640 875

Cisco 640-875
Building Cisco Service Provider Next-Generation

Networks, Part 1 (SPNGN1)
Version: 9.0
Cisco 640-875 Exam

QUESTION NO: 1
What is the term that refers to a device that has no Customer Equipment directly connected to it in
a Service Provider network?
A. Provider Edge Router
B. Customer Edge Router
C. Non-customer Edge Router
D. Provider Router
E. Provider Edge Provider Router
Answer: D
Explanation:
QUESTION NO: 2 DRAG DROP

Drag the protocols from the left and drop them on the correct descriptions on the right.
Answer:
"Pass Any Exam. Any Time." - www.actualtests.com
Cisco 640-875 Exam

Explanation:

Drag the protocols from the left and drop them on the Internet Protocol Suite layers where the
protocol belongs on the right. Not all the layers on the right are used.
Answer:
Cisco 640-875 Exam
Explanation:

Drag the descriptions from the left to the correct layers of the hierarchical network model design
on the right.
Cisco 640-875 Exam
Answer:
Explanation:
Cisco 640-875 Exam
QUESTION NO: 5
Refer to the exhibit.
Host 3 on Network A is sending data to Host 8 on Network B. Which address is the default
gateway of Host 3?
A. The address of the switch interface that is connected to router interface Fa0/0
B. The address of the switch interface that is connected to router interface Fa0/1
Cisco 640-875 Exam

C. The address of the host that is connected to Network A
D. The address of the host that is connected to Network B
E. The address of the router interface Fa0/0
F. The address of the router interface Fa0/1
Answer: E
Explanation:
QUESTION NO: 6
The PE and CE interfaces are in the UP/UP state. The junior Network Engineer has validated
Layer 3 functionality by pinging the adjacent interface, however the customer is unable to access
the provider network. What should be your next troubleshooting step?
A. Validate that the encapsulation method is utilizing Point-to-Point Protocol
B. Validate that the destination customer network is in the correct VRF
C. Validate that the circuit clocking is inaccurate and needs to be synchronized on both sides
D. Check the physical connection between both devices to ensure stability
E. Identify incorrect RADIUS configuration is present on the PE device
F. Check that an access-list is mis-configured on the loopback 0 interface and needs to be
corrected
Answer: B
Explanation:
QUESTION NO: 7
What are two differences between WAN and LAN? (Choose two.)
A. The customer has explicit control of their own WAN.
B. The customer can modify the service provider route distinguishers.
C. The customer has explicit control of their LAN.
D. The customer is aware of the infrastructure within the WAN.
E. WANs will differ from LANs with attributes such as latency and distance.
Answer: C,E
Explanation:
Cisco 640-875 Exam

QUESTION NO: 8
Which of the following correctly pairs the dotted decimal subnet mask with the correct number of
binary bits that represent the subnet mask?
A. 255.255.255.192 and /25
B. 255.255.255.248 and /28
C. 255.255.255.224 and /26
D. 255.255.255.248 and /27
E. 255.255.255.240 and /28
F. 255.255.255.240 and /16
Answer: E
Explanation:
QUESTION NO: 9
What are two benefits of a star network topology? (Choose two.)
A. Disruption of the entire network is not required when adding new machines.
B. Any problem which leaves the network inoperable can be traced to the central hub.
C. This network type requires less cable as compared to linear bus topology.
D. The performance of one of the numerous nodes cannot reflect on the performance of other
nodes.
E. The performance of the entire network is directly dependent on the performance of the hub.
Answer: A,B
Explanation:

Drag the network device functions or features from the left and drop them on the correct network
devices on the right.
Cisco 640-875 Exam
Answer:
Explanation:
Cisco 640-875 Exam
QUESTION NO: 11
You are having problems browsing to http://www.cisco.com from your laptop that is running
Windows. Your laptop is connected directly to a default gateway, which is a Cisco ISR G2 router.
Which four options are the basic troubleshooting steps that you should use to troubleshoot this
issue? (Choose four.)
A. Issue the ipconfig command from the Windows command line on your laptop to determine your
laptop IP address and the default gateway IP address.
B. Issue the ipconfig /all command from the Windows command line on your laptop to determine
the DNS server IP address.
C. Issue the ping {default gateway IP address} command from the Windows command line on your
laptop to verify connectivity to the default gateway.
D. Issue the ping {DNS server IP address} command from the Windows command line on your
laptop to verify connectivity to the DNS server.
E. Issue the ping tcp www.cisco.com 80 command from the Windows command line on your
laptop to verify TCP port 80 connectivity to the www.cisco.com server.
10
Cisco 640-875 Exam

F. From the ISR G2 CLI, issue the ping tcp www.cisco.com 80 command to verify TCP port 80
connectivity to the www.cisco.com server.
G. From the ISR G2 CLI, issue the ISR-G2#tracert www.cisco.com command to verify connectivity
to the www.cisco.com server.
H. From the ISR G2 CLI, issue the ISR-G2#nslookup www.cisco.com command to determine the
IP address of the www.cisco.com server.
Answer: A,B,C,D
Explanation:

Drag the network characteristics from the left and drop them on the correct network type on the
right.
Answer:
Explanation:
11
Cisco 640-875 Exam

Drag the routers from the left and drop them on the layer that they belong to on the right. Not all
options on the left are used.
Answer:
12
Cisco 640-875 Exam
Explanation:

Drag the Cisco IOS XR CLI command from the left and drop it on the most appropriate OSI
layer(s) on the right that can be used to verify the operations at that OSI layer.
Answer:
Explanation:
13
Cisco 640-875 Exam
Topic 1, IPv4 and IPv6 Addressing

QUESTION NO: 15
Which statement about IPv6 global unicast addresses is true?
A. The first 3 bits is 001.
B. The first 4 bits is 0011.
C. The first 4 bits is 1111.
D. The first 16 bits is FE80 in hex.
E. The first 16 bits is FF00 in hex.
F. The first 16 bits is 2002 in hex.
G. The first 16 bits is 3FFE in hex.
Answer: A
Explanation:
QUESTION NO: 16
Given the IP address 10.106.170.145 255.248.0.0, which three options are the subnet that this IP
address belongs to, the host IP address range on this subnet, and the subnet broadcast IP
address?
A. subnet = 10.104.0.0/13
B. subnet = 10.106.0.0/13
C. subnet = 10.112.0.0/13
14
Cisco 640-875 Exam

D. host IP address range = 10.104.0.1 to 10.111.255.254
E. host IP address range = 10.106.0.1 to 10.106.255.254
F. host IP address range = 10.106.0.1 to 10.119.255.254
G. subnet broadcast IP address = 10.106.255.255
H. subnet broadcast IP address = 10.111.255.255
I. subnet broadcast IP address = 10.119.255.255
Answer: A,D,H
Explanation:
QUESTION NO: 17
Given the IP address of 209.168.200.155/27, which two options are the subnet that this IP address
belongs to and the subnet broadcast IP address? (Choose two.)
A. 209.168.200.64 255.255.255.224
B. 209.168.200.96 255.255.255.224
C. 209.168.200.128 255.255.255.224
D. 209.168.200.95
E. 209.168.200.127
F. 209.168.200.159
Answer: C,F
Explanation:

Drag the concepts from the left and drop them on the correct descriptions on the right.
Answer:
15
Cisco 640-875 Exam
Explanation:

Drag the IPv4 leading address bits on the left and drop them on the correct type of IPv4 addresses
on the right. Not all options on the left are used.
Answer:
16
Cisco 640-875 Exam
Explanation:

Drag the methods from the left and drop them on the best descriptions on the right.
Answer:
17
Cisco 640-875 Exam
Explanation:
QUESTION NO: 21
Which is a valid IPv6 Link Local address?
A. FF00::1
B. 224.0.0.5::1
C. FE80::1
D. FE70::1
E. 169.254.0.0/16
Answer: C
Explanation:
QUESTION NO: 22
What is the size difference in bits between an IPv4 address and an IPv6 address?
18
Cisco 640-875 Exam

A. 128
B. 100
C. 98
D. 96
E. 32
Answer: D
Explanation:

Drag the IPv6 address type from the left and drop it on the matching description on the right. Not
all IPv6 address types are used.
Answer:
Explanation:
19
Cisco 640-875 Exam
QUESTION NO: 24
Given the subnet of 209.165.201.0/27, which subnet range will make the most efficient use of the
address block for connecting to customer edge devices?
A. 209.165.201.1/32
B. 209.165.201.1/31
C. 209.165.201.1/30
D. 209.165.201.1/29
E. 209.165.201.1/24
Answer: B
Explanation:
QUESTION NO: 25
20
Cisco 640-875 Exam
Given the Class C IP network of 192.168.1.0, using VLSM, which five subnets meet the
requirements in the exhibit? (Choose five.)
A. 192.168.1.0/27
B. 192.168.1.32/27
C. 192.168.1.48/27
D. 192.168.1.48/28
E. 192.168.1.64/28
F. 192.168.1.80/28
G. 192.168.1.80/29
H. 192.168.1.88/30
I. 192.168.1.96/30
Answer: A,B,E,F,I
Explanation:
QUESTION NO: 26
Given a ring topology, which loop prevention mechanism provides the fastest reconvergence time
after a link failure?
A. Rapid Per-VLAN Spanning Tree Protocol
B. Resilient Ethernet Protocol
C. Multiple Spanning Tree Protocol
D. Spanning Tree Protocol
Answer: B
Explanation:
21
Cisco 640-875 Exam

QUESTION NO: 27
Which three of the following components must be elected before the Spanning Tree Protocol can
converge in a switched LAN? (Choose three.)
A. Designated ports
B. Alternate ports
C. Converged ports
D. Root bridge
E. Root ports
F. Backup ports
Answer: A,D,E
Explanation:
Topic 2, Switched Network Technologies

QUESTION NO: 28
Which three statements about the ARP function are true? (Choose three.)
A. ARP is used to determine an IP address.
B. An ARP request is broadcast at Layer 3.
C. An ARP response is broadcast at Layer 2.
D. ARP tables are maintained on Layer 3 devices.
E. The destination MAC address of an ARP request is that of the ARP responder.
F. ARP requests are broadcast at Layer 2.
G. ARP resolves MAC addresses to NET addresses.
H. ARP uses 0x0806 as the Type field in an Ethernet frame.
Answer: D,F,H
Explanation:
QUESTION NO: 29
Which statement about STP operations is true?
A. One root bridge exists per collision domain.
B. One root port is established per root bridge.
C. One designated port is defined per segment.
D. Non-designated ports are set in the forwarding state.
22
Cisco 640-875 Exam

E. One root port exists per broadcast domain.
Answer: C
Explanation:

Drag the ports on the left and drop them on the correct port type on the right. Not all of the left
options are needed.
23
Cisco 640-875 Exam

Answer:
Explanation:
QUESTION NO: 31
What two commands enable port security and allow the switch to dynamically learn the connected
MAC address? (Choose two.)
A. switch5(config-if)#switchport port-security
B. switch5(config)#switchport port-security
C. switch5(config-if)#switchport port-security mac-address sticky
D. switch5(config)#switchport port-security mac-address sticky
E. switch5(config-if)#switchport port-security mac-address dynamic
F. switch5(config-if)#switchport port-security mac-address auto
Answer: A,C
Explanation:
24
Cisco 640-875 Exam

Drag the features from the left and drop them on the matching descriptions on the right. Not all
features on the left are used.
Answer:
Explanation:
QUESTION NO: 33
25
Cisco 640-875 Exam

Which Cisco IOS CLI command is used to verify the speed and duplex settings on the Fa0/1 port
on a Cisco switch?
A. show ip interfaces fa0/1
B. show interfaces fa0/1
C. show interfaces fa0/1 switchport
D. show ip interfaces brief
E. show interfaces switchport
Answer: B
Explanation:
QUESTION NO: 34
This show output is from the S7 Cisco Metro Switch and the PE7 Cisco ASR 9000 Series Router.
Which configuration change(s) is/are needed to bring the S7 FastEthernet 0/2 interface into the
up/up state?
S7#show cdp neighbors<OUTPUT OMITTED> Device ID Local Intrfce Holdtme Capability
Platform Port IDPE7 Fas 0/2 163 R ASR9K Ser Gig 0/0/0/0S78 Fas 0/23 146 S I ME3400E- Fas 0/21S8 Fas 0/21 178 S I ME-3400E- Fas 0/21 *Mar 20 21:28:02.177:
%ETHCNTR-3-HALF_DUX_COLLISION_EXCEED_THRESHOLD: Collisions at FastEthernet0/2
exceed threshold. Considered as loop-back.*Mar 20 21:28:02.177: %PM-4-ERR_DISABLE:
loopback error detected on Fa0/2, putting Fa0/2 in err-disable state*Mar 20 21:28:03.184:
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to down
S7#show interface fa0/2FastEthernet0/2 is down, line protocol is down (err-disabled) Hardware is
Fast Ethernet, address is e8ba.70b5.6c04 (bia e8ba.70b5.6c04) MTU 1500 bytes, BW 10000
Kbit, DLY 1000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA,
loopback not set Keepalive set (10 sec) Half-duplex, 10Mb/s, media type is 10/100BaseTX input
flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:40, output 00:00:00, output hang never Last clearing of "show interface" counters
never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy:
fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output
rate 0 bits/sec, 0 packets/sec 484423 packets input, 39349929 bytes, 0 no buffer Received
484423 broadcasts (167203 multicasts) 0 runts, 0 giants, 0 throttles 1 input errors, 0 CRC, 0
frame, 0 overrun, 0 ignored 0 watchdog, 167203 multicast, 0 pause input 0 input packets with
dribble condition detected 972398 packets output, 128931949 bytes, 0 underruns 0 output errors,
46 collisions, 4 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0
PAUSE output 0 output buffer failures, 0 output buffers swapped out
RP/0/RSP0/CPU0:PE7#show interfaces gi0/0/0/0GigabitEthernet0/0/0/0 is down, line protocol is
down Interface state transitions: 4 Hardware is GigabitEthernet, address is 4055.392f.40a8 (bia
4055.392f.40a8) Internet address is 192.168.107.70/24 MTU 1514 bytes, BW 100000 Kbit (Max:
100000 Kbit) reliability 255/255, txload 0/255, rxload 0/255 Encapsulation ARPA, Full-duplex,
26
Cisco 640-875 Exam

100Mb/s, THD, link type is force-up output flow control is off, input flow control is off loopback not
set, ARP type ARPA, ARP timeout 04:00:00 Last input 00:00:00, output 00:00:35 Last clearing
of "show interface" counters never 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output
rate 0 bits/sec, 0 packets/sec 972551 packets input, 128953765 bytes, 729 total input drops
172486 drops for unrecognized upper-level protocol Received 0 broadcast packets, 800781
multicast packets 0 runts, 0 giants, 0 throttles, 0 parity 0 input errors, 0 CRC, 0 frame, 0 overrun,
0 ignored, 0 abort 484545 packets output, 39360900 bytes, 0 total output drops Output 317283
broadcast packets, 167262 multicast packets 0 output errors, 0 underruns, 0 applique, 0 resets 0
output buffer failures, 0 output buffers swapped out 4 carrier transitions
A. Enable loopback line on the S7 Fa0/2 interface then shut and no shut the Fa0/2 interface.
B. Enable duplex half on the PE7 Gi0/0/0/0 interface then shut and no shut the Fa0/2 interface on
S7.
C. Change S7 Fa0/2 interface to duplex full and speed 100 then shut and no shut the Fa0/2
interface.
D. Just need to no shut the Fa0/2 interface on S7.
E. Just need to shut and no shut the Fa0/2 interface on S7.
Answer: C
Explanation:
QUESTION NO: 35
If a bridge port is in the non-designated state, which two statements about spanning-tree
operations on this port are true? (Choose two.)
A. This port is in the Forwarding state.
B. This port sends BPDUs on the attached link.
C. This port has the lowest cost to the root bridge.
D. This port is considered the root port.
E. This port receives BPDUs.
F. This port is in the Blocked state.
Answer: E,F
Explanation:
QUESTION NO: 36
Which three physical lines can provide local or remote access to a Cisco router or switch?
(Choose three.)
27
Cisco 640-875 Exam

A. Console port
B. Modem port
C. Virtual terminal lines
D. Switch fabric interface
E. Aux port
F. ManagementEthernet0/RSP0/CPU0/0
Answer: A,E,F
Explanation:
Topic 3, Routed Network Technologies

QUESTION NO: 37
Company 1 has merged with Company 2. Company 1 is using RIPv2 as its IGP and Company 2 is
using EIGRP as its IGP. EIGRP also is running between R1 and R2 over the WAN link. Which
action must be taken to allow these two configurations?
The Company 1 RIP routes appear as external EIGRP routes within Company 2.
The Company 2 EIGRP routes appear as RIPv2 routes within Company 1.
A. Enable RIPv2 on the R2 router.
B. Enable RIPv2 on the R2 router and on all internal routers of Company 2. Enable EIGRP on all
internal routers of Company 1.
C. Configure mutual route redistribution between RIPv2 and EIGRP on the R1 and R2 routers.
D. Configure mutual route redistribution between RIPv2 and EIGRP on the R1 router.
E. Configure mutual route redistribution between RIPv2 and EIGRP on the R2 router.
Answer: D
Explanation:
28
Cisco 640-875 Exam
QUESTION NO: 38
Which two statements about classful or classless routing protocol operations are true? (Choose
two.)
A. Classful routing protocols do not send subnet mask information with theirrouting updates.
B. Variable-length subnet masks are supported when using classful routing protocols.
C. Examples of classless routing protocols include RIPv1, EIGRP, OSPF, andIS-IS.
D. Classful routing protocols do not support discontiguous subnets.
Answer: A,D
Explanation:

Drag the routing protocols from the left and drop them on the correct categories on the right.
Answer:
29
Cisco 640-875 Exam

Explanation:
QUESTION NO: 40
When EIGRP is enabled on Cisco IOS XR, which EIGRP feature is on by default?
A. no auto-summary
B. stub routing
C. unequal cost paths load-balancing
D. no ip eigrp split-horizon
E. eigrp authentication
Answer: A
Explanation:
QUESTION NO: 41
30
Cisco 640-875 Exam
R1 and R2 are running RIPv1 for the 10.0.0.0 and 192.168.1.0 networks. No default or static
routes have been configured on the routers. Which two statements about this topology are true?
(Choose two.)
A. R1 summarizes the 10.1.1.0/24 subnet to 10.0.0.0/8 when it sends its RIPv1 routing updates to
R2. R2 summarizes the 10.2.2.0/24 subnet to 10.0.0.0/8 when it sends its RIPv1 routing updates
to R1.
B. To support this topology, R1 and R2 must be configured so that RIPv1 auto-summary is
disabled.
C. R1 sends information about the 10.1.1.0/24 subnet when it sends its RIPv1 routing updates to
R2. R2 sends information about the 10.2.2.0/24 subnet when it sends its RIPv1 routing updates to
R1. Example of RIPv1 update from R1 to R2:RIP: build update entriesnetwork 10.1.1.0/24 metric 1
D. Hosts on the 10.1.1.0/24 subnet are unable to communicate with hosts on the 10.2.2.0/24
subnet.
E. R1 accepts the 10.2.2.0/24 RIPv1 routing updates from R2 and installs the 10.2.2.0/24 route in
its routing table. R2 accepts the 10.1.1.0/24 RIPv1 routing updates from R1 and installs the
10.1.1.0/24 route in its routing table.
Answer: A,D
Explanation:
QUESTION NO: 42
According to RFC 2080, which routing protocol is compatible with IPv6?
A. RIPv2
B. OSPF
C. RIP-NG
D. EIGRPv6
E. OSPFv2
F. EIGRP-NG
Answer: C
Explanation:
31
Cisco 640-875 Exam

QUESTION NO: 43 CORRECT TEXT
Answer: Click on PE5:

Config t
Interface lo0
ipv4 address 10.5.1.1/32
ipv6 address 2001:db8:10:5:1::1/128
commit
interface gi0/0/0/0
no shut
ipv4 address 192.168.105.50/24
32
Cisco 640-875 Exam

ipv6 address 2001:db8:192:168:105::50/64
router eigrp 1
address-family ipv4
interface loopback0
interface gi0/0/0/0
address-family ipv6
interface loopback0
interface gi0/0/0/0
commit
Verify by pinging the ipv4 and ipv6 loopback IP addresses of CE5.
QUESTION NO: 44
A customer uses OSPF as their Customer Edge routing protocol and remote sites are reporting
10.0.0.0/8 in the routing tables. What is most likely the mis-configuration in the redistribution?
A. Improper route summarization on CE router
B. Incorrect network statement
C. Incorrect K value configured
D. Configuration missing subnets key word
E. Stub network is sending summarized routes
Answer: D
Explanation:
QUESTION NO: 45
The network administrator is using a Windows PC application that is called putty.exe for remote
communication to a switch for network troubleshooting. Which two protocols could be used during
this communication? (Choose two).
A. SNMP
B. HTTP
C. Telnet
D. RMON
E. SSH
Answer: C,E
Explanation:
33
Cisco 640-875 Exam
Topic 4, IP Services
QUESTION NO: 46
With IPv6, for which purpose are router solicitation and router advertisement used?
A. Routing protocol updates
B. Routing protocol neighbor peerings
C. Router and prefix discovery
D. Layer 3 to Layer 2 address resolution (similar to IPv4 ARP)
Answer: C
Explanation:
QUESTION NO: 47
Which two statements about these partial Cisco IOS/IOS-XE configurations are true? (Choose
two.)
A. 10.1.1.2 is the inside local address.
B. 192.168.1.2 is the outside local address.
C. 192.168.1.2 is the outside global address.
D. This is an example of static one-to-one Network Address Translation.
E. This is an example of static Port Address Translation.
34
Cisco 640-875 Exam

Answer: A,D
Explanation:
QUESTION NO: 48
Which IPv6 feature replaced and enhanced the IPv4 ARP functions?
A. ARPv6
B. DHCPv6
C. Neighbor discovery protocol in ICMPv6
D. Router solicitation and router advertisement
E. Auto configuration
Answer: C
Explanation:
QUESTION NO: 49
Which configuration is necessary to support this output?

A. interface Ethernet0ip address 192.168.3.1 255.255.255.0ip nat outside!interface Ethernet1ip
address 192.168.4.1 255.255.255.0ip nat outside!interface Serial0ip address 172.17.38.1
255.255.255.0ip nat inside!ip nat inside source list 1 interface Serial0 overload!access-list 1 permit
192.168.3.0 0.0.0.255access-list 1 permit 192.168.4.0 0.0.0.255
B. interface Ethernet0ip address 192.168.3.1 255.255.255.0ip nat inside!interface Ethernet1ip
address 192.168.4.1 255.255.255.0ip nat inside!interface Serial0ip address 172.17.38.1
255.255.255.0ip nat outside!ip nat inside source list 1 interface Serial0 overload!access-list 1
permit 172.17.38.0 0.0.0.255
C. interface Ethernet0ip address 192.168.3.1 255.255.255.0ip nat inside!interface Ethernet1ip
255.255.255.0ip nat outside!ip nat inside source list 1 static 172.17.38.1!access-list 1 permit
192.168.3.0 0.0.0.255access-list 1 permit 192.168.4.0 0.0.0.255
35
Cisco 640-875 Exam

D. interface Ethernet0ip address 192.168.3.1 255.255.255.0ip nat inside!interface Ethernet1ip
255.255.255.0ip nat outside!ip nat inside source list 1 interface Serial0 overload!access-list 1
permit 192.168.3.0 0.0.0.255access-list 1 permit 192.168.4.0 0.0.0.255
Answer: D
Explanation:
QUESTION NO: 50
A centralized DHCP server has been setup for customer use. What command is required on the
customer Switched Virtual Interface (SVI) to allow clients to receive addresses from this server?
A. switch(config-if)#ip helper-address
B. switch(config)#ip helper-address
C. switch(config-if)#ip dhcp-address
D. switch(config-if)#ip dhcp-gateway
E. switch(config-if)#helper-address
Answer: A
Explanation:
QUESTION NO: 51
Which two statements about IPv4 DHCP operations are true? (Choose two.)
A. If the DHCP clients and servers are on the same subnet, DHCP uses UDP broadcasts to
communicate between the clients and servers.
B. The DHCP server that receives a DHCPDISCOVER message may respond with a
DHCPOFFER message on UDP port 67.
C. A client can receive DHCPOFFER from multiple servers and it can accept all the offers by
broadcasting the DHCPREQUEST message to all the servers.
D. A DHCP relay is required if the DHCP clients and the servers are on the same subnet.
E. If the client and server are on different subnets, DHCPDISCOVER and DHCPREQUEST
messages are sent via UDP broadcasts, but DHCPOFFER and DHCPACK messages are unicast.
F. The client broadcasts a DHCPDISCOVER message on UDP port 68 with its own MAC address
to discover available DHCP servers.
Answer: A,E
Explanation:
36
Cisco 640-875 Exam
QUESTION NO: 52
What are three features present on both ICMPv4 and ICMPv6? (Choose three.)
A. Connectivity tests
B. Address assignment
C. Information error messaging
D. Address resolution
E. Mobile IPv4 support
F. Multicast group management
G. Mobile IPv6 support
H. Fragmentation needed notification
Answer: A,C,H
Explanation:
QUESTION NO: 53
A network administrator issues the who command on a Cisco router, which takes longer than
usual to display the results. Which two commands can be used to speed up the process? (Choose
two.)
A. nslookup
B. no ip-domain lookup
C. ip name-server
D. ipconfig /all
E. ifconfig
Answer: B,C
Explanation:

Drag the DNS record types from the left and drop them on the correct descriptions on the right.
Not all record types on the left are used.
37
Cisco 640-875 Exam
Answer:
Explanation:
Topic 5, Cisco Operating Systems and Platforms

Drag the Cisco IOS XR command mode from the left and drop it on the correct prompt on the
right.
38
Cisco 640-875 Exam
Answer:
Explanation:
QUESTION NO: 56
Which Cisco IOS XR command displays information about statically configured routes and their
39
Cisco 640-875 Exam

corresponding interface or next-hop?
A. show ipv4 interfaces brief
B. show route connected
C. show interfaces Loopback
D. show route static
E. show route ospf
Answer: D
Explanation:
QUESTION NO: 57
Which Cisco IOS XR command presents a list of all interfaces, their Layer 3 address (if
configured), and the status of the interface and protocol?
A. RP/0/RSP0/CPU0:PE1# show interface GigabitEthernet 0/0/0/1
B. RP/0/RSP0/CPU0:PE1# show controllers
C. RP/0/RSP0/CPU0:PE1(admin)# show hw-module fpd location all
D. RP/0/RSP0/CPU0:PE1(config)# show bundle
E. RP/0/RSP0/CPU0:PE1(admin)# show platform
F. RP/0/RSP0/CPU0:PE1# show ipv4 interfaces brief
Answer: F
Explanation:
QUESTION NO: 58
In Cisco IOS XR, which three operations is Admin mode used for? (Choose three.)
A. Secure Domain Router management
B. Configuration-register settings
C. Hostname configuration
D. IOS XR software package upgrades
E. Interface duplex settings
F. Domain-name configuration
Answer: A,B,D
Explanation:
40
Cisco 640-875 Exam
QUESTION NO: 59
Which Cisco IOS XR CLI command can you use to determine if the firmware on any of the line
cards on the Cisco ASR 9000 Series Router needs to be upgraded?
A. RP/0/RSP0/CPU0:PE1#show platform
B. RP/0/RSP0/CPU0:PE1(admin)#show platform
C. RP/0/RSP0/CPU0:PE1#show hw-module fpd location all
D. RP/0/RSP0/CPU0:PE1#show version
E. RP/0/RSP0/CPU0:PE1(admin)#show version
F. RP/0/RSP0/CPU0:PE1#show install active
Answer: C
Explanation:
QUESTION NO: 60
On Cisco IOS XR, for which purpose is the turboboot procedure used?
A. To boot the router into ROM Monitor mode
B. To install the IOS XR software from scratch using the ROM Monitor mode
C. To install and boot up a PIE
D. To install and boot up a SMU
E. To perform an ISSU
F. To speed up the time it takes to boot up the IOS XR router
Answer: B
Explanation:
QUESTION NO: 61
Which Cisco IOS XR CLI command displays the running state of each line card (including the fan
tray) on the Cisco ASR 9000 Series Router?
A. RP/0/RSP0/CPU0:PE1#show platform
B. RP/0/RSP0/CPU0:PE1(admin)#show platform
C. RP/0/RSP0/CPU0:PE1#show hw-module fpd location all
D. RP/0/RSP0/CPU0:PE1(admin)#show hw-module fpd location all
41
Cisco 640-875 Exam

E. RP/0/RSP0/CPU0:PE1#show version
F. RP/0/RSP0/CPU0:PE1(admin)#show version
Answer: B
Explanation:
QUESTION NO: 62
Which three statements about Cisco IOS XR CLI operations are true? (Choose three.)
A. Cisco IOS XR uses a three-stage configuration method.
B. Committed changes are persistent across reboots in Cisco IOS XR.
C. The commit replace global configuration command replaces the contents of the running
configuration with the target configuration.
D. The save global configuration command saves the contents of target configuration to the
running configuration.
E. There is no concept of a startup-config in Cisco IOS XR.
F. The clear global configuration command erases the entire current running configuration.
G. The show running-config global configuration command displays the configuration that occurs if
the contents of the uncommitted changed (target configuration) are committed to the running
configuration.
Answer: B,C,E
Explanation:
QUESTION NO: 63
Which two statements about Cisco IOS XE operations are true? (Choose two.)
A. Cisco IOS XE uses a two-stage configuration method.
B. Using the commit global configuration command, all the committed changes will be persistent
across reboots.
C. The copy run start command makes the configuration changes persistent across reboots.
D. The erase start command followed by the reboot command brings up the router without any
configurations.
E. There is no concept of a startup-config in Cisco IOS XE.
Answer: C,D
Explanation:
42
Cisco 640-875 Exam

Drag each Cisco IOS XR command from the left and drop it on the correct output description on
the right.
Answer:
Explanation:
43
Cisco 640-875 Exam
QUESTION NO: 65
Which Cisco IOS XR command is involved in enabling remote access?
A. RP/0/RSP0/CPU0:PE1(config)# router static
B. RP/0/RSP0/CPU0:PE1(config)# line console 0
C. RP/0/RSP0/CPU0:PE1(config)# vrf default
D. RP/0/RSP0/CPU0:PE1(config)# telnet ipv4 server max-servers 20
E. RP/0/RSP0/CPU0:PE1(config)# username CISCO password LAB
Answer: D
Explanation:
QUESTION NO: 66
A network engineer has configured an interface with various commands including the no shutdown
command on an IOS-XR device. Both sides of the interface have been validated and the cable has
44
Cisco 640-875 Exam

been tested. Which command does the network engineer need to input?
A. switch#copy running-configuration startup-configuration
B. switch#commit config
C. (config)#commit
D. switch(config)#commit config
E. switch#write memory
Answer: C
Explanation:
QUESTION NO: 67
You want to enable these three actions:

- Enable the fa0/1 router's interface to obtain its interface IP address dynamically from a DHCP
server.
- Enable the router to configure the next hop ip address of the default route automatically based
on the DHCP response.
- Enable the router to act as the DHCP server for other clients connected to the router fa0/2
interface.
Which three Cisco IOS configurations must you use? (Choose three.)
A. ip route 0.0.0.0 0.0.0.0 fa0/1
B. ip route 0.0.0.0 0.0.0.0 dhcp
45
Cisco 640-875 Exam

C. ip dhcp excluded-address 192.168.101.1!ip dhcp pool test1network 192.168.101.0
255.255.255.0default-router 192.168.101.1dns-server 200.165.200.101
D. ip dhcp pool test2ip local pool test2 192.168.101.2 192.168.101.254default-router
192.168.101.1dns-server 200.1665.200.101
E. int fa0/1ip address auto
F. int fa0/1ip address dhcp
G. int fa0/1ip helper-address dhcp
Answer: B,C,F
Explanation:
QUESTION NO: 68
You need to enable the "local-router" serial 0/0 connection to the "remote-router" to be
authenticated using the "C!sco!23" password. The password cannot be sent in cleartext between
the two routers. The "remote-router" has already been configured with all the required
configurations. Which four Cisco IOS configurations are necessary? (Choose four.)
A. hostname local-router
B. int s0/0encap hdlc
C. int s0/0encap ppp
D. int s0/0ppp authentication pap
E. int s0/0ppp authentication chap
F. ip domain-name test.com
G. username remote-router password C!sco!23
H. username local-router password C!sco!23
Answer: A,C,E,G
Explanation:

Drag the each Cisco IOS XR command from the left and drop it on the correct output description
on the right.
46
Cisco 640-875 Exam
Answer:
Explanation:
47
Cisco 640-875 Exam
Topic 6, Transport Technologies

QUESTION NO: 70
Which two statements about Packet over SONET are true? (Choose two.)
A. POS is a Layer 2 technology that uses PPP in ATM encapsulation and SONET framing.
B. The Layer 2 frame is encapsulated into a generic HDLC header (not Cisco proprietary HDLC)
and placed into the appropriate SONET Payload Envelope.
C. The FCS field can be set to 16 bits on one end and 32 bits on the other end of a POS
connection without causing any connectivity issues.
D. The Cisco POS interface supports Cisco HDLC and PPP encapsulation.
E. POS can be used in a point-to-point or point-to-multipoint environment.
Answer: B,D
Explanation:

Drag the WAN technologies from the left and drop them on the correct descriptions on the right.
Answer:
48
Cisco 640-875 Exam
Explanation:
QUESTION NO: 72
Which component is integrated into the Cisco IPoDWDM interfaces?
A. ROADM
B. transponder
C. electrical cross connect
D. E-O-E converter
E. SONET/SDH controller
Answer: B
Explanation:
49
Cisco 640-875 Exam

QUESTION NO: 73
A Passive Optical Network is a point-to-multipoint FTTx network architecture that relies on which
of the following?
A. Electrically powered optical splitters
B. Unpowered optical splitter
C. Customer optical network terminal
D. Network interface controller
Answer: B
Explanation:
QUESTION NO: 74
Which two commands can be used to enable LACP when configuring the interfaces for a 40
gigabit etherchannel? (Choose two.)
A. switch (config-if)# channel-group 1 mode active
B. switch (config-if)# channel-group 1 mode auto
C. switch (config-if)# channel-group 1 mode desirable
D. switch (config-if)# channel-group 1 mode passive
E. switch (config-if)# channel-group 1 mode LACP
Answer: A,D
Explanation:

Drag the PPPoE negotiation steps from the left and drop them in order on the right.
50
Cisco 640-875 Exam

Answer:
Explanation:
QUESTION NO: 76
51
Cisco 640-875 Exam
Based on the configurations shown, why is the serial link in up/down status?
A. Mismatch hostnames
B. Passwords are in plain text
C. Mismatch of authentication type
D. Wrong configuration mode for command input
Answer: C
Explanation:
Topic 7, Security in the Network

QUESTION NO: 77
Which feature is used to protect the control plane of the router?
A. Port security
B. uRPF
C. Routing protocol authentication
D. VRF
52
Cisco 640-875 Exam

E. SSH
F. SSL
Answer: C
Explanation:
QUESTION NO: 78
Which statement about SSH is true?
A. It is a TCP/IP transport layer protocol.
B. It uses TCP port number 22.
C. It securely encrypts Telnet.
D. It uses UDP port 23.
E. Passwords are sent in clear text.
F. It is an OSI network layer protocol.
Answer: B
Explanation:
QUESTION NO: 79
Which two statements are correct regarding routing protocol authentication? (Choose two.)
A. MD5 authentication can only be established between Internal BGP peers.
B. Authentication can be established using keychains on one peer and MD5 hashing on the other.
C. UDP port 179 is used for BGP session authentication.
D. MD5 passwords are never sent to a peer.
E. Routers authenticate each routing update packet received.
F. BGP peers can be configured with different passwords.
Answer: D,E
Explanation:
QUESTION NO: 80
53
Cisco 640-875 Exam
Which two statements are true regarding the following configuration?

A. Users are authenticated using RADIUS.
B. TACACS+ is configured for remote AAA.
C. A TACACS+ AAA server group is configured.
D. A TACACS+ server can be reached through the GigabitEthernet0/1/0/1 interface.
E. Logging is configured to the local database.
Answer: B,D
Explanation:
QUESTION NO: 81
What is the best way to secure the route processor on a Cisco device?
A. Route processor traffic control
B. Control plane quality of service
C. Control plane policing
D. Access lists
Answer: C
Explanation:
QUESTION NO: 82
Which best describes the relationship between user groups and task groups?
A. User groups include task ID's that are nested task groups.
B. Groups can be nested within other groups.
C. Tasks groups are not related to user groups.
D. Task groups are assigned to user groups to established privileged levels.
Answer: D
54
Cisco 640-875 Exam

Explanation:
QUESTION NO: 83
What is the Cisco IOS command that is used to prevent the route of the incoming traffic from an
unknown network?
A. Interface FastEthernet 0/0ip verify unicast source reachable-via any allow-default
B. Interface FastEthernet 0/0ip verify multicast source reachable-via any allow-default
C. Interface FastEthernet 0/0ip verify unicast destination reachable-via any allow-default
D. Interface FastEthernet 0/0ip verify multicast destination reachable-via any allow-default
Answer: A
Explanation:
QUESTION NO: 84
Which three statements about the Cisco IOS XR task-based user authorization method are true?
(Choose three.)
A. A user's association with a particular user group links that user to a particular set of task IDs. A
user that is associated with a task ID can execute any operation associated with that task ID.
B. Users can be assigned only to one user group.
C. Every user group is associated with one or more task groups.
D. Every task group is defined by a set of task IDs.
E. Each user is assigned a privilege level.
F. Each IOS XR CLI command is assigned a privilege level.
G. A task ID maps the IOS XR command to a privilege level.
Answer: A,C,D
Explanation:
Topic 8, Network Management

QUESTION NO: 85
55
Cisco 640-875 Exam
Which statement about this show command output is true?

A. The S78 switch is performing remote-SPAN.
B. All traffic that ports Fa0/1, Fa0/2, Fa0/3, and Fa0/4 send and receive is monitored.
C. All traffic that port Gi0/1 sends and receives is monitored.
D. The sniffer (network analyzer) should be connected to the Gi0/1 port.
E. The SPAN destination interface replicates the source interface encapsulation method.
Answer: D
Explanation:
QUESTION NO: 86
Which three statements about Cisco Discovery Protocol operations on a Cisco ME3400 switch are
true? (Choose three.)
A. Cisco Discovery Protocol is enabled by default on NNI ports.
B. Cisco Discovery Protocol is enabled by default on all NNI, ENI, and UNI ports.
C. Cisco Discovery Protocol is disabled by default on ENI ports.
D. Cisco Discovery Protocol is not supported on NNI or ENI ports.
E. Cisco Discovery Protocol is not supported on UNI ports.
Answer: A,C,E
Explanation:
QUESTION NO: 87
56
Cisco 640-875 Exam

Currently, a Cisco IOS XR router is configured to send IP SLA probes to a network management
station that is acting as the IP SLA target device. How can IP SLA measurement accuracy be
improved and also provide additional statistics?
A. Use ICMP echo probes instead of UDP echo probes.
B. Configure another Cisco router as the target and enable that other Cisco router for IP SLA
Responder operations.
C. Increase the rate (frequency) at which a specified IP SLA operation is sent into the network.
D. Use UDP echo probes instead of ICMP echo probes and enable UDP echo service on the
target network management station.
E. Enable IP SLA Responder service on the target network management station.
Answer: B
Explanation:
QUESTION NO: 88
Which three statements about this show output are true? (Choose three.)
A. Logging to the circular logging buffer has been disabled.
B. All severity levels messages can be logged to the terminal lines other than the console.
C. The logging facility has been set to "critical".
D. Messages with Severity Levels 0, 1, and 2 are sent to the syslog server.
57
Cisco 640-875 Exam

E. 169 messages have been sent to the syslog server.
F. The logging buffer size is set to 8192 bytes.
Answer: A,B,D
Explanation:
QUESTION NO: 89
Which two statements about Cisco IOS XR NTP configuration are true? (Choose two.)
A. A network device can obtain NTP time information in three ways: polling the NTP server,
listening to NTP broadcasts, and listening to NTP multicasts.
B. NTP authentication supports MD5, SHA1, or SHA2.
C. Client mode is a peer-to-peer mode.
D. The two types of poll-based NTP associations are client mode and symmetric active mode.
E. The Cisco IOS-XR implementation of NTP supports stratum 1 service.
F. In client mode, clients can dynamically learn the NTP sever IP address by listening to the NTP
server broadcasts or multicasts.
Answer: A,D
Explanation:
QUESTION NO: 90
58
Cisco 640-875 Exam

A network administrator is setting up a new core router to be a secondary NTP server. What
command would need to be added to NTP Client configuration shown?
A. NTP server 209.165.200.227 preferNTP server 209.165.200.226
B. NTP server 209.165.200.227NTP server 209.165.200.226 secondary
C. NTP server 209.165.200.227 preferNTP server 209.165.200.226 backup
D. NTP server 209.165.200.227NTP server 209.165.200.226 prefer
Answer: A
Explanation:
QUESTION NO: 91
A new policy requires all configurations to be saved to flash and backed up to a TFTP server
based off the hostname at 12:05am every day. Based upon the configuration, which two
commands are required to accomplish this? (Choose two.)
A. kron occurrence daily-config-backup at 0:05 recurringpolicy-list backup-config
B. kron occurrence daily-config-backup at 12:05 recurringpolicy-list backup-config
C. kron policy-list backup-configcli write memorycli show running-config| redirect
tftp://209.165.200.226/$h.cfg
D. kron policy-list backup-configcli write memorycli show running-config| redirect
tftp://209.165.200.226/$hostname.cfg
Answer: A,C
Explanation:
QUESTION NO: 92
What is the measurement of the Cisco IP SLA Operation ICMP Pather Jitter?
59
Cisco 640-875 Exam

A. Measures delay and jitter on networks utilizing UDP traffic
B. Measures packet loss, jitter, and delay per hop in IP networks
C. Measures round-trip delay only in UDP traffic networks
D. Measures IP networks-only round-trip delay
Answer: B
Explanation:
QUESTION NO: 93
Which two commands are required to enter enable mode on a console port without entering a
password? (Choose two.)
A. Privilege 15
B. Input SSH
C. Line VTY 0 4
D. No login
E. Privilege 0
Answer: A,D
Explanation:
QUESTION NO: 94
What is the Cisco recommended way to secure SNMPv2 community strings?
A. Configure complex community string names and avoid using default settings
B. Create multiple read/write strings to keep the attacker guessing
C. Use access-lists to limit the amount of access to the community strings
D. Use SNMPv3 to limit the amount of memory overhead
Answer: C
Explanation:
QUESTION NO: 95
What is the Cisco IOS command to export IPv6 flows to Collector 209.165.200.200/24?
60
Cisco 640-875 Exam

A. Switch(config)#ipv6 flow-export destination 209.165.200.200 9996
B. Switch(config)#ip flow-export destination 209.165.200.200 9996
C. Switch(config)#ip flow-export destination 209.165.200.200 255.255.255.0
D. Switch(config)#ip flow-export destination fe08::0ABC:1 9996
Answer: A
Explanation:
QUESTION NO: 96
Which layer of the OSI Model does Label Distribution Protocol operate at?
A. Data Link
B. Transport
C. Application
D. Presentation
E. Session
F. Network
Answer: A
Explanation:
QUESTION NO: 97
A network engineer has been provided subnet 209.165.202.128/27. What is the last usable IP
address in this network and what is the subnet mask?
A. 209.165.202.158 and 255.255.255.224
B. 209.165.202.159 and 255.255.255.192
C. 209.165.202.158 and 255.255.255.192
D. 209.165.202.128 and 255.255.255.192
E. 209.165.202.128 and 255.255.255.224
Answer: A
Explanation:
QUESTION NO: 98
On Switch 5, which command would configure VLAN 5 as root?
61
Cisco 640-875 Exam

A. switch5#spanning-tree vlan 5 priority 0
B. switch5(config)#spanning-tree vlan 5 priority 61440
C. switch5(config)#spanning-tree vlan 5 root
D. switch5(config)#spanning-tree vlan 5 priority 0
E. switch5(config-if)#spanning-tree rootguard
Answer: D
Explanation:
QUESTION NO: 99
Which EIGRP feature in IOS, IOS-XE, and IOS-XR will prevent the EIGRP process from
automatically forming a neighbor adjacency?
A. Access-lists
B. Link speed and duplex
C. MTU Size
D. Passive interface
E. Bandwidth and delay
Answer: D
Explanation:
QUESTION NO: 100

A Network Engineer configured NAT for external access but one individual at a time can access
the external network. What NAT feature will allow all internal devices to share the same NAT IP
address?
A. Static mapping
B. Overload feature
C. NAT DHCP feature
D. Default route statement
Answer: B
Explanation:
QUESTION NO: 101
62
Cisco 640-875 Exam

Which command set is required to enable a remote SNMP query on an IOS-XR router?
A. control-planemanagement-planeinbandinterface allallow SNMPcommit
B. control-planemanagement-planeinbandinterface allallow SNMP
C. snmp server hostsnmp server contactsnmp-server community stringcommit
D. snmp server hostsnmp server contactsnmp-server community string
Answer: A
Explanation:
QUESTION NO: 102

What is the minimum version of DOCSIS that will support IPv6?
A. Version 1
B. Version 2
C. Version 3
D. Version 3.1
Answer: B
Explanation:
QUESTION NO: 103

Which multiplexing technology has minimal impact to production traffic when changes are
implemented to a live circuit?
A. Dark fiber
B. DWDM
C. IPoDWDM
D. ROADM
Answer: D
Explanation:
QUESTION NO: 104

A network administrator set-up AAA on a new router. While the TACACS server was down for
63
Cisco 640-875 Exam

maintenance, the administrator was still unable to login with the backup password. Which keyword
did the administrator leave off of the AAA configuration?
A. The keyword local is missing from the AAA authentication login statement.
B. The keyword local is missing from the AAA authentication exec statement.
C. The keyword default is missing from the login authentication.
D. The command line privilege level 0 is missing from the VTY configuration.
Answer: B
Explanation:
QUESTION NO: 105 HOTSPOT
64
Cisco 640-875 Exam
65
Cisco 640-875 Exam
66
Cisco 640-875 Exam
67
Cisco 640-875 Exam
68
Cisco 640-875 Exam
69
Cisco 640-875 Exam
Answer:
Explanation:
Gi0/0/0/2
Correct network topology is Topology 2
Use show cdp neighbor to check and determine the topology.
70
Cisco 640-875 Exam
71
Cisco 640-875 Exam
72
Cisco 640-875 Exam
73
Cisco 640-875 Exam
74
Cisco 640-875 Exam
75
Cisco 640-875 Exam
76
Cisco 640-875 Exam

Answer:
Explanation:
Fa0/21
77
Cisco 640-875 Exam
78
Cisco 640-875 Exam
79
Cisco 640-875 Exam
80
Cisco 640-875 Exam
81
Cisco 640-875 Exam
82
Cisco 640-875 Exam
83
Cisco 640-875 Exam
Answer:
Explanation:
Gi0/0/0
84
Cisco 640-875 Exam
85
Cisco 640-875 Exam
86
Cisco 640-875 Exam
87
Cisco 640-875 Exam
88
Cisco 640-875 Exam
89
Cisco 640-875 Exam
90
Cisco 640-875 Exam

Answer:
Explanation:
Routers d, f and g only
Topic 9, Mix Questions

QUESTION NO: 109
Given the IP address 172.16.170.15 255.255.224.0, which three options are the subnet that this IP
address belongs to, the host IP address range on this subnet, and the subnet broadcast IP
address? (Choose three.)
A. subnet = 172.16.160.0/19
B. subnet = 172.16.170.0/19
C. subnet = 172.16.192.0/19
D. host IP address range = 172.16.160.1 to 172.16.191.254
E. host IP address range = 172.16.170.1 to 172.16.170.254
F. host IP address range = 172.16.160.1 to 172.16.223.254
G. subnet broadcast IP address = 172.16.170.255
H. subnet broadcast IP address = 172.16.191.255
I. subnet broadcast IP address = 172.16.223.255
Answer: A,D,H
Explanation:
QUESTION NO: 110
91
Cisco 640-875 Exam

Which two options are the number of broadcast domains and collision domains shown in the
exhibit? (Choose two.)
A. 1 collision domain
B. 2 collision domains
C. 4 collision domains
D. 7 collision domains
E. 1 broadcast domain
F. 2 broadcast domains
G. 4 broadcast domains
H. 7 broadcast domains
Answer: D,F
Explanation:
QUESTION NO: 111

92
Cisco 640-875 Exam
Which two options are the number of broadcast domains and collision domains shown in the
exhibit? (Choose two.)
A. 2 collision domains
B. 4 collision domains
C. 5 collision domains
D. 8 collision domains
E. 2 broadcast domains
F. 4 broadcast domains
G. 5 broadcast domains
H. 8 broadcast domains
Answer: C,E
Explanation:
QUESTION NO: 112

Which three IP addresses are valid for hosts that belong to the 10.152.0.0/13 subnet? (Choose
three.)
A. 10.152.0.0/13
B. 10.153.0.1/13
C. 10.158.255.255/13
D. 10.159.255.254/13
E. 10.160.0.1/13
F. 10.161.0.1/13
93
Cisco 640-875 Exam

Answer: B,C,D
Explanation:
QUESTION NO: 113

Which type of IPv6 address does the ff00::/8 prefix denote?
A. Local loopback
B. Global unicast
C. Unique link local
D. Link local unicast
E. Multicast
F. Anycast
Answer: E
Explanation:
QUESTION NO: 114

Robert is sending an instant message to Mary. The message will be broken into a series of
packets that will traverse all network devices. Which four options are the MAC and IP source and
destination addresses that will populate these packets as they are forwarded from Router2 to
Router1? (Choose four.)
A. source MAC = 0000.00a1.2222
B. source MAC = 0000.000c.0123
C. destination MAC = 0000.00a1.3333
94
Cisco 640-875 Exam

D. destination MAC = 0000.000c.0124
E. source IP 10.1.2.2
F. source IP 10.1.1.253
G. destination IP = 10.1.3.3
H. destination IP = 10.1.1.254
Answer: B,D,E,G
Explanation:
QUESTION NO: 115

Which Layer 2 WAN protocol uses DLCI as the virtual circuit identifier?
A. ATM
B. PPP
C. Frame Relay
D. Packet over SONET
E. Metro Ethernet
Answer: C
Explanation:
QUESTION NO: 116

Which pair of mechanisms are often used together to allow dynamic routing over a secured site-tosite VPN tunnel?
A. GRE + SSL
B. VTI + SSL
C. VRF + SSL
D. GRE + IPsec
E. L2TP + IPsec
F. VRF + IPsec
Answer: D
Explanation:
QUESTION NO: 117
95
Cisco 640-875 Exam

Which Cisco router feature allows multiple independent routing table instances to co-exist within
the same router at the same time?
A. Virtual Contexts
B. Virtual Machines
C. VTI
D. VRF
E. VPLS
F. GRE
Answer: D
Explanation:
QUESTION NO: 118

Which three statements correctly describe DSL-based Internet services for residential users?
(Choose three.)
A. Most residential deployments use PPPoE encapsulation where the end user PC or the DSL
CPE will require a PPP username and password configuration.
B. Most residential deployments use PPPoA encapsulation where the DSL CPE device needs to
provide Layer 3 routing functions.
C. The most commonly installed DSL variant for residential deployments is ADSL.
D. The most commonly installed DSL variant for residential deployments is SDSL.
E. The most commonly installed DSL variant for residential deployments is HDSL.
F. At the DSL service provider location, a DSLAM typically is used to terminate all the PPP
connections of the DSL subscribers.
G. At the DSL service provider location, a DSLAM is used to terminate and then aggregate the
DSL connections over an ATM network.
Answer: A,C,G
Explanation:
QUESTION NO: 119

96
Cisco 640-875 Exam

Which layer(s) of the TCP/IP model operates end-to-end (Host A to Host B)?
A. Physical layer
B. Link layer
C. Transport and application layers
D. Link and internet (network) layers
E. Physical and link layers
Answer: C
Explanation:
QUESTION NO: 120

Which two applications require the network to have the least amount of jitter, delay, and packet
loss? (Choose two.)
A. FTP
B. SSH
C. VoIP
D. email
E. Cisco TelePresence
F. web browsing
Answer: C,E
Explanation:
QUESTION NO: 121

What is the default spanning-tree mode of an NNI port on a Cisco ME3400 switch?
A. Multiple spanning tree (mst)
B. Per-vlan rapid spanning tree (rapid-pvst)
C. Per-vlan spanning tree (pvst)
D. IEEE 802.1D (stp)
Answer: B
Explanation:
97
Cisco 640-875 Exam

QUESTION NO: 122
Which two statements about transparent bridging operations are true? (Choose two.)
A. A bridge builds its MAC address table dynamically using the spanning-tree protocol.
B. A bridge operates at the data link layer.
C. A bridge sends unknown unicast frames out on all ports except the incoming port.
D. A bridge forwards traffic based on the destination IP address.
E. All the ports on the bridge belong to the same collision domain.
Answer: B,C
Explanation:
QUESTION NO: 123

According to this show output, what are sticky MAC addresses?

A. Dynamically learned MAC addresses on the port that are stored in the MAC address table and
also in the start-up configuration
B. Statically configured MAC addresses on the port that are stored in the MAC address table
C. Statically configured MAC addresses on the port that are stored in the start-up configuration
D. Dynamically learned MAC addresses on the port that are stored in the running configuration
Answer: D
98
Cisco 640-875 Exam

Explanation:
QUESTION NO: 124

When two or more different routes exist to the same destination that have been learned from two
different routing protocols, what does a router use to determine the best route?
A. Routing protocol metric
B. Administrative distance
C. Hop count
D. Path cost
E. Local preference
Answer: B
Explanation:
QUESTION NO: 125

Which two statements about NetFlow support on Cisco IOS XR are true? (Choose two.)
A. Cisco IOS XR supports NetFlow version 9 export format only.
B. NetFlow version 9 is a flexible and extensible means to carry NetFlow records from a network
node to a collector.
C. IP flow is based on a set of four parameters only (source IP address, destination IP address,
source port, and destination port).
D. A NetFlow flow is the bidirectional sequence of packets on a single interface.
Answer: A,B
Explanation:
QUESTION NO: 126

What are the four steps to enable SSH v1 and v2 server on Cisco IOS XR routers? (Choose four.)
A. Configure a host name.
B. Configure a domain name.
C. Generate a crypto key pair.
D. Import the router identity certificate and the CA root certificate to the router.
99
Cisco 640-875 Exam

E. Configure an ISAKMP policy.
F. Bring up an SSH server using the ssh server command.
Answer: A,B,C,F
Explanation:
QUESTION NO: 127

Generally, which way is the fastest to open S3 and S4 service requests to the Cisco TAC?
A. Use the Smart Call Home feature.
B. Use the online TAC Service Request Tool.
C. Call Cisco TAC on the phone.
D. Email Cisco TAC with a high-priority email.
E. Export the related Syslog/NetFlow information to TAC directly.
Answer: B
Explanation:
QUESTION NO: 128

Which SNMPv2/SNMPv3 operation is not supported in Cisco IOS XR software?
A. get-bulk
B. get-request
C. inform
D. trap
E. set-request
Answer: C
Explanation:
QUESTION NO: 129

What is the result of using the Cisco IOS copy tftp: run command?
A. The running configuration on the Cisco IOS device is backed up to the TFTP server.
B. Only new configuration parameters from the saved configuration file on the TFTP server are
100
Cisco 640-875 Exam

added to the running configuration. No changes to any existing configuration parameters in the
running configuration are made.
C. The running configuration on the Cisco IOS device is replaced with the saved configuration file
on the TFTP server.
D. The configuration stored in the TFTP server is merged with the running configuration on the
Cisco IOS device.
E. The saved configuration file from the TFTP server is copied to the target configuration.
Answer: D
Explanation:
QUESTION NO: 130

What is the SDH equivalent of the SONET STS-12 framing format?
A. SDH STM-1
B. SDH STM-4
C. SDH STM-12
D. SDH STM-16
E. SDH STM-64
Answer: B
Explanation:
QUESTION NO: 131

What are the three RFC 1918 IPv4 private address ranges? (Choose three.)
A. 10.0.0.0 - 10.255.255.255
B. 172.16.0.0 - 172.255.255.255
C. 172.16.0.0 - 172.31.255.255
D. 192.168.0.0 - 192.168.31.255
E. 192.168.0.0 - 192.168.255.255
Answer: A,C,E
Explanation:
QUESTION NO: 132
101
Cisco 640-875 Exam

With a distance vector routing protocol like RIPv1, when is a route in the routing table placed in the
"possibly down" state?
A. When a router receives an update from its neighbor router about a network in its routing table
but with a worse metric
B. When a router receives an update from its neighbor router about a network in its routing table
but with a better metric
C. When a router receives an update from its neighbor router indicating that a previously
accessible network is now inaccessible
D. Whenever the router receives an update from its neighbor about a newly learned network
E. Whenever the router interface that is used to reach the remote network goes down
Answer: C
Explanation:
QUESTION NO: 133

Given the CIDR address range of 200.165.160.0 to 200.165.191.255, what is the CIDR block?
A. 200.165.160.0/17
B. 200.165.160.0/18
C. 200.165.160.0/19
D. 200.165.160.0/20
E. 200.165.160.0/21
Answer: C
Explanation:
QUESTION NO: 134

Given these four Class B networks: 172.104.0.0, 172.105.0.0, 172.106.0.0, 172.107.0.0, what is
the supernet (CIDR) address that summarizes these four Class B networks?
A. 172.104.0.0/12
B. 172.104.0.0/13
C. 172.104.0.0/14
D. 172.104.0.0/15
Answer: C
Explanation:
102
Cisco 640-875 Exam
QUESTION NO: 135

What does a transparent LAN switch use to build its CAM table?
A. BPDU messages exchanged with neighbor bridges
B. STP messages exchanged with neighbor bridges
C. Dynamic routing protocol updates from neighbor bridges
D. Analysis of the source MAC address of incoming frames on the bridge ports
Answer: D
Explanation:
QUESTION NO: 136

Using a single Class C network of 192.168.1.0/24 and VLSM, which two options specify the
number of subnets that are needed to support this network and what are the minimum sizes of the
required subnets? (Choose two.)
103
Cisco 640-875 Exam

A. 4 subnets
B. 6 subnets
C. 8 subnets
D. 26 subnets
E. 28 subnets
F. Two /30 subnets + one /28 subnets + one /29 subnets
G. Four /30 subnets + two /28 subnets
H. Six /30 subnets + two /28 subnets
I. Twenty six /30 subnets
J. Twenty eight /30 subnets
Answer: B,G
Explanation:
QUESTION NO: 137

Which option is enabled by default on Cisco IOS and IOS XE routers?
A. IPv6 unicast routing
B. IPv4 unicast routing
C. IPv6 and IPv4 unicast routing
D. SSH server
E. HTTP server
F. SSH and HTTP server
G. AAA console login authentication
Answer: B
Explanation:
QUESTION NO: 138

Using VLSM, how many /30 subnets can be derived from a single /27 Class C subnet?
A. 1
B. 2
C. 4
D. 8
E. 12
F. 16
Answer: D
104
Cisco 640-875 Exam

Explanation:
QUESTION NO: 139

On Cisco IOS Switches, which port security violation mode results in frames from non-allowed
MAC address being dropped, log message created, and SNMP trap sent?
A. Protect
B. Restrict
C. Shutdown
D. Err-disabled
E. Log
Answer: B
Explanation:
QUESTION NO: 140

Which statement about 10/40/100 GigabitEthernet interface configuration on Cisco IOS XR is
true?
A. Use the negotiation auto command in interface configuration mode to enable link autonegotiation to ensure that devices that share a link segment are automatically configured with the
highest performance.
B. The configuration supports only full-duplex operation.
C. The range for MTU values is 64 bytes to 1518 bytes on the interface.
D. The interface has no flow control configuration.
Answer: B
Explanation:
QUESTION NO: 141

Which statement about a root bridge in an STP domain is true?
A. It has the highest root ID in the STP domain.
B. It has the lowest bridge ID in the STP domain.
C. It contains non-designated ports.
105
Cisco 640-875 Exam

D. It contains root ports.
E. It has the highest priority value.
Answer: B
Explanation:
QUESTION NO: 142

Which Cisco IOS XR command displays traffic counters for an individual interface that is
configured on the router?
A. RP/0/RSP0/CPU0:PE1(config)# show bundle
B. RP/0/RSP0/CPU0:PE1# show interfaces GigabitEthernet 0/0/0/1
C. RP/0/RSP0/CPU0:PE1# show controllers GigabitEthernet 0/0/0/1
D. RP/0/RSP0/CPU0:PE1(admin)# show platform
E. RP/0/RSP0/CPU0:PE1(admin)# show hw-module fpd location all
F. RP/0/RSP0/CPU0:PE1# show interfaces brief
Answer: B
Explanation:
QUESTION NO: 143

The link between RT1 and RT2 requires an authentication to be enabled using encrypted
password. Which four Cisco IOS commands are necessary to be applied on RT1? (Choose four.)
A. hostname RT1
B. int s0/0
encap hdlc
C. int s0/0
encap ppp
D. int s0/0
106
Cisco 640-875 Exam

ppp authentication pap
E. int s0/0
ppp authentication chap
F. ip domain-name test.com
G. username RT2 password C!sco!23
H. username RT1 password C!sco!23
Answer: A,C,E,G
Explanation:
QUESTION NO: 144

At what layer of the OSI model is the Label Distribution Protocol present?
A. data link
B. transport
C. application
D. presentation
E. session
Answer: A
Explanation:
QUESTION NO: 145

Which subnetwork mask should be used in a point-to-point link in order to use IPv4 address block
more efficiently?
A. 209.165.201.0/32
B. 209.165.201.0/31
C. 209.165.201.0/30
D. 209.165.201.0/29
E. 209.165.201.0/24
Answer: B
Explanation:
QUESTION NO: 146
107
Cisco 640-875 Exam

Customer A site 1 is reporting to the service provider that they cannot reach Customer A site 2
networks. What is the root cause of this issue?
A. one of the PE routers is adding summarization incorrectly
B. incorrect network statement
C. ospf area-id configured incorrectly
D. configuration missing subnets keyword
Answer: D
Explanation:
QUESTION NO: 147

Which three are features present on both ICMPv4 and ICMPv6? (Choose three.)
A. connectivity tests
B. address assignment
C. information error messaging
D. address resolution
E. mobile IPv4 support
F. multicast group management
G. mobile IPv6 support
H. fragmentation needed notification
Answer: A,C,H
108
Cisco 640-875 Exam

Explanation:
QUESTION NO: 148

Company policy only allows SSH for remote access into Cisco routers. Which configuration would
only allow SSH?
A. access-lists 101 deny tcp any eq telnet
B. transport input SSH
C. access-class 101 in
D. access-class 101 out
E. transport preferred SSH
Answer: B
Explanation:

Drag the network type on the left to the correct description on the right.
Answer:
Explanation:
109
Cisco 640-875 Exam

On the left you see speeds for digital circuits. Drag each speed on the left to the correct digital
circuit on the right.
Answer:
Explanation:
110
Cisco 640-875 Exam

Drag each encryption technology on the left to its relevant functionality on the right.
Answer:
111
Cisco 640-875 Exam
Explanation:

Drag the severity level on the left to the correct severity code on the right.
112
Cisco 640-875 Exam
Answer:
Explanation:
QUESTION NO: 153

You are designing a network in accordance with the hierarchical network design model. The
distribution layer provides which three functionalities? (Choose three.)
113
Cisco 640-875 Exam

A. workgroup segmentation
B. high-speed switching
C. connectivity to workstations
D. policy-based connectivity
E. WAN connection aggregation at the edge
F. 802.1x security
Answer: A,D,E
Explanation:
QUESTION NO: 154

You have a LAN that has three computers. The computers are connected by a switch. The
computers are in the 192.168.1.0/24 network. Which network device enables you to connect the
LAN to the Internet?
A. a switch
B. a hub
C. a router
D. a DSL modem in bridge mode
Answer: C
Explanation:
QUESTION NO: 155

You plan to implement QoS on a network, using these four classes:
-
A class for real-time applications

A class for interactive applications
A class for batch applications
A scavenger class
Which two classes are interactive applications? (Choose two.)

A. email
B. SSH
C. database updates
D. IP telephony
E. file transfers
114
Cisco 640-875 Exam

Answer: B,C
Explanation:
QUESTION NO: 156

Which command assigns an IP address to the Loopback1 interface on a Cisco IOS Router?
A. ip address 192.168.41.111 255.255.255.240
B. set ip 127.0.0.1/32
C. ip address 127.0.0.1 255.255.255.0
D. ip address 169.254.47.81 255.255.0.0
Answer: D
Explanation:
QUESTION NO: 157

You are configuring manual route summarization in EIGRP. Which two networks are summarized
into 10.134.17.64/27? (Choose two.)
A. 10.134.17.64 255.255.255.240
B. 10.134.17.100/30
C. 10.134.17.0 255.255.255.128
D. 10.134.17.92/30
Answer: A,D
Explanation:
QUESTION NO: 158

Which two IP addresses can be assigned to hosts? (Choose two.)
A. 192.168.1.255/23
B. 192.168.1.255/22
C. 172.16.28.7/29
D. 224.0.250.1/24
E. 10.192.225.225/27
115
Cisco 640-875 Exam

Answer: B,E
Explanation:
QUESTION NO: 159

Which three statements about Ethernet frames are true? (Choose three.)
A. Every frame starts with a preamble.
B. FCS is used to recover single-bit errors.
C. The source address is positioned behind the destination address.
D. If the data field is too short, it must be padded.
E. The dot1q tag size is six bytes.
F. The source and destination IP addresses are in the header.
Answer: A,C,D
Explanation:
QUESTION NO: 160

ServerA successfully connects to Router1, but it fails to ping SwitchX. Which action enables
ServerA to ping SwitchX?
116
Cisco 640-875 Exam

A. Set the default gateway on ServerA to 10.10.1.1.
B. Enter the command no shutdown on the Vlan1 interface of SwitchX.
C. Change the subnet mask on the Vlan1 interface of SwitchX to 255.255.255.0.
D. Replace the cable in FastEthernet0/2.
Answer: B
Explanation:
QUESTION NO: 161

Both ComputerA and Server1 have gigabit interface cards. Switch1 and Switch2 are both Cisco
Catalyst 2960 Series Switches. The EtherChannel link between the switches is fully operational.
The switches use src-dst-mac load-balancing mode. What is the theoretical maximum bandwidth
that is available for copying files from ComputerA to Server1 by using FTP?
A. 1 Gbps
B. 200 Mbps
C. 100 Mbps
D. 400 Mbps
Answer: C
Explanation:
117
Cisco 640-875 Exam
QUESTION NO: 162

Two sites each have a different ASN. Which method do you use to share routing information
between the sites?
A. EIGRP
B. IGP
C. static routing
D. OSPFv3
E. BGP
Answer: E
Explanation:
QUESTION NO: 163

You configure a network to use IPv6, and you use RIPng as the routing protocol. What is the
maximum hop count to use to install a route in the routing table?
A. 15
B. 16
C. 255
D. 65535
Answer: A
Explanation:
QUESTION NO: 164

118
Cisco 640-875 Exam
Two routers are named R1 and R2. R1 runs Cisco IOS Software. R2 runs Cisco IOS XR Software.
To form an EIGRP IPv6 adjacency between the two routers, which three configurations must you
add? (Choose three.)
A. On R1, configure router-id with an IPv4 address.
B. On R1, configure router-id with an IPv6 address.
C. On R1, enter the no shutdown command inside the IPv6 EIGRP process.
D. On R1 and R2, enter the eigrp no shutdown command inside the interfaces.
119
Cisco 640-875 Exam

E. On R1, configure IPv6 unicast routing in config mode.
F. On R2, configure IPv6 unicast routing in config mode.
Answer: A,C,E
Explanation:
QUESTION NO: 165

Which statement about VRFs is true?
A. One interface can be a member of multiple VRFs.
B. Each VRF has its own routing table, but it has a shared FIB.
C. Each VRF has its own routing table and its own FIB.
D. Each VRF has its own routing table, and it does not have an FIB.
Answer: C
Explanation:
QUESTION NO: 166

You plan to configure NAT by using these guidelines:
- Implement NAT for the inside network 192.168.1.0/128 to the range of 209.165.201.1 to
209.165.201.5/128.
- Create a static association for the server 192.168.1.129 to the public IP address of
209.165.201.6.
- Implement PAT for the IP address range of 192.168.2.0/24 with the outside interface.
Which commands should you use to configure NAT?
A. access-list 1 permit 192.168.1.0 0.0.0.128
access-list 2 permit 192.168.2.0 0.0.0.255
ip nat pool NATCustomerA 209.165.201.1 209.165.201.5 netmask 0.0.0.128
ip nat inside source list 1 pool NATCustomerA
ip nat inside source static 192.168.1.129 209.165.201.6
ip nat inside source list 2 interface g1/0/0 overload
interface f0/0
description CustomerFacing Interface
ip nat inside
interface g1/0/0
description
120
Cisco 640-875 Exam

PublicWan
ip nat outside
B. access-list 1 permit 192.168.1.0 0.0.0.127
ip nat pool NATCustomerA 209.165.201.1 209.165.201.5 netmask 255.255.255.128
ip nat inside source list 2 interface g1/0/0 overload
interface f0/0
ip nat inside
interface g1/0/0
description PublicWan
ip nat outside
C. access-list 1 permit 192.168.1.0 0.0.0.128
ip nat pool NATCustomerA 209.165.201.1 209.165.201.5 prefix 25
ip nat inside source list 2 interface g1/0/0
interface f0/0
ip nat inside
interface g1/0/0
ip nat outside
D. access-list 1 permit 192.168.1.0 0.0.0.127
ip nat pool NATCustomerA 209.165.201.1 209.165.201.5 prefix 25
ip nat inside source list 1 pool NATCustomerA overload
ip nat inside source list 2 interface g1/0/0
interface f0/0
ip nat inside
interface g1/0/0
ip nat outside
Answer: B
Explanation:
QUESTION NO: 167
121
Cisco 640-875 Exam

How many IP addresses does Router1 have that are available for DHCP clients?
A. 100
B. 99
C. 254
D. 199
Answer: B
Explanation:
QUESTION NO: 168

Which type of ICMP message is generated when a datagram is discarded because the TTL
reaches a value of 0?
A. Type 0 (Echo Reply)
B. Type 12 (Parameter Problem)
C. Type 11 (Time Exceeded)
D. Type 16 (Information Reply)
E. Type 10 (Source Quench)
Answer: C
Explanation:
QUESTION NO: 169

In IPv6, which kind of record is used for reverse lookups?
122
Cisco 640-875 Exam

A. nibble
B. AAAA
C. PTR
D. APL
Answer: C
Explanation:
QUESTION NO: 170

A Cisco IOS Router has the configuration that is shown in the exhibit. The Cisco IOS Router is
replaced by a Cisco IOS XR device. To duplicate the IPv6 EIGRP parameters of the Cisco IOS
Router, which configuration should you use on the Cisco IOS XR device?
A. interface Loopback 0
ipv6 address 2001:db8:aaaa::1/128
!
interface gigabitEthernet 1/0/1
ipv6 enable
ipv6 address 2001:db8:bbbb::1/64
!
router eigrp 100
interface loopback 0
123
Cisco 640-875 Exam

interface gigabitethernet 1/0/1
exit
commit
B. interface Loopback 0
!
ipv6 enable
!
router eigrp 100
address-family ipv6
exit
commit
C. interface Loopback 0
ipv6 eigrp 100
!
ipv6 router eigrp 100
!
ipv6 router eigrp 100
no shutdown
exit
commit
D. interface Loopback 0
commit
!
ipv6 enable
commit
!
router eigrp 100
address-family ipv4
commit
Answer: B
Explanation:
124
Cisco 640-875 Exam
QUESTION NO: 171

DOCSIS architecture includes which two primary components? (Choose two.)
A. a DSL modem
B. a cable modem
C. CMTS
D. UMTS
E. an IP PBX
Answer: B,C
Explanation:
QUESTION NO: 172

A BNG device can implement which three functions? (Choose three.)
A. authentication, authorization, and accounting
B. security and policy management
C. DHCP server
D. DHCP relay
E. call management
F. DNS proxy
Answer: A,B,D
Explanation:
QUESTION NO: 173

Which two architectures are part of the FTTx group of technologies? (Choose two.)
A. Fiber-to-the-Building
B. Fiber-to-the-Cabinet
C. Fiber-to-the-Telecom-Enclosure
D. Fiber-to-the-Home
E. Fiber-to-the-Zone
Answer: A,D
125
Cisco 640-875 Exam

Explanation:
QUESTION NO: 174

Which three Cisco platforms support IPoDWDM? (Choose three.)
A. Cisco ASR 1000 Series
B. Cisco ASR 9000 Series
C. Cisco CRS-1
D. Cisco ISR G2 Series
E. Cisco 7600 Series
F. Cisco 2900 Series
Answer: B,C,E
Explanation:
QUESTION NO: 175

A technician connects a Cisco ASR 9001 Router with a 40 Gigabit Ethernet modular port adapter
to an older model Cisco switch through a transceiver. The older Cisco switch has interfaces that
only support up to 100-Mb half-duplex. What should you tell the technician about this
configuration?
A. The devices are unable to communicate.
B. On the older model Cisco switch, set the speed to "auto," so that the devices can communicate.
C. On the Cisco ASR 9001 Router, set the duplex and the speed to "auto," so that the devices can
communicate.
D. Set the transceiver to half/full duplex mode so that the devices can communicate.
Answer: A
Explanation:
QUESTION NO: 176

Which two features are used on CE devices in Metro Ethernet? (Choose two.)
A. encryption
B. MPLS
126
Cisco 640-875 Exam

C. packet filtering
D. Xconnect
Answer: B,D
Explanation:
QUESTION NO: 177

All physical interfaces are up. What change must you make to ensure that Multilink PPP
functions?
A. Configure no ppp authentication chap for serial 1/3.
B. Configure ppp multilink group 1 for serial 1/1 and serial 1/3.
C. Configure encapsulation ppp for the serial interfaces on both routers.
D. Add an IP address inside the multilink group.
E. Configure no shutdown inside the multilink interface.
Answer: C
Explanation:
QUESTION NO: 178

127
Cisco 640-875 Exam

Which mode prevents the counter track from being incremented when a security violation occurs?
A. shutdown
B. restrict
C. protect
D. guard
Answer: C
Explanation:
QUESTION NO: 179

To log in successfully to the console port, what information should you enter?
A. SecretPa$$word
B. EnabLe
C. admin for the username and ThisIsVerySecretPassword for the password
D. CIsc0
Answer: A
Explanation:
QUESTION NO: 180

128
Cisco 640-875 Exam

You want to configure RADIUS authentication for users who connect by using the SSH protocol. If
the RADIUS server is unreachable, the users that are defined in the running configuration should
be used. Which additional command should you use?
A. aaa authentication ssh group radius backup config
B. aaa authentication ssh group radius backup current
C. aaa authentication list ssh group radius users
D. aaa authentication login ssh group radius local
Answer: D
Explanation:
QUESTION NO: 181

You want to successfully authenticate to a neighboring router that has authentication type 2
configured for OSPF Area 0. Which two commands should you use? (Choose two.)
A. Inside OSPF mode, configure area 0 authentication message-digest.
B. Inside interface mode, configure ip ospf message-digest-key 1 md5.
C. Inside interface mode, configure ip ospf authentication-key.
D. Inside OSPF mode, configure area 2 authentication.
E. Inside OSPF mode, configure area 0 authentication.
Answer: A,B
Explanation:
QUESTION NO: 182

You are informed by your ISP that your network participated in a DDoS attack, which sent spoofed
129
Cisco 640-875 Exam

IP packets. The ISP was able to block the packets. To prevent similar attacks, which feature
should you use?
A. Unicast Reverse Path Forwarding
B. broadcast storm control
C. directed broadcasts
D. dynamic routing protocols
Answer: A
Explanation:
QUESTION NO: 183

You have a router that is configured as an NTP server. Which command should you use on the
router to allow NTP queries only from hosts that are permitted in access list 10?
A. ntp access-group peer 10
B. ntp access-group serve 10
C. ntp access-group serve-only 10
D. ntp access-group query-only 10
Answer: C
Explanation:
QUESTION NO: 184

You need to set an SLA that pings a neighbor IP every 10 seconds with a timeout of 1000 ms.
Which set of commands should you use?
A. (config)#ip sla 5
(config-ip-sla)#icmp-echo 10.0.0.1
(config-ip-sla-icmp)#frequency 10000
(config-ip-sla-icmp)#timeout 1000
B. (config)#ip sla 5
(config-ip-sla-echo)#frequency 10
(config-ip-sla-echo)#timeout 1000
(config)#ip sla schedule 5 life forever start-time now
C. (config)#ip sla 5
130
Cisco 640-875 Exam

(config-ip-sla-icmp)#frequency 10
(config-ip-sla-icmp)#timeout 10
D. (config)#ip sla 5
(config-ip-sla)#type echo protocol ip IcmpEcho 10.0.0.1
(config-ip-sla-echo)#frequency 10
(config-ip-sla-echo)#timeout 1000
Answer: B
Explanation:
QUESTION NO: 185

Which command can you use to reduce the amount of time that is required to flush inactive entries
from the CDP table?
A. cdp holdtime
B. clear cdp table
C. cdp advertise-v2
D. cdp timer
Answer: A
Explanation:
QUESTION NO: 186

You install third-party monitoring software on a server that has an IP address of 10.10.1.3. The
monitoring software supports SNMPv1 and SNMPv2. You want to configure a router to allow
SNMP access from the monitoring software by using the community string of Community1. The
configuration must be as secure as possible. Which commands should you use?
A. access-list 10 permit 10.10.1.3
snmp-server community Community1 RO 10
B. snmp-server host 10.10.1.3
snmp-server community Community1 RW 10
C. snmp-server host 10.10.1.3
snmp-server community Community1 RO
D. access-list 10 permit 10.10.1.3
snmp-server community Community1 RO
131
Cisco 640-875 Exam

Answer: A
Explanation:
QUESTION NO: 187

You want to accomplish the following:

- Change the active flow timeout to three minutes.
- Change the inactive flow to one minute.
Which two commands should you run? (Choose two.)
A. (config)#ip flow-cache timeout active 3
B. (config)#ip flow-cache timeout inactive 60
C. (config)#ip flow-cache timeout active 180
D. (config)#ip flow-cache timeout inactive 1
Answer: A,B
Explanation:
132
Cisco 640-875 Exam

QUESTION NO: 188
If a severity 1 problem is unresolved in four hours, the problem is escalated to which person?
A. the TAC director
B. the TAC manager
C. the TAC duty manager
D. the Vice President of Technical Services
Answer: A
Explanation:
QUESTION NO: 189

In a ring topology network using only Cisco Catalyst 4500 and Cisco Catalyst 6500 devices and
Ethernet as Layer 2 technology, which loop prevention mechanism provides the fastest
convergence time in an event of link failure?
A. Rapid Per-VLAN Spanning Tree Protocol
B. Resilient Ethernet Protocol
C. Multiple Spanning Tree Protocol
D. Spanning Tree Protocol
Answer: B
Explanation:
QUESTION NO: 190

Which are the two benefits of the star network topology over the bus network topology? (Choose
two.)
A. Disruption of the entire network is not required when adding new machines.
B. Any problem which leaves the network inoperable can be traced to the central hub.
C. This network type requires less cable as compared to linear bus topology.
D. The performance of one of the numerous nodes cannot reflect on the performance of other
nodes.
E. The performance of the entire network is directly dependent on the performance of the hub.
Answer: A,B
Explanation:
133
Cisco 640-875 Exam

Drag the routing protocols on the left and drop them on the correct descriptions on the right. Not all
routing protocols on the left are used.
Answer:
Explanation:
134
Cisco 640-875 Exam
135

640 875

Загружено:

Сведения о документе

Оригинальное название

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Авторское право:

Доступные форматы

640 875

Загружено:

Авторское право:

Доступные форматы

Cisco 640-875

Building Cisco Service Provider Next-Generation

Cisco 640-875 Exam

QUESTION NO: 2 DRAG DROP

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

QUESTION NO: 3 DRAG DROP

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

QUESTION NO: 4 DRAG DROP

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

Cisco 640-875 Exam

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

QUESTION NO: 10 DRAG DROP

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

Cisco 640-875 Exam

QUESTION NO: 12 DRAG DROP

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

QUESTION NO: 13 DRAG DROP

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

QUESTION NO: 14 DRAG DROP

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

Topic 1, IPv4 and IPv6 Addressing

Cisco 640-875 Exam

QUESTION NO: 18 DRAG DROP

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

QUESTION NO: 19 DRAG DROP

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

QUESTION NO: 20 DRAG DROP

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

Cisco 640-875 Exam

QUESTION NO: 23 DRAG DROP

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

Topic 2, Switched Network Technologies

Cisco 640-875 Exam

QUESTION NO: 30 DRAG DROP

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

Cisco 640-875 Exam

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam

"Pass Any Exam. Any Time." - www.actualtests.com

Cisco 640-875 Exam