CCNA dfsfsfsfasdads
CCNA dfsfsfsfasdads
Premium Members: You can practice these questions first via these links:
+ First 15 Questions
+ Questions 16 to end
Question 1
What are two improvements provided by automation for network management in an SDN environment? (Choose
two)
Answer: A E
Question 2
A network administrator must to configure SSH for remote access to router R1. The requirement is to use a
public and private key pair to encrypt management traffic to and from the connecting client. Which
configuration, when applied, meets the requirements?
A.
R1#enable
R1#configure terminal
R1(config)#ip domain-name cisco.com
R1(config)#crypto key generate ec keysize 1024
B.
R1#enable
R1#configure terminal
R1(config)#ip domain-name cisco.com
R1(config)#crypto key generate rsa modulus 1024
C.
R1#enable
R1#configure terminal
https://www.9tut.com/ccnav7-2020-new-questions-part-6 1/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
D.
R1#enable
R1#configure terminal
R1(config)#ip domain-name cisco.com
R1(config)#crypto key encrypt rsa name myKey
A. Option A
B. Option B
C. Option C
D. Option D
Answer: B
Explanation
Both RSA, elliptic curve cryptography (ECC) are asymmetrical encryption so it satisfies the requirement of this
question (to use a public and private key pair). Asymmetrical encryption is different from symmetrical
encryption in that to send data in a single direction, two associated keys are needed. One of these keys is known
as the private key, while the other is called the public key.
To generate an Elliptic Curve (EC) key pair, use the crypto key generate ec keysize command in global
configuration mode.
crypto key generate ec keysize {256 | 384} [exportable] [label key-label]
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/a1/sec-a1-cr-book/sec-cr-c4.html
-> EC only supports 256 or 384 bit key size -> Answer A and answer C are not correct.
The command “crypto key generate rsa modulus 1024” generate a 1024 bit RSA key pair. Although 1024-bit or
smaller key pair should not be used but it is the only correct answer in this question.
Note: The command “crypto key encrypt rsa name …” is used to encrypt the RSA key.
Question 3
An engineer observes high usage on the 2.4GHz channels and lower usage on the 5GHz channels. What must be
configured to allow clients to preferentially use 5GHz access points?
Answer: A
Explanation
Band selection works by regulating probe responses to clients and it can be enabled on a per-WLAN basis. It
makes 5-GHz channels more attractive to clients by delaying probe responses to clients on 2.4-GHz channels.
https://www.9tut.com/ccnav7-2020-new-questions-part-6 2/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-3/config-
guide/b_cg83/b_cg83_chapter_011100.html
Question 4
When a WLAN with WPA2 PSK is configured in the Wireless LAN Controller GUI which format is supported?
A. Unicode
B. base64
C. ASCII
D. decimal
Answer: C
Explanation
When configuring a WLAN with WPA2 Preshared Key (PSK), we can choose the encryption key format as
either ASCII or HEX.
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/multi-
preshared-key.pdf
Question 5
Answer: C
Question 6
What does an SDN controller use as a communication protocol to relay forwarding changes to a southbound
API?
A. XML
B. Java
C. REST
D. OpenFlow
Answer: D
Explanation
OpenFlow and NETCONF are Southbound APIs used for most SDN implementations.
https://www.9tut.com/ccnav7-2020-new-questions-part-6 3/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
Note: SDN northbound APIs are usually RESTful APIs used to communicate between the SDN Controller and
the services and applications running over the network.
Question 7
A network engineer must configure the router R1 GigabitEthernet1/1 interface to connect to the router R2
GigabitEthernet1/1 interface. For the configuration to be applied the engineer must compress the address
2001:0db8:0000:0000:0500:000a:400F:583B. Which command must be issued on the interface?
Answer: A
Question 8
An administrator must secure the WLC from receiving spoofed association requests. Which steps must be taken
to configure the WLC to restrict the requests and force the user to wait 10 ms to retry an association request?
A. Enable Security Association Teardown Protection and set the SA Query timeout to 10
B. Enable the Protected Management Frame service and set the Comeback timer to 10
C. Enable 802.1x Layer 2 security and set the Comeback timer to 10
D. Enable MAC filtering and set the SA Query timeout to 10
Answer: B
Explanation
Comeback timer specifies the time which an associated client must wait before the association can be tried again
when first denied with a status code 30.
https://www.9tut.com/ccnav7-2020-new-questions-part-6 4/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
SA query timeout specifies the amount of time the WLC waits for a response from the client for the query
process.
Reference: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/212576-configure-
802-11w-management-frame-prote.html
Note: We can use either 802.1x or PSK as the authentication key management method so answer C is not
correct.
Question 9
Answer: D
Question 10
Which 802.11 management frame type is sent when a client roams between access points on the same SSID?
A. Authentication Request
B. Probe Request
C. Reassociation Request
D. Association Request
https://www.9tut.com/ccnav7-2020-new-questions-part-6 5/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
Answer: C
Explanation
Association request frame – (0x00) Sent from a wireless client, it enables the AP to allocate resources and
synchronize. The frame carries information about the wireless connection including supported data rates and
SSID of the network to the wireless client that wants to associate. If the request is accepted, the AP reserves
memory and establishes an association ID for the device.
Association response frame – (0x01) Sent from an AP to a wireless client containing the acceptance or rejection
to an association request. If it is an acceptance, the frame contains information, such as an association ID and
supported data rates.
Reassociation request frame – (0x02) A device sends a reassociation request when it drops from range of the
currently associated AP and finds another AP with a stronger signal. The new AP coordinates the forwarding of
any information that may still be contained in the buffer of the previous AP.
Reassociation response frame – (0x03) Sent from an AP containing the acceptance or rejection to a device
reassociation request frame. The frame includes information required for association, such as the association ID
and supported data rates.
Probe request frame – (0x04) Sent from a wireless client when it requires information from another wireless
client.
Authentication frame – (0x0B) The sending device sends an authentication frame to the AP containing its
identity.
Reference: https://www.ii.pwr.edu.pl/~kano/course/module8/8.2.1.4/8.2.1.4.html
Question 11
Answer: A
Explanation
At present, there are four kinds of c: OM1, OM2, OM3 and OM4. The letters “OM” stand for optical multi-
mode. OM3 and OM4 fibers will support upcoming 40 and 100 Gb/s speeds. OM2, OM3, OM4 and OM5 have
50 micron core diameter.
Question 12
Which protocol does an access point use to draw power from a connected switch?
Answer: B
Question 13
A. 0
B. 2
C. 4
D. 6
Answer: D
The highest level is level 0 (emergencies). The lowest level is level 7. By default, the router will send
informational messages (level 6). That means it will send all the syslog messages from level 0 to 6.
Question 14
Which command must be executed for Gi1/1 on SW1 to become a trunk port if Gi1/1 on SW2 is configured in
desirable or trunk mode?
https://www.9tut.com/ccnav7-2020-new-questions-part-6 7/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
Answer: D
Explanation
According to the trunking condition table below, we can use either (dynamic) “auto” or (dynamic) “desirable”
mode or even “trunk” mode so in fact this question has three correct answers.
Question 15
An engineer must configure GigabitEthernet1/1 to accommodate voice and data traffic. Which configuration
accomplishes this task?
Option A Option B
interface gigabitethernet1/1 interface gigabitethernet1/1
switchport mode access switchport mode access
switchport access vlan 300 switchport access vlan 400
switchport voice vlan 400 switchport voice vlan 300
Option C Option D
interface gigabitethernet1/1 interface gigabitethernet1/1
switchport mode trunk switchport mode trunk
https://www.9tut.com/ccnav7-2020-new-questions-part-6 8/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
A. Option A
B. Option B
C. Option C
D. Option D
Answer: A
Question 16
A. Virtual machines are responsible for managing and allocating host hardware resources
B. Virtual machines are operating system instances that are decoupled from server hardware
C. Virtual machines are the physical hardware that support a virtual environment
D. In a virtual machine environment, physical servers must run one operating system at a time
Answer: B
Explanation
Hypervisors are responsible for managing and allocating host hardware resources, not virtual machines ->
Answer A is not correct.
Virtual machines are not the physical hardware but virtual instances -> Answer C is not correct.
In a virtual machine environment, a Type 1 physical server usually run a hypervisor (not operating system) to
create multiple virtual machines -> Answer D is not correct.
Question 17
https://www.9tut.com/ccnav7-2020-new-questions-part-6 9/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
Answer: A
Question 18
Shortly after SiteA was connected to SiteB over a new single-mode fiber path, users at SiteA report intermittent
connectivity issues with applications hosted at SiteB. What is the cause of the intermittent connectivity issue?
Answer: A
Explanation
The txload and rxload on both sites are 1/255 so the interfaces are not busy in transmitting and receiving traffic.
But the reliability on SiteA is only 166/255 which indicates input and output errors increase. Reliability is
calculated by this formula: reliability = number of packets / number of total frames.
Question 19
https://www.9tut.com/ccnav7-2020-new-questions-part-6 10/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
A. Branch-1
B. Branch-2
C. Branch-3
D. Branch-4
Answer: C
Explanation
Priority 0 is the lowest priority of a bridge so it will be elected the root bridge.
Note: The command “root primary” only checks the current root bridge priority and tries to use a better (lower)
priority value to become the new root bridge. But it does not ensure the local switch will become the root bridge.
If another switch has priority of 0 and we issue the “root primary” command then it will inform that it cannot
become root, as it cannot get a value lower than 0.
Question 20
https://www.9tut.com/ccnav7-2020-new-questions-part-6 11/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
The entire contents of the MAC address table are shown. Sales-4 sends a data frame to Sales-1. What does the
switch do as it receives the frame from Sales-4?
A. Map the Layer 2 MAC address to the Layer 3 IP address and forward the frame
B. Insert the source MAC address and port into the forwarding table and forward the frame to Sales-1
C. Perform a lookup in the MAC address table and discard the frame due to a missing entry
D. Flood the frame out of all ports except on the port where Sales-1 is connected
Answer: B
Explanation
The Sales-1 information was already learned by the switch so it just forwards the frames to Sales-1. The switch
also learns the information of Sales-4 because this is the first time this host communicates to other hosts.
Question 21
Which technology allows for multiple operating systems to be run on a single host computer?
Answer: D
Question 22
An administrator must turn off the Cisco Discovery Protocol on the port configured with last usable address in
the 10.0.0.0/30 subnet. Which command set meets the requirement?
A. interface gi0/1
no cdp enable
B. interface gi0/1
clear cdp table
https://www.9tut.com/ccnav7-2020-new-questions-part-6 12/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
C. interface gi0/0
no cdp run
D. interface gi0/0
no cdp advertise-v2
Answer: A
Explanation
In order to disable CDP on an interface, we have to use the “no cdp enable” under interface mode.
Question 23
A. FRTS
B. CAR
C. PQ
D. PBR
E. CBWFQ
Answer: C E
Question 24
Answer: D
Question 25
A. array
B. string
C. object
D. Boolean
Answer: C
https://www.9tut.com/ccnav7-2020-new-questions-part-6 13/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
Explanation
An object is an unordered collection of zero or more name/value pairs. For example {“name”:”John”}. Objects
are denoted by curly brackets, which means that the order is not guaranteed. For example, if you send a request
{“name”:”9tut”,”preferredColor”:”Blue”}, it is not always guaranteed that the receiver receives them in the same
order.
Note: In contrast to object, an array is an ordered sequence of zero or more values. For example [“a”,”b”,”c”].
Arrays use square brackets to denote arrays. Order is guaranteed in JSON arrays.
Question 26
An engineer needs to add an old switch back into a network. To prevent the switch from corrupting the VLAN
database which action must be taken?
A. Add the switch in the VTP domain with a lower revision number
B. Add the switch in the VTP domain with a higher revision number
C. Add the switch with DTP set to dynamic desirable
D. Add the switch with DTP set to desirable
Answer: A
Explanation
If you add a higher revision number switch to the network then all other switches in the current network will
learn from the newly added one. And all current VLAN databases will be overwritten.
Question 27
A. distribution system
B. service
C. redundancy
D. console
Answer: A
Explanation
Redundancy Port is used for High-Availability (HA) deployment designs when there are two WLCs available.
In this setup, both WLCs are physically connected with each other through the Redundant Port using an Ethernet
cable. The redundancy port is used for configuration, operational data synchronization and role negotiation
between the primary and secondary controllers.
The service port is used for out-of-band management of the controller and system recovery and maintenance in
the event of a network failure.
The distribution system ports are the most important ports on the WLC as they connect the internal logical
interfaces and wireless client traffic to the rest of our network. The SFP Ports are able to accept fiber optic or
Ethernet copper interfaces, with the use of the appropriate SFPs.
https://www.9tut.com/ccnav7-2020-new-questions-part-6 14/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
Question 28
An engineering team asks an implementer to configure syslog for warning conditions and error conditions.
Which command does the implementer configure to achieve the desired result?
A. logging trap 2
B. logging trap 3
C. logging trap 4
D. logging trap 5
Answer: C
Explanation
The highest level is level 0 (emergencies). The lowest level is level 7. If we configure syslog level 4 then it will
send all the syslog messages from level 0 to 4.
Question 29
Drag and drop the 802.11 wireless standards from the left onto the matching statements on the right.
https://www.9tut.com/ccnav7-2020-new-questions-part-6 15/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
Answer:
Explanation
Wireless Standards
https://www.9tut.com/ccnav7-2020-new-questions-part-6 16/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
802.11ac uses dual-band wireless technology, supporting simultaneous connections on both 2.4 GHz and 5 GHz
Wi-Fi devices. 802.11ac offers backward compatibility to 802.11a/b/g/n and bandwidth rated up to 1300 Mbps
on the 5 GHz band plus up to 450 Mbps on 2.4 GHz.
Question 30
A. RADIUS
B. TACACS+
C. Telnet
D. SCP
E. SSH
Answer: C E
Explanation
The service-port interface controls communications through and is statically mapped by the system to the service
port. The service port can be used for out-of-band management.
The service port can obtain an IPv4 address using DHCP, or it can be assigned a static IPv4 address, but a default
gateway cannot be assigned to the service-port interface. Static IPv4 routes can be defined through the controller
for remote network access to the service port.
If the service port is in use, the management interface must be on a different supernet from the service-port
interface.
Question 31
How must router A be configured so that it only sends Cisco Discovery Protocol Information to router C?
https://www.9tut.com/ccnav7-2020-new-questions-part-6 17/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
Option A Option B
conf t conf t
RouterA(config)#no cdp run RouterA(config)#cdp run
RouterA(config)#interface gi0/0/1 RouterA(config)#interface gi0/0/1
RouterA(config)#cdp enable RouterA(config)#cdp enable
Option C Option D
conf t conf t
RouterA(config)#cdp run RouterA(config)#cdp run
RouterA(config)#interface gi0/0/0 RouterA(config)#interface gi0/0/0
RouterA(config)#cdp enable RouterA(config)#no cdp enable
A. Option A
B. Option B
C. Option C
D. Option D
Answer: D
Explanation
If CDP is disabled globally, you cannot enable it on each interface using the “cdp enable” interface configuration
mode command.
Reference:
https://www.cisco.com/c/en/us/td/docs/optical/cpt/r9_5/command/reference/cpt95_cr/cpt95_cr_chapter_01101.pdf
Question 32
Answer: D
Question 33
https://www.9tut.com/ccnav7-2020-new-questions-part-6 18/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
A. enable secret
B. enable password-encryption
C. service password-encryption
D. password-encrypt
Answer: C
Explanation
The service password-encryption command will encrypt all current and future passwords so any password
existed in the configuration will be encrypted.
1. ArmandoRacer
August 10th, 2021
Hello, I would like to know if the questions that come in the current exam are those of “NEW QUESTION
PART 5,6,7,8” ??? OR COME THOSE THAT ARE IN THE ROW OF CCNA THAT BEGINS WITH
THE BASIC QUESTIONS BOSE THE ONE OF EACH THEME AS IT IS DIVIDED IN 9 TUT
2. 9tut
August 11th, 2021
@ArmandoRacer: The questions come from both so you need to grasp all of them before taking the exam.
3. exam
August 17th, 2021
4. Ahmed
November 5th, 2021
5. Hiro
February 24th, 2022
@9tut
Could you please check the question below?
I think the answer is B, not A.
Question 26
An engineer needs to add an old switch back into a network. To prevent the switch from corrupting the
VLAN database which action must be taken?
https://www.9tut.com/ccnav7-2020-new-questions-part-6 19/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
A. Add the switch in the VTP domain with a lower revision number
B. Add the switch in the VTP domain with a higher revision number
C. Add the switch with DTP set to dynamic desirable
D. Add the switch with DTP set to desirable
Answer: A
6. 9tut
February 24th, 2022
@Hiro: This question is correct. If you add a higher revision number switch to the network then all other
switches in the current network will learn from the newly added one. And all current VLAN databases will
be overwritten.
7. Anonymous
February 25th, 2022
8. 9tut
February 25th, 2022
Yes, so we have to “Add the switch in the VTP domain with a lower revision number”. This means the old
switch must have a lower revision number than the ones in our network.
9. Barbie
May 20th, 2022
Hello
Can someone explain why isn’t the answer of Q32 “B”?
Why is it D?
10. JD
May 24th, 2022
@Barbie:
“direct connections between subscribers” is a full-mesh topology, not the hub and spoke. In hub and spoke
every subscriber (spoke) connects to the central (hub). This way security policies can be implemented on
hub to restrict access between subscribers.
Comment pages
« Previous 1 2 5792
Add a Comment
Name
https://www.9tut.com/ccnav7-2020-new-questions-part-6 20/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
Submit Comment
Subscribe to comments feed
CCNAv7 (2020) – New Questions Part 6 Question 1 to 15 Checking Lab Challenge 1 Quiz
Logout
CCNA 200-301
Basic Questions
Topology Architecture Questions
Cloud & Virtualization Questions
CDP & LLDP Questions
Switch Questions
VLAN & Trunking Questions
VLAN & Trunking Questions 2
STP & VTP Questions
EtherChannel Questions
TCP & UDP Questions
IP Address & Subnetting Questions
IP Routing Questions
IP Routing Questions 2
OSPF Questions
OSPF Questions 2
EIGRP Questions
NAT Questions
NTP Questions
Syslog Questions
HSRP Questions
Access-list Questions
AAA Questions
Security Questions
https://www.9tut.com/ccnav7-2020-new-questions-part-6 21/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
Security Questions 2
DAI Questions
IPv6 Questions
DNS Questions
QoS Questions
Port Security Questions
Wireless Questions
Wireless Questions 2
SDN Questions
DNA Center Questions
Drag Drop Questions
Drag Drop Questions 2
Drag Drop Questions 3
VPN Questions
DHCP Questions
Automation Questions
Miscellaneous Questions
CCNA FAQs & Tips
Share your new CCNA Experience
CCNA Self-Study
Practice CCNA GNS3 Labs
CCNA Knowledge
CCNA Lab Challenges
Puppet Tutorial
Chef Tutorial
Ansible Tutorial
JSON Tutorial
Layer 2 Threats and Security Features
AAA TACACS+ and RADIUS Tutorial
STP Root Port Election Tutorial
GRE Tunnel Tutorial
Basic MPLS Tutorial
TCP and UDP Tutorial
Border Gateway Protocol BGP Tutorial
Point to Point Protocol (PPP) Tutorial
WAN Tutorial
DHCP Tutorial
Simple Network Management Protocol SNMP Tutorial
Syslog Tutorial
Gateway Load Balancing Protocol GLBP Tutorial
EtherChannel Tutorial
Hot Standby Router Protocol HSRP Tutorial
InterVLAN Routing Tutorial
Cisco Command Line Interface CLI
Cisco Router Boot Sequence Tutorial
OSI Model Tutorial
Subnetting Tutorial – Subnetting Made Easy
Frame Relay Tutorial
Wireless Tutorial
Virtual Local Area Network VLAN Tutorial
VLAN Trunking Protocol VTP Tutorial
https://www.9tut.com/ccnav7-2020-new-questions-part-6 22/23
11:12, 16/06/2022 CCNA Training » CCNAv7 (2020) – New Questions Part 6
IPv6 Tutorial
Rapid Spanning Tree Protocol RSTP Tutorial
Spanning Tree Protocol STP Tutorial
Network Address Translation NAT Tutorial
Access List Tutorial
RIP Tutorial
EIGRP Tutorial
OSPF Tutorial
Network Resources
Free Router Simulators
CCNA Website
ENCOR Website
ENSDWI Website
ENARSI Website
DevNet Website
CCIE R&S Website
Security Website
Wireless Website
Design Website
Data Center Website
Service Provider Website
Collaboration Website
Top
https://www.9tut.com/ccnav7-2020-new-questions-part-6 23/23