Test your basic knowledge |

CCNP Switch Deck

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. What is the traditional MLS view of switching?
Value - mask - and result (VMR) combinations
Group (0-255) - priority (1-254 254 is highest - 100 default)
It's a router that maintains routes (static or dynamic) - and populates the FIB
Route once - switch many

2. How is an RSTP edge port configured
After forwarding delay - port can learn new MAC addresses
Causes switch to actively determine whether alternative paths exist to root bridge in case ther eis an indirect failure
With portfast
The topology is pre-populated by downloading the topology DB into the FIB and dynamically updated. Called Cisco Express Forwarding

3. What are 2 ways to configure VLAN and VTP information?
Global config (vlan - vtp mode - and vtp domain) and VLAN DB mode commands. Global config is preferred because VLAN DB mode commands are legacy
900 MHz - 2.4Ghz - and 5-6GHz
Automatically using DTP and CDP
Data goes over native vlan - voice goes over specified VLAN - voice QOS is 802.1p

4. What are spoofed addresses?
Stateful switchover - redundant sup is fully booted and init'd. Both start and run config are synched as is L2 information - and switchinterfaces.
Port is forced to never authorize any connected client
Use sh interface on the interface and look for error counts > 10
They disguise the origin of an attack

5. Does GLBP allow preemption?
Yes
Host Standby Router protocol. Cisco proprietary. Switch is either active - standby - or listen
Automatically negotiates a common trunk mode between switches
Port stays up - packets from violating MACs dropped - no logging

6. When DHCP snooping is turned on - by default - it considers all ports ______
Untrusted
By default weight is 100. Can be made dynamic per interface
Automatically negotiates a common trunk mode between switches
The number of times the entry has been updated since the table was generated

7. What is the PVLAN promiscuous mode?
They disguise the origin of an attack
1/2 and 3/6
Connects to a router - firewall - or gateway. Can communicate with anything else connected to the primary or any secondary. Ignores pvlan config
134 bits

8. What routing protocols support NSF?
Data goes over native vlan - voice goes over VLAN0 - voice QOS is 802.1p
BGP - EIGRP - OSPF - and IS-IS.
Tracks of BDPUs on nondesignated ports. When those BDPUs stop coming - the port is put into loop-inconsistent state and blocks
The standby becomes active and stays active by default. Preemption can be configured

9. How long are TCAM masks?
The master router can share the VIP
Plain text or md5
134 bits
16 bits (8b port priority - 8b port number)

10. What is a QoS trust boundary?
1/2 and 3/6
All user ports that have portfast enabled
Makes use of the DHCP snooping database and static ip source binding entries. If enabled - switch will test addresses
The point at which a switch decides to trust incoming Qos. Usually at boundary with ISP

11. What is jitter?
It is enabled by default on all CEF capable switches
A path is pre-arranged for priority along the complete path from source to destination using the RSVP protocol.
Variation in delay
Makes use of the DHCP snooping database and static ip source binding entries. If enabled - switch will test addresses

12. RSTP alternate port
Port with alternative path to root less desirable than root
802.1w
The standby becomes active and stays active by default. Preemption can be configured
Nonstop forwarding is an interactive method focusing on rebuilding the RIB after SUP switchover

13. What is a punt adjacency?
The configureable UDLD interval must be less than max age plus two intervals of forward delay
Once the CCM gives them the parameters - they use RTP
Packets must be sent to the L3 engine for further processing
Source IP - dest IP - combination of source and dest IP - source and dest MAC - or TCP/UDP port numbers

14. What are TCAM entries composed of?
A MAC is seen on a different port
Root - designated - alternate - and backup
Value - mask - and result (VMR) combinations
Switches make an effort to move packets as quickly as possible

15. In a converged fabric - which switch(es) send config BDPUs?
Root
Matching SSID - compatible data rate - authentication credentials
900 MHz - 2.4Ghz - and 5-6GHz
63 kbps

16. 802.11b
All fiber-optic links between switches (must be enabled on both ends)
Manages addition - deletion and renaming VLANs across the network
1 -2 -5.5 and 11 Mbps - Channels 1/6/11 - 2.4Ghz
The number of times the entry has been updated since the table was generated

17. What is 802.1x force-authorized?
Weak key rotation
The port is forced to always authorize any connected client with no authentication necessary (default)
1-name the chain - 2-establish a key number - 3-create the key string - 4-apply the chain to the string
Hosts associated with a secondary VLAN can communicate with ports on the primary but not with another secondary VLAN

18. For QoS - switch uplinks should always be considered as ____ _____?
Trusted ports
All user ports that have portfast enabled
A point to point port type but the neighboring device runs traditional 802.1D STP
Up to 54Mbps - not cross-compatible - 12 to 23 clean channels - 5.8 Ghz

19. How many tunnels exist between the LAP and WLC?
Effectively stops STP on filtered ports
2 - one for control messages and one for data
Sets the switchport mode to access - enables portfast - and turns off channel grouping for the port
Cisco ILP and 802.3af

20. How are GLBP timers used?
Discarding - learning - forwarding
Each peer sends and receives hellos. Def hello is 3 sec - def hold is 10 sec
The master router can share the VIP
Another router must have a higher HSRP priority and have preemt set up

21. Can ARP replies be checked
Each frame transmits its expected duration time
Allows devices to interoperate with PVST and CST. Can use both dot1q and ISL
Yes
Receives the first packet of a traffic flow and routes it

22. What is an IST instance?
It is enabled by default on all CEF capable switches
Sends special layer 2 UDLD frames and expects an echo. Both ends must be configured for UDLD
Gateway load balancing protocol - cisco proprietary
Within a single MST region - an IST instances runs to work out a loop free topology between links where CST meets the region boundary and all switches in the region. It runs at the boundary.

23. What is an untrusted port under dhcp snooping?
For hosts that doesn't understand routing - the DGW is configured to reply with its own mac
Real-time Transport Protocol
Up to 54Mbps - not cross-compatible - 12 to 23 clean channels - 5.8 Ghz
Any dhcp reply coming from an untrusted port is discarded and the offending port is put in errdisable

24. How does HSRP plain text authentication work?
A key string of up to 8 characters is sent. Default is cisco.
To a VLAN and not to a VLAN interface (SVI)
On all switches in network to enable RLQ request and reply
Forces the router to wait for a period of time before attempting overthrow

25. What does VTP do?
By using a trunk link
19
Manages addition - deletion and renaming VLANs across the network
Used when there are 1 or more VLANs mapped to a single STP instance

26. what do multilayer switches do?
Both layer 2 switching and IVR
2 seconds (def)
Option 43
7 switches from root bridge

27. How does a DAI enabled switch gather trusted ARP info?
Determines when the AVG will stop using the old VMAC in ARP replies
An ac adaptor that plugs into a wall outlet.
From the DHCP snooping database or from static entries
Collision domain

28. RSTP BPDU structure
Some unused bits are used to allow a port to identify its role and state. Also the BDPUs state that they are V2 BDPUs
Feature Manager - after the ACL is created - the FM compiles the ACEs into the table
The RP listens to a flow's 1st packet for the dest. The SE listens to the packet and dest and puts a shortcut in the MSL cache. Netflow switching - route once - switch many
No because they only participate if asked

29. unknown unicast flooding
As a VLAN access map
Hashing algorithm
Real-time functions such as beacons and probes - encryption and interactions with the client at L2
MAC addresses are learned from the source MAC of incoming frames. If the destination address is unknown - the frame is flooded out all except the receiving port.

30. When looking at the sh spanning tree output - What does P2P denote?
A point to point port type
Switch(config-if)# standby xx where x= group number
During the time that the FIB entry is in CEF glean waiting for ARP entries - subsequent packet to that host are dropped to keep input queues from filling
Almost eliminates listening and learning states for single hosts on an access link

31. What does BDPU filtering do?
19
FE and GE
Effectively stops STP on filtered ports
No shut

32. How does HSRP port tracking work?

33. Of what significance are private VLANs
Local only
The port is forced to always authorize any connected client with no authentication necessary (default)
Disabled - blocking - listening - learning - forwarding
Because each frame is checked

34. What is a cell?

35. Whan is a 10GE WAN PHY?
0007.b4xx.xxyy where xx.xx is six 0 bits followed by a 10-bit GLBP group numberr. Yyyy is the virtual forwarder number
Isl - dot1q - negotiate (default)
When a client roams between Aps in different subnets
Connects with SONET or SDH

36. What are the 3 unlicensed frequencies?
134 bits - consisting of source and destination addresses and protocol information from the packet or frame
Interim solution - uses same hardware as WEP - but uses TKIP encryption
Manually
900 MHz - 2.4Ghz - and 5-6GHz

37. What is the STP learning state?
Checks the sender's ip in all arp requests and checks the sender's IP against target IP in all replies
5 (0-4 with 4 being the highest)
After forwarding delay - port can learn new MAC addresses
1 to 64

38. What does the minimum keyword do in HSRP?
Forces the router to wait for a period of time before attempting overthrow
A TCN BDPU is sent out of the switch's root port. The switch will continue sending TCN's every hello interval until ack'd by upstream neighbor. The root bridge will send a Config BDPU to all switches
Lowest cumulative cost to root
Switchpotrt nonegotiate

39. How are frames forwarded across a specific link?
Hashing algorithm
By brining up a tunnel between them to carry 802.11 related messages and client data.
Receives the first packet of a traffic flow and routes it
Used when there are 1 or more VLANs mapped to a single STP instance

40. How does L3 QOS classification happen?
They shorten their bridge table aging times from default (300sec) to the fowarding delay (15 sec)
Prevents the dhcp binding DB from being checked.
The TOS field in the header is used. 2 methods 3 bits or 6 bits
Multicasts to 224.0.0.18 (VRRP)

41. How do you show HSRP status
Show standby
The topology is pre-populated by downloading the topology DB into the FIB and dynamically updated. Called Cisco Express Forwarding
Port with alternative path to root less desirable than root
Usually QoS from VOIP but not PC dataa

42. How many potential links can LACP define?
16 - of which up to 8 are active. The others are in standby
No
MAC addresses are learned from the source MAC of incoming frames. If the destination address is unknown - the frame is flooded out all except the receiving port.
Route processor redundancy - redundant sup is partially booted and initialized and must reload module in the switch and init all sup functions

43. What are the 5 STP port roles?
Root - designated - blocking - alternate - forwarding (host)
When the size of a cell is intentionally reduced
Routers at the distribution layer become the bottlenecks or broadcast or multicast traffic slows the switches in the switch block
Full duplex

44. Where is UDLD enabled?
LACP port priority
By an ARP access list that defines the permitted bindings
All fiber-optic links between switches (must be enabled on both ends)
Virtual Router Redundancy Protocol - pretty much the same as HSRP

45. What is the format of the VRRP virtual MAC?
Limits the number if dhcp requests on a port
On by default
The TOS field in the header is used. 2 methods 3 bits or 6 bits
0000.5e00.01xx

46. How do you prevent VLAN hopping?
Switchpotrt nonegotiate
Set the native VLAN of a trunk to a bogus or unused VLAN ID then prune the native VLAN off both ends of the trunk
If a unidirectional link is detected - the port continues normally - but the port is marked as undetermined and a syslog is generated
L2

47. How many users should be within a switch block?
By configuring every switch port to have an expected and controlled behavior
MST attributes must be manually entereed on each switch in the region. They don' t propagate like VTP.
Roughly 2000
The port is forced to always authorize any connected client with no authentication necessary (default)

48. What is a direct topology change?
802.1w
One that can be detected on a switch interface (ie. Up/down)
Packets must be sent to the L3 engine for further processing
On ports where you never expect to find a root bridge for a VLAN

49. What is best effort delivery QOS?
The master router can share the VIP
Any ports associated with an isolated vlan can reach the primary - but not any other secondary. Hosts withn an isolated vlan can't reach each other
Switches make an effort to move packets as quickly as possible
Enables switches at the end of the spanning tree branches to have a functioning root port while keeping 1 or more redundant potential ports in blocking mode. When the main fails - the other comes up.

50. What can cause a wireless client to switch between Aps?
1-enable AAA on switch - 2-define RADIUS servers - 3-define authentication method - 4-enable 802.1x on switch - 5-conf. 802.1x ports - 6-allow hosts
Missed beacons - dropped packets (max retry) - weak signal (data rate switches down) - an AP periodicallytries to find a stronger signal
Lowest cumulative cost to root
By name - config revision - and instance to vlan mapping table