{"id":22527,"date":"2026-09-26T05:48:00","date_gmt":"2026-09-26T05:48:00","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=22527"},"modified":"2026-09-26T05:48:00","modified_gmt":"2026-09-26T05:48:00","slug":"cisco-100-140-practice-test-questions-and-exam-dumps-part-7-q121-140","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/cisco-100-140-practice-test-questions-and-exam-dumps-part-7-q121-140\/","title":{"rendered":"Cisco 100-140 Practice Test Questions and Exam Dumps Part 7 Q121-140"},"content":{"rendered":"

View Full <\/b>Cisco 100-140 Exam Dumps<\/b><\/a> and Practice Test Dumps<\/b><\/h1>\n

 <\/p>\n

Question 121. Which protocol is used to securely manage a Cisco device through a remote command-line session?<\/b><\/p>\n

    \n
  1. <\/b> TFTP<\/span><\/li>\n
  2. <\/b> SSH<\/span><\/li>\n
  3. <\/b> FTP<\/span><\/li>\n
  4. <\/b> Telnet<\/span><\/li>\n<\/ol>\n

    Correct Answer: 2. SSH<\/b><\/p>\n

    Explanation :-<\/b><\/p>\n

    Secure Shell (SSH) provides encrypted remote command-line access to Cisco network devices. It protects administrative credentials and session information while allowing an administrator to configure and troubleshoot a device remotely. Telnet also provides remote command-line access but sends information without encryption, making it less secure for device management. TFTP and FTP are primarily file-transfer protocols rather than remote management protocols. SSH is commonly used with locally configured or centralized authentication mechanisms and is an important component of secure network administration.<\/span><\/p>\n

    Question 122. Which command displays the IPv6 routing table on a Cisco router?<\/b><\/p>\n

      \n
    1. <\/b> show ipv6 interface brief<\/span><\/li>\n
    2. <\/b> show ip route<\/span><\/li>\n
    3. <\/b> show ipv6 neighbors<\/span><\/li>\n
    4. <\/b> show ipv6 route<\/span><\/li>\n<\/ol>\n

      Correct Answer: 4. show ipv6 route<\/b><\/p>\n

      Explanation :-<\/b><\/p>\n

      The <\/span>show ipv6 route<\/span> command displays the IPv6 routing table on a Cisco IOS device. The output can contain connected, local, static, and dynamically learned IPv6 routes, depending on the configuration. This command is useful when troubleshooting IPv6 forwarding because it shows which networks the router knows how to reach and the associated next-hop or outgoing-interface information. <\/span>show ipv6 interface brief<\/span> summarizes IPv6 interface status, while <\/span>show ipv6 neighbors<\/span> provides neighbor information. <\/span>show ip route<\/span> displays the IPv4 routing table rather than the IPv6 routing table.<\/span><\/p>\n

      Question 123. Which protocol dynamically assigns IP addresses to hosts on a network?<\/b><\/p>\n

        \n
      1. <\/b> DHCP<\/span><\/li>\n
      2. <\/b> DNS<\/span><\/li>\n
      3. <\/b> ARP<\/span><\/li>\n
      4. <\/b> SNMP<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1. DHCP<\/b><\/p>\n

        Explanation :-<\/b><\/p>\n

        Dynamic Host Configuration Protocol (DHCP) automatically provides hosts with network configuration information. A DHCP server can assign an IP address along with a subnet mask, default gateway, DNS server information, and lease duration. This reduces the need for administrators to manually configure each endpoint. DNS is responsible for name resolution, ARP maps IPv4 addresses to MAC addresses on a local network, and SNMP is commonly used for monitoring and management. DHCP is therefore the protocol specifically designed to dynamically provide IP configuration to network clients.<\/span><\/p>\n

        Question 124. What is the main purpose of Spanning Tree Protocol (STP) in a switched network?<\/b><\/p>\n

          \n
        1. <\/b> To assign IP addresses<\/span><\/li>\n
        2. <\/b> To translate private IP addresses<\/span><\/li>\n
        3. <\/b> To prevent Layer 2 switching loops<\/span><\/li>\n
        4. <\/b> To encrypt network traffic<\/span><\/li>\n<\/ol>\n

          Correct Answer: 3. To prevent Layer 2 switching loops<\/b><\/p>\n

          Explanation :-<\/b><\/p>\n

          Spanning Tree Protocol (STP) prevents Layer 2 loops in switched Ethernet networks where redundant paths exist. STP builds a loop-free logical topology by placing selected redundant ports into a blocking state while maintaining them as potential backup paths. Without loop prevention, redundant Layer 2 paths can cause broadcast storms, duplicate frames, and MAC address instability. STP does not assign IP addresses, perform NAT, or encrypt traffic. Its primary purpose is to maintain a loop-free Layer 2 forwarding topology while preserving redundancy.<\/span><\/p>\n

          Question 125. Which IPv4 subnet mask corresponds to a \/27 prefix length?<\/b><\/p>\n

            \n
          1. <\/b> 255.255.255.0<\/span><\/li>\n
          2. <\/b> 255.255.255.192<\/span><\/li>\n
          3. <\/b> 255.255.255.224<\/span><\/li>\n
          4. <\/b> 255.255.255.240<\/span><\/li>\n<\/ol>\n

            Correct Answer: 3. 255.255.255.224<\/b><\/p>\n

            Explanation :-<\/b><\/p>\n

            A \/27 IPv4 prefix uses 27 bits for the network portion and leaves 5 bits for hosts. The corresponding subnet mask is 255.255.255.224. This provides 32 total addresses in each subnet, with 30 traditionally usable host addresses after excluding the network and broadcast addresses. A \/24 mask is 255.255.255.0, \/26 is 255.255.255.192, and \/28 is 255.255.255.240. Understanding prefix lengths and their corresponding subnet masks is important when calculating network boundaries, host capacity, and subnet ranges.<\/span><\/p>\n

            Question 126. Which Cisco IOS command changes the hostname of a network device?<\/b><\/p>\n

              \n
            1. <\/b> hostname<\/span><\/li>\n
            2. <\/b> enable secret<\/span><\/li>\n
            3. <\/b> banner motd<\/span><\/li>\n
            4. <\/b> ip host<\/span><\/li>\n<\/ol>\n

              Correct Answer: 1. hostname<\/b><\/p>\n

              Explanation :-<\/b><\/p>\n

              The <\/span>hostname<\/span> command is used from global configuration mode to change the identifying name of a Cisco IOS device. For example, an administrator can enter <\/span>hostname Branch-Router<\/span> to assign the device a new hostname. The hostname is displayed in the command prompt and helps administrators identify devices during configuration and troubleshooting. <\/span>enable secret<\/span> configures a privileged EXEC authentication secret, <\/span>banner motd<\/span> configures a login or message-of-the-day banner, and <\/span>ip host<\/span> creates a static hostname-to-IP mapping. Therefore, <\/span>hostname<\/span> is the appropriate command for changing the device name.<\/span><\/p>\n

              Question 127. Which protocol is commonly used to monitor and manage network devices remotely?<\/b><\/p>\n

                \n
              1. <\/b> ARP<\/span><\/li>\n
              2. <\/b> TFTP<\/span><\/li>\n
              3. <\/b> SNMP<\/span><\/li>\n
              4. <\/b> FTP<\/span><\/li>\n<\/ol>\n

                Correct Answer: 3. SNMP<\/b><\/p>\n

                Explanation :-<\/b><\/p>\n

                Simple Network Management Protocol (SNMP) is commonly used to monitor and manage network devices such as routers, switches, servers, and other infrastructure. Network management systems can use SNMP to retrieve operational information, monitor performance, and receive notifications from devices. SNMP uses management information structures and defined operations for exchanging monitoring data. ARP is used for IPv4 address resolution, TFTP provides lightweight file transfers, and FTP is a file-transfer protocol. SNMP is therefore the protocol most directly associated with centralized network monitoring and management.<\/span><\/p>\n

                Question 128. Which command displays the VLANs configured on a Cisco switch along with their associated access ports?<\/b><\/p>\n

                  \n
                1. <\/b> show interfaces trunk<\/span><\/li>\n
                2. <\/b> show vlan brief<\/span><\/li>\n
                3. <\/b> show ip route<\/span><\/li>\n
                4. <\/b> show cdp neighbors<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 2. show vlan brief<\/b><\/p>\n

                  Explanation :-<\/b><\/p>\n

                  The <\/span>show vlan brief<\/span> command provides a concise summary of VLANs configured on a Cisco switch. It normally displays VLAN IDs, VLAN names, status, and access ports associated with each VLAN. This makes it useful when verifying whether a switch port has been assigned to the expected VLAN. <\/span>show interfaces trunk<\/span> focuses on trunking information, <\/span>show ip route<\/span> displays Layer 3 routing information, and <\/span>show cdp neighbors<\/span> displays discovered Cisco neighbors. For a quick view of VLAN membership and access ports, <\/span>show vlan brief<\/span> is the appropriate command.<\/span><\/p>\n

                  Question 129. What does the administrative distance of a routing protocol help a router determine?<\/b><\/p>\n

                    \n
                  1. <\/b> The physical distance between routers<\/span><\/li>\n
                  2. <\/b> The bandwidth of an interface<\/span><\/li>\n
                  3. <\/b> The number of hosts in a subnet<\/span><\/li>\n
                  4. <\/b> The trustworthiness of routes learned from different sources<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 4. The trustworthiness of routes learned from different sources<\/b><\/p>\n

                    Explanation :-<\/b><\/p>\n

                    Administrative distance (AD) is used by Cisco routers to rank the trustworthiness of routes learned from different routing sources. When multiple routing protocols provide routes to the same destination network, the route with the lower administrative distance is generally preferred. Administrative distance is different from a routing protocol’s metric, which is used to compare routes within that routing protocol. AD does not represent physical distance, interface bandwidth, or subnet host capacity. It provides a mechanism for comparing the relative reliability of different route sources.<\/span><\/p>\n

                    Question 130. Which command can display the default gateway configured on a Cisco Layer 2 switch?<\/b><\/p>\n

                      \n
                    1. <\/b> show ip route<\/span><\/li>\n
                    2. <\/b> show vlan brief<\/span><\/li>\n
                    3. <\/b> show running-config<\/span><\/li>\n
                    4. <\/b> show mac address-table<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 1. show ip route<\/b><\/p>\n

                      Explanation :-<\/b><\/p>\n

                      On a Layer 3-capable Cisco device, <\/span>show ip route<\/span> can display the routing information used to reach remote networks, including a default route when one is configured. For a Layer 2 switch, the management default gateway is commonly configured with the <\/span>ip default-gateway<\/span> command. The running configuration can also be examined to verify the configured gateway directly. Among the listed commands, <\/span>show ip route<\/span> is associated with routing information, while the other commands focus on VLANs, configuration text, or MAC addresses. The exact verification method depends on the device’s Layer 2 or Layer 3 operating role.<\/span><\/p>\n

                      Question 131. Which IPv6 mechanism replaces ARP for discovering the link-layer address of a neighboring device?<\/b><\/p>\n

                        \n
                      1. <\/b> DHCPv6<\/span><\/li>\n
                      2. <\/b> NDP<\/span><\/li>\n
                      3. <\/b> NAT64<\/span><\/li>\n
                      4. <\/b> DNS<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 2. NDP<\/b><\/p>\n

                        Explanation :-<\/b><\/p>\n

                        IPv6 uses Neighbor Discovery Protocol (NDP) to perform functions that include discovering neighboring devices and resolving IPv6 addresses to link-layer addresses. NDP operates through ICMPv6 messages and is part of the IPv6 Neighbor Discovery framework. IPv6 does not use ARP in the same way IPv4 does. DHCPv6 can provide configuration information, NAT64 supports communication between IPv6 and IPv4 environments, and DNS provides name resolution. NDP is therefore the IPv6 mechanism associated with neighbor discovery and link-layer address resolution.<\/span><\/p>\n

                        Question 132. Which interface state indicates that a Cisco interface has been administratively disabled with the shutdown command?<\/b><\/p>\n

                          \n
                        1. <\/b> Up\/up<\/span><\/li>\n
                        2. <\/b> Down\/down<\/span><\/li>\n
                        3. <\/b> Administratively down\/down<\/span><\/li>\n
                        4. <\/b> Up\/down<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 3. Administratively down\/down<\/b><\/p>\n

                          Explanation :-<\/b><\/p>\n

                          When a Cisco interface is manually disabled with the <\/span>shutdown<\/span> command, the interface status is typically displayed as administratively down, with the line protocol also down. This indicates that the interface has been intentionally disabled through configuration rather than simply experiencing a physical or protocol problem. The <\/span>no shutdown<\/span> command can be used to enable the interface administratively. An up\/up state indicates normal operational status, while other combinations can indicate different physical or data-link conditions. Checking interface status is a fundamental troubleshooting step.<\/span><\/p>\n

                          Question 133. Which protocol uses TCP port 22 by default?<\/b><\/p>\n

                            \n
                          1. <\/b> SSH<\/span><\/li>\n
                          2. <\/b> DNS<\/span><\/li>\n
                          3. <\/b> TFTP<\/span><\/li>\n
                          4. <\/b> SNMP<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1. SSH<\/b><\/p>\n

                            Explanation :-<\/b><\/p>\n

                            SSH uses TCP port 22 by default for secure remote administration and encrypted command-line sessions. TCP provides the reliable transport needed for the SSH session. DNS commonly uses port 53, TFTP uses UDP port 69, and SNMP commonly uses UDP ports 161 and 162. Knowing common protocol port numbers helps network administrators identify services during configuration, troubleshooting, and security analysis. Port numbers identify transport-layer application endpoints and are separate from IP addresses, which identify network-layer destinations.<\/span><\/p>\n

                            Question 134. Which type of IPv4 address is 127.0.0.1?<\/b><\/p>\n

                              \n
                            1. <\/b> Multicast address<\/span><\/li>\n
                            2. <\/b> Loopback address<\/span><\/li>\n
                            3. <\/b> Broadcast address<\/span><\/li>\n
                            4. <\/b> Public unicast address<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 2. Loopback address<\/b><\/p>\n

                              Explanation :-<\/b><\/p>\n

                              The IPv4 address 127.0.0.1 is a loopback address. It represents the local host and is commonly used to test the local TCP\/IP stack without sending traffic onto the physical network. The entire 127.0.0.0\/8 block is reserved for loopback purposes. Multicast addresses use a different range, broadcast addresses are used to reach multiple hosts on an applicable network, and public unicast addresses are routable addresses assigned for broader network communication. Testing 127.0.0.1 can help isolate problems involving the local networking stack from problems involving external connectivity.<\/span><\/p>\n

                              Question 135. Which Cisco feature bundles multiple physical interfaces into one logical interface for increased bandwidth and redundancy?<\/b><\/p>\n

                                \n
                              1. <\/b> EtherChannel<\/span><\/li>\n
                              2. <\/b> Port security<\/span><\/li>\n
                              3. <\/b> NAT<\/span><\/li>\n
                              4. <\/b> DHCP snooping<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1. EtherChannel<\/b><\/p>\n

                                Explanation :-<\/b><\/p>\n

                                EtherChannel combines multiple physical Ethernet links into a single logical port-channel interface. This can provide increased aggregate bandwidth and redundancy while allowing the bundle to be treated as one logical connection by switching protocols. Cisco switches can use negotiation protocols such as LACP to form EtherChannels. Port security controls MAC-based access, NAT translates IP addresses, and DHCP snooping helps protect against unauthorized DHCP servers. EtherChannel is therefore the technology designed to combine multiple physical switch links into one logical connection.<\/span><\/p>\n

                                Question 136. Which security mechanism helps protect a switched network against rogue DHCP servers?<\/b><\/p>\n

                                  \n
                                1. <\/b> Port mirroring<\/span><\/li>\n
                                2. <\/b> DHCP snooping<\/span><\/li>\n
                                3. <\/b> NTP<\/span><\/li>\n
                                4. <\/b> EtherChannel<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 2. DHCP snooping<\/b><\/p>\n

                                  Explanation :-<\/b><\/p>\n

                                  DHCP snooping is a Layer 2 security feature that helps prevent unauthorized DHCP servers from providing potentially incorrect network configuration information. It identifies trusted and untrusted switch ports. DHCP server messages received on untrusted ports can be blocked, while legitimate DHCP server traffic is expected through trusted interfaces. DHCP snooping can also create a binding database containing client information that can support other security features. NTP provides time synchronization, EtherChannel combines physical links, and port mirroring copies traffic for analysis. DHCP snooping is therefore the relevant protection mechanism.<\/span><\/p>\n

                                  Question 137. Which command can be used to display the ARP cache on a Cisco device?<\/b><\/p>\n

                                    \n
                                  1. <\/b> show vlan brief<\/span><\/li>\n
                                  2. <\/b> show ip route<\/span><\/li>\n
                                  3. <\/b> show arp<\/span><\/li>\n
                                  4. <\/b> show interfaces trunk<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 3. show arp<\/b><\/p>\n

                                    Explanation :-<\/b><\/p>\n

                                    The <\/span>show arp<\/span> command displays the ARP table maintained by a Cisco device. The table associates IPv4 addresses with corresponding MAC addresses and can include information about the associated interface. This information is useful when troubleshooting local IPv4 connectivity and address-resolution problems. <\/span>show ip route<\/span> displays routing information, <\/span>show vlan brief<\/span> summarizes VLAN configuration, and <\/span>show interfaces trunk<\/span> displays trunking information. ARP operates within IPv4 networks to resolve Layer 3 addresses to Layer 2 Ethernet addresses when communication occurs on a local network segment.<\/span><\/p>\n

                                    Question 138. Which WAN technology uses packet-switching concepts and virtual circuits to connect remote locations?<\/b><\/p>\n

                                      \n
                                    1. <\/b> Frame Relay<\/span><\/li>\n
                                    2. <\/b> Ethernet switching<\/span><\/li>\n
                                    3. <\/b> Wi-Fi<\/span><\/li>\n
                                    4. <\/b> STP<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 1. Frame Relay<\/b><\/p>\n

                                      Explanation :-<\/b><\/p>\n

                                      Frame Relay is a legacy WAN technology based on packet-switching concepts and virtual circuits. It uses identifiers such as Data-Link Connection Identifiers (DLCIs) to identify virtual connections through a Frame Relay network. Frame Relay was historically used to connect geographically separated sites through service-provider infrastructure. Ethernet switching is primarily used within LAN environments, Wi-Fi provides wireless LAN connectivity, and STP prevents Layer 2 switching loops. Although modern networks commonly use newer WAN technologies, understanding Frame Relay remains relevant to networking fundamentals and legacy Cisco concepts.<\/span><\/p>\n

                                      Question 139. Which routing protocol uses hop count as its primary routing metric?<\/b><\/p>\n

                                        \n
                                      1. <\/b> OSPF<\/span><\/li>\n
                                      2. <\/b> RIP<\/span><\/li>\n
                                      3. <\/b> EIGRP<\/span><\/li>\n
                                      4. <\/b> BGP<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 2. RIP<\/b><\/p>\n

                                        Explanation :-<\/b><\/p>\n

                                        Routing Information Protocol (RIP) uses hop count as its primary metric. Each router traversed toward a destination increases the hop count by one, and RIP considers routes with fewer hops preferable. RIP has a maximum usable hop count of 15, while a metric of 16 represents an unreachable destination. OSPF uses a cost-based metric, EIGRP uses a composite metric based on factors such as bandwidth and delay, and BGP primarily uses path attributes for route selection. RIP is therefore the routing protocol associated with hop-count-based route selection.<\/span><\/p>\n

                                        Question 140. Which command can be used to verify connectivity from a Cisco device to a destination using ICMP Echo messages?<\/b><\/p>\n

                                          \n
                                        1. <\/b> traceroute<\/span><\/li>\n
                                        2. <\/b> show interfaces<\/span><\/li>\n
                                        3. <\/b> ping<\/span><\/li>\n
                                        4. <\/b> show arp<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 3. ping<\/b><\/p>\n

                                          Explanation :-<\/b><\/p>\n

                                          The <\/span>ping<\/span> command uses ICMP Echo Request and Echo Reply messages to test basic IP connectivity between a Cisco device and a destination. It can help determine whether the destination responds and can provide basic response-time and packet-loss information. <\/span>traceroute<\/span> is used to identify the path toward a destination and can help locate where forwarding problems occur. <\/span>show interfaces<\/span> displays interface information, while <\/span>show arp<\/span> displays IPv4-to-MAC mappings. Ping is therefore the standard first-step command for testing basic IP reachability.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Cisco 100-140 Exam Dumps and Practice Test Dumps   Question 121. Which protocol is used to securely manage a Cisco device through a remote command-line session? TFTP SSH FTP Telnet Correct Answer: 2. SSH Explanation :- Secure Shell (SSH) provides encrypted remote command-line access to Cisco network devices. It protects administrative credentials and […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/22527"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=22527"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/22527\/revisions"}],"predecessor-version":[{"id":22528,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/22527\/revisions\/22528"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=22527"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=22527"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=22527"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}