Senior Acquisitions Editor: Jeff Kellum

Development Editor: Tom Cirtin

Technical Editors: Troy McMillan and Dax Mickelson

Production Editor: Christine O’Connor

Copy Editor: Kim Wimpsett

Editorial Manager: Pete Gaughan

Production Manager: Tim Tate

Vice President and Executive Group Publisher: Richard Swadley

Vice President and Publisher: Neil Edde

Media Project Manager 1: Laura Moss-Hollister

Media Associate Producer: Josh Frank

Media Quality Assurance: Doug Kuhn

Book Designers: Judy Fung and Bill Gibson

Compositor: Craig Johnson, Happenstance Type-O-Rama

Proofreader: Rebecca Rider

Indexer: Nancy Guenther

Project Coordinator, Cover: Katherine Crocker

Cover Designer: Ryan Sneed

Copyright © 2013 by John Wiley & Sons, Inc., Indianapolis, Indiana

Published simultaneously in Canada

ISBN: 978-1-118-43525-0

ISBN: 978-1-118-49417-2 (ebk.)

ISBN: 978-1-118-54777-9 (ebk.)

ISBN: 978-1-118-54771-7 (ebk.)

No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at http://www.wiley.com/go/permissions.

Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties, including without limitation warranties of fitness for a particular purpose. No warranty may be created or extended by sales or promotional materials. The advice and strategies contained herein may not be suitable for every situation. This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other professional services. If professional assistance is required, the services of a competent professional person should be sought. Neither the publisher nor the author shall be liable for damages arising herefrom. The fact that an organization or Web site is referred to in this work as a citation and/or a potential source of further information does not mean that the author or the publisher endorses the information the organization or Web site may provide or recommendations it may make. Further, readers should be aware that Internet Web sites listed in this work may have changed or disappeared between when this work was written and when it is read.

For general information on our other products and services or to obtain technical support, please contact our Customer Care Department within the U.S. at (877) 762-2974, outside the U.S. at (317) 572-3993 or fax (317) 572-4002.

Wiley publishes in a variety of print and electronic formats and by print-on-demand. Some material included with standard print versions of this book may not be included in e-books or in print-on-demand. If this book refers to media such as a CD or DVD that is not included in the version you purchased, you may download this material at http://booksupport.wiley.com. For more information about Wiley products, visit www.wiley.com.

Library of Congress Control Number: 2012949809

TRADEMARKS: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written permission. CCENT is a registered trademark of Cisco Technology, Inc. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc. is not associated with any product or vendor mentioned in this book.

10 9 8 7 6 5 4 3 2 1

Dear Reader,

Thank you for choosing CCENT: Cisco Certified Entry Networking Technician Study Guide, Second Edition. This book is part of a family of premium-quality Sybex books, all of which are written by outstanding authors who combine practical experience with a gift for teaching.

Sybex was founded in 1976. More than 30 years later, we’re still committed to producing consistently exceptional books. With each of our titles, we’re working hard to set a new standard for the industry. From the paper we print on, to the authors we work with, our goal is to bring you the best books available.

I hope you see all that reflected in these pages. I’d be very interested to hear your comments and get your feedback on how we’re doing. Feel free to let me know what you think about this or any other Sybex book by sending me an email at nedde@wiley.com. If you think you’ve found a technical error in this book, please visit http://sybex.custhelp.com. Customer feedback is critical to our efforts at Sybex.

Best regards,

Neil Edde

Vice President and Publisher

Sybex, an Imprint of Wiley

Acknowledgments

For trying to keep me going in a straight line, I need to thank my acquisitions editor, Jeff Kellum. It is no small accomplishment, and I applaud him for his patience and dedication to our vision. Jeff Kellum was instrumental in the success of this book, as well as my CCNA series.

Working with Thomas Cirtin as my developmental editor was a first, and it was a smooth, pleasant experience. Thank you, Tom!

In addition, Kim Wimpsett and Christine O’Connor made the editorial process a breeze. I was very happy when I heard they were working with me on this book again!

I also want to thank my technical editor, Troy McMillan. His dedicated, concise comments have been invaluable and have made this a better book. I also don’t want to forget my newest forum administrator and hard worker, Jim Frye from Tennessee! He not only added some great ideas to this book, my forum, and web site, but he also provided the great additional study tools on the extra material provided with this book. Check it out!

Thanks also to the media team, whose hard work has resulted in a power-packed, good-looking test engine. And last but not least, thanks to proofreader Rebecca Rider, indexer Nancy Guenther, and compositor Craig Johnson at Happenstance Type-O-Rama.

About the Author

Todd Lammle, CCSI, CCNA/CCNP/Cisco Security and Voice, MCSE, CEH/CHFI, FCC RF Licensed, is the authority on Cisco Certification internetworking. He is a worldrenowned author, speaker, trainer and consultant. Todd has more than 30 years of experience working with LANs, WANs, and large licensed and unlicensed wireless networks. He is president of GlobalNet Training and Consulting, Inc., a network integration and training firm based in Dallas, San Francisco, and Boulder. You can reach Todd through his forum at www.lammle.com.

Introduction

Welcome to the exciting world of Cisco certification! You have picked up this book because you want something better—namely, a better job with more satisfaction. Rest assured that you have made a good decision. Cisco certification can help you get your first networking job, or more money and a promotion if you are already in the field.

Cisco certification can also improve your understanding of the internetworking of more than just Cisco products: you will develop a complete understanding of networking and how different network topologies work together to form a network. This is beneficial to every networking job and is the reason Cisco certification is in such high demand, even at companies with few Cisco devices.

Cisco is the king of routing and switching. The Cisco certifications reach beyond popular certifications such as the Microsoft certifications to provide you with an indispensable factor in understanding today’s network—insight into the Cisco world of internetworking. By deciding that you want to become Cisco certified, you are saying that you want to be the best—the best at routing and the best at switching. This book will lead you in that direction.

For updates covering additions or modifications to the Cisco certification exams, as well as additional study tools for other Cisco certifications, be sure to visit the Todd Lammle website at www.lammle.com.

Cisco’s Network Support Certifications

Initially, Cisco started with the coveted Cisco Certified Internetwork Expert (CCIE) certification. You took only one written test and then you were faced with the (extremely difficult) hands-on lab, an all-or-nothing approach that made it tough to succeed.

In response, Cisco created a series of new certifications to help you get the coveted CCIE as well as aid prospective employers in measuring skill levels. With these new certifications, which make for a better approach to preparing for that almighty lab, Cisco opened doors that few were allowed through before.

Cisco Certifications

You don’t need to achieve the CCENT, CCNA, or even the higher professional certifications to go for the CCIE, but it is extremely unlikely that you will pass the CCIE unless you go through the step-by-step certification process that Cisco created. It’s not impossible, just improbable.

Here is the beginning process Cisco has in mind for you.

Cisco Certified Entry Network Technician (CCENT)

The Cisco CCENT (Cisco Certified Entry Networking Technician) certification validates the skills required for entry-level network support positions, the starting point for many successful careers in networking. This new certification is an entry-level certification that was needed as the CCNA certification objectives grew and grew.

Candidates should have the knowledge and skills to install, operate, and troubleshoot a small enterprise branch network, including basic network security. CCENT certification is the first step toward achieving CCNA, which covers medium-size enterprise branch networks with more complex connections.

This book is geared toward the CCENT certification and helping you self-study for the ICND1 exam (640-822). To achieve this certification, you can read this book, take a hands-on course if needed, and then take one written exam for $150.

Cisco Certified Network Associate (CCNA)

The CCNA certification was the first in the new line of Cisco certifications and was the precursor to all higher Cisco certifications. The CCNA is no longer an entry-level certification, which is why Cisco created the CCENT certification. After you pass the ICND1 exam, which provides you with a CCENT certification, you can take just one more test, the ICND2 (640-816), and you will receive your CCNA certification.

However, the Cisco Certified Network Associate can be achieved by taking either one test at $295 (640-802) or two tests at $150 each (ICND1 and ICND2). All the CCNA exams are extremely hard and cover a lot of material, so you have to really know your stuff! Taking a Cisco class or spending months with hands-on experience is not out of the norm.

And once you have your CCNA, you don’t have to stop there—you can choose to continue with your studies and achieve a higher certification, called the Cisco Certified Network Professional (CCNP). Someone with a CCNP has all the skills and knowledge they need to attempt the Routing and Switching CCIE lab. Just becoming a CCNA can land you that job you’ve dreamed about.

This book covers everything CCENT/ICND1 related. For up-to-date information on Todd Lammle Cisco Authorized CCENT/CCNA, CCNP, Security, Voice, Data Center, and CCIE bootcamps, please see www.lammle.com.

Why Become CCENT Certified?

Cisco, not unlike Microsoft and other networking vendors, has created the certification process to give administrators a set of skills and to equip prospective employers with a way to measure skills or match certain criteria. Becoming Cisco certified can be the initial step of a successful journey toward a new, highly rewarding and sustainable career.

The certification program was created to provide a solid introduction not only to the Cisco Internetwork Operating System (IOS) and Cisco hardware but also to internetworking in general, making it helpful to you in areas that are not exclusively Cisco’s. At this point in the certification process, it’s not unrealistic that network managers—even those without Cisco equipment—require Cisco certifications for their job applicants.

If you make it through the CCENT and are still interested in Cisco and internetworking, you’re headed down a path to certain success.

Where Do You Take the Exams?

You may take the CCENT exam at any Pearson VUE authorized center; go to www.vue.com or call (877) 404-EXAM (3926).

Here’s how to register for any Cisco exam:

1. Determine the number of the exam you want to take. (The CCENT exam number is 640-822.)

2. Register with the nearest Pearson VUE testing center. At this point, you will be asked to pay in advance for the exam. At the time of this writing, the CCENT (ICND1) exam is $150 (CCNA 640-802 is $295) and must be taken within one year of payment. You can schedule exams up to six weeks in advance or as late as the same day you want to take it—but if you fail a Cisco exam, you must wait five days before you will be allowed to retake it. If something comes up and you need to cancel or reschedule your exam appointment, contact Pearson VUE at least 24 hours in advance.

3. When you schedule the exam, you’ll get instructions regarding all appointment and cancellation procedures, the ID requirements, and information about the testing center location.

Tips for Taking Your CCENT Exam

The CCENT test contains about 40 to 50 questions, to be completed in about 90 minutes or less. This can change per exam. You must get a score of about 85 percent to pass this exam, but again, each exam can be different.

To pass the exam, the candidate must have the knowledge and skills required to successfully install, operate, and troubleshoot a small branch office network. The exam includes questions on the following:

Networking fundamentals

Connecting to a WAN

Basic security and wireless concepts

Routing and switching fundamentals

TCP/IP and OSI models

IP addressing

WAN technologies

Operating and configuring IOS devices

Configuring RIPv2, static, and default routing

Implementing NAT and DHCP

Configuring simple networks

Many questions on the exam have answer choices that at first glance look identical—especially the syntax questions! Remember to read through the choices carefully because close doesn’t cut it. If you get commands in the wrong order or forget one measly character, you’ll get the question wrong. So, to practice, do the hands-on exercises at the end of the chapters over and over again until they feel natural to you.

Also, never forget that the right answer is the Cisco answer. In many cases, more than one appropriate answer is presented, but the correct answer is the one that Cisco recommends. On the exam, the instructions are always to pick one, two, or three, never to “choose all that apply.”

The CCNA 640-822 exam includes the following test formats:

Multiple-choice single answer

Multiple-choice multiple answer

Drag-and-drop

Fill-in-the-blank

Router simulations

In addition to multiple-choice, fill-in-the-blank, and drag-and-drop response questions, Cisco certification exams may include performance simulation exam items.

Here are some general tips for exam success:

Arrive early at the exam center so you can relax and review your study materials.

Read the questions carefully. Don’t jump to conclusions. Make sure you’re clear about exactly what each question asks.

When answering multiple-choice questions that you’re not sure about, use the process of elimination to get rid of the obviously incorrect answers first. Doing this greatly improves your odds if you need to make an educated guess.

You can no longer move forward and backward through the Cisco exams, so double-check your answer before clicking Next since you can’t change your mind.

After you complete an exam, you’ll get immediate, online notification of your pass or fail status, a printed Examination Score Report that indicates your pass or fail status, and your exam results by section. (The test administrator will give you the printed score report.) Test scores are automatically forwarded to Cisco within five working days after you take the test, so you don’t need to send your score to Cisco. If you pass the exam, you’ll receive confirmation from Cisco, typically within two to four weeks.

What Does This Book Cover?

This book covers everything you need to know in order to pass the CCENT/ICND1 exam. However, taking the time to study and practice with routers or a router simulator is the real key to success. Please see www.lammle.com/forum for more information on labs, lab equipment, and suggested router simulators.

This book’s chapters cover all the CCENT objectives:

Chapter 1, “Internetworking,” introduces you to internetworking. You will learn the basics of the Open Systems Interconnection (OSI) model the way Cisco wants you to learn it. Ethernet networking and standards are discussed in detail in this chapter as well. There are written labs and plenty of review questions to help you. Do not skip the written labs in this chapter!

Chapter 2, “Internet Protocols,” provides you with the background necessary for success on the exam as well as in the real world by discussing TCP/IP. This in-depth chapter covers the very beginnings of the Internet Protocol stack, moves on to IP addressing and understanding the difference between a network address and broadcast address, and ends with network troubleshooting.

Chapter 3, “IP Subnetting, Troubleshooting IP, and Introduction to NAT,” introduces you to subnetting. You will be able to subnet a network in your head after reading this chapter. In addition, you’ll learn how to troubleshoot IP networks. Plenty of help is found in this chapter if you do not skip the written lab and review questions.

Chapter 4, “Cisco’s Internetworking Operating System (IOS),” introduces you to the Cisco Internetwork Operating System (IOS) and command-line interface (CLI). In this chapter, you will learn how to turn on a router and configure the basics of the IOS, including setting passwords, banners, and more. IP configuration will be discussed and hands-on labs will help you gain a firm grasp of the concepts taught in the chapter. Before you go through the hands-on labs, be sure to complete the written lab and review questions.

Chapter 5, “Managing a Cisco Internetwork,” provides you with the management skills needed to run a Cisco IOS network. Backing up and restoring the IOS and router configuration are covered, as are the troubleshooting tools necessary to keep a network up and running. Before performing the hands-on labs in this chapter, complete the written lab and review questions.

Chapter 6, “IP Routing,” teaches you about IP routing. This is a fun chapter because you will begin to build your network, add IP addresses, and route data between routers. You will also learn about static, default, and RIP routing. The written lab, hands-on labs, and review questions will help you master IP routing.

Chapter 7, “Layer 2 Switching,” gives you a background on layer 2 switching and how switches perform address learning and make forwarding and filtering decisions. Be sure to go through the written lab and review questions in this chapter.

Chapter 8, “Wireless Technologies,” covers the new wireless objectives. Study the technology covered in this section and make sure you understand basic service sets as well as wireless security. The written lab and review questions will help you fine-tune your study of this chapter.

Chapter 9, “Security,” provides you with the information you need to nail the new security objectives covered in the CCENT exam. Access lists are not covered in the CCENT objectives, but basic security is. Study the chapter carefully, and then go through the written and review questions at the end of the chapter.

Chapter 10, “Introduction to Wide Area Networks,” concentrates on Cisco wide area network (WAN) protocols. This chapter covers the basics of WAN protocols and goes into detail about HDLC and PPP. Do not skip the written lab, review questions, and hands-on labs found in this chapter.

How to Use This Book

If you want a solid foundation for the serious effort of preparing for the Cisco CCENT exam, then look no further. I have spent hundreds of hours putting together this book with the sole intention of helping you pass the CCENT exam and learn how to configure Cisco routers and switches.

This book is loaded with valuable information, and to help you get the most out of your studying time, I recommend the following study method:

1. Take the assessment test immediately following this introduction. (The answers are at the end of the test.) It’s okay if you don’t know any of the answers; that is why you bought this book! Carefully read over the explanations for any question you get wrong and note which chapters the material comes from. This information should help you plan your study strategy.

2. Study each chapter carefully, making sure you fully understand the information and the test objectives listed at the beginning. Pay extra-close attention to chapters from which questions you missed in the assessment test were taken.

3. Complete each written lab at the end of each chapter. Do not skip the written exercises; they directly relate to the CCENT/ICND1 exam and what you must glean from the chapter you just read. Do not just skim these labs! Make sure you understand completely the reason for each answer. You can find the answers in Appendix A.

4. Complete all hands-on labs in the chapter, referring to the text of the chapter so that you understand the reason for each step you take. If you do not have Cisco equipment available, look for a router simulator that will cover all the labs needed for all your Cisco certification needs.

If you have Cisco’s Packet Tracer, you’re set, and if so, you can email me for preconfigured Packet Tracer labs. Please see www.lammle.com/forum for more information.

5. Answer all of the review questions related to each chapter. (The answers to the review questions appear in Appendix B.) Note the questions that confuse you and study the corresponding sections of the book again. Do not just skim these questions! Make sure you understand completely the reason for each answer.

6. Try your hand at the bonus exams that are included on the companion website at www.sybex.com/go/ccent2e. The questions in these exams appear only on the website. This will give you a complete overview of the type of questions you can expect to see on the real CCENT exam. Check out www.lammle.com for more Cisco exam prep questions.

7. Test yourself using all the flashcards on the website. These are new and include an updated flashcard program to help you prepare for the CCENT/CCNA exams. This is a great study tool!

To learn every bit of the material covered in this book, you’ll have to apply yourself regularly and with discipline. Try to set aside the same time period every day to study, and select a comfortable and quiet place to do so. If you work hard, you will be surprised at how quickly you learn this material.

If you follow these steps and really study and practice the review questions, the bonus exams, the electronic flashcards, and all the written and hands-on labs, it would be hard to fail the CCENT exam.

Additional Study Tools

I worked hard to provide some really great tools to help you with your certification process. All of the following tools should be loaded on your workstation when studying for the test.

Readers can get access to the following tools by visiting www.sybex.com/ccent2e.

The Sybex Test Preparation Software

The test preparation software prepares you to pass the CCENT/ICND1 exam. In the test engine, you will find all the review and assessment questions from the book, plus two additional bonus exams that appear exclusively with this book.

Additional bonus exams can be found at www.lammle.com.

Electronic Flashcards

To prepare for the exam, you can read this book, study the review questions at the end of each chapter, and work through the practice exams included in the book and with companion study tools. But wait, there’s more! You can also test yourself with the flashcards. If you can get through these difficult questions and understand the answers, you’ll know you’re ready for the CCENT/ICND1 exam.

The flashcards include more than 150 questions specifically written to hit you hard and make sure you are ready for the exam. Between the review questions, bonus exams, and flashcards, you’ll be more than prepared for the exam.

Glossary

The glossary is a handy resource for Cisco terms. This is a great tool for understanding some of the more obscure terms used in this book.

To get up-to-the-minute CCENT and other Cisco exam information, please see www.lammle.com and www.sybex.com/go/ccent2e.

Todd Lammle Videos

I have created a full CCNA series of videos that can be purchased in either DVD or online streaming format from www.lammle.com. However, as a bonus included with this book, the first module of this series is included in its entirety. The video is more than one hour of informative CCENT/CCNA information. This bonus module alone has a value of $149! Do not skip this video because it covers the internetworking objectives, which are very important to the CCENT/CCNA exam.

Todd Lammle Audios

In addition to the section of videos included for free on the companion website, I have included one full section from my CCNA audio series—almost one hour of audio! The full CCNA audio series has a value of $199 and can be found at www.lammle.com. This is a great tool to add to your arsenal of study material to help you pass the CCENT/CCNA exam.

How to Contact the Author

You can reach CCSI Todd Lammle through GlobalNet Training & Consulting, Inc., at www.lammle.com.

CCENT Exam Objectives

OBJECTIVE | Chapter
Describe the Operation of Data Networks
Describe the purpose and functions of various network devices | 1
Select the components required to meet a given network specification | 1
Use the OSI and TCP/IP models and their associated protocols to explain how data flows in a network | 1
Describe common networking applications including web applications | 1, 2
Describe the purpose and basic operation of the protocols in the OSI and TCP models | 1, 2
Describe the impact of applications (Voice Over IP and Video Over IP) on a network | 2
Interpret network diagrams | 6
Determine the path between two hosts across a network | 6
Describe the components required for network and Internet communications | 1
Identify and correct common network problems at layers 1, 2, 3 and 7 using a layered model approach | 1
Differentiate between LAN/WAN operation and features | 1, 10
Implement a Small Switched Network
Select the appropriate media, cables, ports, and connectors to connect switches to other network devices and hosts | 1
Explain the technology and media access control method for Ethernet technologies | 1
Explain network segmentation and basic traffic management concepts | 1, 7
Explain the operation of Cisco switches and basic switching concepts | 7
Perform, save and verify initial switch configuration tasks including remote access management | 7
Verify network status and switch operation using basic utilities (including: ping, traceroute, telnet, SSH, arp, ipconfig), SHOW & DEBUG commands | 7
Implement and verify basic security for a switch (port security, deactivate ports) | 7
Identify, prescribe, and resolve common switched network media issues, configuration issues, autonegotiation, and switch hardware failures | 1, 7
Implement an IP Addressing Scheme and IP Services to Meet Network Requirements for a Small Branch Office
Describe the need and role of addressing in a network | 2, 3, 4
Create and apply an addressing scheme to a network | 2, 3, 4
Assign and verify valid IP addresses to hosts, servers, and networking devices in a LAN environment | 2, 3
Explain the basic uses and operation of NAT in a small network connecting to one ISP | 3
Describe and verify DNS operation | 2, 3, 4
Describe the operation and benefits of using private and public IP addressing | 2, 3
Enable NAT for a small network with a single ISP and connection using SDM and verify operation using CLI and ping | 3
Configure, verify and troubleshoot DHCP and DNS operation on a router (including: CLI/SDM) | 3, 4
Implement static and dynamic addressing services for hosts in a LAN environment | 3
Identify and correct IP addressing issues | 3
Implement a Small Routed Network
Describe basic routing concepts (including: packet forwarding, router lookup process) | 6
Describe the operation of Cisco routers (including: router bootup process, POST, router components) | 5
Select the appropriate media, cables, ports, and connectors to connect routers to other network devices and hosts | 1
Configure, verify, and troubleshoot RIPv2 | 6
Access and utilize the router CLI to set basic parameters | 4
Connect, configure, and verify operation status of a device interface | 4
Verify device configuration and network connectivity using ping, traceroute, telnet, SSH or other utilities | 4
Perform and verify routing configuration tasks for a static or default route given specific routing requirements | 6
Manage IOS configuration files (including: save, edit, upgrade, restore) | 5
Manage Cisco IOS | 5
Implement password and physical security | 4, 5
Verify network status and router operation using basic utilities (including: ping, traceroute, telnet, SSH, arp, ipconfig), SHOW & DEBUG commands | 4
Explain and Select the Appropriate Administrative Tasks Required for a WLAN
Describe standards associated with wireless media (including: IEEE WI-FI Alliance, ITU/FCC) | 8
Identify and describe the purpose of the components in a small wireless network (including: SSID, BSS, ESS) | 8
Identify the basic parameters to configure on a wireless network to ensure that devices connect to the correct access point | 8
Compare and contrast wireless security features and capabilities of WPA security (including: open, WEP, WPA-1/2) | 8
Identify common issues with implementing wireless networks | 8
Identify Security Threats to a Network and Describe General Methods to Mitigate Those Threats
Explain today’s increasing network security threats and the need to implement a comprehensive security policy to mitigate the threats | 9
Explain general methods to mitigate common security threats to network devices, hosts, and applications | 9
Describe the functions of common security appliances and applications | 9
Describe security recommended practices including initial steps to secure network devices | 9
Implement and Verify WAN Links
Describe different methods for connecting to a WAN | 10
Configure and verify a basic WAN serial connection | 10

Assessment Test

1. Which of the following describes a Class A address? (Choose three.)

A. The decimal value of the first octet can range from 1 to 126.

B. The decimal value of the first octet can range from 1 to 192.

C. The first octet represents the entire network portion of the address.

D. The default mask for a Class A network is 255.255.0.0.

E. The value of the first binary place in the first octet must be 0.

2. What does the command routerA(config)#linecons0 allow you to perform next?

A. Set the Telnet password.

B. Shut down the router.

C. Set your console password.

D. Disable console connections.

3. Which of the following is the valid host range for the subnet on which the IP address 192.168.168.188 255.255.255.192 resides?

A. 192.168.168.129–190

B. 192.168.168.129–191

C. 192.168.168.128–190

D. 192.168.168.128–192

4. What does the passive command provide to dynamic routing protocols?

A. Stops an interface from sending or receiving periodic dynamic updates

B. Stops an interface from sending periodic dynamic updates but not from receiving updates

C. Stops the router from receiving any dynamic updates

D. Stops the router from sending any dynamic updates

5. Which protocol does Ping use?

A. TCP

B. ARP

C. ICMP

D. BootP

6. How many collision domains are created when you segment a network with a 12-port switch?

A. 1

B. 2

C. 5

D. 12

7. Which of the following commands will allow you to set your Telnet password on a Cisco router?

A. line telnet 0 4

B. line aux 0 4

C. line vty 0 4

D. line con 0

8. If you wanted to delete the configuration stored in NVRAM, what would you type?

A. erase startup

B. erase nvram

C. delete nvram

D. erase running

9. Which protocol is used to send a destination network unreachable message back to originating hosts?

A. TCP

B. ARP

C. ICMP

D. BootP

10. Which class of IP address has the most host addresses available by default?

A. A

B. B

C. C

D. A and B

11. What is the subnet address of 172.16.159.159/22?

A. 172.16.0.0

B. 172.16.128.0

C. 172.16.156.0

D. 172.16.192.0

12. How many broadcast domains are created when you segment a network with a 12-port switch?

A. 1

B. 2

C. 5

D. 12

13. What PDU is at the Transport layer?

A. User data

B. Session

C. Segment

D. Frame

14. What is a stub network?

A. A network with more than one exit point

B. A network with more than one exit and entry point

C. A network with only one entry and no exit point

D. A network that has only one entry and exit point

15. Where is a hub specified in the OSI model?

A. Session layer

B. Physical layer

C. Data Link layer

D. Application layer

16. What does the command showcontrollerss0 provide?

A. The type of serial port connection (e.g., Ethernet or Token Ring)

B. The type of connection (e.g., DTE or DCE)

C. The configuration of the interface, including the IP address and clock rate

D. The controlling processor of that interface

17. What is the main reason the OSI model was created?

A. To create a layered model larger than the DoD model

B. So application developers can change only one layer’s protocols at a time

C. So different networks could communicate

D. So Cisco could use the model

18. Which layer of the OSI model creates a virtual circuit between hosts before transmitting data?

A. Application

B. Session

C. Transport

D. Network

E. Data Link

19. Which protocol does DHCP use at the Transport layer?

A. IP

B. TCP

C. UDP

D. ARP

20. How do you copy a router IOS to a TFTP host?

A. copy run starting

B. copy start running

C. copy running tftp

D. copy flash tftp

21. If your router is facilitating a CSU/DSU, which of the following commands do you need to use to provide the router with a 64Kbps serial link?

A. RouterA(config)#bandwidth 64

B. RouterA(config-if)#bandwidth 64000

C. RouterA(config)#clockrate 64000

D. RouterA(config-if)#clock rate 64

E. RouterA(config-if)#clock rate 64000

22. Which of the following commands will set your prompt so you can set your Telnet password on a Cisco router?

A. line telnet 0 4

B. line aux 0 4

C. line vty 0 4

D. line con 0

23. What command do you use to set the enable secret password on a Cisco router to todd?

A. RouterA(config)#enable password todd

B. RouterA(config)#enable secret todd

C. RouterA(config)#enable secret password todd

D. RouterA(config-if)#enable secret todd

24. Which two statements best describe the wireless security standard that is defined by WPA? (Choose two.)

A. It specifies use of a static encryption key that must be changed frequently to enhance security.

B. It requires use of an open authentication method.

C. It specifies the use of dynamic encryption keys that change each time a client establishes a connection.

D. It requires that all access points and wireless devices use the same encryption key.

E. It includes authentication by PSK.

25. Which protocol is used to find an Ethernet address from a known IP address?

A. IP

B. ARP

C. RARP

D. BootP

26. Which command is used to enable RIP on a Cisco router?

A. copy tftp rip

B. router rip on

C. router rip

D. on rip routing

27. Which additional configuration step is necessary in order to connect to an AP that has SSID broadcasting disabled?

A. Set the SSID value in the client software to public.

B. Configure open authentication on the AP and the client.

C. Set the SSID value on the client to the SSID configured on the AP.

D. Configure MAC address filtering to permit the client to connect to the AP.

28. Which encryption type does WPA2 use?

A. AES-CCMP

B. PPK via IV

C. PSK

D. TKIP/MIC

29. What are two security appliances that can be installed in a network? (Choose two.)

A. ATM

B. IDS

C. IOS

D. IPS

30. What are two recommended ways of protecting network device configuration files from outside network security threats? (Choose two.)

A. Allow unrestricted access to the console or VTY ports.

B. Use a firewall to restrict access from the outside to the network devices.

C. Use SSH or another encrypted and authenticated transport to access device configurations.

D. Always use Telnet to access the device command line because it is automatically encrypted.

Answers to Assessment Test

1. A, C, E. To define a Class A address, the first bit in the first byte must be a zero. The range is 1 to 126, and the first octet represents the entire network portion of the address. See Chapter 2 for more information.

2. C. The command line console 0 places you at a prompt where you can then set your console user-mode password. See Chapter 4 for more information.

3. A. 256 – 192 = 64. 64 + 64 = 128. 128 + 64 = 192. The subnet is 128, the broadcast address is 191, and the valid host range is the numbers in between, or 129–190. See Chapter 3 for more information.

4. B. The passive command, short for passive-interface, stops regular updates from being sent out of an interface. However, the interface can still receive updates. See Chapter 6 for more information.

5. C. Internet Control Message Protocol (ICMP) is the protocol at the Network layer that is used to send echo requests and replies. See Chapter 2 for more information.

6. D. Layer 2 switching creates individual collision domains. See Chapter 7 for more information.

7. C. The command line vty 0 4 places you in a prompt that will allow you to set or change your Telnet password. See Chapter 4 for more information.

8. A. The command erase-startup-config deletes the configuration stored in NVRAM. See Chapter 4 for more information.

9. C. ICMP is the protocol at the Network layer that is used to send messages back to an originating router. See Chapter 2 for more information.

10. A. Class A addressing provides 24 bits for hosts addressing. See Chapter 3 for more information.

11. C. First, a /22 mask is 255.255.252.0, meaning you have a block size of four in the third octet. The subnet is 172.16.156.0. See Chapter 3 for more information.

12. A. By default, switches break up collision domains but are one large broadcast domain. See Chapter 1 for more information.

13. C. Segmentation happens at the Transport layer. See Chapter 1 for more information.

14. D. Stub networks have only one connection to an internetwork. Only default routes can be set on a stub network or network loops may occur. See Chapter 6 for more information.

15. B. A hub is a Physical layer device. See Chapter 1 for more information.

16. B. The command show controllers s 0 tells you what type of serial connection you have. If it is a DCE, you need to provide the clock rate. See Chapter 4 for more information.

17. C. The primary reason the OSI model was created was so that different networks could interoperate. See Chapter 1 for more information.

18. C. The Transport layer creates virtual circuits between hosts before transmitting any data. See Chapter 1 for more information.

19. C. User Datagram Protocol is a connection network service at the Transport layer, and DHCP uses this connectionless service. See Chapter 2 for more information.

20. D. The command used to copy a configuration from a router to a TFTP host is copy flash tftp. See Chapter 8 for more information.

21. E. The clock rate command is two words, and the speed of the line is in bits per second (bps). See Chapter 5 for more information.

22. C. The command line vty 0 4 places you in a prompt that will allow you to set or change your Telnet password. See Chapter 4 for more information.

23. B. The command enable secret todd sets the enable secret password to todd. See Chapter 4 for more information.

24. C, E. WPA uses PSK to include authentication and can use either static or dynamic encryption keys. The benefit of WPA over a static WEP key is that WPA can change dynamically while the system is used. See Chapter 8 for more information.

25. B. If a device knows the IP address of where it wants to send a packet but doesn’t know the hardware address, it will send an ARP broadcast looking for the hardware address or, in this case, the Ethernet address. See Chapter 2 for more information.

26. C. To enable RIP routing on a Cisco router, use the global config command router rip. See Chapter 6 for more information.

27. D. If an AP does have SSID broadcasting disabled, the client needs to set the SSID value of the AP on the client software in order to connect to the AP. See Chapter 8 for more information.

28. A. WPA2 uses the Advanced Encryption Standard (AES) known as the Counter Mode Cipher Block Chaining-Message Authentication Code (CBC-MAC) protocol (CCMP). See Chapter 8 for more information.

29. B, D. Intrusion detection systems (IDSs) and intrusion prevention systems (IPSs). These tools help prevent threats by watching for trends, particular patterns, and other factors. See Chapter 9 for more information.

30. B, C. You should always have a firewall on your network to block access from outside devices. In addition, Cisco recommends always using Secure Shell (SSH) instead of Telnet to configure your devices in-band. See Chapter 9 for more information.

Chapter 1

Internetworking

The CCENT exam objectives covered in this chapter include the following:

Describe the operation of data networks

Describe the purpose and functions of various network devices

Select the components required to meet a given network specification

Use the OSI and TCP/IP models and their associated protocols to explain how data flows in a network

Describe common networking applications including web applications

Describe the purpose and basic operation of the protocols in the OSI and TCP models

Describe the components required for network and Internet communications

Identify and correct common network problems at layers 1, 2, 3 and 7 using a layered model approach

Implement a small switched network

Select the appropriate media, cables, ports, and connectors to connect switches to other network devices and hosts

Explain the technology and media access control method for Ethernet technologies

Explain network segmentation and basic traffic management concepts

Identify, prescribe, and resolve common switched network media issues, configuration issues, autonegotiation, and switch hardware failures

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!