


	More Testimonials >

Visit my blog for free daily Cisco CCNA and CCNP certification questions, my latest free articles and tutorials, and more!

CCNP SWITCH Practice Exam:

More Cisco Security Switch Features!

To prepare you for success on the CCNP SWITCH exam, here's another practice exam on multilayer switching and HSRP!

Answers can be found at the bottom of the page.

For plenty of additional CCNP SWITCH exam tutorials, videos, and practice exams, visit my CCNP SWITCH Tutorials page and my YouTube Cisco Certification Video Training page!

Enjoy the questions!

Chris Bryant

CCIE #12999

"The Computer Certification Bulldog"

chris@thebryantadvantage.com

The Only CCNP SWITCH Exam DVD From "The Computer Certification Bulldog" -- Chris Bryant, CCIE #12933.

Question 1:

A DHCP message is received on an untrusted port running DHCP Snooping. What default action will be taken?

A. The port remains open.

B. The port is placed into err-disabled state.

C. The port is placed into root-inconsistent state.

D. The port is administratively shut down.

Question 2:

Name the dot1x port authentication modes.

Question 3:

Which of the following is true of a destination SPAN port?

A. Can be part of an Etherchannel

B. Doesn't participate in VTP, STP, or CDP

C. Doesn't participate in PAgP, LACP, or DTP

D. Can be a source SPAN port as well

Question 4:

You're configuring dot1x port-based authentication. 802.1x must be running where?

A. On the host only

B. On the switch only

C. On both the host and switch

D. On neither device

Question 5:

What kind of ACL should be used to filter bridged traffic?

Question 6:

What frame type(s) pass through the tunnel built by the "L2 protocol-tunnel" command?

A. IP frames

B. Network control traffic

C. All data frames and network traffic

D. All data frames

Question 7:

Which statement is true of an untrusted port when Dynamic ARP Inspection is running?

A. ARP replies will result in the port being shut down

B. ARP replies and requests are blocked on that port

C. All ARP replies and requests received on that port are permitted

D. All ARP replies and requests received on that port are inspected

Answers right after this brief, important message!

____________________________________________________

I'm Paying It Forward Bigger Than Before...

The CCNP SWITCH Exam Study Package Is Now $25!

" Your books are the best! The best money I have spent on CCNP training material!" -- Rob Pethick, CCNP

____________________________________________________

Answers:

1. "B". The port will be placed into err-disabled state, which you can verify with show interface.

2. The dot1x port authentication modes are force-authorized, force-unauthorized, and auto.

3. "B, D". A destination SPAN port cannot be a source SPAN port, nor can it be part of an Etherchannel.

4. "C".

5. Bridged traffic and inter-VLAN traffic should be filtered with a VLAN ACL.

6. "B". That tunnel is designed for network control traffic such as STP and VTP.

7. "D". DAI will inspect every single ARP request and reply received on an untrusted port.