and then answer the question. What IPv6 static route can be configured on router R1 to make a fully converged network?

  • ipv6 route 2001:db8:10:12::/64 S0/0/1
  • ipv6 route 2001:db8:10:12::/64 S0/0/0
  • ipv6 route 2001:db8:10:12::/64 2001:db8:10:12::1
  • ipv6 route 2001:db8:10:12::/64 2001:db8:32:77::1

To reach the remote network, R1 will need a static route with a destination IPv6 address of 2001:db8:10:12::/64 and an exit interface of S0/0/1. The correct static route configuration will be as follows:ipv6 route 2001:db8:10:12::/64 S0/0/1.

Older Version

27. Which interface is the default location that would contain the IP address used to manage a 24-port Ethernet switch?

  • VLAN 1
  • Fa0/0
  • Fa0/1
  • interface connected to the default gateway
  • VLAN 99

Explanation: Interface VLAN 1 is the default management SVI.

28. Which statement describes the port speed LED on the Cisco Catalyst 2960 switch?

  • If the LED is green, the port is operating at 100 Mb/s.
  • If the LED is off, the port is not operating.
  • If the LED is blinking green, the port is operating at 10 Mb/s.
  • If the LED is amber, the port is operating at 1000 Mb/s.

29. What is a function of the switch boot loader?

  • to speed up the boot process
  • to provide security for the vulnerable state when the switch is booting
  • to control how much RAM is available to the switch during the boot process
  • to provide an environment to operate in when the switch operating system cannot be found

30. In which situation would a technician use the show interfaces switch command?

  • to determine if remote access is enabled
  • when packets are being dropped from a particular directly attached host
  • when an end device can reach local devices, but not remote devices
  • to determine the MAC address of a directly attached network device on a particular interface

31. Refer to the exhibit. A network technician is troubleshooting connectivity issues in an Ethernet network with the command show interfaces fastEthernet 0/0. What conclusion can be drawn based on the partial output in the exhibit?
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 10

  • All hosts on this network communicate in full-duplex mode.
  • Some workstations might use an incorrect cabling type to connect to the network.
  • There are collisions in the network that cause frames to occur that are less than 64 bytes in length.
  • A malfunctioning NIC can cause frames to be transmitted that are longer than the allowed maximum length.

32. Refer to the exhibit. The network administrator wants to configure Switch1 to allow SSH connections and prohibit Telnet connections. How should the network administrator change the displayed configuration to satisfy the requirement?
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 11

  • Use SSH version 1.
  • Reconfigure the RSA key.
  • Configure SSH on a different line.
  • Modify the transport input command.

33. What is one difference between using Telnet or SSH to connect to a network device for management purposes?

  • Telnet uses UDP as the transport protocol whereas SSH uses TCP.
  • Telnet does not provide authentication whereas SSH provides authentication.
  • Telnet supports a host GUI whereas SSH only supports a host CLI.
  • Telnet sends a username and password in plain text, whereas SSH encrypts the username and password.

34. In which type of attack does a malicious node request all available IP addresses in the address pool of a DHCP server in order to prevent legitimate hosts from obtaining network access?​

  • CAM table overflow
  • MAC address flooding
  • DHCP starvation
  • DHCP spoofing

35. Which method would mitigate a MAC address flooding attack?

  • increasing the size of the CAM table
  • configuring port security
  • using ACLs to filter broadcast traffic on the switch​
  • increasing the speed of switch ports

Explanation: Port security can be configured on switches to assist in preventing the MAC address table from being overwhelmed with invalid MAC addresses. ACLs will not assist a switch in filtering broadcast traffic, and increasing the size of the CAM table or the speed of switch ports will not resolve this issue.

36. Which two features on a Cisco Catalyst switch can be used to mitigate DHCP starvation and DHCP spoofing attacks? (Choose two.)

  • port security
  • extended ACL
  • DHCP snooping
  • DHCP server failover
  • strong password on DHCP servers

Explanation: In DHCP starvation attacks, an attacker floods the DHCP server with DHCP requests to use up all the available IP addresses that the DHCP server can issue. In DHCP spoofing attacks, an attacker configures a fake DHCP server on the network so that it provides clients with false DNS server addresses. The port security feature can limit the number of dynamically learned MAC addresses per port or allow only known valid NICs to be connected via their specific MAC addresses. The DHCP snooping feature can identify the legitimate DHCP servers and block fake DHCP servers from issuing IP address information. These two features can help fight against DHCP attacks.

37. Which two basic functions are performed by network security tools? (Choose two.)

  • revealing the type of information an attacker is able to gather from monitoring network traffic
  • educating employees about social engineering attacks
  • simulating attacks against the production network to determine any existing vulnerabilities
  • writing a security policy document for protecting networks
  • controlling physical access to user devices

38. An administrator wants to use a network security auditing tool on a switch to verify which ports are not protected against a MAC flooding attack. For the audit to be successful, what important factor must the administrator consider?

  • if the CAM table is empty before the audit is started
  • if all the switch ports are operational at the same speed
  • if the number of valid MAC addresses and spoofed MAC addresses is the same
  • the aging-out period of the MAC address table

39. Which action will bring an error-disabled switch port back to an operational state?

  • Remove and reconfigure port security on the interface.
  • Issue the switchport mode access command on the interface.
  • Clear the MAC address table on the switch.
  • Issue the shutdown and then no shutdown interface commands.

40. Refer to the exhibit. Port Fa0/2 has already been configured appropriately. The IP phone and PC work properly. Which switch configuration would be most appropriate for port Fa0/2 if the network administrator has the following goals?
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 12

  • SWA(config-if)# switchport port-security
    SWA(config-if)# switchport port-security mac-address sticky
  • SWA(config-if)# switchport port-security mac-address sticky
    SWA(config-if)# switchport port-security maximum 2
  • SWA(config-if)# switchport port-security
    SWA(config-if)# switchport port-security maximum 2
    SWA(config-if)# switchport port-security mac-address sticky
  • SWA(config-if)# switchport port-security
    SWA(config-if)# switchport port-security maximum 2
    SWA(config-if)# switchport port-security mac-address sticky
    SWA(config-if)# switchport port-security violation restrict

41. Which two statements are true regarding switch port security? (Choose two.)

  • The three configurable violation modes all log violations via SNMP.
  • Dynamically learned secure MAC addresses are lost when the switch reboots.
  • The three configurable violation modes all require user intervention to re-enable ports.
  • After entering the sticky parameter, only MAC addresses subsequently learned are converted to secure MAC addresses.
  • If fewer than the maximum number of MAC addresses for a port are configured statically, dynamically learned addresses are added to CAM until the maximum number is reached.

Explanation: Dynamically learned secure MAC addresses are lost when the switch reboots. Sticky MAC addresses are learned and added to the running config. These addressess can be retained if the configuration is saved and then rebooted. MAC addresses may also be configured statically (that is, manually). If fewer than the maximum number of MAC addresses for a port are configured statically, dynamically learned addresses are added to CAM until the maximum number is reached.

42. A network administrator configures the port security feature on a switch. The security policy specifies that each access port should allow up to two MAC addresses. When the maximum number of MAC addresses is reached, a frame with the unknown source MAC address is dropped and a notification is sent to the syslog server. Which security violation mode should be configured for each access port?

  • restrict
  • protect
  • warning
  • shutdown

43. Refer to the exhibit. What can be determined about port security from the information that is shown?
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 13

  • The port has been shut down.
  • The port has two attached devices.
  • The port violation mode is the default for any port that has port security enabled.
  • The port has the maximum number of MAC addresses that is supported by a Layer 2 switch port which is configured for port security.

44. Open the PT Activity. Perform the tasks in the activity instructions and then answer the question.
Fill in the blank.
Do not use abbreviations.What is the missing command on S1?

ip address 192.168.99.2 255.255.255.0

45. Open the PT Activity. Perform the tasks in the activity instructions and then answer the question. Which event will take place if there is a port security violation on switch S1 interface Fa0/1?
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 14

  • A notification is sent.
  • A syslog message is logged.
  • Packets with unknown source addresses will be dropped.
  • The interface will go into error-disabled state.

46. What impact does the use of the

mdix auto

configuration command haveon an Ethernet interface on a switch?

  • automatically detects duplex settings
  • automatically detects interface speed
  • automatically detects copper cable type
  • automatically assigns the first detected MAC address to an interface

47. Which type of cable does a network administrator need to connect a PC to a switch to recover it after the Cisco IOS software fails to load?

  • a coaxial cable
  • a console cable
  • a crossover cable
  • a straight-through cable

48. While troubleshooting a connectivity problem, a network administrator notices that a switch port status LED is alternating between green and amber. What could this LED indicate?

  • The port has no link.
  • The port is experiencing errors.
  • The port is administratively down.
  • A PC is using the wrong cable to connect to the port.
  • The port has an active link with normal traffic activity.

49. A production switch is reloaded and finishes with a Switch> prompt. What two facts can be determined? (Choose two.)

  • POST occurred normally.
  • The boot process was interrupted.
  • There is not enough RAM or flash on this router.
  • A full version of the Cisco IOS was located and loaded.
  • The switch did not locate the Cisco IOS in flash, so it defaulted to ROM.

Explanation: A switch booting to the Switch> prompt indicates that the switch booted normally. This means a the switch successfully completed POST full version of the Cisco IOS was loaded.

50. Which command displays information about the auto-MDIX setting for a specific interface?

  • show interfaces
  • show controllers
  • show processes
  • show running-config

51. Refer to the exhibit. What media issue might exist on the link connected to Fa0/1 based on the show interface command?
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 15

  • The bandwidth parameter on the interface might be too high.
  • There could be an issue with a faulty NIC.
  • There could be too much electrical interference and noise on the link.
  • The cable attaching the host to port Fa0/1 might be too long.
  • The interface might be configured as half-duplex.

52. Which protocol or service sends broadcasts containing the Cisco IOS software version of the sending device, and the packets of which can be captured by malicious hosts on the network?

  • CDP
  • DHCP
  • DNS
  • SSH

53. Refer to the exhibit. Which S1 switch port interface or interfaces should be configured with the ip dhcp snooping trust command if best practices are implemented?
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 16

  • only the G0/1 port
  • only unused ports
  • only the G0/1 and G0/24 ports
  • only the G0/2, G0/3, and G0/4 ports
  • only the G0/1, G0/2, G0/3, and G0/4 ports

54. The network administrator enters the following commands on a Cisco switch:
Switch(config)# interface vlan1
Switch(config-if)# ip address 192.168.1.2 255.255.255.0
Switch(config-if)# no shutdown
What is the effect of entering these commands?

  • All devices attached to this switch must be in the 192.168.1.0/24 subnet to communicate.
  • The switch is able to forward frames to remote networks.
  • The address of the default gateway for this LAN is 192.168.1.2/24.
  • Users on the 192.168.1.0/24 subnet are able to ping the switch at IP address 192.168.1.2.

55. Fill in the blank.
When port security is enabled, a switch port uses the default violation mode of shutdown until specifically configured to use a different violation mode.

Explanation: If no violation mode is specified when port security is enabled on a switch port, then the security violation mode defaults to shutdown.

56. Which three statements are true about using full-duplex Fast Ethernet? (Choose three.)

  • Performance is improved with bidirectional data flow.
  • Performance is improved because the NIC is able to detect collisions.
  • Latency is reduced because the NIC processes frames faster.
  • Full-duplex Fast Ethernet offers 100 percent efficiency in both directions.
  • Nodes operate in full-duplex with unidirectional data flow.
  • Performance is improved because the collision detect function is disabled on the device.

57. Fill in the blank.
Full-duplex” communication allows both ends of a connection to transmit and receive data simultaneously.

Full-duplex communication improves the performance of a switched LAN, increasing effective bandwidth by allowing both ends of a connection to transmit and receive data simultaneously.

58. Place the options in the following order:
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 17CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 18
step 3
– not scored –
step 1
step 4
step 2
step 5
step 6

59. Identify the steps needed to configure a switch for SSH.
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 19
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 20
Place the options in the following order:
[+] Create a local user.
[+] Generate RSA keys.
[+] Configure a domain name.
[+] Use the login local command.
[+] Use the transport input ssh command.
[+] Order does not matter within this group.

60. Match the Link State to the interface and protocol status.
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 21
CCNA 2 (v5.0.3 + v6.0) Chapter 2 Exam Answers 2020 - 100% Full 22
Place the options in the following order:
disable -> admin down
Layer 1 problem -> down/down
– not scored –
Layer 2 problem -> up/down
operational -> up/up

Download PDF File below:

Subscribe
Notify of
guest

13 Comments
Inline Feedbacks
View all comments
MCfre
MCfre
4 years ago

An administrator issues the ipv6 route 2001:db8:acad:1::/32 gigabitethernet0/0 2001:db8:acad:6::1 100 command on a router. What administrative distance is assigned to this route?
0

1

32

100

Twinomuhangi Peter
Twinomuhangi Peter
4 years ago

Graphic shows output of show ip route as follows:A# show ip routeGateway of last resort is not setS 10.0.0.0/8 [1/0] via 172.16.40.2 64.0.0.0/16 is subnetted, 1 subnetsC 64.100.0.0 is directly connected, Serial0/1/0C 128.107.0.0/16 is directly connected, Loopback2 172.16.0.0/24 is subnetted, 1 subnetsC 172.16.40.0 is directly connected, Serial0/0/0C 192.168.1.0/24 is directly connected,FastEthernet0/0/0S 192.168.2.0/24 [1/0] via 172.16.40.2C 198.132.219.0/24 is directly connected, Loopback0
Refer to the exhibit. What two commands will change the next-hop address for the 10.0.0.0/8 network from 172.16.40.2 to 192.168.1.2? (Choose two.)
A(config)# ip route 10.0.0.0 255.0.0.0 192.168.1.2
A(config)# no ip address 10.0.0.1 255.0.0.0 172.16.40.2
A(config)# ip route 10.0.0.0 255.0.0.0 s0/0/0
A(config)# no network 10.0.0.0 255.0.0.0 172.16.40.2
A(config)# no ip route 10.0.0.0 255.0.0.0 172.16.40.2
Navigation Bar

Prakāśa
Prakāśa
4 years ago

A(config)# no ip route 10.0.0.0 255.0.0.0 172.16.40.2
A(config)# ip route 10.0.0.0 255.0.0.0 192.168.1.2

Siri
Siri
4 years ago

Thanks to ccna

Nazeer
Nazeer
4 years ago
Reply to  Siri

correct

Dr. W
Dr. W
4 years ago

Took it April 2019 and was 100% correct.

daniel
daniel
6 years ago

A company has several networks with the following IP address requirements:
IP phones – 50
PCs – 70
IP cameras – 10
wireless access points – 10
network printers – 10
network scanners – 2

Which block of addresses would be the minimum to accommodate all of these devices if each type of device was on its own network?

172.16.0.0/22

172.16.0.0/25

172.16.0.0/23

172.16.0.0/24

Ubaid Ilyas
Ubaid Ilyas
5 years ago
Reply to  daniel

172.16.0.0/24

CQ
CQ
4 years ago
Reply to  daniel

172.16.0.0/24

Basbei
Basbei
6 years ago

Hi
The PDF provided (when downoad) is not the correct one ! Thanks for your help :)

Nur
Nur
7 years ago

Where can i get ccna 2 version 6 for chapter 5 till chapter 10 at?

13
0
Would love your thoughts, please comment.x
()
x