Question 1

1 / 1 pts
Which statement correctly describes the problem when NAT and IPsec implementation coexist in the
network?

NAT changes the encryption keys that are used by IPsec during the key negotiation processes.
Correct!

NAT changes the IP header fields, and those changes can conflict with the integrity of IPsec protocols.

NAT changes the source and destination IP addresses that are encapsulated inside the IPsec packets.

NAT changes the TCP and UDP transport protocols that are embedded in the payload of the IPsec
packets.

Refer to Chapter 6.

Question 2
1 / 1 pts

Skip to question text.

Refer to the exhibit. Users on the LAN complained that they cannot access the Internet. Based on the
provided output, what could be the possible cause of the problem?

Too few addresses are assigned to the NAT pool.

The NAT pool is configured with the wrong netmask.

Correct!

An incorrect ACL is referenced during the NAT translation process.

The configurations for the inside and outside interfaces are reversed.

Refer to Chapter 6.

Question 3
1 / 1 pts
What are two things to be taken into consideration when NAT is configured in the network? (Choose two.)
Correct!

the protocols that are used in the network

Correct!

the port numbers that are used by the applications

the type of interface that is configured for NAT

the scope of the IP addresses that are configured in the NAT pool

the type of ACLs that are filtering the traffic from source to destination

Refer to Chapter 6.

Question 4
1 / 1 pts

Skip to question text.

Refer to the exhibit. Users on the LAN complained that they cannot access the resources on the network.
A network administrator issued the debug ip udp command on R2 to verify the DHCP server operation.
On the basis of the provided output, what could be the possible cause of the problem?

The ip dhcp pool command is missing from the R2 configuration.

Correct!

The ip helper-address command is missing from the R2 configuration.

The ip dhcp excluded-addresses command is missing from the R2 configuration.

The domain-name command is missing from the R3 configuration.

Refer to Chapter 6.

Question 5
1 / 1 pts

Skip to question text.

Refer to the exhibit. Users on LAN_1 complained that they cannot communicate with the other users on
the network. A network administrator issued show ip dhcp conflict command to verify the DHCP server
operation on the router. Based on the provided outputs, what could be done to remedy the problem?

Configure the DHCP pool for a larger scope of IP addresses.

Issue the dhcp services command on router R2.

Issue the ip helper-address command under the Fa0/1 interface.

Correct!

Configure the IP addresses that must be excluded from the DHCP pool.

Refer to Chapter 6.

Question 6
1 / 1 pts

Skip to question text.

Refer to the exhibit. Routers R1 and R2 cannot get DHCP addresses from router R3, which is configured
as a DHCP server. After issuing the show ip socket command and troubleshooting the problem, a
network administrator verifies that the R1 and R2 interfaces are up and operational. Based on the
provided output, what could be the possible cause of the problem?
Correct!

The DHCP services are disabled on R3.

The IP helper address is missing from the R3 configuration.

The IP addresses from the DHCP pool have been exhausted.

Illegal addresses have been assigned to the interfaces of routers R1 and R2.

Refer to Chapter 6.

Question 7
0 / 1 pts

Skip to question text.

Refer to the exhibit. Host A is unable to obtain an IP address from the DHCP server. Which procedure
would solve this problem?
You Answered

Configure interface Fa0/0 of router RTA with the ip helper-address 10.1.2.1 command.
Correct Answer

Configure interface Fa0/0 of router RTA with the ip helper-address 10.1.2.10 command.

Configure interface Fa0/1 of router RTA with the ip helper-address 10.1.2.10 command.

Configure interface Fa0/0 of router RTA with the ip forward-protocol 67 command.

Refer to Chapter 6.

Question 8
0 / 1 pts

Skip to question text.

Refer to the exhibit. Host A is unable to obtain an IP address from the DHCP server. Which procedure
would solve this problem?
You Answered

Configure interface Fa0/0 of router RTA with the ip helper-address 10.1.2.1 command.
Correct Answer

Configure interface Fa0/0 of router RTA with the ip helper-address 10.1.2.10 command.

Configure interface Fa0/1 of router RTA with the ip helper-address 10.1.2.10 command.

Configure interface Fa0/0 of router RTA with the ip forward-protocol 67 command.

Refer to Chapter 6.

Question 9
1 / 1 pts

Refer to the exhibit. Which statement accurately describes the IPv6 routing configuration?
Correct!

The command ipv6 route 5432::/48 null0 was entered on the router.

The network 4000::2/128 was learned via a routing protocol.

The command ipv6 route 5000::/64 null0 was entered on the router.

The network 4001::1/128 is unreachable.

Refer to Chapter 6.

Question 10
1 / 1 pts

Skip to question text.

Refer to the exhibit. R2 is a branch router and accesses all nonlocal networks via R1. The network
administrator is troubleshooting why router R2 cannot access any external networks. Based on the output
of the commands, what is the likely issue?

The default router for R1 is invalid.

The IPv6 address configured for R1 is invalid.

Correct!

IPv6 unicast routing has not been enabled on R1.

R2 has not been configured for autoconfiguration.

Refer to Chapter 6.

Question 11
1 / 1 pts

Skip to question text.

Refer to the exhibit. A network administrator has configured NAT on router R1. However, R1 does not
translate addresses when hosts from the 10.0.0.0 /24 LAN attempt to access the Internet. Which
configuration change would correct this situation?

Append the overload keyword to the ip nat inside source list 1 pool NATPOOLcommand.

Change the NAT pool to be in the same subnet as the IP address of s0/0/0.

Change the netmask of the NATPOOL to 255.255.255.224.

Enter the no ip nat inside source static 10.0.0.10 209.165.200.226 command.

Correct!

Make interface Fa0/0 the inside NAT interface and S0/0/0 the outside NAT interface.

Refer to Chapter 6.

Question 12
0 / 1 pts
Which type of DHCP message is sent by a DHCP client to a DHCP server?

DHCP OFFER
You Answered

DHCP ACK

DHCP NACK
Correct Answer

DHCP INFORM

Refer to Chapter 6.

Question 13
1 / 1 pts
What are the three roles a router may assume with respect to DHCP? (Choose three.)
Correct!

server

forwarder
Correct!

client

remote agent
Correct!

relay agent

supplicant

Refer to Chapter 6.

Question 14
1 / 1 pts
Which three UDP ports are associated with messages that are forwarded by default by a DHCP relay
agent? (Choose three.)
Correct!

37

51
Correct!

53

59
Correct!

69

80

Refer to Chapter 6.

Question 15
1 / 1 pts

Skip to question text.

Refer to the exhibit. A network technician is having issues setting up router R4 in a IPv6 network. What
problem is indicated from the router output?
Correct!

IPv6 routing needs to be enabled.

The interface also requires an IPv4 address.

A routing protocol for IPv6 must be enabled.

IPv4 routes should be redistributed into IPv6.

Refer to Chapter 6.

Question 16
0 / 1 pts

Skip to question text.

Refer to the exhibit. A network technician is attempting to get the Internet connection operational. The
technician gathers the information from the debug command on the border router while attempting a ping
from Computer1 to the ISP. After a conversation with the ISP, it is determined that the ISP router lacks the
appropriate route to the customer. What route should be added to the ISP router?

ip route 0.0.0.0 0.0.0.0 Serial 0/3/0

ip route 10.10.10.0 255.255.255.252 Serial 0/3/0

Correct Answer

ip route 72.163.4.160 255.255.255.248 10.10.10.2

You Answered

ip route 192.168.254.0 255.255.255.0 10.10.10.2

Refer to Chapter 6.

Question 17
1 / 1 pts

Skip to question text.

Refer to the exhibit. A network technician is adding the host PC5 to the local LAN. After the host is
connected to an operational port on SwA2, which is in the correct VLAN, the host cannot connect to the
Internet. All other hosts can reach the Internet. Based on the provided output, what is the problem?

The DHCP server service is disabled.

The addresses in the DHCP pool are in the wrong subnet.

Correct!

The available addresses in the DHCP pool are exhausted.

There is no default router defined in the DHCP pool.

Refer to Chapter 6.

Question 18
1 / 1 pts

Skip to question text.

Refer to the exhibit. A network administrator has implemented Network Address Translation (NAT) on
router R1. However, hosts on the inside LAN cannot connect to addresses outside of the corporate
network. Which option correctly identifies the problem?

Interface Fa0/0 should be configured as the outside NAT interface and S0/0/0 as the inside NAT interface.

NAT cannot use named access control lists.

Correct!

The ACL is referring to the wrong internal network.

The NAT-POOL should have included the S0/0/0 interface IP address.

The overload keyword has not been appended to the ip nat inside source command.

The static NAT entry IP address is not included in the NAT-POOL.

Refer to Chapter 6.

Question 19
0 / 1 pts
Which IP address should an administrator who is configuring NAT advertise to the outside world?

inside local
Correct Answer

inside global

outside local
You Answered

outside global

Refer to Chapter 6.

Question 20
0 / 1 pts

Skip to question text.

The network administrator changed the DHCP address pool from 10.10.0.0/16 to 10.20.0.0/16 and is now
receiving complaints from users that they are unable to connect to the Internet. The administrator issues
the command show ip nat translations on the border router and observes that there are no active

translations present. The administrator then verifies that connectivity to the Internet from the border router
is present. What should the administrator do next?

Increase the size of the existing NAT pool.

You Answered

Create a new NAT pool using the 10.20.0.0/16 address space.

Change from dynamic to static NAT for all outbound connections.

Correct Answer

Verify that the ACL is selecting the correct addresses for translation.

Refer to Chapter 6.

Question 21
1 / 1 pts

Skip to question text.

Refer to the exhibit. A network administrator created a static NAT translation. The purpose of the
translation is to allow outside users to use the IP address 209.165.201.1 to connect to a server that is
located on the internal network at IP address 172.16.6.3. However, users are unable to connect to the
server by using the supplied address. What is the most probable cause of the problem?

There is no outside global address specified.

The 172.16.0.0/16 network has not been advertised to the outside world.

Dynamic NAT must be used to allow an outside user to connect to the server.
Correct!

The network administrator reversed the addresses in the mapping command.

No access list has been configured to select the traffic that is allowed to connect to the server.

Refer to Chapter 6.

Question 22
1 / 1 pts

Skip to question text.

Refer to the exhibit. A network administrator has configured a static NAT entry on router R1 for the internal
web server. However, external users still cannot connect to the web server. Which procedure would
resolve this problem?

Delete the current static entry and issue the ip nat outside source static 10.0.0.10
209.165.200.226 command.
Correct!

Delete the current static entry and issue the ip nat inside source static 10.1.1.10
209.165.200.226 command.

For security reasons, an outside address cannot be mapped to an internal private address and therefore
the web server should be configured with a valid public address.

Remove the overload keyword from the ip nat inside source list command.

Refer to Chapter 6.

Question 23
1 / 1 pts
A network administrator is troubleshooting an EIGRP authentication problem. This is an example of
troubleshooting which functional plane?
Correct!

Control Plane

Data Plane

EIGRP Plane

Management Plane

Routing Protocol Plane

Refer to Chapter 6.

Question 24
1 / 1 pts

Skip to question text.

Refer to the exhibit. A user has a PC that connects to a VoIP phone and the phone connects to port Fa0/1
on the switch. The user is complaining about not being able to access the network. The user cannot
access any local print servers and cannot ping any neighboring devices. The administrator attempts to
ping the PC of the user but is unsuccessful. Based on the output of the show port-security command,
what could be the issue?

The switch port has not been able to detect any devices connected to it.
Correct!

The switch port detected more than one MAC address.

The switch port detected a bridging loop.

The switch port detected a MAC address that belongs to a different VLAN.

Refer to Chapter 7.

Question 25
1 / 1 pts

Skip to question text.

Refer to the exhibit. Company A is deploying IP telephony in their offices. A network technician unplugs
the patch cable that currently connects to the PC from the wall jack and then plugs the cable into the port
labeled as 10/100 PC on the IP phone. The technician next uses another patch cable to connect the
switch port on the IP phone to the wall jack. After completing these changes, the technician notices that
the IP phone cannot initialize and that the PC loses connectivity. The technician then checks the
configuration on the switch. According to the output of the show running-config command, what should
the technician do next in order to find the cause of the problem?

Switch the two patch cables that connect to the IP phone.

Make sure that the voice VLAN 700 is allowed on the trunking port.

Make sure that the ports for Skinny and TFTP are not blocked by ACLs.
Correct!

Make sure that the port security setting allows more than one MAC address.