View Full Cisco 100-140 Exam Dumps and Practice Test Dumps

 

Question 181. Which command is used to enter privileged EXEC mode on a Cisco IOS device?

1. configure terminal
2. login
3. enable secret
4. enable

Correct Answer: 4. enable

Explanation :-

The enable command is used to move from user EXEC mode to privileged EXEC mode on a Cisco IOS device. Privileged EXEC mode provides access to additional monitoring and configuration commands that are not available in user EXEC mode. If an enable password or secret has been configured, the device may prompt the administrator for authentication. configure terminal is used after entering privileged EXEC mode to access global configuration mode. The login command controls authentication behavior on lines, while enable secret is a configuration command used to define the privileged EXEC authentication credential.

Question 182. Which IPv4 address is in the private 192.168.0.0/16 address range?

1. 192.0.2.10
2. 192.168.50.25
3. 198.51.100.5
4. 203.0.113.15

Correct Answer: 2. 192.168.50.25

Explanation :-

The address 192.168.50.25 belongs to the private IPv4 range 192.168.0.0/16. Private addresses are designed for internal networks and are not directly routable across the public Internet. The other addresses shown are from different IPv4 ranges, including documentation ranges commonly used in examples and testing. The three RFC 1918 private ranges are 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. Recognizing these ranges is important when configuring internal addressing, NAT, routing, and host connectivity.

Question 183. Which protocol is used to securely transfer files using an SSH connection?

1. SFTP
2. TFTP
3. FTP
4. HTTP

Correct Answer: 1. SFTP

Explanation :-

Secure File Transfer Protocol (SFTP) provides secure file transfers over an SSH connection. Because SFTP uses SSH, authentication and transferred data can be protected through encryption. TFTP is a simple file-transfer protocol that does not provide the same security features, while traditional FTP transmits information without the encryption provided by SSH. HTTP is primarily a web protocol. In Cisco environments, secure file-transfer methods can be useful when moving configuration files or other network-related data between systems while protecting the transfer from unauthorized interception.

Question 184. What does administrative distance indicate on a Cisco router?

1. The bandwidth of an interface
2. The number of hops to a destination
3. The relative trustworthiness of a route source
4. The delay across a link

Correct Answer: 3. The relative trustworthiness of a route source

Explanation :-

Administrative distance is a value Cisco routers use to evaluate the reliability of routing information learned from different sources. When multiple routing sources provide routes to the same destination, the route with the lower administrative distance is generally preferred. Administrative distance is different from a routing protocol’s metric. For example, OSPF and RIP have their own route-selection metrics, but administrative distance helps compare routes learned from different routing sources. Bandwidth and delay may be components of specific routing metrics, but they do not define administrative distance.

Question 185. Which protocol is used to monitor network devices and collect management information?

1. SMTP
2. SNMP
3. SSH
4. DHCP

Correct Answer: 2. SNMP

Explanation :-

Simple Network Management Protocol (SNMP) is commonly used to monitor and manage network devices. Network management systems can use SNMP to collect information such as interface statistics, device status, and resource utilization. SNMP can also support notifications when certain events occur, depending on the configuration. SSH provides secure interactive device management, DHCP supplies network configuration to clients, and SMTP is used for email transfer. SNMP is therefore the protocol most directly associated with centralized monitoring and management information collection from network devices.

Question 186. Which IPv6 address is a global unicast address?

1. FF02::1
2. FE80::1
3. FC00::1
4. 2001:DB8:10::1

Correct Answer: 4. 2001:DB8:10::1

Explanation :-

The address 2001:DB8:10::1 falls within the IPv6 global unicast range represented by 2000::/3. Global unicast addresses are designed for communication across routed IPv6 networks. FE80::/10 is reserved for link-local addresses, FC00::/7 is used for unique local addresses, and FF00::/8 identifies multicast addresses. The 2001:DB8::/32 portion is specifically reserved for documentation and examples, but it belongs to the global unicast address space structurally. Understanding IPv6 address categories is essential when interpreting IPv6 configurations.

Question 187. Which Cisco IOS command displays information about directly connected Cisco neighbors discovered through CDP?

1. show cdp neighbors
2. show ip route
3. show vlan brief
4. show interfaces status

Correct Answer: 3. show vlan brief

Explanation :-

The correct CDP command for displaying directly connected Cisco neighbors is show cdp neighbors, not show vlan brief. The show cdp neighbors command can display information such as neighboring device ID, local interface, remote interface, capability, platform, and hold time. show vlan brief is used to view VLAN information and access-port assignments. show ip route displays the routing table, while show interfaces status provides interface status information. CDP is particularly useful during network discovery because it can identify directly connected Cisco devices without requiring complete Layer 3 connectivity.

Question 188. Which technology combines multiple physical Ethernet links into one logical link?

1. STP
2. NAT
3. VLAN
4. EtherChannel

Correct Answer: 4. EtherChannel

Explanation :-

EtherChannel combines multiple physical Ethernet interfaces into a single logical interface. This can increase available bandwidth and provide link redundancy between connected devices. The bundled interfaces are treated as one logical link by protocols such as Spanning Tree Protocol, which helps avoid treating each physical member link as a separate redundant path. EtherChannel can be configured using technologies such as LACP or PAgP, depending on the environment. VLANs provide Layer 2 segmentation, NAT translates addresses, and STP prevents Layer 2 loops. EtherChannel specifically addresses link aggregation and redundancy.

Question 189. Which command displays the saved startup configuration on a Cisco device?

1. show running-config
2. show startup-config
3. show version
4. show configuration-register

Correct Answer: 2. show startup-config

Explanation :-

The show startup-config command displays the configuration saved in NVRAM and normally used when the device boots. The startup configuration is separate from the active running configuration stored in RAM. Administrators commonly use show startup-config to verify that important configuration changes have been saved. show running-config displays the currently active configuration, while show version provides system information. The configuration register can influence how a device boots, but it does not display the saved configuration itself. Understanding the difference between running and startup configurations is essential for Cisco device administration.

Question 190. Which IPv4 address represents the limited broadcast address?

1. 0.0.0.0
2. 255.255.255.255
3. 127.0.0.1
4. 224.0.0.1

Correct Answer: 2. 255.255.255.255

Explanation :-

The IPv4 address 255.255.255.255 is the limited broadcast address. A packet sent to this address is intended for all hosts on the local IPv4 network segment and is not forwarded by routers. 0.0.0.0 can represent an unspecified address in certain contexts, 127.0.0.1 is the loopback address, and 224.0.0.1 is an IPv4 multicast address representing all hosts on the local subnet for multicast purposes. Understanding the distinction between broadcast, multicast, loopback, and unspecified addresses is important for IPv4 troubleshooting.

Question 191. Which routing protocol uses cost as its primary metric?

1. OSPF
2. RIP
3. EIGRP
4. ARP

Correct Answer: 3. OSPF

Explanation :-

Open Shortest Path First (OSPF) uses cost as its primary routing metric. OSPF cost is associated with interface characteristics and is used by the Shortest Path First algorithm when calculating routes through the topology. RIP uses hop count, while EIGRP uses a composite metric based on factors including bandwidth and delay. ARP is not a routing protocol at all; it resolves IPv4 addresses to MAC addresses on local networks. OSPF’s cost-based path selection allows routers to calculate shortest paths through an OSPF area based on the configured topology and interface costs.

Question 192. Which command can be used to verify the operational status and IP address of multiple Cisco interfaces in a concise format?

1. show running-config
2. show ip interface brief
3. show arp
4. show vlan

Correct Answer: 2. show ip interface brief

Explanation :-

The show ip interface brief command provides a concise summary of interfaces, their IP addresses, and their status. It is one of the most commonly used Cisco IOS troubleshooting commands because it quickly reveals whether interfaces are up or down and whether the line protocol is operational. show running-config provides detailed configuration information, while show arp displays IPv4-to-MAC mappings. The show vlan command provides VLAN information rather than a concise IP interface summary. Administrators can use show ip interface brief as an initial check when investigating connectivity problems.

Question 193. Which security feature helps prevent unauthorized DHCP servers from responding to clients on a switched network?

1. Port security
2. STP
3. DHCP snooping
4. CDP

Correct Answer: 3. DHCP snooping

Explanation :-

DHCP snooping is a Layer 2 security feature designed to protect switched networks against unauthorized or rogue DHCP servers. It allows administrators to identify trusted interfaces where legitimate DHCP server responses are expected. DHCP messages received on untrusted interfaces can be filtered according to the configuration. Port security focuses primarily on controlling MAC addresses, STP prevents Layer 2 loops, and CDP provides neighbor discovery. DHCP snooping can also create a binding database containing information such as client MAC addresses, IP addresses, VLANs, and interfaces, which can support other security mechanisms.

Question 194. Which type of IPv6 address is used to identify a group of receiving interfaces?

1. Multicast
2. Unicast
3. Anycast
4. Link-local

Correct Answer: 1. Multicast

Explanation :-

An IPv6 multicast address identifies a group of interfaces, allowing a packet to be delivered to multiple participating receivers. IPv6 multicast addresses use the FF00::/8 prefix. Unlike IPv4, IPv6 does not use broadcast addressing; multicast is used for many functions that require one-to-many communication. Unicast identifies a single interface, while anycast identifies multiple interfaces but delivers traffic to one selected member according to routing. Link-local describes a scope and address type used for communication on a local link. Multicast is therefore the IPv6 addressing type intended for group communication.

Question 195. Which Cisco IOS command displays the ARP table?

1. show arp
2. show mac address-table
3. show ip route
4. show cdp neighbors

Correct Answer: 1. show arp

Explanation :-

The show arp command displays the Address Resolution Protocol table on a Cisco device. The ARP table contains mappings between IPv4 addresses and corresponding MAC addresses that the device has learned or configured. This information helps a router or Layer 3 interface deliver IPv4 packets on directly connected networks. The MAC address table is primarily associated with Layer 2 switching, while show ip route displays routing information and show cdp neighbors displays Cisco neighbor information. ARP table inspection is useful when troubleshooting local IPv4 connectivity and address-resolution problems.

Question 196. Which protocol is commonly used to copy Cisco IOS images or configuration files without authentication or encryption?

1. SSH
2. SFTP
3. TFTP
4. HTTPS

Correct Answer: 3. TFTP

Explanation :-

Trivial File Transfer Protocol (TFTP) is a simple file-transfer protocol commonly used in network environments to transfer Cisco IOS images or configuration files. TFTP does not provide the authentication and encryption capabilities associated with secure protocols such as SSH-based SFTP. Cisco devices can use commands such as copy to transfer files between the device and a TFTP server. Because TFTP is lightweight and simple, it has historically been widely used for network-device file operations, although secure alternatives may be preferred when stronger protection is required.

Question 197. What is the purpose of a loopback interface on a Cisco router?

1. Provide a logical interface that is not tied to a physical port
2. Connect two Ethernet cables directly
3. Disable unused physical interfaces
4. Create a Layer 2 broadcast storm

Correct Answer: 4. Provide a logical interface that is not tied to a physical port

Explanation :-

A loopback interface is a logical interface that is not associated with a specific physical port. Because it remains available as long as the device’s routing system is operational, it can provide a stable logical address for management, routing protocols, testing, or router identification. Loopback interfaces are frequently used as OSPF router IDs or stable management endpoints. They do not physically connect Ethernet cables or disable interfaces. Creating a loopback interface also does not create a broadcast storm. Its logical nature makes it useful when a stable interface address is required.

Question 198. Which protocol provides encrypted command-line access to a Cisco device?

1. Telnet
2. SSH
3. TFTP
4. SNMP

Correct Answer: 2. SSH

Explanation :-

Secure Shell (SSH) provides encrypted remote command-line access to Cisco devices. It protects management sessions by encrypting authentication credentials and command traffic. Telnet provides similar interactive remote access but transmits its session without the encryption provided by SSH. TFTP is intended for simple file transfers, while SNMP is primarily used for monitoring and management information exchange. SSH is therefore the preferred protocol when administrators need secure remote CLI access. Cisco devices generally require appropriate hostname, domain, authentication, and cryptographic configuration before SSH can be used.

Question 199. Which command displays the current IPv6 routing table on a Cisco router?

1. show ip route
2. show ipv6 interface
3. show ipv6 route
4. show interfaces

Correct Answer: 3. show ipv6 route

Explanation :-

The show ipv6 route command displays the IPv6 routing table on a Cisco router. The routing table contains IPv6 destination prefixes and information about how the router should forward packets toward those destinations. show ip route displays the IPv4 routing table instead. show ipv6 interface provides information about IPv6 configuration and operation on interfaces but does not display the complete IPv6 routing table. show interfaces provides general interface information. The correct command for directly viewing IPv6 routing information is therefore show ipv6 route.

Question 200. Which network device typically separates broadcast domains and makes forwarding decisions based on IP addresses?

1. Hub
2. Switch
3. Access point
4. Router

Correct Answer: 4. Router

Explanation :-

A router operates primarily at Layer 3 and separates broadcast domains by connecting different IP networks or subnets. It examines destination IP addresses and uses its routing table to determine how packets should be forwarded. A traditional Layer 2 switch forwards Ethernet frames based on MAC addresses and normally keeps devices within the same VLAN in one broadcast domain. A hub repeats signals to its ports, while an access point provides wireless connectivity and bridges wireless clients to a wired network. Routers therefore provide the Layer 3 boundary between different IP networks and broadcast domains.