CCNA 3 Enterprise Networking, Security, and Automation, Version 7.0 Practice Exam

These questions are part of the practice quiz. Start practicing

• How does virtualization enhance disaster recovery in data centers?
• What command would be used as part of configuring NAT or PAT to link the inside local addresses to the pool of addresses available for PAT translation?
• What type of network uses one common infrastructure to carry voice, data, and video signals?
• What is the first step a network engineer takes to narrow down a network issue's location?
• Which HTTP method is used for creating a resource in RESTful services?
• What is the primary function of an access list (ACL) in networking?
• What role does DNS play in a network?
• In a small office network, which feature must the company router have enabled for devices to access the internet with dynamically assigned private IP addresses?
• What is one primary function of a router in the distribution layer?
• Which factor is important when implementing network security protocols?
• Which component of the ACI architecture translates application policies into network programming?
• Why would a penetration testing team use debuggers when assessing a corporate network for vulnerabilities?
• What does IPsec do in a VPN architecture?
• What command is used to display all static translations configured for NAT or PAT?
• What does the command "show ip nat translations" help a network administrator to determine?
• What is the correct term for the protocol used in the URL http://www.buycarsfromus.com/2020models/ford/suv.html#Escape?
• What structure is used in an OSPF network to create the neighbor table on a router?
• Which step in the link-state routing process is defined as a router running an algorithm to determine the best path to each destination?
• What service or technology would support a student wanting to back up hundreds of pictures on a smartphone?
• In IPsec, what is the role of the security associations (SAs)?
• Which network layer is associated with dynamic multipoint VPNs?
• What are the two types of VPN connections?
• What protocol uses smaller stratum numbers to indicate that the server is closer to the authorized time source than larger stratum numbers?
• What RESTful operation does the PUT/PATCH HTTP method correspond to?
• Which three advantages are associated with using private IP addresses and NAT? (Choose three.)
• Which of the following is essential for establishing a secure communication session over the Internet?
• What is the effect of setting the security level of SNMPv3 to 'auth'?
• Which protocol is responsible for sending periodic advertisements to learn device information in Cisco networks?
• What is the function of a VPN in networking?
• In the context of network management, what role does NAT serve?
• Which statement describes a characteristic of Cisco Catalyst 2960 switches?
• Which protocol is used for the dynamic creation of multiple spoke tunnels in DMVPN?
• Which command is used to enable SSH on a Cisco device?
• Which command is utilized to identify inside local addresses that will be translated in NAT or PAT configuration?
• Which design feature will limit the size of a failure domain in an enterprise network?
• What is the final operational state that occurs between an OSPF Designated Router and a DROTHER once they reach convergence?
• Which type of QoS marking is applied to Ethernet frames?
• What type of traffic is described as requiring at least 384 Kbps of bandwidth?
• Which type of attack aims to overwhelm a network's resources, resulting in service disruption?
• What are two benefits of using SNMP traps?
• What type of connection is primarily used for business WAN connections?
• What are two features to consider when creating a named ACL?
• In the URL "http://www.buycarsfromus.com/2020models/ford/suv.html#Escape", what does "#Escape" refer to?
• In the link-state routing process, what does a router do to share information about directly connected links?
• Which type of VPN utilizes the Transport Layer Security (TLS) feature for its connection?
• How many access control lists (ACLs) can be configured on a router that supports both IPv4 and IPv6?
• What are two purposes of launching a reconnaissance attack on a network?
• Which step in the link-state routing process is described by a router inserting best paths into the routing table?
• Which group of APIs is used by an SDN controller to communicate with various applications?
• What command is used to identify an interface as part of the external global network in NAT or PAT configuration?
• Which two IPsec protocols are primarily used to ensure data integrity?
• Which protocol is part of a system composed of a manager, agents, and an information database?
• If a router has two interfaces and is routing both IPv4 and IPv6 traffic, how many ACLs could be created and used?
• Which OSPF database is identical on all converged routers within the same OSPF area?
• What are two things a network administrator should modify on a router to perform password recovery? (Choose two.)
• What is the primary function of devices classified as DCE in a WAN setup?
• Which two characteristics are true for video traffic?
• Which HTTP method is used for reading data in a RESTful operation?
• What is the purpose of sending Hello packets in the OSPF link-state routing process?
• Which characteristic is true regarding standard IPv4 Access Control Lists (ACLs)?
• What protocol uses agents to collect and store information about managed devices and their operation?
• What type of traffic is classified as not resilient to loss?
• A company seeks technology to create and control virtual machines with access to hardware from consolidated servers. What would support this requirement?
• What is the overall purpose of OSPF in a routed network?
• What type of access control list (ACL) allows HTTP access to a server at 172.17.80.1 while denying Telnet from the 192.168.10.0/24 network?
• What two pieces of information should be included in a logical topology diagram of a network?
• What is a common goal of reconnaissance attacks in cybersecurity?
• Which of the following is considered best practice in the placement of ACLs?
• An administrator is configuring single-area OSPF and must advertise the network 10.27.27.0 255.255.255.0. What wildcard mask should be used?
• Which protocol provides authentication, integrity, and confidentiality services as a type of VPN?
• What troubleshooting method is used when a technician asks a user to enter the IP address of a web server to check connectivity?
• What wildcard mask would an administrator use in the OSPF network statement for the network 172.16.91.0 255.255.255.192?
• What aspect of secure communications ensures that the message is not a forgery?
• In OSPF, which state indicates that routers are exchanging routing information to form a complete topology database?
• Which virtual resource would be installed on a network server to provide direct access to hardware resources?
• Which technology is best recommended for interconnecting several branch offices across a metropolitan area that need to handle voice, video, and data?
• In the OSPF process, what does adjacency mean?
• Which statement accurately describes a characteristic of IPsec?
• Which troubleshooting approach is typically more effective for a seasoned network administrator?
• Which service or technology would support the requirement for a backup site for all company server data?
• What functionality does mGRE provide to the DMVPN technology?
• If a packet with a source address of 192.168.101.45 and a protocol of 23 is received on an interface with the following ACL, what will be the result?
• Why would a security testing team use fuzzers during a penetration test?
• Which type of VPN connects a central site with branch sites flexibly?
• Which OSPFv2 packet is utilized to transmit link state change information?
• Why is QoS critical in a converged network environment?
• What step must occur before packets can be marked in a Quality of Service (QoS) implementation?
• When using fuzzers, what aspect of network security do they aim to test?
• What type of VPN employs a hub-and-spoke configuration to establish a full mesh topology?
• What are three benefits of cloud computing? (Choose three.)
• In a WAN architecture, what is the primary purpose of a CSU/DSU?
• Which two types of attacks are typically used on DNS open resolvers? (Choose two.)
• Which of the following scenarios would result in a duplex mismatch? (Choose two.)
• If configuring an OSPF router to advertise the network 192.168.0.0 255.255.254.0, what wildcard mask is used?
• If the hello timer setting for an OSPF-enabled router is changed to 20 seconds, what is the new default dead interval time?
• Which type of VPN is the preferred choice for support and ease of deployment for remote access?
• For the OSPF configuration, what wildcard mask should be used to advertise the network 192.168.0.0 255.255.252.0?
• What is a key characteristic of the REST API?
• In a network troubleshooting process, what is the outcome of narrowing the scope?
• Which protocol is used to synchronize time with a master clock or internet time server?
• Which term describes the complete URL "http://www.buycarsfromus.com/2020models/ford/suv.html"?
• Which type of VPN routes packets through virtual tunnel interfaces for encryption and forwarding?
• Which public WAN access technology utilizes copper telephone lines to provide access to subscribers that are multiplexed into a single T3 link connection?
• Which type of malware is used to control computers in a zombie network?
• What protocol is a vendor-neutral Layer 2 discovery protocol that must be configured separately to transmit and receive information packets?
• What does MPLS VPN utilize to forward traffic among core routers?
• In a large enterprise network, which two functions are performed by routers at the distribution layer?
• Which type of server retains a historical record of messages from monitored network devices?
• What type of attack involves redirecting traffic to a false default gateway?
• Which protocol is a vendor-neutral Layer 2 protocol that advertises a device's identity and capabilities to other network devices?
• A network administrator is troubleshooting an OSPF problem that involves neighbor adjacency. What should the administrator do?
• What does CPE stand for in networking?
• What type of traffic is characterized by a high volume of data per packet?
• Which technology does OSPF utilize to maintain routing information?
• What type of WAN connection would best fulfill a customer's need for high-speed, dedicated bandwidth between two sites in a metropolitan area?
• Which protocol is commonly used for securing remote access connections?
• What is a required resource for a Type 1 hypervisor?
• When will an OSPF-enabled router transition from the Down state to the Init state?
• A technician is working on a Layer 2 switch and notices that a %CDP-4-DUPLEX_MISMATCH message keeps appearing for port G0/5. What command should the technician issue on the switch to start the troubleshooting process?
• When implementing QoS in a converged network, which two factors are critical to improve network performance for real-time traffic?
• What does the part "www.buyscarsfromus.com/2020models/ford/suv.html" represent in a URL?
• Why would a network security firm use password-cracking applications during a penetration test?
• In which OSPF state is the Designated Router (DR) and Backup Designated Router (BDR) election conducted?
• When configuring single-area OSPF, what wildcard mask would be used for the network 172.20.0.0 255.255.252.0?
• What command would be used to display any dynamic PAT translations that have been created by traffic?
• What is the most cost-effective method to connect two corporate networks after a merger without using leased lines?
• Which queuing mechanism has no provision for prioritizing or buffering but simply forwards packets in the order they arrive?
• What is the primary reason for using forensic tools during a penetration test?
• Which step in the link-state routing process involves a router building a link-state database based on received LSAs?
• Which technology would support a company's requirement to promote telecommuting and reduce environmental footprint?
• Which type of API allows authorized salespeople to access internal sales data from mobile devices?
• Given the networks 10.0.0.0/16, 10.1.0.0/16, and 10.2.0.0/16, which command correctly advertises only the 10.1.0.0 network in OSPF?
• Which requirements must an extended ACL include?
• How can a network administrator modify an ACL to include FTP transfers from any source IP address?
• When configuring an ACL, where should extended ACLs ideally be placed?
• Which technology is used to provide redundancy at the network layer?
• Which HTTP method is associated with deleting a resource in a RESTful context?
• In a point-to-point link with two OSPF-enabled routers, which router sends the DBD packets first?
• What is a common use of VLAN in enterprise networks?
• If an ACL rule permits TCP traffic from 172.18.20.0 to 172.18.20.32 for FTP, how would a packet from 172.18.20.14 to 172.18.20.40 with a protocol of 21 be treated?
• In OSPF, what role do DBD packets play during the ExStart state?
• How can an outside host gain access to the Cisco AnyConnect client if it is not preinstalled?
• Which type of VPN involves a nonsecure tunneling protocol being encapsulated by IPsec?
• What command would be used to display NAT configuration parameters?
• Which two statements describe the use of asymmetric algorithms?
• Which OSPF table is the same on all converged routers within an OSPF area?
• What is defined as a physical connection from the customer to the service provider POP?
• Why would penetration testers use packet sniffers on a corporate network?
• What term refers to adding a value to the packet header to ensure it matches a defined policy?
• What is the name of the layer in the Cisco borderless switched network design that serves as the backbone for high-speed connectivity?
• Which feature of dynamic routing protocols helps to prevent routing loops?
• What protocol enables a manager to poll agents and access information from the agent MIB?
• Which type of traffic is most sensitive to quality issues like latency and jitter?
• Which two commands should be used to write a standard ACL that denies traffic from the 172.16.0.0/16 network but permits all other traffic?
• What are two benefits of extending access layer connectivity to users through a wireless medium?
• What type of VPN can handle multicast and broadcast traffic in a secure manner?
• What is one reason for using the ip ospf priority command in OSPF?
• What is used to pre-populate the adjacency table on Cisco devices that use CEF to process packets?
• Which two statements are syntax rules for writing a JSON array?
• Which three traffic-related factors would influence selecting a particular WAN link type?
• What is a characteristic of a Type 2 hypervisor?
• If an ACL entry permits TCP traffic from a specific source to a destination at a certain port, what will happen to a packet with a different protocol?
• Which troubleshooting approach is essential for effective problem-solving in networking?
• What is the purpose of placing standard ACLs close to the destination?
• What is the purpose of the ARP protocol in a network?
• Which type of OSPF packet is used by a router to discover neighbor routers?
• What type of traffic is described as requiring latency to be no more than 400 milliseconds (ms)?
• Which of the following best describes a network baseline?
• What are three components typically found in the query portion of a RESTful API request? (Choose three.)
• Which component is called DTE in networking?
• What is the purpose of establishing a network baseline?
• What networking trend is being implemented when a data center hosts multiple operating systems on a single CPU for each customer?
• Why would a security team use specially designed operating systems for penetration tests?
• Which command would you use to check the OSPF router ID of a neighboring router?
• Which two statements are characteristics of a virus? (Choose two.)
• Which command shows active NAT translations on a device?
• What distinguishes a botnet from other forms of malware?
• Why would a penetration testing team use applications such as Nmap, SuperScan, and Angry IP Scanner?
• What is a characteristic of the two-tier spine-leaf topology of the Cisco ACI fabric architecture?
• What command is used to clear dynamic NAT entries before the timeout has expired?
• What command is used to define a pool of addresses for translation in NAT or PAT configuration?
• Which statement accurately describes URI in terms of web addresses?