Thursday, August 14, 2008

It's Thursday, August 14, and here are the answers to yesterday's Cisco practice exam questions!

Be sure to check today's other blog posts for a link to a new CCNA Security practice exam I've posted on the main site, plus other free Cisco exam resources!

CCNA Certification And CCENT Certification:

What two commands were run in the following configuration?

R3# ?

R3# ?
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to, timeout is 2 seconds:
Success rate is 100 percent (5/5), round-trip min/avg/max = 136/139/152 ms
IP: s= (local), d= (Serial0), len 100, sending
IP: s= (Serial0), d= (Serial0), len 56, rcvd 3
IP: s= (Serial0), d= (Serial0), len 100, rcvd 3
IP: s= (local), d= (Serial0), len 100, sending

Answers: First, we ran a popular debug, debug ip packet. I removed the line that mentions that IP debugging has been turned on, since I knew you didn't need that much help! :)

We then sent a ping to, indicated by the "d" for destination in the sending packet debug line.

CCNA Security Certification / CCNP ISCW Exam:

What exactly is fail closed? Is it enabled or disabled by default?

Answer: The following illustration from my CCNP ISCW and CCNA Security study guides explains it! The default settings are shown - note that Fail Closed is off by default. (Click the image for a larger display.)

CCNP Certification / BSCI Exam:

What is the net result of the following configuration?

R1(config)#router ospf 1
R1(config-router)#passive-interface ethernet0


Even though OSPF does not sent "routing updates" in the form that RIP and EIGRP do, you can still configure an OSPF-enabled interface as passive in order to prevent OSPF traffic from exiting that interface.

No OSPF adjacency can be formed if one of the interfaces involved is a passive interface, and if you configure an OSPF-enabled interface as passive where an adjacency already exists, the adjacency will drop almost immediately.

In the following example, R1 and R2 have an existing OSPF adjacency over their Ethernet interfaces. In an effort to reduce routing traffic, R1's e0 interface is configured as passive. The adjacency drops right away.

R1(config)#router ospf 1
R1(config-router)#passive-interface ethernet0
18:31:11: %OSPF-5-ADJCHG: Process 1, Nbr on Ethernet0 from FULL to DOWN, Neighbor Down: Interface down or detached

As of IOS version 12.0, you can now set all interfaces on a router as passive for a given protocol with the passive-interface default command.

R3(config)#router ospf 1
R3(config-router)#passive-interface default

To set the interfaces back to their default, just use the no passive-interface default command.

R3(config-router)#no passive-interface default

CCNP Certification / BCMSN Exam:

What single command will allow only secure connections to your Cisco switch via the VTY lines?

Answer: transport input ssh.

CCNP / ONT Exam: (My ONT Study Package will be out later this week!)

You're running AutoQoS for VoIP. What queueing scheme will be used for non-voice, "regular" data traffic?





Answer: C. Weighted Round Robin (WRR) will be used for data, LLW for Voice.

I'll have several new practice exams and tutorials on the main site later today and later this week, including new CCNA Security features! Keep watching the blog and I'll see you later today!

To your success,

Chris Bryant
CCIE #12933

No comments:

Blog Archive