Fravo.com Certification Made Easy MCSE, CCNA, CCNP, OCP, CIW, JAVA, Sun Solaris, Checkpoint World No1 Cert Guides info@Fravo.com Cisco Internetwork Troubleshooting (CIT) Exam 642-831 Edition 2.0 © Copyrights 1998-2005 Fravo Technologies All Rights Reserved 642-831 Congratulations!! You have purchased a Fravo Technologies Study Guide This study guide is a complete collection of questions and answers that have been developed by our professional & certified team You must study the contents of this guide properly in order to prepare for the actual certification test The average time that we would suggest you for studying this study guide is approximately 15 to 20 hours and you will surely pass your exam We guarantee it! GOOD LUCK! DISCLAIMER This study guide and/or material is not sponsored by, endorsed by or affiliated with Microsoft, Cisco, Oracle, Citrix, CIW, CheckPoint, Novell, Sun/Solaris, CWNA, LPI, ISC, etc All trademarks are properties of their respective owners Guarantee If you use this study guide correctly and still fail the exam, send a scanned copy of your official score notice at: info@fravo.com We will gladly refund the cost of this study guide or give you an exchange of study guide of your choice of the same or lesser value This material is protected by copyright law and international treaties Unauthorized reproduction or distribution of this material, or any portion thereof, may result in severe civil and criminal penalties, and will be prosecuted to the maximum extent possible under law © Copyrights 1998-2005 Fravo Technologies All Rights Reserved http://www.fravo.com http://www fravo.com 642-831 Note 1: Answers to the unanswered questions will be provided shortly Note 2: Section A contains 68 questions Section B contains 125 questions The total number of questions is 193 Section A QUESTION When troubleshooting a complex problem which troubleshooting approach is used? A Top-down B Bottom-up C Split-difference D Divide-and-conquer Answer: QUESTION Match the correct stage to its description for the process of creating network documentation Answer: QUESTION Log in, interface discovery and device discovery are steps of which of the following processes? A Network troubleshooting B Network documentation C Network testing D Network configuration Answer: QUESTION Which troubleshooting approach s hould be used when it is suspected that the problem is physical media or a faulty hub? A Isolate and solve B Top-down C Bottom-up D Divide and conquer Answer: QUESTION What three pieces of information should you have ready before placing a call to Cisco TAC? (Choose three) http://www fravo.com 642-831 A Packet traces B Switch error logs C Server event logs D Client patch levels E Recent configuration changes Answer: QUESTION What does a logical layered network model allows a troubleshooter to do? A Focus on physical layers to isolate a problem B Focus on specific elements to isolate a problem C Focus on physical, data link and network layers to isolate a problem D Focus on transport and application layers to isolate a problem Answer: QUESTION A network administrator has determined that a problem exists in the transport layer Which two of the following network devices should the administrator focus on to isolate the problem? (Choose two) A Router B Standard switches C Hub D Media E End-system Answer: QUESTION Which documentation reduces the time that a troubleshooter needs to spend learning about the structure and configuration of a network and helps them know when they have returned the network to normal operation? A Design document B Baseline document C Network summary D Design summary Answer: QUESTION What should the next step be when a network administrator has followed a correction plan and efforts to correct the problem are unsuccessful? A Stop making changes and return to the Gathering Symptoms stage B Continue to make changes, documenting each change as it is made until the problem is corrected C Undo all changes, returning the device to their known initial state D Perform a core dump to send to Cisco technical support for analysis Answer: QUESTION 10 Which troubleshooting tool is included in Cisco Connection Online (CCO)? A Cisco Technical Information Center (TIC) web site B Cisco Technical Assistance Center (TAC) web site http://www fravo.com 642-831 C Cisco Center for Assisted Troubleshooting (CAT) web site D Cisco Internetworking Troubleshooting Center (ITC) web site Answer: QUESTION 11 What information should be included in a network topology diagram? (Choose two) A Location of configuration files B Speed and duplex of individual switch ports C Illustrations of each network device D Representations of logical and physical connections E Individual end user systems Answer: QUESTION 12 The Cisco router logging process can distribute system error messages to which three destinations? (Choose three) A Configuration file B Logging buffer C Terminal lines D External syslog server E History file F Message directory Answer: QUESTION 13 What does P in a trace output mean? A The port us unreachable B The PSTN is unreachable C The packet is unreachable D The protocol is unreachable Answer: QUESTION 14 Users report slow response time for Contoso's Intranet web server While trying to isolate the problem, you find that attempts to use ping and tracert to reach the http://www fravo.com 642-831 server's IP address are unsuccessful You are able to successfully Telnet to the server, although the response is very slow At this point, what assumptions can you make from the results of your attempts to further isolate the problem? (Choose three) A Divide and conquer troubleshooting approach should be taken B Physical layer issues have been eliminated as a possible cause of the slow response C The IP address configuration has been eliminated as a possible cause of the slow response D ICMP may be blocked by an access list somewhere on the path between the users and the Intranet web server E TCP may be blocked by an access list somewhere on the path between the users and the Intranet web server F Application layer issues have been eliminated as a possible cause of the slow response Answer: QUESTION 15 Which command is used to determine if a problem lies in the first four layers of the OSI networking model? A ping B arp -a C telnet D show ip interface Answer: QUESTION 16 Which action should you consider when implementing an action plan? A Document the topology of the network B Delete access lists on routers to isolate traffic C Create troubleshooting steps as needed during the process D Restore your network to a known previous state of the action item does not solve the problem Answer: QUESTION 17 Which two steps should be taken when troubleshooting external router connections to switches supporting inter-VLAN routing? (Choose two) A Verify the correct media-type statement for each VLAN sub interface B Verify that the sub interface for each VLAN has the correct IP address C Ensure that the correct IP address if configured on the main interface D Ensure that the full duplex setting on the main router interface matches that on the switch port Answer: QUESTION 18 The output from the Cisco IOS show buffers command has a count of overruns Where in the router would you must likely find the cause of the problem? A The router bus B The processor C Shared NVRAM D The route processor E The interface hardware Answer: QUESTION 19 Which command can display system messages that indicate the presence http://www fravo.com 642-831 of duplicate IP addresses on network devices? A show logging B show interfaces C show IP routing D show IP protocol Answer: QUESTION 20 Exhibit: The exhibit illustrates the output of a command used to troubleshoot data-link targets Which command generated this output? A show cdp neighbor B show cdp neighbor detail C show interfaces serial 0/1 D show interfaces serial 0/1 summary Answer: QUESTION 21 Network Topology Diagrams and Network Configuration Tables should be maintained on which schedule? A At the end of the day B At the end of the month C At the end of the year D At the time changes are applied E Before making any changes Answer: QUESTION 22 Which two commands are used to gather information about MS Windows based end-systems? (Choose two) A show route B route print C show interface D print route E arp -a F traceroute Answer: QUESTION 23 Exhibit: You work as a technician at Cer33iller When installing new computers at Contoso's remote site in Mexico City, you are unable to make a connection between the computers and the corporate web server ContosoA Using the ping command from the router at the remote site, you are able to successfully ping both the intranet web server and the newly installed PCs Which two problems might produce this set of symptoms? (Choose two) A Incorrect default gateway configured on the new PCs B Incorrect default gateway configured on the intranet web server C Incorrect routing protocol configuration on the remote site router D Incorrect routing protocol configuration on the router connected to the subnet where the intranet web server is installed Answer: http://www fravo.com 642-831 QUESTION 24 What are the components that should be included in an End-system Topology Diagram? (Choose four) A Operating system B Device name C IP routing protocol D Device illustration E Connection to the network F VTP domain Answer: QUESTION 25 What information is provided by the show PPP multilink command? A Bundle name B Bundle idle time out C Bundle flapping record D Bundle disconnect reason Answer: QUESTION 26 Which two statements about EIGRP are true? (Choose two) A EIGRP routers maintain en EIGRP Neighbor Table and an EIGRP Topology table B On Ethernet (Broadcast) networks, EIGRP routers only establish adjacencies with the DR and BDR C An EIGRP route will be in the active state if it lost the successor and no feasible successor is available D EIGRP triggered updates are flooded to every EIGRP router within the EIGRP AS Answer: QUESTION 27 When a network administrator is recording network applications that are available on an end-system, which two high bandwidth applications should be included because of their large impact on network performance? (Choose two) A Streaming video players B Email clients C Internet browsers D IPTV multicast applications E Calendar software clients Answer: http://www fravo.com 642-831 QUESTION 28 Which command will enable forwarding of packets that have no default route to the best supernet route possible? A ip redirects B ip split-horizon C ip proxy-arp D ip classless Answer: QUESTION 29 Which two are troubleshooting targets for connection-oriented protocols? (Choose two) A Verify time-to-live fields B Verify protocol numbers C Verify sequence numbers D Verify acknowledgment numbers Answer: QUESTION 30 Which command displays TCP and UDP statistics and can be used to isolate problems at the transport layer? A show ip traffic B show ip route C show ip protocols D show ip interface brief Answer: QUESTION 31 Where is the output of debug and system error messages sent by default? A Output is written to a Syslog server B Output is sent to the console terminal C Output goes to the remote console if logging is off D Output configuration requires a TFTP server to write files E Error logging automatically invokes debug output to the designated TFTP server Answer: QUESTION 32 Users are complaining that HTTP sessions are not successfully completing You verify that there is a good network layer path from client to server and back What should you check next? A Routing topology B Retransmissions C Buffer under runs D Switching topology Answer: QUESTION 33 Switch>show version Cisco Internet work Operating System Software IOS(tm)C2950 Software(C2950-I6Q4L2-M), Version 12.1(11)EA1, RELEASE SOFTWARE(fc1) Copyright(c) 1986-2002 by Cisco Systems, Inc Compiled Web 28-Aug-02 10:25 by antonino Image text-base: 0x80010000, data-base: 0x80528000 ROM: Bootstrap program is CALHOUN boot loader Switch uptime is hours, 34 minutes System returned to ROM by http://www fravo.com 642-831 power-on System image file is "flash:/c2950-i6q412-mz.121-11-EA1.bin" Cisco WS-C295024 (RC32300) processor (revision G0) with 20402K bytes of memory Processor board ID FHK0645Z0TE Last reset from system-reset Running Standard Image 24 Fast Ethernet/IEEE 802.3 interfaces 32K byes of flash -simulated non-volatile configuration memory Base Ethernet MAC Address: 00:0B:5F:4D: 77:80 Motherboard assembly number: 73-5781-11 Power supply part number: 34-0965-01 Motherboard serial number: F0C064507AL Power supply serial number: PHI0638059E Model revision number: G0 Motherboard revision number: A0 Model number: WS-C2950-24 System serial number: FHK0645Z0TE Configuration register is 0xF Switch Examine the output of the show version command Which of the following pieces of information can be discovered about the network configuration of this switch? (Choose two) A Spanning-tree version B Model of the device C MAC addresses of any interfaces or ports D Active routing protocol E Installed memory F Routing protocol version Answer: QUESTION 34 Which three stages are essential to general troubleshooting processes? (Choose three) A Research solutions B Document a policy C Gathering symptoms D Correcting the problem E Isolating the problem Answer: QUESTION 35 Which Microsoft Windows command can be used to verify that the declared address for the end system is correct? A ping B tracert C telnet D arp -a Answer: QUESTION 36 Which command will enable IP multicast fast switching or multicast distributed switching? A ip redirects B ip mroute-cache C ip multicast D ip directed-broadcast Answer: QUESTION 37 You have diagnosed a Frame Relay issue as a flapping link Which two problems could cause this condition? (Choose two) http://www fravo.com 642-831 However, she is concerned of the impact on the users of the network She asks you when she should start the debug troubleshooting What should you tell her? (Select two.) A When network traffic is low B When there are fewer users C When traffic is operating normally D When the router is fast-switching mode E When protocol baselines needs to be established Answer: A, B Explanation: A Debug command lowers a router's performance substantially They have to be used selectively, properly, and temporarily The debug command should be used during periods when network traffic is low and fewer critical business applications are active, i.e few users are online QUESTION 83 You are examining a trace output Your trainee asks you want the letter H stands for in these outputs What should you tell him? A The host is unreachable B The next-hop is unreachable C The hardware is unreachable D The HTTP protocol is unreachable Answer: A Explanation: Trace (or traceroute) is the main tool for path discovery between IP nodes Note: In Cisco routers, the codes for a traceroute command reply are the following: admin denied Q source quench received (congestion)? unknown (any other ICMP message) Reference: Using the traceroute Command on Operating Systems http://www.cisco.com/warp/public/105/traceroute.shtml QUESTION 84 Your trainee is using the CCO (Cisco Connection Online) tool Which troubleshooting tool can he use within CCO? A Cisco Technical Information Center (TIC) website B Cisco Technical Assistance Center (TAC) website C Cisco Center for Assisted Troubleshooting (CAT) website D Cisco Internetworking Troubleshooting Center (ITC) website Answer: B Explanation: You may contact Cisco TAC via telephone, facsimile, e-mail, or online from the Case Open page on CCO Note: CCO provides a suite of interactive web-based services that offer open access to Cisco's information, systems, resources, and personnel QUESTION 85 Your trainee is curious about the TCP connection sequence Which connection sequence TCP use? A Five-way SYN B Three-way SYN C Five -way handshake D Three-way handshake Answer: D Explanation: The TCP connection is established through a three-way handshake Incorrect Answers 47 http://www fravo.com 642-831 A: Only a three-way handshake is used B: Only two SYNs are used C: Only a three-way handshake is used QUESTION 86 Exhibit Device ID: Contoso3 Entry address(es): IP address: 192.168.68.18 CLNS address: 490001.1111.1111.1111.00 AppleTalk address: 69.1 Platform: AGS, Capabilities: Router Trans-Bridge Interface: Ethernet0, Port ID (outgoing port): Ethernet0 Hold time : 141 sec Version: Cisco Internet work Operating System Software IOS C2600 Software (C2600-JK95-M), Version 12.2(3), RELEASE SOFTWARE (fc1) Copyright (c) 1986-2001 by Cisco Systems, Inc Compiled Mon-Aug-15 12:13 by kwad advertisement version: Your trainee is troubleshooting data-link targets She shows you the output of the command She asks you if you know what command she has used to produce this output Would command did she use? A show cdp neighbor B show cdp neighbor detail C show interfaces serial 0/1 D show interfaces serial 0/1 summary Answer: B Explanation: Compared to the show cdp neighbor the detail keyword specifies that detailed information about neighboring Cisco products is shown If you use the detail keyword, you will also see the IP address of your switch's neighbor Incorrect Answers A: The show cdp neighbor command is used to display the VLAN Policy Server nearest neighbor on the network The sample output (see below) does not match the exhibit Sample output: Console_CK> show cdp neighbors Port Device-ID Port -ID Platform 48 http://www fravo.com 642-831 3/5 002267619 3/6 * WS-C5000 3/6 002267619 3/5 WS-C5000 Console_CK> C, D: We want to troubleshoot the data-link targets, the neighbors, not the local interfaces QUESTION 87 You have acquired the Cisco Works 2000 bundle Which of the following applications are included in this bundle? (Choose two) A RMOn B NetView C Vlan Director D Traffic Director E Cisco IOS software Answer: C, D Explanation: Cisco Works for Switched Internet works (CWSI) is a suite of network management applications CWSI applications enable you to configure, monitor, and manage a switched internet work • Traffic Director • Vlan Director • Atm Director • Cisco View • User Tracking QUESTION 88 You want to place timestamps on debug outputs and log messages Which command should you use? A show timestamps B display timestamps C logging timestamps D service timestamps Answer: D Explanation: If you are interested to see a timestamp with each line of the debug output, you must load the timestamp service using the service timestamps command QUESTION 89 Your trainee is curious about the TCP connection sequence She wants you to show you which device sends a TCP SYN ACK packet during this process Indicate your answer in the picture below 49 http://www fravo.com 642-831 Answer: QUESTION 90 There are three different VTP modes Which of these modes should be used for a switch that will have its own VLAN setup and does not need to share VLAN information with other switches? A client B server C extended D transparent Answer: D Explanation: VTP transparent switches not participate in VTP A VTP transparent switch does not advertise its VLAN configuration and does not synchronize its VLAN configuration based on received advertisements Note: There are three VTP mode of operation: server, client, and transparent Reference: Configuring Virtual LANs http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/rel_4_5/quik_sw/vlans.htm#xtocid59 324 Incorrect Answers A: VTP clients function the same way as VTP servers, but you cannot create, change, or delete VLANs on a VTP client B: VTP servers advertise their VLAN configuration to other switches in the same VTP domain and 50 http://www fravo.com 642-831 synchronize their VLAN configuration with other switches based on advertisements received over trunk links VTP server is the default mode C: There is no VTP mode called extended QUESTION 91 When should you use debugging events rather than packets? A When you suspect that certain packets may be triggering multiple events B When the show CPU command displays CPU utilization greater than 50% C When the show processes CPU command displays CPU utilization greater than 50% D When you experience an extremely show response after entering a debug all command Answer: C QUESTION 92 Exhibit: Contoso# show span tree statistics Spanning tree enabled Designated Root 00-60-47-8f-9a-00 Designated Root Priority Designated Root Cost 10 Designated Root Port 1/1Root Max Age 20 sec Hello Time sec Forward delay 15 sec Bridge ID MAC ADDR 00-60-47-8f-9a-00 Bridge ID Priority 32768 Bridge Max Age sec Hello Time sec Forward Delay sec Port Vlan Port-State Cost Priority Fast-Start 1/1 forwarding 10 32 disabled What can be said according to the output in the exhibit? A This switch is the root bridge B The trunk link on port 1/1 is down C BPDUs are being sent out every 20 seconds D VTP advertisements are sent every two seconds Answer: A Explanation: Incorrect Answers: B: The Port-state is already Forwarding C: BPDUs will consider valid for 20s D: It is every seconds the root-bridge that will send BPDUs, not VTP advertisements QUESTION 93 Two companies run different routing protocols after they are merged Users experience intermittent IP communications problems All desktop protocols work correctly What is the most likely cause of this problem? A There is a virus being inherit B NAT was not property configured C There is a spanning thee loop in the network D The access list is not property implemented to stop feedback routes Answer: B QUESTION 94 You want to study the status of FECN and BECN packets What command should you use? A show interface B show frame-relay pvc C show frame-relay lmi D show frame-relay fecn and show frame-relay becn Answer: B Explanation: The show frame-relay pvc command is used to display statistics about permanent virtual circuits (PVCs) for Frame Relay interfaces The output includes status of FECN and BECN 51 http://www fravo.com 642-831 packets Sample output: RouterContoso# show frame-relay pvc PVC Statistics for interface Serial2/1 (Frame Relay DTE) Active Inactive Deleted Static Local 115 0 Switched 0 0 Unused 0 0 DLCI = 100, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial2/1 input pkts 12 output pkts in bytes 4406 out bytes 1366 dropped pkts in FECN pkts in BECN pkts out FECN pkts out BECN pkts in DE pkts out DE pkts out bcast pkts out bcast bytes 1366 pvc create time 1d04h, last time pvc status changed 00:30:32 Incorrect Answers A: The show interface (or show interfaces) command is used to display statistics for all interfaces configured The output does not include status on FECN and BECN packets however Sample output: sl0: flags=51 slip 0.0.0.0 dest 0.0.0.0 sc0: flags=63 vlan 100 inet 144.251.100.111 netmask 255.255.255.0 broadcast 144.251.100.255 C: The show frame-relay lmi command displays statistics about the Local Management Interface (LMI); It does not display status of FECN and BECN packets however Sample output: RouterContoso# show frame-relay LMI Statistics for interface Serial3 (Frame Relay NNI) LMI TYPE = CISCO Invalid Unnumbered info Invalid Prot Disc Invalid dummy Call Ref Invalid Msg Type 0Invalid Status Message Invalid Lock Shift Invalid Information ID Invalid Report IE Len 0Invalid Report Request Invalid Keep IE Len 0Num Status EnRcvd 11 Num Status msgs Sent 11Num Update Status Rcvd Num St En Timeouts 0Num Status En Sent 10 Num Status msgs Rcvd 10Num Update Status Sent Num Status Timeouts D: There are no such commands QUESTION 95 You download a new router IOS software image from the CISCO Connection Online (CCO) web site You suspect that the image was corrupted in the download What should you to ensure that the image integrity was maintained? A compare the MD5 checksum value to the image on CC0 B compare the SHA-1 checksum value to the image on CCO C download the image from CCO again and compare the two images D enter a show version command on the router and compare the image to that on CCO Answer: A QUESTION 96 In the following network, IPX Client CK1 can see Server Contoso1 on IPX Network AA but NOT Server (Choose three) A show IPX router B show IPX server C show IPX interface D show IPX eigrp topology E show IPX eigrp neighbors Answer: A, C, E 52 http://www fravo.com 642-831 QUESTION 97 Exhibit: Serial1(out): StEnq, myseq 1, your seen 0, DTE up datagram start = 0x668480, datagram size = 13FR encap = 0xFCF1030900 75 01 01 00 03 02 01 00 RT IE 1, length 1, type 0KA IE 3, length 2, your seq , myseq 0Serial1(in): Unexpected StEnq Serial1(out): StEnq, myseq 2, your seen 0, DTE up datagram start = 0x668480, datagram size = 13FR encap = 0xFCF1030900 75 01 01 00 03 02 02 00 RT IE 1, length 1, type 0KA IE 3, length 2, your seq 2, myseq 0Serial1(in): Unexpected StEnq Serial1(in): Status, myseq 37RT IE 1, length 1, type 0KA IE 3, length 2, your seq 37, myseq 37PVC IE 0x7 , length 0x6 , dlci 156, status 0x2 , bw 0PVC IE 0x7 , length 0x6 , dlci 655, status 0x2 , bw 0PVC IE 0x7 , length 0x6 , dlci 755, status 0x2 , bw What produces the output show in the exhibit? A show frame-relay lmi B show frame-relay pvc C debug frame-relay lmi D debug frame-relay pvc Answer: C QUESTION 98 You have an application that needs Jumbo Frame Feature support on your internetworking devices Which commands let you look at the MTU si ze that is being configured? A show ip arp B show ip route C show ip traffic D show ip protocol E show ip interface Answer: E QUESTION 99 What is the most likely cause by a Windows NT networking problems? A wiring problems B hardware failures C browser problems D server response Answer: C 53 http://www fravo.com 642-831 QUESTION 100 Which command shows the intermediate routers between the router and another device? A trace B tracert C show ip route D debug ip route Answer: A QUESTION 101 Which four are displayed when you enter a route print command on a Windows NT system? (Choose four) A Metric B Network mask C Routing protocol D Gateway address E Interface address Answer: A, B, D, E QUESTION 102 Which device sends an NCP reply packet? 54 http://www fravo.com 642-831 QUESTION 103 What are two reasons you should keep the baseline model of the network current when troubleshooting with systematic approach? (Choose two) A to supply information to a TAC engineer B to minimize downtime when a network failure occurs C to identify a normal network behavior and an abnormal behavior D to keep all network equipment inventories up-t o-date for next year's budget Answer: A, C QUESTION 104 You are troubleshooting a FTP problem at your network User FTP sessions not complete successfully First you confirm that a functional network layer path exists between the client and the server What should you verify next? A Routing topology B Retransmissions C Buffer under runs D Switching topology Answer: B Explanation: We could verify if there are a high number of retransmissions This would indicate a problem Incorrect Answers A, D: We have already established network layer path We not need to verify routing or switching topology C: A buffer under run error does not apply to this scenario QUESTION 105 Which statement is true about the Documentation CD-ROM? A it contains information on the most popular only B it contains a search facility to go directly to the needed information C it contains similar information to the CCO web site but is not in HTML format D it contains command references and commands summaries, but not product catalog information 55 http://www fravo.com 642-831 Answer: B QUESTION 106 You are troubleshooting a network You come to the conclusion that the network suffers from a Maximum Transmission Unit (MTU) problem Now you want to use the extended ping utility to troubleshoot this problem further Which two extended ping options should you use? (Select two.) A Data pattern B Type of Service C Sweep rage of sizes D MTU size of interface E Set DF bit in IP header Answer: C, E Explanation: C: The Sweep range of sizes option allows you to vary the size of the packets This can be useful when troubleshooting a MTU problem E: The Set DF bit in IP header option specifies whether or not the Don't Fragment (DF) bit is set on the ping packet This is useful for checking the MTU along the path to a destination Reference: Using the Extended ping and Extended traceroute Commands http://www.cisco.com/warp/public/105/ext_ping_trace.html Incorrect Answers A: Different data patterns are used to troubleshoot framing errors and clocking problems on serial lines B: TOS is not useful here D: There is no such option QUESTION 107 The TAC Engineer Assigned to a trouble ticket asks for output from the "show interface and show protocol" commands Which two situations is the Engineer most likely investigating? (Choose two) A a crash or system B memory allocation problem C partial loss of system function D lost data or performance problems Answer: C, D QUESTION 108 Your service provider is troubleshooting a problem on the ISDN local loop They are checking the connectivity from the ISDN switch to the _ A TA B TE1 C TE2 D NT1 Answer: D Explanation: ISDN local loop is terminated using a Network Termination Type (NT1) The NT1's responsibilities include line performance monitoring, timing, physical signaling protocol conversion, power transfer, and multiplexing of B and D channels Reference: Standard ISDN BRI Roles and Interface Reference Points (CIT, Cisco Press) QUESTION 109 You want to display the Frame Relay encapsulation type Which command should you use? 56 http://www fravo.com 642-831 A show interfaces B show frame-relay lmi C show frame-relay pvc D show frame-relay encapsulation Answer: B Explanation: Sample output: Contoso_R# show frame-relay LMI Statistics for interface Serial1 (Frame Relay DTE) LMI TYPE = CISCO Invalid Unnumbered info Invalid Prot Disc Incorrect Answers A: The show interfaces command only displays the status and statistics information about all of your router's interfaces C: The show frame-relay pvc command lists all of the PVCs that the router is aware of on all of its Frame Relay interfaces (and sub interfaces), along with their status, creation time, last status change time, and statistics regarding the sent/received packets/bytes and the congestion notification flags D: There is no such command QUESTION 110 Exhibit CPU utilization for five seconds: 51%/50%; one minute: 47%; five minutes; 46% You use the show processes CPU command Nina, your Contoso trainee, asks you what the significance of 50% in (51%/50%) is What should you tell her? A The percentage of the CPU used by CLI routines is 50% B The percentage of the CPU used by interrupt routines is 50% C The percentage of the CPU used by process routines is 50% D The percentage of the CPU used by memory routines is 50% Answer: B Explanation: The first number (61%) is the total utilization and the second number (50%) is the utilization due to interrupt routines QUESTION 111 You have difficulty reaching network devices from specific hosts, or subnets How can you specify the source address to assist troubleshooting? A Router# ping B Router> ping C Router> ping 1.1.1.1 2.2.2.2 D Router# ping 1.1.1.1 2.2.2.2 Answer: A Explanation: In privileged exec mode you have the option of using the extended ping From the privileged mode, if you just enter the ping command, you will be prompted for the protocol (default is IP) After selecting IP, you are prompted for the target IP address, repeat count, datagram size, and timeout in seconds; finally, you are asked if you are interested in extended commands QUESTION 112 Which two would, if not present, would prevent VTP information form propagating between switches? (Choose two) A VLAN B A trunk port C VTP priority D A root VTP server Answer: A, B Explanation: VTP does not work if there is no trunk port or no VLA N1 When troubleshooting, 57 http://www fravo.com 642-831 make sure that these essential requirements for VTP have been configured properly Reference: Diagnosing and Correcting Catalyst Problems, Troubleshooting VTP (CIT, Cisco Press) QUESTION 113 Jack your Contoso trainee is troubles hooting cable connections How can she eliminate uncertainty about an incorrect punch down connection? A Replace the network adapter in the device B Replace the patch cable connected to the device C Check the impedance of the cable run with a cable scanner D Connect the device to the switch using a known-good external cable Answer: C Explanation: Do a cable test to check for incorrect punch down or wiring maps using a cable tester Reference: General Troubleshooting Tools, Low-End Cable Test Equipment (CIT, Cisco Press) QUESTION 114 Contoso is troubleshooting one of the Contoso Catalyst 5000 switches In particular she wants to decode and interpret the contents of the BPDUs being sent from the root bridge Which command should she use? A show debug span tree B show span tree statistics C show spanning-tree status D show spanning-tree config Answer: B Explanation: The show span tree statistics command is used to show spanning-tree statistical information The output includes BPDU-related parameters Incorrect Answers A, C, D: There are no such commands QUESTION 115 Your trainee knows that Cisco routers learn about IPX services through broadcasted advertisements Which broadcasts Cisco routers listen to in order to learn about the IPX services? A RIP B SAP C ARP D GNS Answer: B Explanation: Routers build and maintain IPX server tables by accepting SAP (Service Advertisement Protocol) broadcasts that are generated by other neighbor.] QUESTION 116 Several tests are performed when a Catalyst 5000 switch is powered up Which of the following tests are performed during the power-up self-test? (Choose three) A LED test B EARL test C ROM Checksum D Trunk Status Test Answer: A, B, C Explanation: Sample Output, Catalyst 5000 Power-on Self-Test: ATE0 ATS0=1 Power Up Diagnostics Init NVRAM LogLED Test ROM CHKSUM DUAL PORT RAM r/w RAM r/w RAM address test Byte/Word Enable test 58 http://www fravo.com 642-831 EARL test Done BOOTROM Version 2.1, Dated Jun 1996 12:02:33BOOT date: 06/08/00 BOOT time: 12:43:07SIMM RAM address test SIMM Ram r/w 55aaSIMM Ram r/w aa55Uncompressing NMP image This will take a minute Cisco Systems Console QUESTION 117 You and your Contoso trainee Contoso are troubleshooting a Cisco router with and ISDN BRI S/T interface Your line does NOT come up What should you focus on? A NT1 and TA B NT1 and TE1 C NT1 and TE2 D TE1 and TE2 Answer: B Explanation: Since it is stated that ISDN BRI Cisco Equipment, TA and TE2 does not apply Therefore troubleshooting should focus between ISDN user equipment TE1 with NT1 (S reference point) Reference: Standard ISDN BRI Roles and Interface Reference Points (CIT, Cisco Press) QUESTION 118 What are two main types of sort errors that an internal controller can count on the output of the Cisco IOS show controllers token command? A Signal loss or wire fault B Isolating and non-isolating C Single ring or multiple-ring errors D Internal error or external error E Between the station and its NAUN or its downstream neighbor Answer: B Explanation: The show controller’s token command is used to display controller diagnostic output QUESTION 119 Which two sequences must occur prior to one host establishing a connection with another host on an Ethernet network? (Choose two) A TCP SYN B TCP ACK C TCP ARP D ARP reply E ARP request Answer: D, E Explanation: ARP is used to locate the Ethernet address associated with a desired IP address When a machine has a packet bound for another IP on a locally connected Ethernet network, it will send a broadcast Ethernet frame containing an ARP request onto the Ethernet All machines with the same Ethernet broadcast address will receive this packet [1] If a machine receives the ARP request and it hosts the IP requested, it will respond with the hardware address on which it will receive packets for that IP address An ARP reply will be used QUESTION 120 Your trainee asks you how spanning tree works on a Catalyst 5000 switch What should you tell him? A There can be one spanning tree for each port B There can be one spanning tree for every VLAN C Trunk ports support multiple spanning trees per VLAN D Trunk ports support a maximum of 512 spanning trees 59 http://www fravo.com 642-831 Answer: B Explanation: There will be one Spanning Tree per VLAN on a switch The Spanning Tree corresponding to a particular VLAN is usually enabled on every port that is assigned to that VLAN Incorrect Answers A: A port that is configured as a trunk port has as many Spanning Tree instances enabled on it as there are VLANs enabled on that particular trunk C: Each VLAN has a single spanning tree D: Up to 1000 VLANs are allowed on a Catalyst 5000 switch, but only up to 250 of those can be active on the local switch QUESTION 121 You want to prevent a VLAN from traversing an ISL trunk on your Catalyst 5000 switch Which command should you use? A clear isl B clear vlan C clear trunk D clear vlan trunk Answer: C Explanation: On the Catalyst 5000 switch, you may use the clear trunk command to take a VLAN out of a trunk port Incorrect Answers A, D: There are no such commands B: The clear vlan vlan-number command deletes a VLAN from a management domain QUESTION 122 Nina and Contoso, your two Contoso trainees, are troubleshooting switch problems Which two VLAN design considerations would aid the troubleshooting? (Choose two) A Do not set the max_age metric too low B Do not connect a router to a trunk port C Use gigabit ports for router connections D Set the network diameter to less than or equal to switches Answer: A, D Explanation: One important topic of interest in switched internet works is the convergence time of the spanning tree Two factors, the diameter of a network measured in terms of the number of hops (bridges/switches), and the values of the spanning tree timers, such as the max_age parameter, affect the time it takes for the bridged/switched internet work to converge The general rule for the bridged networks is that the number of hops (bridges/switches) should not exceed seven QUESTION 123 You are troubleshooting your Catalyst 5000 Now you want to display the current operating configuration of the switch Which command should you use? A show config B show interface C show running-config D show startup-config Answer: A QUESTION 124 Contoso is troubleshooting your Category UTP network cabling Nina, her Contoso trainee companion, is sure that there is a physical-layer problem Which two tools would aid Contoso and Nina? (Choose two) 60 http://www fravo.com 642-831 A TDR B OTDR C RMON D Network monitor E Digital multimeter Answer: A, E Explanation: A: At the top end of cable testing equipment are those devices that provide time domain reflectometer (TDR), wire-map, and traffic monitoring functionality The more expensive equipment of this kind surpasses the physical layer and reports on Media Access Control (MAC) layer information such as frame, error, and utilization statistics E: A digital multimeter can be used to troubleshoot a physical-layer problem in UTP cabling Incorrect Answers B: A TDR made for fiber-optic cable testing is called an optical TDR (OTDR) OTDR cannot be used on Category UTP network cabling C: RMON is a network monitor It is used to monitor network traffic, not to test physical-layer problems D: Network monitors are used to monitor network traffic, not to test physical-layer problems QUESTION 125 Contoso asks you which device replies to a GNS request packet in a WAN, given that there are no local Novell IPX servers What should you tell your Contoso trainee? A Cisco router at a local site B Cisco router at a remote site C Novell server at a remote site D This is not a supported Novell environment Answer: A Explanation: The local Cisco router will reply to the GNS request, after an initial GNS delay period Note 1: Answers to the unanswered questions will be provided shortly Note 2: Section A contains 68 questions Section B contains 125 questions The total number of questions is 193 61 http://www fravo.com ... Assistance Center (TAC) web site http://www fravo.com 642-831 C Cisco Center for Assisted Troubleshooting (CAT) web site D Cisco Internetworking Troubleshooting Center (ITC) web site Answer: QUESTION... Information Center (TIC) website B Cisco Technical Assistance Center (TAC) website C Cisco Center for Assisted Troubleshooting (CAT) website D Cisco Internetworking Troubleshooting Center (ITC) website... to Cisco technical support for analysis Answer: QUESTION 10 Which troubleshooting tool is included in Cisco Connection Online (CCO)? A Cisco Technical Information Center (TIC) web site B Cisco