Cisco 640-802 Exam - CertifySky.com

Free 640-802 Sample Questions:

1. You are a network administrator at XXYYinc.com, in order to improve the security of XXYYinc's switching network , refer to the following options. Which two methods are examples of implementing Layer 2 security on a Cisco switch? (Choose two.)
A. disable trunk negotiation on the switch
B. use only protected Telnet sessions to connect to the Cisco device
C. configure a switch port host where appropriate
D. enable HTTP access to the switch for security troubleshooting
Answer: A, C

2. A single 802.11g access point has been configured and installed in the center of a square shaped XXYYinc office. A few wireless XXYYinc users are experiencing slow performance and drops while most users are operating at peak efficiency. From the list below, what are three likely causes of this problem? (Choose three)
A. mismatched TKIP encryption
B. null SSID
C. cordless phones
D. mismatched SSID
E. metal file cabinets
F. antenna type or direction
Answer: C, E, F

3. Refer to the exhibit. The two connected ports on the TIS­S are not turning orange or green. What would be the most effective steps to troubleshoot this physical layer problem? (Choose three.)

A. Ensure that the Ethernet encapsulations match on the interconnected TIS­R and TIS­S ports.
B. Ensure that cables A and B are straight­through cables.
C. Reseat all cables.
D. Ensure the TIS­S has power.
Answer: B, C, D

4. An administrator is configuring a router that will act as the hub in a Frame Relay hub­and­spoke topology. What is the advantage of using point­to­point subinterfaces instead of a multipoint interface on this router?
A. It avoids split­horizon issues with distance vector routing protocols.
B. Only one IP network address needs to be used to communicate with all the spoke devices.
C. Only a single physical interface is needed with point­to­point subinterfaces, whereas a multipoint interface logically combines multiple physical interfaces.
D. Point­to­point subinterfaces offer greater security compared to a multipoint interface configuration.
Answer: A

5. Refer to the exhibit. What two facts can be determined from the WLAN diagram? (Choose two.)

A. Access points in each cell must be configured to use channel 1.
B. The network diagram represents an extended service set (ESS).
C. The area of overlap of the two cells represents a basic service set (BSS).
D. The area of overlap must be less than 10% of the area to ensure connectivity.
E. The two APs should be configured to operate on different channels.
Answer: B, E

6. Refer to the graphic. It has been decided that TIS­workstation1 should be denied access to Server1. Which of the following commands are required to prevent only TIS­workstation1 from accessing Server1 while allowing all other traffic to flow normally? (Choose two.)

A. TIS­RA(config)# interface fa0/0
TIS­RA(config­if)# ip access­group 101 out
B. TIS­RA(config)# interface fa0/0
TIS­RA(config­if)# ip access­group 101 in
C. TIS­RAconfig)# access­list 101 deny ip host 172.16.161.150 host 172.16.162.163
TIS­RA(config)# access­list 101 permit ip any any
D. TIS­RA(config)# access­list 101 deny ip 172.16.161.150 0.0.0.255 172.16.162.163 0.0.0.0
TIS­RA(config)# access­list 101 permit ip any any
Answer: B, C

7. If you are a security administrator of the enterprise network ,you will see many different types of attacks that threaten the security of network. Which type of attack is characterized by a flood of packets that are requesting a TCP connection to a server?
A. denial of service
B. Computer Virus
C. reconnaissance
D. Trojan horse
Answer: A

8. How many subnets can be gained by subnetting 172.17.32.0/23 into a /27 mask, and how many usable host addresses will there be per subnet?
A. 8 subnets, 31 hosts
B. 8 subnets, 32 hosts
C. 16 subnets, 30 hosts
D. A Class B address can't be subnetted into the fourth octet.
Answer: C

9. Part of the XXYYinc WAN is shown below:
XXYYinc2 configuration exhibit: XXYYinc2#show ip route C 192.168.1.0/24 is directly connected to Fa0/1.1 C 192.168.2.0/24 is directly connected to Fa0/1.2 XXYYinc network administrator has created a new VLAN on XXYYinc1 and added host TISC and host TISD. This administrator has properly configured switch interfaces FastEthernet0/13 through FastEthernet0/14 to be members of the new VLAN. However, after the network administrator completed the configuration, host TISA could communicate with host TISB, but host TISA could not communicate with host TISC or host TISD. Which commands are required to resolve this problem?

A. XXYYinc2(config)# interface fastethernet 0/1.3
XXYYinc2(config­if)# encapsulation dot1q 3
XXYYinc2(config­if)# ip address 192.168.3.1 255.255.255.0
B. XXYYinc2 (config)# router rip
XXYYinc2 (config­router)# network 192.168.5.0
XXYYinc2 (config­router)# network 192.168.3.0
XXYYinc2 (config­router)# network 192.168.8.0
C. XXYYinc1# vlan database
XXYYinc1 (vlan)# vtp v2­mode
XXYYinc1 (vlan)# vtp password XXYYinc
XXYYinc1 (vlan)# vtp server
D. XXYYinc1 (config)# interface fastethernet 0/15
XXYYinc1 (config­if)# switchport mode trunk
XXYYinc1 (config­if)# switchport trunk encapsulation dot1q
Answer: A

10. Given the partial router configuration in the graphic, why does the TIS­PC1 and TIS­PC2 with the IP address 192.168.1.153/28 fail to access the Internet? (Choose two.)

A. The NAT inside interfaces are not configured properly.
B. The NAT outside interface is not configured properly.
C. The router is not properly configured to use the access control list for NAT.
D. The NAT pool is not properly configured to use routable outside addresses.
Answer: A, C

11. A XXYYinc network administrator wants to add a line to an access list that will block only Telnet access by the hosts on subnet 192.168.1.128/28 to the server at 192.168.1.5. What command should be issued to accomplish this task?
A. access­list 101 deny tcp 192.168.1.128 0.0.0.15 192.168.1.5 0.0.0.0 eq 23
access­list 101 permit ip any any
B. access­list 101 deny tcp 192.168.1.128 0.0.0.240 192.168.1.5 0.0.0.0 eq 23
access­list 101 permit ip any any
C. access­list 1 deny tcp 192.168.1.128 0.0.0.255 192.168.1.5 0.0.0.0 eq 21
access­list 1 permit ip any any
D. access­list 1 deny tcp 192.168.1.128 0.0.0.15 host 192.168.1.5 eq 23
access­list 1 permit ip any any
Answer: A

12. Part of the XXYYinc network is shown below:

In this XXYYinc network segment,the following ACL was configured on the S0/0 interface of router XXYYinc2 in the outbound direction:
access­list 101 deny tcp 192.168.15.32 0.0.0.15 any eq telnet access­list 101 permit ip any any Which two packets, if routed to the interface, will be denied?(Choose two)
A. source ip address:, 192.168.15.49 destination port: 23
B. source ip address:, 192.168.15.41 destination port: 21
C. source ip address:, 192.168.15.37 destination port: 21
D. source ip address:, 192.168.15.36 destination port: 23
E. source ip address: 192.168.15.46; destination port: 23
Answer: D, E

13. What functions do routers perform in a network? (Choose two.)
A. packet switching
B. microsegmentation of broadcast domains
C. path selection
D. VLAN membership assignment
Answer: A, C

14. On a network of one XXYYinc department,there are four PCs connected to a switch,as shown in the following figure:

After the switch XXYYinc1 restarts, XXYYincA ( the host on the left ) sends the first frame to XXYYincC (the host on the right ).what the first thing should the switch do ?
A. XXYYinc1 will add 192.168.23.12 to the switching table.
B. XXYYinc1 will add 192.168.23.4 to the switching table.
C. XXYYinc1 will add 000A.8A47.E612 to the switching table.
D. XXYYinc1 will add 000B.DB95.2EE9 to the switching table.
Answer: C

15. Network topology exhibit:

Output exhibit:
C:\arp ­a
Interface:192.168.1.95 ­­­ 0x2
Internet Address Phycical Address Type
192.168.1.254 00­60­0f­2e­14­c6 dynamic
You work as a network technician at XXYYinc and you issued the arp ­a command from a host named
XXYYincA as shown above.
The user of host XXYYincA wants to ping the DSL modem/router at 192.168.1.254. Based on the Host XXYYincA ARP table that is shown in the exhibit, what will host XXYYincA do?
A. send a unicast ARP packet to the DSL modem/router
B. send unicast ICMP packets to the DSL modem/router
C. send Layer 3 broadcast packets to which the DSL modem/router responds
D. send a Layer 2 broadcast that is received by XXYYinc2, the switch, and the DSL modem/router
Answer: B

16. Study the exhibit carefully. Each of these four XXYYinc switches has been configured with a hostname, as well as being configured to run RSTP. No other configuration changes have been made.
Which switch will have only one forwarding interface?

A. TIS­SA
B. TIS­SB
C. TIS­SC
D. TIS­SD
Answer: B

17. 802.1b is being utilized in the XXYYinc wireless network. Which spread spectrum technology does the 802.1b standard define for operation in this network?
A. IR
B. DSSS
C. FHSS
D. DSSS and FHSS
E. IR, FHSS, and DSSS
Answer: B

18. Part of the XXYYinc OSPF network is shown below:

Configuration exhibit:
XXYYinc1 Routing Commands: ip route 0.0.0.0 0.0.0.0 serial0/0 router ospf 1
network 172.16.100.0 0.0.0.3 area 0 network 172.16.100.64 0.0.0.63 area 0 network 172.16.100.128 0.0.0.31 area 0 default­information originate
You work as a network technician at XXYYinc.com. Study the exhibits carefully. Assume that all router interfaces are operational and correctly configured. In addition, assume that OSPF has been correctly configured on Router XXYYinc2. How will the default route configured on XXYYinc1 affect the operation of XXYYinc2?
A. Any packet destined for a network that is not directly connected to router XXYYinc2 will be dropped immediately.
B. Any packet destined for a network that is not directly connected to router XXYYinc1 will be dropped.
C. Any packet destined for a network that is not directly connected to router XXYYinc2 will be dropped immediately because of the lack of a gateway on XXYYinc1.
D. The network directly connected to a router XXYYinc2 will not be able to communicate with the 172.16.100.0, 172.16.100.28,and 172.16.100.64 subnetworks.
E. Any packet destined for a network that is not referenced in the routing table of router XXYYinc2 will be directed to XXYYinc1. XXYYinc1 will then send that packet back to XXYYinc2 and a routing loop will occur.
Answer: E

19. Refer to the graphic. Workstation A in the Sales location is communicating with the server in the Production location. What will be the source MAC address of the frames received by workstation A from the server?

A. the MAC address of router interface e0
B. the MAC address of router interface e1
C. the MAC address of the server network interface
D. the MAC address of host A
Answer: A

20. Which one of the following statements is the media access method that Gigabit Ethernet uses?
A. CSMA/CD
B. CSMA/CA
C. token passing
D. point­to­point
Answer: A

21. Part of the XXYYinc network is shown below:

A host on the LAN is accessing an FTP server across the Internet. Which of the following addresses could appear as a source address for the packets forwarded by the router to the destination server?
A. 10.10.0.1
B. 199.99.9.33
C. 199.99.9.57
D. 200.2.2.17
Answer: C

22. Refer to the topology and configuration information shown in the graphic. The TIS­R1 has been configured to provide communication between the VLANs. Which IOS commands are required to configure switch port fa0/1 to establish a link with router TIS­R1 using the IEEE standard protocol? (Choose three.)

A. Switch(config)# interface fastethernet 0/1
B. Switch(config­if)# switchport trunk encapsulation dot1q
C. Switch(config­if)# switchport mode trunk
D. Switch(config­if)# switchport access vlan 1
Answer: A, B, C

23. The XXYYinc frame relay network is shown below:

which statement describes DLCI 17?
A. DLCI 17 describes the ISDN circuit between XXYYinc2 and XXYYinc3.
B. DLCI 17 describes a PVC on XXYYinc2. It cannot be used on XXYYinc3 or XXYYinc1.
C. DLCI 17 is the Layer 2 address used by XXYYinc2 to describe a PVC to XXYYinc3.
D. DLCI 17 describes the dial­up circuit from XXYYinc2 and XXYYinc3 to the service provider.
Answer: C

24. It is known that the OSI model has seven layers. Can you tell me at which layers of the OSI model WANs operate? (Choose two.)
A. datalink layer
B. session layer
C. transport layer
D. physical layer
Answer: A, D

25. The network security policy requires that only one host be permitted to attach dynamically to each switch interface. If that policy is violated, the interface should shut down. Which two commands the XXYYinc network administrator must configure on the 2950 Catalyst switch TIS­S1 to meet this policy? (Choose two.)
A. TIS­S1(config­if)# switchport port­security maximum 1
B. TIS­S1(config)# mac­address­table secure
C. TIS­S1(config)# access­list 10 permit ip host
D. TIS­S1(config­if)# switchport port­security violation shutdown
E. TIS­S1(config­if)# ip access­group 10
Answer: A, D

26. You work as a network technician at XXYYinc.com. Study the exhibit carefully Based on the output shown below, what should you do to allow the XXYYinc workstations connected to the fastethernet0/0 interface to obtain an IP Address?

A. Add an interface description to the FastEthernet 0/0 interface configuration
B. Add access­list 14 permit any any to the access list configuration.
C. Configure the IP address of the FastEtherent 0/0 interface to 10.90.201.1.
D. None of the above.
Answer: C

27. Study the exhibit carefully. NAT has been used for converting all the IP addresses on the internal network to the single address 128.107.1.1 as traffic is routed toward the Internet. Which of these statements accurately describes what will happen when the IP traffic returns from the Internet destined for hosts on the internal network?

A. TIS­ER will require a route to 172.16.0.0/16 in its routing table to properly direct the traffic.
B. TIS­IR will convert the source IP addresses of all packets before forwarding them onto the internal network.
C. TIS­ER will translate the destination IP addresses of all packets before forwarding them to TIS­IR.
D. TIS­ER can use the directly connected interface on the 128.107.1.0/27 network to route return traffic to its originators.
Answer: D

28. Study the exhibit carefully. A XXYYinc network engineer needs to configure the switches and TIS­R in the graphic so that the hosts in VLAN3 and VLAN4 can communicate with the enterprise server in VLAN2. Which two Ethernet segments would need to be configured as trunk links? (Choose two.)

A. A
B. B
C. C
D. F
Answer: C, D

29. Two XXYYinc routers are connected as shown below:

XXYYinc1 configuration exhibit:

XXYYinc2 configuration exhibit:

Two routers named XXYYinc1 and XXYYinc2 are connected by their serial interfaces as shown in the exhibit, but there is no data connectivity between them. The XXYYinc1 router is known to have a correct configuration. Given the partial configurations shown in the exhibit, what is the problem on the XXYYinc2 router that is causing the lack of connectivity?
A. A loopback is not set.
B. The IP address is incorrect.
C. The subnet mask is incorrect.
D. The serial line encapsulations are incompatible.
E. The maximum transmission unit (MTU) size is too large.
F. The bandwidth setting is incompatible with the connected interface.
Answer: B

30. Part of the XXYYinc switched LAN is shown below:

Based on the information show above, which device will provide the spanning­tree designated port role for the XXYYinc network segment that services the printers?
A. Switch XXYYincA
B. Hub XXYYincE
C. Switch XXYYincC
D. Switch XXYYincB
Answer: C