Cisco 100-150 Cisco Certified Support Technician Networking Exam Exam Practice Test

The correct matching of the security options to their characteristics is as follows:

WPA2-Enterprise: Uses a RADIUS server for authentication

WEP: Uses a minimum of 40 bits for encryption

WPA2-Personal: Uses AES and a pre-shared key for authentication

Here’s why each security option matches the characteristic:

WPA2-Enterprise uses a RADIUS server for authentication, which provides centralized Authentication, Authorization, and Accounting (AAA) management for users who connect and use a network service.

WEP (Wired Equivalent Privacy) is an outdated security protocol that uses a minimum of 40 bits for encryption (and up to 104 bits), which is relatively weak by today’s standards.

WPA2-Personal (Wi-Fi Protected Access 2 - Personal) uses the Advanced Encryption Standard (AES) for encryption and a pre-shared key (PSK) for authentication, which is shared among users to access the network.

These security options are essential for protecting wireless networks from unauthorized access and ensuring data privacy.

Router

The show running-config command is used on a Cisco router to display the current operational settings that are actively configured in the router’s RAM. This command outputs all the configurations that are currently being executed by the router, which includes interface configurations, routing protocols, access lists, and other settings. Unlike show startup-config, which shows the saved configuration that the router will use on the next reboot, show running-config reflects the live, current configuration in use.

References := The information is supported by multiple sources that detail the use of Cisco commands, particularly the show running-config command as the standard for viewing the active configuration on a Cisco device123.

show running-config: This command displays the current configuration running on the router. It includes all the operational settings and configurations applied to the router.

show protocols: This command shows the status of configured protocols on the router but not the entire configuration.

show startup-config: This command displays the configuration saved in NVRAM, which is used to initialize the router on startup, but not necessarily the current running configuration.

show version: This command provides information about the router's software version, hardware components, and uptime but does not display the running configuration.

References:

Cisco IOS Commands: Cisco IOS Commands

A firewall can direct all web traffic to a specific IP address.

True: Firewalls can be configured to perform Network Address Translation (NAT) and port forwarding, which can direct all web traffic (typically on port 80 and 443) to a specific internal IP address.

A firewall can block traffic to specific ports on internal computers.

True: Firewalls can be configured with access control lists (ACLs) or rules to block traffic to specific ports on internal computers, enhancing security by restricting unwanted or harmful traffic.

A firewall can prevent specific apps from running on a computer.

False: Firewalls typically control traffic flow and do not prevent specific applications from running on a computer. Application control is usually managed by endpoint security software or application control systems.

Directing Web Traffic: Firewalls can manage traffic redirection using NAT and port forwarding rules to route web traffic to designated servers or devices within the network.

Blocking Specific Ports: Firewalls can enforce security policies by blocking or allowing traffic based on port numbers, ensuring that only permitted traffic reaches internal systems.

Application Control: While firewalls manage network traffic, preventing applications from running typically requires software specifically designed for endpoint protection and application management.

References:

Understanding Firewalls: Firewall Capabilities

Network Security Best Practices: Network Security Guide

The primary purpose of assigning an IP address to the management VLAN interface on a Layer 2 switch is to facilitate remote management of the switch. By configuring an IP address on the management VLAN, network administrators can access the switch’s Command Line Interface (CLI) remotely using protocols such as Telnet or Secure Shell (SSH). This allows for convenient configuration changes, monitoring, and troubleshooting without needing physical access to the switch1.

References :=

•Understanding the Management VLAN

•Cisco - VLAN Configuration Guide

•Remote Management of Switches

Assigning an IP address to the management VLAN interface (often the VLAN 1 interface by default) on a Layer 2 switch allows network administrators to remotely manage the switch using protocols such as Telnet or SSH. This IP address does not affect the switch's ability to route traffic between VLANs but provides a means to access and configure the switch through its Command Line Interface (CLI).

•A: The switch does not act as a default gateway; this is typically a function of a Layer 3 device like a router.

•B: The switch does not resolve URLs; this is typically a function of DNS servers.

•C: The switch can relay DHCP requests but does not typically provide DHCP services itself; this is usually done by a dedicated DHCP server or router.

Thus, the correct answer is D. To enable access to the CLI on the switch through Telnet or SSH.

References :=

•Cisco VLAN Management Overview

•Cisco Catalyst Switch Management

Statement A: "A detailed description of the fault." This is essential for support staff to understand the nature of the problem and begin troubleshooting effectively.

Statement C: "A description of the conditions when the fault occurs." This helps in reproducing the issue and identifying patterns that might indicate the cause of the fault.

Statement B: "Details about the computers connected to the network." While useful, this is not as immediately critical as understanding the fault itself and the conditions under which it occurs.

Statement D: "The actions taken to resolve the fault." This is important but typically follows the initial report.

Statement E: "The description of the top-down fault-finding procedure." This is more of a troubleshooting methodology than information typically included in an initial support ticket.

References:

Best Practices for Submitting Support Tickets: Support Ticket Guidelines

Understanding How Layer 2 Switches Handle Unknown MAC Addresses

Switches operate at Layer 2 (Data Link Layer) of the OSI model and maintain a MAC address table (CAM table) to forward frames efficiently.

When a switch receives a frame, it checks its MAC address table to see if it knows the destination MAC address.

If the destination MAC address is not in the table (meaning the switch does not know which port leads to PC-C), the switch follows the flooding behavior.

What Happens When Switch1 Receives a Frame from PC-A to PC-C?

Switch1 checks its MAC table:

The source MAC (PC-A) is recorded in the table on port G0/1.

The destination MAC (PC-C) is not in the table.

Switch1 does not know where PC-C is:

It floods the frame out of all active ports except the port it was received on (G0/1).

This means the frame is sent to:

Switch2 (via G0/23)

PC-B (via G0/2)

Switch2 receives the frame and follows the same process:

If Switch2 has PC-C's MAC in its table, it forwards the frame appropriately.

If not, it floods the frame again until PC-C replies.

Once PC-C responds, Switch1 and Switch2 learn its MAC address and update their tables.

Why Other Options Are Incorrect:

❌ A. Switch1 queries Switch2 for the MAC address of PC-C.

Incorrect: Switches do not query other switches directly for MAC addresses. Instead, they rely on learning MAC addresses dynamically through frame forwarding.

❌ B. Switch1 drops the frame and sends an error message back to PC-A.

Incorrect: Switches do not drop frames for unknown MAC addresses. Instead, they flood the frames out all ports except the incoming port.

❌ D. Switch1 sends an ARP request to obtain the MAC address of PC-C.

Incorrect:

ARP (Address Resolution Protocol) is only used to resolve IP addresses to MAC addresses.

Since PC-A is sending a frame (Layer 2), not an IP packet (Layer 3), ARP is not involved here.

Conclusion

Since Switch1 does not know the destination MAC address, it floods the frame out all active ports except the port it was received on. This is the default behavior of Layer 2 switches when they encounter an unknown MAC address.

Thus, the correct answer is:✔ C. Switch1 floods the frame out all active ports except port G0/1.

References

Cisco CCNA 200-301 Official Guide – MAC Address Table & Frame Forwarding

RFC 894 – Standard for Ethernet Frame Forwarding

Cisco Networking Essentials – Switch Flooding Behavior

•Statement B: "The same default gateway IPv4 address is configured on each host on the local network." This is true because all hosts on the same local network (subnet) use the same default gateway IP address to send packets destined for other networks.

•Statement D: "The default gateway is the IPv4 address of the router interface connected to the same local network as the host." This is true because the default gateway is the IP address of the router's interface that is directly connected to the local network.

•Statement A: "The IPv4 address of the default gateway must be the first host address in the subnet." This is not necessarily true. The default gateway can be any address within the subnet range.

•Statement C: "The default gateway is the Loopback0 interface IPv4 address of the router connected to the same local network as the host." This is not true; the default gateway is the IP address of the router's physical or logical interface connected to the local network.

•Statement E: "Hosts learn the default gateway IPv4 address through router advertisement messages." This is generally true for IPv6 with Router Advertisement (RA) messages, but not typically how IPv4 hosts learn the default gateway address.

References:

•Cisco Default Gateway Configuration: Cisco Default Gateway

The correct matching of the MFA factors to their examples is as follows:

Entering a one-time security code sent to your device after logging in: Possession

Holding your phone to your face to be recognized: Inherence

Specifying your user name and password to log on to a service: Knowledge

Here’s why each factor matches the example:

Possession: This factor is something the user has, like a mobile device. A one-time security code sent to this device falls under this category.

Inherence: This factor is something the user is, such as a biometric characteristic. Facial recognition using a phone is an example of this factor.

Knowledge: This factor is something the user knows, like a password or PIN.

Multi-Factor Authentication (MFA) enhances security by requiring two or more of these factors to verify a user’s identity before granting access.

Entering a one-time security code sent to your device after logging in.

Factor: Possession

Explanation: This factor relates to something you have, such as a device that receives a security code.

Holding your phone to your face to be recognized.

Factor: Inference (typically referred to as Inherence or Biometric)

Explanation: This factor relates to something you are, such as biometric authentication like facial recognition.

Specifying your username and password to log on to a service.

Factor: Knowledge

Explanation: This factor relates to something you know, such as a username and password.

Possession Factor: This involves something the user has in their possession. Receiving a one-time security code on a device (e.g., phone) is an example of this.

Inference Factor (Inherence/Biometric): This involves something inherent to the user, such as biometric verification (e.g., facial recognition or fingerprint scanning).

Knowledge Factor: This involves something the user knows, such as login credentials (username and password).

References:

Multi-Factor Authentication (MFA) Explained: MFA Guide

Understanding Authentication Factors: Authentication Factors

The IEEE 802.11 standard contains the specifications for Wi-Fi networks. It is a set of media access control (MAC) and physical layer (PHY) specifications for implementing wireless local area network (WLAN) computer communication in various frequencies, including but not limited to 2.4 GHz, 5 GHz, and 6 GHz1. This standard is maintained by the Institute of Electrical and Electronics Engineers (IEEE) and is commonly referred to as Wi-Fi. The standard has evolved over time to include several amendments that improve speed, range, and reliability of wireless networks.

References :=

•The Most Common Wi-Fi Standards and Types, Explained

•802.11 Standards Explained: 802.11ax, 802.11ac, 802.11b/g/n, 802.11a

•Wi-Fi Standards Explained - GeeksforGeeks

=========================

The private IP address ranges that are set aside specifically for use within private networks and not routable on the internet are as follows:

Class A: 10.0.0.0 to 10.255.255.255

Class B: 172.16.0.0 to 172.31.255.255

Class C: 192.168.0.0 to 192.168.255.255

These ranges are defined by the Internet Assigned Numbers Authority (IANA) and are used for local communications within a private network123.

Given the options: A. 172.16.0.0 to 172.31.255.255 falls within the Class B private range. B. 192.16.0.0 to 192.16.255.255 is not a recognized private IP range. C. 11.0.0.0 to 11.255.255.255 is not a recognized private IP range. D. 192.168.0.0 to 192.168.255.255 falls within the Class C private range.

Therefore, the correct selections that the company should use for their private networks are A and D.

References :=

Reserved IP addresses on Wikipedia

Private IP Addresses in Networking - GeeksforGeeks

Understanding Private IP Ranges, Uses, Benefits, and Warnings

OSI model

During the data encapsulation process, the Data Link layer of the OSI model is responsible for adding a header that contains MAC addressing information and a trailer used for error checking. The header typically includes the source and destination MAC addresses, while the trailer contains a Frame Check Sequence (FCS) which is used for error detection1.

The Data Link layer ensures that messages are delivered to the proper device on a LAN using hardware addresses and translates messages from the Network layer into bits for the Physical layer to transmit. It also controls how data is placed onto the medium and is received from the medium through the physical hardware.

References :=

The OSI Model – The 7 Layers of Networking Explained in Plain English

OSI Model - Network Direction

Which layer adds both header and trailer to the data?

What is OSI Model | 7 Layers Explained - GeeksforGeeks

•192.168.200.0/24 Network: This subnet includes all addresses from 192.168.200.0 to 192.168.200.255. The /24 indicates a subnet mask of 255.255.255.0, which allows for 256 addresses.

•192.168.199.13: This address is in the 192.168.199.0/24 subnet, not the 192.168.200.0/24 subnet.

•192.168.200.13: This address is within the 192.168.200.0/24 subnet.

•192.168.201.13: This address is in the 192.168.201.0/24 subnet, not the 192.168.200.0/24 subnet.

•192.168.1.13: This address is in the 192.168.1.0/24 subnet, not the 192.168.200.0/24 subnet.

References:

•Subnetting Guide: Subnetting Basics