300-135 practice test

1. Question 1 · 13

   The implementation group has been using the test bed to do an IPv6 'proof-of-concept1. After several changes to the network addressing and routing schemes, a trouble ticket has been opened indicating that the loopback address on R1 (2026::111:1) is not able to ping the loopback address on DSW2 (2026::102:1). Use the supported commands to isolate the cause of this fault and answer the following question. The fault condition is related to which technology?

   Choose one answer.

   • NTP
   • IPv4 OSPF Routing
   • IPv6 OSPF Routing
   • IPv4 layer 3 security

   Read explanation

   Since we are unable to ping the IPv6 address, the problem is with IPv6 OSPF Routing.

2. Question 2 · 20

   The implementations group has been using the test bed to do a "˜proof-of-concept' that requires both Client 1 and Client 2 to access the WEB Server at 209.65.200.241. After several changes to the network addressing, routing scheme, DHCP services, NTP services, layer 2 connectivity, FHRP services, and device security, a trouble ticket has been opened indicating that Client 1 cannot ping the 209.65.200.241 address. Use the supported commands to isolated the cause of this fault and answer the following questions. On which device is the fault condition located?

   Choose one answer.

   • R1
   • R2
   • R3
   • R4
   • DSW1
   • DSW2
   • ASW1

   Read explanation

   On R1, we need to permit IP 209.65.200.222/30 under the access list.

3. Question 3 · 20

   The implementations group has been using the test bed to do a "˜proof-of-concept' that requires both Client 1 and Client 2 to access the WEB Server at 209.65.200.241. After several changes to the network addressing, routing scheme, DHCP services, NTP services, layer 2 connectivity, FHRP services, and device security, a trouble ticket has been opened indicating that Client 1 cannot ping the 209.65.200.241 address. Use the supported commands to isolated the cause of this fault and answer the following questions. The fault condition is related to which technology?

   Choose one answer.

   • BGP
   • NTP
   • IP NAT
   • IPv4 OSPF Routing
   • IPv4 OSPF Redistribution
   • IPv6 OSPF Routing
   • IPv4 layer 3 security

   Read explanation

   On R1, we need to permit IP 209.65.200.222/30 under the access list.

4. Question 4 · 20

   The implementations group has been using the test bed to do a "˜proof-of-concept' that requires both Client 1 and Client 2 to access the WEB Server at 209.65.200.241. After several changes to the network addressing, routing scheme, DHCP services, NTP services, layer 2 connectivity, FHRP services, and device security, a trouble ticket has been opened indicating that Client 1 cannot ping the 209.65.200.241 address. Use the supported commands to isolated the cause of this fault and answer the following questions. What is the solution to the fault condition?

   Choose one answer.

   • Under the interface Serial0/0/1 enter the ip access-group edge_security out command.
   • Under the ip access-list extended edge_security configuration add the permit ip 209.65.200.224 0.0.0.3 any command.
   • Under the ip access-list extended edge_security configuration delete the deny ip 10.0.0.0.0 0.255.255.255 any command.
   • Under the interface Serial0/0/0 configuration delete the ip access-group edge_security in command and enter the ip access-group edge_security out command.

   Read explanation

   On R1, we need to permit IP 209.65.200.222/30 under the access list.

5. Question 5 · 24

   You have the followings commands on your Cisco Router: ip ftp username admin ip ftp password backup You have been asked to switch from FTP to HTTP. Which two commands will you use to replace the existing commands?

   Choose all answers that apply.

   • ip http username admin
   • ip http client username admin
   • ip http password backup
   • ip http client password backup

   Read explanation

   Configuring the HTTP Client - Perform this task to enable the HTTP client and configure optional client characteristics. The standard HTTP 1.1 client and the secure HTTP client are always enabled. No commands exist to disable the HTTP client. For information about configuring optional characteristics for the HTTPS client, see the HTTPS-HTTP Server and Client with SSL 3.0, Release 12.2(15)T, feature module. SUMMARY STEPS - 1. enable 2. configure terminal 3. ip http client cache {ager interval minutes | memory {file file-size-limit | pool pool-size-limit} 4. ip http client connection {forceclose | idle timeout seconds | retry count | timeout seconds} 5. ip http client password password 6. ip http client proxy-server proxy-name proxy-port port-number 7. ip http client response timeout seconds 8. ip http client source-interface type number 9. ip http client username username References:

6. Question 6 · 24

   You enabled CDP on two Cisco Routers which are connected to each other. The Line and Protocol status for the interfaces on both routers show as UP but the routers do not see each other a CDP neighbors. Which layer of the OSI model does the problem most likely exist?

   Choose one answer.

   • Physical
   • Session
   • Application
   • Data-Link

   Read explanation

   CDP is a protocol that runs over Layer 2 (the data link layer) on all Cisco routers, bridges, access servers, and switches. CDP allows network management applications to discover Cisco devices that are neighbors of already known devices, in particular, neighbors running lower-layer, transparent protocols. With CDP, network management applications can learn the device type and the SNMP agent address of neighboring devices. This feature enables applications to send SNMP queries to neighboring devices. In this case, the line protocol is up which means that the physical layer is operational (layer 1) but the data link layer is not. References:

7. Question 7 · 24

   Refer to the shown below. %LINK-3-UPDOWN: Interface Serial0/0, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to up What statement is correct regarding the output shown in the graphic?

   Choose one answer.

   • These two log messages will not have a severity level. They are not errors but are just informational messages.
   • The first log message is categorized as a warning message.
   • These messages regarding interface status are normal output and will always be displayed when you exit config mode.
   • The first log message is an error message with a severity level of 3.

   Read explanation

   Answer Corrected

8. Question 8 · 7

   DRAG DROP - Drag the properties from the left onto their corresponding Unicast Reverse Path Forwarding mode on the right. Not all properties are used. Select and Place:

   Match each destination with an option.

   

   Strict Mode

   • • Source address must appear in routing table
   • • Source packet must be received on the interface that will forward the return traffic
   • • Configured on layer-2 switches
   • • Configured on internet router outside interfaces
   • • Default route can be used in the source verification process
   • • Configured on internet router inside interface

   Strict Mode

   • • Source address must appear in routing table
   • • Source packet must be received on the interface that will forward the return traffic
   • • Configured on layer-2 switches
   • • Configured on internet router outside interfaces
   • • Default route can be used in the source verification process
   • • Configured on internet router inside interface

   Loose Mode

   • • Source address must appear in routing table
   • • Source packet must be received on the interface that will forward the return traffic
   • • Configured on layer-2 switches
   • • Configured on internet router outside interfaces
   • • Default route can be used in the source verification process
   • • Configured on internet router inside interface

   Loose Mode

   • • Source address must appear in routing table
   • • Source packet must be received on the interface that will forward the return traffic
   • • Configured on layer-2 switches
   • • Configured on internet router outside interfaces
   • • Default route can be used in the source verification process
   • • Configured on internet router inside interface

   Loose Mode

   • • Source address must appear in routing table
   • • Source packet must be received on the interface that will forward the return traffic
   • • Configured on layer-2 switches
   • • Configured on internet router outside interfaces
   • • Default route can be used in the source verification process
   • • Configured on internet router inside interface

9. Question 9 · 7

   DRAG DROP - Drag and drop the valid tunnel modes from the left into the Valid column on the right. Order does not matter and not all options are used. Select and Place:

   Match each destination with an option.

   

   valid

   • • 6to4
   • • MGRE
   • • GRE IP
   • • IPv6ip
   • • NHRP
   • • ISATAP

   valid

   • • 6to4
   • • MGRE
   • • GRE IP
   • • IPv6ip
   • • NHRP
   • • ISATAP

   valid

   • • 6to4
   • • MGRE
   • • GRE IP
   • • IPv6ip
   • • NHRP
   • • ISATAP

   valid

   • • 6to4
   • • MGRE
   • • GRE IP
   • • IPv6ip
   • • NHRP
   • • ISATAP

10. Question 10 · 7

    Refer to the exhibit. The NOC team uses a source address of 77.232.115.149 and requires access only during the hours of 6:00PM through 6:00AM. The configuration is implemented as shown, but the NOC is unable to access the network until midnight. Which configuration is required to fix the problem?

    Choose one answer.

    

    • time-range Switch_Access periodic daily 18:01 to 5:59
    • time-range NOC_Access periodic daily 0:00 to 6:00 periodic daily 18:00 to 23:59
    • time-range NOC_Access periodic daily 18:01 to 5:59
    • time-range Switch_Access periodic daily 0:00 to 6:00 periodic daily 18:00 to 23:59

11. Question 11 · 7

    Which two statements about extended traceroute options are true? (Choose two.)

    Choose all answers that apply.

    • You can change the source port that the UDP probe messages use.
    • You can change the datagram size to troubleshoot clocking problems on serial lines.
    • You can use the Strict IP header option
    • You can change the minimum and maximum TTL
    • You can use the Verbose IP header option to specify the IP address of each hop that the packet takes.

12. Question 12 · 7

    Refer to the exhibit. Your company's security policy requires you to allow telnet access using tcp port 3033 only. You apply the configuration changes as shown and then test. Your telnet attempt fails. Which action would correct the issue?

    Choose one answer.

    

    • add rotary 33 to the VTY lines
    • add access-list 101 deny tcp any any eq 23 to the ACL
    • remove authorization exec ITCC from the VTY lines
    • remove transport input telnet from the VTY lines

13. Question 13 · 7

    Refer to the exhibit. Your client has asked you to replace telnet access with SSH and the configuration has failed. What is the root cause of this issue?

    Choose one answer.

    

    • The router memory needs to be upgraded
    • The router IOS needs to be updated
    • The Rommon firmware needs to be updated
    • The configuration register is incorrect

14. Question 14 · 7

    What are two primary components of a GRE tunnel? (Choose two.)

    Choose all answers that apply.

    • LLC header
    • Ethernet header
    • GRE header
    • IP header
    • payload packet

15. Question 15 · 7

    Which command securely encrypts the enable password on an IOS device?

    Choose one answer.

    • enable secret
    • enable secure
    • service password-encryption
    • enable password

Paid access to all 33 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.