[learn-ccna.com]

20. Refer to the exhibit. Beginning with HR servers and workstations, a network engineer is designing a new security structure for the network. Which set of policies adheres to the hierarchical network model design principles?
Implement Layer 3 switching on S1 to reduce the packet processing load on D1 and D2. Install all security processing on S1 to reduce network traffic load.
Configure port security options on S1. Use Layer 3 access control features on D1 and D2 to limit access to the HR servers to just the HR subnet.
Move all HR assets out of the data center and connect them to S1. Use Layer 3 security functions on S1 to deny all traffic into and out of S1.
Perform all port access and Layer 3 security functions on C1.

source :learningccna

1. What can be found at the enterprise edge?

*campus infrastructure, including access layer devices
*Internet, VPN, and WAN modules ****
*Internet, PSTN, and WAN services
*server farms and network management

2  Which two measures help ensure that a hardware problem does not cause an outage in an enterprise LAN that supports mission critical services? (Choose two.)

*purchasing more bandwidth from the ISP
*implementing broadcast containment with VLANs
*providing failover capability ****
*installing redundant power supplies ****
*installing routers that can handle a greater amount of throughput

4  A business consultant must use Internet websites to research a report on the e-business strategies of several firms and then electronically deliver the report to a group of clients in cities throughout the world. Which two teleworker tools can the consultant use to accomplish this project? (Choose two.)

*Telnet
*email ****
*VoIP
*VPN
*HTTP ****

5  Which task would typically only require services located at the access layer of the hierarchical design model?

*placing a VoIP call to a business associate in another country

*responding to an e-mail from a co-worker in another department

*connecting to the corporate web server to update sales figures
*using a VPN from home to send data to the main office servers
*printing a meeting agenda on a local departmental network printer ****

6  How does a VPN work to support remote user productivity?

*It creates a virtual circuit that allows real-time communications between any two Internet endpoints.
*It uses encapsulation to create a secure tunnel for transmission of data across non-secure networks. ****
*It uses SSL to encrypt remote user logins to the corporate intranet.
*It uses secure Telnet for remote user connections to internal network devices.

7  A remote user needs to access a networking device on the internal network of the company. The transactions between the remote user and the device must be secure. Which protocol enables this to happen securely?

*Telnet
*FTP
*HTTP
*SSH ****

8   What does VoIP provide to telecommuters?

*ability to share desktop applications simultaneously
*secure, encrypted data transmissions through the Internet
*high-quality, live-video presentations
*real-time voice communications over the Internet ****

9  Which functional component of the Cisco Enterprise Architecture is responsible for hosting internal servers?

*service provider edge
*building distribution
*enterprise campus ****
*enterprise edge

10  What is the purpose of the Cisco Enterprise Architecture?

*remove the three-layer hierarchical model and use a flat network approach
*divide the network into functional components while still maintaining the concept of Core, Distribution, and Access Layers ****
*provide services and functionality to the core layer by grouping various components into a single component located in the access layer
*reduce overall network traffic by grouping server farms, the management server, corporate intranet, and e-commerce routers in the same layer

11 Which two solutions would an enterprise IT department use to facilitate secure intranet access for remote workers? (Choose two.)

*VPN ****
*NAT
*user authentication ****
*client firewall software
*packet sniffing

12  Which statement describes the difference between an enterprise WAN and an enterprise extranet?
An enterprise WAN is designed to interconnect local LANs, while an enterprise extranet is designed to interconnect remote branch offices.

*An enterprise WAN is designed to interconnect branch offices, while an enterprise extranet is designed to give access to external business partners. ****
*An enterprise WAN is designed to provide remote access for its teleworkers, while an enterprise extranet is designed to provide Internet connectivity for the *enterprise.

*An enterprise WAN is designed to provide Internet connectivity for the enterprise, while an enterprise extranet is designed to provide remote access to the enterprise network for teleworkers.

13  Why would a network administrator want to limit the size of failure domains when designing a network?

*reduces the effect of Ethernet collisions
*reduces the impact of a key device or service failure ****
*reduces the impact of Internet congestion on critical traffic
*reduces the impact of blocking broadcast packets at the edge of the local network

14  What is the main purpose of the Access Layer in a hierarchically designed network?

*performs routing and packet manipulation
*supplies redundancy and failover protection
*provides a high-speed, low-latency backbone
*serves as a network connection point for end-user devices ****

15  Which three functions are performed at the Distribution Layer of the hierarchical network model? (Choose three.)

*forwards traffic that is destined for other networks ****
*isolates network problems to prevent them from affecting the Core Layer ****
*allows end users to access the local network
*provides a connection point for separate local networks ****
*transports large amounts of data between different geographic sites
*forwards traffic to other hosts on the same logical network

16  What are two important characteristics or functions of devices at the Enterprise Edge? (Choose two.)

*providing Internet, telephone, and WAN services to the enterprise network
*providing a connection point for end-user devices to the enterprise network
*providing high-speed backbone connectivity with redundant connections
*providing intrusion detection and intrusion prevention to protect the network against malicious activity ****
*providing packet inspection to determine if incoming packets should be allowed on the enterprise network ****

17  What is a benefit of having an extranet?

*It provides web-like access to company information for employees only.
*It limits access to corporate information to secure VPN or remote access connections only.
*It allows customers and partners to access company information by connecting to a public web server.
*It allows suppliers and contractors to access confidential internal information using controlled external connections. ****

18  Why is TCP the preferred Layer 4 protocol for transmitting data files?

*TCP is more reliable than UDP because it requires lost packets to be retransmitted. ****
*TCP requires less processing by the source and destination hosts than UDP.
*UDP introduces delays that degrade the quality of the data applications.
*TCP ensures fast delivery because it does not require sequencing or acknowlegements.

19  Which two statements are reasons why UDP is used for voice and video traffic instead of TCP? (Choose two.)

*TCP requires all data packets to be delivered for the data to be usable.
*The acknowledgment process of TCP introduces delays that break the streams of data. ****
UDP does not have mechanisms for retransmitting lost packets. ****
*UDP tolerates delays and compensates for them.
*TCP is a connectionless protocol that provides end-to-end reliability.
*UDP is a connection-oriented protocol that provides end-to-end reliability.

20 The ABC Corporation implements the network for its new headquarters using the Cisco Enterprise Architecture. The network administrator wants to filter the traffic from and to the outside world. Where should the administrator deploy a firewall device?

*server farm
*enterprise edge ****
*enterprise campus
*service provider edge

[learn-ccna.com]

download : http://www.4shared.com/get/37484423/9267be7c/Ccna_Discovery_3_v4_anyar.html

1. Refer to the exhibit. Beginning with HR servers and workstations, a network engineer is designing a new security structure for the network. Which set of * * policies adheres to the hierarchical network model design principles?
* Implement Layer 3 switching on S1 to reduce the packet processing load on D1 and D2. Install all security processing on S1 to reduce network traffic load.
* Configure port security options on S1. Use Layer 3 access control features on D1 and D2 to limit access to the HR servers to just the HR subnet.
* Move all HR assets out of the data center and connect them to S1. Use Layer 3 security functions on S1 to deny all traffic into and out of S1.

* Perform all port access and Layer 3 security functions on C1.

3. A network technician is asked to examine an existing switched network. Following this examination, the technician makes recommendations for adding new switches where needed and replacing existing equipment that hampers performance. The technician is given a budget and asked to proceed. Which two pieces of information would be helpful in determining necessary port density for new switches? (Choose two.)
* forwarding rate
* traffic flow analysis
* expected future growth
* number of hubs that are needed in the access layer to increase performance

* number of required core connections

4. Configuring communication between devices on different VLANs requires the use of which layer of the OSI model?
* Layer 1
* Layer 3

* Layer 5
* Layer 4

5. What is the likely impact of moving a conventional company architecture to a completely converged network?
* Local analog phone service can be completely outsourced to cost-effective providers.
* The Ethernet VLAN structure is less complex.
* A shared infrastructure is created resulting in a single network to manage.
* QoS issues are greatly reduced.
* There is less bandwidth competition between voice and video streams.

* port security
* security policies
* 10 Gigabit Ethernet
* quality of service (QoS)
* hot-swappable hardware
* Power over Ethernet (PoE)

7. Which three features are commonly supported at the distribution layer of the Cisco hierarchical network model? (Choose three.)
* security policies
* Power over Ethernet
* switch port security
* quality of service
* Layer 3 functionality
* end user access to network

8. Which two features are supported at all three levels of the Cisco three-layer hierarchical model? (Choose two.)
* Power over Ethernet
* load balancing across redundant trunk links
* redundant components
* Quality of Service
* link aggregation

9. Which two characteristics are associated with enterprise level switches? (Choose two.)
* low port density
* high forwarding rate
* high latency level
* support link aggregation
* predefined number of ports

10. Which hierarchical design model layer controls the flow of network traffic using policies and delineates broadcast domains by performing routing functions between virtual LANs (VLANs)?
* application
* access
* distribution
* network
* core

11. Link aggregation should be implemented at which layer of the hierarchical network?
* core only
* distribution and core
* access and distribution
* access, distribution, and core

12. For organizations that are implementing a voice over IP solution, what functionality should be enabled at all three layers of the hierarchical network?
* Power over Ethernet
* quality of service
* switch port security
* inter-VLAN routing

13. Which layer of the hierarchical design model provides a means of connecting devices to the network and controlling which devices are allowed to communicate on the network?
* application
* access
* distribution
* network
* core

12. At which heirarchical layer are switches normally not required to process all ports at wire speed?
* core layer
* distribution layer
* access layer
* entry layer

14. Refer to the exhibit. What characteristic of hierarchical network designs is exhibited by having SW3 connected to both SW1 and Sw2?
* scalability
* security
* redundancy
* maintainability

15. Which layer of the hierarchical network design model is refered to as the high-speed backbone of the internetwork, where high availability and redundancy are critical?
* access layer
* core layer
* data-link layer
* distribution layer
* network layer
* physical layer

16. Which hierarchical design characteristic would be recommended at both the core and distribution layers to protect the network in the case of a route failure?
* PoE
* redundancy
* aggregation
* access lists

17. Which layer of the OSI model does an access layer LAN switch use to make a forwarding decision?
* Layer 1
* Layer 2
* Layer 3
* Layer 4

18. What statement best describes a modular switch?
* a slim-line chassis
* allows interconnection of switches on redundant backplane
* defined physical characteristics
* flexible characteristics

19. A technician is attempting to explain Cisco StackWise technology to a client that is setting up three stackable switches. Which explanation accurately describes StackWise technology?
* StackWise technology allows up to eight ports to be bound together to increase available bandwidth.
* StackWise technology allows the switch to deliver power to end devices by using existing Ethernet cabling.
* StackWise technology allows the switch capabilities and ports to be expanded by the addition of line cards.
* StackWise technology allows up to nine switches to be interconnected via the use of a fully redundant backplane.

20. Which feature supports higher throughput in switched networks by combining multiple switch ports?
* convergence
* redundant links
* link aggregation
* network diameter

www.learn-ccna.com

1. Configuring communication between devices on different VLANs requires the use of which layer of the OSI model?

Layer 4
Layer 5

Layer 1

Layer 3

2. What is the likely impact of moving a conventional company architecture to a completely converged network?

Local analog phone service can be completely outsourced to cost-effective providers.
The Ethernet VLAN structure is less complex.
A shared infrastructure is created resulting in a single network to manage.
QoS issues are greatly reduced.
There is less bandwidth competition between voice and video streams

3. A network technician is asked to examine an existing switched network. Following this examination, the technician makes recommendations for adding new switches where needed and replacing existing equipment that hampers performance. The technician is given a budget and asked to proceed. Which two pieces of information would be helpful in determining necessary port density for new switches? (Choose two.)
forwarding rate
traffic flow analysis
expected future growth
number of required core connections
number of hubs that are needed in the access layer to increase performance

4. Which hierarchical design model layer controls the flow of network traffic using policies and delineates broadcast domains by performing routing functions between virtual LANs (VLANs)?
application
access
distribution
network
core

5. A network administrator is selecting a switch that will operate at the network core. Which three features should the switch support for optimum network performance and reliability? (Choose three.)
port security
security policies
10 Gigabit Ethernet
quality of service (QoS)
hot-swappable hardware
Power over Ethernet (PoE)

6. Which three features are commonly supported at the distribution layer of the Cisco hierarchical network model? (Choose three.)
security policies
Power over Ethernet
switch port security
quality of service
Layer 3 functionality
end user access to network

7. Which two features are supported at all three levels of the Cisco three-layer hierarchical model? (Choose two.)
Power over Ethernet
load balancing across redundant trunk links
redundant components
Quality of Service
link aggregation

8. Which two characteristics are associated with enterprise level switches? (Choose two.)
low port density
high forwarding rate
high latency level
support link aggregation
predefined number of ports

9. Link aggregation should be implemented at which layer of the hierarchical network?
core only
distribution and core
access and distribution
access, distribution, and core

10. For organizations that are implementing a voice over IP solution, what functionality should be enabled at all three layers of the hierarchical network?
Power over Ethernet
quality of service
switch port security
inter-VLAN routing

11. Which layer of the hierarchical design model provides a means of connecting devices to the network and controlling which devices are allowed to communicate on the network?
application
access
distribution
network
core

12. At which heirarchical layer are switches normally not required to process all ports at wire speed?
core layer
distribution layer
access layer
entry layer

13. Which layer of the OSI model does an access layer LAN switch use to make a forwarding decision?
Layer 1
Layer 2
Layer 3
Layer 4

14. Refer to the exhibit. What characteristic of hierarchical network designs is exhibited by having SW3 connected to both SW1 and Sw2?
scalability
security
redundancy
maintainability

15. Which layer of the hierarchical network design model is refered to as the high-speed backbone of the internetwork, where high availability and redundancy are critical?
access layer
core layer
data-link layer
distribution layer
network layer
physical layer

16. What statement best describes a modular switch?
a slim-line chassis
allows interconnection of switches on redundant backplane
defined physical characteristics
flexible characteristics

17. A technician is attempting to explain Cisco StackWise technology to a client that is setting up three stackable switches. Which explanation accurately describes StackWise technology?
StackWise technology allows up to eight ports to be bound together to increase available bandwidth.
StackWise technology allows the switch to deliver power to end devices by using existing Ethernet cabling.
StackWise technology allows the switch capabilities and ports to be expanded by the addition of line cards.
StackWise technology allows up to nine switches to be interconnected via the use of a fully redundant backplane.

18. Which hierarchical design characteristic would be recommended at both the core and distribution layers to protect the network in the case of a route failure?
PoE
redundancy
aggregation
access lists
19. Refer to the exhibit. Beginning with HR servers and workstations, a network engineer is designing a new security structure for the network. Which set of policies adheres to the hierarchical network model design principles?
Implement Layer 3 switching on S1 to reduce the packet processing load on D1 and D2. Install all security processing on S1 to reduce network traffic load.
Configure port security options on S1. Use Layer 3 access control features on D1 and D2 to limit access to the HR servers to just the HR subnet.
Move all HR assets out of the data center and connect them to S1. Use Layer 3 security functions on S1 to deny all traffic into and out of S1.
Perform all port access and Layer 3 security functions on C1.

20. Which feature supports higher throughput in switched networks by combining multiple switch ports?
convergence
redundant links
link aggregation
network diameter

www.learn-ccna.com