Test your basic knowledge |

CCNP Switch Deck

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. When are RSTP bdpus sent?
The L3 forwarding engine can't forward the packet in hardware because there is no L2 next-hop address - so the packet is sent to the L3 engine to generate the ARP response
Every hello interval regardless of whether BDPUs are received from root - allowing any switch to take an active role maintaining the topology
Usually QoS from VOIP but not PC dataa
An ac adaptor that plugs into a wall outlet.

2. can root guard and loop guard be used together
Cisco proprietary. 1 instance of STP/VLAN. Requires ISL instead of dot1q
Allows devices to interoperate with PVST and CST. Can use both dot1q and ISL
First configure a L3 interface in same VLAN as clients - then use the ip helper-address command to ID the DHCP server
No

3. How is UDLD configured?
Automatically using DTP and CDP
Per-port or globally for all fiber-optic ports. Can be enabled globally - but will only affect fiber ports
A group of wireless devices that share a common SSID
No shut

4. What are the steps to configure MST?
No
Real-time Transport Protocol
1- enable MST - 2-enter MST config mode - 3-assign region name and region configuration rev - 4-map vlans to an MSTI - 5-show pending changes - 6- commit by exiting
Flash override (class 4)

5. the static port to vlan membership is handled in _____
Regions and instances
The ASIC
A point to point port type
Dynamic WEP keys that change periodically

6. What is the IEEE standard for STP?
0-255
When a wireless station transmits a frame - the receiving one must send an ack
Routers at the distribution layer become the bottlenecks or broadcast or multicast traffic slows the switches in the switch block
802.1D

7. What is the GLBP group and priority range
Makes use of the DHCP snooping database and static ip source binding entries. If enabled - switch will test addresses
Group (0-1023) priority (1-255 higher better def 100)
Only for the offending VLAN on the port
The same as a standby group in HSRP

8. What is the STP blocking state?
2 seconds (def)
Can hear only BDPUs
No because they only participate if asked
Matching SSID - compatible data rate - authentication credentials

9. What is the VRRP skew time?
2 - one for control messages and one for data
Hold time is 3xhello. A skew time of 256ms-routerpriority)/256ms is added
On root - because the root bridge propagates timers with config BDPU
Causes switch to actively determine whether alternative paths exist to root bridge in case ther eis an indirect failure

10. How is the IPT 802.1 trunk negotiated?
When a wireless station transmits a frame - the receiving one must send an ack
Very high L3 throughput - no access lists or port filtering - redundancy and resilience - advanced QoS
Automatically using DTP and CDP
Hold time is 3xhello. A skew time of 256ms-routerpriority)/256ms is added

11. What are the 3 trunk encap modes?
SC fiber or RJ-45
Trusted ports
Isl - dot1q - negotiate (default)
Hashing algorithm

12. What is the PVLAN promiscuous mode?
Only when a nonedge port transitions to forwarding
Connects to a router - firewall - or gateway. Can communicate with anything else connected to the primary or any secondary. Ignores pvlan config
It updates the L2 headers with the proper src and dst MAC - L3 TTL - L3 checksum - and L2 checksum information
Sets the switchport mode to access - enables portfast - and turns off channel grouping for the port

13. How does NSF work?
Src-dst-ip
1- enable MST - 2-enter MST config mode - 3-assign region name and region configuration rev - 4-map vlans to an MSTI - 5-show pending changes - 6- commit by exiting
Gets assistance from other NSF-aware neighbors. NSF features need to be built into the routing protocols on router needing and providing assistance
Interim solution - uses same hardware as WEP - but uses TKIP encryption

14. What is portfast?
Yes
Almost eliminates listening and learning states for single hosts on an access link
Enables portfast - sets the port to access and disables PAgP
FIB

15. How do you configure IP source guard for hosts that don't use DHCP?
Sets the switchport mode to access - enables portfast - and turns off channel grouping for the port
Route processor redundancy - redundant sup is partially booted and initialized and must reload module in the switch and init all sup functions
The station can transmit immediately and wait for an ack
By creating a static IP binding

16. What is integrated services model QOS?
Globally
No
A path is pre-arranged for priority along the complete path from source to destination using the RSVP protocol.
2

17. What does BDPU filtering do?
Effectively stops STP on filtered ports
Hosts associated with a secondary VLAN can communicate with ports on the primary but not with another secondary VLAN
Discarding - learning - forwarding
It's a router that maintains routes (static or dynamic) - and populates the FIB

18. How does ISL handle COS?
All ARP packets that arrive on untrusted ports are inspected.
Packets are discarded due to an ACL or policy action
Distribution layer
The frame tag contains a 3 but portion tagged from 0 (low) to 7 (high)

19. What is the GLBP redirect timer?
Only when a nonedge port transitions to forwarding
Interim solution - uses same hardware as WEP - but uses TKIP encryption
Determines when the AVG will stop using the old VMAC in ARP replies
Gets assistance from other NSF-aware neighbors. NSF features need to be built into the routing protocols on router needing and providing assistance

20. How does every VRRP command begin?
Promiscuous and host
Incoming frames dropped - but MACs learned
Switch(config-if)# vrrp xx where xx= group number
The redundant SUP is booted and sup and route engine is init'd. No L2 or L3 functions are started. Allows switchports to retain state

21. what I s distributed CEF (dCEF)?
CEF is distributed completely among multiple L3 forwarding engines.
Priority (class 1)
Port with redundant - but less deisrable connection to a segment. Possibly root candidate
Source IP - dest IP - combination of source and dest IP - source and dest MAC - or TCP/UDP port numbers

22. How does ISL do trunking?
1-65535 (def 32768) lower priority - higher probability
By encapsulating each frame in a header and trailer
To a VLAN and not to a VLAN interface (SVI)
When a wireless station transmits a frame - the receiving one must send an ack

23. What is the default network diameter?
7 switches from root bridge
Another router must have a higher HSRP priority and have preemt set up
Interim solution - uses same hardware as WEP - but uses TKIP encryption
1-lowest root bridge ID - 2-lowest root path cost - 3-lowest bridgeID - 4-lowest port ID

24. unknown unicast flooding
Dynamic arp inspection
MAC addresses are learned from the source MAC of incoming frames. If the destination address is unknown - the frame is flooded out all except the receiving port.
Route once - switch many
On all switches in network to enable RLQ request and reply

25. How is an RSTP edge port configured
Distribution layer
Yes
With portfast
Switching Database Manager - configures and prunes TCAM partitions

26. What criteria are used to size a switch block?
Traffic types and patterns - amount of L3 switching cap. At dist. Layer - # users at access layer - geography - size of spanning tree domains
Control functions
No because they only participate if asked
A client can roam to any WLC as long as it stays in a mobility group

27. What is 802.1x force-unauthorized?
Port is forced to never authorize any connected client
Per-port or globally for all fiber-optic ports. Can be enabled globally - but will only affect fiber ports
Time between BDPUs sent by root bridge. Default of 2 seconds
Packets are discarded due to an ACL or policy action

28. What is dynamic desireable?
The port asks the other end to trunk
Switched Virtual Interface - an L3 address can be assigned to a logical interface that represents an entire VLAN - which becomes the DGW for that VLAN
80% of the user traffic should stay in the VLAN
Data and voice over native vlan no QOS and no 802.1p trunk

29. What are the restrictions for bundling into an Etherchannel?
Variation in delay
Must be same type - speed - VLAN(s) - native vlan - pass the same set of vlans -duplex - and spanning tree settings
A router keeps a routing table and an ARP table. The FIB combines them for every next-hop entry
An AP's coverage area

30. How should backbonefast be configured?
On all switches in network to enable RLQ request and reply
Connects to a host on an isolated or community vlan. Communicates only with promiscuous port or ports on same community vlan
80% of the user traffic should stay in the VLAN
When the AP uplinks to an Ethernet network.

31. What is latency?
Forces the router to wait for a period of time after the switch is reloaded before attempting to overthrow
Differentiated services
After forwarding delay - port can learn new MAC addresses
The total delay from start to finish

32. What are spoofed addresses?
Flash (class 3)
Each peer sends and receives hellos. Def hello is 3 sec - def hold is 10 sec
They disguise the origin of an attack
The same as a standby group in HSRP

33. What does IP source guard do?
Makes use of the DHCP snooping database and static ip source binding entries. If enabled - switch will test addresses
Limits the number if dhcp requests on a port
Flash (class 3)
After another forwarding delay - the port can send and receive data frames - collect MAC addresses - and send and receove BDPUs

34. What are the 5 steps a LAP uses to establish communication with a WLC?
Only a single host connects . If one BDPU is received - it is no longer an edge port
1-LAP gets a DHCP address - 2-LAP learns IP of available WLC - 3-LAP sends a join request to WLC and receives join reply - 4-WLC sends code image - if necessary - 5-Tunnels are created
Trusted or untrusted
Best effort delivery - integrated services model - and differentiated services model

35. How does dot1q do trunking?
FE and GE
Embeds the tag within the frame
The total delay from start to finish
Only for trusted Cisco gear - especially phones

36. How often are BDPUs sent?
The port uses 802.1x exchange to move from unauthorized to authorized. Requires app on client
2 seconds (def)
On ports where you never expect to find a root bridge for a VLAN
Both layer 2 switching and IVR

37. What contains the next-hop entries?
FIB
No because they only participate if asked
An instance of RSTP running for each VLAN on the switch. Changing from PVST to RPVST+ is disruptive
A port can only forward or relay BDPUs - but can't receive them - disabled by default - enabled per-port - blocks port when superior BDPUs are received

38. How many tunnels exist between the LAP and WLC?
By short-circuiting the max age timer
Needs hardware upgrade over WEP - uses AES encryption
Tracks of BDPUs on nondesignated ports. When those BDPUs stop coming - the port is put into loop-inconsistent state and blocks
2 - one for control messages and one for data

39. What is a punt adjacency?
1 to 64
On the left as you face the connector
Packets must be sent to the L3 engine for further processing
Up to 4 can be used in a group. Called active virtual forwarders (AVF)

40. What is the traditional MLS view of switching?
The active router. All other routers are in backup state
Route once - switch many
Src-ip - dst-ip - src-dst-ip - src-mac - dst-mac - src-dst-mac - src-port - dst-port - src-dst-port
Port that connects to another switch and becomes a designated port

41. What is the cost of a 10Gbps link?
900 MHz - 2.4Ghz - and 5-6GHz
2
Full duplex
Switching Database Manager - configures and prunes TCAM partitions

42. When should CDP be enabled?
Route once - switch many
LWAPP (Cisco proprietary) and CAP-WAP (standards based)
Gets assistance from other NSF-aware neighbors. NSF features need to be built into the routing protocols on router needing and providing assistance
Only for trusted Cisco gear - especially phones

43. what if a secondary VLAN?
All nondesignated ports - but ok for all ports
FE and GE
Hosts associated with a secondary VLAN can communicate with ports on the primary but not with another secondary VLAN
Admin down

44. What does the epoch number indicate when looking at cef entries?
The number of times the CEF table has bee flushed and regenerated as a whole
Using a single WAP to centralize access and control over a group of wireless devices.
Set the native VLAN of a trunk to a bogus or unused VLAN ID then prune the native VLAN off both ends of the trunk
The same as a standby group in HSRP

45. What are the PAgP negotiation modes
Data goes over native vlan - voice goes over specified VLAN - voice QOS is 802.1p
On (all ports channel) - auto (channels when asked) - and desirable(actively asks to form a channel)
It can't
CEF is distributed across multiple L3 forwarding engines - typically on Catalyst 6500 line cards each having only a subset

46. What is RPR+?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

47. What are the 4 steps to extend QoS trust?
Compatible with 802.11b - up to 54Mbps in 12 data rates - 3 channels - 2.4Ghz
Sets the switchport mode to access - enables portfast - and turns off channel grouping for the port
Flash override (class 4)
1- enable qos - 2-define qos parameters to be trusted - 3-make trust conditional - 4-instruct IP phone how to extnd boundary

48. How are GLBP timers used?
Any ports associated with an isolated vlan can reach the primary - but not any other secondary. Hosts withn an isolated vlan can't reach each other
Priority (class 1)
Each peer sends and receives hellos. Def hello is 3 sec - def hold is 10 sec
Multicasts to 224.0.0.18 (VRRP)

49. What is the STP listening state?
Configure non-silent submode
Can send and receive BDPUs
Only for trusted Cisco gear - especially phones
During the time that the FIB entry is in CEF glean waiting for ARP entries - subsequent packet to that host are dropped to keep input queues from filling

50. What if RSTP BDPUs aren't received?
If three are missed in a row - the neighbor is considered down and the data for that neighbor is aged
Used to switch packets destined for the null interface
Notifies upstream neighbors by sending multicasts on behalf of hosts at the interval of the max update rate parameter.
224.0.0.2 (all routers)