Question 1

When deploying syslog, which severity level logs informational messages?
A) 0
B) 2
C) 4
D) 6

Accepted Answer

Severity level 6 in syslog is used for informational messages.

Question 2

When the active router in an HSRP group fails, what router assumes the role and forwards packets?
A) forwarding
B) listening
C) standby
D) backup

Accepted Answer

In HSRP (Hot Standby Router Protocol), the standby router takes over the role of the active router when it fails, ensuring continuous packet forwarding.

Question 3

What is the primary difference between AAA authentication and authorization?
A) Authentication identifies and verifies a user who is attempting to access a system, and authorization controls the tasks the user can perform.
B) Authentication controls the system processes a user can access, and authorization logs the activities the user initiates.
C) Authentication verifies a username and password, and authorization handles the communication between the authentication agent and the user database.
D) Authentication identifies a user who is attempting to access a system, and authorization validates the user's password.

Accepted Answer

Authentication is the process of verifying the identity of a user, while authorization determines what resources or actions the user is permitted to access or perform.

Question 4

An engineer is configuring NAT to translate the source subnet of 10.10.0.0/24 to any one of three addresses: 192.168.3.1, 192.168.3.2, or 192.168.3.3. Which configuration should be used?
A) 
B) 
C) 
D)

Accepted Answer

The answer of An engineer is configuring NAT to translate...

Question 5

Which type of address is the public IP address of a NAT device?
A) outside global
B) outside local
C) inside global
D) inside local
E) outside public
F) inside public

Accepted Answer

The answer of Which type of address is the public...

Question 6

Refer to the exhibit. Which two events occur on the interface, if packets from an unknown Source address arrive after the interface learns the maximum number of secure MAC address? (Choose two.) 
A) The security violation counter dose not increment
B) The port LED turns off
C) The interface is error-disabled
D) A syslog message is generated
E) The interface drops traffic from unknown MAC address

Accepted Answer

The answer of Refer to the exhibit. Which two events...

Question 7

Which technology must be implemented to configure network device monitoring with the highest security?
A) IP SLA
B) syslog
C) NetFlow
D) SNMPv3

Accepted Answer

The answer of Which technology must be implemented to configure...

Question 8

Refer to the exhibit. Which statement about the interface that generated the output is true? 
A) A syslog message is generated when a violation occurs.
B) One secure MAC address is manually configured on the interface.
C) One secure MAC address is dynamically learned on the interface.
D) Five secure MAC addresses are dynamically learned on the interface.

Accepted Answer

The answer of Refer to the exhibit. Which statement about...

Question 9

What is a function of TFTP in network operations?
A) transfers IOS images from a server to a router for firmware upgrades
B) transfers a backup configuration file from a server to a switch using a username and password
C) transfers a configuration files from a server to a router on a congested link
D) transfers files between file systems on a router

Accepted Answer

The answer of What is a function of TFTP in...

Question 10

Which feature or protocol determines whether the QOS on the network is sufficient to support IP services?
A) LLDP
B) CDP
C) IP SLA
D) EEM

Accepted Answer

IP SLA (Internet Protocol Service Level Agreement) is used to measure network performance and can determine if the QoS (Quality of Service) is sufficient to support IP services by simulating traffic and measuring response times, latency, and other performance metrics.

Question 11

What mechanism carries multicast traffic between remote sites and supports encryption?
A) ISATAP
B) IPsec over ISATAP
C) GRE
D) GRE over IPsec

Accepted Answer

GRE over IPsec supports carrying multicast traffic between remote sites and provides encryption through IPsec.

Question 12

What is the purpose of traffic shaping?
A) to be a marking mechanism that identifies different flows
B) to provide fair queuing for buffered flows
C) to mitigate delays over slow links
D) to limit the bandwidth that a flow can use

Accepted Answer

Traffic shaping is used to control the amount of bandwidth a flow can use, ensuring that network resources are allocated according to policy and preventing any single flow from consuming excessive bandwidth.

Question 13

Where does the configuration reside when a helper address is configured lo support DHCP?
A) on the router closest to the server
B) on the router closest to the client
C) on every router along the path
D) on the switch trunk interface

Accepted Answer

The helper address is configured on the router closest to the client to forward DHCP requests to the DHCP server.

Question 14

Refer to the exhibit. Which two statements about the interface that generated the output are true? (Choose two.) 
A) learned MAC addresses are deleted after five minutes of inactivity
B) the interface is error-disabled if packets arrive from a new unknown source address
C) it has dynamically learned two secure MAC addresses
D) it has dynamically learned three secure MAC addresses
E) the security violation counter increments if packets arrive from a new unknown source address

Accepted Answer

The answer of Refer to the exhibit. Which two statements...

Question 15

Which keyword in a NAT configuration enables the use of one outside IP address for multiple inside hosts?
A) source
B) static
C) pool
D) overload

Accepted Answer

The "overload" keyword in NAT configuration allows multiple inside hosts to share a single outside IP address by using different port numbers, a technique known as Port Address Translation (PAT).

Question 16

Which two QoS tools provide congestion management? (Choose two.)
A) CBWFQ
B) FRTS
C) CAR
D) PBR
E) PQ

Accepted Answer

The answer of Which two QoS tools provide congestion management?...

Question 17

In QoS, which prioritization method is appropriate for interactive voice and video?
A) traffic policing
B) round-robin scheduling
C) low-latency queuing
D) expedited forwarding

Accepted Answer

The answer of In QoS, which prioritization method is appropriate...

Question 18

A network administrator enabled port security on a switch interface connected to a printer. What is the next configuration action in order to allow the port to learn the MAC address of the printer and insert it into the table automatically?
A) enable dynamic MAC address learning
B) implement static MAC addressing
C) enable sticky MAC addressing
D) implement auto MAC address learning

Accepted Answer

Sticky MAC addressing allows the switch to automatically learn and store the MAC address of the connected device, such as a printer, in the MAC address table.

Question 19

An organization secures its network with multi-factor authentication using an authenticator app on employee smartphones. How is the application secured in the case of a user's smartphone being lost or stolen?
A) The application requires the user to enter a PIN before it provides the second factor
B) The application requires an administrator password to reactivate after a configured interval
C) The application verifies that the user is in a specific location before it provides the second factor
D) The application challenges a user by requiring an administrator password to reactivate when the smartphone is rebooted

Accepted Answer

The application requires the user to enter a PIN before it provides the second factor, adding an additional layer of security in case the smartphone is lost or stolen.

Question 20

Which device performs stateful inspection of traffic?
A) switch
B) firewall
C) access point
D) wireless controller

Accepted Answer

A firewall performs stateful inspection of traffic, which means it keeps track of the state of network connections and uses this information to make decisions about whether to allow or deny traffic.

Exam 4: Cisco Certified Network Associate (CCNA)

When deploying syslog, which severity level logs informational messages?

When the active router in an HSRP group fails, what router assumes the role and forwards packets?

What is the primary difference between AAA authentication and authorization?

An engineer is configuring NAT to translate the source subnet of 10.10.0.0/24 to any one of three addresses: 192.168.3.1, 192.168.3.2, or 192.168.3.3. Which configuration should be used?

Which type of address is the public IP address of a NAT device?

Refer to the exhibit. Which two events occur on the interface, if packets from an unknown Source address arrive after the interface learns the maximum number of secure MAC address? (Choose two.)

Which technology must be implemented to configure network device monitoring with the highest security?

Refer to the exhibit. Which statement about the interface that generated the output is true?

What is a function of TFTP in network operations?

Which feature or protocol determines whether the QOS on the network is sufficient to support IP services?

What mechanism carries multicast traffic between remote sites and supports encryption?

What is the purpose of traffic shaping?

Where does the configuration reside when a helper address is configured lo support DHCP?

Refer to the exhibit. Which two statements about the interface that generated the output are true? (Choose two.)

Which keyword in a NAT configuration enables the use of one outside IP address for multiple inside hosts?

Which two QoS tools provide congestion management? (Choose two.)

In QoS, which prioritization method is appropriate for interactive voice and video?

A network administrator enabled port security on a switch interface connected to a printer. What is the next configuration action in order to allow the port to learn the MAC address of the printer and insert it into the table automatically?

An organization secures its network with multi-factor authentication using an authenticator app on employee smartphones. How is the application secured in the case of a user's smartphone being lost or stolen?

Which device performs stateful inspection of traffic?