1T6-220

Switched Ethernet Network Analysis and Troubleshooting

Version 1.0
QUESTION NO: 1
CSMA/CD stands for:

A. Collision Sense, Multiple Access, Carrier Detection

B. Carrier Sense, Multiple Access, Collision Detection
C. Carrier Sense, Multiplexed Access, Collision Detection
D. Collision Sense, Multiple Access, Collision Detection

Answer: A

QUESTION NO: 2
_____ needs to be configured on the switch port you are monitoring or all Detail tab
fields will return NA.

A. SNMP
B. RMON
C. MIB
D. 802.11b

Answer: A

QUESTION NO: 3
Ethernet frames that do not end on an 8 bit boundary:

A. Are jabbers
B. Are runt frames
C. Have CRC errors
D. Have alignment errors

Answer: C

QUESTION NO: 4
Collisions are always eliminated in __________ environments.

A. Switched Ethernet
B. Full Duplex
C. Gigabit Ethernet
D. All of the above

Answer: A

QUESTION NO: 5
The IEEE 802.3x specification describes the operation of:

A. Fast Ethernet
B. Switched Ethernet
C. Gigabit Ethernet
D. Full Duplex Ethernet

Answer: C

QUESTION NO: 6
Because Gigabit Ethernet can generate up to 125 Mbytes of data per second at full
capacity it is important to __________ when starting to analyze a network problem.

A. Capture data for one minute and then analyze the Expert symptoms
B. Apply a capture filter for a specific station or conversation
C. Capture data directly to disk
D. Increase the Expert thresholds before capturing data

Answer: A

QUESTION NO: 7
The Gigabit Ethernet Sniffer user interface uses the standard Sniffer interface with
enhancements for Gigabit.

A. True
B. False

Answer: Pending

QUESTION NO: 8
The _______ always has an Ethertype of 8808.

A. PAUSE MAC frame

B. Buffer MAC frame
C. JAM-PAUSE frame
D. STOP MAC frame

Answer: Pending

QUESTION NO: 9
Choose all that apply. Which of the following functions are performed in a Full-duplex
Ethernet environment?

A. Carrier sense before transmitting

B. Maintain an inter-frame gap between frames
C. Perform CRC calculation on transmitted frame
D. Back off and retransmit when a collision occurs

Answer: A, B
QUESTION NO: 10
When receiving an incoming frame, a station in either half-duplex or full-duplex mode
will __________.

A. Check for the maximum frame size of 64 bytes

B. Perform collision detection
C. Truncate the frame after 1518 bytes
D. Validate the FCS

Answer: C

QUESTION NO: 11
Choose all that apply. The Gigabit Ethernet Sniffer can be configured to store data in the
__________ buffer during capture.

A. Adapter Buffer
B. Capture Buffer
C. Jitter Buffer
D. All of the above

Answer: A

QUESTION NO: 12
The maximum cable distances for Full Duplex Ethernet are ________ compared to Half
Duplex Ethernet:

A. Much higher
B. The same
C. Much lower
D. Slightly higher

Answer: Pending

QUESTION NO: 13
Port mirroring can be set from the Sniffer Portable only if the switch supports it and the
switch is configurable via ______.

A. IOS
B. SPAN
C. SNMP requests
D. 802.1

Answer: B

QUESTION NO: 14
Consider the following description: Only part of a frame has arrived at the adapter when
the first part begins transmission on the medi a. The adapter quits sending the frame,
leaving an incomplete frame transmitted. This is likely a(n):

A. IRQ setting problem

B. Normal occurrence with any Ethernet adapter
C. TCP timer problem
D. Fast Transmit Adapter issue

Answer: C

QUESTION NO: 15
When a network is displaying excessive propagation delay problems, the corruption in
the frame is random, but typically seen before the _______.

A. 64th bit
B. 64th byte
C. 32nd bit
D. 32nd byte

Answer: A

QUESTION NO: 16
A duplex mismatch between a switch port and an end node will typically result in
____________.

A. Total loss of communications

B. Fall back to half-duplex mode
C. Increased broadcast traffic
D. Excessive collisions

Answer: C

QUESTION NO: 17
When a network is displaying _______ problems, the frames are the right size, but have
incorrect data with CRC errors. The Sniffer will show Physical Errors as symptoms or
diagnoses.

A. Excessive propagation delay

B. Legal collision
C. Signal reflection
D. Electrical noise

Answer: C

QUESTION NO: 18
Legal collisions in Ethernet occur within the first _____ of data.

A. 32 bits
B. 64 bits
C. 256 bits
D. 512 bits

Answer: C

QUESTION NO: 19
The Sniffer may identify frames affected by a rogue node or bad port as __________.

A. CRC errors
B. Oversize frames
C. Undersize frames
D. Late collisions

Answer: C

QUESTION NO: 20
The Sniffer History Samples reports are especially useful for long term reporting of
__________.

A. Slow response time problems

B. Identifying high rates of collisions and CRC errors
C. Combining multiple criteria for baseline reporting
D. All of the above

Answer: C

QUESTION NO: 21
Choose all that apply. If a Sniffer is connected to a switch port that is not configured as
the span or mirror port, the analyzer will see __________.

A. Frames sent to the server

B. Frames sent from the server
C. Frames sent to the Sniffer
D. Nothing. This configuration will not work

Answer: B

QUESTION NO: 22
If you __________ with the Sniffer you may get lost frames or incomplete conversations
as a result.

A. Mirror an entire VLAN

B. Mirror ports from different VLANs
C. Mirror one or more ports on a very active switch
D. All of the above

Answer: B

QUESTION NO: 23
High end switches may implement standards but still not be compatible with other
vendors.

A. True
B. False

Answer: Pending

QUESTION NO: 24
The name entered in the Switch Configuration Name field will set the name:

A. On the switchs IOS

B. On the monitor port
C. For the Switch Configuration list
D. On the network

Answer: B

QUESTION NO: 25
Choose all that apply. A feature of a switch is:

A. It can learn MAC addresses from the frames arriving on each port
B. It can forward frames based on MAC destination addresses
C. It can filter frames based on IP addresses
D. It can provide full bandwidth on each port

Answer: A, C

QUESTION NO: 26
While a switch is based on vendor specifications, not standards, most vendors tend to
implement _________.

A. A compatible Spanning Tree Protocol

B. Support for VLANs and VTP
C. Layer 3 filtering
D. None of the above

Answer: C
QUESTION NO: 27
A switch is capable of switching frames from one VLAN to another without any specific
port information in the frame.

A. True
B. False

Answer: A

QUESTION NO: 28
The Sniffer may give you a false __________ symptom if you mirror ports from different
VLANs.

A. Duplicate IP address
B. Local Router
C. Fast retransmissions
D. None of the above

Answer: C

QUESTION NO: 29
Within a switch, the __________ is the entry point for all network communications.

A. Switch port
B. Switch bridge
C. Switch backbone
D. Switch fabric

Answer: Pending

QUESTION NO: 30
The VTP revision number is updated __________.

A. Based on the update timer

B. And maintained by the master VTP switch
C. Whenever a Subset Advertisements is sent
D. Every time a VLAN change is completed

Answer: B

QUESTION NO: 31
The Spanning Tree algorithm handles bridging loops by:

A. Disabling alternate routes

B. Forwarding frames on all ports
C. Using RIP to remove redundant routes
D. Maximizing bandwidth on valid links

Answer: Pending

QUESTION NO: 32
In order to forward frames between VLANs, a(n) _______ must be used.

A. Repeater hub
B. Bridge
C. Router
D. SLIS Switch

Answer: B

QUESTION NO: 33
Which protocol allows an administrator to add, delete, and rename VLANs for all
switches?

A. ISL
B. CDP
C. VTP Transparent
D. VTP

Answer: C

QUESTION NO: 34
Which of the following is not true concerning BPDU frames?

A. The Tree is maintained by the exchange of BPDU frames

B. Every 5 seconds the root switch sends a Configuration message (Hello)
C. BPDUs are never forwarded
D. Every switch receiving Configuration messages compares the information with its
database

Answer: A

QUESTION NO: 35
If you discover that the Transport card is also acting as the Monitor card, it is most likely
because:

A. It has sent an SNMP request to the switch

B. TCP/IP is bound to it
C. The Sniffer Driver is bound to it
D. It has sent a GET request to the switch

Answer: B
QUESTION NO: 36
Choose all that apply. VLAN grouping techniques include __________.

A. Assigning a port to a particular VLAN

B. Assigning a protocol to a particular VLAN
C. Assigning MAC addresses to a particular VLAN multicast address
D. Assigning a particular user to a particular VLAN

Answer: A, B

QUESTION NO: 37
The default priority on IEEE Spanning Tree Protocol is ______ hex.

A. 4000
B. 6000
C. 7000
D. 8000

Answer: C

QUESTION NO: 38
A VLAN represents a collision domain.

A. True
B. False

Answer: A

QUESTION NO: 39
Which statements are true concerning Spanning Tree Protocol?

A. The highest bridge ID is elected root

B. The lowest bridge ID is elected root
C. BPDU packets are sent every 5 seconds
D. A root switch transmits all data frames

Answer: A

QUESTION NO: 40
_______ information is displayed in Sniffer Expert in the Global layer.

A. Response time
B. Connection
C. Subnet
D. VLAN
Answer: C

QUESTION NO: 41
Choose two of the following options. Convergence occurs when all the switches have
transitioned to either one of the following states:

A. Blocking
B. Listening
C. Converging
D. Forwarding

Answer: C

QUESTION NO: 42
CDP refers to:

A. Cisco Discovery Protocol

B. Cisco Data Packet
C. Cisco Data-link Protocol
D. Cisco Dependent Packet

Answer: Pending

QUESTION NO: 43
When Spanning Tree is enabled, all ports on the root switch ______.

A. Are Designated
B. Are Non-Designated
C. Are Non-Root
D. Can be a combination of Designated and Non-designated

Answer: Pending

QUESTION NO: 44
__________ is a VLAN protocol based on the 802.10 specification.

A. 802.1p
B. 802.1q
C. 802.1s
D. 802.1w

Answer: A

QUESTION NO: 45
Choose all that apply. You can run Trunked links on:
A. 10 Mbps
B. 100 Mbps
C. 1000 Mbps
D. These do not apply to Trunked links

Answer: A, B

QUESTION NO: 46
The image below is an example network, the connecting device is a multi-port repeater.
In a shared-media LAN, the Sniffer is able to capture __________.

A. All traffic from all devices on the LAN

B. Broadcast and multicast traffic
C. Traffic destined for the port where the server is attached
D. All of the aboveD

Answer: C

QUESTION NO: 47
CDP packets are not passed through a switch, so you will only see information regarding
directly connected devices.

A. True
B. False

Answer: Pending

QUESTION NO: 48
The default CDP Time to Live send interval is ______ seconds.
A. 20
B. 40
C. 50
D. 60

Answer: C

QUESTION NO: 49
Information about the individual switch is contained in:

A. Subset Advertisements
B. Summary Advertisements
C. NVRAM Advertisements
D. Trunking Advertisements

Answer: A

QUESTION NO: 50
The 802.1q header in an Ethernet frame __________.

A. Is 4 bytes in length
B. Was developed by IEEE based on other standards
C. Uniquely identifies Ethernet or Token Ring
D. All of the above

Answer: C

QUESTION NO: 51
To avoid problems, always make sure the configuration version of all inserted switches is
______ the version of the switches already in the VLAN Trunking Protocol domain.

A. Lower than
B. Higher than
C. The same as
D. It makes no difference

Answer: Pending

QUESTION NO: 52
The BPDU Message Age timer has a maximum value of ______ seconds.

A. 10
B. 20
C. 30
D. 40
Answer: Pending

QUESTION NO: 53
A large VLAN Trunking Protocol domain a large Spanning Tree Protocol domain.

A. True
B. False

Answer: Pending

QUESTION NO: 54
The loss of BPDU packets causes a ______ port to start ______.

A. Forwarding/Blocking
B. Listening/Learning
C. Blocking/Forwarding
D. Forwarding/Learning

Answer: B

QUESTION NO: 55
The BDPU values of Hello and Forward Delay set on the root switch are:

A. Imposed on all other root switches

B. Incremented as they are sent out
C. Imposed on all other switches
D. Only read by the root switch

Answer: B

QUESTION NO: 56
In Ethernet Version 2, the field following the Source Address is the:

A. Length
B. Type
C. Preamble
D. Destination

Answer: A

QUESTION NO: 57
If you set the mirrored port through the switch console, you dont need a:

A. Monitor port
B. Monitor card
C. SPAN port
D. Transport card

Answer: C

QUESTION NO: 58
Full Duplex Ethernet uses MAC Control frames to handle________.

A. Conllision reduction
B. Management protocols
C. Error control
D. Flow control

Answer: C

QUESTION NO: 59
If a switch CPU is at maximum utilization, it is possible that:

A. It could lack the resources to send BPDUs.

B. It will only miss BPDUs for 20 seconds
C. It always reserves resources to send BPDUs
D. It wil default to Forwarding mode

Answer: Pending

QUESTION NO: 60
Choose all that apply. Ethernet (CSMA/CD) may be characterized by which of the
following statements?

A. It is a broadcast environment
B. All network stations contend for available bandwidth
C. Contention access works well for sustained, continued transmissions
D. Simultaneous transmissions result in collisions

Answer: A, C

QUESTION NO: 61
After a collision has been sensed, CSMA/CD nodes do the following:

A. The transmitting adapters sense the collision and continue to transmit a 32-bit jam
signal, and wait a random amount of time before retransmitting
B. The station that caused the collision backs off, while the original station continues to
transmit
C. Both stations remove themselves from the network and re-insert, based upon an
algorithm
D. The transmitting adapters sense the collision and continue to transmit a 64-bit jam
signal for a random amount of time before retransmitting
Answer: Pending

QUESTION NO: 62
The SNAP header is _______ bytes in length.

A. 2
B. 3
C. 5
D. 7

Answer: B

QUESTION NO: 63
Application layer problems may be related to:

A. A problem that is occurring at the Data Link Layer

B. An incorrectly configured IP stack
C. Excessive broadcast packets at the Network layer
D. All of the above

Answer: C

QUESTION NO: 64
The correct ordering of the fields/headers present in an IEEE 802.3 SNAP frame is:

A. Preamble, SFD, Destination, Source, Length, LLC, SNAP

B. Preamble, SFD, Destination, Source, Type, LLC, SNAP
C. Preamble, SFD, Destination, Source, Type, Length
D. Preamble, SFD, Destination, Source, LLC, SNAP

Answer: Pending

QUESTION NO: 65
In an Ethernet environment, each switch port is a:

A. Separate collision domain

B. Separate broadcast domain
C. Shared collision domain
D. Separate DNS domain

Answer: Pending

QUESTION NO: 66
In Novell Raw frames, the field following the Source field is the:
A. Length
B. Type
C. Preamble
D. Destination

Answer: Pending

QUESTION NO: 67
In the IEEE 802.3 specification, the MAC sublayer is responsible for:

A. Carrier sense
B. Frame padding to a minimum size
C. Collision detection
D. All of the above

Answer: C

QUESTION NO: 68
The minimum amount of data and padding that is transmitted in Ethernet Version 2 frame
is:

A. 0 Bytes
B. 32 Bytes
C. 46 Bytes
D. 64 Bytes

Answer: B

QUESTION NO: 69
The preamble bit pattern is used by nodes to ________ during frames reception.

A. Minimize collisions
B. Set the poll interval
C. Ensure determine the sender
D. Synchronize clocks

Answer: C

QUESTION NO: 70
Full Duplex Ethernet is defined in the IEEE __________ specification.

A. 802.3ac
B. 802.3x
C. 802.3y
D. 802.3z
Answer: A

QUESTION NO: 71
The Gigabit Ethernet Sniffer can capture data in _____ separate buffers.

A. 1
B. 2
C. 3
D. 4

Answer: B

QUESTION NO: 72
__________ is an IEEE specification that standardizes the use of the Spanning Tree
protocol.

A. 802.1D
B. 802.1Q
C. 802.1W
D. 802.2

Answer: Pending

QUESTION NO: 73
Full speed Gigabit Ethernet can generate up to __________ of data at full capacity.
A. 100 Mbits/sec
B. 100 Mbytes/sec
C. 125 Mbytes/sec
D. 1000 Mbytes/sec

Answer: B

QUESTION NO: 74
A feature of Full Duplex Ethernet is:

A. All collisions are eliminated

B. It allows the full distance limitation of the media to be used
C. Provides simultaneous transmit and receive
D. All of the above

Answer: C

QUESTION NO: 75
When receiving an incoming frame, a station in either half-duplex or full-duplex mode
will __________.
A. Check for the minimum frame size of 64 bytes
B. Perform collision detection
C. Truncate the frame after 1518 bytes
D. Append the FCS to the end of the frame

Answer: Pending

QUESTION NO: 76
Flow control in Full Duplex Ethernet is implemented with _______ to handle flow
control.

A. CSMA/CD
B. Jam signals
C. MAC Frames
D. Back pressure

Answer: B

QUESTION NO: 77
The PAUSE MAC frame always has an Ethertype of:

A. 0800
B. AAAA
C. 8137
D. 8808

Answer: C

QUESTION NO: 78
If the Sniffer captures a frame with less than 96 bits, it will:

A. Not display the frame

B. Display the remainder of the frame
C. Store the frame in the capture buffer and display 0 bytes of data
D. Replace the Destination address with AA or 55

Answer: Pending

QUESTION NO: 79
Choose all that apply. Electrical noise problems may be caused by ____________.

A. Radio Frequency Interference

B. Electromagnetic Interference
C. A bad hub port
D. Poor quality cabling
Answer: A, C

QUESTION NO: 80
The Sniffer may identify Late Collisions coming from a rogue node or bad port when
__________.

A. The source or destination address matches the rogue node

B. The frame is the correct size but has an invalid CRC
C. The frame is greater than the minimum size but less than 1518 bytes
D. The frame is full size but contains a pattern of AAAA or 5555

Answer: B

QUESTION NO: 81
MA in CSMA/CD means:

A. A node will listen to detect that the media is unused before transmitting
B. A node will determine when a collision has happened
C. Many nodes are competing for access to the media
D. It was originally designed as a bus topology

Answer: B

QUESTION NO: 82
The Sniffer Dashboard is especially useful when __________.

A. Troubleshooting slow response time problems

B. Performing trend analysis on a particular LAN segment
C. Monitoring a specific application
D. Combining multiple criteria for baseline reporting

Answer: Pending

QUESTION NO: 83
Choose all that apply. Which of the following are common Ethernet problems?

A. Collisions
B. Reflected signals
C. Electrical noise
D. Duplicate IP addresses

Answer: A, B

QUESTION NO: 84
Fast transmit adapters can have some problems, where CRC errors are logged by the
Sniffer to incomplete frames. This is caused when:
A. The transmission speed of an adapter is mismatched to the speed at which other nodes
are transmitting
B. Only part of a frame has arrived at the adapter when the first part begins transmission
on the media. The adapter quits sending the frame, leaving an incomplete frame
transmitted
C. All of a frame has arrived at the adapter when the first part begins transmission on the
media. The adapter sends the frame in fragments, leaving multiple incomplete frames
transmitted
D. TCP timers are set too low

Answer: A

QUESTION NO: 85
The Sniffer may give you a false __________ symptom if you mirror an entire VLAN.

A. Duplicate IP address
B. Local Router
C. Fast retransmissions
D. None of the above

Answer: B

QUESTION NO: 86
A switch is capable of switching frames from one port to another without any specific
port information in the frame.

A. True
B. False

Answer: Pending

QUESTION NO: 87
Within a switch, the __________ can maintain multiple simultaneous conversations.

A. Switch port
B. Switch trunk
C. Switch backbone
D. Switch fabric

Answer: C

QUESTION NO: 88
Choose all that apply. A feature of a switch is:

A. It can learn MAC addresses from the frames arriving on each port
B. It can forward frames based on source and destination addresses
C. It can forward frames between ports
D. It can provide full bandwidth on each port

Answer: B, C

QUESTION NO: 89
The image below represents a switch connecting 6 network stations, plus a Sniffer.
Without any special setup, what traffic will the Sniffer see?

A. All normal network traffic

B. Broadcasts
C. Broadcasts, plus traffic sent directly to the Sniffer
D. Only traffic sent directly to the Sniffer
E. No traffic

Answer: B

QUESTION NO: 90
Switch operation is __________.

A. Based on standards
B. Proprietary
C. Similar to a router
D. Typically based on a software architecture

Answer: A
QUESTION NO: 91
A common incompatibility found in switches made by different vendors is:

A. Different versions of CDP

B. BPDU frame formats
C. Multicast addresses for Spanning Tree
D. Proprietary implementations of 802.1q

Answer: B

QUESTION NO: 92
802.1Q is an IEEE specification describes the operation of:

A. Logical Link Control

B. MAC Pause frames
C. VLANs
D. Spanning Tree protocol

Answer: B

QUESTION NO: 93
The image below represents a server connected to a shared hub, with a Sniffer on it. The
hub is connected to a switch that has a workstation also connected to it. Choose all that
apply. The Sniffer in the image will see __________.

A. Frames sent to the server

B. Frames sent from the server
C. Frames sent to the Sniffer
D. Nothing. This configuration will not work

Answer: A, B
QUESTION NO: 94
The Sniffer may give you invalid symptoms if you __________.

A. Mirror an entire VLAN

B. Mirror ports from different VLANs
C. Mirror one or more ports on a very active switch
D. All of the above

Answer: C

QUESTION NO: 95
With Trunking, a server can be in two broadcast domains at the same time.

A. True
B. False

Answer: Pending

QUESTION NO: 96
Choose all that apply. The ports on a switch running Spanning Tree Protocol can
transition through the following states:

A. Forwarding
B. Converging
C. Blocking
D. Listening
E. Holding

Answer: B, C

QUESTION NO: 97
Which protocol manages all configured VLANs across a switched internetwork?

A. CDP
B. ISL
C. VTP
D. VTP Transparent

Answer: B

QUESTION NO: 98
CDP uses a specific ______ address recognized by other CDP devices.

A. Unicast
B. Broadcast
C. Multicast
D. IP

Answer: B

QUESTION NO: 99
Spanning Tree Protocols main task is to:

A. Be transparent
B. Exchange CDP packets
C. Disseminate switch information
D. Stop loops

Answer: C

QUESTION NO: 100

Choose all that apply: The following are VLAN Trunking Protocol modes.
A. Server
B. Pruning
C. Transparent
D. Client

Answer: B, C

QUESTION NO: 101

Every time a VLAN change is completed the local switch updates the __________.

A. 802.1q reference number

B. VLAN synchronization ID
C. VTP revision number
D. VLAN tracking code

Answer: B

QUESTION NO: 102

Spanning Tree is IEEE ______.

A. 802.11a
B. 802.1b
C. 802.11d
D. 802.1d

Answer: C

QUESTION NO: 103

The 802.3 standard refers to:
A. Carrier Sense Multiple Access with Collision Detection (Original Ethernet
Specification)
B. Media Access Control (MAC) Parameters, Physical Layer, Medium Attachment Units
and Repeater for100 Mb/s Operation, Type 100Base-T
C. Specification for Full Duplex Operation
D. Media Access Control Parameters, Physical Layers, Repeater and Management
Parameters for 1000 Mb/s

Answer: Pending

QUESTION NO: 104

A VLAN allows devices from multiple __________ to communicate as if they were on a
common LAN.

A. Switch ports
B. Physical locations
C. LAN segments
D. All of the above

Answer: C

QUESTION NO: 105

VLAN information is displayed in Sniffer Expert in the _______ layer.

A. Subnet
B. Connection
C. Global
D. Service

Answer: B

QUESTION NO: 106

_______ contains information the VLAN Trunking Protocol server has learned from all
switches in the VLAN domain?

A. Subset Advertisements
B. Summary Advertisements
C. NVRAM Advertisements
D. Trunking Advertisements

Answer: Pending

QUESTION NO: 107

Choose all that apply. A _______ represents a broadcast domain.
A. Switch
B. Router
C. LAN segment
D. VLAN

Answer: B, C

QUESTION NO: 108

The 802.1q header in an Ethernet frame __________.

A. Is 26 bytes in length
B. Was developed by Cisco
C. Includes an Ethertype field
D. None of the above

Answer: Pending

QUESTION NO: 109

The Spanning Tree Bridge ID uses the format:

A. Port.MAC Address
B. Priority.MAC Address
C. Module.Port.MAC Address
D. Module.Priority.MAC Address

Answer: A

QUESTION NO: 110

Convergence in Spanning Tree Protocol has occurred when all switches have transitioned
to the __________ or blocking state.

A. Holding
B. Converging
C. Forwarding
D. Listening

Answer: B

QUESTION NO: 111

______ is a VLAN identification method also known as frame tagging.

A. CDP
B. VTP
C. 802.1q
D. LANE
Answer: B

QUESTION NO: 112

802.1q is a VLAN protocol that can be described by the following statements.

A. It is an open protocol developed by the IEEE

B. It was developed by Cisco
C. Its design was based on ISL
D. None of the above. It is unrelated to VLANs

Answer: Pending

QUESTION NO: 113

The OSI Model describes the Data Link layer as providing __________.

A. Communications between applications

B. Communications between programs
C. The conductive path that includes media, connectors and coding characteristics
D. Communications between electrical end-points

Answer: C

QUESTION NO: 114

VLAN Trunking Protocol version ______ is the default.

A. 4
B. 3
C. 2
D. 1

Answer: C

QUESTION NO: 115

If VLAN changes are made between 2 parts of the network while a trunk is down:

A. The 2 parts will simply synchronize with no data loss when the trunks come back up
B. The configuration revision will reset to 1
C. The switch with the lowest configuration revision will erase the VLAN configuration
of the highest revision
D. You may lose the VLAN configuration

Answer: C

QUESTION NO: 116

One VLAN recommendation is to keep a maximum hop count of ______ bridges to
speed convergence.
A. 5
B. 6
C. 7
D. 8

Answer: B

QUESTION NO: 117

The BPDU Forward Delay timer has a maximum value of ______ seconds.
A. 10
B. 20
C. 30
D. 40

Answer: B

QUESTION NO: 118

Choose all that apply. Which of the following can result in a port/switch failing to receive
BPDU packets?

A. A duplex mismatch on a point-to-point link

B. Aggressive STP value changes
C. A unidirectional link
D. Packet corruption

Answer: A, B, C

QUESTION NO: 119

A loop has a similar effect on a network as:

A. A poorly written application

B. Packet corruption
C. CRC error
D. A broadcast storm

Answer: C

QUESTION NO: 120

Excessive broadcast frames at the Data Link layer may create problems:

A. At the Application Layer

B. At the Transport layer
C. At the Network layer
D. All of the above

Answer: C
QUESTION NO: 121
CD in CSMA/CD means:

A. A node will listen to detect that the media is unused before transmitting
B. A node will determine when a collision has happened
C. Every station will hear the frame. It is a broadcast environment
D. It was originally designed as a bus topology

Answer: A

QUESTION NO: 122

The OSI Model describes the Physical layer as providing __________.
A. Communications between applications
B. Communications between programs
C. The conductive path that includes media, connectors and coding characteristics
D. Communications between electrical end-points

Answer: B

QUESTION NO: 123

Over 95% of the switches supported by Switch Expert are Cisco.

A. True
B. False

Answer: Pending

QUESTION NO: 124

The _______ standard refers to Carrier Sense Multiple Access with Collision Detection
(Original Ethernet Specification).

A. 802.3
B. 802.3u
C. 802.3x
D. 802.3ab

Answer: Pending

QUESTION NO: 125

__________ is an IEEE specification that describes the management and operation of
Virtual LANs.

A. 802.1D
B. 802.1Q
C. 802.1W
D. 802.2

Answer: A

QUESTION NO: 126

The Monitor card should be bound with __________ and the Transport card should be
bound with _________.

A. NetBIOS, TCP/IP
B. TCP/IP, Sniffer driver
C. Sniffer Driver, TCP/IP
D. TCP/IP, TCP/IP

Answer: B

QUESTION NO: 127

When the Sniffer Switch Expert uses two adapters:

A. It can monitor two different switches

B. Full Duplex reception is possible, because it requires one to receive and the other to
transmit
C. VLSI is enabled
D. One attaches to the switch control port and the other to the mirrored port

Answer: C

QUESTION NO: 128

The Switch Configuration list is accessed through:

A. Tools > Expert Switch

B. Tools > Expert Options > Switch
C. The Switch Expert icon on the tool bar
D. Monitor > Switch

Answer: C

QUESTION NO: 129

The image below is an example network, the connecting device is a multi-port switch. In
a switched-media LAN, the Sniffer is able to capture __________.
A. All traffic from all devices on the LAN
B. Broadcast and multicast traffic
C. Traffic destined for the port where the server is attached
D. All of the above

Answer: A

QUESTION NO: 130

The Sniffer Portable Switch Expert uses _________ to configure Port Mirroring on a
switch.

A. IOS
B. SPAN
C. SNMP requests
D. 802.1

Answer: B

QUESTION NO: 131

If you specify Connected to Sniffer: No in the Switch Configuration list:

A. You can still monitor from Switch Expert

B. You can still retrieve RMON-based statistics from the switch over the Transport card
C. Switch expert will be disabled
D. The alarm function will not work

Answer: A

QUESTION NO: 132

In order for a Sniffer to see non-broadcast network traffic on a _______ network, the
Sniffer must be connected to a monitor, span, or mirror port.

A. Repeated
B. Switched
C. Routed
D. Remote

Answer: A

QUESTION NO: 133

In order for a Sniffer to see non-broadcast network traffic on a switch, the Sniffer must be
connected to a port configured as a(n)_______ port.

A. Monitor, span, or mirror

B. Forwarding
C. Uplink
D. Active

Answer: Pending

QUESTION NO: 134

Choose all that apply. Which of the following are true regarding the Novell Raw frame
Data Link layer?

A. Does not include an LLC header

B. The MAC layer ensures minimum frame length
C. It uses LLC
D. It was specified while the 802.3 standard was being developed

Answer: A, C

QUESTION NO: 135

The SNAP header is divided as follows:

A. 2 bytes vendor code, 3 bytes protocol

B. 3 bytes vendor code, 2 bytes protocol
C. 3 bytes protocol, 2 bytes control
D. 1 byte DSAP, 1 byte SSAP

Answer: A

QUESTION NO: 136

The _______ helps to ensure that stations involved in a collision do not again collide.

A. CSMA/CD protocol
B. Truncated Binary Exponential Backoff Algorithm
C. Manchester Algorithm
D. 802.1d protocol

Answer: A

QUESTION NO: 137

The Ethernet Version 2 specification ______ the IEEE specification.

A. Predates
B. Was co-developed with
C. Followed
D. Is unrelated to

Answer: Pending

QUESTION NO: 138

Choose all that apply. Which of the following statements are true regarding the IEEE
802.3 Data Link layer?

A. Splits the DLC layer into two distinct sublayers

B. MAC layer contains hardware addresses of destination and sending stations
C. MAC Layer ensures minimum frame length
D. Accommodates only connectionless service
Answer: A, B

QUESTION NO: 139

The image below is a view of the Sniffer Detail window. The Ethernet frame format
displayed in the image is:

A. Ethernet Version 2
B. Novell Raw
C. IEEE 802.3
D. IEEE 802.3 SNAP

Answer: B
QUESTION NO: 140
In the IEEE 802.3 specification, Collision detection is performed by:

A. The Physical layer

B. The LLC sublayer of the Data Link layer
C. The MAC sublayer of the Data Link layer
D. None of the above

Answer: B

QUESTION NO: 141

The ________ header follows an IEEE 802.3 LLC field when the SAP values are AA.

A. Type
B. Length
C. Data
D. SNAP

Answer: C

QUESTION NO: 142

Choose all that apply. During frame transmission in Ethernet (CSMA/CD), which of the
following activities occur?

A. After sensing that there is no carrier on the wire during the interframe gap period, a
station with data to send begins to transmit a frame
B. The signal is propagated everywhere
C. The source station listens after it completes transmitting
D. It assumes the frame was delivered if it sensed no interference during transmission

Answer: A, C