Topic 05 Practice Test 1 covers Wireless Principles, Virtualization, and Switching Concepts for Cisco Certified Network Associate 200-301 CCNA and maps to objectives 1.11–1.13. For broader exam preparation, review the Cisco CCNA 200-301 Exam Dumps. Every option includes focused technical reasoning explaining both the networking concept and its fit to the scenario.
Question 1
At Cedar, Nia validates the Atlas cutover under change CHG-3960. Three adjacent 2.4-GHz access points in a U.S. office need 20-MHz channels with minimal co-channel-adjacent overlap. Which channel plan uses the standard nonoverlapping set? Choose ONE.
- Channels 3, 6, and 9
- Channels 1, 6, and 11
- Channels 1, 4, and 8
- Channels 2, 7, and 12
Correct Answer: B
Correct Answer
Answer B is correct because In the 2.4-GHz band, Cisco guidance identifies 1, 6, and 11 as the three nonoverlapping 20-MHz channels used for a basic channel reuse plan. Assigning those three channels to adjacent cells minimizes adjacent-channel overlap compared with plans that use intermediate channel numbers.
Incorrect Answers
Answer C is incorrect because Channels 4 and 8 overlap neighboring 20-MHz channels in the 2.4-GHz band. That plan creates adjacent-channel interference instead of using the established nonoverlapping set. This distinction is what an engineer would verify from the resulting device state.
Answer D is incorrect because These channel centers are offset from the standard 1/6/11 reuse plan and overlap other 2.4-GHz 20-MHz channels. They are not the nonoverlapping three-channel plan requested for the office. The correct choice aligns both with the configured state and with the resulting network behavior.
Answer A is incorrect because Although channel 6 is in the standard set, channels 3 and 9 overlap neighboring 20-MHz channels. The three APs would therefore contend with adjacent-channel energy rather than operating on separate nonoverlapping channels.
Question 2
The Helix migration at Juniper is in pre-check, and Mei owns ticket CHG-3973. Users can see several nearby wireless networks. The administrator wants staff to select the corporate WLAN by its human-readable network name. Which wireless identifier provides that name? Choose ONE.
- RF channel width
- Encryption cipher
- SSID
- BSSID
Correct Answer: C
Correct Answer
Answer C is correct because The service set identifier is the logical WLAN name advertised or configured for clients and is what users commonly see when selecting a wireless network. A corporate SSID therefore provides the human-readable identity requested in the scenario.
Incorrect Answers
Answer D is incorrect because A BSSID identifies a specific basic service set, commonly corresponding to an AP radio MAC address rather than the user-facing WLAN name. It is useful for distinguishing radios/cells but is not the requested human-readable network identifier.
Answer A is incorrect because Channel width describes how much radio spectrum a transmission occupies, such as 20 or 40 MHz. It affects RF operation and throughput but does not name the WLAN for users. This difference is important because the same device can treat otherwise similar values in different ways.
Answer B is incorrect because A cipher protects wireless frame confidentiality and integrity but is not the network name. Security and identification are separate properties, so the cipher cannot replace the SSID. The scenario tests that exact distinction as it would appear during a practical verification workflow.
Question 3
During Maple’s Orbit maintenance window, Maya performs the network acceptance test for CHG-3986. A wireless client moves behind several concrete walls and its received signal changes from -48 dBm to -78 dBm while channel utilization stays low. What most directly explains the weaker RF reading? Choose ONE.
- SSID mismatch
- MAC address aging
- VRF route separation
- Attenuation through obstacles
Correct Answer: D
Correct Answer
Answer D is correct because RF energy is reduced as it propagates through distance and materials such as concrete; more-negative dBm values represent weaker received power. The large drop in received signal after moving behind walls is therefore consistent with attenuation.
Incorrect Answers
Answer A is incorrect because An SSID identifies the WLAN but does not physically reduce received RF power as a client moves behind obstacles. A mismatch could prevent association, but it would not explain the measured dBm change.
Answer B is incorrect because MAC aging removes inactive Layer 2 forwarding entries from a switch table after a timer expires. That forwarding-table behavior does not alter radio signal strength at the wireless receiver. The expected result follows from the device state and protocol semantics given in the question.
Answer C is incorrect because A VRF separates Layer 3 routing/forwarding tables on a network device. Routing-table separation has no direct effect on RF energy received through concrete walls. This choice aligns with both the protocol rule and the operational condition being tested.
Question 4
For ticket CHG-3999, Vikram is reviewing the Vector rollout at the Harbor site. An administrator wants wireless frames between clients and the access point to be protected from casual eavesdropping. Which wireless principle directly provides confidentiality for the over-the-air traffic? Choose ONE.
- Encryption
- SSID naming
- Channel selection
- MAC aging
Correct Answer: A
Correct Answer
Answer A is correct because Wireless encryption transforms protected frame contents so an observer without the appropriate key cannot simply read the traffic. That directly addresses confidentiality on the RF medium. The engineer must match the requested behavior, not just choose a value that is generally valid elsewhere.
Incorrect Answers
Answer B is incorrect because An SSID identifies a WLAN and helps clients select it. Changing or hiding the name does not cryptographically protect frame contents from interception. This criterion is what separates the correct operational result from the other plausible alternatives.
Answer C is incorrect because Choosing channels helps manage RF interference and capacity. It can improve reliability but does not make captured frame payloads confidential. The alternative would produce a different observable result during validation. This operational distinction is directly verifiable from the device state described in the scenario.
Answer D is incorrect because MAC aging manages stale forwarding-table entries on switches. It neither encrypts wireless traffic nor prevents an RF observer from capturing frames. The network device applies this rule consistently when processing the described configuration or traffic.
Question 5
Before Summit hands the Cascade service to operations, June must close verification item CHG-4012. A dense office experiences poor 2.4-GHz performance even though AP transmit power is adequate. Neighboring APs are configured on channels 1, 2, and 3. Which change best addresses the RF design problem? Choose ONE.
- Place all AP management interfaces in one VRF
- Move the APs to a reuse plan based on channels 1, 6, and 11
- Rename each SSID to a shorter value
- Increase MAC address aging time
Correct Answer: B
Correct Answer
Answer B is correct because Channels 1, 2, and 3 overlap heavily in 2.4 GHz, so neighboring cells contend with and interfere with one another. Using the standard nonoverlapping 1/6/11 set reduces adjacent-channel overlap and better matches enterprise RF design guidance.
Incorrect Answers
Answer C is incorrect because SSID length does not change the RF channel overlap between adjacent access points. The performance problem is caused by channel placement, not by the human-readable WLAN names. The scenario’s verification goal depends on this precise protocol distinction.
Answer D is incorrect because MAC aging affects wired Layer 2 forwarding-table retention. Changing that timer does not separate overlapping 2.4-GHz RF channels. The outcome is determined by the stated addressing or forwarding condition rather than by naming convention.
Answer A is incorrect because A VRF controls Layer 3 routing-table separation for IP traffic. It does not change the spectrum used by AP radios or eliminate adjacent-channel interference. That makes the option unsuitable for this specific verification goal even if it is valid in another context.
Question 6
A peer review for Junction at Canyon assigns Talia the evidence check recorded as CHG-4025. A data-center team wants several independent guest operating systems to run on one physical server while each guest receives virtual CPU, memory, disk, and NIC resources. Which virtualization model best fits? Choose ONE.
- MAC address aging
- A wireless SSID
- Server virtualization with virtual machines
- A single Layer 2 VLAN
Correct Answer: C
Correct Answer
Answer C is correct because A hypervisor abstracts the physical server and presents isolated virtual hardware to multiple virtual machines, each of which can run its own guest operating system. That directly matches the requirement for independent guest OS instances sharing one physical host.
Incorrect Answers
Answer D is incorrect because A VLAN partitions a switched Layer 2 broadcast domain but does not create virtual CPUs, memory, disks, or guest operating systems. Network segmentation alone cannot satisfy the server-compute virtualization requirement. This matters during verification because the configured value determines the device behavior being tested.
Answer A is incorrect because MAC aging controls how long dynamic Layer 2 forwarding entries remain in a switch table. It has no role in creating isolated guest operating systems on a physical server. The operational distinction is visible in the resulting interface, address, or forwarding state.
Answer B is incorrect because An SSID identifies a wireless LAN to clients. It can map users into a network but does not virtualize server hardware or operating systems. A correct implementation must satisfy that property rather than a superficially similar one.
Question 7
The Riverbend branch is staging Quantum; Amina is completing the implementation checklist for CHG-4038. A development platform needs lightweight isolated application environments that start quickly and share the host operating system kernel instead of booting a separate guest OS for each instance. Which technology matches the requirement? Choose ONE.
- Traditional virtual machines only
- VRF instances
- Ethernet MAC tables
- Containers
Correct Answer: D
Correct Answer
Answer D is correct because Containers isolate application processes and dependencies while sharing the host kernel, which reduces overhead compared with a full guest operating system per workload. That lightweight execution model matches the stated startup and kernel-sharing requirements.
Incorrect Answers
Answer A is incorrect because A VM commonly includes a separate guest operating system above a hypervisor. That offers strong OS-level isolation but does not match the requirement to share the host kernel and avoid a guest OS per instance.
Answer B is incorrect because VRFs create separate Layer 3 routing and forwarding tables within a network device. They isolate network routing domains rather than packaging application processes and dependencies. The requested outcome follows from the protocol rule being exercised in this scenario.
Answer C is incorrect because MAC tables map destination MAC addresses to switch ports for Layer 2 forwarding. They provide switching state, not application workload isolation. This is the relevant behavior an administrator would confirm before accepting the change.
Question 8
As part of Xray readiness at Lakeside, Marco investigates the condition logged in CHG-4051. A router must support two tenants that both use 10.10.10.0/24, and each tenant needs an independent Layer 3 routing table on the same physical device. Which feature should be used? Choose ONE.
- VRF
- SSID
- MAC address aging
- Channel bonding
Correct Answer: A
Correct Answer
Answer A is correct because Virtual Routing and Forwarding creates separate routing and forwarding table instances on one Layer 3 device and can allow overlapping IP address space in different routing domains. That directly lets the two tenants use the same prefix without merging their routes.
Incorrect Answers
Answer B is incorrect because An SSID identifies a wireless LAN and may map wireless clients to other network constructs. It does not by itself create independent Layer 3 routing tables for overlapping tenant prefixes. That distinction prevents a valid-looking alternative from meeting the actual requirement.
Answer C is incorrect because MAC aging removes inactive Layer 2 forwarding entries after a timer. It cannot isolate overlapping Layer 3 routes or create tenant-specific routing tables. The operational outcome follows directly from the configuration and protocol behavior described here.
Answer D is incorrect because Wireless channel bonding combines spectrum to increase potential PHY throughput. It is an RF capacity feature and has no connection to routing-table virtualization. The device evaluates this property directly when it performs the relevant lookup or interface operation.
Question 9
Operations at Westfield asks Elena to validate Engine before approving change CHG-4064. A packet enters an interface assigned to VRF BLUE. The router also has a global route to the destination, but VRF BLUE has no matching route. What virtualization principle explains why the global route is not automatically used? Choose ONE.
- SSID encryption blocks the route
- VRFs maintain separate routing and forwarding contexts
- Unknown unicasts are always flooded across VRFs
- Containers replace routing tables
Correct Answer: B
Correct Answer
Answer B is correct because A VRF associates interfaces with an independent routing/forwarding table, so a packet arriving in that context is looked up against the VRF unless explicit route leaking is configured. The global table is therefore not automatically consulted merely because it has a route.
Incorrect Answers
Answer C is incorrect because Unknown-unicast flooding is a Layer 2 behavior within a VLAN when a destination MAC is absent from the table. It does not cause Layer 3 packets to ignore VRF routing-table separation.
Answer D is incorrect because Containers isolate application workloads and do not inherently merge or replace router forwarding contexts. They cannot explain why a VRF lookup stays separate from the global routing table. The scenario therefore hinges on the specific protocol behavior, not merely on a plausible value.
Answer A is incorrect because Wireless encryption protects frames over the RF medium. It has no role in selecting a router forwarding table for a packet already received on a VRF interface. This is the property an engineer would confirm during an implementation or troubleshooting check.
Question 10
The Drift deployment at Eastgate has reached its verification gate; Mateo is handling CHG-4077. A company consolidates four legacy application servers onto one high-capacity host. Each legacy application must keep its existing operating system and be managed independently. Which benefit of server virtualization is being used? Choose ONE.
- The switch floods every destination MAC
- The AP advertises multiple SSIDs
- Multiple isolated virtual machines can share one physical server
- All applications must share one kernel namespace
Correct Answer: C
Correct Answer
Answer C is correct because Server virtualization abstracts CPU, memory, storage, and network resources so several VMs can coexist while retaining separate guest operating systems. That enables consolidation without forcing the legacy applications into one shared OS instance.
Incorrect Answers
Answer D is incorrect because Sharing one host kernel is characteristic of container-style isolation, not a requirement for independent legacy guest operating systems. It would conflict with the stated need to preserve each application server operating system.
Answer A is incorrect because Unknown-unicast flooding is a switching fallback when a destination MAC is not learned. It does not consolidate compute workloads or preserve separate guest operating systems. The relevant state can be verified from the protocol information and configuration described here.
Answer B is incorrect because Multiple SSIDs can provide distinct WLANs on wireless infrastructure. That is network-service virtualization, not server consolidation of independent operating systems. The alternative fails because the operational result differs from what the scenario explicitly requires.
Question 11
At the Northpoint office, Salim checks a Keystone design assumption while processing CHG-4090. A switch receives a frame on Gi1/0/7 from source MAC 00:11:22:33:44:55 in VLAN 30. What information does the switch dynamically learn from this frame? Choose ONE.
- Destination MAC is reachable through Gi1/0/7
- The IPv4 default gateway is Gi1/0/7
- The SSID for VLAN 30 is Gi1/0/7
- Source MAC 00:11:22:33:44:55 is reachable through Gi1/0/7 in VLAN 30
Correct Answer: D
Correct Answer
Answer D is correct because Ethernet switches populate their MAC address tables from the source MAC address of received frames, associating that source with the ingress port and VLAN. The received frame therefore teaches the switch where to send future frames destined to that source MAC.
Incorrect Answers
Answer A is incorrect because A switch does not learn a destination location merely because a frame naming that destination arrived on another port. Dynamic learning is based on the source MAC observed on the ingress interface.
Answer B is incorrect because Default gateways are Layer 3 next-hop addresses configured on hosts or represented by routed interfaces. A Layer 2 source-MAC observation does not create a default-gateway setting. The protocol rule makes this distinction observable during configuration validation and troubleshooting.
Answer C is incorrect because An SSID is a wireless LAN identifier and is not learned from an Ethernet frame source address. The switching decision here concerns MAC-to-port learning in a VLAN, not wireless naming. The alternative would produce a different observable result during validation.
Question 12
Change CHG-4103 covers the Relay network at Southridge, where Omar is the assigned verifier. A switch in VLAN 20 has a valid MAC-table entry mapping destination 00:aa:bb:cc:dd:ee to Gi1/0/18. A frame for that destination arrives on Gi1/0/4. What will the switch normally do? Choose ONE.
- Forward the frame only toward Gi1/0/18
- Flood the frame to every forwarding port in VLAN 20
- Route the frame using the default gateway
- Drop the frame because it arrived on Gi1/0/4
Correct Answer: A
Correct Answer
Answer A is correct because For a known unicast destination, the switch looks up the destination MAC in the VLAN-specific table and forwards the frame out the associated port. Because the destination is already learned on Gi1/0/18, flooding is unnecessary.
Incorrect Answers
Answer B is incorrect because Flooding is used for certain broadcast, multicast, or unknown-unicast conditions rather than for a valid known-unicast entry. The switch already knows the destination port, so sending copies everywhere would be unnecessary.
Answer C is incorrect because Same-VLAN Layer 2 forwarding uses the MAC table and does not require a router simply because the frame traverses a switch. The destination is known locally at Layer 2. The described state leads to this result when the device processes the configuration or traffic.
Answer D is incorrect because A frame is not dropped merely because its ingress port differs from the learned destination port. That difference is normal and tells the switch which egress interface to use. The correct choice aligns both with the configured state and with the resulting network behavior.
Question 13
At Pinecrest, Rosa validates the Yonder cutover under change CHG-4116. A switch receives a unicast frame in VLAN 40, but the destination MAC address is not present in the VLAN 40 MAC table. What is the normal Layer 2 forwarding behavior? Choose ONE.
- Consult the DNS server for the MAC address
- Flood the frame out other forwarding ports in VLAN 40
- Send the frame to every port in every VLAN
- Discard every unknown unicast by default
Correct Answer: B
Correct Answer
Answer B is correct because When a unicast destination is unknown, the switch floods the frame within the same VLAN except back out the ingress port, allowing the destination to receive it if present. A reply then gives the switch an opportunity to learn the destination station as a source.
Incorrect Answers
Answer C is incorrect because VLANs define separate Layer 2 broadcast domains and MAC-table contexts. Unknown-unicast flooding stays within the frame VLAN rather than crossing all VLANs on the switch. This condition is observable in the resulting interface, addressing, or forwarding state.
Answer D is incorrect because Ordinary Ethernet switching normally floods an unknown unicast rather than discarding it outright. Dropping would prevent communication with a legitimate station whose MAC entry has not yet been learned or has aged out.
Answer A is incorrect because DNS resolves names to IP addresses and is not used by a switch to locate an unknown Layer 2 destination. The switch relies on flooding and subsequent source-MAC learning instead. This difference is important because the same device can treat otherwise similar values in different ways.
Question 14
The Frontier migration at Brookhaven is in pre-check, and Dario owns ticket CHG-4129. A workstation has been silent long enough for its dynamic MAC entry to age out. The next frame is destined to that workstation before the switch relearns it. What behavior should be expected? Choose ONE.
- The switch creates a new IPv4 route
- The switch changes the workstation SSID
- The destination is treated as unknown and the frame is flooded within the VLAN
- The old port mapping is retained permanently
Correct Answer: C
Correct Answer
Answer C is correct because Aged dynamic entries are removed from the MAC table; until the destination is learned again, the switch has no specific egress port for that MAC. The first subsequent unknown-unicast frame is therefore flooded within the VLAN, excluding the ingress port.
Incorrect Answers
Answer D is incorrect because Dynamic MAC entries are specifically designed to age out after inactivity unless configured as static. The scenario states the entry has expired, so the switch cannot keep using that stale mapping as if it were permanent.
Answer A is incorrect because MAC aging operates at Layer 2 and does not add entries to the IP routing table. The forwarding fallback is a Layer 2 flood, not creation of a Layer 3 route.
Answer B is incorrect because An SSID is a wireless service identifier and is not derived from wired MAC-table aging. Aging only changes whether the switch remembers the MAC-to-port association. The scenario tests that exact distinction as it would appear during a practical verification workflow.
Question 15
During Oakmont’s Matrix maintenance window, Iris performs the network acceptance test for CHG-4142. A frame arrives on a switch port, and the destination MAC address is already learned on the same ingress port. What should a Layer 2 switch normally do with that frame? Choose ONE.
- Flood it to all other VLANs
- Send it to the default gateway
- Replace the destination MAC with the source MAC
- Filter it instead of forwarding it back out the same port
Correct Answer: D
Correct Answer
Answer D is correct because A switch uses the destination MAC table entry to select an egress port; when the known destination is on the same port as the source segment, forwarding the frame back to that port is unnecessary. Filtering avoids an invalid same-port retransmission.
Incorrect Answers
Answer A is incorrect because VLAN boundaries isolate Layer 2 forwarding domains, and a known same-port destination is not an unknown-unicast event. Flooding other VLANs would violate normal switching behavior. The expected result follows from the device state and protocol semantics given in the question.
Answer B is incorrect because A known same-segment Layer 2 destination does not require Layer 3 routing. The switch can decide locally from its MAC table and should not redirect the frame to a gateway. The engineer must match the requested behavior, not just choose a value that is generally valid elsewhere.
Answer C is incorrect because Layer 2 switching forwards frames according to learned addresses; it does not rewrite the destination address merely because ingress and learned egress match. The correct behavior is filtering, not address substitution.
Question 16
For ticket CHG-4155, Kiran is reviewing the Transit rollout at the Redstone site. A warehouse has three overlapping 2.4-GHz cells and must select a nonoverlapping 20-MHz three-channel reuse plan. Which set should the RF engineer use? Choose ONE.
- Channels 1, 6, and 11
- Channels 1, 4, and 8
- Channels 2, 7, and 12
- Channels 3, 6, and 9
Correct Answer: A
Correct Answer
Answer A is correct because In the 2.4-GHz band, Cisco guidance identifies 1, 6, and 11 as the three nonoverlapping 20-MHz channels used for a basic channel reuse plan. Assigning those three channels to adjacent cells minimizes adjacent-channel overlap compared with plans that use intermediate channel numbers. In the For CHG-4155 Kiran validation, this distinction is directly relevant.
Incorrect Answers
Answer B is incorrect because Channels 4 and 8 overlap neighboring 20-MHz channels in the 2.4-GHz band. That plan creates adjacent-channel interference instead of using the established nonoverlapping set. This criterion is what separates the correct operational result from the other plausible alternatives.
Answer C is incorrect because These channel centers are offset from the standard 1/6/11 reuse plan and overlap other 2.4-GHz 20-MHz channels. They are not the nonoverlapping three-channel plan requested for the office. This condition is observable in the resulting interface, addressing, or forwarding state.
Answer D is incorrect because Although channel 6 is in the standard set, channels 3 and 9 overlap neighboring 20-MHz channels. The three APs would therefore contend with adjacent-channel energy rather than operating on separate nonoverlapping channels. In the For CHG-4155 Kiran validation, this distinction is directly relevant.
Question 17
Before Silverlake hands the Aperture service to operations, Imran must close verification item CHG-4168. A managed-services router must keep Customer A and Customer B in separate routing domains even though both customers use 192.168.50.0/24. Which virtualization feature provides separate forwarding tables? Choose ONE.
- Channel bonding
- VRF
- SSID
- MAC address aging
Correct Answer: B
Correct Answer
Answer B is correct because Virtual Routing and Forwarding creates separate routing and forwarding table instances on one Layer 3 device and can allow overlapping IP address space in different routing domains. That directly lets the two tenants use the same prefix without merging their routes. In the Before Silverlake Aperture validation, this distinction is directly relevant.
Incorrect Answers
Answer C is incorrect because An SSID identifies a wireless LAN and may map wireless clients to other network constructs. It does not by itself create independent Layer 3 routing tables for overlapping tenant prefixes. That behavior is consistent with the configuration evidence supplied in the question.
Answer D is incorrect because MAC aging removes inactive Layer 2 forwarding entries after a timer. It cannot isolate overlapping Layer 3 routes or create tenant-specific routing tables. The network device applies this rule consistently when processing the described configuration or traffic.
Answer A is incorrect because Wireless channel bonding combines spectrum to increase potential PHY throughput. It is an RF capacity feature and has no connection to routing-table virtualization. The outcome is determined by the stated addressing or forwarding condition rather than by naming convention.
Question 18
A peer review for Harrier at Greenfield assigns Jonas the evidence check recorded as CHG-4181. A newly connected printer sends no traffic before another host transmits a unicast frame to its MAC address. The switch has no destination entry for that MAC in VLAN 15. What happens? Choose ONE.
- Discard every unknown unicast by default
- Consult the DNS server for the MAC address
- Flood the frame out other forwarding ports in VLAN 40
- Send the frame to every port in every VLAN
Correct Answer: C
Correct Answer
Answer C is correct because When a unicast destination is unknown, the switch floods the frame within the same VLAN except back out the ingress port, allowing the destination to receive it if present. A reply then gives the switch an opportunity to learn the destination station as a source. In the A Harrier Greenfield validation, this distinction is directly relevant.
Incorrect Answers
Answer D is incorrect because VLANs define separate Layer 2 broadcast domains and MAC-table contexts. Unknown-unicast flooding stays within the frame VLAN rather than crossing all VLANs on the switch. That makes the option unsuitable for this specific verification goal even if it is valid in another context.
Answer A is incorrect because Ordinary Ethernet switching normally floods an unknown unicast rather than discarding it outright. Dropping would prevent communication with a legitimate station whose MAC entry has not yet been learned or has aged out. In the A Harrier Greenfield validation, this distinction is directly relevant.
Answer B is incorrect because DNS resolves names to IP addresses and is not used by a switch to locate an unknown Layer 2 destination. The switch relies on flooding and subsequent source-MAC learning instead. This matters during verification because the configured value determines the device behavior being tested.
Question 19
The Hillcrest branch is staging Gemini; Anya is completing the implementation checklist for CHG-4194. A CI system needs hundreds of short-lived isolated build environments without booting a full guest operating system for each job. Which virtualization approach best matches that lightweight model? Choose ONE.
- Traditional virtual machines only
- VRF instances
- Ethernet MAC tables
- Containers
Correct Answer: D
Correct Answer
Answer D is correct because Containers isolate application processes and dependencies while sharing the host kernel, which reduces overhead compared with a full guest operating system per workload. That lightweight execution model matches the stated startup and kernel-sharing requirements. In the The Hillcrest Gemini validation, this distinction is directly relevant.
Incorrect Answers
Answer A is incorrect because A VM commonly includes a separate guest operating system above a hypervisor. That offers strong OS-level isolation but does not match the requirement to share the host kernel and avoid a guest OS per instance. In the The Hillcrest Gemini validation, this distinction is directly relevant.
Answer B is incorrect because VRFs create separate Layer 3 routing and forwarding tables within a network device. They isolate network routing domains rather than packaging application processes and dependencies. The operational distinction is visible in the resulting interface, address, or forwarding state.
Answer C is incorrect because MAC tables map destination MAC addresses to switch ports for Layer 2 forwarding. They provide switching state, not application workload isolation. The protocol semantics make this the appropriate interpretation for the values shown.
Question 20
As part of Nova readiness at Fairview, Yusuf investigates the condition logged in CHG-4207. A frame enters Fa0/12 in VLAN 18 with source MAC 00:50:56:aa:01:02. Which dynamic MAC-table update should the switch make? Choose ONE.
- Source MAC 00:50:56:aa:01:02 is reachable through Fa0/12 in VLAN 18
- Destination MAC is reachable through Gi1/0/7
- The IPv4 default gateway is Gi1/0/7
- The SSID for VLAN 30 is Gi1/0/7
Correct Answer: A
Correct Answer
Answer A is correct because Ethernet switches populate their MAC address tables from the source MAC address of received frames, associating that source with the ingress port and VLAN. The received frame therefore teaches the switch where to send future frames destined to that source MAC. In the As Nova Fairview validation, this distinction is directly relevant.
Incorrect Answers
Answer B is incorrect because A switch does not learn a destination location merely because a frame naming that destination arrived on another port. Dynamic learning is based on the source MAC observed on the ingress interface. In the As Nova Fairview validation, this distinction is directly relevant.
Answer C is incorrect because Default gateways are Layer 3 next-hop addresses configured on hosts or represented by routed interfaces. A Layer 2 source-MAC observation does not create a default-gateway setting. This choice aligns with both the protocol rule and the operational condition being tested.
Answer D is incorrect because An SSID is a wireless LAN identifier and is not learned from an Ethernet frame source address. The switching decision here concerns MAC-to-port learning in a VLAN, not wireless naming. A correct implementation must satisfy that property rather than a superficially similar one.
