Share your SWITCH v2.0 Experience

@ Switchy

1.Which feature prevents a switch port from receiving and forwarding general traffic, so that it handles only a copy of specifically designated traffic?

A-BPDU Guard
B-portfast
C-SPAN
D-loopguard

4. Which two statements about HSRP times are true? (Choose two.)

A-hold timer is 30 sec
B-default Hello timer is 3 sec
C- default hold timer 10 sec
D-Default hello timer 5 Sec
E-Default hello timer 30 Sec
F-Default hold timer 15 Sec

12.
Refer to the exhibit. Which statement about the port channel must be true?

correct answer >> its configure to pass all vlans

Ans. B

Thanks BoxingSurfer! (sorry I posted my question as Anonymous). I have not posted here for a long time.

You answered exactly what I was thinking. Even though if SW1 was primary server you can create the vlans and they would be propagated, however it would not set which switch was primary root for each vlan.

I have looked at several other sites and they all say “configure 500/600 only on SW1 since it is the primary server”.

1.Which feature prevents a switch port from receiving and forwarding general traffic, so that it handles only a copy of specifically designated traffic?

A-BPDU Guard
B-portfast
C-SPAN <- CORRECT
D-loopguard

4. Which two statements about HSRP times are true? (Choose two.)

A-hold timer is 30 sec
B-default Hello timer is 3 sec <- CORRECT
C-default hold timer 10 sec <- CORRECT
D-Default hello timer 5 Sec
E-Default hello timer 30 Sec
F-Default hold timer 15 Sec

@Proton

I just noticed the “no shutdown” command on interfaces fa0/3-4 is missing before saving the configurations..

@ BoxingSurfer

I checked in Spoto dumps

A-BPDU Guard >> Correct
B-portfast
C-SPAN
D-loopguard

@Karim

i dont think its BPDU Guard

“copy of specifically designated traffic” – this is SPAN behaviour

an STP port in a forwardig state doesnt ‘copy’ traffic
an STP port in a blocking state doesnt ‘copy’ traffic either

Refer to exhibit A single server in company 123 is connected via ether-channel to a single upstream switch, which ether channel load balancing method on the switch make optimal use of the redundant link as traffic flows from the routers to the server.

A- destination MAC address
B-source and destination MAC address
C-Source IP address
D-Source MAC address

which one is correct ??

Which command do you enter on a device so that users are automatically placed in enable mode
after they authenticate with TACACS+?

A. aaa authorization exec default group tacacs+ if-authenticated
B. aaa authorization exec default group tacacs+ local-case
C. aaa authorization exec default group tacacs+ enable
D. aaa authentication exec default group tacacs+ if-authenticated

any one correct answer ?

@Karim

Refer to exhibit A single server in company 123 is connected via ether-channel to a single upstream switch, which ether channel load balancing method on the switch make optimal use of the redundant link as traffic flows from the routers to the server.

A- destination MAC address
B-source and destination MAC address
C-Source IP address
D-Source MAC address

server is connected using etherchannel – This means multiple NIC ports in a bundle, just the same like etherchannel on a switch.

A- destination MAC address
destination mac address will always be the same (mac address of the logical interface, not the physical NIC’s) – This is an bad choice for load balancing method INCORRECT

B- source and destination MAC address
traffic to the server from a router (L3 routed) will have source MAC of the router.
Destination mac address will always be the same as explained above). So this answer also INCORRECT, as source and destination MAC addresses will always be the same

D- Source MAC address
traffic flowing to the server from a router will have source MAC of the router as explained above.

So correct answer is C

@Karim
Definitely the answer is A.

@ Joye

As per Spoto Dumps correct

A. aaa authorization exec default group tacacs+ if-authenticated
B. aaa authorization exec default group tacacs+ local-case
C. aaa authorization exec default group tacacs+ enable
D. aaa authentication exec default group tacacs+ if-authenticated >> CORRECT

@Karim

Which command do you enter on a device so that users are automatically placed in enable mode after they authenticate with TACACS+?

A. aaa authorization exec default group tacacs+ if-authenticated <<- CORRECT
B. aaa authorization exec default group tacacs+ local-case
C. aaa authorization exec default group tacacs+ enable
D. aaa authentication exec default group tacacs+ if-authenticated

Definitely not D as D is for authentication, not authorization

sorry em-ail

cli1900 ADD GMX . Net

@ Boxingsurfer

it mean Spoto dumps also included some wrong answers.

Past posts about how many vlans on an access port with VOIP?
Answer is 2 because you have one vlan for data and one for voice. This is the only time an access port can have 2 vlans.
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-2_55_se/configuration/guide/3750xscg/swvoip.html

Cisco IP Phone Voice Traffic
You can configure an access port with an attached Cisco IP Phone to use one VLAN for voice traffic and another VLAN for data traffic from a device attached to the phone.

@karim
@Mo
please share Spoto questios. kito4.pg @ gmail. com

Which statement is true when UDLD is configured on a link and the link is determined to be unidirectional?

A. The port remains up for a configured time interval and then error disables if the link remains unidirectional.
B. LLDP is enabled on the port.
C. The port sends a log message to the console.
D. The port is disabled immediately

Anyone got opinion on this?
Its not B – LLDP has nothing to do with UDLD
its not D – In aggressive mode the port doesnt go to errdisable immediately. There is at least an 8 second delay before this happens (8 udld frames every second)
A is possible but actually i dont think the time interval is ‘configured’ as stated here…

So leaves only C

@Karim

can you send me your last update
cli1900 ADD GMX . Net

I failed exam on 6 Feb, I passed the exam 2hrs ago.the exam has been changed except 10 to 15 question however, the sim vtp3, lacp, harp. You can find those question in 872, shared by Portuguese guys. So don’t depend on these now by the way, I m surprised about news questions.

Refer to the exhibit. Which path does PC1 take to reach DSW1?
A. PC1 goes from ALSW1 to DSW2 to reach DSW1.
B. PC1 goes from ALSW1 to DSW1
C. PC1 goes from ALSW1 to ALSW2 to reach DSW1.
D. PC1 goes from ALSW1 to DSW2 to ALSW2 to reach DSW1
E. PC1 goes from ALSW1 to DSW2 to CORE to reach DSW1.
Answer: A

UESTION 763
Which two packet types are used by the TACACS+ authorization process? (Choose two.)
A. request
B. response
C. reply
D. continue
E. start
Answer: AB

QUESTION 805
Which two device types does DHCP snooping treat as untrusted in an ISP environment? (Choose
two.)
A. end host devices
B. customer edge services
C. user-facing provider edge devices
D. provider edge devices
E. provider devices
Answer: A B

QUESTION 945
Which command displays the current SDM template?
A. show sdm prefer layer-2
B. show sdm prefer routing
C. show sdm prefer default
D. show sdm prefer
Answer: D

QUESTION 946
Which feature is enabled automatically when you configure HSRP on an interce ?
A. IGMP snooping
B. ICMP redirect messages
C. HSRP preemption
D. HSRP tracking
Answer: B

Which statement about HSRP, GLBP, and VRRP is true?
A. VRRP group members communicate using multicast address 224.0.0.102.
B. MAC address 0000.0c07.acOc indicates that default gateway redundancy is provided through
GLBP.
C. HSRP group members communicate using multicast address 224.0.0.18.
D. GLBP uses UDP port 3222 (source and destination) for hello messages.
Answer: D

QUESTION 924
Which option is a primary difference between HSRP and GLBP?
A. Only GLBP uses a router BIA to provide gateway redundancy.
B. Only HSRP uses multiple virtual IP address to provide gateway redundancy in a single standby
group.
C. Only HSRP can use multiple MAC address to provide gateway load balancing over multiple
routers
D. Only GLBP supports gateway load balancing over multiple routers.
Answer: D
QUESTION 685
Which two statements about native VLANs are true? (Choose two.)
A. VLAN 1 and VLAN 1001 are native VLANs by default.
B. The native VLAN is untagged over trunks.
C. The native VLAN can be changed on a per port basis.
D. Only one VLAN can be the native VLAN on a device.
E. Cisco Discovery Protocol versions 1 and 2 can carry native VLAN information

Answer BC

Drag and drop true and false rspan

I already mentioned as anonymous above question that I remembered

@Karim,

I got it bro, let me review and will post here

@Weblich
Were any of your exam questions the same as Karims from last week? (43 Q’s posted on last page)
And congratulations!!

@karim
@boxingsurfer
When do you have your exams?
Mines on the 22nd! One chance only!!!!

@BoxingSurfer
Which statement is true when UDLD is configured on a link and the link is determined to be unidirectional?

A. The port remains up for a configured time interval and then error disables if the link remains unidirectional.
B. LLDP is enabled on the port.
C. The port sends a log message to the console.
D. The port is disabled immediately

I still think D….

Once the unidirectional link is detected by UDLD, the respective port is disabled and this message is printed on the console:

UDLD-3-DISABLE: Unidirectional link detected on port 1/2. Port disabled

Port shutdown by UDLD remains disabled until it is manually reenabled, or until errdisable timeout expires (if configured).

https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/10591-77.html

@ Switchy my plane on 20th not confirm it may change to 22

@Karim

Your Q13.
Which two tasks must you perform to enable DHCP option 82 on an untrusted port? (Choose two.)
A. Enter the ip dhcp snooping information option replace command to enable DHCP option 82.
B. Enter the ip dhcp snooping trust command to enable DHCP option 82.
C. Enter the ip dhcp snooping information option allow-untrusted command to enable the untrusted port.
D. Enter the ip dhcp snooping information option command to enable option 82.
E. Enter the ip dhcp snooping trust command to enable data insertion DHCP option 82.

Answer – C and D

DHCP snooping is globally enabled and when “ip dhcp snooping information option” global configuration command is entered.
https://www.cisco.com/en/US/docs/general/Test/dwerblo/broken_guide/snoodhcp.html
“ip dhcp snooping information option allow-untrusted” enables untrusted ports to accept incoming DHCP packets with option-82 information.

@ Switchy
yes C&D are correct.

@Dark, no I did “no shut” on BOTH SIDES OF THE TRUNK. Also, the Etherchannel AND trunk on SIDE A showed UP.

My question to everyone is does the “sh int trunk” command work on Switch B?

Based on Karim I hope this will be the right Question

21.Which commands configures all access ports on a switch to immediately enter the forwarding state when the switch is reset?
A. spanning-tree portfast bpduguard default
B. spanning-tree portfast default
C. spanning-tree portfast
D. spanning-tree portfast bpdufilter default

Normally I would prefer “C” as correct answer wich is incorrect if the Question means “all together”
Using Answer “B” will configure “all Ports (including Trunks)” together also not Correct

Any Idea ???