300-110 Practice Questions

HTTPS (Hypertext Transfer Protocol Secure) is the protocol designated to use TCP port 443. It is the secure version of HTTP, where communications are encrypted using Transport Layer Security (TLS) or its predecessor, Secure Sockets Layer (SSL). The Internet Assigned Numbers Authority (IANA), which governs global IP address allocation and other Internet protocol standards, has officially assigned port 443 for HTTPS traffic. This ensures that data exchanged between a user's web browser and a website is encrypted, protecting its confidentiality and integrity from eavesdropping or tampering.

A. HTTP: This protocol is used for unencrypted web communication and is assigned the well-known TCP port 80.

C. FTP: The File Transfer Protocol uses TCP port 21 for the control connection and typically port 20 for the data connection.

D. SMTP: The Simple Mail Transfer Protocol, used for sending email, operates on the well-known TCP port 25.

1. Internet Assigned Numbers Authority (IANA). (2023). Service Name and Transport Protocol Port Number Registry. IANA. Retrieved from https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml. The registry explicitly lists https with port number 443 for TCP.

2. Cisco Systems, Inc. (2018). TCP and UDP Ports Used by Cisco Software. In this document, under the "Commonly Used Ports" section, HTTPS is listed with TCP port 443. This is fundamental knowledge for configuring security features like Access Control Lists (ACLs) on Cisco devices. (Reference: Document ID 13790).

3. Kurose, J. F., & Ross, K. W. (2021). Computer Networking: A Top-Down Approach (8th ed.). Pearson. In Chapter 2, "Application Layer," the text specifies that "An HTTP server uses port 80, and an HTTPS server uses port 443." This is standard university-level courseware.

4. Postel, J. (1981). RFC 793: Transmission Control Protocol. Internet Engineering Task Force (IETF). Section 3.1, "Header Format," discusses the concept of source and destination ports, which are standardized by IANA for well-known services like HTTPS.

The primary function of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol is to create a secure, standardized tunnel between lightweight access points (APs) and a Wireless LAN Controller (WLC). This tunneling mechanism encapsulates both control and data traffic. The CAPWAP control tunnel (UDP port 5246) is used for managing, provisioning, and monitoring the APs. The CAPWAP data tunnel (UDP port 5247) is used to forward wireless client traffic from the AP to the WLC for processing in a centralized data forwarding model. This architecture allows for centralized management and policy enforcement across the wireless network.

A. Provide DNS services: DNS is a separate network service for name resolution. CAPWAP may use DNS to discover a controller, but it does not provide DNS services itself.

C. Assign IP addresses: IP address assignment is the function of a DHCP server. While a WLC can be configured as a DHCP server, this is not a function of the CAPWAP protocol.

D. Filter multicast traffic: Multicast traffic management is a feature implemented on the WLC, not a primary function of the CAPWAP protocol, which simply transports the traffic.

1. Official Vendor Documentation: Cisco Wireless LAN Controller Configuration Guide, Release 8.5, "Information About CAPWAP" section. This section states, "CAPWAP, which is based on LWAPP, is a standard, interoperable protocol that enables a controller to manage a collection of wireless access points. [...] The CAPWAP protocol encapsulates the data between the controller and the access point inside a new IP header."

2. Official Vendor Documentation: Enterprise Mobility 8.5 Design Guide, Chapter: "Unified Wireless Network Architecture," Section: "Split-MAC Architecture." This guide explains, "The CAPWAP protocol is the key component of the Cisco Unified Wireless Network Split-MAC architecture. CAPWAP defines the communication protocol between the WLC and the AP. It provides the control and data plane transport..."

3. Peer-reviewed Academic Publications: Calhoun, P., et al. (2009). RFC 5415: Control And Provisioning of Wireless Access Points (CAPWAP) Protocol Specification. IETF. Section 1, Introduction. The document states, "The protocol is designed to be flexible enough to support a variety of Access Point and Wireless Termination Point implementations. It accomplishes this by defining a generic encapsulation and transport mechanism." DOI: https://doi.org/10.17487/RFC5415

A router operates at Layer 3 (the Network Layer) of the OSI model. Its primary function is to forward data packets between different logical networks. To accomplish this, it uses Layer 3 addressing, such as IP addresses, to make path determination decisions and select the optimal route for traffic. This process of forwarding packets based on logical network addresses is the defining characteristic of a Layer 3 device.

A. Switch: A standard switch is a Layer 2 (Data Link) device that uses MAC addresses to forward frames within a single local area network (LAN).

C. Hub: A hub is a Layer 1 (Physical) device that simply repeats electrical signals received on one port to all other ports without any addressing intelligence.

D. Access Point: An access point is primarily a Layer 2 (Data Link) device that functions as a bridge, connecting wireless clients to a wired network using MAC addresses.

1. Cisco Systems, Inc. (2009). Internetworking Technology Handbook.

Chapter: OSI Model and TCP/IP Protocol Suite, Section: "Network Layer": This section explicitly states, "Network layer (Layer 3) ... Routers operate at this layer." It details how routers use logical addressing to route packets from a source to a destination network.

Section: "Data Link Layer": This section describes switches and bridges as Layer 2 devices.

Section: "Physical Layer": This section identifies hubs and repeaters as Layer 1 devices.

2. Odom, W. (2019). CCNA 200-301 Official Cert Guide, Volume 1. Cisco Press.

Chapter 2, "Fundamentals of TCP/IP Transport and Applications", Section: "The TCP/IP Network Layer": This chapter explains that the network layer uses routers to forward packets between networks. Table 2-3 explicitly lists "Router" as a device example for the Network Layer (Layer 3). In contrast, Table 2-4 lists "Switch, Wireless access point" as examples for the Data Link Layer (Layer 2).

3. Kurose, J. F., & Ross, K. W. (2017). Computer Networking: A Top-Down Approach (7th ed.). Pearson.

Chapter 4, "The Network Layer: Data Plane", Section 4.4, "What's Inside a Router?": This section provides a detailed description of a router's architecture and its fundamental role in processing packets at the network layer. It states, "a router's primary role is to forward datagrams from its input links to its output links," a core Layer 3 function.

A trunk port is a network interface configured to carry traffic for multiple VLANs simultaneously between network devices like switches, routers, or servers. To differentiate the traffic from various VLANs, frames are "tagged" with a VLAN identifier using a protocol such as IEEE 802.1Q. This mechanism allows a single physical link to act as a conduit for several logical VLANs, enabling network segmentation and efficient traffic management across an infrastructure.

A. Access: An access port is configured to belong to and carry traffic for only a single, specific VLAN.

C. Native: The native VLAN is a specific configuration on a trunk port that carries untagged traffic; it is a single VLAN, not a port type that carries multiple VLANs.

D. Management: The management VLAN is a logical designation for a single VLAN used for network device administration, not a port type for carrying multi-VLAN traffic.

1. Cisco Systems, Inc., "Configuring VLANs," Catalyst 9300 Series Switches, Cisco IOS XE Gibraltar 16.12.x - System Management Configuration Guide. In the "VLANs" section, it states, "A trunk is a point-to-point link between one or more Ethernet switch interfaces and another networking device... Ethernet trunks carry the traffic of multiple VLANs over a single link."

2. Odom, W. (2015). CCNP Routing and Switching SWITCH 300-115 Official Cert Guide. Cisco Press. Chapter 3, "Implementing VLANs and Trunks," page 62, explains, "A trunk is a link that carries frames in multiple VLANs." It contrasts this with access ports, which are in a single VLAN.

3. Balchunas, J., & Ruest, N. (2015). CCNA Routing and Switching 200-120 Official Cert Guide. Cisco Press. Chapter 11, "Implementing Ethernet Virtual LANs," page 308, defines a trunk link as "a link that passes traffic for multiple VLANs."

4. Massachusetts Institute of Technology (MIT) OpenCourseWare. 6.033 Computer System Engineering, Spring 2018. Lecture 15: The Network Layer, slide 28, describes VLAN trunking (802.1Q) as the method to "carry multiple VLANs over a single link" by adding a VLAN tag to Ethernet frames.

Spanning Tree Protocol (STP), defined by the IEEE 802.1D standard, is a Layer 2 network protocol designed to prevent logical loops in a redundant switched topology. When multiple paths exist between switches, STP creates a loop-free logical topology by selectively blocking redundant paths. This prevents broadcast storms and MAC address table instability that would otherwise occur in a looped Layer 2 network. The protocol achieves this by electing a root bridge and calculating the shortest path from all other switches to it, placing any redundant links into a blocking state.

B. RIP: Routing Information Protocol (RIP) is a Layer 3 distance-vector routing protocol used to exchange routing information; it does not operate at the switching layer to detect loops.

C. OSPF: Open Shortest Path First (OSPF) is a Layer 3 link-state routing protocol; its function is to find the best path for IP packets, not to prevent Layer 2 switching loops.

D. BGP: Border Gateway Protocol (BGP) is a Layer 3 path-vector protocol used for routing between autonomous systems; it is unrelated to Layer 2 loop detection within a LAN.

1. Official Vendor Documentation: Cisco Systems, "Understanding and Configuring Spanning Tree Protocol (STP) on Catalyst Switches," Document ID: 10556. This document states, "Spanning Tree Protocol (STP) is a Layer 2 protocol that runs on bridges and switches. The main purpose of STP is to ensure that you do not create loops when you have redundant paths in your network."

2. Academic Publication: Perlman, R. (1985). "An Algorithm for Distributed Computation of a Spanning Tree in an Extended LAN." ACM SIGCOMM Computer Communication Review, 15(4), 44–53. https://doi.org/10.1145/318951.319004. This paper is the original work by the inventor of STP, detailing the algorithm's design for creating a loop-free spanning tree in a bridged/switched network.

3. Official Vendor Documentation: Cisco Press, "LAN Switching and Wireless, CCNA Exploration Companion Guide" (2008), Chapter 1, "LAN Design," Section: "Redundancy at OSI Layers 1 and 2," p. 14. The text explains, "Without a mechanism such as Spanning Tree Protocol (STP) to block redundant physical paths, Layer 2 loops can form. A Layer 2 loop can result in broadcast storms..."

4. Official Vendor Documentation: Cisco Systems, "IP Routing: RIP Configuration Guide, Cisco IOS Release 15M&T," Chapter: "Configuring a Basic RIP Network." This guide defines RIP as a routing protocol for IP networks, confirming its operation at Layer 3, distinct from Layer 2 switching.

A Media Access Control (MAC) address is a unique identifier assigned to a network interface controller (NIC) for communications at the data link layer of a network segment. This 48-bit address is pre-assigned by the manufacturer and is intended to be globally unique. It is often referred to as the hardware or physical address and is fundamental for Layer 2 switching, allowing devices on a local network to uniquely identify and forward frames to one another.

B. Broadcast: A broadcast address (e.g., FF:FF:FF:FF:FF:FF) is a non-unique address used to send data to all devices on a network segment simultaneously.

C. Multicast: A multicast address is used to send data to a specific group of interested devices, not to a single, unique device.

D. Loopback: A loopback address (e.g., 127.0.0.1) is a special address a host uses to send traffic to itself, primarily for testing, not for unique identification on a network.

1. Kurose, J. F., & Ross, K. W. (2017). Computer Networking: A Top-Down Approach (7th ed.). Pearson.

Section 6.2, "Link-Layer Addressing and ARP," Page 513: "In fact, link-layer addresses have a number of different names. They are also called LAN addresses, physical addresses, or MAC addresses... a crucial property of a MAC address is that no two adapters have the same MAC address."

2. Cisco. (2019). CCNA 200-301 Official Cert Guide, Volume 1. Cisco Press.

Chapter 2, "Fundamentals of Ethernet LANs," Section "Ethernet Addressing," Page 41: "The MAC address is a 48-bit (6-byte) binary number... The IEEE requires the vendor to follow two simple rules. First, all MAC addresses that the vendor assigns must use that vendor’s assigned OUI [Organizationally Unique Identifier] as the first 3 bytes. Second, for all MAC addresses with that same OUI, the vendor must assign a unique value in the last 3 bytes." This process ensures global uniqueness.

3. IEEE Standards Association. (2014). IEEE Standard for Local and Metropolitan Area Networks: Overview and Architecture (IEEE Std 802-2014).

Section 8.2.1, "Universal addresses": This section details that universally administered MAC addresses are assigned by the IEEE Registration Authority to ensure they are "globally unique." This is the formal standard that guarantees the uniqueness of MAC addresses.

The reload command, when executed in privileged EXEC mode on a Cisco IOS device, initiates a system reboot. This command halts the operating system, performs a hardware self-test, and then loads the saved startup configuration from Non-Volatile RAM (NVRAM) into memory as the new running configuration. If unsaved changes exist in the current running configuration, the system will prompt the user to save them before proceeding. This is the standard and direct command to restart a Cisco router or switch.

B. copy run start: This command saves the active (running) configuration to the startup configuration file in NVRAM, making changes persistent across reboots; it does not reload the device.

C. show version: This is a verification command that displays critical system information, including the IOS version, uptime, hardware details, and the configuration register value.

D. exit: This command is used to move down one level in the command hierarchy or to terminate a management session (e.g., SSH, Telnet).

1. Cisco Systems, Cisco IOS Configuration Fundamentals Command Reference, "reload" Command.

Reference: Under the reload command description, the document states, "To reload the operating system, use the reload command in privileged EXEC mode." This source directly confirms the function of the command.

2. Cisco Systems, Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2, "Managing Configuration Files" chapter.

Reference: In the section "Copying a Configuration File," the guide explains that the copy running-config startup-config command is used to "save the running configuration to NVRAM." This distinguishes its function from reloading the device.

3. University of Kentucky, College of Engineering, Introduction to the Cisco Router IOS, Lab Manual.

Reference: In the "Basic IOS Commands" section (typically in introductory labs), the manual describes reload as the command to "Restart the router." It also defines copy running-config startup-config for saving and show version for displaying system information, clearly separating their functions.

Transmission Control Protocol (TCP) is a connection-oriented protocol that provides reliable, ordered, and error-checked delivery of a stream of octets between applications. Reliability is achieved through several mechanisms: a three-way handshake to establish a connection, sequence numbers to track data segments and reassemble them in the correct order, and acknowledgments (ACKs) to confirm receipt. If an ACK is not received for a segment within a certain time, the sender retransmits the lost segment, thus guaranteeing delivery. This makes TCP suitable for applications where data integrity is critical, such as file transfers and web browsing.

A. UDP (User Datagram Protocol) is a connectionless protocol that offers "best-effort" delivery. It does not use acknowledgments or retransmissions, prioritizing speed over reliability.

B. IP (Internet Protocol) is a network layer protocol responsible for addressing and routing packets. It is inherently unreliable and provides no guarantee of packet delivery, order, or integrity.

D. ICMP (Internet Control Message Protocol) is used by network devices to send error messages and operational information. It is not designed for reliable end-to-end data transport for applications.

1. Kurose, J. F., & Ross, K. W. (2017). Computer Networking: A Top-Down Approach (7th ed.). Pearson. In Chapter 3, Section 3.4, "Connection-Oriented Transport: TCP," the text states, "TCP is said to be connection-oriented because before one application process can begin to send data to another, the two processes must first 'handshake' with each other... The TCP connection is also a full-duplex service... After a connection is established, the two application processes can send data to each other. The connection is also a reliable data transfer service." (p. 225).

2. Postel, J. (Ed.). (1981). RFC 793: Transmission Control Protocol. Internet Engineering Task Force (IETF). The abstract explicitly states, "The Transmission Control Protocol (TCP) is intended for use as a highly reliable host-to-host protocol between hosts in packet-switched computer communication networks..." Section 1.5, "Operation," further details the mechanisms like sequence numbers and acknowledgments that ensure reliability.

3. Odom, W. (2019). CCNA 200-301 Official Cert Guide, Volume 1. Cisco Press. Chapter 3, "Fundamentals of TCP/IP Transport and Applications," explains, "TCP uses acknowledgments to know whether the other host received the data. If the sender does not receive an acknowledgment, the sender retransmits the data... TCP provides services that check for errors and retransmit any data that is not received correctly. For these reasons, TCP is a reliable protocol." (p. 62).

In the IPv6 addressing architecture, link-local addresses are designed for communication on a single network segment or link. They are not routable beyond that link. The Internet Engineering Task Force (IETF) has reserved the FE80::/10 prefix block specifically for this purpose. This means any IPv6 address that begins with the hexadecimal characters FE80, FE9, FEA, or FEB is a link-local address. These addresses are typically auto-configured on an interface when IPv6 is enabled, facilitating local network operations like neighbor discovery without requiring a DHCP server or manual configuration.

A. Global: Global Unicast Addresses are publicly routable and are assigned from the 2000::/3 address block.

B. Loopback: The IPv6 loopback address is a single, specific address (::1) used by a host to send packets to itself.

D. Multicast: IPv6 multicast addresses are used for one-to-many communication and are identified by the FF00::/8 prefix.

1. IETF RFC 4291, "IP Version 6 Addressing Architecture":

Section 2.5.6, "Link-Local IPv6 Unicast Addresses": This section explicitly defines the format for link-local addresses. It states, "Link-Local addresses are assigned from the block FE80::/10." The binary prefix is 1111 1110 10.

2. Cisco Official Documentation, "IPv6 Configuration Guide, Cisco IOS XE Gibraltar 16.12.x":

Chapter: "Implementing IPv6 Addressing and Basic Connectivity", Section: "IPv6 Unicast Addresses": This guide details the different types of IPv6 addresses. Under the "Link-Local Addresses" subsection, it confirms, "A link-local address is an IPv6 unicast address that can be automatically configured on any interface... Link-local addresses are in the FE80::/10 format."

3. Stanford University, CS 144: Introduction to Computer Networking, Fall 2013:

Lecture 7 Slides, "The Network Layer: IP": Slide 52, titled "IPv6 Address Types," lists the common prefixes. It clearly shows "Link-local unicast" addresses associated with the prefix FE80::/10.

The show running-config command is used on Cisco IOS devices to display the configuration that is currently active in the device's Random Access Memory (RAM). This is the "live" or "active" configuration that dictates the device's current behavior. Any changes made via the command-line interface are immediately applied to the running configuration. This command is fundamental for verifying the current operational state and for real-time troubleshooting of the device's settings.

B. show startup-config: This command displays the configuration stored in Non-Volatile RAM (NVRAM). This is the backup configuration that is loaded into RAM when the device boots, not the currently active one.

C. show version: This command provides system information such as the IOS software version, hardware details, system uptime, and the configuration register value, but not the active configuration commands.

D. show ip route: This command displays the device's IP routing table, which is a dynamic table showing network paths. It is a result of the active configuration, not the configuration file itself.

---

1. Cisco Systems, Inc., "Cisco IOS Configuration Fundamentals Command Reference," Document ID: a006878. In the chapter for "Show Commands," the description for show running-config states, "To display the contents of the current running configuration file... use the show running-config command in privileged EXEC mode." This confirms it shows the current, active configuration.

2. Cisco Systems, Inc., "Basic Device Configuration," Cisco IOS XE Gibraltar 16.11.x (Catalyst 9300 Switches) Software Configuration Guide. In the section "Managing Configuration Files," it is explained that the running configuration "resides in RAM" and the startup configuration "resides in NVRAM." The guide specifies using show running-config to view the active configuration.

3. University of Kentucky, College of Engineering, "Introduction to Cisco Router Configuration," Course materials for EE/CPE 588. Page 10, Section "Saving the Configuration." The document explicitly states: "The show running-config command will show you the configuration that is currently running on the router." It contrasts this with show startup-config, which shows the configuration stored in NVRAM.