CCNA Exam QuestionsBrowse all questions from this exam

CCNA Exam - Question 1369


SIMULATION

-

Guidelines

-

This is a lab item in which tasks will be performed on virtual devices

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

• All necessary pre-configurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Topology

-

Exam CCNA Question 1369

Tasks

-

Refer to the topology. All physical cabling is in place. Configure local user account, configure a Named ACL (NACL), and Dynamic Arp Inspection.

1. Configure a local account on Sw3 with telnet access only on virtual ports 0-4. Use the following information:

o Username: tech12

o Password: load1key

o Algorithm type: md5

o Privilege level: Exec mode

2. Configure and apply a NACL on R1 to control network traffic towards ISP:

o Name: ISP_ACL

o Restrict RFC 1918 class A and B addresses

o Allow all other addresses

3. A DHCP IP Pool is preconfigured on R1 for VLAN 5, and DHCP Snooping is configured on Sw2. Configure on Sw2:

o Dynamic Arp Inspection for VLAN 5

o Enable validation of the ARP packet destination MAC address

o Enable validation of the ARP packet source MAC address

o Enable validation of the ARP Packet IP address

Show Answer
Correct Answer:
Exam CCNA Question 1369

Discussion

3 comments
Sign in to comment
matass_md
Aug 15, 2024

Task 1 and Task 2 are incorrect : Task 1 username tech12 privilege 15 secret load1key line vty 0-4 transport input telnet Task 2 1918 RFC Class A 10.0.0.0/8 255.0.0.0 Class B 172.16.0.0/12 255.240.0.0 ip access-list standard ISP_ACL deny 10.0.0.0 0.255.255.255 deny 172.16.0.0 0.15.255.255 permit any interface e0/1 ip access-group ISP_ACL out ip arp inspection vlan 5 ip arp validate des-mac ip arp validate src-mac ip arp validate ip

MinSun600
Sep 12, 2024

task 1 you missed username tech12 privilege 15 the algorithm-type md5 secret load1key then sw3(config )#line vty 0 4 sw3(config-line)#login local sw3(config-line)# transport input telnet sw3(config-line)# exit sw3(config)# end wr memory

gten111
Oct 3, 2024

secret implies it's encrypted by md5

gten111
Oct 3, 2024

secret implies it's encrypted by md5

MinSun600
Apr 10, 2025

task 2 we're using the wild card mask not Subnet mask and you have to put login local on task 1

dasand
Jan 23, 2025

Task-1 SW3 conf t username tech12 privilege 15 algorithm-type md5 secret load1key line vty 0 4 login local transport input telnet end wr Task-2 R1 conf t ip access-list extended ISP_ACL deny 10.0.0.0 0 0.255.255.255 any deny 172.16.0.0 0.15.255.255 any permit ip any any exit interface e0/1 ip access-group ISP_ACL out end wr Task-3 SW2 conf t ip arp inspection vlan 5 ip arp inspection validate dst-mac ip arp inspection validate src-mac ip arp inspection validate ip end wr

MinSun600
Sep 12, 2024

task 2 the subnet masks are incorrect