Test your basic knowledge |

CCNP Switch Deck

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. What is a VRRP group?
The same as a standby group in HSRP
Enables switches at the end of the spanning tree branches to have a functioning root port while keeping 1 or more redundant potential ports in blocking mode. When the main fails - the other comes up.
All user ports that have portfast enabled
The number of times the CEF table has bee flushed and regenerated as a whole

2. Which fiber is the receive?
On the left as you face the connector
Traffic types and patterns - amount of L3 switching cap. At dist. Layer - # users at access layer - geography - size of spanning tree domains
1 second. Backup routers can learn the interval from the master
26-byte header - 4-byte trailer with CRC

3. What criteria are used to size a switch block?
Traffic types and patterns - amount of L3 switching cap. At dist. Layer - # users at access layer - geography - size of spanning tree domains
By short-circuiting the max age timer
Create 2 hsrp groups - each with the active router being different switches - then have clients point to each
Each frame transmits its expected duration time

4. where does L2 switching occur?
Based on priority (0-255). Default is 100. Highest IP is tie breaker
16 - of which up to 8 are active. The others are in standby
Between interfaces that are assigned to L2 VLANs or L2 trunks
The master router can share the VIP

5. If one end of an Etherchannel (either type) is set to on and the channel doesn't form - what should you check?

6. How is an instance defined?
Via an 802.1Q trunk or a single VLAN access port
802.1x with EAP over LAN (EAPOL)
Because each frame is checked
By name - config revision - and instance to vlan mapping table

7. What is an insignificant topology change?
The port uses 802.1x exchange to move from unauthorized to authorized. Requires app on client
Needs hardware upgrade over WEP - uses AES encryption
A host port goes up or down
Up to 4 can be used in a group. Called active virtual forwarders (AVF)

8. 802.11b
Switching Database Manager - configures and prunes TCAM partitions
1 -2 -5.5 and 11 Mbps - Channels 1/6/11 - 2.4Ghz
Connects to a host on an isolated or community vlan. Communicates only with promiscuous port or ports on same community vlan
1-name the chain - 2-establish a key number - 3-create the key string - 4-apply the chain to the string

9. What is UDLD aggressive mode?

10. How is the HSRP MAC address configured?
1-ID link path costs - 2-ID roodt bridge - 3-select root port (1/switch) - 4-select designated port (1/segment) - 5-ID blocking port
4
Real-time Transport Protocol
0000.0c07.acxx where xx is the group number as a 2-digit hex value

11. One vlan should =
0007.b4xx.xxyy where xx.xx is six 0 bits followed by a 10-bit GLBP group numberr. Yyyy is the virtual forwarder number
1 IP subnet
Needs hardware upgrade over WEP - uses AES encryption
If a unidirectional link is detected - the switch doesn't try to reestablish the link. ULD msgs are sent once/sec for 8 seconds - then the port is err-disabled

12. How is an RSTP edge port configured
Sends a test tone on the transmit pair. If a device is detected - CDP is used to narrow down the power class.
On ports where you never expect to find a root bridge for a VLAN
By sending a gratuitous ARP
With portfast

13. Where should you change the network diameter value?
One router is the active virtual gateway - has highest priority or IP in group - answers all ARP requests and gives MAC based on load balancing
Option 43
Cisco recommends only on the root bridge
Reboots and searches for a new WLC

14. How does HSRP port tracking work?

15. What is step 1 of enabling IP source guard?
Configure and enable DHCP snooping
Source IP - dest IP - combination of source and dest IP - source and dest MAC - or TCP/UDP port numbers
Used to switch packets destined for the null interface
Trusted ports

16. What is layer 3 roaming?
It updates the L2 headers with the proper src and dst MAC - L3 TTL - L3 checksum - and L2 checksum information
Makes use of the DHCP snooping database and static ip source binding entries. If enabled - switch will test addresses
When a client roams between Aps in different subnets
Every switch and router in a network must be configured with appropriate QoS features and policies

17. What are the 6 steps to configure 802.1x for port security?
0-255
No
1-enable AAA on switch - 2-define RADIUS servers - 3-define authentication method - 4-enable 802.1x on switch - 5-conf. 802.1x ports - 6-allow hosts
The switch checks the MAC and IP reported in the reply against trusted values. If they don't match - it is dropped and logged

18. Of what significance are private VLANs
Local only
Switches make an effort to move packets as quickly as possible
A client can roam to any WLC as long as it stays in a mobility group
2 seconds (def)

19. What is the cost of a 100Mbps link?
After forwarding delay - port can learn new MAC addresses
Only a single host connects . If one BDPU is received - it is no longer an edge port
19
Yes

20. What is the access layer best practice?
Limits the number if dhcp requests on a port
All L2 connectivity should be contained within the access layer.
Once the CCM gives them the parameters - they use RTP
An ac adaptor that plugs into a wall outlet.

21. What is the STP blocking state?
Trusted ports
Each peer sends and receives hellos. Def hello is 3 sec - def hold is 10 sec
Root - designated - blocking - alternate - forwarding (host)
Can hear only BDPUs

22. How does DAI work?
Very high L3 throughput - no access lists or port filtering - redundancy and resilience - advanced QoS
Controls where candidate root bridges can be connected and found on a network
1 per segment
All ARP packets that arrive on untrusted ports are inspected.

23. How do VRRP routers handle preemption?
After another forwarding delay - the port can send and receive data frames - collect MAC addresses - and send and receove BDPUs
On by default
Globally
Weak key rotation

24. How many 802.3af power classes are there?
Between any type of interface as long as the interface can have an L3 address assigned
Differentiated services code point
After another forwarding delay - the port can send and receive data frames - collect MAC addresses - and send and receove BDPUs
5 (0-4 with 4 being the highest)

25. What is SSO?

26. What is the range of PAgP channel group numbers?
The station must wait until the frame in progress has completed - then wait a random amount of time before transmitting
1 to 64
Roughly 2000
Used when there are 1 or more VLANs mapped to a single STP instance

27. What is a LACP priority?
A VLAN that spans the entire fabric
The TOS field in the header is used. 2 methods 3 bits or 6 bits
The priority is a 2 byte value followed by the MAC that decides which ports are actively participating in Etherchannel (lower=higher priority)
Causes switch to actively determine whether alternative paths exist to root bridge in case ther eis an indirect failure

28. What if RSTP BDPUs aren't received?
The port uses 802.1x exchange to move from unauthorized to authorized. Requires app on client
If three are missed in a row - the neighbor is considered down and the data for that neighbor is aged
Packets must be sent to the L3 engine for further processing
Switch(config-if)# glbp xx where xx = group number

29. What are TCAM entries composed of?
Value - mask - and result (VMR) combinations
Distribution
1 per segment
Source IP - dest IP - combination of source and dest IP - source and dest MAC - or TCP/UDP port numbers

30. What is the default 10mbps Enet duplex?
Tracks of BDPUs on nondesignated ports. When those BDPUs stop coming - the port is put into loop-inconsistent state and blocks
Half-duplex
A host port goes up or down
All fiber-optic links between switches (must be enabled on both ends)

31. What categories can ports be in with dhcp snooping enabled?
Each network device handles packets individually with no advance reservations
Distributed coordinion function - the use of timers to prevent wireless collisions
Trusted or untrusted
Manually

32. What ILP mode are all ports in by default?
Auto mode
During the time that the FIB entry is in CEF glean waiting for ARP entries - subsequent packet to that host are dropped to keep input queues from filling
It is enabled by default on all CEF capable switches
Via an 802.1Q trunk or a single VLAN access port

33. What does VTP do?
Manages addition - deletion and renaming VLANs across the network
Only for trusted Cisco gear - especially phones
All fiber-optic links between switches (must be enabled on both ends)
Immediate (class 2)

34. What are the 4 steps in DHCP negotiation?
1-client sends DHCP discover as broadcast - 2-DHCP server sends DHCP offer - client sends DHCP Request - DHCP server sends DHCP ack
The time that a port spends in both listening and learning states . Default 15 seconds
Per-port or globally for all fiber-optic ports. Can be enabled globally - but will only affect fiber ports
Should be used on access switches - can't be used on root - keeps enabled switch from becoming root by raising priority of switch and all ports - making them undesirable

35. Where is loop guard enabled?
By encapsulating each frame in a header and trailer
Bridge priority and MAC
All nondesignated ports - but ok for all ports
Only on ports that have same static VLANs or trunking. It also modifies parameters of the channel if one of the ports is modified

36. What can cause a wireless client to switch between Aps?
Missed beacons - dropped packets (max retry) - weak signal (data rate switches down) - an AP periodicallytries to find a stronger signal
Switch(config-if)# vrrp xx where xx= group number
Limits the number if dhcp requests on a port
Round robin - weighted - or host-dependent

37. What is route caching?

38. How is Root Guard used?
On ports where you never expect to find a root bridge for a VLAN
One that can be detected on a switch interface (ie. Up/down)
FE - GE - and aggregated FE/GE Etherchannels
Change in trunk encap

39. RSTP discarding state
One router is the active virtual gateway - has highest priority or IP in group - answers all ARP requests and gives MAC based on load balancing
Two distribution switches that aggregate one or more access switches
Incoming frames are dropped (combination of disabled - blocking - and listening)
If any BDUP is received on a port - it puts the port into the errdisable state

40. What is a drop adjacency?

41. what must be done on an SVI before it is activated?
No shut
Routers are assigned to common GLBP group. All routers can be active and can load balance
The same as a standby group in HSRP
Root - designated - blocking - alternate - forwarding (host)

42. How are VACLs applied
Roughly 50%
Between any type of interface as long as the interface can have an L3 address assigned
By creating a static IP binding
To a VLAN and not to a VLAN interface (SVI)

43. Does GLBP allow preemption?
Disabled - blocking - listening - learning - forwarding
Yes
Local only
Global config (vlan - vtp mode - and vtp domain) and VLAN DB mode commands. Global config is preferred because VLAN DB mode commands are legacy

44. How does RSTP identify a topology change?
By brining up a tunnel between them to carry 802.11 related messages and client data.
The ASIC
Only when a nonedge port transitions to forwarding
Disabled - blocking - listening - learning - forwarding

45. What is integrated services model QOS?
A path is pre-arranged for priority along the complete path from source to destination using the RSVP protocol.
Single instance of STP for all VLANs. BDPUs are sent over trunks using the native VLAN with untagged frames. Dot1q based
0-255
1- trunking mode - 2-trunk encapsulation - 3-native VLAN - 4-allowed VLAN

46. How does uplinkfast handle changes in topology?
Notifies upstream neighbors by sending multicasts on behalf of hosts at the interval of the max update rate parameter.
Limits the number if dhcp requests on a port
1 IP subnet
A client can roam to any WLC as long as it stays in a mobility group

47. What are the steps to configuring HSRP MD5 authentication?
Configure and enable DHCP snooping
Limits the number if dhcp requests on a port
1-name the chain - 2-establish a key number - 3-create the key string - 4-apply the chain to the string
Route processor redundancy - redundant sup is partially booted and initialized and must reload module in the switch and init all sup functions

48. What is NSF?
Roughly 2000
Nonstop forwarding is an interactive method focusing on rebuilding the RIB after SUP switchover
Very high L3 throughput - no access lists or port filtering - redundancy and resilience - advanced QoS
Roughly 50%

49. How does loop guard block ports?
A path is pre-arranged for priority along the complete path from source to destination using the RSVP protocol.
Automatically negotiates a common trunk mode between switches
MST attributes must be manually entereed on each switch in the region. They don' t propagate like VTP.
Only for the offending VLAN on the port

50. What is the 80/20 rule?
1 per segment
80% of the user traffic should stay in the VLAN
By creating a static IP binding
The topology is pre-populated by downloading the topology DB into the FIB and dynamically updated. Called Cisco Express Forwarding