CCNA Discovery 4 Module 8 Exam Answers Version 4.0

1. Which mechanism is used to create a floating static route?
• administrative distance

2. IPSec operates at which layer of the OSI model?
• network

3. Which is true regarding Frame Relay LMI?
• There are three LMI types standardized by ANSI, ITU-T, and Cisco.

4. Which statement identifies the IP address design for subinterfaces that are configured for a Frame Relay network?
• Multipoint configurations require IP addresses for each subinterface on each router to be a part of the same subnet.

5. Which three algorithms can be used to encrypt user data in an IPSec VPN framework? (Choose three.)
• 3DES
• AES
• DES

6. Which flag is set by a Frame Relay switch to inform the receiving station that congestion was experienced?
• FECN

7. Refer to the exhibit. The complete configuration of a Frame Relay interface on the Chicago router is shown. How does the Chicago router know which DLCI is mapped to the IP address of the remote router?
• Inverse ARP

8. What statement correctly defines the purpose of the split horizon rule?
• prevents routers from advertising a network through the interface from which the update came

9. Which PVC status suggests that the router recognizes the DLCI configured on its interface as being present on the Frame Relay switch, but the PVC associated with the DLCI is not capable of end-to-end communication?
• inactive

10. Refer to the exhibit. Which router command is used to associate a Layer 2 address with the corresponding Layer 3 address?
• Miller(config-if)#frame-relay map ip 172.16.150.2 110

11. A network administrator issued the command show frame-relay pvc. The response from the router shows the status of a PVC as deleted. What is the reason for this status?
• The DLCI configured on the CPE device does not match the DLCI.

12. What is one benefit of using a network simulation software package?
• The network design can be tested before it is actually implemented.

13. What are two components a network designer considers when planning a VPN? (Choose two.)
• encryption algorithm for privacy and security
• encapsulation protocol to use when creating the VPN tunnel

14. When identifying VPN requirements for endpoint users, what care must be taken to protect the network when remote users log in from unsecured public locations?
• Ensure that remote users can only access network resources that are appropriate to their job function.

15. Which two components are key elements when implementing a VPN? (Choose two.)
• encryption
• encapsulation

16. What tool can help ease the configuration of VPN servers on routers?
• Cisco SDM

17. What is used to identify the path to the next frame-relay switch in a Frame Relay network?
• DLCI

18. Which two statements are true regarding VPN security? (Choose two.)
• Users that connect to a network through a VPN are are considered trusted users on the network.
• Users may establish a VPN connection from unsecure locations such as airports and hotel lobbies.

19. Refer to the exhibit. What is placed in the address field of a frame that will travel from the Orlando office to the DC office?
• DLCI 100

20. Two directly connected routers are able to ping each other through the Serial 0/0/0 interfaces. A network administrator changes the encapsulation on one router to PPP, and the other is left at the default value. What statement would appear in the output of the show interfaces command issued on one of the routers?
• Serial 0/0/0 is up, line protocol is down

21. Refer to the exhibit. What statement is true about the configuration shown for R2?
• R2 is configured as the Frame Relay switch.

22. A company uses serial interfaces on its border router to connect to branch offices through WAN connections. The security policy dictates that the encapsulation should use PPP with authentication protocol CHAP. Which statement is true about the configuration requirement of CHAP?
• Both the username and password are case sensitive.

23. Which two statements about split tunnels are true? (Choose two.)
• Traffic to the corporate network will be encrypted.

24. An IP address has been assigned to the S0/0/0 interface of a new Cisco router. The administrator wishes to quickly test basic connectivity with the serial interface of an adjoining Cisco router via the use of the default WAN protocol. Which WAN protocol will be used for this test?
• HDLC

25. Which two statements about split tunnels are true? (Choose two.)
• Traffic to the corporate network will be encrypted.
• Traffic to public web sites and general Internet navigation is not encrypted.