1.

A network is experiencing performance degradation on an access switch where user traffic is subject to granular QoS policy and security inspection. Which switch component or components should be inspected by the network administrator to help determine the issue? the ingress interfaces only the egress interfaces only the forwarding plane only the control plane only the forwarding plane and the control plane the ingress and egress interfaces, the forwarding plane, and the control plane 2. A network administrator has configured a Cisco IOS device to provide server load balancing (SLB) for the corporate web server. What is required on the client side to ensure proper load balancing? Clients should initiate connections to the virtual IP address (VIP). Clients should initiate connections to the IP address of the predictor. Port numbers should be added to each client request in order to get routed to the correct server. Clients must be readdressed so that they are equally distributed throughout the network address space. 3.Refer to the exhibit. A network administrator is investigating performance issues of the access switch. On the basis of the provided outputs, what conclusion can be made about the switch performance? The ratio between the FCS errors and the number of received errors is normal and does not require further investigation. The ratio between the FCS errors and the number of giant frames that are received on the switch is excessively high and requires further investigation. The ratio between the FCS errors and the number of broadcast and multicast traffic frames that are received on the switch is normal and does not require further investigation. The ratio between the FCS errors and the number of unicast, broadcast, and multicast traffic frames that are received on the switch is excessively high and requires further investigation. 4. What reported error counter describes frames that do not end with an integral number of octets and have a bad cyclic redundancy check (CRC)? FCS-Err Xmit-Err Align-Err Rcv-Err undersize runt 5. What must a system administrator do to allow NBAR to recognize a new protocol without having to upgrade the Cisco IOS image? Enable the autodiscovery feature on the interface. Upgrade the version of NBAR that is running on the device. Because NBAR will automatically discover new applications, the administrator does not need to do anything. Load an appropriate Packet Description Language Module (PDLM).

6. What can cause a memory leak on a router? an IOS bug incorrect configuration registry code buffer overflow too many remote users logged into the router 7.Refer to the exhibit. Users on the network are complaining that transferring large files to the SRV1 server takes hours. A network administrator runs a few tests on both switches to investigate the problem. On the basis of the provided outputs, what could be the possible reason for problem? High CPU utilization is causing excessive FCS errors on ASW_1. A duplex mismatch is causing a high volume of late collisions on DSW_1. Slow STP convergence is causing a high volume of single collisions on DSW_1. An unsupported Auto-MDIX feature on both switches is causing a high volume of multi collisions. 8. How can an administrator determine if a memory leak is present in a router? The show interface command will show that the input queue has reached the maximum capacity. The show buffers command will show no free buffers. The show memory allocating-process totals command will show low free space. The show diagnostics command will show that the DRAM size has reached maximum capacity. 9. Which three hardware components are common in the architectures of all Catalyst switch families? (Choose three.) route processors modules interfaces forwarding hardware control plane hardware content-addressable memory 10.Refer to the exhibit. A network administrator enables AutoQoS on a PPP link that is currently active. Once AutoQoS is enabled the link goes down. What should the administrator do to correct this problem? Disable multilink on the PPP connection. Decrease the multilink threshold value to allow AutoQoS to run. Change the encapsulation to HDLC because AutoQoS does not support PPP. Investigate the configured bandwidth on the PPP link to ensure it is sufficient, then remove and reapply the AutoQoS configuration. 11. A network administrator keeps receiving %SYS-2-MALLOCFAIL console messages. Further investigation reveals that the buffer pool continues to grow. The CCO knowledge base identified the cause of the problem as a result of a buffer memory leak due to an IOS software bug. What should the administrator do to rectify this problem? Reload the router. Reinstall older Cisco IOS software. Upgrade the Cisco IOS software to a version that fixes the issue. Power down the router and wait a few minutes before reloading it.

Change the configuration register settings to bypass the loading of the IOS. Change the configuration register settings to bypass the loading of the startup configuration file. 12.Refer to the exhibit. A network administrator is troubleshooting the switching path on a router. Based on the exhibited output, what can be concluded? Cisco Express Forwarding (CEF) has been implemented. Fast switching has been enabled. Process switching has been enabled. Switching has been disabled. 13. A network administrator plans to implement QoS in the network by using the Cisco AutoQoS tool. What should be done in the first phase of the automation process? In order to apply QoS policies, each interface should be configured with the auto qos command. Cisco Express Forwarding should be disabled on each target interface by the use of the no ip cef command. The network device should be configured to capture network traffic statistics via the use of the auto discovery qos interface configuration command. Via the use of the ip nbar protocol-discovery command, each interface should be configured to gather information about the applications that are known to NBAR. 14.Refer to the exhibit. What can be determined about the operation of interface FastEthernet 0/2? It is connected to a hub. It is operating within acceptable limits. It is carrying 802.1Q formatted frames. It has a duplex mismatch with the connected device. 15.Refer to the exhibit. What can be determined from the exhibited output? There is a physical layer problem. The interface is performing normally. The Frame Relay PVC is not established. There is an unacceptable level of input errors. 16. What are three indicators of a cabling issue on a switch? (Choose three.) alignment error excessive collisions giant frames invalid frame size late collisions transmit error 17.Refer to the exhibit. A network administrator has noticed that the IP SLA probe did not run as expected. What should the administrator do to correct this problem? Adjust the clock frequency on R1. Configure the router as a stratum 1 time source. Remove the forever keyword from the configuration. Configure NTP on the router to point to a different time source.

18.Refer to the exhibit. Based on the output of the show interfaces command, which two statements are true? (Choose two.) The interface is currently shutdown. The interface is displaying symptoms of a buffer leak. This is an example of a wedged interface. The interface has been configured with the no ip route-cache command. The serial interface is being subjected to a denial of service (DoS) attack. 19. A network administrator wishes to use debug commands to observe how a router processes each individual packet on an interface. Which packet switching solution should be implemented on the interface to accomplish this task? Enable Cisco Express Forwarding (CEF) using the ip cef comand. Enable Cisco Express Forwarding (CEF) using the no ip cef command. Enable fast switching using the ip route-cache command. Enable fast switching using the no ip route-cache command. Enable process switching using the ip route-cache command. Enable process switching using the no ip route-cache command. 20. Which three Cisco packet switching methods must a network administrator be familiar with in order to troubleshoot a router performance issue that is related to the switching path? (Choose three.) autonomous switching Cisco Express Forwarding (CEF) fast switching optimum switching process switching silicon switching
2.Which of the following is not used to baseline application traffic?

a. NetFlow b. SLB c. NBAR Protocol Discovery d. IP SLAs

3.Which of the following is not a NetFlow key field?

a. Source IP Address b. Layer 4 Source Port c. ToS Byte (DSCP) d. TTL e. Input Interface
4.Which of the following commands displays the NetFlow statistics?

a. show ip cache flow b. show ip flow ingress c. show netflow stats d. show ip netflow statistics

6.Based on the output of the commands displayed in Example 7-69, which of the following statements istrue?

a. There is a problem because the number of FCS errors in relation to the number of inputpackets is too high. b. There is a problem because the number of FCS errors in relation to the number of output packets is too high. c. You cannot tell whether there is a problem without knowing the duplex mode. FCS errors are normal on half-duplex Ethernet. d. You cannot tell whether there is a problem without knowing when the counters were cleared. e. There is no problem. The number of FCS errors is within acceptable boundaries.
8.Which two of the following hardware components can affect the switch packet forwarding performance?

a. DRAM b. FLASH c. TCAM d. Console e. Interface hardware

9.Which three of the following types of information can be programmed into a switch TCAM?

a. IP Version 4 unicast routes b. Access lists c. IPS signatures d. IP Version 4 multicast routes e. NAT rules
11.Which three of following events could cause spikes in the CPU load of a switch?

a. An engineer executes the show tech-support command. b. A network management station polls the switch using SNMP to obtain the content of therouting table. c. The switch startup configuration is copied from NVRAM to a TFTP server. d. The OSPF process executes its SPF algorithm. e. An engineer logs in to the switch using Telnet.
12.Which two of the following are common symptoms of high CPU utilization?

a. Slow performance b. Many errors on the input interface c. Routing update problems d. Low percentages in the show processes CPU command output
13.Which two of the following are common causes of high CPU utilization?

a. High CPU utilization caused by different processes b. High CPU utilization caused by interface flaps c. High CPU utilization caused by a security issue d. Lack of an active routing protocol
14.Which of the following is a Cisco IOS tool for troubleshooting high CPU utilization?

a. show processes cpu b. show version c. show buffers d. show controllers

15.Which two of the following are memory-allocation failure symptoms?

a. Refused Telnet sessions b. Too many log messages c. No output from the show commands d. Slow performance in packet processing
16.Which three of the following are common memory problems?

a. Buffer-leak bug b. Memory-leak bug c. Routing problems d. Slow IGP convergence e. Security-related memory problems
17.Which of the following is a symptom of a buffer-leak problem?

a. Route processor buffer leaks b. Wedged interface c. System buffer leak d. SVI buffer leaks
18.Which two of the following should you check if you suspect issues with CEF switching?

a. ARP table and routing table b. Adjacency table and FIB table c. CLNS table and ARP table d. FIB table and GBRC table
19.What command should you use if you suspect performance problems related to IP switching?

a. show processes memory b. show processes cpu c. show processes switching d. show ip switching
20.Which three of the following are symptoms of buffer leak?

a. %SYS-2-MALLOCFAIL error messages. b. Packet drops on the router interfaces. c. Frequently router reload. d. show buffer command output indicates a buffer leak in some of the buffer pools.