2.1 Configure and Verify VLANs (normal Range) Spanning Multiple Switches 200-301 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company deploys IP phones for its employees. Each desk has a single cable running to a switch port. The PC connects to the phone, and the phone connects to the switch. The data VLAN is 10, and the voice VLAN is 20. The switch port is configured with 'switchport mode access' and 'switchport access vlan 10'. What additional configuration is required for the phone to receive its VLAN and for the PC to remain in VLAN 10?

   • AConfigure 'switchport mode trunk' and 'switchport trunk native vlan 10'
   • BConfigure 'switchport access vlan 20' and rely on the phone to tag data traffic
   • CConfigure the port as a trunk and allow VLANs 10 and 20
   • DConfigure 'switchport voice vlan 20' on the access port
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a security concern associated with using VLAN 1 as the native VLAN on trunk ports?

   • AVLAN 1 is automatically tagged on all trunk links
   • BVLAN 1 is used for management and control traffic, making it a common target for attacks
   • CVLAN 1 is not routable, so it cannot be used for interVLAN routing
   • DVLAN 1 cannot carry user data, so it is useless
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A switch has just been powered on with its default configuration. An administrator needs to connect a new printer to port GigabitEthernet0/5 and ensure it is isolated in VLAN 20. The administrator enters interface configuration mode for Gi0/5. Which set of commands completes the task?

   • Aswitchport access vlan 20 switchport mode trunk
   • Bvlan 20 switchport access vlan 20
   • Cswitchport mode access switchport access vlan 20
   • Dswitchport mode dynamic desirable switchport access vlan 20
   Reveal Solution Discussion Select an answer first
5. 19expert · medium

   A security consultant recommends that the native VLAN on all trunk ports be changed from VLAN 1 to an unused VLAN. The network has multiple switches with trunk links. Which of the following is the primary security benefit of this change?

   • AIt eliminates the need for 802.1Q tagging on the trunk
   • BIt allows the switch to route between VLANs without a router
   • CIt prevents VLAN hopping attacks by ensuring that untagged traffic is not placed in VLAN 1
   • DIt increases the bandwidth available on the trunk link
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A Layer 3 switch has VLAN 10 and VLAN 20 configured. The administrator creates SVIs for both VLANs and assigns IP addresses. What additional configuration is required on the switch to enable routing between the VLANs?

   • AEnable IP routing with the 'ip routing' command.
   • BAssign the SVIs to the same VLAN.
   • CAdd a default route to the SVIs.
   • DConfigure the SVIs as trunk ports.
   Reveal Solution Discussion Select an answer first