1. What are two mechanisms that provide redundancy for server farm implementations? (Choose two.)
• Rapid Spanning Tree Protocol
• Hot Standby Routing Protocol
2. The ability to connect securely to a private network over a public network is provided by which WAN technology?
3. Which three statements describe the functions of the Cisco hierarchical network design model? (Choose three.)
• The distribution layer is responsible for traffic filtering and isolating failures from the core.
• Two goals of the core layer are 100 percent uptime and maximizing throughput.
• The access layer provides a means of connecting end devices to the network.
4. A network designer is creating a new network. The design must offer enough redundancy to provide protection against a single link or device failure, yet must not be too complex or expensive to implement. What topology would fill these needs?
• partial mesh
5. Refer to the exhibit. If the firewall module has been correctly configured using best practices for network security, which statement is true about the security design for the network?
• Servers in the DMZ are protected from internal and external attacks.
6. Which statement is true about a DMZ in a traditional network firewall design?
• Servers in the DMZ provide limited information that can be accessed from external networks.
7. What network connection would be most cost efficient while still meeting the security and connectivity needs of this teleworker?
• DSL VPN connection with a dialup backup link
8. Refer to the exhibit. The network administrator creates a standard access control list to prohibit traffic from the 192.168.1.0/24 network from reaching the 192.168.2.0/24 network while still permitting Internet access for all networks. On which router interface and in which direction should it be applied?
• interface fa0/1, outbound
9. Refer to the exhibit. The server broadcasts an ARP request for the MAC address of its default gateway. If STP is not enabled, what is the result of this ARP request?
• Switch_A and Switch_B continuously flood the message onto the network.
10. What are two best practices in wireless LAN design to ensure secure wireless access to the corporate network? (Choose two.)
• Use a separate WLAN for employees.
• Configure WPA.
11. In a well-designed, high-availability network, which device significantly affects the most users if a failure occurs?
• small workgroup switch in the network access layer
12. Which two statements are true regarding network convergence? (Choose two.)
• In a large network, using the EIGRP or OSPF routing protocols rather than RIPv2 may improve convergence time.
• Route summarization improves convergence time by minimizing the size of the routing table.
13. Centralizing servers in a data center server farm can provide which benefit over a distributed server environment?
• It is easier to filter and prioritize traffic to and from the data center.
14. Refer to the exhibit. What effect does the ACL shown have on network traffic, assuming that it is correctly applied to the interface?
• All Telnet traffic from the 172.16.0.0 network to any destination is denied.
15. Which Cisco IOS function can be configured at the distribution layer to filter unwanted traffic and provide traffic management?
• access control lists
16. What kind of ACL inspects outbound UDP, TCP, and ICMP traffic and allows inbound access only to traffic that belongs to these established sessions?
• reflexive ACL
17. Which three functions are performed at the distribution layer of the hierarchical network model? (Choose three.)
• summarizing routes from the access layer
• isolating network problems to prevent them from affecting the core layer
18. Refer to the exhibit. Which two devices are part of the access design layer? (Choose two.)
19. What is true about implementing a centralized server farm topology?
• provides defined entry and exit points so that filtering and securing traffic is easier
20. Refer to the exhibit. What happens when Host 1 attempts to send data?
• Frames from Host 1 cause the interface to shut down, and a log message is sent.
21. Which two considerations are valid when designing access layer security?(Choose two.)
• SSH is more secure than Telnet to administer network devices.
• Disabling unused ports on the switches helps prevent unauthorized access to the network.
22. What address can be used to summarize only networks 172.16.0.0/24, 172.16.1.0/24, 172.16.2.0/24, and 172.16.3.0/24?
23. Which two items in a physical WLAN design can be identified through a site survey? (Choose two.)
• the types of antennas that are required
• the access point hardware that is required
24. Refer to the exhibit. Which two statements correctly describe the benefits of the network access layer design that is shown? (Choose two.)
• If host A sends a broadcast message, only hosts in VLAN10 receive the broadcast frame.
• Segmenting all voice traffic on a separate VLAN facilitates the implementation of QoS.
25. What are three ways to ensure that an unwanted user does not connect to a wireless network and view the data? (Choose three.)
• Disable SSID broadcasting.
• Use authentication between clients and the wireless device.
CCNA Discovery 4 Module 2 Exam Answers Version 4.0
1. During an evaluation of the currently installed network, the IT staff performs a gap analysis to determine whether the existing network infrastructure can support the desired new features. At which stage of the Cisco Lifecycle Services approach does this activity occur?
• Plan Phase
2. Which stage of the Cisco Lifecycle Services strategy is usually completed before an organization issues a Request For Proposal (RFP) or Request For Quotation (RFQ)?
• Prepare Phase
3. What is the purpose of SNMP?
• to facilitate the exchange of information between devices and the NMS
4. During an analysis of a customer network, several possible opportunities for network improvement are identified. At which stage of the Cisco Lifecycle Services does this process occur?
• Design Phase
5. What provides the initial data for the Optimize Phase?
• performance monitoring
6. Which two statements are true regarding the response to an RFQ?(Choose two.)
• it should strictly conform to the formatting requirements specified by the RFQ.
• The response helps the customer compare pricing with other potential contractors.
7. What are two disadvantages of using a bottom-up approach instead of a top-down approach to network design? (Choose two.)
• It can result in an inappropriate network design.
• It does not take into account the business goals of the company.
8. What is a business constraint that may impact the WAN design of a company?
• company policy requiring the use of specific vendor networking equipment due to partnerships
9. What is the purpose of preparing a business case?
• to justify the financial investment in implementing the technology change
10. What is the purpose of creating a prioritized list of technical requirements?
• defines the project scope
11. A network engineer is analyzing the network of a potential client company to identify problems and determine whether a network upgrade or addition is needed. Which role in the sales team is this engineer assuming?
• pre-sales engineer
12. Which two statements best describe the responsibilities of an account manager? (Choose two.)
• acts as the primary point of contact between the company and the client
• directs the sales teams and support personnel
13. What is the purpose of system-level acceptance testing?
• to check that the newly installed network meets the business goals and design requirements
• to justify the financial investment required to implement the technology change
14. What is a purpose of establishing a network baseline?
• It creates a point of reference for future network evaluations.
15. When should a network baseline be performed within the stages of the Cisco Lifecycle Services?
• Operate Phase
16. What are two benefits of using a top-down approach instead of a bottom-up approach to network design? (Choose two.)
• incorporates organizational requirements
• clarifies design goals from the perspective of applications and network solutions
17. Which software component is installed on network devices that are managed through SNMP?
• management agents
18. A network engineer working for a contracting company is informed of a pre-bid meeting with a potential client. What purpose does the network engineer have for attending the pre-bid meeting?
• to clarify project scope and timelines not included in the original request for proposal
19. A major corporation has decided to hire someone to upgrade their network infrastructure. A network consulting company wants the job. What document must the network consulting company obtain to learn about the business goals, the project scope, the requirements for the new network and the expected deliverables?
• Request for Proposal
20. A corporation (client) wants a network upgrade and is putting out a request for services to various network consulting companies (contractors). A RFQ is required. Which statement is true concerning the RFQ?
• sent from the client to the contractors in place of a RFP when the technical specifications of a project are known
21. Which stage of the Cisco Lifecycle Services involves proactive management to identify and resolve issues before the organization is affected?
• Optimize Phase
22. Why is it important to prioritize business goals when developing network design?
• to adhere to the best opportunities to contribute to the success of the business
23. Which two items help identify business goals and priorities before a new network project starts? (Choose two.)
24. A network engineer working for ABC company is writing a response to an RFP for a network upgrade and must create an executive summary. Which statement describes the basic components of an executive summary?
• quick overview of the problem, the recommended solution, and the justification for ABC company doing the job
25. In a network management architecture, which statement best describes a management agent?
• software running on a managed device to collect network information and allow that device to be managed by a management station
CCNA Discovery 4 Module 3 Exam Answers Version 4.0
1. It is important to identify the details of network sections and devices that will be affected or involved in a new design. This information is included in which section of the Network Design Requirements Document?
• Project Goal
• Project Scope
• Technical Requirements
• Current State of the Network
2. Which two pieces of information does the network designer need to determine if the Cisco IOS of a router requires an upgrade? (Choose two.)
• amount of NVRAM installed
• model number of the router
• number of interfaces and installed HWICs
• installed Cisco IOS feature set and version
• error statistics for each interface
3. Which three pieces of information need to be considered when selecting the proper Cisco IOS version for an upgrade? (Choose three.)
• processor ID
• interface type
• amount of DRAM
• bootstrap version
• device make and model
• size of system flash memory
4. What are two practices a network technician should follow when installing a new interface card in a router? (Choose two.)
• Be sure the interface card faceplate does not touch the chassis rear panel.
• Do not tighten the captive screws until the router has been powered on and recognizes the card.
• Store the blank faceplate inside the card slot to be used if the card is removed.
• Handle the interface card by the edges to avoid static discharge.
• Push the interface card into place until the edge connector is seated securely
5. The new serial interface card for the router arrives and the network technician reads that it is hotswappable. What does this mean?
• The card cannot be installed while the router is powered on because static discharge could damage the card.
• The card cannot be installed until the router is powered off and completely cooled down.
• The card can be installed while the router is powered on if the router supports this technology.
• The card is a replacement and must be installed in the same slot as the card it is replacing.
6. Refer to the exhibit. A network administrator issues the command shown to gain knowledge about a poorly documented network. Which two pieces of information can the network administrator discover from the command output? (Choose two.)
• One connected device has router capability.
• The entire network contains a total of five Cisco devices with CDP enabled.
• None of the directly connected network devices have been configured with an IP address.
• Device EDGE_2811 is connected to port Fast Ethernet 0/0 on device C3750-24_MDF.
• Five Cisco devices with CDP enabled are directly connected to device C3750-24_MDF
7. Refer to the exhibit. Which of the three Cisco IOS images shown will load into RAM?
• The router selects an image depending on the value of the configuration register.
• The router selects the third Cisco IOS image because it is the most recent IOS image.
• The router selects the second Cisco IOS image because it is the smallest IOS image.
• The router selects an image depending on the boot system command in the configuration.
• The router selects the third Cisco IOS image because it contains the advipservicesk9 image.
8. An administrator wants to download a new Cisco IOS software version to the local router. Which command performs this task?
• copy tftp flash
• copy flash run
• copy start tftp
• copy flash tftp
• copy tftp start
9. Refer to the exhibit. The top of the output shows the Cisco Feature Navigator regarding a Cisco IOS image that the administrator wants to install on a router. Below it is the output from the show version command for that router. Which statement is true regarding the capacity of the router to run this Cisco IOS image?
• There is not enough DRAM and flash.
• There is enough DRAM and flash.
• There is enough DRAM but not enough flash.
• There is enough flash but not enough DRAM.
10. Which two items are objectives of a WLAN design site survey? (Choose two.)
• identify coverage areas
• determine primary AP locations
• determine what AP equipment should be purchased
• determine how many users will access the WLAN
• identify the bottleneck of the LAN infrastructure
11. Refer to the exhibit. Which two actions improve the weaknesses of the topology shown, assuming that each access layer segment is in its own subnet? (Choose two.)
• Implement redundant links to each server by adding additional NICs.
• Implement a reduntant link from all access layer switches to Admin, Dist, and Server Farm.
• Implement a backup firewall with a link to a secondary ISP and implement a redundant link to the DMZ.
• Implement reduntant links from the existing firewall to all access layer switches.
• Implement redundant links from the DMZ to Admin and Dist.
12. A company is beginning to analyze their new Cisco IOS upgrade requirements. What is one of the router components that a network administrator must consider when selecting a new Cisco IOS version?
• processor type
• storage space in NVRAM
• interfaces and modules to be supported
• compatibility of the bootstrap version with the new Cisco IOS software
13. An employee at a company notices that the wireless signal strength indicator on his laptop fluctuates from good to low. The network administrator decides to do a site survey of that area. Which three factors need to be included in the survey? (Choose three.)
• type and model number of the WNIC of the laptop
• number of users in the area
• location of the AP
• list of MAC addresses filtered by the AP
• number of simultaneous applications running on the laptop of the employee
• location of walls and filing cabinets in the office
14. The new network design for AnyCompany must include support of voice and video traffic. Before upgrading, the network designer checks whether the existing devices can support the new requirements. Which three items does the designer need to check? (Choose three.)
• number of routers and switches owned by AnyCompany
• routers that will support extra ASICs and WWICs
• size of DRAM and flash on each device
• routers that will support HWICs and VWICs
• system bootstrap version on each router and switch
• modules supported on the loaded Cisco IOS
15. A new Cisco IOS version has been copied into flash from a TFTP server. When a reload is issued to upgrade the Cisco IOS, the router freezes part of the way through the loading process. What could be the problem?
• There is enough flash but not enough RAM in the router.
• The new HWIC cards have not been installed yet.
• The TFTP server needs to be present during a reload.
• The new Cisco IOS should have been loaded into NVRAM.
• The new bootstrap version is not compatible with the original version on the router.
16. Refer to the exhibit. A network designer has no documentation and is attempting to create a logical diagram of the network using the output from show commands. What can be determined from the output shown?
• The device with the ID of ISP is a router on the Internet.
• The attached switch is a VTP server in the Toronto domain.
• The designer cannot telnet to the attached switch.
• The Cisco router IOS supports enterprise-level voice and video technologies.
17. A production router is reloaded and finishes with a Router> prompt. What three facts can be determined? (Choose three.)
• POST occurred normally.
• The boot process was interrupted.
• There is not enough RAM or flash on this router.
• A full version of the Cisco IOS was located and loaded.
• A configuration file was not located in NVRAM or from a TFTP server.
• The router did not locate the Cisco IOS in flash, so it defaulted to ROM.
18. During a site survey, the network designer noticed that people were accessing the company wireless network from the parking lot. What should be done to stop the wireless signal from radiating out into the parking lot?
• change the channel on the wireless AP
• connect the wireless AP to a firewall
• change the type of antenna attached to the AP
• move the wireless AP to a secure VLAN
• move the wireless AP to a port on a Layer 3 switch
19. A network design project includes a review of the existing network. What is the purpose of this phase of the project?
• eliminate the need for a site survey
• shorten the timeframe of the project
• lower the cost of the project by removing redundant links and devices
• determine if the number of applications used within the company can be reduced
• To determine what existing network devices require upgrades to meet the new
20. Refer to the exhibit. Based upon the Cisco IOS file naming convention, what is represented by the value ipvoicek9 listed in the IOS filename?
• file format
• feature set
• hardware platform
21. Refer to the exhibit. What two items can be determined from the output? (Choose two.)
• R2 is a Cisco 2600 device.
• R2 has 22 MB of RAM installed.
• The version of the IOS is 12.3.
• Over 8 MB of NVRAM is installed.
• A new 36 MB IOS file can be installed on the device.
22. During a wireless site survey, a consultant is determining the hours of peak usage and the estimated number of users in each location. The consultant is currently in what step of the site survey process?
• the defining of customer requirements
• the identification of coverage areas
• the determining of preliminary AP locations
• the measurement of signal strength
23. Refer to the exhibit. The network administrator is attempting to install a new version of the IOS on R2. Based on the exhibited output, what are two possible reasons that the transfer failed?(Choose two.)
• The administrator did not enable TFTP on R2.
• There is not enough flash available to store the new IOS.
• Connectivity between R2 and the TFTP server was not verified.
• The copy command was incorrectly entered.
• The administrator did not verify that the TFTP server is running.
24. In which section of the Network Design Requirements document would a network consulting team detail names and IP addresses of important networking components and servers, provide network diagrams and topologies, and define strengths and weaknesses of the network?
• network requirements
• project scope
• overall project goal
• state of the network
• final project costs
• maintenance costs
• user satisfaction
• statistics describing the performance of network devices
• IP telephony
• live video webcasts
• audio file downloads
• online banking services
• file archival and retrieval
• Custom Queuing
• Voice packets tend to be small.
• Voice packets must be processed in real time.
• Voice packets can effectively use TCP reliability features.
• Voice traffic can survive packet drops and retransmission delays.
• Voice packets must be converted to analog before being sent across the IP network.
• Voice packets automatically receive a higher priority value than other types of packets.
• Survey end users to obtain customer input.
• Upgrade the Cisco IOS software in all networking devices to optimize traffic flow.
• Limit the analysis to host-to-server traffic because host-to-host traffic is unimportant.
• Run a network traffic analysis to determine which applications are in use and by whom.
• Conduct an inventory of all networking devices that includes model numbers and memory configurations
• Digital communications systems have greater noise than analog systems when processing voice traffic.
• Voice-enabled routers or a server must be used for call control and signaling.
• Voice to IP conversions can cause router overhead.
• Power to the phones can be supplied through properly equipped patch panels or switches.
• The cost to combine voice and data VLANs can be a considerable amount.
• priority queuing
• access control lists
• intrusion detection systems
• 128-bit WEP
• voice-enabled firewall
• PoE switches and patch panels
• redundant backbone connectivity
• voice-enabled router at the enterprise edge
• separate voice and data VLANs with QoS implemented
• Confirm that network jitter is minimal.
• Use TCP to reduce delays and dropped packets.
• Establish priority queuing to ensure that large data packets are sent uninterrupted.
• Disable real-time protocols to reduce queuing strategy demands.
• Ensure that packet delays do not exceed 150 ms.
• implement the appropriate routing protocol to ensure that data segments arrive in order
• implement different QoS queues based on the type of video traffic being distributed
• install servers to store the data in a centrally located server farm
• configure queuing in the core routers to ensure high availability
• define QoS policies
• define traffic classes
• determine traffic patterns
• identify traffic requirements
• identify networking equipment
• RTP should be used.
• Traffic is predictable.
• Packets are small in size.
• Transfers are throughput intensive.
• Response-time requirements are low.
• the type of ISP services needed
• the capabilities of end-user devices
• the areas where network congestion may occur
• the location of VPN servers used to connect teleworkers
• locations where high-bandwidth connections are required
• A user in the IT department telnets to the core layer router.
• A user in marketing connects to the web server of a competitor.
• A user in the IT department telnets into the access layer switch.
• A user in the services department logs in to a web-based email program.
• A user in accounting connects to an FTP server that is connected to the access layer switch.
• network planning and mapping
• IDS and IPS capabilities
• peak usage times and traffic routing
• network billing and accounting application
• security and user account restrictions
• source and destination UDP port mapping
• queue traffic definitions
• priority list protocol assignments
• type of queuing being implemented
• number of packets placed in each queue
• queuing defaults that have been changed
• queuing has not been applied to this interface
• real-time video
• PoE switches must be purchased.
• More UDP-based traffic flows will be evident.
• Response times will be increased even if QoS is implemented.
• QoS will most likely be implemented to prioritize traffic flows.
• VPNs will most likely be implemented to protect the voice traffic.
• A=1, B=3, C=2, D=4
• A=2, B=1, C=4, D=3
• A=2, B=4, C=1, D=3
• A=3, B=2, C=4, D=1
• A=4, B=3, C=1, D=2
• A=4, B=2, C=3, D=1
• classification of traffic
• filtering and queuing voice traffic
• reducing bandwidth requirements
• providing priority service to selected traffic
• IP precedence
• manages phones centrally
• utilizes centralized call routing
• creates peer-to-peer relationships between phones
• requires a separate infrastructure to support data transfer
• requires significant manual configuration when adding, moving, or changing phones
29. When QoS is implemented in a converged network, which two factors can be controlled to improve performance? (Choose two.)
• link speed
• packet routing
• packet addressing
CCNA Discovery 4 Module 5 Exam Answers Version 4.0
1. Which rule should be followed when implementing the security requirements of a network design?
• Avoid reducing security in order to add additional network capabilities.
2. What limitations of the 2960 switch prevent it from providing the services needed in the Distribution layer?
• It does not support route summarization.
3. When considering converged network designs, it is important to identify appropriate service demands. What is a concern when preparing a network design to fit this environment?
• voice-level quality of service
4. Which three design requirements are implemented at the access layer? (Choose three.)
• QoS traffic classification and marking
5. Refer to the exhibit. Which statement is true regarding how the ISP router filters traffic?
• All traffic from the 188.8.131.52/21 network can access the Internet.
6. Which two factors should be considered when designing a wireless LAN that provides seamless roaming capabilities? (Choose two.)
• use of a wireless controller to manage IP addressing
7. What are three features of a Catalyst 2960 switch? (Choose three.)
• redundant power availability
• switch clustering
8. A company lists this equipment in their network design:
Two Catalyst 4503 Layer 3 switches
One 5500 security appliance firewall
Two Catalyst 6509 switches
Two lightweight access points
Two Catalyst 2960 switches
Which two types of devices would be appropriate to use at the access layer to provide end-user connectivity? (Choose two.)
• lightweight access points
• Catalyst 2960 switches
9. Which two statements are true regarding the following extended ACL? (Choose two.)
• access-list 101 deny tcp 172.16.3.0 0.0.0.255 any eq 20
access-list 101 deny tcp 172.16.3.0 0.0.0.255 any eq 21
access-list 101 permit ip any any
• Telnet traffic originating on network 172.16.3.0/24 is denied.
10. Which statement applies to a large network with thousands of nodes?
• Intrusion detection is more likely to be performed by a separate device rather than integrated into a switch or router
11. on campus. The college currently has only wired network device access. Which two devices must be incorporated into the network design to best accommodate roaming for wireless IP phones?(Choose two.)
• Cisco wireless LAN controller
• lightweight access points
12. What type of WAN service is Frame Relay?
• packet switched
13. Refer to the exhibit. What is an advantage of having two links connected between the two switches shown?
• provides connectivity when one of the connections between the switches fails
14. What is the function of the access layer in the Cisco three-layer hierarchical internetworking model?
• provides QoS classification and marking
15. When applying network security, what security measure should be implemented first?
• securing the network devices
16. What characteristic of a network supports high availability
17. What is integrated into a Cisco IP phone to reduce the number of ports needed in the wiring closet?
18. Which network design process identifies where to place access points?
• site survey
19. Using expandable, modular network devices is a key element of what network design criteria?
20. What is a primary function of a wireless LAN controller?
• tuning each AP channel for optimal coverage
21. What characteristic in a routing protocol allows it to support the network design criteria for availability?
• fast convergence
22. A network designer is evaluating the network security implementation for an organization. The designer recommends adding network security devices in front of the server farm, although network security devices have been deployed in the Enterprise Edge for two years. What type of attack can be effectively prevented with this recommendation?
• internal attack
23. Refer to the exhibit. The branch office needs constant access to the servers in the enterprise headquarters. Therefore, a backup Frame Relay link is added. A network
• administrator is configuring the routers in the branch office to make sure that when the backup Frame Relay link is used, only the traffic to access the enterprise headquarters is allowed. Which statement is true about the routing configuration on branch office edge routers?
• The command ip route 184.108.40.206 255.255.0.0 serial 0/0 50 should be configured on BE1.
24. An automobile sales company is establishing a new, small sales showroom in a downtown area. To update the inventory database, the new sales office will need a WAN connection to the headquarters that is located in the suburban area. The WAN connection should be around a 4 Mb/s connection. Which WAN service will provide the most economical approach to meet the requirement?
25. A network designer is selecting a WAN technology for connections between the headquarters of an organization and its branch offices. In this context, what is one advantage of choosing Frame Relay over a T1 line?
• flexible bandwidth