Refer to the exhibit.
A network administrator wants to add the protections of root guard to the network. Based on the spanning tree topology, on which ports should the network administrator implement root guard?
A. 3-24
B. 1 and 2
C. A1 and A2
D. 2 and A3
Refer to the exhibit.
The exhibit shows configurations for interface 5 and VLAN 20. Note that DHCP snooping and ARP protection are also enabled.
A network administrator finds that interface 5 on an AOS-Switch is disabled. The administrator re-enables the interface, but it shuts down again.
What should the administrator investigate?
A. a device that sends too much unicast traffic
B. rogue DHCP server
C. a loop on the interface
D. a device that sends unauthorized ARP messages
What is a reason to implement PIM-DM as opposed to PIM-SM?
A. to control exactly which multicast groups are routed through the network
B. to permit a higher density of RP routers in the network core
C. to conserve bandwidth over WAN links
D. to use on high-bandwidth routed connections
Refer to the exhibit.
Every switch in the exhibit will route traffic. The company requires a topology in which failover for switch-toswitch links is exclusively handled by the routing protocol and occurs as quickly as possible.
Which topology should the administrator use?
A. A
B. B
C. C
D. D
Refer to the exhibits.
Exhibit 1
Exhibit 2
A network administrator wants to set up mirroring of traffic from port 1 on Switch-1 to port 1 on Switch-2. Exhibit-2 shows the commands that the administrator enters. The mirroring does not work correctly.
What must the administrator do to correct the error?
A. Change the port ID on Switch 1 to 50001, so that it is unique from the port ID on Switch-2.
B. Re-configure the mirror endpoint command on Switch-2 with the IP addresses reversed in order.
C. Remove the commands and re-enter them on Switch-1 first and then on Switch-2.
D. Specify the mirror endpoint command in Switch-1 and the mirror 1 remote-ip command on Switch-2.
Refer to the exhibits. Exhibit 1
Exhibit 2
The exhibits show the current operational state for routes on Switch-3. The company wants Switch-3 to send all traffic to 172.16.0.0/16 through Switch-2.
Which single configuration change creates the desired behavior?
A. Change the OSPF external metric type to 1 on Switch-1 and Switch-3.
B. Change the OSPF external metric type to 2 on Switch-1 and Switch-2.
C. Set a cost of 15 in the redistribute static command on Switch-2.
D. Set a cost of 5 in the router ospf area 0.0.0.1 stub command on Switch-1.
A network administrator wants to use an ACL, acl1, to control traffic from devices in VLAN 12 as the traffic is routed out of VLAN 12. The ACL should not control traffic within the VLAN.
Which keyword should the administrator enter at the administrator enter at the end of this command:
Switch(config)# vlan 12 ip access-group acl1____
A. in
B. out
C. vlan-in
D. vlan-out
The security plan for AOS-Switches requires protection from incoming malware traffic: generated from a worm-or virus-infected host.
Which feature should be implemented to provide the required protection?
A. DHCP snooping
B. connection-rate filtering
C. port security
D. proxy ARP
What is a reason to implement port security on an AOS-Switch?
A. to simplify provisioning for devices such as IP phones or printers
B. to enhance the security of an 802.1X solution
C. to filter traffic at the edge, based on multiple criteria in the MAC header
D. to control management access to the switch CLI based on device, as well as user credentials
An AOS-Switch uses tunneled node. What is a best practice for the path between an AOS-Switch and its Mobility Controller?
A. The path can support jumbo frames
B. The path has a device that applies NAT
C. The path implements MACsec
D. The path crosses no VLAN boundaries
