1. Which two statements about Layer 2 Ethernet switches are true? (Choose two.)

Layer 2 switches have multiple collision domains.
Layer 2 switches can send traffic based on the destination MAC address.

2. Which command line interface (CLI) mode allows users to configure switch parameters, such as the hostname and password?

global configuration mode

3. Which two statements are true about EXEC mode passwords? (Choose two.)

The enable secret password command provides better security than the enable password.
The enable password and enable secret password protect access to privileged EXEC mode.

4. Where is the startup configuration stored?

NVRAM

5. Refer to the exhibit. What action does SW1 take on a frame sent from PC_A to PC_C if the MAC address table of SW1 is empty?

SW1 floods the frame on all ports on SW1, except port Fa0/1.

6. Refer to the exhibit. Which hosts will receive a broadcast frame sent from Host A?

hosts A, B, and C

7. What are two ways to make a switch less vulnerable to attacks like MAC address flooding, CDP attacks, and Telnet attacks? (Choose two.)

Change passwords regularly.
Turn off unnecessary services.

8. Refer to the exhibit. The switch and workstation are administratively configured for full-duplex operation. Which statement accurately reflects the operation of this link?

No collisions will occur on this link.

9. Refer to the exhibit. The exhibit shows partial output of the show running-config command. The enable password on this switch is "cisco." What can be determined from the output shown?

Any configured line mode passwords will be encrypted in this configuration.

10. A network administrator uses the CLI to enter a command that requires several parameters. The switch responds with "% Incomplete command". The administrator cannot remember the missing parameters. What can the administrator do to get the parameter information?

append a space and then ? to the last parameter

11. Refer to the exhibit. What happens when Host 1 attempts to send data?

Frames from Host 1 cause the interface to shut down.

12. Which two statements are true regarding switch port security? (Choose two.)

Dynamically learned secure MAC addresses are lost when the switch reboots.
If fewer than the maximum number of MAC addresses for a port are configured statically, dynamically learned addresses are added to CAM until the maximum number is reached.

13. Which statement is true about the command banner login "Authorized personnel Only" issued on a switch?

The command will cause the message Authorized personnel Only to display before a user logs in.

14. When a collision occurs in a network using CSMA/CD, how do hosts with data to transmit respond after the backoff period has expired?

The hosts return to a listen-before-transmit mode.

15.
If a network administrator enters these commands in global configuration mode on a switch, what will be the result?

Switch1(config-line)# line console 0
Switch1(config-line)# password cisco
Switch1(config-line)# login

to secure the console port with the password "cisco"

16. When a switch receives a frame and the source MAC address is not found in the switching table, what action will be taken by the switch to process the incoming frame?

The switch will map the source MAC address to the port on which it was received.

17. Refer to the exhibit. How many collision domains are depicted in the network?

2

18. Refer to the exhibit. The network administrator’s attempts to connect to Switch1 via Secure Shell are failing. What is most likely the problem?

vty lines that are configured to allow only Telnet

19. What happens when the transport input ssh command is entered on the switch vty lines?

Communication between the switch and remote users is encrypted.

20. Refer to the exhibit. The switch and the hub have default configurations, and the switch has built its CAM table. Which of the hosts will capture a copy of the frame when workstation A sends a unicast packet to workstation C?