Test your basic knowledge |

CCNP Switch Deck

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. When looking at the sh spanning tree output - What does P2P peer(STP) denote?
A point to point port type but the neighboring device runs traditional 802.1D STP
By an ARP access list that defines the permitted bindings
When a port moves into forwarding or from fowarding or learning to blocking.
The station must wait until the frame in progress has completed - then wait a random amount of time before transmitting

2. Where is the QoS trust boundary usually configured on an IP phone?
Usually QoS from VOIP but not PC dataa
An ac adaptor that plugs into a wall outlet.
Each network device handles packets individually with no advance reservations
TCAM

3. What are the 3 trunk switchport modes?
Flash override (class 4)
2
Trunk - dynamic auto - dynamic desireable (default)
The RP listens to a flow's 1st packet for the dest. The SE listens to the packet and dest and puts a shortcut in the MSL cache. Netflow switching - route once - switch many

4. What does a LAP do if it loses communication with it's WLC?
Reboots and searches for a new WLC
The topology is pre-populated by downloading the topology DB into the FIB and dynamically updated. Called Cisco Express Forwarding
By using an Ether-IP tunnel
A host port goes up or down

5. How much BW does a voip connection use?
Untrusted
Hosts associated with a secondary VLAN can communicate with ports on the primary but not with another secondary VLAN
12 kbps with headers and compression
Immediate (class 2)

6. How does loop guard block ports?
63 kbps
Interim solution - uses same hardware as WEP - but uses TKIP encryption
By configuring every switch port to have an expected and controlled behavior
Only for the offending VLAN on the port

7. What is a drop adjacency?

8. What is RPR?
Trunk
Group (0-255) - priority (1-254 254 is highest - 100 default)
Route processor redundancy - redundant sup is partially booted and initialized and must reload module in the switch and init all sup functions
Aggregation - high L3 throughput - security and policy based connectivity functions through access lists and packet filters - QoS - scalable high-speed links

9. How do you configure IP source guard for hosts that don't use DHCP?
By creating a static IP binding
Yes
No
Root - designated - blocking - alternate - forwarding (host)

10. How does a WLC hand off a client's association to another WLC?
10-15%
Using a mobility exchange message
All ARP packets that arrive on untrusted ports are inspected.
0007.b4xx.xxyy where xx.xx is six 0 bits followed by a 10-bit GLBP group numberr. Yyyy is the virtual forwarder number

11. What is UDLD normal mode?
A router keeps a routing table and an ARP table. The FIB combines them for every next-hop entry
2-8 FE - GE - or 10GE are bundled.
If a unidirectional link is detected - the port continues normally - but the port is marked as undetermined and a syslog is generated
By default weight is 100. Can be made dynamic per interface

12. How many virtual MACs can GLBP have?
Control functions
Trunk
Up to 4 can be used in a group. Called active virtual forwarders (AVF)
1- trunking mode - 2-trunk encapsulation - 3-native VLAN - 4-allowed VLAN

13. What is 802.1x force-authorized?
Virtual Router Redundancy Protocol - pretty much the same as HSRP
134 bits - consisting of source and destination addresses and protocol information from the packet or frame
The port is forced to always authorize any connected client with no authentication necessary (default)
Data and voice over native vlan - no QOS but still uses 802.1p trunk

14. What is an end to end vlan?
A VLAN that spans the entire fabric
An AP's coverage area
Checks the sender's ip in all arp requests and checks the sender's IP against target IP in all replies
The port uses 802.1x exchange to move from unauthorized to authorized. Requires app on client

15. How far chould a VLAN extend?
Distribution layer
16 - of which up to 8 are active. The others are in standby
A port can only forward or relay BDPUs - but can't receive them - disabled by default - enabled per-port - blocks port when superior BDPUs are received
No

16. What is the GLBP group and priority range
Nonstop forwarding is an interactive method focusing on rebuilding the RIB after SUP switchover
Those that connect to other switches
Group (0-1023) priority (1-255 higher better def 100)
0-255 (lower is better)

17. How does DSCP handle IP precedence?
Priority (class 1)
Disabled - blocking - listening - learning - forwarding
5 classes with 3 drop precedences
16 - IST gets MSTI 0 - 1-15 are available for use. MSTIs are locally significant to the MST region

18. What routing protocols support NSF?
By using a trunk link
12 kbps with headers and compression
BGP - EIGRP - OSPF - and IS-IS.
By using an Ether-IP tunnel

19. What 2 conditions does IP source guard check for?
0-65535 (def 32768) lower=better
Source IP and MAC must match those addresses learned by DHCP snooping or a static entry
Incoming frames are dropped (combination of disabled - blocking - and listening)
Isl - dot1q - negotiate (default)

20. What is the default FE duplex?
Cisco proprietary. 1 instance of STP/VLAN. Requires ISL instead of dot1q
Missed beacons - dropped packets (max retry) - weak signal (data rate switches down) - an AP periodicallytries to find a stronger signal
Access
Full duplex

21. How is a WLC handoff handled when the WLCs are in different subnets?
By using an Ether-IP tunnel
The point at which a switch decides to trust incoming Qos. Usually at boundary with ISP
Switching Database Manager - configures and prunes TCAM partitions
Disabled - blocking - listening - learning - forwarding

22. What are TCAM entries composed of?
Value - mask - and result (VMR) combinations
They should be an unconditional Etherchannel because the WLC can't negotiate a channel.
Weak key rotation
Only for trusted Cisco gear - especially phones

23. What duplex setting does 802.11 use and why?
Traffic types and patterns - amount of L3 switching cap. At dist. Layer - # users at access layer - geography - size of spanning tree domains
By using a trunk link
Half because transmitting and receiving stations use the same frequency
16 - of which up to 8 are active. The others are in standby

24. What are the 2 choices for VLANs with IPT?
They must be carried over a voice VLAN (VVID) or over a regular data VLAN (ie. The native VLAN or the PVID)
Differentiated services code point
Distribution layer
1-(opt) configure load balancing - 2-select the interface(s) - 3-assign the protocol - 4-select the mode and submode

25. Does VTP pass private VLAN configuration?
No
Routers at the distribution layer become the bottlenecks or broadcast or multicast traffic slows the switches in the switch block
Discarding - learning - forwarding
To the virtual port-channel interface

26. How do VRRP routers handle preemption?
Distribution layer
1 per segment
On by default
Priority (class 1)

27. How should UDLD be configured?
1- trunking mode - 2-trunk encapsulation - 3-native VLAN - 4-allowed VLAN
16 - IST gets MSTI 0 - 1-15 are available for use. MSTIs are locally significant to the MST region
Admin down
The configureable UDLD interval must be less than max age plus two intervals of forward delay

28. How does DAI work?
All ARP packets that arrive on untrusted ports are inspected.
Isl - dot1q - negotiate (default)
Used when ACLs specify port ranges...used by TCAM
Some unused bits are used to allow a port to identify its role and state. Also the BDPUs state that they are V2 BDPUs

29. What are the characteristics of the distribution layer?
By using an Ether-IP tunnel
No
Manages addition - deletion and renaming VLANs across the network
Aggregation - high L3 throughput - security and policy based connectivity functions through access lists and packet filters - QoS - scalable high-speed links

30. What is an IBSS?
Real-time functions such as beacons and probes - encryption and interactions with the client at L2
All non-edge ports are discarding. After the root bridge is identified - the port with superior BDPU becomes root
1-name the chain - 2-establish a key number - 3-create the key string - 4-apply the chain to the string
The wireless clients communicate directly with no other means of connectivity such as a WAP

31. When should CDP be enabled?
Only for trusted Cisco gear - especially phones
1-lowest root bridge ID - 2-lowest root path cost - 3-lowest bridgeID - 4-lowest port ID
On (all ports channel) - auto (channels when asked) - and desirable(actively asks to form a channel)
Roughly 50%

32. How does backbonefast determine whether alternative paths exist?
1- inferior BDPU on blocked-considered alternative - 2-inferior on root-all blocked ports considered alternate - 3-if inferior arrives on root and no blocked ports - assumes loss of connectivity to root
Both ends should be on because on modes doesn't send PAgP or LACP packets
They disguise the origin of an attack
Needs hardware upgrade over WEP - uses AES encryption

33. What is the standard for WLANs?
802.11
Port stays up - but packets from violating MACs are dropped. Switch logs violating packets
1-ID link path costs - 2-ID roodt bridge - 3-select root port (1/switch) - 4-select designated port (1/segment) - 5-ID blocking port
Checks the sender's ip in all arp requests and checks the sender's IP against target IP in all replies

34. RSTP discarding state
Incoming frames are dropped (combination of disabled - blocking - and listening)
All user ports that have portfast enabled
0000.0c07.acxx where xx is the group number as a 2-digit hex value
By an ARP access list that defines the permitted bindings

35. What is the default 10mbps Enet duplex?
Receives the first packet of a traffic flow and routes it
All user ports that have portfast enabled
Half-duplex
Only on ports that have same static VLANs or trunking. It also modifies parameters of the channel if one of the ports is modified

36. Can ARP replies be checked
No
Src-ip - dst-ip - src-dst-ip - src-mac - dst-mac - src-dst-mac - src-port - dst-port - src-dst-port
Yes
A point to point port type but the neighboring device runs traditional 802.1D STP

37. How many 802.3af power classes are there?
The port asks the other end to trunk
A point to point port type but the neighboring device runs traditional 802.1D STP
5 (0-4 with 4 being the highest)
The frame tag contains a 3 but portion tagged from 0 (low) to 7 (high)

38. what do multilayer switches do?
Both layer 2 switching and IVR
The number of times the entry has been updated since the table was generated
Arp for local subnet - if on different subnet - will arp for dgw
2 seconds (def)

39. What is step 1 of enabling IP source guard?
Half-duplex
Configure and enable DHCP snooping
For hosts that doesn't understand routing - the DGW is configured to reply with its own mac
Determines when the AVG will stop using the old VMAC in ARP replies

40. How does every HSRP config command begin?
Access or trunk
Switch(config-if)# standby xx where x= group number
The time interval that a switch stores a DBPU before discarding it. Default 20 seconds
The link status stays up - but something between them has failed or is filtering traffic

41. Does GLBP allow preemption?
Trusted ports
Roughly 2000
Port stays up - packets from violating MACs dropped - no logging
Yes

42. What are the PAgP negotiation modes
Tracks of BDPUs on nondesignated ports. When those BDPUs stop coming - the port is put into loop-inconsistent state and blocks
Feature Manager - after the ACL is created - the FM compiles the ACEs into the table
On (all ports channel) - auto (channels when asked) - and desirable(actively asks to form a channel)
Port that connects to another switch and becomes a designated port

43. What is jitter?
The MST instance (MSTI) runs alongside the IST and represents an STP instance
By name - config revision - and instance to vlan mapping table
Checks the source MAC in the header against the sender MAC in the ARP reply
Variation in delay

44. What is the acceptible range of VLANS?
TCAM
Half-duplex
Both layer 2 switching and IVR
1-1005 (1 and 1002-1005 are reserved)

45. What are the 2 power over ethernet methods?
Cisco ILP and 802.3af
300 sec by default
1-client sends DHCP discover as broadcast - 2-DHCP server sends DHCP offer - client sends DHCP Request - DHCP server sends DHCP ack
A single broadcast domain

46. How much overlap should a wireless repeater have?
All user ports that have portfast enabled
134 bits
LWAPP (Cisco proprietary) and CAP-WAP (standards based)
Roughly 50%

47. Which fiber is the receive?
No
0007.b4xx.xxyy where xx.xx is six 0 bits followed by a 10-bit GLBP group numberr. Yyyy is the virtual forwarder number
FE and GE
On the left as you face the connector

48. What is a proxy arp?

49. What is DSCP codepoint EF(46)?
All ARP packets that arrive on untrusted ports are inspected.
Critical...used most often for IPT
Bridge priority and MAC
Hashing algorithm

50. What is the distribution layer best practice?
Sets the switchport mode to access - enables portfast - and turns off channel grouping for the port
The distribution layer should have only L3 links
Distribution layer
Distribution layer