CISCO NETWORKING

Question 1: What are the various ways to access the CLI of a Cisco switch?

The Correct Answer

There are three primary methods to access the Command Line Interface (CLI):

1. Console Port (Physical/Out-of-band)

2. Telnet (Remote/In-band)
3. SSH (Secure Shell) (Remote/In-band)

Detailed Explanation

 Console Port: This is a physical connection using a console cable (rollover cable)
directly from a computer to the switch. It is used for initial configuration or when network
access is unavailable (out-of-band management).
 Telnet: A protocol used to access the CLI remotely over the network. However, it is
insecure because it sends data, including passwords, in plaintext.
 SSH: The preferred remote access method. Like Telnet, it allows network-based access,
but it encrypts all communication, making it secure against eavesdropping.
 Auxiliary (AUX) Port: While more common on routers for dial-up modem access, some
older switches may feature this, though it is rarely used today.

Related Concepts

 In-band vs. Out-of-band Management: Out-of-band (Console) works even if the

network is down. In-band (SSH/Telnet) requires the switch to have an IP address and
active network connectivity.
 VTY Lines: These are virtual ports used specifically for Telnet and SSH connections. To
enable remote access, you must configure these line vty settings.

Mnemonics/Quick Tips
  Memory Aid: Remember "C.T.S." — Console, Telnet, SSH.
 Common Pitfall: Many students forget that SSH and Telnet require a configured SVI
(Switch Virtual Interface) with an IP address, whereas the Console does not.

Question 2: In order to assign an IP address to a router interface, which mode must it be

done?

The Correct Answer

 Interface Configuration Mode

Detailed Explanation

 Logic: Cisco IOS uses a hierarchical mode structure. To make changes to a specific
physical or logical component (like an Ethernet port), you must navigate from Global
Configuration Mode into the specific Interface Configuration Mode for that port.
 Command Path: Router(config)# interface [type/number] (e.g., interface gigabitethernet
0/0). Once the prompt changes to Router(config-if)#, you can apply the IP address.

Related Concepts

 Global Configuration Mode: The "parent" mode used for settings that affect the whole
device (like the hostname).
 User EXEC vs. Privileged EXEC: User mode (>) is view-only; Privileged mode (#)
allows you to view sensitive configurations and enter setup modes.

Mnemonics/Quick Tips

 Quick Tip: Look at the prompt! If you see (config-if)#, you are in the right place to
assign an IP.
 Common Pitfall: Trying to type the ip address command in the general (config)# mode
will result in an "Invalid input" error.

Question 3: What is the main function of the NVRAM?

The Correct Answer

 To store the startup-config file.

Detailed Explanation

 Non-Volatile Storage: Unlike RAM, NVRAM (Non-Volatile Random Access

Memory) does not lose its data when the device is powered off or rebooted.
 Startup Configuration: Its primary role is to hold the startup-config. When a Cisco
device boots up, it copies this file into the RAM (where it becomes the running-config) to
tell the device how to operate.

Related Concepts

 RAM vs. NVRAM: RAM holds the "Running Config" (temporary); NVRAM holds the
"Startup Config" (permanent).
 Flash Memory: This is another non-volatile area, but it is typically used to store the
Cisco IOS Image (the operating system) rather than configuration files.

Mnemonics/Quick Tips

 Memory Aid: Think NV = Never Vanishes.

 Common Pitfall: Don't confuse NVRAM with Flash. Flash = OS (Software); NVRAM
= Config (Settings).

Question 4: Outline the steps and commands used to assign console password in a switch.

The Correct Answer

1. Enter Global Configuration Mode: configure terminal

2. Enter Line Console Mode: line console 0
3. Set the password: password [your_password]
4. Enable the password prompt: login

Detailed Explanation
  Line Console 0: Switches usually have only one physical console port, designated as "0".
 The 'login' Command: This is the step most students miss. Without the login command,
the switch has a password stored, but it will never actually ask the user to enter it.

Related Concepts

 VTY Passwords: These are configured similarly (line vty 0 15) but are used for
Telnet/SSH rather than the physical port.
 Enable Secret: This protects "Privileged EXEC" mode, whereas the console password
only protects the initial entry into "User EXEC" mode.

Mnemonics/Quick Tips

 Quick Tip: Always remember the "Password-Login" duo. If you set a password, you
must tell the line to use it by typing login.

Question 5: List at least two (2) transport layer protocols.

The Correct Answer

1. TCP (Transmission Control Protocol)

2. UDP (User Datagram Protocol)

Detailed Explanation

 TCP: A connection-oriented protocol that ensures reliable delivery through sequencing

and acknowledgments (used for web browsing, email).
 UDP: A connectionless, "best-effort" protocol that is faster but does not guarantee
delivery (used for streaming, VoIP, DNS).

Related Concepts

 Layer 4 of the OSI Model: This is where these protocols live. Their job is end-to-end
communication and error recovery.
  Port Numbers: Both protocols use port numbers (e.g., Port 80 for HTTP/TCP) to direct
traffic to the correct application.

Question 6: A college is building a new dormitory... students experience only a very short
interruption... What characteristic of the network is shown here?

The Correct Answer

 Fault Tolerance

Detailed Explanation

 Redundancy: The reason the network stayed up despite a cut cable is because there was a
redundant path available.
 Fault Tolerance: This is the ability of a network to recover quickly from hardware or
link failures without significantly impacting the users. The "short interruption" occurs
while the network (likely using Spanning Tree Protocol) calculates the new path.

Related Concepts

 Scalability: The ability of a network to grow without major redesigns.

 QoS (Quality of Service): Prioritizing specific types of traffic (like voice over web
browsing).

Mnemonics/Quick Tips

 Memory Aid: If the network "tolerates" a "fault" (the cut cable), it is Fault Tolerance.

Question 7: When calculating usable hosts per subnet, the following formula is used $2^n -
2$. For what reason is two subtracted?

The Correct Answer

 One address is reserved for the Network Address and the other is reserved for the
Broadcast Address.
Detailed Explanation

 Network Address: The very first address in a range (all host bits are 0). It identifies the
subnet itself and cannot be assigned to a PC.
 Broadcast Address: The very last address in a range (all host bits are 1). It is used to
send data to every device on that subnet simultaneously.

Related Concepts

 $n$ in the formula: This represents the number of host bits remaining after subnetting.
 Subnet Mask: The tool that defines where the network bits end and the host bits begin.

Mnemonics/Quick Tips

 Quick Tip: The "first" and the "last" are always off-limits for hosts!

Question 8: What is the default subnet mask for a class B IP address?

The Correct Answer

 [Link] (or /16 in CIDR notation)

Detailed Explanation

 Classful Addressing: In the traditional Classful system, Class B addresses range from
[Link] to [Link].
 Structure: The first two octets (16 bits) are reserved for the Network, and the last two
octets are for Hosts.

Related Concepts

 Class A: [Link] (/8)

 Class C: [Link] (/24)
Mnemonics/Quick Tips

 Memory Aid: * A is the 1st letter = 1 octet of 255.

o B is the 2nd letter = 2 octets of 255.
o C is the 3rd letter = 3 octets of 255.

SECTION B

Question 1: The router is a computer. Explain the statement.

The Correct Answer

A router is considered a computer because it contains the same fundamental hardware

components as a PC—including a CPU, operating system (Cisco IOS), and memory
(RAM/ROM)—to process data and execute software instructions.

Detailed Explanation

 Processing Power: Just like a PC, a router uses a Central Processing Unit (CPU) to
execute instructions for routing table lookups and packet switching.
 Operating System: It runs a specialized OS (Cisco Internetwork Operating System) to
manage hardware resources.
 Input/Output: Instead of a keyboard and monitor, its "input/output" consists of network
interfaces (Ethernet, Serial, Fiber) used to receive and forward data packets.

Related Concepts

 Cisco IOS: The proprietary software that functions as the router's brain.
 Packet Switching: The primary "application" the router's hardware is designed to run.

Mnemonics/Quick Tips

 Quick Tip: If it has a "Brain" (CPU) and "Memory" (RAM), it’s a computer

Question 2: What is the function of the various parts of a router?

The Correct Answer

 i. CPU: Executes the operating system instructions and handles routing logic.
 ii. RAM: Stores the running-config, routing tables, and ARP cache. (Volatile)
 iii. ROM: Stores basic diagnostic software (POST) and a limited "boot" version of the OS
(ROMMON).
 iv. NVRAM: Stores the startup-config. (Non-volatile)
 v. FLASH MEMORY: Stores the full Cisco IOS software image.

Detailed Explanation

 The Workflow: During bootup, the ROM runs a diagnostic, then pulls the IOS from
Flash into RAM. Finally, it moves the startup-config from NVRAM into RAM to begin
operation.

Related Concepts

 POST (Power-On Self-Test): The initial hardware check stored in ROM.

 Volatile vs. Non-Volatile: RAM is volatile (lost on power-off); Flash and NVRAM are
non-volatile (permanent).

Question 3: Where is the running configuration in the router stored?

The Correct Answer

 RAM (Random Access Memory)

Detailed Explanation

 Active State: The running-config contains all the commands currently in effect on the
device. Because RAM is incredibly fast, the router uses it to execute these commands in
real-time.
 Volatility: If you turn the router off without saving (using copy running-config startup-
config), all changes made in RAM are lost.
Mnemonics/Quick Tips

 Memory Aid: Running = RAM.

Question 4: Write short notes on static and dynamic routing.

The Correct Answer

 Static Routing: Routes are manually configured by a network administrator. They do

not change unless the admin changes them.
 Dynamic Routing: Routers use routing protocols (like OSPF or RIP) to automatically
discover networks and adjust to topology changes.

Detailed Explanation

 Static: Best for small, simple networks or "stub" networks. It is highly secure and uses
zero CPU/bandwidth for updates.
 Dynamic: Essential for large, complex networks. If a link goes down, dynamic protocols
"re-route" traffic automatically without human intervention.

Related Concepts

 Administrative Distance (AD): Used by the router to decide which route is more
"trustworthy" (Static has an AD of 1, making it very trusted).
 Convergence: The time it takes for all routers in a dynamic network to agree on the best
paths.

Mnemonics/Quick Tips

 Quick Tip: Static is manual/fixed; Dynamic is automatic/adaptive.

Question 5: What does the following command series do?

(Command: line vty 0 15, password strongtelnetpass, login)

The Correct Answer

This series of commands enables and secures remote access (Telnet/SSH) to the switch for up
to 16 simultaneous users by setting a required password.

Detailed Explanation

 line vty 0 15: Opens 16 virtual terminal lines (0 through 15) for remote connections.
 password strongtelnetpass: Sets the specific password required to gain entry.
 login: Instructs the switch to actually prompt the user for that password when they try to
connect.

Mnemonics/Quick Tips

 Common Pitfall: On an exam, if the login command is missing from a snippet, the
answer is "The password is set but the user will not be prompted to enter it."

SECTION C

Question 1: What is the effect of the following command: Router(config)# router eigrp
autonomous_system_#?

The Correct Answer

 This command starts the EIGRP routing process and assigns it to a specific
Autonomous System (AS) number.

Detailed Explanation

 Enabling the Protocol: It moves the router from Global Configuration mode into Router
Configuration mode for EIGRP.
 The AS Number: The # must be a number between 1 and 65535. For routers to exchange
EIGRP routing information, they must be configured with the same AS number. If the
numbers don't match, they will not form a neighbor relationship.
Related Concepts

 DUAL Algorithm: The mathematical process EIGRP uses to calculate the fastest, loop-
free path.
 Successor & Feasible Successor: EIGRP's terminology for the "Primary Route" and the
"Backup Route."

Mnemonics/Quick Tips

 Quick Tip: Think of the AS number like a radio frequency; if two routers aren't on the
same channel (AS), they can't hear each other.

Question 2: Which command in OSPF shows the network LSA information?

The Correct Answer

 show ip ospf database network

Detailed Explanation

 LSA (Link State Advertisement): OSPF routers don't just share routes; they share the
state of their links.
 Network LSA (Type 2): These are generated by the Designated Router (DR) on a
multi-access network (like Ethernet) to describe all the routers connected to that specific
segment. The command specifically filters the OSPF database to show these Type 2
entries.

Related Concepts

 show ip ospf database: The general command to see the entire Link State Database
(LSDB).
 Router LSA (Type 1): Information about a specific router and its directly connected
links.
Question 3: How can we connect a normal area to a backbone area if they are not directly
connected?

The Correct Answer

 By using an OSPF Virtual Link.

Detailed Explanation

 The Rule: In OSPF, all "Normal" areas (Area 1, 2, etc.) must physically connect to "Area
0" (the Backbone).
 The Solution: If a new area is physically separated from Area 0, a Virtual Link is
configured through a "Transit Area" to create a logical tunnel. This tricks the OSPF
process into thinking the remote area is directly attached to the backbone.

Related Concepts

 ABR (Area Border Router): The router that sits on the boundary of two areas.
 Transit Area: The non-backbone area that the virtual link passes through.

Question 4: Which two ACLs would permit only the two LAN networks attached to R2 to
access the network connected to R1 G0/0?

The Correct Answer

Based on the IP addresses in the exhibit:

1. access-list 1 permit [Link] [Link] (Permits H3's LAN)

2. access-list 1 permit [Link] [Link] (Permits H4's LAN)

Detailed Explanation

 Identifying the Networks: * H3 is on [Link]/26. The network ID is

[Link].
o H4 is on [Link]/26. The network ID is [Link].
  Wildcard Masks: A /26 prefix has 64 addresses. To find the wildcard mask, subtract the
subnet mask from 255. ($255 - 192 = 63$). Thus, the wildcard is [Link].
 Logic: These two lines allow traffic from R2's LANs. Because of the Implicit Deny at
the end of every ACL, all other traffic (like the serial link) will be blocked automatically.

Related Concepts

 Standard vs. Extended ACLs: Standard (used here) only filters by Source IP. Extended
can filter by Source, Destination, and Port.
 Implicit Deny: The invisible "deny all" rule at the bottom of every ACL.

Mnemonics/Quick Tips

 Wildcard Rule: Wildcard masks are the "inverse" of a subnet mask. If the subnet mask is
[Link], the wildcard is [Link].

Question 5: Refer to the exhibit. What interface and in what direction should you place a
standard ACL that allows printing to P1 from data VLAN 10, but stops the PCs on VLAN
20 from using the P1 printer?

The Correct Answer

 Interface: R1 GigabitEthernet 0/1.12 (subinterface for VLAN 12)

 Direction: Outbound (out)

Detailed Explanation

 The Rule of Proximity: In Cisco networking, Standard ACLs should be placed as close
to the destination as possible. Since the destination is the P1 printer on VLAN 12, the
closest point is the subinterface on R1 that serves that specific VLAN.
 Directional Logic: Traffic flows from the router toward the printer. Therefore, the ACL
must be applied outbound on subinterface G0/1.12 to inspect packets just before they
leave the router to enter the VLAN 12 network.
  Filtering: By applying it here, the router can permit traffic originating from the VLAN 10
network (e.g., [Link]/24) and deny traffic originating from the VLAN 20 network
(on R2).

Related Concepts

 Inbound vs. Outbound: Inbound ACLs filter traffic before it is routed; Outbound ACLs
filter after the routing decision is made but before the packet is placed on the wire.
 Extended ACL Placement: Unlike Standard ACLs, Extended ACLs should be placed as
close to the source as possible to save bandwidth.

Mnemonics/Quick Tips

 Memory Aid: "S-D" (Standard-Destination) and "E-S" (Extended-Source).

 Common Pitfall: Applying a standard ACL near the source. If you put this ACL on R2, it
might accidentally block VLAN 20 from accessing everything behind R1, not just the
printer.

Question 6: A small-sized company has 20 workstations and 2 servers... assigned a group of

IPv4 addresses [Link]/29... What technology should the company implement in
order to allow the workstations to access services over the Internet?

The Correct Answer

 NAT (Network Address Translation) or more specifically, PAT (Port Address

Translation / NAT Overload).

Detailed Explanation

 Address Scarcity: The company has 22 devices but only a /29 subnet from the ISP. A /29
provides only 6 usable public IP addresses.
 The Solution: NAT allows the company to use private IP addresses (like 192.168.x.x) for
all 22 internal devices. When these devices go to the Internet, the router translates those
private addresses into the few public addresses available.
  PAT (Overload): This specific version of NAT allows hundreds of internal devices to
share a single public IP address by assigning each session a unique source port number.

Related Concepts

 Private IP Ranges: RFC 1918 (e.g., [Link]/8, [Link]/12, [Link]/16) addresses

that are not routable on the public Internet.
 Inside Global vs. Inside Local: "Inside Local" is the private IP of the workstation;
"Inside Global" is the public IP seen by the Internet.

Mnemonics/Quick Tips

 Quick Tip: Whenever you see more "workstations" than "available public IPs," the
answer is almost always NAT/PAT.

SECTION D

Question 1: What is the full meaning of CPE and what is its function?

The Correct Answer

 Full Meaning: Customer Premises Equipment.

 Function: To connect the subscriber's local network (LAN) to the Service Provider's
communication network at the demarc point.

Detailed Explanation

 Location: CPE refers to any terminal or equipment located physically at the subscriber's
site rather than within the provider's central office.
 Functionality: It acts as the bridge between the internal network and the WAN.
Examples include routers, modems, or integrated services devices that translate internal
data into a format suitable for the provider's transmission lines.

Related Concepts
  Demarcation Point (Demarc): The physical point where the ISP's responsibility ends
and the customer's equipment begins.
 Local Loop: The actual physical connection (copper or fiber) from the CPE to the
provider’s Central Office (CO).

Mnemonics/Quick Tips

 Quick Tip: Think of CPE as the hardware that is Close to the People Employing it.

Question 2: What is the function of CSU/DSU?

The Correct Answer

 A Channel Service Unit/Data Service Unit (CSU/DSU) acts as a digital interface that
translates the digital signals used on a LAN into the specific signaling used by digital
leased lines like T1 or T3.

Detailed Explanation

 CSU Function: Handles the line connection to the digital circuit, providing diagnostic
functions and line conditioning.
 DSU Function: Converts the data frames from the router into the bipolar digital format
required for the transmission line and vice versa.
 Modern Integration: In modern routers, these are often built-in as WIC (WAN Interface
Cards) rather than external standalone boxes.

Question 3: State and explain three (3) WAN connection types.

The Correct Answer

1. Leased Lines (Dedicated): Permanent, point-to-point digital links (e.g., T1, T3) that
provide constant bandwidth.
2. Circuit Switched: Connections established only when needed, similar to a telephone call
(e.g., ISDN, PSTN).
 3. Packet Switched: Multiple users share the same network provider resources, using
virtual circuits to route data (e.g., Frame Relay, Metro Ethernet).

Detailed Explanation

 Leased Lines: Expensive but highly reliable and private. Best for constant heavy traffic
between two fixed locations.
 Circuit Switched: Cost-effective for low-volume or backup traffic, as you typically only
pay for the time the "call" is active.
 Packet Switched: Efficient use of bandwidth because data is broken into small packets
and multiplexed over shared infrastructure.

Mnemonics/Quick Tips

 Memory Aid: L.C.P. — Leased (Private), Circuit (Phone-like), Packet (Shared).

Question 4: What does the following command do? Router(config-if)# encapsulation hdlc

The Correct Answer

 This command sets the High-Level Data Link Control (HDLC) protocol as the
encapsulation method on a serial interface.

Detailed Explanation

 Default Protocol: HDLC is the default encapsulation on Cisco serial interfaces.

 Compatibility: While HDLC is a standard, Cisco’s version is proprietary. This means a
Cisco router using HDLC can generally only communicate with another Cisco router. If
connecting to a non-Cisco router, PPP is usually required instead.

Question 5: What do you understand by virtual circuit?

The Correct Answer

  A Virtual Circuit (VC) is a logical connection created within a shared network (like
Frame Relay or ATM) that behaves like a dedicated physical link between two endpoints.

Detailed Explanation

 Logical vs. Physical: While the data might travel across various physical switches in the
provider's cloud, the VC ensures it follows a specific logical path.
 Types: VCs can be Permanent (PVC), which stay up all the time, or Switched (SVC),
which are created on demand.

Question 6: Explain how the frame relay encapsulation process works.

The Correct Answer

 Frame Relay encapsulation works by mapping a local DLCI (Data Link Connection
Identifier) to a destination IP address and wrapping the data in a Frame Relay header
before sending it across a virtual circuit.

Detailed Explanation

 DLCI Mapping: Since Frame Relay is a multi-point technology, it uses DLCIs to

identify which "virtual pipe" to send the data through.
 Encapsulation: The router takes the Layer 3 packet (IP) and places it inside a Layer 2
Frame Relay frame.
 Switching: The provider’s switches look at the DLCI in the header to decide which
physical port to forward the frame to next.

Related Concepts

 Inverse ARP: The process used by Frame Relay to automatically discover the IP address
of the device at the other end of a VC.

2022

Question 1: List and explain the function of 3 network devices.

The Correct Answer

1. Hub: A Layer 1 device that broadcasts incoming data to all connected ports; it is largely
obsolete.
2. Switch: A Layer 2 device that uses MAC addresses to forward data only to the specific
destination port.
3. Router: A Layer 3 device that routes data between different networks based on IP
addresses.

Detailed Explanation

 Hub: Because it lacks intelligence, it creates a single collision domain, leading to high
network congestion.
 Switch: Improves efficiency by creating separate collision domains for every port,
ensuring data only goes where it’s intended.
 Router: Functions as the gateway for a local network to communicate with the outside
world (like the Internet).

Related Concepts

 Collision Domain: An area where data packets can "collide" if sent at the same time.
Switches solve this; Hubs do not.
 Broadcast Domain: An area where a broadcast message reaches all devices. Routers
"break" broadcast domains.

Question 2: With your Knowledge of VLAN and VTP...

i. How can VLAN help in a switched network?

The Correct Answer: VLANs (Virtual Local Area Networks) logically segment a single
physical switch into multiple smaller broadcast domains.
  Detailed Explanation: This improves security by isolating sensitive departments (like
Finance) and performance by reducing the size of broadcast domains, so a broadcast in
one VLAN doesn't slow down others.

ii. Explain how loops are formed in a Switched network.

The Correct Answer: Loops occur when there are redundant physical paths between switches
without a mechanism to manage them.

 Detailed Explanation: If two switches are connected via two cables for redundancy, a
broadcast frame will circle between them endlessly. This is called a Broadcast Storm,
which can crash the entire network in seconds.

iii. How does STP prevent these loops?

The Correct Answer: STP (Spanning Tree Protocol) monitors the network for redundant paths
and logically blocks specific ports to create a loop-free "tree" topology.

 Detailed Explanation: If a primary link fails, STP detects the failure and automatically
unblocks the backup port to restore connectivity (Fault Tolerance).

Question 3: What is the function of the following devices in a network?

i. Router

The Correct Answer: A router determines the best path for data to travel across interconnected
networks using a Routing Table. It connects different subnets and provides a gateway to the
Internet.

ii. Switch

The Correct Answer: A switch connects multiple devices (PCs, printers, servers) within a single
local area network (LAN). It uses MAC addresses to ensure that data is delivered directly to the
correct device on the local segment.
Related Concepts

 Default Gateway: The IP address of the router interface that a local device uses to send
data outside its own subnet.
 MAC Address Table: The internal list a switch builds to remember which device is
plugged into which physical port.

Mnemonics/Quick Tips

 Memory Aid: "Switches are for Local; Routers are for Remote."
 Common Pitfall: Many students think a switch and a router are the same. Remember: A
switch "builds" the network; a router "connects" the networks.

SECTION B

Question 1: How do routers learn IP addresses of connected networks?

The Correct Answer

 Routers learn about connected networks automatically through Directly Connected

Interfaces that are configured with an IP address and in an "up/up" state.

Detailed Explanation

 Local Discovery: When you assign an IP address to a router interface (e.g.,

[Link]/24) and enable it with no shutdown, the router immediately adds that network
to its routing table with a code of "C" (Connected).
 Local Routes: Modern Cisco IOS also adds a "L" (Local) route, which is a specific /32
host route for the actual IP assigned to the interface.

Related Concepts

 Static Routing: Manual entry of remote networks.

 Dynamic Routing: Automatic learning via protocols like OSPF or EIGRP.
Question 2: State and explain the function of the various layers of the Hierarchical design
of an enterprise network.

The Correct Answer

The Cisco Three-Layer Hierarchical Model consists of:

1. Access Layer: Connects end devices (PCs, printers) to the network.

2. Distribution Layer: Forwards traffic between the Access and Core layers; implements
policies (ACLs and routing).
3. Core Layer: The high-speed "backbone" of the network designed for fast switching.

Detailed Explanation

 Access Layer: Provides high port density and basic security (like Port Security).
 Distribution Layer: Acts as a boundary point where routing, filtering, and WAN access
occur.
 Core Layer: Must be highly available and redundant. It should not perform any packet
manipulation (like ACLs) that could slow down traffic.

Question 3: What is the difference between link state routing protocol and distance vector
routing protocol? State 2 examples of each.

The Correct Answer

 Distance Vector: Routers share their entire routing table with neighbors at regular
intervals; they only know the "distance" (metric) and "vector" (direction) to a network.
o Examples: RIP, EIGRP (Advanced Distance Vector).
 Link State: Routers share the state of their individual links to build a complete map
(topology) of the entire network.
o Examples: OSPF, IS-IS.

Detailed Explanation
  Distance Vector: Often called "routing by rumor" because a router only knows what its
neighbor tells it.
 Link State: More CPU-intensive but converges much faster and is less prone to routing
loops because every router has the full "map".

Question 4: Which Cisco IOS command(s) are used to assign password in the privilege
mode access?

The Correct Answer

1. enable secret [password] (Recommended)

2. enable password [password] (Legacy/Less Secure)

Detailed Explanation

 Enable Secret: This command uses strong encryption (MD5 or better) to store the
password in the configuration file. It is the industry standard.
 Enable Password: This stores the password in plaintext or very weak encryption. If both
are configured, the enable secret takes precedence.

Mnemonics/Quick Tips

 Hierarchical Model: "A.D.C." — All Devices Connect (Access -> Distribution ->
Core).
 Routing Protocol: Distance Vector is like a signpost (shows direction); Link State is
like a GPS (shows the whole map).

SECTION C

Question 1: Explain How STP works?

The Correct Answer

Spanning Tree Protocol (STP) works by identifying redundant paths in a network and logically
blocking specific ports to ensure there is only one active path between any two network nodes.
Detailed Explanation

 Election of the Root Bridge: Switches elect a "Root Bridge" based on the lowest Bridge
ID (Priority + MAC address).
 Path Calculation: Every other switch calculates the shortest path to the Root Bridge.
 Port Roles:
o Root Port: The port on a non-root switch with the best path to the Root.
o Designated Port: The port on a segment that sends traffic toward the Root.
o Non-Designated (Blocking) Port: Ports that would cause a loop are placed in a
blocking state.

Related Concepts

 Bridge Protocol Data Units (BPDUs): The messages switches exchange to share STP
information.
 Rapid STP (RSTP): An updated version (802.1w) that converges much faster than
original STP.

Question 2: What is the difference in functioning between a trunk port and an access port?

The Correct Answer

An Access Port belongs to a single VLAN and carries untagged traffic, while a Trunk Port can
carry traffic for multiple VLANs simultaneously by "tagging" the frames.

Detailed Explanation

 Access Port: Typically connects to end-devices like PCs or printers. It doesn't need to
know about other VLANs; it just passes traffic for its assigned one.
 Trunk Port: Typically connects switch-to-switch or switch-to-router. It uses the IEEE
802.1Q standard to add a small header (tag) to each frame, identifying which VLAN that
data belongs to so the receiving device can sort it correctly.

Mnemonics/Quick Tips
  Quick Tip: Access = Single (One user); Trunk = Multiple (Like a car trunk carrying
many bags).

Question 3: What is a native VLAN and explain the concept of router on a stick?

The Correct Answer

 Native VLAN: A specific VLAN on a trunk link that carries all untagged traffic. By
default, this is usually VLAN 1.
 Router on a Stick: A configuration where a single physical interface on a router is used
to route traffic between multiple VLANs on a network.

Detailed Explanation

 Native VLAN Logic: If a switch receives an untagged frame on a trunk, it assumes it

belongs to the Native VLAN. For security, it’s best practice to change the Native VLAN
to an unused number.
 Router on a Stick (ROAS): Instead of using many physical cables, the router interface is
divided into subinterfaces (e.g., G0/0.10, G0/0.20). Each subinterface acts as the default
gateway for a specific VLAN.

Question 4: What does the command series do?

(Command: router rip, network [Link], network [Link], network [Link])

The Correct Answer

This command series enables the Routing Information Protocol (RIP) and defines which local
networks the router will advertise to its neighbors.

Detailed Explanation

 router rip: Starts the RIP routing process.

 network [address]: This command tells the router two things:
1. Which local interfaces should participate in RIP (send/receive updates).
 2. Which network prefixes should be included in those updates to tell other routers "I
know how to get here."

Question 5: Define the following terms related to NAT.

The Correct Answer

1. Inside Local Address: The actual private IP address assigned to a device on the internal
network (e.g., [Link]).
2. Inside Global Address: The public IP address assigned by the ISP that represents the
internal device to the outside world.
3. Outside Local Address: The IP address of an external host as it appears to the internal
network.
4. Outside Global Address: The actual public IP address assigned to a host on the external
network/Internet.

Detailed Explanation

 The Perspective: "Inside" always refers to your organization; "Outside" refers to the
Internet. "Local" is how the address looks inside your walls; "Global" is how it looks to
the rest of the world.

Mnemonics/Quick Tips

 Common Pitfall: Students often flip Inside Global and Outside Local. Remember:
Global = Public Internet, Local = Your Private LAN.

SECTION D

Question 1: Explain How STP works?

The Correct Answer

Spanning Tree Protocol (STP) works by identifying redundant paths in a switched network and
logically blocking specific ports to ensure there is only one active path between any two network
nodes, thereby preventing loops.

Detailed Explanation

 Root Bridge Election: Switches exchange Bridge Protocol Data Units (BPDUs) to elect a
"Root Bridge" based on the lowest Bridge ID (Priority + MAC address).
 Path Calculation: Every non-root switch determines the "least cost" path to the Root
Bridge.
 Port Roles:
o Root Port: The single port on a switch with the best path to the Root.
o Designated Port: The port on a network segment that has the best path to the
Root; it forwards traffic.
o Non-Designated (Blocking) Port: Ports that would create a loop are placed in a
blocking state, where they receive BPDUs but do not forward data.

Related Concepts

 Broadcast Storm: The catastrophic result of a Layer 2 loop where broadcast frames
circle the network endlessly, consuming all bandwidth.
 Convergence: The process and time required for switches to transition ports through
states (Blocking, Listening, Learning, Forwarding) to reach a stable, loop-free topology.

Mnemonics/Quick Tips

 Memory Aid: Think of STP as a Traffic Cop for redundant roads—it shuts down the
extra roads so cars (packets) don't drive in circles.

Question 2: What is the difference in functioning between a trunk port and an access port?

The Correct Answer

An Access Port is assigned to a single VLAN and carries "untagged" traffic, whereas a Trunk
Port can carry traffic for multiple VLANs simultaneously by "tagging" each frame with a VLAN
ID.

Detailed Explanation

 Access Port: Typically used to connect end-user devices (PCs, printers). The device is
unaware of VLANs; the switch handles the membership internally.
 Trunk Port: Typically used for switch-to-switch or switch-to-router links. It uses the
IEEE 802.1Q standard to insert a 4-byte "tag" into the Ethernet frame header. This tag
allows the receiving switch to know which VLAN the frame belongs to before stripping
the tag and sending it to the destination.

Related Concepts

 VLAN Leaking: A security risk or misconfiguration where traffic from one VLAN ends
up on another, often due to trunking issues.
 DTP (Dynamic Trunking Protocol): A Cisco proprietary protocol used to negotiate
trunking between two switches automatically.

Question 3: What is a native VLAN and explain the concept of router on a stick?

The Correct Answer

 Native VLAN: This is a specific VLAN on an 802.1Q trunk link that carries all untagged
traffic. By default, this is VLAN 1.
 Router on a Stick: A network configuration where a single physical router interface is
divided into multiple logical subinterfaces to enable routing between different VLANs.

Detailed Explanation

 Native VLAN: If a switch receives a frame without a VLAN tag on a trunk port, it
assumes it belongs to the Native VLAN. It is a security best practice to change the Native
VLAN to an unused ID.
  Router on a Stick (ROAS): Instead of using a physical interface for every VLAN, the
router interface (e.g., G0/0) is configured with subinterfaces (e.g., G0/0.10 for VLAN 10).
Each subinterface is assigned an IP address that acts as the default gateway for that
specific VLAN.

Question 4: What is the first action to be taken when you realize an attack in your
network?

The Correct Answer

The first action is to contain the attack by isolating the affected systems or network segments to
prevent the threat from spreading (Lateral Movement).

Detailed Explanation

 Isolation: This may involve disconnecting a compromised server from the network,
shutting down specific switch ports, or applying temporary ACLs.
 Preservation: While containing the threat, it is vital to avoid rebooting or wiping systems
immediately, as this may destroy volatile evidence (in RAM) needed for forensic analysis
later.

Related Concepts

 Incident Response Plan (IRP): A formal, documented set of procedures for what to do
during a security breach.
 Hardening: The process of securing a system by reducing its surface of vulnerability
(e.g., closing unused ports).

Question 5: What is the first and most important aspect in network security?

The Correct Answer

The first and most important aspect is Physical Security.

Detailed Explanation
  Logic: If an attacker has physical access to your hardware, technical security (passwords,
encryption, firewalls) can often be bypassed. An attacker with physical access can reset
passwords, steal hard drives, or install hardware keyloggers.
 Implementation: This includes locking server rooms, using racks with secure doors, and
monitoring entry points with cameras or biometric scanners.

Mnemonics/Quick Tips

 Common Pitfall: Many students say "Firewalls" or "Passwords." While critical, these are
"Logical Security." Physical Security is always the foundation.

2023

Question 1: What is the general term that is used to describe a piece of data at any layer of
a networking model?

The Correct Answer

 Protocol Data Unit (PDU)

Detailed Explanation

As data moves down the protocol stack, it is wrapped in specific headers and trailers. Rather than
calling it "data" at every stage, the general term PDU is used. For instance, a PDU at the
Transport layer is a Segment, while a PDU at the Network layer is a Packet.

Related Concepts

 Encapsulation: The process of adding headers to data as it moves down the layers.
 De-encapsulation: The process of stripping headers as data moves up to the receiving
application.

Mnemonics/Quick Tips

 Memory Aid: "P-D-U" stands for Piece of Data Unit.

Question 2: List two protocols that function at the internet layer?

The Correct Answer

1. IPv4 (Internet Protocol version 4)

2. IPv6 (Internet Protocol version 6)

(Other valid answers: ICMP, ARP)

Detailed Explanation

The Internet layer (TCP/IP model) or Network layer (OSI model) is responsible for routing data
across different networks. IPv4 and IPv6 provide the addressing and routing logic, while ICMP
(Internet Control Message Protocol) handles error reporting and diagnostics (like Ping).

Question 3: Which layer of the OSI model defines services to segment and reassemble data
for individual communications between end devices?

The Correct Answer

 The Transport Layer (Layer 4)

Detailed Explanation

The Transport layer is responsible for end-to-end communication. Because application data is
often too large to send as one block, the Transport layer segments it into smaller pieces for
transmission and reassembles those pieces in the correct order at the destination.

Question 4: What process is used to place one message inside another message for transfer
from the source to the destination?

The Correct Answer

 Encapsulation

Detailed Explanation
Think of encapsulation like a Russian nesting doll. A message from an application is placed
inside a Transport layer segment, which is then placed inside a Network layer packet, and finally
inside a Data Link layer frame. This "wrapping" process allows each layer to add the control
information (like IP or MAC addresses) needed for delivery.

Question 5: List two engineering organizations which define open standards and protocols
that apply to the data link layer?

The Correct Answer

1. IEEE (Institute of Electrical and Electronics Engineers)

2. ISO (International Organization for Standardization)

Detailed Explanation

The IEEE is best known for the 802 project, which defines standards like Ethernet (802.3) and
Wi-Fi (802.11). The ISO created the OSI model itself and various data link protocols like HDLC.

Question 6: A technician has been asked to develop a physical topology for a network that
provides a high level of redundancy. Which physical topology requires that every node is
attached to every other node on the network?

The Correct Answer

 Full Mesh Topology

Detailed Explanation

In a Full Mesh, every device has a direct physical connection to every other device. This
provides the highest redundancy because if any one link fails, there are always multiple other
paths available. However, it is very expensive and difficult to scale due to the high number of
cables and ports required.

Question 7: What subnet mask is represented by the slash notation /20?

The Correct Answer

 [Link]

Detailed Explanation

A /20 means the first 20 bits are "1"s (Network) and the remaining 12 bits are "0"s (Host).

 Octet 1: 11111111 = 255

 Octet 2: 11111111 = 255
 Octet 3: 11110000 = 240 ($128+64+32+16$)
 Octet 4: 00000000 = 0

Question 8: Which subnet mask would be used if exactly 4 host bits are available?

The Correct Answer

 [Link] (or /28)

Detailed Explanation

IPv4 has 32 bits total. If 4 bits are for hosts, then 28 bits must be for the network ($32 - 4 = 28$).

A /28 mask is written as [Link] because the last octet is 11110000

($128+64+32+16=240$).

Question 9: Which two parts are components of an IPv4 address?

The Correct Answer

1. Network Portion
2. Host Portion

Detailed Explanation
An IP address is hierarchical. The Network portion identifies the specific subnet the device
belongs to (similar to a zip code), and the Host portion identifies the specific device within that
subnet (similar to a house number).

Question 10: If a network device has a mask of /26, how many IP addresses are available
for hosts on this network?

The Correct Answer

 62

Detailed Explanation

1. Calculate total bits: 32.

2. Subtract the mask: $32 - 26 = 6$ host bits.
3. Use the formula $2^n - 2$: $2^6 - 2 = 64 - 2 = 62$.
4. Note: We subtract 2 for the network address and the broadcast address.

SECTION B

Question: An administrator issues the command ip address dhcp on interface G0/1. What is
the administrator trying to achieve?

The Correct Answer

 The administrator is configuring the router interface to dynamically obtain its IPv4
address, subnet mask, and default gateway from a DHCP server.

Detailed Explanation

 Dynamic vs. Static: Usually, router interfaces are assigned static IP addresses. By using
this command, the router acts as a DHCP Client. This is common when the router's
interface is connected to an ISP or a larger upstream network that manages address
allocation automatically.
Related Concepts

 DORA Process: The four-step exchange (Discover, Offer, Request, Acknowledgment) a

client uses to get an address.
 SLAAC: The IPv6 equivalent method for a device to configure its own address without a
DHCP server.

Question: What kind of message is sent by a DHCPv4 client requesting an IP address?

The Correct Answer

 A DHCPDISCOVER message, sent as a broadcast.

Detailed Explanation

 Because the client does not yet have an IP address or the address of the DHCP server, it
must send a broadcast message ($[Link]$) to find any available server on the
local network segment.

Question: In which location are the normal range VLANs stored on a Cisco switch by
default?

The Correct Answer

 In the [Link] file located in Flash memory.

Detailed Explanation

 Unlike the running-config or startup-config, VLAN information is stored in a separate

database file. This is why, when you wipe a switch's configuration, the VLANs often
remain until you manually delete [Link].

Question: When a Cisco switch receives untagged frames on an 802.1Q trunk port, which
VLAN ID is the traffic switched to by default?
The Correct Answer

 The Native VLAN (which is VLAN 1 by default).

Detailed Explanation

 Trunk ports expect all frames to have an 802.1Q tag. If a frame arrives without one, the
switch assumes it belongs to the "Native" management VLAN.

Question: When configuring a router as part of a router-on-a-stick topology, where should

the IP address be assigned?

The Correct Answer

 On the logical subinterfaces (e.g., G0/0.10).

Detailed Explanation

 The physical interface itself is left without an IP address and is simply turned on (no
shutdown). The actual IP addresses (which serve as default gateways for the VLANs) are
applied to subinterfaces that correspond to each VLAN ID.

Question: What creates the problem of the collision domain? What is the solution?

The Correct Answer

 Problem: Hubs or half-duplex links where multiple devices compete for the same
physical medium.
 Solution: Using a Switch and full-duplex communication.

Detailed Explanation

 Switches provide a dedicated path (microsegmentation) for every device, effectively

giving each port its own collision domain, meaning collisions are physically impossible in
a full-duplex environment.
Question: Compare and contrast the switching methods: Store-and-forward vs. Fragment-
free.

The Correct Answer

 Store-and-forward: The switch receives the entire frame and checks it for errors (CRC)
before forwarding. It is slow but highly reliable.
 Fragment-free: The switch reads the first 64 bytes (to ensure no collision occurred) and
then starts forwarding. it is a "middle ground" between speed and reliability.

Question: What significant advantage does RSTP provide over STP?

The Correct Answer

 Faster convergence time.

Detailed Explanation

 While standard STP can take 30-50 seconds to transition a port to forwarding, RSTP
(802.1w) can achieve this in a few seconds or less by using a proactive proposal-and-
agreement handshake between switches.

Question: Why must configuration changes be done under the port-channel interface for
existing groups?

The Correct Answer

 To ensure consistency across all physical member links.

Detailed Explanation

 If you change a setting (like the allowed VLANs) on just one physical port, the
EtherChannel may become "suspended" due to a configuration mismatch. Applying the
change to the logical Port-Channel interface automatically pushes that configuration to
all bundled physical ports.
Question: What is the difference between LACP and PAgP in terms of the number of
interfaces that may be bundled?

The Correct Answer

 LACP (IEEE): Supports up to 16 interfaces (8 active, 8 in standby/hot-spare).

 PAgP (Cisco): Supports up to 8 interfaces (all active).

Detailed Explanation

 LACP (Link Aggregation Control Protocol) is the industry standard, while PAgP (Port
Aggregation Protocol) is Cisco proprietary.

SECTION C

C2 Question 1: The OSPF hello timer has been set to 15 seconds on a router in a point-to-
point network. By default, what is the dead interval on this router?

The Correct Answer

 60 seconds

Detailed Explanation

By default, the OSPF Dead Interval is four times the Hello Interval. If the Hello timer is
configured for 15 seconds, the router will wait for $15 \times 4 = 60$ seconds without receiving a
Hello packet from a neighbor before declaring that neighbor "down" and removing it from the
routing table.

Related Concepts

 OSPF Hello Packet: Used for neighbor discovery and maintaining "keepalive"
connectivity.
 Adjacency Requirements: For two routers to become neighbors, their Hello and Dead
timers must match. If they don't, the adjacency will fail.
Mnemonics/Quick Tips

 Memory Aid: Think "Four strikes and you're out." The Dead interval gives a neighbor
four chances (Hello periods) to check in.

C2 Question 2: What is a function of OSPF hello packets?

The Correct Answer

 To discover neighbors and maintain adjacencies.

Detailed Explanation

OSPF Hello packets serve two primary roles:

1. Discovery: When OSPF is enabled on an interface, it sends Hellos to find other OSPF
routers on that segment.
2. Keepalive: Once a relationship is established, Hellos are sent periodically to ensure the
neighbor is still active and reachable.

Related Concepts

 LSA (Link State Advertisement): While Hellos find neighbors, LSAs are the packets
that actually share routing information.
 DR/BDR Election: In multi-access networks (like Ethernet), Hello packets are used to
elect the Designated Router and Backup Designated Router.

C2 Question 3: Which range represents all the IP addresses that are affected when network
[Link] with a wildcard mask of [Link] is used in an ACE?

The Correct Answer

 [Link] through [Link]

Detailed Explanation
To find the end of the range, you add the wildcard mask to the network address:

 $10 + 0 = 10$
 $120 + 0 = 120$
 $160 + 7 = 167$
 $0 + 255 = 255$

The wildcard mask [Link] tells the Access Control Entry (ACE) to ignore the last 11
bits of the address ($7$ in the third octet is binary 00000111), meaning any address
starting with the first 21 bits of [Link] will match.

Mnemonics/Quick Tips

 Quick Tip: To calculate the range quickly, just add the wildcard octets to the network
address octets.

C2 Question 7: What three items are components of the CIA triad?

The Correct Answer

1. Confidentiality
2. Integrity
3. Availability

Detailed Explanation

 Confidentiality: Ensuring only authorized users can access sensitive data (often via
encryption).
 Integrity: Ensuring data has not been altered or corrupted during transit or storage (often
via hashing).
 Availability: Ensuring that authorized users have reliable and timely access to data and
resources.
C2 Question 10: Which protocol or service can be configured to send unsolicited messages
to alert the network administrator about a network event such as an extremely high CPU
utilization on a router?

The Correct Answer

 SNMP (Simple Network Management Protocol) Traps

Detailed Explanation

While standard SNMP involves a management station "polling" a device for info, an SNMP
Trap is an unsolicited message sent by the device itself to the manager when a specific threshold
(like 90% CPU) is crossed. This allows for real-time alerting without waiting for the next poll.

Related Concepts

 Syslog: A similar service that sends system log messages to a central server, but Traps are
more specifically designed for network management alerts.
 MIB (Management Information Base): The "dictionary" that defines what data points
the SNMP manager can monitor.

SECTION D

1. Which network security device filters known and suspicious internet malware sites?

The Correct Answer: Web Security Appliance (WSA) or Content Filter

 Detailed Explanation: A WSA (or a Secure Web Gateway) acts as a proxy for web
traffic. It analyzes the URLs of websites users try to visit against a database of known
malicious sites. It can also perform real-time scanning of web content for malware
signatures.
 Related Concepts: URL Filtering (blocking specific addresses) and Reputation
Filtering (blocking sites based on their "trust" score).
  Mnemonics/Quick Tips: Think of the WSA as a Web Screening Agent. It guards the
"doorway" to the internet.

2. Which network security device is used to provide secure services with corporate sites and
remote access support for remote users using secure encrypted tunnels?

The Correct Answer: VPN Gateway (or VPN Concentrator)

 Detailed Explanation: A VPN (Virtual Private Network) gateway creates an encrypted

"tunnel" over a public network (like the internet). This allows remote workers to access
internal corporate resources as if they were physically connected to the office network.
 Related Concepts: IPsec (used for site-to-site tunnels) and SSL/TLS VPNs (often used
for individual remote access).
 Mnemonics/Quick Tips: Think of a Tunnel. A VPN provides a private "tunnel" through
the public "mountain" of the internet.

4. Which security term is used to describe a weakness in a system, or its design, that could
be exploited by a threat?

The Correct Answer: Vulnerability

 Detailed Explanation: A vulnerability is a flaw or "hole" in a system’s armor. It could be

a bug in code, a misconfigured firewall, or even an unlocked door. It is important to
distinguish this from a Threat (the actor/event that might cause harm) and a Risk (the
probability of that threat exploiting the vulnerability).
 Related Concepts: Attack Surface (all the vulnerabilities a system has) and Exploit (the
tool or method used to take advantage of a vulnerability).
 Mnemonics/Quick Tips: Vulnerability = Very weak spot.

5. Which WAN term defines the point where the subscriber connects to the service
provider's network?

The Correct Answer: Demarcation Point (Demarc)

  Detailed Explanation: The "Demarc" is the physical point where the ISP's (Internet
Service Provider) responsibility ends and the customer's responsibility begins. Usually,
this is a box on the side of a building or a jack in a server room.
 Related Concepts: Customer Premises Equipment (CPE) (devices located at the user's
site) and the Local Loop (the cable connecting the demarc to the ISP).
 Mnemonics/Quick Tips: Think of it as a "Mark" in the sand. On one side is their
equipment; on the other side is yours.

6. Which type of WAN network design is the most fault-tolerant?

The Correct Answer: Full Mesh Topology

 Detailed Explanation: In a full mesh design, every site is connected directly to every
other site. If one link fails, there are multiple redundant paths for data to travel. It is
highly reliable but very expensive to implement.
 Related Concepts: Partial Mesh (more common/cheaper) and Hub-and-Spoke
(vulnerable to a single point of failure at the hub).
 Mnemonics/Quick Tips: Mesh = Many paths.

7. What algorithm is used to provide data integrity of a message through the use of a
calculated hash value with a key?

The Correct Answer: HMAC (Hash-based Message Authentication Code)

 Detailed Explanation: While a standard hash (like MD5 or SHA-256) ensures integrity,
an HMAC adds a secret key. This proves both that the data hasn't been changed
(integrity) and that the sender is who they say they are (authentication).
 Related Concepts: Hashing (one-way math functions) and Digital Signatures (which
use asymmetric keys).
 Mnemonics/Quick Tips: HMAC = Hash + Message Authentication Code. The "K" for
Key is implied in the "Authentication."

8. In which four OSI layers can IPsec protect traffic?

The Correct Answer: Layers 3, 4, 5, 6, and 7 (Functionally protecting the Payload and the
Network Layer)

 Detailed Explanation: This is a tricky technical question. IPsec operates at Layer 3

(Network Layer). However, because it encrypts the entire IP packet, it effectively
protects everything above it (Transport, Session, Presentation, and Application). Most
exams look for the answer: Network Layer (Layer 3) as the operating layer, but it
secures everything from Layer 3 to Layer 7.
 Related Concepts: Encapsulating Security Payload (ESP) and Authentication Header
(AH).
 Mnemonics/Quick Tips: IPsec = IP Security. Since IP is Layer 3, that’s where the
"magic" happens.

9. What is the function of PoE pass-through?

The Correct Answer: To allow a device to receive Power over Ethernet and then "pass it
through" to another downstream device.

 Detailed Explanation: PoE pass-through is found on certain switches or access points. It

allows the device to be powered by an upstream PoE switch and then share that remaining
power with a second device (like a VoIP phone or a camera), eliminating the need for a
power outlet for the second device.
 Related Concepts: PoE Injector and PoE Standards (802.3af/at/bt).
 Mnemonics/Quick Tips: It acts like a power strip for Ethernet cables.

10. Which Cloud computing service would be best for an organization that needs to
collaboratively create applications and deliver them over the web?

The Correct Answer: PaaS (Platform as a Service)

 Detailed Explanation: PaaS provides a framework for developers. It includes the

operating system, development tools, and database management, allowing teams to focus
on coding without worrying about the underlying hardware or server maintenance.
  Related Concepts: SaaS (Software as a Service - for end users) and IaaS (Infrastructure
as a Service - for network admins).
 Mnemonics/Quick Tips: PaaS is for Programmers.

2024

Section A2: Cisco 1 - Structural

1. What are the various ways to access the CLI of a Cisco switch?

 The Correct Answer: Console port, Telnet, and SSH.

 Detailed Explanation: The Console port provides "out-of-band" access via a physical
cable (no network needed). Telnet and SSH provide "in-band" access over the network.
SSH is preferred because it encrypts the session, whereas Telnet sends data in plaintext.
 Related Concepts: VTY (Virtual Terminal) lines, AUX ports, Out-of-band vs. In-band
management.
 Mnemonics/Quick Tips: C.T.S. (Console, Telnet, SSH).

2. In order to assign an IP address to a router interface, which mode must it be done?

 The Correct Answer: Interface Configuration Mode.

 Detailed Explanation: You must first enter Global Configuration mode (configure
terminal) and then specify the interface (e.g., interface gigabitethernet 0/0) before
applying the ip address command.
 Related Concepts: User EXEC mode, Privileged EXEC mode, Global Configuration
mode.
 Mnemonics/Quick Tips: You have to be "inside" the specific door (interface) to paint it
(assign the IP).

3. What is the main function of the NVRAM?

 The Correct Answer: To store the startup-configuration file.

 Detailed Explanation: NVRAM (Non-Volatile RAM) retains data even when the device
is powered off. It ensures the router/switch loads your saved settings upon reboot.
  Related Concepts: RAM (running-config), ROM (POST/Bootstrap), Flash (IOS Image).
 Mnemonics/Quick Tips: NVRAM = Never Vanishes (permanent storage).

4. Outline the steps and commands used to assign a console password in a switch.

 The Correct Answer: 1. line console 0

2. password [yourpassword]

3. login

 Detailed Explanation: You enter the console line configuration, set the string, and
crucially, use the login command to tell the switch to actually prompt for that password.
 Related Concepts: service password-encryption (to hide passwords in the config file).
 Mnemonics/Quick Tips: Don't forget the Login command, or the password will exist but
never be requested!

5. List at least two (2) transport layer protocols.

 The Correct Answer: TCP (Transmission Control Protocol) and UDP (User Datagram
Protocol).
 Detailed Explanation: TCP is connection-oriented (reliable), while UDP is
connectionless (fast/low overhead).
 Related Concepts: Port numbers, Layer 4 of the OSI model.
 Mnemonics/Quick Tips: TCP = Takes care (reliable); UDP = Urgent Delivery Possible
(fast).

6. Fiber optic cable cut scenario: What characteristic of the network is shown?

 The Correct Answer: Fault Tolerance (Redundancy).

 Detailed Explanation: Because there was a second path available for data to travel, the
network "tolerated" the fault of a cut cable with minimal disruption.
 Related Concepts: High Availability, Scalability, Quality of Service (QoS).
  Mnemonics/Quick Tips: Fault Tolerance means the network can "tolerate" a "fault"
(failure).

7. Usable hosts formula ($2^{n} - 2$): Why is 2 subtracted?

 The Correct Answer: To account for the Network Address and the Broadcast Address.
 Detailed Explanation: The first address in a subnet represents the network itself, and the
last address is used to broadcast to all hosts. Neither can be assigned to an individual
device.
 Related Concepts: Subnetting, IPv4 addressing.
 Mnemonics/Quick Tips: One for the Network, one for the Broadcast.

8. What is the default subnet mask for a class B IP address?

 The Correct Answer: [Link] (or /16).

 Detailed Explanation: Class B addresses ([Link] to [Link]) use the first two
octets for the network portion.
 Related Concepts: Class A ([Link]), Class C ([Link]).
 Mnemonics/Quick Tips: Class B has Both of the first two octets full.

10-12. Refer to the Tracert Exhibit:

 Role of Tracert: To identify the path (hops) taken by a packet to reach a destination and
measure transit delays.
 Cisco Equivalent: traceroute
 Number of Hops: 5 (The trace shows 5 distinct lines/IPs before "Trace complete").

13. How many hosts are addressable on a mask of [Link]?

 The Correct Answer: 6 usable hosts.

 Detailed Explanation: 248 in the last octet leaves 3 bits for hosts ($2^3 = 8$). Subtract 2
for network/broadcast = 6.
 Related Concepts: VLSM, CIDR (/29).
Section B2: Cisco 2 & 3 Structural

1. The router is a computer. Explain.

 The Correct Answer: Like a PC, a router has a CPU, memory (RAM/ROM), and an
Operating System (Cisco IOS).
 Detailed Explanation: It performs specialized computing tasks—specifically routing
packets—using hardware architecture very similar to a desktop computer.

2. Function of router parts:

 CPU: Executes IOS instructions.

 RAM: Stores the running-config and routing tables (volatile).
 ROM: Stores bootstrap code and POST (Power-On Self-Test).
 NVRAM: Stores the startup-config.
 Flash: Stores the Cisco IOS software image.

3. Where is the running configuration stored?

 The Correct Answer: RAM.

4. Short notes on Static and Dynamic routing:

 Static: Manually configured by an admin. Best for small/stable networks. Low overhead.
 Dynamic: Routers use protocols (like OSPF or EIGRP) to learn paths automatically. Best
for large/changing networks. High overhead.

5. What does the command series line vty 0 15 etc. do?

 The Correct Answer: Configures Telnet/SSH access for 16 concurrent users with the
password "strongtelnetpass".

Section C2: Structural (EIGRP & STP)

1a. Routing protocol and category (Exhibit 3):

  Protocol: EIGRP (seen in the router eigrp 1 command).
 Category: Distance Vector (Advanced/Hybrid).

1b. network [Link] [Link] & Wildcard mask:

 Goal: To enable EIGRP on all interfaces starting with 192.168.x.x.

 [Link]: This is called a Wildcard Mask.

1c. Why did R1 and R2 not establish adjacency?

 The Correct Answer: Mismatched Autonomous System (AS) numbers.

 Explanation: R1 is configured for router eigrp 1, while R2 is configured for router eigrp
2. They must match to form an adjacency.

2a-c. STP (Spanning Tree Protocol):

 Need for STP: To prevent Layer 2 loops and broadcast storms in networks with
redundant links.
 Root Bridge Election: Switch S2. Why? It has the lowest MAC address
(000A00031111) while all switches share the same default Priority (32768).
 Port Nature: Ports on the Root Bridge (S2) are all Designated. Ports facing the root
bridge on other switches are Root Ports. Redundant paths are Blocked.

Section D2: Structural (WAN & Security)

1. Full meaning of CPE and function:

 Meaning: Customer Premises Equipment.

 Function: Equipment located at the subscriber's site (routers, modems) that connects to
the service provider.

2. Function of CSU/DSU:

 The Correct Answer: To convert digital signals from a router into signals compatible
with a digital leased line (WAN).
3. Three WAN connection types:

1. Leased Lines: Dedicated point-to-point (T1/E1).

2. Circuit Switched: Dial-up or ISDN (temporary).
3. Packet Switched: Frame Relay, ATM, or Metro Ethernet (shared).

4. Point-to-Point Connection:

 What it is: A direct link between two nodes.

 Situation: Used when connecting a main office to a remote branch office requiring
dedicated bandwidth.

5. ACL Criteria:

 Answer: Source IP, Destination IP, Protocol (TCP/UDP), and Port numbers.

6. Types of Firewalls:

 Packet Filtering: Checks headers (fastest).

 Stateful Inspection: Tracks the state of active connections.
 Application Gateway (Proxy): Filters based on application data (slowest but most
secure).

2025

Section A2: Structural (OSI & IP Fundamentals)

1. How is the message called at the Transport layer of the OSI model?

 The Correct Answer: Segment.

 Detailed Explanation: As data moves down the OSI stack, it is encapsulated with
headers. At Layer 4 (Transport), the data from the upper layers is broken into manageable
pieces called segments.
 Related Concepts: Data Link Layer (Frames), Network Layer (Packets), and
Physical Layer (Bits).
  Mnemonics/Quick Tips: Segment for Sending (Transport).

2. What subnet mask do the slash notation /21 represent?

 The Correct Answer: [Link].

 Detailed Explanation: A /21 prefix means the first 21 bits are set to 1. This fills the first
two octets (16 bits) and leaves 5 bits in the third octet ($128+64+32+16+8 = 248$).
 Related Concepts: CIDR (Classless Inter-Domain Routing) and Subnetting.

3. Which subnet mask would be used if exactly 4 host bits are available?

 The Correct Answer: [Link] (or /28).

 Detailed Explanation: If 4 bits are for hosts, then 4 bits in the last octet must be for the
network ($128+64+32+16 = 240$).
 Related Concepts: Variable Length Subnet Masking (VLSM).

4. Which two parts are components of an IPv4 address?

 The Correct Answer: Network portion and Host portion.

 Detailed Explanation: The network portion identifies the specific network, while the
host portion identifies the specific device on that network.

5. If a device has a mask of /31, how many IP addresses are available for hosts?

 The Correct Answer: 2 usable host addresses (in specific modern contexts like point-
to-point links) or 0 in traditional math.
 Detailed Explanation: Using the formula $2^1 - 2 = 0$. However, RFC 3021 allows /31
for point-to-point links where the "network" and "broadcast" addresses are used as the
two host IPs.
 Quick Tip: On Cisco exams, unless specified as point-to-point, /30 is usually the smallest
subnet for hosts.

10. List two engineering organizations which define open standards and protocols for the
data link layer.
  The Correct Answer: IEEE (Institute of Electrical and Electronics Engineers) and ISO
(International Organization for Standardization).

Section B2: Structural (Switching & Operations)

1. Where should the IP address be assigned in a router-on-a-stick topology?

 The Correct Answer: On the Router's Subinterfaces.

 Detailed Explanation: Since the router uses one physical interface for multiple VLANs,
you create virtual subinterfaces (e.g., G0/0.10) for each VLAN.
 Related Concepts: VLAN Trunking (802.1Q) and Inter-VLAN Routing.

4. Advantage of RSTP over STP?

 The Correct Answer: Faster Convergence.

 Detailed Explanation: Standard STP can take 30–50 seconds to transition a port. RSTP
(Rapid Spanning Tree) does this in a few seconds or less.

8. Which address does a DHCPv4 server target when sending a DHCPOFFER?

 The Correct Answer: Layer 2 Broadcast (or Layer 3 Broadcast depending on

implementation).
 Detailed Explanation: Since the client doesn't have an IP yet, the server sends the offer
to MAC FF:FF:FF:FF:FF:FF.

10. Function of MAC and LLC sublayers?

 The Correct Answer: MAC controls hardware access; LLC handles protocol
identification and flow control.
 Detailed Explanation: These two make up Layer 2. MAC deals with physical addresses,
while LLC communicates with the Network Layer.
Section C2: Structural (Routing Protocols)

2. Explain how OSPF operates and which other protocol can you use apart from OSPF?

 The Correct Answer: OSPF is a Link-State protocol that uses the Dijkstra algorithm
to build a map of the network. Alternative: EIGRP or RIP.
 Detailed Explanation: OSPF routers exchange LSAs (Link State Advertisements) to
ensure every router has the exact same view of the topology.

5. Explain the concept of Route Redistribution.

 The Correct Answer: Sharing routing information from one routing protocol into
another.
 Detailed Explanation: If a company uses both OSPF and EIGRP, a "boundary router"
must translate routes between them so all networks are reachable.

Section D2: Structural (WAN & New Technologies)

1. What is the term for the area of a network affected when a device fails?

 The Correct Answer: Failure Domain.

2. Layer in Cisco Borderless design used as the backbone?

 The Correct Answer: Core Layer.

 Detailed Explanation: The 3-layer model consists of Access, Distribution, and Core. The
Core is the high-speed "highway."

3. Feature used to combine multiple physical links into one logical link?

 The Correct Answer: EtherChannel (or LACP/PAgP).

 Detailed Explanation: This increases bandwidth and provides redundancy without STP
blocking the extra ports.

5. What do you understand by IOT?

  The Correct Answer: Internet of Things.
 Detailed Explanation: The network of physical objects ("things") embedded wit sensors
and software for the purpose of connecting and exchanging data with other devices over
the internet.

11. Explain Network Address Translation (NAT).

 The Correct Answer: Translating private (internal) IP addresses to a public (external) IP

address.
 Detailed Explanation: This conserves IPv4 addresses and provides a layer of security by
hiding internal IP schemes.

14. Function of LCP and NCP protocols?

 The Correct Answer: LCP (Link Control Protocol) establishes and tests the link; NCP
(Network Control Protocol) configures the specific Layer 3 protocols (like IP).
 Detailed Explanation: Both are components of PPP (Point-to-Point Protocol).