3.2 Configuring MS Switches 500-220 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An administrator is configuring 802.1X on an MS switch for a set of ports. The RADIUS server is configured with the correct shared secret. However, clients are failing authentication. What is the most likely cause of this issue?

   • AThe switch ports are configured with a static VLAN.
   • BThe RADIUS server is not reachable from the switch's management IP address.
   • CThe clients are using a different DNS server.
   • DThe clients are not sending DHCP requests.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of 802.1X authentication on MS switches?

   • ATo monitor network traffic
   • BTo enforce port-based network access control
   • CTo route between VLANs
   • DTo prioritize traffic on the network
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company has a flat Layer 2 network with three VLANs (10, 20, 30) on their MS switches. They want to route between these VLANs locally on the switch stack without adding a separate router. The upstream firewall handles all internet traffic. What should the administrator configure on the MS switch stack?

   • ACreate static routes on the switch for each VLAN pointing to the firewall.
   • BCreate SVIs for VLANs 10, 20, and 30, and enable IP routing on the switch stack.
   • CConfigure a single SVI for all three VLANs and use a /16 subnet.
   • DEnable OSPF on the switch stack and advertise the three VLANs.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   An administrator is configuring QoS on an MS switch to support both VoIP and video conferencing. The VoIP phones tag traffic with DSCP EF, and the video conferencing system tags traffic with DSCP AF41. The switch is currently set to 'Trust' DSCP tags. However, during a test, video conferencing traffic is being dropped while VoIP works fine. What is the most likely cause?

   • AThe switch is not trusting DSCP tags.
   • BThe video conferencing system is using a different VLAN than the VoIP phones.
   • CThe video conferencing system is not sending traffic.
   • DThe video conferencing traffic is being mapped to a lower priority queue than VoIP, and the queue is congested.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An administrator needs to prioritize traffic from a specific IP phone model on an MS switch port. The phones do not tag their traffic with DSCP values. What is the most effective way to ensure this traffic is prioritized?

   • AConfigure a static route for the phone's IP address.
   • BEnable 802.1X authentication on the port.
   • CSet the port speed to 1 Gbps full duplex.
   • DCreate a QoS rule that matches the phone's MAC address and assigns a higher priority queue.
   Reveal Solution Discussion Select an answer first