Test your basic knowledge |

CCNP Switch Deck

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. What is the STP forward delay timer?
Needs hardware upgrade over WEP - uses AES encryption
The time that a port spends in both listening and learning states . Default 15 seconds
Enables portfast - sets the port to access and disables PAgP
A group of wireless devices that share a common SSID

2. What is 802.1x force-authorized?
MST attributes must be manually entereed on each switch in the region. They don' t propagate like VTP.
The port is forced to always authorize any connected client with no authentication necessary (default)
The number of times the entry has been updated since the table was generated
10-15%

3. What is the FM?
Makes use of the DHCP snooping database and static ip source binding entries. If enabled - switch will test addresses
A client can roam to any WLC as long as it stays in a mobility group
Incoming frames are dropped (combination of disabled - blocking - and listening)
Feature Manager - after the ACL is created - the FM compiles the ACEs into the table

4. How does every HSRP config command begin?
Must be same type - speed - VLAN(s) - native vlan - pass the same set of vlans -duplex - and spanning tree settings
Switch(config-if)# standby xx where x= group number
Per-port or globally for all fiber-optic ports. Can be enabled globally - but will only affect fiber ports
Enables portfast - sets the port to access and disables PAgP

5. What is a community secondary VLAN?
Multicasts to 224.0.0.18 (VRRP)
Manually
Checks the sender's ip in all arp requests and checks the sender's IP against target IP in all replies
Hosts within a secondary can communicate with each other and with the primary - but not with another secondary vlan

6. What can the Etherchannel hash use?
Almost eliminates listening and learning states for single hosts on an access link
As a VLAN access map
Source IP - dest IP - combination of source and dest IP - source and dest MAC - or TCP/UDP port numbers
The port uses 802.1x exchange to move from unauthorized to authorized. Requires app on client

7. What is UDLD aggressive mode?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

8. How is an instance defined?
If a proposal is received - the recipient isolates - all nonedge ports blocked until proposal sent causing neighbors to synch - which propagates out in waves
By name - config revision - and instance to vlan mapping table
1-65535 (def 32768) lower priority - higher probability
Up to 54Mbps - not cross-compatible - 12 to 23 clean channels - 5.8 Ghz

9. What is integrated services model QOS?
Used when ACLs specify port ranges...used by TCAM
Checks the sender's ip in all arp requests and checks the sender's IP against target IP in all replies
A path is pre-arranged for priority along the complete path from source to destination using the RSVP protocol.
It can't

10. Where should you change the network diameter value?
Enables portfast - sets the port to access and disables PAgP
Cisco recommends only on the root bridge
10-15%
19

11. Define GLBP
Root
Multicasts to 224.0.0.18 (VRRP)
Gateway load balancing protocol - cisco proprietary
Global config (vlan - vtp mode - and vtp domain) and VLAN DB mode commands. Global config is preferred because VLAN DB mode commands are legacy

12. What does the dst-mac option do when checking ARP replies
Checks the destination MAC in the header against the target MAC in the ARP reply
From the DHCP snooping database or from static entries
63 kbps
Arp for local subnet - if on different subnet - will arp for dgw

13. What does the minimum keyword do in HSRP?
Yes
On all switches in network to enable RLQ request and reply
Stateful switchover - redundant sup is fully booted and init'd. Both start and run config are synched as is L2 information - and switchinterfaces.
Forces the router to wait for a period of time before attempting overthrow

14. How can you load-balance with HSRP?
Switching Database Manager - configures and prunes TCAM partitions
All fiber-optic links between switches (must be enabled on both ends)
Create 2 hsrp groups - each with the active router being different switches - then have clients point to each
On (all ports channel) - auto (channels when asked) - and desirable(actively asks to form a channel)

15. What are the 4 steps to extend QoS trust?
Routers at the distribution layer become the bottlenecks or broadcast or multicast traffic slows the switches in the switch block
Both ends should be on because on modes doesn't send PAgP or LACP packets
1- enable qos - 2-define qos parameters to be trusted - 3-make trust conditional - 4-instruct IP phone how to extnd boundary
Notifies upstream neighbors by sending multicasts on behalf of hosts at the interval of the max update rate parameter.

16. How doed backbonefast work?
All nondesignated ports - but ok for all ports
By short-circuiting the max age timer
They disguise the origin of an attack
A group of wireless devices that share a common SSID

17. What is layer 3 roaming?
When a client roams between Aps in different subnets
Half because transmitting and receiving stations use the same frequency
Can hear only BDPUs
Will trunk if asked

18. What is route caching?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

19. What types of authentication does HSRP allow?
2
An instance of RSTP running for each VLAN on the switch. Changing from PVST to RPVST+ is disruptive
Plain text or md5
If the client maintains the same IP address as it roams between Aps. All must have same VLAN - SSID - and subnet

20. How is root port decided upon?
Route once - switch many
Lowest cumulative cost to root
1-enable AAA on switch - 2-define RADIUS servers - 3-define authentication method - 4-enable 802.1x on switch - 5-conf. 802.1x ports - 6-allow hosts
Tracks of BDPUs on nondesignated ports. When those BDPUs stop coming - the port is put into loop-inconsistent state and blocks

21. What are the 6 HSRP states?
Auto mode
Disabled - init - listen - speak - standby - active
Effectively stops STP on filtered ports
By an ARP access list that defines the permitted bindings

22. What is the STP learning state?
After forwarding delay - port can learn new MAC addresses
Packets are discarded due to an ACL or policy action
3 seconds. Holdtime =3 hellos + 1
All fiber-optic links between switches (must be enabled on both ends)

23. What can cause a wireless client to switch between Aps?
Configure non-silent submode
1-client sends DHCP discover as broadcast - 2-DHCP server sends DHCP offer - client sends DHCP Request - DHCP server sends DHCP ack
Missed beacons - dropped packets (max retry) - weak signal (data rate switches down) - an AP periodicallytries to find a stronger signal
300 sec

24. What must the other end be set to if PAgP desirable or LACP active mode is selected?
Either desirable or auto mode
Lowest cumulative cost to root
Multicasts to 224.0.0.18 (VRRP)
Frames are forwarded

25. What scope is 802.1x enabled?
Flash override (class 4)
Globally
Gateway load balancing protocol - cisco proprietary
A client can roam to any WLC as long as it stays in a mobility group

26. Which ports should you consider trusted for DAI?
Route processor redundancy - redundant sup is partially booted and initialized and must reload module in the switch and init all sup functions
Half because transmitting and receiving stations use the same frequency
Those that connect to other switches
Once the CCM gives them the parameters - they use RTP

27. static vlans offer ____ based membership
Gets assistance from other NSF-aware neighbors. NSF features need to be built into the routing protocols on router needing and providing assistance
Port
Via an 802.1Q trunk or a single VLAN access port
Discarding - learning - forwarding

28. How much overlap should WAPs have?
All L2 connectivity should be contained within the access layer.
10-15%
No
Best effort delivery - integrated services model - and differentiated services model

29. How do you implement MST?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

30. How does NSF work?
Hosts within a secondary can communicate with each other and with the primary - but not with another secondary vlan
FE - GE - and aggregated FE/GE Etherchannels
Once the CCM gives them the parameters - they use RTP
Gets assistance from other NSF-aware neighbors. NSF features need to be built into the routing protocols on router needing and providing assistance

31. How does UDLD work?
2 seconds
The campus network's backbone
Sends special layer 2 UDLD frames and expects an echo. Both ends must be configured for UDLD
The L3 forwarding engine can't forward the packet in hardware because there is no L2 next-hop address - so the packet is sent to the L3 engine to generate the ARP response

32. How is a QoS trust bondary configured?
Every switch and router in a network must be configured with appropriate QoS features and policies
2 strand MMF with MT-RJ or SC connectors
1-(opt) set system priority - 2-select interface(s) - 3-assign the protocol - 4-set the mode - 5-(opt) set the port priority
Transmits keystrokes from phone and commands from CCM

33. How is an RSTP edge port configured
1-lowest root bridge ID - 2-lowest root path cost - 3-lowest bridgeID - 4-lowest port ID
The number of times the entry has been updated since the table was generated
With portfast
Turn on port security

34. How does ISL do trunking?
Connects with SONET or SDH
By encapsulating each frame in a header and trailer
When a client roams between Aps in different subnets
Turn on port security

35. What is the STP Max Age timer?
That they aren't using the same frequencies.
Show standby
The time interval that a switch stores a DBPU before discarding it. Default 20 seconds
Some unused bits are used to allow a port to identify its role and state. Also the BDPUs state that they are V2 BDPUs

36. Can loop guard and udld be used together?
Yes
224.0.0.2 (all routers)
Port with redundant - but less deisrable connection to a segment. Possibly root candidate
Up to 54Mbps - not cross-compatible - 12 to 23 clean channels - 5.8 Ghz

37. What address does HSRP send hello packets to?
0007.b4xx.xxyy where xx.xx is six 0 bits followed by a 10-bit GLBP group numberr. Yyyy is the virtual forwarder number
Dynamic arp inspection
If the switch or the powered device doesn't suport power class discovery
224.0.0.2 (all routers)

38. How does adding option-82 to DHCP snooping affect things?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

39. When should CDP be enabled?
Yes
Only for trusted Cisco gear - especially phones
Sends a test tone on the transmit pair. If a device is detected - CDP is used to narrow down the power class.
Use sh interface on the interface and look for error counts > 10

40. 802.11g
Compatible with 802.11b - up to 54Mbps in 12 data rates - 3 channels - 2.4Ghz
1-LAP gets a DHCP address - 2-LAP learns IP of available WLC - 3-LAP sends a join request to WLC and receives join reply - 4-WLC sends code image - if necessary - 5-Tunnels are created
Data and voice over native vlan no QOS and no 802.1p trunk
All fiber-optic links between switches (must be enabled on both ends)

41. What does MSTP consist of?
Any ports associated with an isolated vlan can reach the primary - but not any other secondary. Hosts withn an isolated vlan can't reach each other
Used when ACLs specify port ranges...used by TCAM
Regions and instances
One that can be detected on a switch interface (ie. Up/down)

42. What is the port priority range?
Global config (vlan - vtp mode - and vtp domain) and VLAN DB mode commands. Global config is preferred because VLAN DB mode commands are legacy
All ports where root isn't expected
0-255 (lower is better)
Used when there are 1 or more VLANs mapped to a single STP instance

43. If a wireless station needs to transmit and another device is transmitting - what happens?
All ARP packets that arrive on untrusted ports are inspected.
The station can transmit immediately and wait for an ack
The station must wait until the frame in progress has completed - then wait a random amount of time before transmitting
2 seconds

44. What is the STP forwarding state?
CEF is distributed completely among multiple L3 forwarding engines.
A point to point port type
Every hello interval regardless of whether BDPUs are received from root - allowing any switch to take an active role maintaining the topology
After another forwarding delay - the port can send and receive data frames - collect MAC addresses - and send and receove BDPUs

45. How is UDLD configured?
Configure and enable DHCP snooping
Per-port or globally for all fiber-optic ports. Can be enabled globally - but will only affect fiber ports
Differentiated services code point
300 sec by default

46. what must be done on an SVI before it is activated?
No shut
Port stays up - but packets from violating MACs are dropped. Switch logs violating packets
First configure a L3 interface in same VLAN as clients - then use the ip helper-address command to ID the DHCP server
The number of times the CEF table has bee flushed and regenerated as a whole

47. How does IPT behave when the voice VLAN is in untagged mode?
A point to point port type but the neighboring device runs traditional 802.1D STP
Prevents the dhcp binding DB from being checked.
Per-port or globally for all fiber-optic ports. Can be enabled globally - but will only affect fiber ports
Data and voice over native vlan - no QOS but still uses 802.1p trunk

48. What is a BSS?
Using a single WAP to centralize access and control over a group of wireless devices.
One that can be detected on a switch interface (ie. Up/down)
L2
Automatically by duplex mode in use. Full duplex are point ot point. Half duplex ports use traditional 802.1D convergence is used.

49. can root guard and udld be used together?
Controls where candidate root bridges can be connected and found on a network
Used when there are 1 or more VLANs mapped to a single STP instance
Yes
A key string of up to 8 characters is sent. Default is cisco.

50. How does HSRP election work?
1-65535 (def 32768) lower priority - higher probability
Based on priority (0-255). Default is 100. Highest IP is tie breaker
Feature Manager - after the ACL is created - the FM compiles the ACEs into the table
Access