Welcome to download the newest Pass4itsure c4040-226 VCE dumps: http://www.pass4itsure.com/c4040-226.html
Cisco 642-821 isn’t just ideal for college students it also occasion preserving by giving readymade at home alternatives and the one can possibly conserve the efforts by avoid wandering here and there seeking a competent mentor.Cisco 642-821 qualified college students are getting a lot more than their expectations inside market place simply because Cisco 642-821 will be involving great market value. If you should often hear via all of your close friends or buddie ahead of regarding Cisco 642-821 exam. however, you may not get given a significant shown to Cisco 642-821 exam sample questions because of various worries about this technique involving Cisco 642-874 exam then it’s high time pertaining to deciding concerning Flydumps regarding boosting prospective buyers associated with our bait.
QUESTION 108
Given the partial IPSEC datagram, which provides both authentication and confidentiality, identify the header marked as 2.
A. AH header
B. ESP header
C. MPLS VPN header
D. SA header
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 109
Under which circumstance would use of Kerberos authentication system be required, instead of TACACS+ or RADIUS?
A. Authentication, authorization and accounting need to use the a single database.
B. Multiple levels of authorization need to be applied to various router commands.
C. DES encrypted authentication is required.
D. The usage of various router functions needs to be accounted for by user name.
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 110
Refer to the graphic. Which configuration statements match the debug output shown above?
A. crypto isakmp policy 100 encr aes
authentication rsa-encr
group 5
B. crypto isakmp policy 100 encr 3des authentication pre-share group 2
C. crypto isakmp policy 100 hash md5 authentication rsa-sig
D. crypto isakmp policy 100 encr des lifetime 7200
E. crypto isakmp policy 100 hash md5 group 1 lifetime 7200
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 111
Which command binds a logical dialer interface to a dialer pool?
A. dialer pool-member number
B. dialer-group number
C. dialer-list number
D. dialer pool number
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 112
Which three conditions would suggest using weighted random early detection as an alternative to tail drops when configuring class-based weighted fair queuing? (Choose three.)
A. Your network is designed for a more passive rather than active strategy in discarding packets
B. You want to enable TCP global synchronization to avoid congestion.
C. You would like to use IP Precedence or DSCP values to make early dropping decisions.
D. The bulk of your traffic is TCP traffic
E. You would like a chance to decide which packets will be dropped when it becomes necessary.
Correct Answer: CDE Section: (none) Explanation
Explanation/Reference:
QUESTION 113
What are two advantages to the use of RFC 1483 to encapsulate IP data over ATM? (Choose two.)
A. multiprotocol support
B. inherently more secure because of the Address Resolution Protocol (ARP)
C. the CPE in bridge mode performs routing functions
D. ideal for single-user Internet access
Correct Answer: AD Section: (none) Explanation
Explanation/Reference:
QUESTION 114
An interface is experiencing problems where the high priority traffic is successfully passing through but the lower priority traffic is not moving through at all. Which queuing method is most likely contributing to this problem?
A. WFQ
B. priority
C. custom
D. FIFO
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 115
Given the following configuration, which two statements about the router are true? (Choose two.)
router(config)# aaa authentication login default group tacacs+ none
A. No authentication is required to login
B. It uses TACACS+ as the first default authentication method.
C. It uses the default local database for authentication. If authentication fails, then no access is permitted.
D. It uses the list of servers specified in group “TACACS+”. If none are available, then no access is permitted.
E. It uses the list of TACACS+ servers for authentication. If the TACACS+ authentication servers are unavailable, then the router uses no authentication.
F. It uses a subset of TACACS+ servers named “group” for authentication as defined by the aaa group server tacacs+ command.
Correct Answer: BE Section: (none) Explanation
Explanation/Reference:
QUESTION 116
Which command verifies Frame Relay traffic-shaping parameters?
A. show frame-relay pvc
B. show frame-relay status
C. show frame-relay interface
D. show frame-relay map-class
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 117
Given the partial configuration and assuming that all other configuration parameters are correct and that there are only two BRI interfaces on Router A, how many ISDN B channels will form the multilink PPP bundle from Router A to Router B?
A. Two ISDN B channels will form the Multilink PPP bundle
B. Four ISDN B channels will form the Multilink PPP bundle.
C. No Multilink PPP bundle will be formed because the dialer interface is not associated with the physical interfaces
D. No Multilink PPP bundle will be formed because there is no load threshold configured.
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 118
A hub router is connecting four sites using Frame Relay point-to-point subinterfaces. An administrator troubleshooting the issue enters the command show frame-relay pvc on the hub router. Given the above output, which statement is correct?
A. The router is configured for a DLCI that is not detected on the other end of the PVC.
B. The router has dynamically found a DLCI that is not intended for its network.
C. The router is configured for Inverse ARP on the subinterfaces.
D. The router is configured for a DLCI that the switch does not recognize.
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 119
Refer to the exhibit. Which policy-map configuration will best ensure that packets classified as voice are not dropped in favor of other network traffic?
A. POLICY-1
B. POLICY-2
C. POLICY-3
D. POLICY-4
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 120
Which field is defined in the PPP format that allows PPP to dynamically negotiate link options?
A. address
B. control
C. protocol
D. flag
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 121
Based on the command output shown, which statement must be true?
A. The wrong spids were configured.
B. The wrong ISDN switch was configured.
C. The BRI 0 interface is administratively down.
D. The IP address on the interface was incorrectly configured.
E. There is nothing wrong with the ISDN configuration.
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 122
Which common problem causes IPSEC VPN to fail?
A. ACLs configured in the IPSEC traffic path blocking ISAKMP, ESP, and AH traffic
B. multiple transform sets configured but only one transform set is specified in the crypto map entry
C. crypto ACL configuration errors where permit is used to specify that matching packets must be encrypted
D. multiple interfaces sharing the same crypto map set
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 123
Please reference the above configuration. The 806 router E1 interface is connected to a cable modem and the E0 interface is connected to an end-user PC. The end-user PC is having Internet connectivity issues. What could be the cause of the problem?
A. The IRB configuration is missing
B. The port address translation (PAT) configuration is not correct
C. The access-list 102 configuration is not correct.
D. The DHCP server configuration is not correct.
E. The IP address command on the E0 and E1 interfaces is wrong.
Correct Answer: E Section: (none) Explanation
Explanation/Reference:
QUESTION 124
When AAA accounting is being configured on a Cisco router, what two accounting method types are available? (Choose two.)
A. login
B. group tacacs+
C. local
D. enable
E. group radius
Correct Answer: BE Section: (none) Explanation
Explanation/Reference:
QUESTION 125
Observe the output from the show dsl int atm 0 command. What does the display of the upstream and downstream speed indicate?
A. Layer 1 connectivity has been established.
B. Layer 2 connectivity has been established.
C. Layer 1 and 2 connectivity has been established.
D. Layer 3 connectivity has been established.
E. Layer 2 and 3 connectivity has been established
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 126
When CBWFQ is being used, what is 25 percent of the total available bandwidth reserved for?
A. the highest priority class
B. routing traffic
C. low volume traffic
D. high volume traffic
E. delay sensitive traffic
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 127
Refer to the exhibit. A network administrator is attempting to verify an IPSec VPN connection between R1 and R2. Which three statements are true about the VPN? (Choose three.)
A. Traffic from Host A to Host X will be protected by IPSec.
B. Traffic from Host B to Host X will be protected by IPSec.
C. AH is used by R2 to protect VPN traffic to R1.
D. SHA-1 is used by R1 to protect VPN traffic to R2.
E. R1 and R2 are IKE peers.
F. R1 and R2 have established a Transport Mode IPSec VPN.
Correct Answer: ADE Section: (none) Explanation
Explanation/Reference:
QUESTION 128
Which two statements are true about the application of the backup interface command? (Choose two.)
A. The backup interface is in standby mode until activated.
B. A Fast Ethernet interface can be used as a backup interface.
C. The backup interface can be used to load balance.
D. Both primary and backup routes appear in the route table. The backup route, however, has a higher administrative distance.
E. Each primary interface can have up to three backup interfaces
Correct Answer: AC Section: (none) Explanation
Explanation/Reference:
QUESTION 129
Which additional field differentiates the PPP frame from an HDLC frame format?
A. protocol
B. control and address-family identifier (AFI) fields
C. LCP and control fields
D. next hop address and address-family identifier (AFI) fields
E. flag and next-hop address fields
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 130
Which two encapsulation methods require that an 827 ADSL router be configured with a PPP username and CHAP password? (Choose two.)
A. PPPoE with the 827 configured as a bridge
B. PPPoE with the 827 configured as the PPPoE client
C. PPPoA
D. RFC 1483 Bridged with the 827 configured as the PPPoE client
E. RFC 1483 Bridged with the 827 configured as a bridge
Correct Answer: BC Section: (none) Explanation
Explanation/Reference:
QUESTION 131
Refer to the exhibit. Which two statements are true about the broadband technology that is depicted in the exhibit? (Choose two.)
A. The exhibit is an example of PPPoA
B. The exhibit is an example of PPPoE.
C. The exhibit is an example of RFC 1483/2684 bridging.
D. The PPP session is established between the CPE and the aggregation router.
E. The PPP session is established between the end-user PC and the aggregation router.
F. Because the CPE acts as a set-top box, the exhibited technology is ideal for single-user Internet access.
Correct Answer: BE Section: (none) Explanation
Explanation/Reference:
QUESTION 132
Refer to the exhibit. Router R1 is not able to connect to router R2 using ISDN. What is the problem?
A. misconfigured dialer maps
B. authentication
C. routing
D. Layer 2 INACTIVE
E. snapshot routing
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 133
A network administrator must configure R1 so that it accepts ISDN calls from R2 but does not dial R2. Given the exhibited partial configuration, what must the administrator configure to complete the configuration and meet these requirements?
A. R1(config)# dialer-list 1 protocol ip permit R1(config)# interface bri0/0 R1(config-if)#dialer map ip 1.1.1.2 name R2 broadcast 5551212 R1(config-if)# dialer-group 1 R1 (config-if)# ppp authentication chap callin
B. R1(config)# dialer-list 1 protocol ip permit R1(config)# interface bri0/0 R1(config-if)# dialer map ip 1.1.1.2 name R2 broadcast R1(config-if)# dialer-group 1 R1(config-if)# ppp authentication chap
C. R1(config)# dialer-list 1 protocol ip deny R1(config)# interface bri0/0 R1(config-if)# dialer map ip 1.1.1.2 R1(config-if)# dialer-group 1 R1(config-if)# ppp authentication chap callin
D. R1(config)# interface bri0/0 R1(config-if)# dialer map ip 1.1.1.2 name R2 broadcast 5551212 R1(config-if)# ppp authentication chap
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 134
Which dial feature provides reliable connectivity, does not rely on defined interesting traffic to trigger outgoing calls to the remote router, and is triggered by a lost route?
A. dialer backup
B. floating static routes
C. dialer watch
D. dialer route
Correct Answer: C Section: (none) Explanation Explanation/Reference:
QUESTION 135
A network administrator would like to use an existing ISDN line as a backup for a Frame Relay line connected on interface serial0.
Which statement is correct based on the following configuration of the Cisco Router?
interface serial0 ip address 192.168.10.1 255.255.255.0 backup interface bri0 backup delay 5 10
interface bri0 ip address 192.168.11.2 255.255.255.0 dialer idle-timeout 900 dialer-group 1
A. The ISDN BRI line will go to “standby” mode 900 seconds after the serial interface reactivates.
B. The ISDN BRI line will go to “standby” mode 10 seconds after the serial interface reactivates.
C. The ISDN BRI line will deactivate when the primary line reaches 10% utilization.
D. The ISDN BRI line will go to standby mode after 900 seconds, but will reactivate if the primary line reaches 10% utilization
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 136
LCP is responsible for the negotiation of which function?
A. IP address
B. modulo size
C. error correction
D. frequency on the link
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 137
Which router command enables auditing of all SLIP, PPP, and ARAP network service requests?
A. ip aaa audit network
B. aaa accounting network
C. ip audit services enable
D. aaa accounting services enable
Correct Answer: B Section: (none) Explanation
Explanation/Reference: QUESTION 138
Given the output shown in the exhibit, which three statements are true about PPP compression? (Choose three.)
A. The interface is configured with TCP header compression.
B. The interface is configured with STAC compression.
C. The interface is configured with Predictor compression.
D. The actual data throughput of the router is less than what it would be if compression were not being applied.
E. The total amount of data to be transmitted before applying compression is 160,000.
F. The total amount of data to be transmitted after applying compression is 40,000.
Correct Answer: BDE Section: (none) Explanation
Explanation/Reference:
QUESTION 139
Refer to the output of the debug frame-relay packet command shown in the graphic. What is the possible problem?
A. Frame Relay encapsulation mismatch
B. Frame Relay LMI type mismatch
C. missing routing table entry
D. missing Inverse ARP entry
E. missing MAC address entry
Correct Answer: D Section: (none) Explanation
Explanation/Reference: QUESTION 140
Within a PPP environment, what does protocol multiplexing refer to?
A. the ability to provide load balancing functionality over multiple WAN links
B. the capability to build up and tear down multiple Layer 3 protocol sessions over a single data link
C. the ability to allow link partners to dynamically negotiate link options, including authentication and compression
D. the ability to reduce the size of data frames being transmitted over network links
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
PDF format– Printable version, print Cisco 642-821 exam dumps out and study anywhere.Software format– Simulation version, test yourself like Cisco 642-821 exam real test.Credit Guarantee– Flydumps never sell the useless Cisco 642-821 exam dumps out.You will receive our Cisco 642-821 exam dumps in time and get CCIE Certified easily.
Pass4itsure c4040-226 dumps with PDF + Premium VCE + VCE Simulator: http://www.pass4itsure.com/c4040-226.html