CCST-NETWORKING Online Practice Questions and Answers

Correct Answer: C

OSI model During the data encapsulation process, theData Link layerof the OSI model is responsible for adding a header that contains MAC addressing information and a trailer used for error checking.The header typically includes the source and destination MAC addresses, while the trailer contains a Frame Check Sequence (FCS) which is used for error detection1. The Data Link layer ensures that messages are delivered to the proper device on a LAN using hardware addresses and translates messages from the Network layer into bits for the Physical layer to transmit. It also controls how data is placed onto the medium and is received from the medium through the physical hardware. References: The OSI Model The 7 Layers of Networking Explained in Plain English OSI Model - Network Direction Which layer adds both header and trailer to the data? What is OSI Model | 7 Layers Explained - GeeksforGeeks

Correct Answer: AC

-Statement A: "The trace successfully reached the www.cisco.com server." This is true as indicated by the "Trace complete" message at the end, showing that the trace has reached its destination. -Statement C: "The IPv6 address associated

with the www.cisco.com server is 2600:1408:c400:38d::b33." This is true because the final hop in the trace, which is the destination, has this IPv6 address.

-Statement B: "The trace failed after the fourth hop." This is incorrect as the trace continues beyond the fourth hop, despite some intermediate timeouts. -Statement D: "The routers at hops 5 and 6 are offline." This is not necessarily true. The

routers might be configured to not respond to traceroute requests.

-Statement E: "The device sending the trace has IPv6 address 2600:1408:c400:38d::b33."

This is incorrect; this address belongs to the destination server, not the sender.

References:

-Understanding Traceroute: Traceroute Guide

Correct Answer: C

When devices within a VLAN are unable to reach addresses outside their VLAN, it typically indicates that they do not have a configured path to external networks. The engineer should configure a default gateway for VLAN2. The default gateway is the IP address of the router's interface that is connected to the VLAN, which will route traffic from the VLAN to other networks12.

References := -Understanding and Configuring VLAN Routing and Bridging on a Router Using the IRB Feature -VLAN 2 not able to ping gateway - Cisco Community ========================= -VLANs: Virtual Local Area Networks (VLANs) logically segment network traffic to improve security and performance. Devices within the same VLAN can communicate directly. -Default Gateway: For devices in VLAN2 to communicate with devices outside their VLAN, they need a default gateway configured. The default gateway is typically a router or Layer 3 switch that routes traffic between different VLANs and subnets. -Additional VLAN: Not needed in this scenario as the issue is related to routing traffic outside VLAN2, not creating another VLAN. -Default Route: While a default route on the router may be necessary, the primary issue for devices within VLAN2 is to have a configured default gateway. -Static Route: This is used on routers to manually specify routes to specific networks but does not address the need for a default gateway on the client devices.

References: -Cisco VLAN Configuration Guide: Cisco VLAN Configuration -Understanding and Configuring VLANs: VLANs Guide

Correct Answer: B

The tracert command is used to determine the route taken by packets across an IP network. When a user reports that an external web page is not loading, while other resources are accessible, it suggests there might be an issue at a certain

point in the network path to the specific web page. The tracert command helps to diagnose where the breakdown occurs by displaying a list of routers that the packets pass through on their way to the destination. It can identify the network

segment where the packets stop progressing,

which is valuable for pinpointing where the connectivity issue lies. References := Cisco

CCST Networking Certification FAQs ?CISCONET Training Solutions, Command Prompt (CMD): 10 network-related commands you should know, Network Troubleshooting Commands Guide: Windows, Macand; Linux - Comparitech, How to

Use the Traceroute and Ping Commands to Troubleshoot Network, Network Troubleshooting Techniques: Ping, Traceroute, PathPing. -tracert Command: This command is used to determine the path packets take to reach a destination. It lists

all the hops (routers) along the way and can help identify where the delay or failure occurs. -ping -t: This command sends continuous ping requests and is useful for determining if a host is reachable but does not provide path information. ipconfig /all: This command displays all current TCP/IP network configuration values and can be used to verify network settings but not to trace a network path.

-nslookup: This command queries the DNS to obtain domain name or IP address mapping,

useful for DNS issues but not for tracing network paths.

References:

-Microsoft tracert Command: tracert Command Guide

-Troubleshooting Network Issues with tracert: Network Troubleshooting Guide

Correct Answer: C

In the provided image of the Cisco PoE switch, the ports identified with number 6 are the standard RJ-45 Ethernet ports typically found on switches that provide both data connectivity and Power over Ethernet (PoE). PoE ports are designed to

supply power to devices such as IP phones, wireless access points, and other PoE-enabled devices directly through the Ethernet cable.

Ports:

2: Console port (for management and configuration)

3 and 4: Specific function ports (often for management)

6: RJ-45 Ethernet ports (capable of providing PoE)

7: SFP ports (for fiber connections, typically do not provide PoE) Thus, the correct answer is C. Ports identified with number 6.

References:

cisco Catalyst 2960-L Series Switches Data Sheet Cisco PoE Overview

Correct Answer: AC

Statement A: "A detailed description of the fault." This is essential for support staff to understand the nature of the problem and begin troubleshooting effectively. Statement C: "A description of the conditions when the fault occurs." This helps

in reproducing the issue and identifying patterns that might indicate the cause of the fault.

Statement B: "Details about the computers connected to the network." While useful, this is not as immediately critical as understanding the fault itself and the conditions under which it occurs.

Statement D: "The actions taken to resolve the fault." This is important but typically follows the initial report.

Statement E: "The description of the top-down fault-finding procedure." This is more of a troubleshooting methodology than information typically included in an initial support ticket.

References:

Best Practices for Submitting Support Tickets: Support Ticket Guidelines

Correct Answer:

The correct matching of the MFA factors to their examples is as follows:

Entering a one-time security code sent to your device after logging in: Possession Holding your phone to your face to be recognized: Inherence Specifying your user name and password to log on to a service: Knowledge Here's why each

factor matches the example:

Possession: This factor is something the user has, like a mobile device. A one- time security code sent to this device falls under this category. Inherence: This factor is something the user is, such as a biometric characteristic. Facial

recognition using a phone is an example of this factor. Knowledge: This factor is something the user knows, like a password or PIN. Multi-Factor Authentication (MFA) enhances security by requiring two or more of these factors to verify a

user's identity before granting access.

Entering a one-time security code sent to your device after logging in. Holding your phone to your face to be recognized. Specifying your username and password to log on to a service.

Possession Factor: This involves something the user has in their possession. Receiving a one-time security code on a device (e.g., phone) is an example of this. Inference Factor (Inherence/Biometric): This involves something inherent to the

user, such as biometric verification (e.g., facial recognition or fingerprint scanning). Knowledge Factor: This involves something the user knows, such as login credentials (username and password).

References:

Multi-Factor Authentication (MFA) Explained: MFA Guide Understanding Authentication Factors: Authentication Factors

Correct Answer:

The correct matching of the security options to their characteristics is as follows:

WPA2-Enterprise: Uses a RADIUS server for authentication WEP: Uses a minimum of 40 bits for encryption

WPA2-Personal: Uses AES and a pre-shared key for authentication Here's why each security option matches the characteristic:

WPA2-Enterpriseuses a RADIUS server for authentication, which provides centralized Authentication, Authorization, and Accounting (AAA) management for users who connect and use a network service.

WEP (Wired Equivalent Privacy)is an outdated security protocol that uses a minimum of 40 bits for encryption (and up to 104 bits), which is relatively weak by today's standards.

WPA2-Personal(Wi-Fi Protected Access 2 - Personal) uses the Advanced Encryption Standard (AES) for encryption and a pre-shared key (PSK) for authentication, which is shared among users to access the network. These security options

are essential for protecting wireless networks from unauthorized access and ensuring data privacy.

Correct Answer:

A firewall can direct all web traffic to a specific IP address. A firewall can block traffic to specific ports on internal computers. A firewall can prevent specific apps from running on a computer.

Directing Web Traffic: Firewalls can manage traffic redirection using NAT and port forwarding rules to route web traffic to designated servers or devices within the network.

Blocking Specific Ports: Firewalls can enforce security policies by blocking or allowing traffic based on port numbers, ensuring that only permitted traffic reaches internal systems.

Application Control: While firewalls manage network traffic, preventing applications from running typically requires software specifically designed for endpoint protection and application management.

References:

Understanding Firewalls: Firewall Capabilities

Network Security Best Practices: Network Security Guide

Correct Answer:

To list the IPv4 addresses associated with the host name www.companypro.net, you should use the following command:

nslookup www.companypro.net

This command will query the DNS servers to find the IP address associated with the hostname provided.If you want to ensure that it returns the IPv4 address, you can specify the-type=Aoption, which stands for Address records that hold IPv4

addresses1. However, thenslookupcommand by default should return the IPv4 address if available. To list the IPv4 addresses associated with the host namewww.companypro.net, you should use thenslookupcommand.

Command: nslookup

Target:www.companypro.net

So, the completed command is:

nslookupwww.companypro.net

nslookup: This command is used to query the Domain Name System (DNS) to obtain domain name or IP address mapping or for any other specific DNS record. www.companypro.net: This is the domain name you want to query to obtain its

associated IP addresses.

References:

Using nslookup: nslookup Command Guide