1

Whichruleshouldbefollowedwhenimplementingthesecurityrequirementsofa networkdesign? 2 Alwaysuseacommonsecurityplanforallbusinessneeds. Asstandardpractice,loweraccessrestrictionsforusersifcostistoohigh. Avoidreducingsecurityinordertoaddadditionalnetworkcapabilities. Whenpossible,implementanIDStoprotectusersfromspam.

Whatlimitationsofthe2960switchpreventitfromprovidingtheservicesneeded intheDistributionlayer? 3 Itislimitedtocopperconnections. ItdoesnotsupportQoS. ItdoesnotsupportvoiceVLANcapability. Itdoesnotperformroutesummarization.

Whenconsideringconvergednetworkdesigns,itisimportanttoidentify appropriateservicedemands.Whatisaconcernwhenpreparinganetworkdesign tofitthisenvironment? businessdatacompensationforsensitivitytonoise locationandplacementoffirewalls voicelevelqualityofservice securitypolicyrequirements

Refertotheexhibit.Whatisanadvantageofhavingtwolinksconnectedbetween thetwoswitchesshown? fails 5 providesredundancyincaseoneoftheswitchesfails providesconnectivitytoSwitch1whenthelinktotheserverfails providesconnectivitywhenoneoftheconnectionsbetweentheswitches providespowertotheotherswitchwhentheotherswitchhaslostACpower

Whichthreedesignrequirementsareimplementedattheaccesslayer?(Choose three.) PoE VLANs highdensityrouting packetfiltering rapidlyconvergingroutingprotocols QoStrafficclassificationandmarking

WhatarethreefeaturesofaCatalyst2960switch?(Choosethree.) 7 networklayerfunctionality redundantpoweravailability routesummarization SNMP switchclustering interVLANrouting

WhattypeofWANserviceisFrameRelay? 8 dedicated cellswitched packetswitched circuitswitched

Whichstatementappliestoalargenetworkwiththousandsofnodes? EachwirelessphoneisnormallyinaseparateVLANforsecurityreasons.

Multiplefirewallsexistthroughouttheaccesslayerformaximumsecurity protection. Firewallscannotbeimplementedinthemultilayerswitchesandrouters.

Intrusiondetectionismorelikelytobeperformedbyaseparatedevice ratherthanintegratedintoaswitchorrouter.

AstatefundedcollegewantstoimplementCiscowirelessIPphonesforemployees tousewhileoncampus.Thecollegecurrentlyhasonlywirednetworkdeviceaccess. Whichtwodevicesmustbeincorporatedintothenetworkdesigntobest accommodateroamingforwirelessIPphones?(Choosetwo.) 10 voiceVLANcapableswitch autonomousAP PoEswitch CiscowirelessLANcontroller 2960switchwith48100Mbports lightweightaccesspoints

Acompanyliststhisequipmentintheirnetworkdesign: *TwoCatalyst4503Layer3switches *One5500securityappliancefirewall *TwoCatalyst6509switches *Twolightweightaccesspoints *TwoCatalyst2960switches Whichtwotypesofdevicesfromthelistwouldbeappropriatetouseattheaccess layertoprovideenduserconnectivity?(Choosetwo.) Catalyst4503switches Cisco5500securityappliancefirewall Catalyst6509switches lightweightaccesspoints Catalyst2960switches

11

WhatisafunctionoftheaccesslayerintheCiscothreelayerhierarchical internetworkingmodel? 12 toprovideQoSclassificationandmarking toimplementafastconvergingroutingprotocol touseroutedinterconnectionsbetweendevices toaggregatetrafficandperformroutesummarization

Whenapplyingnetworksecurity,whatsecuritymeasureshouldbeimplemented first? 13 securingthenetworkdevices implementingthefirewallsorfiltersattheenterpriseedge applyingsecuritytoresourcesaccessedbyinternalusers applyingACLstotheinterfacesoftheroutersintheinternalnetwork

Whatcharacteristicofanetworksupportshighavailabilitytoprovidethe99.999% uptimerequirement? 14 VPNs highbandwidthpathtoservers redundancy wirelessmanagement

WhatisintegratedintoaCiscoIPphonetoreducethenumberofportsneededin thewiringcloset? hub router switch firewallappliance

15

Whichnetworkdesignprocessidentifiesthebestlocationstoplaceaccesspoints? 16 sitesurvey riskassessment scalabilitydesign networkprotocolanalysis

Usingexpandable,modularnetworkdevicesisakeyelementofwhatnetwork designcriteria? 17 availability performance scalability security

WhatisaprimaryfunctionofawirelessLANcontroller? tuningeachAPchannelforoptimalcoverage providingPoEtothewirelessclients distributingVLANinformationtothewirelessclients

servingasthepointofconnectionbetweenwirelessclientsandthewiredLAN 18

Whatcharacteristicinaroutingprotocolallowsittosupportthenetworkdesign criteriaforavailability? CIDRsupport fastconvergence timedupdates VLSMsupport

 19

Refertotheexhibit.WhichstatementistrueregardinghowtheISProuterfilters traffic? Trafficfromthe64.100.0.1addresstoanydestinationontheInternetis denied. TrafficfromanysourceaddressenteringtheISProuterinterfaces0/0/0is permitted. Onlytrafficwithasourceaddressof64.100.0.1/30isallowedintotheISP routerinterfaces0/0/0. Alltrafficfromthe64.100.0.0/21networkcanaccesstheInternet. Trafficfromanysourceaddresscanaccessthe64.100.0.0/21network.

 20

WhichtwostatementsaretrueregardingthefollowingextendedACL?(Choose two.) accesslist101denytcp172.16.3.00.0.0.255anyeq20 accesslist101denytcp172.16.3.00.0.0.255anyeq21 accesslist101permitipanyany 21 FTPtrafficoriginatingfromnetwork172.16.3.0/24isdenied. Alltrafficisimplicitlydenied. FTPtrafficdestinedforthe172.16.3.0/24networkisdenied. Telnettrafficoriginatingonnetwork172.16.3.0/24isdenied. Webtrafficoriginatingfrom172.16.3.0ispermitted.

AnetworkdesignerisselectingaWANtechnologyforconnectionsbetweenthe headquartersofanorganizationanditsbranchoffices.Inthiscontext,whatisone advantageofchoosingFrameRelayoveraT1line? moresecure flexiblebandwidth sharedmediaacrossthelink efficiencywithfixedlengthpacketsize

22

Anautomobilesalescompanyisestablishinganew,smallsalesshowroomina downtownarea.Toupdatetheinventorydatabase,thenewsalesofficewillneeda WANconnectiontotheheadquartersthatislocatedinthesuburbanarea.TheWAN connectionshouldbearounda4Mb/sconnection.WhichWANservicewillprovide themosteconomicalapproachtomeettherequirement? 23 DSL ATM T1line FrameRelay

Refertotheexhibit.Thebranchofficeneedsconstantaccesstotheserversinthe enterpriseheadquarters.Therefore,abackupFrameRelaylinkisadded.Anetwork administratorisconfiguringtheroutersinthebranchofficetomakesurethatwhen thebackupFrameRelaylinkisused,onlythetraffictoaccesstheenterprise headquartersisallowed.Whichstatementistrueabouttheroutingconfigurationon branchofficeedgerouters? Thecommandiproute0.0.0.00.0.0.0serial0/050shouldbeconfiguredon BE2. Thecommandiproute128.107.0.0255.255.0.0serial0/050shouldbe configuredonBE1. Thecommandiproute128.107.0.0255.255.0.0serial0/050shouldbe configuredonBE2. Thecommandiproute192.135.250.0255.255.255.0serial0/050shouldbe configuredonBE1

24

Anetworkdesignerisevaluatingthenetworksecurityimplementationforan organization.Thedesignerrecommendsaddingnetworksecuritydevicesinfrontof theserverfarm,althoughnetworksecuritydeviceshavebeendeployedinthe EnterpriseEdgefortwoyears.Whattypeofattackcanbeeffectivelypreventedwith thisrecommendation? 25 virusattack internalattack Internetattack phishingattack

WhichtwofactorsshouldbeconsideredwhendesigningawirelessLANthat providesseamlessroamingcapabilities?(Choosetwo.) useofawirelesscontrollertomanageIPaddressing typeofroutingprotocols locationofexistingwiredclients coverage positionofMDF