Test your basic knowledge |

CCNP Switch Deck

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. What is the STP blocking state?
A key string of up to 8 characters is sent. Default is cisco.
Can hear only BDPUs
The port is forced to always authorize any connected client with no authentication necessary (default)
0-255

2. What is PVST plus (PVST+)?
134 bits
Allows devices to interoperate with PVST and CST. Can use both dot1q and ISL
CEF is distributed completely among multiple L3 forwarding engines.
The master router can share the VIP

3. What is a root link query (RLQ)?
16 - of which up to 8 are active. The others are in standby
Checks the destination MAC in the header against the target MAC in the ARP reply
Backbonefast uses RLQ to determine if upstream switches have stable connections to root bridge
FE - GE - and aggregated FE/GE Etherchannels

4. What is DCF?
Distributed coordinion function - the use of timers to prevent wireless collisions
Forces the router to wait for a period of time after the switch is reloaded before attempting to overthrow
Makes use of the DHCP snooping database and static ip source binding entries. If enabled - switch will test addresses
0-65535 (def 32768) lower=better

5. How is the HSRP MAC address configured?
With portfast
MAC addresses are learned from the source MAC of incoming frames. If the destination address is unknown - the frame is flooded out all except the receiving port.
0000.0c07.acxx where xx is the group number as a 2-digit hex value
Missed beacons - dropped packets (max retry) - weak signal (data rate switches down) - an AP periodicallytries to find a stronger signal

6. What ILP mode are all ports in by default?
The L3 forwarding engine can't forward the packet in hardware because there is no L2 next-hop address - so the packet is sent to the L3 engine to generate the ARP response
Auto mode
Must be same type - speed - VLAN(s) - native vlan - pass the same set of vlans -duplex - and spanning tree settings
Receives the first packet of a traffic flow and routes it

7. What is a baby giant frame?
If a unidirectional link is detected - the port continues normally - but the port is marked as undetermined and a syslog is generated
Frames that barely exceed 1518B or 1622B due to headers
The frame tag contains a 3 but portion tagged from 0 (low) to 7 (high)
A TCN BDPU is sent out of the switch's root port. The switch will continue sending TCN's every hello interval until ack'd by upstream neighbor. The root bridge will send a Config BDPU to all switches

8. What is differentiated services model QOS?
Each network device handles packets individually with no advance reservations
16 - IST gets MSTI 0 - 1-15 are available for use. MSTIs are locally significant to the MST region
Port is forced to never authorize any connected client
2 seconds

9. What is best effort delivery QOS?
Gateway load balancing protocol - cisco proprietary
The active router. All other routers are in backup state
7 switches from root bridge
Switches make an effort to move packets as quickly as possible

10. How do you prevent switch spoofing?
By configuring every switch port to have an expected and controlled behavior
FE and GE
When a client roams between Aps in different subnets
Frames are forwarded

11. What is dynamic auto?
Will trunk if asked
Configuration and TCN
Discarding - learning - forwarding
0000.0c07.acxx where xx is the group number as a 2-digit hex value

12. How does IPT behave when the voce VLAN is in the default none mode?
Used when ACLs specify port ranges...used by TCAM
Data and voice over native vlan no QOS and no 802.1p trunk
1/2 and 3/6
Roughly 2000

13. What is 802.1x force-authorized?
2-8 FE - GE - or 10GE are bundled.
Port that connects to another switch and becomes a designated port
The port is forced to always authorize any connected client with no authentication necessary (default)
Lowest cumulative cost to root

14. How does GLBP work?
By short-circuiting the max age timer
That they aren't using the same frequencies.
0-255 (lower is better)
Routers are assigned to common GLBP group. All routers can be active and can load balance

15. How does the standby handle ARP issues after it becomes active?
The same as a standby group in HSRP
7 switches from root bridge
224.0.0.2 (all routers)
By sending a gratuitous ARP

16. What is 802.1x force-unauthorized?
Port
Switchpotrt nonegotiate
Local only
Port is forced to never authorize any connected client

17. What are the 6 steps to configure 802.1x for port security?
Collision domain
1-enable AAA on switch - 2-define RADIUS servers - 3-define authentication method - 4-enable 802.1x on switch - 5-conf. 802.1x ports - 6-allow hosts
Each frame transmits its expected duration time
Listens to the first packet going to router and away from the router. If it can switch in both directions - it learns a shortcut path so subsequent packets can be switched without the RP

18. Define VRRP
2
Virtual Router Redundancy Protocol - pretty much the same as HSRP
After forwarding delay - port can learn new MAC addresses
The wireless clients communicate directly with no other means of connectivity such as a WAP

19. What types of ports autonegotiate?
They should be an unconditional Etherchannel because the WLC can't negotiate a channel.
FE and GE
Routers are assigned to common GLBP group. All routers can be active and can load balance
Promiscuous and host

20. What is the RSTP default hello interval?
Only for trusted Cisco gear - especially phones
Used when ACLs specify port ranges...used by TCAM
Checks the source MAC in the header against the sender MAC in the ARP reply
2 seconds

21. What happens when the topology changes?

22. What is the default network diameter?
Critical...used most often for IPT
Connects with SONET or SDH
7 switches from root bridge
LWAPP (Cisco proprietary) and CAP-WAP (standards based)

23. WPA2 encryption
The point at which a switch decides to trust incoming Qos. Usually at boundary with ISP
That they aren't using the same frequencies.
Each peer sends and receives hellos. Def hello is 3 sec - def hold is 10 sec
Needs hardware upgrade over WEP - uses AES encryption

24. What types of link can an etherchannel be?
Access or trunk
Real-time Transport Protocol
Plain text or md5
Differentiated services

25. What are the restrictions for bundling into an Etherchannel?
Enables portfast - sets the port to access and disables PAgP
Trunk
19
Must be same type - speed - VLAN(s) - native vlan - pass the same set of vlans -duplex - and spanning tree settings

26. What categories can ports be in with dhcp snooping enabled?
Manages addition - deletion and renaming VLANs across the network
Trusted or untrusted
No
Can hear only BDPUs

27. By default - what submode does PAgP operate in with the desirable and auto modes?
Silent
That they aren't using the same frequencies.
When a wireless station transmits a frame - the receiving one must send an ack
Cisco ILP and 802.3af

28. When looking at the sh spanning tree output - What does P2P peer(STP) denote?
Limits the number if dhcp requests on a port
Used when ACLs specify port ranges...used by TCAM
When a client roams between Aps in different subnets
A point to point port type but the neighboring device runs traditional 802.1D STP

29. What does DTP do?
Automatically negotiates a common trunk mode between switches
By encapsulating each frame in a header and trailer
Can hear only BDPUs
No shut

30. By default - what layer do catalyst switchports operate on?
A group of wireless devices that share a common SSID
L2
Incoming frames are dropped (combination of disabled - blocking - and listening)
By brining up a tunnel between them to carry 802.11 related messages and client data.

31. What is a VRRP group?
Limits the number if dhcp requests on a port
The same as a standby group in HSRP
By creating a static IP binding
Frames that barely exceed 1518B or 1622B due to headers

32. What does the RP do?
Automatically by duplex mode in use. Full duplex are point ot point. Half duplex ports use traditional 802.1D convergence is used.
Another router must have a higher HSRP priority and have preemt set up
Receives the first packet of a traffic flow and routes it
Each peer sends and receives hellos. Def hello is 3 sec - def hold is 10 sec

33. What is 802.1x auto?
Only when a nonedge port transitions to forwarding
The port uses 802.1x exchange to move from unauthorized to authorized. Requires app on client
Trunk
Used when there are 1 or more VLANs mapped to a single STP instance

34. What routing protocols support NSF?
BGP - EIGRP - OSPF - and IS-IS.
1 IP subnet
Using digital certificates
Backbonefast uses RLQ to determine if upstream switches have stable connections to root bridge

35. What is an ESS?
Used when ACLs specify port ranges...used by TCAM
Route processor redundancy - redundant sup is partially booted and initialized and must reload module in the switch and init all sup functions
Untrusted
When the AP uplinks to an Ethernet network.

36. What is a service set?
63 kbps
The same as a standby group in HSRP
A group of wireless devices that share a common SSID
Trusted or untrusted

37. What criteria are used to size a switch block?
Traffic types and patterns - amount of L3 switching cap. At dist. Layer - # users at access layer - geography - size of spanning tree domains
RADIUS
Globally
When a port moves into forwarding or from fowarding or learning to blocking.

38. What are the 2 choices for VLANs with IPT?
Round robin - weighted - or host-dependent
0-255
1/2 and 3/6
They must be carried over a voice VLAN (VVID) or over a regular data VLAN (ie. The native VLAN or the PVID)

39. What is the portr ID?
Globally
Connects to a host on an isolated or community vlan. Communicates only with promiscuous port or ports on same community vlan
If a unidirectional link is detected - the port continues normally - but the port is marked as undetermined and a syslog is generated
16 bits (8b port priority - 8b port number)

40. What are the 6 HSRP states?
Disabled - init - listen - speak - standby - active
After another forwarding delay - the port can send and receive data frames - collect MAC addresses - and send and receove BDPUs
No
Single instance of STP for all VLANs. BDPUs are sent over trunks using the native VLAN with untagged frames. Dot1q based

41. What does UDLD do?
The port is forced to always authorize any connected client with no authentication necessary (default)
Using a mobility exchange message
Protects STP when a physical malfunction only allows traffic in 1 direction - even though the link shows as up (cisco proprietary)
All fiber-optic links between switches (must be enabled on both ends)

42. What is backbonefast?
Almost eliminates listening and learning states for single hosts on an access link
Each physical interface has a different IP address. All physical interfaces point to a virtual interface called the standby address or VIP
Causes switch to actively determine whether alternative paths exist to root bridge in case ther eis an indirect failure
Automatically negotiates a common trunk mode between switches

43. How do you enable CEF?
Distributed coordinion function - the use of timers to prevent wireless collisions
No because they only participate if asked
Every switch and router in a network must be configured with appropriate QoS features and policies
It is enabled by default on all CEF capable switches

44. How is a QoS trust bondary configured?
With the skinny protocol
Flash (class 3)
Every switch and router in a network must be configured with appropriate QoS features and policies
An instance of RSTP running for each VLAN on the switch. Changing from PVST to RPVST+ is disruptive

45. How does ISL do trunking?
Used to switch packets that can't be forwarded normallly due to an encapsulation failure - unresolved address - unsupported protocol - etc.
Via an 802.1Q trunk or a single VLAN access port
No
By encapsulating each frame in a header and trailer

46. Each switch port is a _____ ______
7 switches from root bridge
Collision domain
Trunk - dynamic auto - dynamic desireable (default)
Both ends should be on because on modes doesn't send PAgP or LACP packets

47. How does HSRP plain text authentication work?
A key string of up to 8 characters is sent. Default is cisco.
Port with redundant - but less deisrable connection to a segment. Possibly root candidate
1- trunking mode - 2-trunk encapsulation - 3-native VLAN - 4-allowed VLAN
The station can transmit immediately and wait for an ack

48. What are the two private vlan association modes?
Configure the timer on the AVG and let it propagate
Promiscuous and host
PAgP (Cisco proprietary) and LACP (standards-based)
L2

49. One vlan should =
Both layer 2 switching and IVR
1 IP subnet
A point to point port type
The time that a port spends in both listening and learning states . Default 15 seconds

50. What are the three basic types of QOS?
Dynamic WEP keys that change periodically
Only the standby monitors the hello messages from the active router
Port that connects to another switch and becomes a designated port
Best effort delivery - integrated services model - and differentiated services model