Cisco Certified Support Technician (CCST) Networking 100-150 Practice Test 68
Question 670
The local support team reports: At the fictional Glenhaven Council while checking a service ticket, the team observes: A security printer should be reachable only on VLAN 40 but its access port is assigned to VLAN 10 and users cannot reach it at its planned subnet. What is the MOST specific underlying cause?
- Incorrect access-port VLAN assignment places the endpoint in a different Layer 2 segment.
- The diagram assigns endpoint copper runs to switch access interfaces rather than an administrative console connection.
- Static routes require valid reachable next-hop information or an appropriate output interface.
- An absent link indicator can indicate a physical connection or disabled-interface condition prior to DHCP negotiation.
Explanation
Correct Answer
A:Correct. This mechanism fits the observed network symptom at the fictional Glenhaven Council: Incorrect access-port VLAN assignment places the endpoint in a different Layer 2 segment. The corresponding remedy is “Correct the printer's switch port to the documented access VLAN and verify its address scope.”. Confirmation: The port displays VLAN 40 and the printer reaches its intended gateway.
Incorrect Answers
B:That cause belongs to a different case: A wiring plan shows workstation cable runs terminating on patch-panel ports that should connect to a local access switch, but the installer jumps those ports directly into an unrelated WAN router console. The observed fictional Glenhaven Council condition is specifically explained by “Incorrect access-port VLAN assignment places the endpoint in a different Layer 2 segment.”.
C:That cause belongs to a different case: A router can reach an upstream router but cannot route to a downstream branch because its route points at an unrelated unreachable next-hop IP. The observed fictional Glenhaven Council condition is specifically explained by “Incorrect access-port VLAN assignment places the endpoint in a different Layer 2 segment.”.
D:That cause belongs to a different case: A field worker sees no link light on an attached Ethernet port and configures a new DHCP scope before checking the cable. The observed fictional Glenhaven Council condition is specifically explained by “Incorrect access-port VLAN assignment places the endpoint in a different Layer 2 segment.”.
Question 671
The technician must verify the following scenario: At the fictional Glenhaven Council while checking a service ticket, the team observes: A security printer should be reachable only on VLAN 40 but its access port is assigned to VLAN 10 and users cannot reach it at its planned subnet. The approved corrective action is: “Correct the printer's switch port to the documented access VLAN and verify its address scope.” Which result BEST demonstrates success?
- The host reaches off-subnet services after the documented gateway failover mechanism operates.
- Port activity indications correlate with test traffic while interface error counters remain acceptable.
- The SFP is recognized and the correct patch lead brings the uplink into link-up state.
- The port displays VLAN 40 and the printer reaches its intended gateway.
Explanation
Correct Answer
D:Correct. This is the required observable acceptance evidence for “Correct the printer's switch port to the documented access VLAN and verify its address scope.” at the fictional Glenhaven Council. It demonstrates correction of the original cause: Incorrect access-port VLAN assignment places the endpoint in a different Layer 2 segment.
Incorrect Answers
A:That result is evidence for a separate corrective action, “Validate the approved gateway availability mechanism and host default-gateway address.”. It does not establish the intended outcome “The port displays VLAN 40 and the printer reaches its intended gateway.” for the fictional Glenhaven Council case.
B:That result is evidence for a separate corrective action, “Identify the specific port's link/activity LED behavior in its documented status guide.”. It does not establish the intended outcome “The port displays VLAN 40 and the printer reaches its intended gateway.” for the fictional Glenhaven Council case.
C:That result is evidence for a separate corrective action, “Install an approved SFP transceiver matching the cable and link speed.”. It does not establish the intended outcome “The port displays VLAN 40 and the printer reaches its intended gateway.” for the fictional Glenhaven Council case.
Question 672
A change reviewer considers: At the fictional Glenhaven Council while checking a service ticket, the team observes: A security printer should be reachable only on VLAN 40 but its access port is assigned to VLAN 10 and users cannot reach it at its planned subnet. During “Correct the printer's switch port to the documented access VLAN and verify its address scope.”, which precaution MOST specifically prevents a related risk?
- Do not describe stack identification lights as generic link-speed meters.
- Do not infer a port's VLAN role solely from the patch cable's color.
- Do not change the printer IP to mask an incorrect access VLAN assignment.
- Do not assume USB and serial WAN ports are interchangeable because both are called serial in casual speech.
Explanation
Correct Answer
C:Correct. This precaution prevents a second fault while applying “Correct the printer's switch port to the documented access VLAN and verify its address scope.” at the fictional Glenhaven Council. The required protection is “Do not change the printer IP to mask an incorrect access VLAN assignment.”; success still requires “The port displays VLAN 40 and the printer reaches its intended gateway.”.
Incorrect Answers
A:This caution is appropriate for a separate failure pattern: A technician photographs a stack member LED and labels it a line-rate speed indicator on a switch model with separate stacking status. The principal adjacent risk here is controlled by “Do not change the printer IP to mask an incorrect access VLAN assignment.”.
B:This caution is appropriate for a separate failure pattern: A topology shows a printer on a user access port and a distribution trunk between switches; the worker cables the printer into the inter-switch trunk's far end. The principal adjacent risk here is controlled by “Do not change the printer IP to mask an incorrect access VLAN assignment.”.
D:This caution is appropriate for a separate failure pattern: A remote site uses a legacy serial WAN interface but a technician attaches a modern USB flash-memory cable expecting it to carry the circuit. The principal adjacent risk here is controlled by “Do not change the printer IP to mask an incorrect access VLAN assignment.”.
Question 673
During entry-level network support, consider: At the fictional Beacon Arts School after a user reports a recurring problem, the team observes: A learner claims a switch broadcasts every known-unicast Ethernet frame to all active ports like a basic repeater hub. Which action MOST directly resolves the reported issue?
- Identify the console jack and attach a compatible USB or serial console adapter as specified.
- Verify the MAC table and observe that known-unicast traffic follows the mapped port.
- Follow the documented boot interval and collect final system LED state before escalation.
- Check the host's subnet mask and local neighbor resolution for the directly connected target.
Explanation
Correct Answer
B:Correct. In the fictional Beacon Arts School case, A learning switch forwards known unicasts toward the learned destination MAC port, not every port. The specified corrective action, “Verify the MAC table and observe that known-unicast traffic follows the mapped port.”, directly targets that condition. Evidence of resolution: A controlled capture confirms uninvolved ports do not receive ordinary known-unicast traffic.
Incorrect Answers
A:That action addresses a different network issue: A work order specifies a dedicated console cable from a notebook to a switch for initial setup but the tech plugs into the switch's user-data uplink instead. The present fictional Beacon Arts School finding instead needs “Verify the MAC table and observe that known-unicast traffic follows the mapped port.”, verified by “A controlled capture confirms uninvolved ports do not receive ordinary known-unicast traffic.”.
C:That action addresses a different network issue: A router is still booting but a trainee marks an unusual transient system LED as a persistent failure before the startup interval ends. The present fictional Beacon Arts School finding instead needs “Verify the MAC table and observe that known-unicast traffic follows the mapped port.”, verified by “A controlled capture confirms uninvolved ports do not receive ordinary known-unicast traffic.”.
D:That action addresses a different network issue: A host sees another device on the same 192.168.7.0/24 segment and sends all packets to its gateway rather than using local neighbor resolution. The present fictional Beacon Arts School finding instead needs “Verify the MAC table and observe that known-unicast traffic follows the mapped port.”, verified by “A controlled capture confirms uninvolved ports do not receive ordinary known-unicast traffic.”.
Question 674
The local support team reports: At the fictional Beacon Arts School after a user reports a recurring problem, the team observes: A learner claims a switch broadcasts every known-unicast Ethernet frame to all active ports like a basic repeater hub. What is the MOST specific underlying cause?
- A learning switch forwards known unicasts toward the learned destination MAC port, not every port.
- A device USB port is commonly for compatible peripherals or storage, not automatically a switched network port.
- Fiber transceiver ports require matching optical connectors and media, not telephone copper leads.
- Off-subnet packets depend on a functioning local next-hop link and gateway.
Explanation
Correct Answer
A:Correct. This mechanism fits the observed network symptom at the fictional Beacon Arts School: A learning switch forwards known unicasts toward the learned destination MAC port, not every port. The corresponding remedy is “Verify the MAC table and observe that known-unicast traffic follows the mapped port.”. Confirmation: A controlled capture confirms uninvolved ports do not receive ordinary known-unicast traffic.
Incorrect Answers
B:That cause belongs to a different case: A help desk operator inserts a flash drive into a switch USB port and assumes it has added a new Ethernet forwarding interface. The observed fictional Beacon Arts School condition is specifically explained by “A learning switch forwards known unicasts toward the learned destination MAC port, not every port.”.
C:That cause belongs to a different case: A fiber uplink terminates in an LC optical transceiver but the worker tries to use a telephone RJ-11 lead to connect the switches. The observed fictional Beacon Arts School condition is specifically explained by “A learning switch forwards known unicasts toward the learned destination MAC port, not every port.”.
D:That cause belongs to a different case: A PC sends traffic to a remote server but the gateway's Ethernet interface is down and the technician tries to edit only the server's application port. The observed fictional Beacon Arts School condition is specifically explained by “A learning switch forwards known unicasts toward the learned destination MAC port, not every port.”.
Question 675
The technician must verify the following scenario: At the fictional Beacon Arts School after a user reports a recurring problem, the team observes: A learner claims a switch broadcasts every known-unicast Ethernet frame to all active ports like a basic repeater hub. The approved corrective action is: “Verify the MAC table and observe that known-unicast traffic follows the mapped port.” Which result BEST demonstrates success?
- The observed physical topology matches the approved drawing and no uncontrolled Layer 2 loop appears.
- The inventory records the routed Ethernet port and preserves the actual console interface identity.
- The SFP is recognized and the correct patch lead brings the uplink into link-up state.
- A controlled capture confirms uninvolved ports do not receive ordinary known-unicast traffic.
Explanation
Correct Answer
D:Correct. This is the required observable acceptance evidence for “Verify the MAC table and observe that known-unicast traffic follows the mapped port.” at the fictional Beacon Arts School. It demonstrates correction of the original cause: A learning switch forwards known unicasts toward the learned destination MAC port, not every port.
Incorrect Answers
A:That result is evidence for a separate corrective action, “Follow the documented switch uplink topology and confirm approved spanning-tree or redundancy settings.”. It does not establish the intended outcome “A controlled capture confirms uninvolved ports do not receive ordinary known-unicast traffic.” for the fictional Beacon Arts School case.
B:That result is evidence for a separate corrective action, “Read the device port legend and interface status to distinguish Ethernet from console service.”. It does not establish the intended outcome “A controlled capture confirms uninvolved ports do not receive ordinary known-unicast traffic.” for the fictional Beacon Arts School case.
C:That result is evidence for a separate corrective action, “Install an approved SFP transceiver matching the cable and link speed.”. It does not establish the intended outcome “A controlled capture confirms uninvolved ports do not receive ordinary known-unicast traffic.” for the fictional Beacon Arts School case.
Question 676
A change reviewer considers: At the fictional Beacon Arts School after a user reports a recurring problem, the team observes: A learner claims a switch broadcasts every known-unicast Ethernet frame to all active ports like a basic repeater hub. During “Verify the MAC table and observe that known-unicast traffic follows the mapped port.”, which precaution MOST specifically prevents a related risk?
- Do not assume every available Ethernet jack supplies PoE.
- Do not confuse an Ethernet traffic uplink with a local serial console path.
- Do not describe a learning switch as a hub that repeats every unicast frame.
- Do not expect ordinary Layer 2 switching alone to route packets to a different IP subnet.
Explanation
Correct Answer
C:Correct. This precaution prevents a second fault while applying “Verify the MAC table and observe that known-unicast traffic follows the mapped port.” at the fictional Beacon Arts School. The required protection is “Do not describe a learning switch as a hub that repeats every unicast frame.”; success still requires “A controlled capture confirms uninvolved ports do not receive ordinary known-unicast traffic.”.
Incorrect Answers
A:This caution is appropriate for a separate failure pattern: A PoE access point is shown on port Gi1/0/12 but the technician patches it into a non-PoE port and it stays dark. The principal adjacent risk here is controlled by “Do not describe a learning switch as a hub that repeats every unicast frame.”.
B:This caution is appropriate for a separate failure pattern: A work order specifies a dedicated console cable from a notebook to a switch for initial setup but the tech plugs into the switch's user-data uplink instead. The principal adjacent risk here is controlled by “Do not describe a learning switch as a hub that repeats every unicast frame.”.
D:This caution is appropriate for a separate failure pattern: A workstation can reach 192.168.1.50 on its own /24 but cannot reach 192.168.2.50 and has no configured default gateway. The principal adjacent risk here is controlled by “Do not describe a learning switch as a hub that repeats every unicast frame.”.
Question 677
During entry-level network support, consider: At the fictional Stonewater Manufacturing during a physical cabling audit, the team observes: A switch's port-security list blocks an unknown device MAC, but the technician removes all VLAN segmentation and calls the result normal switching. Which action MOST directly resolves the reported issue?
- Repatch the AP cable to the documented approved PoE-capable access port.
- Inspect the authorized MAC policy and address the device identity or approved port-security limit.
- Check the port roles and attach user workstations to approved front-panel switch access ports.
- Restore the gateway's link and verify the host can reach its local router before testing the remote service.
Explanation
Correct Answer
B:Correct. In the fictional Stonewater Manufacturing case, MAC address filtering or port-security enforcement is an access control separate from VLAN membership. The specified corrective action, “Inspect the authorized MAC policy and address the device identity or approved port-security limit.”, directly targets that condition. Evidence of resolution: The authorized device is admitted and unauthorized MACs remain blocked within the planned VLAN.
Incorrect Answers
A:That action addresses a different network issue: A PoE access point is shown on port Gi1/0/12 but the technician patches it into a non-PoE port and it stays dark. The present fictional Stonewater Manufacturing finding instead needs “Inspect the authorized MAC policy and address the device identity or approved port-security limit.”, verified by “The authorized device is admitted and unauthorized MACs remain blocked within the planned VLAN.”.
C:That action addresses a different network issue: A device has both a dedicated management Ethernet jack and ordinary switched data ports, but an installer uses the management jack for end-user PC access. The present fictional Stonewater Manufacturing finding instead needs “Inspect the authorized MAC policy and address the device identity or approved port-security limit.”, verified by “The authorized device is admitted and unauthorized MACs remain blocked within the planned VLAN.”.
D:That action addresses a different network issue: A PC sends traffic to a remote server but the gateway's Ethernet interface is down and the technician tries to edit only the server's application port. The present fictional Stonewater Manufacturing finding instead needs “Inspect the authorized MAC policy and address the device identity or approved port-security limit.”, verified by “The authorized device is admitted and unauthorized MACs remain blocked within the planned VLAN.”.
Question 678
The local support team reports: At the fictional Stonewater Manufacturing during a physical cabling audit, the team observes: A switch's port-security list blocks an unknown device MAC, but the technician removes all VLAN segmentation and calls the result normal switching. What is the MOST specific underlying cause?
- MAC address filtering or port-security enforcement is an access control separate from VLAN membership.
- Mode-selectable switch LED indicators must be interpreted in the selected mode shown by the device.
- A console port provides device-management terminal access rather than ordinary switched Ethernet service.
- A host's configured next hop must remain reachable, potentially through an approved first-hop redundancy design.
Explanation
Correct Answer
A:Correct. This mechanism fits the observed network symptom at the fictional Stonewater Manufacturing: MAC address filtering or port-security enforcement is an access control separate from VLAN membership. The corresponding remedy is “Inspect the authorized MAC policy and address the device identity or approved port-security limit.”. Confirmation: The authorized device is admitted and unauthorized MACs remain blocked within the planned VLAN.
Incorrect Answers
B:That cause belongs to a different case: A switch displays several selectable LED modes and a technician reads a power-over-Ethernet status LED as though it were showing duplex. The observed fictional Stonewater Manufacturing condition is specifically explained by “MAC address filtering or port-security enforcement is an access control separate from VLAN membership.”.
C:That cause belongs to a different case: A technician connects an Ethernet patch lead to the blue-labelled console jack and wonders why no data-link address appears on the switch uplink. The observed fictional Stonewater Manufacturing condition is specifically explained by “MAC address filtering or port-security enforcement is an access control separate from VLAN membership.”.
D:That cause belongs to a different case: A network has a redundant router and a failed primary gateway but the host points to a single unavailable default gateway IP. The observed fictional Stonewater Manufacturing condition is specifically explained by “MAC address filtering or port-security enforcement is an access control separate from VLAN membership.”.
Question 679
The technician must verify the following scenario: At the fictional Stonewater Manufacturing during a physical cabling audit, the team observes: A switch's port-security list blocks an unknown device MAC, but the technician removes all VLAN segmentation and calls the result normal switching. The approved corrective action is: “Inspect the authorized MAC policy and address the device identity or approved port-security limit.” Which result BEST demonstrates success?
- Optical link and receive levels become healthy on both switch ports.
- Hosts in distinct VLAN subnets exchange authorized IP traffic via the L3 switch.
- Interface status and a test route confirm that the physical switch-to-router link exists.
- The authorized device is admitted and unauthorized MACs remain blocked within the planned VLAN.
Explanation
Correct Answer
D:Correct. This is the required observable acceptance evidence for “Inspect the authorized MAC policy and address the device identity or approved port-security limit.” at the fictional Stonewater Manufacturing. It demonstrates correction of the original cause: MAC address filtering or port-security enforcement is an access control separate from VLAN membership.
Incorrect Answers
A:That result is evidence for a separate corrective action, “Attach the correct LC fiber patch cable to the compatible optical module.”. It does not establish the intended outcome “The authorized device is admitted and unauthorized MACs remain blocked within the planned VLAN.” for the fictional Stonewater Manufacturing case.
B:That result is evidence for a separate corrective action, “Identify the device's Layer 3 interfaces or SVIs and confirm inter-VLAN routing is enabled when required.”. It does not establish the intended outcome “The authorized device is admitted and unauthorized MACs remain blocked within the planned VLAN.” for the fictional Stonewater Manufacturing case.
C:That result is evidence for a separate corrective action, “Cable the access switch uplink to the router's identified Ethernet port from the approved diagram.”. It does not establish the intended outcome “The authorized device is admitted and unauthorized MACs remain blocked within the planned VLAN.” for the fictional Stonewater Manufacturing case.
Question 680
A change reviewer considers: At the fictional Stonewater Manufacturing during a physical cabling audit, the team observes: A switch's port-security list blocks an unknown device MAC, but the technician removes all VLAN segmentation and calls the result normal switching. During “Inspect the authorized MAC policy and address the device identity or approved port-security limit.”, which precaution MOST specifically prevents a related risk?
- Do not confuse an Ethernet traffic uplink with a local serial console path.
- Do not use a router console port as a general Ethernet access port.
- Do not disable unrelated VLAN boundaries merely to bypass a MAC-filtering denial.
- Do not assume every switch model lacks all routing capability.
Explanation
Correct Answer
C:Correct. This precaution prevents a second fault while applying “Inspect the authorized MAC policy and address the device identity or approved port-security limit.” at the fictional Stonewater Manufacturing. The required protection is “Do not disable unrelated VLAN boundaries merely to bypass a MAC-filtering denial.”; success still requires “The authorized device is admitted and unauthorized MACs remain blocked within the planned VLAN.”.
Incorrect Answers
A:This caution is appropriate for a separate failure pattern: A work order specifies a dedicated console cable from a notebook to a switch for initial setup but the tech plugs into the switch's user-data uplink instead. The principal adjacent risk here is controlled by “Do not disable unrelated VLAN boundaries merely to bypass a MAC-filtering denial.”.
B:This caution is appropriate for a separate failure pattern: A wiring plan shows workstation cable runs terminating on patch-panel ports that should connect to a local access switch, but the installer jumps those ports directly into an unrelated WAN router console. The principal adjacent risk here is controlled by “Do not disable unrelated VLAN boundaries merely to bypass a MAC-filtering denial.”.
D:This caution is appropriate for a separate failure pattern: A technician says a Layer 3 switch can only learn MAC addresses and is incapable of routing between configured VLAN interfaces. The principal adjacent risk here is controlled by “Do not disable unrelated VLAN boundaries merely to bypass a MAC-filtering denial.”.