Test your basic knowledge |

CCNP Switch Deck

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. What does port-security protect do?
If any BDUP is received on a port - it puts the port into the errdisable state
4
With the skinny protocol
Port stays up - packets from violating MACs dropped - no logging

2. What is a topology change?
Root
0007.b4xx.xxyy where xx.xx is six 0 bits followed by a 10-bit GLBP group numberr. Yyyy is the virtual forwarder number
When a port moves into forwarding or from fowarding or learning to blocking.
Connects with SONET or SDH

3. RSTP uses which standard?
Hashing algorithm
Each network device handles packets individually with no advance reservations
Full duplex
802.1w

4. What is the GLBP redirect timer?
Nonstop forwarding is an interactive method focusing on rebuilding the RIB after SUP switchover
Hashing algorithm
Very high L3 throughput - no access lists or port filtering - redundancy and resilience - advanced QoS
Determines when the AVG will stop using the old VMAC in ARP replies

5. What is DSCP codepoint AF21(18)?
The standby becomes active and stays active by default. Preemption can be configured
Routers are assigned to common GLBP group. All routers can be active and can load balance
Either desirable or auto mode
Immediate (class 2)

6. What is the default MTU?
LACP port priority
1500B
1- enable MST - 2-enter MST config mode - 3-assign region name and region configuration rev - 4-map vlans to an MSTI - 5-show pending changes - 6- commit by exiting
Any dhcp reply coming from an untrusted port is discarded and the offending port is put in errdisable

7. What 2 conditions does IP source guard check for?
Source IP and MAC must match those addresses learned by DHCP snooping or a static entry
1-ID link path costs - 2-ID roodt bridge - 3-select root port (1/switch) - 4-select designated port (1/segment) - 5-ID blocking port
The frame tag includes a 3 bit COS value from 0 (low) to 7 (high). Native vlans are untagged so no COS
On by default

8. what must be done on an SVI before it is activated?
No shut
The wireless clients communicate directly with no other means of connectivity such as a WAP
When the AP uplinks to an Ethernet network.
900 MHz - 2.4Ghz - and 5-6GHz

9. What is dynamic desireable?
The port asks the other end to trunk
The same as a standby group in HSRP
Only when a nonedge port transitions to forwarding
To a VLAN and not to a VLAN interface (SVI)

10. How does backbonefast determine whether alternative paths exist?
On by default
Cisco recommends only on the root bridge
1- inferior BDPU on blocked-considered alternative - 2-inferior on root-all blocked ports considered alternate - 3-if inferior arrives on root and no blocked ports - assumes loss of connectivity to root
Using a mobility exchange message

11. What does a LAP do if it loses communication with it's WLC?
Enables portfast - sets the port to access and disables PAgP
Reboots and searches for a new WLC
Silent
Flash override (class 4)

12. What are the 3 unlicensed frequencies?
L2
900 MHz - 2.4Ghz - and 5-6GHz
It updates the L2 headers with the proper src and dst MAC - L3 TTL - L3 checksum - and L2 checksum information
CEF is distributed completely among multiple L3 forwarding engines.

13. FE connectors use...
Missed beacons - dropped packets (max retry) - weak signal (data rate switches down) - an AP periodicallytries to find a stronger signal
The L3 forwarding engine can't forward the packet in hardware because there is no L2 next-hop address - so the packet is sent to the L3 engine to generate the ARP response
Those that connect to other switches
2 strand MMF with MT-RJ or SC connectors

14. What is the STP disabled state?
Admin down
Routers at the distribution layer become the bottlenecks or broadcast or multicast traffic slows the switches in the switch block
They shorten their bridge table aging times from default (300sec) to the fowarding delay (15 sec)
A client can roam to any WLC as long as it stays in a mobility group

15. What is the RSTP default hello interval?
Enables switches at the end of the spanning tree branches to have a functioning root port while keeping 1 or more redundant potential ports in blocking mode. When the main fails - the other comes up.
2 seconds
Yes to both
Aggregation - high L3 throughput - security and policy based connectivity functions through access lists and packet filters - QoS - scalable high-speed links

16. Does GLBP allow preemption?
By short-circuiting the max age timer
The configureable UDLD interval must be less than max age plus two intervals of forward delay
Yes
All L2 connectivity should be contained within the access layer.

17. What is a community secondary VLAN?
The station must wait until the frame in progress has completed - then wait a random amount of time before transmitting
The port asks the other end to trunk
Checks the sender's ip in all arp requests and checks the sender's IP against target IP in all replies
Hosts within a secondary can communicate with each other and with the primary - but not with another secondary vlan

18. How do you prevent switch spoofing?
A host port goes up or down
Backbonefast uses RLQ to determine if upstream switches have stable connections to root bridge
By configuring every switch port to have an expected and controlled behavior
1-enable AAA on switch - 2-define RADIUS servers - 3-define authentication method - 4-enable 802.1x on switch - 5-conf. 802.1x ports - 6-allow hosts

19. 802.11a
Src-ip - dst-ip - src-dst-ip - src-mac - dst-mac - src-dst-mac - src-port - dst-port - src-dst-port
No shut
Up to 54Mbps - not cross-compatible - 12 to 23 clean channels - 5.8 Ghz
Trusted ports

20. What is a vlan?
Only for trusted Cisco gear - especially phones
Data and voice over native vlan no QOS and no 802.1p trunk
A single broadcast domain
Flash override (class 4)

21. If the WLC connects to an Etherchannel - how should the channel be configured and why?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

22. How does HSRP election work?
Receives the first packet of a traffic flow and routes it
They must be carried over a voice VLAN (VVID) or over a regular data VLAN (ie. The native VLAN or the PVID)
The DCF interframe space- the random backoff time before a wireless set can transmit
Based on priority (0-255). Default is 100. Highest IP is tie breaker

23. What are TCAM entries composed of?
Per VLAN
During the time that the FIB entry is in CEF glean waiting for ARP entries - subsequent packet to that host are dropped to keep input queues from filling
No because they only participate if asked
Value - mask - and result (VMR) combinations

24. What does the version number indicate when looking at CEF entries?
Yes to both
CEF is distributed completely among multiple L3 forwarding engines.
The number of times the entry has been updated since the table was generated
Both layer 2 switching and IVR

25. How should the switch port to which a WLC be configured?
Edge - root - and point to point
Routers are assigned to common GLBP group. All routers can be active and can load balance
Trunk
Trusted or untrusted

26. Can two switches in the auto(PAgP) or passive (LACP) mode create a channel? Why?
Globally or per-port
Each peer sends and receives hellos. Def hello is 3 sec - def hold is 10 sec
No because they only participate if asked
The master router can share the VIP

27. If a wireless station needs to transmit and another device is transmitting - what happens?
The station must wait until the frame in progress has completed - then wait a random amount of time before transmitting
Cisco recommends only on the root bridge
300 sec by default
Distribution layer

28. How does the VRRP master router handle the VIP?
134 bits - consisting of source and destination addresses and protocol information from the packet or frame
The master router can share the VIP
Connects to a router - firewall - or gateway. Can communicate with anything else connected to the primary or any secondary. Ignores pvlan config
On all switches in network to enable RLQ request and reply

29. How is an instance defined?
By name - config revision - and instance to vlan mapping table
12 kbps with headers and compression
The active router. All other routers are in backup state
Distribution layer

30. How does IPT behave when the voice VLAN is in vlan-id mode?
RPR - RPR+ - and SSO
Switching Database Manager - configures and prunes TCAM partitions
Configure non-silent submode
Data goes over native vlan - voice goes over specified VLAN - voice QOS is 802.1p

31. How much overlap should WAPs have?
Allows devices to interoperate with PVST and CST. Can use both dot1q and ISL
10-15%
MAC of the end device
The station can transmit immediately and wait for an ack

32. What is the port number range?
7 switches from root bridge
1/2 and 3/6
0-255
Globally or per-port

33. the static port to vlan membership is handled in _____
Used to switch packets destined for the null interface
Sets the switchport mode to access - enables portfast - and turns off channel grouping for the port
All ports where root isn't expected
The ASIC

34. WPA2 encryption
Access
Round robin - weighted - or host-dependent
Needs hardware upgrade over WEP - uses AES encryption
Compatible with 802.11b - up to 54Mbps in 12 data rates - 3 channels - 2.4Ghz

35. What is a microcell?
When a port moves into forwarding or from fowarding or learning to blocking.
When the size of a cell is intentionally reduced
First configure a L3 interface in same VLAN as clients - then use the ip helper-address command to ID the DHCP server
Virtual Router Redundancy Protocol - pretty much the same as HSRP

36. What happens when the topology changes?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

37. What is the format of the VRRP virtual MAC?
Backbonefast uses RLQ to determine if upstream switches have stable connections to root bridge
Port with alternative path to root less desirable than root
1- enable MST - 2-enter MST config mode - 3-assign region name and region configuration rev - 4-map vlans to an MSTI - 5-show pending changes - 6- commit by exiting
0000.5e00.01xx

38. How is Root Guard used?
L2
On ports where you never expect to find a root bridge for a VLAN
Host Standby Router protocol. Cisco proprietary. Switch is either active - standby - or listen
CEF is distributed completely among multiple L3 forwarding engines.

39. One vlan should =
Lowest cumulative cost to root
Yes
1 IP subnet
On root - because the root bridge propagates timers with config BDPU

40. How many tunnels exist between the LAP and WLC?
2 strand MMF with MT-RJ or SC connectors
2 - one for control messages and one for data
Multicasts to 224.0.0.18 (VRRP)
0000.5e00.01xx

41. How do you implement MST?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

42. How does HSRP port tracking work?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

43. What is GLBP weight?
The port is forced to always authorize any connected client with no authentication necessary (default)
A path is pre-arranged for priority along the complete path from source to destination using the RSVP protocol.
By default weight is 100. Can be made dynamic per interface
Either desirable or auto mode

44. What does the rewrite engine do?
It updates the L2 headers with the proper src and dst MAC - L3 TTL - L3 checksum - and L2 checksum information
Any ports associated with an isolated vlan can reach the primary - but not any other secondary. Hosts withn an isolated vlan can't reach each other
Distributed coordinion function - the use of timers to prevent wireless collisions
The port asks the other end to trunk

45. On what scope is DAI enabled?
Per VLAN
Packets are discarded due to an ACL or policy action
Usually QoS from VOIP but not PC dataa
Globally

46. What is best effort delivery QOS?
Each peer sends and receives hellos. Def hello is 3 sec - def hold is 10 sec
All ARP packets that arrive on untrusted ports are inspected.
They are locally significant on an interface. HSRP1 on one VLAN is different from HSRP1 on another
Switches make an effort to move packets as quickly as possible

47. if the switchport is part of an etherchannel - Where is the network assigned
Distribution layer
Cisco proprietary. 1 instance of STP/VLAN. Requires ISL instead of dot1q
To the virtual port-channel interface
Switchpotrt nonegotiate

48. What types of ports autonegotiate?
0-255
Turn on port security
FE and GE
1-1005 (1 and 1002-1005 are reserved)

49. What is RPR?
Route processor redundancy - redundant sup is partially booted and initialized and must reload module in the switch and init all sup functions
The port asks the other end to trunk
Data goes over native vlan - voice goes over specified VLAN - voice QOS is 802.1p
If a proposal is received - the recipient isolates - all nonedge ports blocked until proposal sent causing neighbors to synch - which propagates out in waves

50. How does a Cisco IP phone connect upstream?
On (all ports channel) - auto (channels when asked) - and desirable(actively asks to form a channel)
A MAC is seen on a different port
Via an 802.1Q trunk or a single VLAN access port
Another router must have a higher HSRP priority and have preemt set up