642-832 From Boston

Cisco

Number: 642-832Passing Score: 800Time Limit: 120 minFile Version: 1.0

Exam A

QUESTION 1The following commands are issued on a Cisco Router:

Router(configuration)#access-list 199 permit tcp host 10.1.1.1 host 172.16.1.1Router(configuration)#access-list 199 permit tcp host 172.16.1.1 host 10.1.1.1Router(configuration)#exitRouter#debug ip packet 199

What will the debug output on the console show?

A. All IP packets passing through the router

B. Only IP packets with the source address of 10.1.1.1

C. All IP packets from 10.1.1.1 to 172.16.1.1

D. All IP Packets between 10.1.1.1 and 172.16.1.1

Answer: DSection: (none)

Explanation/Reference:

QUESTION 2What level of logging is enabled on a Router where the following logs are seen?

%LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed stateto up

A. alerts

B. critical

C. errors

D. notifications



QUESTION 3What level of logging is enabled on a Router where the following logs are seen?

%LINK-3-UPDOWN: Interface Serial0/0, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to up

A. These two log messages will not have a severity level. They are not errors but are just informationalmessages.

B. The first log message is categorized as a warning message.

C. These messages regarding interface status are normal output and will always be displayed when youexit config mode.

D. The first log message is an error message with a severity level of 3.

E. The second message would be shown if the logging consol warning command had been issued.



QUESTION 4You have the followings commands on your Cisco Router:

ip ftp username adminip ftp password backup

You have been asked to switch from FTP to HTTP. Which two commands will you use to replace theexisting commands?

A. ip http username admin

B. ip http client username admin

C. ip http password backup

D. ip http client password backup

E. ip http server username admin

F. ip http server password backup

Answer: BDSection: (none)


QUESTION 5You have 2 NTP servers in your network - 10.1.1.1 and 10.1.1.2. You want to configurationure a Ciscorouter to use 10.1.1.2 as its NTP server before falling back to 10.1.1.1. Which commands will you use toconfigurationure the router?

A. ntp server 10.1.1.1ntp server 10.1.1.2

B. ntp server 10.1.1.1ntp server 10.1.1.2 primary

C. ntp server 10.1.1.1ntp server 10.1.1.2 prefer

D. ntp server 10.1.1.1 fallbackntp server 10.1.1.2

Answer: CSection: (none)

Explanation/Reference:Preferred server

A router can be configured to prefer an NTP source over another. A preferred server's responses arediscarded only if they vary dramatically from the other time sources. Otherwise, the preferred server isused for synchronization without consideration of the other time sources. Preferred servers are usuallyspecified when they are known to be extremely accurate. To specify a preferred server, use the prefer

keyword appended to the ntp server command. The following example tells the router to prefer

TimeServerOne over TimeServerTwo:

Router#config terminalEnter configuration commands, one per line. End with CNTL/Z.Router(config)#ntp server TimeServerOne preferRouter(config)#ntp server TimeServerTwoRouter(config)#^Z

http://oreilly.com/catalog/hardcisco/chapter/ch10.html

http://www.cisco.com/en/US/docs/ios/netmgmt/command/reference/nm_10.html#wp1123176

QUESTION 6The following command is issued on a Cisco Router:

Router(configuration)#logging console warnings

Which alerts will be seen on the console?

A. Warnings only

B. debugging, informational, notifications, warnings

C. warnings, errors, critical, alerts, emergencies

D. notifications, warnings, errors

E. warnings, errors, critical, alerts



QUESTION 7Which two of the following options are categories of Network Maintenance tasks?

A. Firefighting

B. Interrupt-driven

C. Policy-based

D. Structured

E. Foundational

Answer: BDSection: (none)


QUESTION 8You enabled CDP on two Cisco Routers which are connected to each other. The Line and Protocol statusfor the interfaces on both routers show as UP but the routers do not see each other a CDP neighbors.Which layer of the OSI model does the problem most likely exist?

A. Physical

B. Session

C. Application

D. Data-Link

E. Network



QUESTION 9FCAPS is a network maintenance model defined by ISO. It stands for which of the following ?

A. Network

B. Fault Management

C. Action Management

D. Configuration Management

E. Protocol Management

F. Security Management

Answer: BDFSection: (none)

Explanation/Reference:Answer: A,C,E

QUESTION 10There are many Network Maintenance models. Match the model names on the left to the options on theright:

Answer:

Section: (none)

Explanation/Reference:FCAPS -> Fault, Configurationuration , Accounting, Performance and Security (ISO)ITIL -> A collection of best practice recommendationsCisco Lifecycle -> Often referred to as the PPDIOO model TMN -> Telecommunications Management Network

ITIL - framework for best practices for IT service managementFCAPS - defined by ISO and divides network management into five defferent categoriesTMN - The ITU-T integrated and defined an existing maintenance model to create approach a type ofnetworkCisco Lifecycle Services - Sometimes called the PPDIOO model

QUESTION 11Match the items on the left to their purpose on the right

Answer:

Section: (none)

Explanation/Reference:EEM -> CLI based Management and MonitoringSDM -> Provides a GUI for AdministrationFTP -> Used for Backup and Restore

QUESTION 12The following trouble ticket consists of a problem description and existing configuration on the device.

Figure 1

Figure 2

Trouble Ticket Statement:

Client 1 is able to ping 10.1.1.2 but not 10.1.1.1. Initial troubleshooting shows that R1 does not have anyOSPF neighbors or any OSPF routes

Configuration on R1:

router ospf 1CertKiller.comlog-adjacency-changesnetwork 10.1.1.0 0.0.0.3 area 12default-information originate always!interfaceSerial0/0/0/0.12 point-to-pointip address 10.1.1.1 255.255.255.252ip nat insideip ospf message-digest-key 1 md5 TSHOOT


router ospf 1log-adjacency-changesnetwork 10.1.1.0 0.0.0.3 area 12!.certkiller.com 8

interfaceSerial0/0/0/0.12 point-to-pointip address 10.1.1.2 255.255.255.252ip ospf authentication message-digest

ip ospf message-digest-key 1 md5 TSHOOT

On which device is the fault condition located?

A. R1

B. R2

C. DSW1

D. Client1

Answer: ASection: (none)



Figure 1

Figure 2




router ospf 1CertKiller.comlog-adjacency-changesnetwork 10.1.1.0 0.0.0.3 area 12default-information originate always!interface Serial0/0/0/0.12 point-to-pointip address 10.1.1.1 255.255.255.252ip nat insideip ospf message-digest-key 1 md5 TSHOOT


router ospf 1log-adjacency-changesnetwork 10.1.1.0 0.0.0.3 area 12!

interfaceSerial0/0/0/0.12 point-to-pointip address 10.1.1.2 255.255.255.252ip ospf authentication message-digestip ospf message-digest-key 1 md5 TSHOOT

Which technology is the Fault Condition related to?

A. NAT

B. OSPF

C. Static Routing

D. Switch to Switch Connectivity

Answer: BSection: (none)



Figure 1

Figure 2




router ospf 1CertKiller.comlog-adjacency-changesnetwork 10.1.1.0 0.0.0.3 area 12default-information originate always!interfaceSerial0/0/0/0.12 point-to-pointip address 10.1.1.1 255.255.255.252ip nat insideip ospf message-digest-key 1 md5 TSHOOT


router ospf 1log-adjacency-changesnetwork 10.1.1.0 0.0.0.3 area 12!interfaceSerial0/0/0/0.12 point-to-pointip address 10.1.1.2 255.255.255.252ip ospf authentication message-digestip ospf message-digest-key 1 md5 TSHOOT

What is the solution of the fault condition?

A. ip ospf authentication message-digest command has to be added on S0/0/0/0.12

B. ip ospf authentication message-digest command has to be added under the OSPF routing

process

C. A static route to 10.1.1.4 must be added on R1

D. ip nat outside must be added on S0/0/0/0.12




Figure 1

Figure 2

Trouble Ticket Statement

HSRP has been configurationured between DSW1 and DSW2. DSW1 is configurationured to be activerouter but it never becomes active even though the HSRP communication between DSW1 and DSW2 isworking.

Configuration on DSW1

track 1 ip route 10.1.21.128 255.255.0.0 metric threshold threshold metric up1 down 2!track 10 ip route 10.2.21.128 255.255.255.0 metric threshold threshold metricup 63 down 64!interface Vlan10ip address 10.2.1.1 255.255.255.0standby 10 ip 10.2.1.254standby 10 priority 200standby 10 preemptstandby 10 track 1 decrement 60

Configuration on R4

interface loopback0ip address 10.2.21.128 255.255.255.0


A. R4

B. DSW2

C. DSW1

D. R3




Figure 1

Figure 2





Configuration on R4



A. GLBP

B. HSRP

C. OSPF





Figure 1

Figure 2





Configuration on R4


What is the solution of fault condition?

A. Change standby priority to 140

B. Change standby priority to 260

C. Change standby 10 track 1 decrement 60 to standby 10 track 10 decrement 60

D. Change standby 10 track 1 decrement 60 to standby 10 track 1 decrement 100




Figure 1

Figure 2


Client 1 is able to ping 209.65.200.226 but not the Web Server at 209.65.200.241. Initial troubleshootingshows and R1 does not have any BGP routes. R1 also does not show any active BGP neighbor

Configuration on R1

router bgp 65001no synchronizationbgp log-neighbor-changesnetwork 209.65.200.224 mask 255.255.255.252neighbor 209.56.200.226 remote-as 65002no auto-summary


A. R1

B. DSW1

C. R4

D. R2




Figure 1

Figure 2


Client 1 is able to ping 209.65.200.226 but not the Web Server at 209.65.200.241. Initial troubleshootingshows and R1 does not have any BGP routes. R1 also does not show any active BGP neighbor

Configuration on R1



A. EIGRP

B. HSRP

C. BGP

D. OSPF



QUESTION 20

The following trouble ticket consists of a problem description and existing configuration on the device.

Figure 1

Figure 2


Client 1 is able to ping 209.65.200.226 but not the Web Server at 209.65.200.241. Initial troubleshootingshows and R1 does not have any BGP routes. R1 also does not show any active BGP neighbors.

Configuration on R1



A. Enable BGP synchronization

B. Change neighbor 209.56.200.226 remote-as 65002 statement to neighbor209.56.200.226 remote-as 65001

C. Change neighbor 209.56.200.226 remote-as 65002 statement to neighbor209.65.200.226 remote-as 65002

D. Change neighbor 209.56.200.226 remote-as 65002 statement to neighbor209.65.200.226 remote-as 65001




Figure 1

Figure 2


Client 1 and Client 2 are not able to reach the WebServer at 209.65.200.241. Initial troubleshooting showsthat DSW1, DSW2 and all the routers are able to reach the WebServer

Configuration on R1

ip nat inside source list nat_pool interface Serial0/0/0/1 overload!ip access-list standard nat_poolpermit 10.1.0.0!interface Serial0/0/0/1ip address 209.65.200.224 255.255.255.252ip nat outside!interfaceSerial0/0/0/0.12ip address 10.1.1.1 255.255.255.252ip nat insideip ospf message-digest-key 1 md5 TSHOOTip ospf authentication message-digest

On Which device is the fault condition located?

A. R1

B. DSW1

C. R4

D. R2


Explanation/Reference:CertKiller.com


Figure 1

Figure 2


Client 1 and Client 2 are not able to reach the WebServer at 209.65.200.241. Initial troubleshooting showsthat DSW1, DSW2 and all the routers are able to reach the WebServer.

Configuration on R1



A. EIGRP

B. HSRP

C. BGP

D. NAT




Figure 1

Figure 2


Client 1 and Client 2 are not able to reach the WebServer at 209.65.200.241. Initial troubleshooting showsthat DSW1, DSW2 and all the routers are able to reach the WebServer.

Configuration on R1



A. Add a permit 10.2.0.0 statement in nat_pool access-list

B. Remove the permit 10.1.0.0 statement from nat_pool access-list

C. Change the ip nat inside source list nat_pool interface Serial0/0/0/1 overload

statement to:ip nat inside source list nat_pool interface Serial0/0/0/0.12 overload

D. Change the ip nat outside statement under Serial0/0/0/1 configuration to ip nat inside




Figure 1

Figure 2


Client 1 is not able to reach the WebServer at 209.65.200.241. Initial troubleshooting shows that R1 is alsonot able to reach the WebServer. R1 also does not have any active BGP neighbor.

Configuration on R1

router bgp 65001no synchronizationbgp log-neighbor-changesnetwork 209.65.200.224 mask 255.255.255.252neighbor 209.65.200.226 remote-as 65002no auto-summary!access-list 30 permit host 209.65.200.241access-list 30 deny 10.1.0.0 0.0.255.255access-list 30 deny 10.2.0.0 0.0.255.255!interface Serial0/0/0/1ip address 209.65.200.224 255.255.255.252ip nat outsideip access-group 30 in


A. R1

B. DSW1

C. R4

D. R2




Figure 1

Figure 2



Configuration on R1



A. IP Access

B. IP NAT

C. BGP

D. IP Access List




Figure 1

Figure 2



Configuration on R1



A. Add permit statement for 209.65.200.224/30 network in access list 30

B. Remove both deny Statements from access-list 30

C. Change the neighbor 209.65.200.226 remote-as 65002 statement to neighbor209.65.200.226 remote-as 65001

D. Use extended access-list instead of standard access-list




Figure 1

Figure 2


Client 1 is getting an IP address from the DHCP server but is not able to ping DSW1 or the FTP Server


vlan access-map test1 10dropmatch ip address 10!vlan filter test1 vlan-list 10!ip access-list standard 10permit 10.2.0.0 0.0.255.255!Interface VLAN10ip address 10.2.1.1 255.255.255.0!


A. R4

B. DSW1

C. Client 1

D. FTP Server




Figure 1

Figure 2






A. VLAN Access Map

B. InterVLAN communication

C. DHCP

D. IP Access List




Figure 1

Figure 2






A. Configurationure Static IP Address on Client 1

B. Change the IP Address of VLAN 10 on DSW1

C. Add Permit any statement to access-list 10

D. Remove VLAN filter test1 from DSW1

Answer: D

Section: (none)



Figure 1

Figure 2


Client one is getting a 169.x.x.x IP address and is not able to ping Client 2 or DSW1. Inital troubleshootingshows that port Fa1/0/1 on ASW1 is in errdisable state.

Configuration on ASW1

Interface FastEthernet1/0/1switchport mode accessswitchport port-securityswitchport port-security mac-address 0000.0000.0001


A. DSW1

B. ASW1

C. Client 1

D. FTP Server




Figure 1

Figure 2






A. VLAN Access Map


C. DHCP

D. Port Security




Figure 1

Figure 2






A. Configurationure Static IP Address on Client 1


C. Issue shutdown command followed by no shutdown command on port fa1/0/1 on ASW1

D. Issue the no switchport port-security mac-address 0000.0000.0001 command followed

by shutdown and no shutdown command on port fa1/0/1 on ASW1

E. Issue no switchport port-security mac-address 0000.0000.0001 command on port

fa1/0/1 on ASW1




Figure 1

Figure 2


Client 1 and Client 2 are getting a 169.x.x.x IP address and are not able to ping DSW1 or the FTP Server.They are able to ping each other.


Interface FastEthernet1/0/1switchport mode accessswitchport access vlan 1!Interface FastEthernet1/0/2switchport mode accessswitchport access vlan 1


A. DSW1

B. ASW1

C. Client 1

D. FTP Server




Figure 1

Figure 2




interface FastEthernet1/0/1switchport mode accessswitchport access vlan 1!interface FastEthernet1/0/2switchport mode accessswitchport access vlan 1


A. VLAN


C. DHCP. 50

D. Port Security




Figure 1

Figure 2




interface FastEthernet1/0/1switchport mode accessswitchport access vlan 1!interface FastEthernet1/0/2switchport mode accessswitchport access vlan 1


A. Given an IP address to VLAN 1 on DSW1


C. Issue the switchport access vlan 10 command on interfaces fa1/0/1 and fa1/0/2 on ASW1

D. Give static IP addresses to Client 1 and Client 2




Figure 1

Figure 2




Interface PortChannel13switchport mode trunkswitchport trunk allowed vlan 1-9!Interface PortChannel23switchport mode trunkswitchport trunk allowed vlan 1-9!Interface FastEthernet1/0/1switchport mode accessswitchport access vlan 10!Interface FastEthernet1/0/2switchport mode accessswitchport access vlan 10!


A. ASW1

B. DSW1

C. Client 1

D. FTP Server




Figure 1

Figure 2




interface PortChannel13switchport mode trunkswitchport trunk allowed vlan 1-9!interface PortChannel23switchport mode trunkswitchport trunk allowed vlan 1-9!interface FastEthernet1/0/1switchport mode accessswitchport access vlan 10!interface FastEthernet1/0/2switchport mode accessswitchport access vlan 10!


A. VLAN


C. DHCP





Figure 1

Figure 2




interface PortChannel13switchport mode trunkswitchport trunk allowed vlan 1-9!interface PortChannel23switchport mode trunkswitchport trunk allowed vlan 1-9!interface FastEthernet1/0/1switchport mode accessswitchport access vlan 10!interface FastEthernet1/0/2switchport mode accessswitchport access vlan 10!


A. Change the VLAN assignment on fa1/0/1 and fa1/0/2 on ASW1 to VLAN 1


C. Issue switchport trunk allowed vlan 10,200 on interface portchannel13 and portchannel23

on ASW1

D. Issue switchport trunk allowed vlan none on interface portchannel13 and portchanngel23 on

ASW1




Figure 1

Figure 2


Client 1 is not able to reach the Web Server. Initial troubleshooting shows that DSW1 can ping the Fa0/1interface of R4 but not the s0/0/0/0.34 interface.


router eigrp 10network 10.1.4.4 0.0.0.0network 10.2.1.1 0.0.0.0network 10.2.4.13 0.0.0.0no auto-summary



Configuration on R4

router eigrp 1network 10.1.4.5 0.0.0.0no auto-summaryredistribute ospf 1


A. DSW1

B. DSW2

C. Client 1

D. R4




Figure 1

Figure 2







Configuration on R4



A. EIGRP


C. OSPF





Figure 1

Figure 2







Configuration on R4



A. Change the EIGRP AS to 1 on DSW1

B. Change the routing protocol on DSW1 and DSW2 to OSPF

C. Change the EIGRP AS to 10 on R4

D. Advertise 10.1.1.8/30 network in EIGRP on R4




Figure 1

Figure 2


Client 1 is not able to reach the WebServer. Initial troubleshooting shows that DSW1 can ping the Fa0/1interface of R4 but not the s0/0/0/0.34 interface.





Configuration on R4

router eigrp 10network 10.1.4.5 0.0.0.0no auto-summaryredistribute ospf 1 metric 100 10 255 1 1500 route-map EIGRP_to_OSPF !router ospf 1network 10.1.1.8 0.0.0.0 area 34redistribute eigrp 10 subnets!

route-map EIGRP->OSPFmatch ip address 1!access-list 1 permit 10.0.0.0 0.255.255.255access-list 1 permit 209.0.0.0 0.255.255.255


A. EIGRP

B. Route Redistribution

C. OSPF

D. IP Addressing




Figure 1

Figure 2







Configuration on R4

router eigrp 10network 10.1.4.5 0.0.0.0no auto-summaryredistribute ospf 1 metric 100 10 255 1 1500 route-map EIGRP_to_OSPF !router ospf 1network 10.1.1.8 0.0.0.0 area 34redistribute eigrp 10 subnets!

route-map EIGRP->OSPFmatch ip address 1!access-list 1 permit 10.0.0.0 0.255.255.255access-list 1 permit 209.0.0.0 0.255.255.255


A. Remove the redistribute command from OSPF process on R4

B. Change the route-map name in the redistribute command under OSPF process to EIGRP- >OSPF

on R4

C. Change EIGRP AS to 1 on R4

D. Advertise 10.1.1.8/30 network in EIGRP on R4




Figure 1

Figure 2







Configuration on R4

router eigrp 10network 10.1.4.5 0.0.0.0no auto-summaryredistribute ospf 1 metric 100 10 255 1 1500 route-map EIGRP_to_OSPF !router ospf 1network 10.1.1.8 0.0.0.0 area 34redistribute eigrp 10 subnets

!route-map EIGRP->OSPFmatch ip address 1!access-list 1 permit 10.0.0.0 0.255.255.255access-list 1 permit 209.0.0.0 0.255.255.255


A. DSW1

B. DSW2

C. Client 1

D. R4



QUESTION 45The network setup for this trouble ticket is shown in Figure 3.


DSW1 and R4 cannot ping R2's loopback or R2's s0/0/0/0.12 IPv6 address. Initial troubleshooting showsand R2 is not an OSPFv3 neighbor on R3.

Configuration on R2

ipv6 unicast-routing!ipv6 router ospf 6router-id 2.2.2.2!interface s0/0/0/0.23ipv6 address 2026::1:1/122

Configuration on R3

ipv6 unicast-routing!ipv6 router ospf 6router-id 3.3.3.3!interface s0/0/0/0.23ipv6 address 2026::1:2/122ipv6 ospf 6 area 0

Figure 3


A. DSW1

B. DSW2

C. R2

D. R3






Configuration on R2


Configuration on R3


Figure 3


A. IPv6 Addressing

B. Route Redistribution

C. OSPFv3

D. RIPng






Configuration on R2


Configuration on R3


Figure 3


A. Add ipv6 ospf 6 area 0 under S0/0/0/0.23 on R2

B. Add ipv6 ospf 6 area 6 under s0/0/0/0.23 on R2

C. Remove IPv6 address from s0/0/0/0.23 on R2

D. Enable IPv6 routing on s0/0/0/0.23 on R2



QUESTION 48The "F" in FCAPS stands for: ........ management

Answer: FaultSection: (none)


QUESTION 49The "C" in FCAPS stands for: ........ management

Answer: ConfigurationSection: (none)


QUESTION 50The "A" in FCAPS stands for: ........ management

Answer: AccountingSection: (none)


QUESTION 51The "P" in FCAPS stands for: ........ management

Answer: PerformanceSection: (none)


QUESTION 52The "S" in FCAPS stands for: ........ management

Answer: SecuritySection: (none)


QUESTION 53Match the proper severity level with its name

Answer:

Section: (none)


Documents

642-832 From Boston