View Full Cisco 100-140 Exam Dumps and Practice Test Dumps

 

Question 41. Which protocol is used to securely transfer files between a client and server over an SSH connection?

1. TFTP
2. FTP
3. SCP
4. SNMP

Correct Answer: 3. SCP

Explanation :-

Secure Copy Protocol (SCP) provides file transfer using the SSH protocol, allowing files to be transferred securely between systems. Because the communication is protected by SSH, credentials and transferred data are encrypted during the session. TFTP is a lightweight file-transfer protocol that does not provide built-in authentication or encryption, while traditional FTP also does not inherently encrypt its communication. SNMP is primarily used for network monitoring and management. On Cisco devices, secure file-transfer methods such as SCP can be useful when moving configuration files or software-related files while protecting the contents and authentication information.

Question 42. Which type of IPv6 address is automatically configured on an interface for communication on the local link?

1. Global unicast
2. Link-local
3. Multicast
4. Anycast

Correct Answer: 2. Link-local

Explanation :-

IPv6 interfaces use link-local addresses for communication with neighboring devices on the same local link. Link-local addresses come from the FE80::/10 range and are automatically generated or configured on IPv6-enabled interfaces. They are essential for functions such as Neighbor Discovery and routing-protocol communication. Global unicast addresses are used for broader routed communication, multicast addresses identify groups of devices, and anycast addresses identify a group of interfaces where traffic is delivered to an appropriate member. IPv6 requires link-local addressing for many fundamental local-link operations even when a global unicast address is also configured.

Question 43. Which device feature allows a switch port to restrict access based on MAC addresses?

1. Port security
2. NAT
3. DHCP relay
4. Spanning Tree Protocol

Correct Answer: 1. Port security

Explanation :-

Cisco switch port security can restrict which MAC addresses are allowed to use a particular switch interface. Administrators can configure a maximum number of secure MAC addresses and specify how the switch should respond when a violation occurs. This feature can help limit unauthorized devices from connecting through designated access ports. NAT performs address translation, DHCP relay forwards DHCP requests between networks, and Spanning Tree Protocol helps prevent Layer 2 loops. Port security is therefore primarily a Layer 2 access-control mechanism that operates at the switch-port level.

Question 44. What problem does Spanning Tree Protocol primarily prevent in a switched Ethernet network?

1. IP address exhaustion
2. DNS failures
3. Routing-table corruption
4. Layer 2 switching loops

Correct Answer: 4. Layer 2 switching loops

Explanation :-

Spanning Tree Protocol (STP) prevents Layer 2 switching loops by logically blocking redundant paths while maintaining them as alternatives for failover. Without loop prevention, redundant Ethernet connections can allow frames to circulate continuously, causing broadcast storms, duplicate frames, and unstable MAC address learning. STP calculates a loop-free logical topology and can unblock previously blocked paths when a topology change occurs. STP does not primarily address IP address exhaustion, DNS failures, or routing-table corruption. Understanding STP is important when designing networks that use redundant switch connections for improved availability.

Question 45. Which protocol is commonly used by network devices to discover directly connected Cisco devices?

1. CDP
2. DHCP
3. DNS
4. NTP

Correct Answer: 1. CDP

Explanation :-

Cisco Discovery Protocol (CDP) allows Cisco devices to discover information about directly connected Cisco neighbors. Depending on the platform and configuration, CDP can provide information such as the neighboring device identifier, local and remote interfaces, device capabilities, and platform. CDP operates at the data-link layer and is useful for network discovery and troubleshooting. DHCP provides IP configuration, DNS resolves names, and NTP synchronizes clocks. Because CDP can reveal device information, administrators should consider whether it should be enabled on interfaces where exposing such information is unnecessary.

Question 46. Which routing method allows an administrator to manually define a path to a destination network?

1. Dynamic routing
2. Static routing
3. Default switching
4. Automatic addressing

Correct Answer: 2. Static routing

Explanation :-

A static route is manually configured by a network administrator to specify how traffic should reach a particular destination network. Static routing can be useful in small networks, stub networks, or situations where an administrator requires a specific forwarding path. Unlike dynamic routing protocols, static routes do not automatically learn alternative paths when the network topology changes unless additional mechanisms are configured. Dynamic routing protocols exchange routing information and can adapt to topology changes. Static routes therefore provide direct administrative control but require manual maintenance when relevant network conditions change.

Question 47. Which IPv4 address is a valid private address?

1. 11.20.30.40
2. 172.32.10.5
3. 192.168.50.25
4. 224.10.10.10

Correct Answer: 3. 192.168.50.25

Explanation :-

The IPv4 private address ranges include 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. The address 192.168.50.25 falls within the third private range and can therefore be used for internal network addressing. The address 172.32.10.5 is outside the private 172.16.0.0/12 range, while 224.10.10.10 belongs to the multicast range. 11.20.30.40 is not part of the standard private ranges. Private addresses are commonly used with NAT when internal hosts need to communicate with public Internet destinations.

Question 48. Which command can display the status of interfaces and their assigned IP addresses in a concise format?

1. show interfaces description
2. show ip interface brief
3. show access-lists
4. show cdp neighbors detail

Correct Answer: 2. show ip interface brief

Explanation :-

The show ip interface brief command provides a concise summary of interfaces, their assigned IP addresses, and their status. It is particularly useful during initial troubleshooting because administrators can quickly identify interfaces that are administratively down or whose line protocol is down. The command does not provide the full level of detail available from show interfaces. Other commands serve different purposes: show access-lists displays ACL information, while show cdp neighbors detail provides detailed information about directly connected Cisco devices. The concise output of show ip interface brief makes it a frequently used operational command.

Question 49. What is the primary function of a router?

1. To forward packets between different IP networks
2. To provide only physical-layer connectivity
3. To replace all DNS servers
4. To assign MAC addresses to Ethernet devices

Correct Answer: 1. To forward packets between different IP networks

Explanation :-

A router primarily forwards packets between different Layer 3 networks. It examines destination IP addresses and uses its routing table to determine an appropriate next hop or outgoing interface. Routers can also perform functions such as ACL filtering, NAT, DHCP services or relay, and routing-protocol participation depending on the platform and configuration. A basic hub provides physical-layer connectivity, while Ethernet switches primarily provide Layer 2 forwarding within VLANs. MAC addresses are assigned to network interfaces rather than by routers. Understanding routing is fundamental to determining how traffic moves between separate IP networks.

Question 50. Which command displays information about neighboring Cisco devices discovered through CDP?

1. show ip route
2. show vlan brief
3. show mac address-table
4. show cdp neighbors

Correct Answer: 4. show cdp neighbors

Explanation :-

The show cdp neighbors command displays information about Cisco devices directly connected to the local device and discovered through Cisco Discovery Protocol. Typical information includes the neighboring device identifier, local interface, remote interface, platform, and capabilities. The command is useful for understanding physical and logical network topology and for troubleshooting connections between Cisco devices. show ip route displays routing information, show vlan brief summarizes VLAN configuration, and show mac address-table displays learned Layer 2 addresses. CDP information should be interpreted alongside interface and configuration data when troubleshooting a network.

Question 51. Which protocol is commonly used to monitor and manage network devices?

1. SMTP
2. SNMP
3. FTP
4. DHCP

Correct Answer: 2. SNMP

Explanation :-

Simple Network Management Protocol (SNMP) is widely used to monitor and manage network devices. Network management systems can use SNMP to retrieve operational information, collect performance statistics, and receive notifications such as traps or informs. SNMP can help administrators monitor interfaces, device resources, and other operational metrics. SMTP is used for email transport, FTP transfers files, and DHCP provides network configuration to clients. Secure SNMP configurations should use appropriate authentication and privacy mechanisms where supported, especially because management information can be sensitive.

Question 52. Which Ethernet cable type is commonly used to connect a host to a switch?

1. Straight-through Ethernet cable
2. Rollover cable
3. Console-only cable
4. Serial DCE cable

Correct Answer: 1. Straight-through Ethernet cable

Explanation :-

A straight-through Ethernet cable has traditionally been used to connect unlike Ethernet device types, such as a host to a switch. Modern Ethernet interfaces often support auto-MDI/MDIX, which can automatically detect and compensate for cable-pair differences, reducing the need to manually select straight-through or crossover cables in many environments. Rollover cables are associated with console connections on certain Cisco equipment, while serial DCE cables are used with serial interfaces in relevant environments. Understanding cabling conventions remains useful when troubleshooting physical connectivity and legacy equipment.

Question 53. Which IPv6 prefix identifies global unicast addresses commonly used on the public Internet?

1. FF00::/8
2. FE80::/10
3. 2000::/3
4. FC00::/7

Correct Answer: 3. 2000::/3

Explanation :-

The IPv6 prefix 2000::/3 identifies the global unicast address space used for globally routable IPv6 addresses. Global unicast addresses can be assigned to interfaces that need communication across routed networks and the Internet. FE80::/10 is reserved for link-local addresses, FF00::/8 identifies multicast addresses, and FC00::/7 is associated with unique local addresses. Recognizing IPv6 address types helps administrators determine how an address can be used and whether it is intended for local-link, private-like internal, multicast, or globally routed communication.

Question 54. What is the purpose of a DHCP relay agent?

1. To encrypt DHCP messages
2. To forward DHCP requests between clients and a DHCP server on different networks
3. To replace the DHCP server
4. To translate IPv4 addresses into IPv6 addresses

Correct Answer: 2. To forward DHCP requests between clients and a DHCP server on different networks

Explanation :-

A DHCP relay agent forwards DHCP messages between clients and a DHCP server when the server is located on a different Layer 3 network. Because DHCP clients initially use broadcast messages and routers normally do not forward broadcasts, a relay agent allows centralized DHCP services to support clients across multiple subnets. On Cisco IOS, the ip helper-address command is commonly configured on a Layer 3 interface for this purpose. DHCP relay does not encrypt messages, replace the DHCP server, or translate IPv4 into IPv6. It provides a mechanism for extending DHCP services across routed networks.

Question 55. Which type of IPv4 traffic is sent from one source to all hosts in a broadcast domain?

1. Unicast
2. Anycast
3. Broadcast
4. Multicast

Correct Answer: 3. Broadcast

Explanation :-

Broadcast traffic is addressed so that all appropriate hosts within a broadcast domain can receive it. In IPv4, the limited broadcast address is 255.255.255.255, while subnet-directed broadcasts can use a subnet’s broadcast address depending on network configuration and forwarding behavior. Unicast traffic is intended for a single destination, while multicast targets a group of interested receivers. Anycast is primarily an IPv6 addressing concept in which multiple interfaces share an address and traffic is delivered to an appropriate member. Broadcast behavior is important when considering network segmentation and broadcast-domain size.

Question 56. Which protocol is commonly used to obtain an IP address automatically from a DHCP server?

1. DHCP
2. DNS
3. ARP
4. OSPF

Correct Answer: 1. DHCP

Explanation :-

Dynamic Host Configuration Protocol (DHCP) allows clients to automatically obtain IPv4 network configuration from a DHCP server. A typical DHCP exchange includes discovery, offer, request, and acknowledgment messages. Depending on the server configuration, the client can receive an IP address, subnet mask, default gateway, DNS servers, lease information, and other parameters. DNS resolves names, ARP resolves local IPv4-to-MAC mappings, and OSPF exchanges routing information between routers. DHCP reduces manual configuration and helps organizations manage addressing consistently across large numbers of endpoints.

Question 57. Which Cisco IOS command changes the hostname of a router or switch?

1. hostname
2. device-name
3. set hostname
4. name-device

Correct Answer: 1. hostname

Explanation :-

The hostname command is used from global configuration mode to assign a name to a Cisco IOS device. For example, an administrator can enter hostname Branch-Router to identify the device as Branch-Router. A meaningful hostname can make network administration easier by helping administrators identify devices in command prompts, logs, and management systems. The command must be entered in the appropriate configuration mode. The other listed commands are not standard Cisco IOS commands for configuring the device hostname. Proper device naming is especially useful in environments containing many routers and switches.

Question 58. Which protocol is responsible for securely resolving and communicating with a remote Cisco device’s command-line interface?

1. Telnet
2. SSH
3. TFTP
4. SNMP

Correct Answer: 2. SSH

Explanation :-

Secure Shell (SSH) provides encrypted remote command-line access to network devices. It protects authentication credentials and interactive management traffic from being transmitted in clear text. Telnet can provide remote CLI access but does not provide the same encryption and is therefore unsuitable for secure management when stronger alternatives are available. TFTP is primarily used for lightweight file transfers, while SNMP is used for network monitoring and management. Cisco administrators commonly configure SSH together with local or centralized authentication and appropriate access controls to secure remote administrative sessions.

Question 59. Which routing protocol uses hop count as its primary routing metric?

1. OSPF
2. BGP
3. RIP
4. EIGRP

Correct Answer: 3. RIP

Explanation :-

Routing Information Protocol (RIP) uses hop count as its primary routing metric. A router considers the number of routers that must be crossed to reach a destination, with a maximum usable hop count of 15; a metric of 16 represents an unreachable destination. OSPF uses a cost metric, EIGRP uses a composite metric, and BGP uses path attributes rather than simply hop count. RIP is therefore straightforward but has scalability limitations for larger networks. Understanding routing metrics helps administrators interpret why a particular route is selected by a routing protocol.

Question 60. Which feature allows multiple internal IPv4 hosts to share a single public IPv4 address by using different transport-layer port numbers?

1. Static routing
2. VLAN trunking
3. Port Address Translation (PAT)
4. Spanning Tree Protocol

Correct Answer: 3. Port Address Translation (PAT)

Explanation :-

Port Address Translation (PAT) allows multiple internal hosts to share a public IPv4 address by differentiating their connections through transport-layer port numbers. PAT is commonly used on networks where many private IPv4 hosts need Internet access while only a limited number of public addresses are available. The NAT device maintains translation information so that returning traffic can be associated with the appropriate internal host. Static routing determines forwarding paths, VLAN trunking carries multiple VLANs, and Spanning Tree Protocol prevents Layer 2 loops. PAT is therefore an important mechanism for conserving public IPv4 address space.