QUESTION 31
Which protocol allows for the automatic selection and simultaneous use of multiple available gateways as well as automatic failover between those gateways?

A.    IRDP
B.    HSRP
C.    GLBP
D.    VRRP

Answer: C

QUESTION 32
You are the administrator of a switch and currently all host-connected ports are configured with the portfast command. You have received a new directive from your manager that states that, in the future, any host-connected port that receives a BPDU should automatically disable PortFast and begin transmitting BPDUs. Which command will support this new requirement?

A.    Switch(config)#spanning-tree portfast bpduguard default
B.    Switch(config-if)#spanning-tree bpduguard enable
C.    Switch(config-if)#spanning-tree bpdufilter enable
D.    Switch(config)#spanning-tree portfast bpdufilter default

Answer: D

QUESTION 33
Which two statements about the HSRP priority are true? (Choose two)

A.    To assign the HSRP router priority in a standby group, the standby group-number priority priority-value global configuration command must be used.
B.    The default priority of a router is zero (0).
C.    The no standby priority command assigns a priority of 100 to the router.
D.    Assuming that preempting has also been configured, the router with the lowest priority in an HSRP group would become the active router.
E.    When two routers in an HSRP standby group are configured with identical priorities, the router with the highest configured IP address will become the active router.

Answer: CE

QUESTION 34
Which command can be issued without interfering with the operation of loop guard?

A.    Switch(config-if)#spanning-tree guard root
B.    Switch(config-if)#spanning-tree portfast
C.    Switch(config-if)#switchport mode trunk
D.    Switch(config-if)#switchport mode access

Answer: C

QUESTION 35
Refer to the exhibit. On the basis of the information provided in the exhibit, which two sets of procedures are best practices for Layer 2 and 3 failover alignment? (Choose two.)

A.    Configure the D-SW1 switch as the active HSRP router and the STP root for all VLANs.
Configure the D-SW2 switch as the standby HSRP router and backup STP root for all VLANs.
B.    Configure the D-SW1 switch as the standby HSRP router and the STP root for VLANs 11 and 110.
Configure the D-SW2 switch as the standby HSRP router and the STP root for VLANs 12 and 120.
C.    Configure the D-SW1 switch as the active HSRP router and the STP root for VLANs 11 and 110.
Configure the D-SW2 switch as the active HSRP router and the STP root for VLANs 12 and 120.
D.    Configure the D-SW2 switch as the active HSRP router and the STP root for all VLANs.
Configure the D-SW1 switch as the standby HSRP router and backup STP root for all VLANs.
E.    Configure the D-SW1 switch as the active HSRP router and the backup STP root for VLANs 11 and 110.
Configure the D-SW2 switch as the active HSRP router and the backup STP root for VLANs 12 and 120.
F.    Configure the D-SW1 switch as the standby HSRP router and the backup STP root for VLANs 12 and 120.
Configure the D-SW2 switch as the standby HSRP router and the backup STP root for VLANs 11 and 110.

Answer: CD

QUESTION 36
Which statement is true about RSTP topology changes?

A.    Any change in the state of the port generates a TC BPDU.
B.    Only nonedge ports moving to the forwarding state generate a TC BPDU.
C.    If either an edge port or a nonedge port moves to a block state, then a TC BPDU is generated.
D.    Only edge ports moving to the blocking state generate a TC BPDU.
E.    Any loss of connectivity generates a TC BPDU.

Answer: B

QUESTION 37
Refer to the exhibit. Which four statements about this GLBP topology are true? (Choose four.)

A.    Router A is responsible for answering ARP requests sent to the virtual IP address.
B.    If router A becomes unavailable, router B forwards packets sent to the virtual MAC address of router A.
C.    If another router is added to this GLBP group, there would be two backup AVGs.
D.    Router B is in GLBP listen state.
E.    Router A alternately responds to ARP requests with different virtual MAC addresses.
F.    Router B transitions from blocking state to forwarding state when it becomes the AVG.

Answer: ABCE

QUESTION 38
Which description correctly describes a MAC address flooding attack?

A.    The attacking device crafts ARP replies intended for valid hosts.
The MAC address of the attacking device then becomes the destination address found in the Layer 2 frames sent by the valid network device.
B.    The attacking device crafts ARP replies intended for valid hosts.
The MAC address of the attacking device then becomes the source address found in the Layer 2 frames sent by the valid network device.
C.    The attacking device spoofs a destination MAC address of a valid host currently in the CAM table.
The switch then forwards frames destined for the valid host to the attacking device.
D.    The attacking device spoofs a source MAC address of a valid host currently in the CAM table.
The switch then forwards frames destined for the valid host to the attacking device.
E.    Frames with unique, invalid destination MAC addresses flood the switch and exhaust CAM table space.
The result is that new entries cannot be inserted because of the exhausted CAM table space, and traffic is subsequently flooded out all ports.
F.    Frames with unique, invalid source MAC addresses flood the switch and exhaust CAM table space.
The result is that new entries cannot be inserted because of the exhausted CAM table space, and traffic is subsequently flooded out all ports.

Answer: F

QUESTION 39
Refer to the exhibit. Which VRRP statement about the roles of the master virtual router and the backup virtual router is true?

A.    Router A is the master virtual router, and router B is the backup virtual router.
When router A fails, router B becomes the master virtual router.
When router A recovers, router B maintains the role of master virtual router.
B.    Router A is the master virtual router, and router B is the backup virtual router.
When router A fails, router B becomes the master virtual router.
When router A recovers, it regains the master virtual router role.
C.    Router B is the master virtual router, and router A is the backup virtual router.
When router B fails, router A becomes the master virtual router.
When router B recovers, router A maintains the role of master virtual router.
D.    Router B is the master virtual router, and router A is the backup virtual router.
When router B fails, router A becomes the master virtual router.
When router B recovers, it regains the master virtual router role.

Answer: B

QUESTION 40
Refer to the exhibit. An attacker is connected to interface Fa0/11 on switch A-SW2 and attempts to establish a DHCP server for a man-in-middle attack. Which recommendation, if followed, would mitigate this type of attack?

A.    All switch ports in the Building Access block should be configured as DHCP trusted ports.
B.    All switch ports in the Building Access block should be configured as DHCP untrusted ports.
C.    All switch ports connecting to hosts in the Building Access block should be configured as DHCP trusted ports.
D.    All switch ports connecting to hosts in the Building Access block should be configured as DHCP untrusted ports.
E.    All switch ports in the Server Farm block should be configured as DHCP untrusted ports.
F.    All switch ports connecting to servers in the Server Farm block should be configured as DHCP untrusted ports.

Answer: D

Passleader Real Cisco 642-813 PDF & VCE Exam Dumps For Free