1. Refer to the exhibit. Which Catalyst switch configuration would protect a customer network from possible
disruption in the case in which an unauthorized switch is added to the network? 
A. Switch0#show running-configuration
!
hostname Switch0
!
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
interface FastEthernet0/1
switchport protected
!
B. Switch0#show running-configuration
!
hostname Switch0
!
spanning-tree portfast bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
interface FastEthernet0/1
spanning-tree guard root
!
C. Switch0#show running-configuration
TestInside    642-066
!
hostname Switch0
!
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
interface FastEthernet0/1
switchport mode access
!
D. Switch0#show running-configuration
!
hostname Switch0
!
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
interface FastEthernet0/1
switchport port-security violation restrict
!
Answer: B 
2. While troubleshooting a network outage, you discover that an employee brought a switch from home into the
office to connect additional equipment to the network. In order to increase his speed, he connected this switch to
both network ports in his office, resulting in a bridge loop. Which of these can you implement to prevent future
occurrences of this issue?
A. RSTP
B. root guard
C. BPDU guard
D. GLBP
Answer: C 
TestInside    642-066
3. Refer to the exhibit. For the given configuration, on packets leaving the router on interface FastEthernet0/0 that
matches the high traffic class, what will the MPLS experimental bit be set to? 
A. 0
B. 1
C. 2
D. 3
E. 4
F. 5
Answer: D 
4. Which tool allows a LAN client to determine which router should be the first hop to a particular remote
destination, allowing simplified client configuration and processing without creating a single point of failure?
A. Proxy ARP
B. Dynamic Routing Protocol
C. IRDP
D. VRRP
Answer: D 
5. When implementing MPLS VPNs between CE and PE routers, which of these statements is correct?
A. If using IS-IS as the PE-CE routing protocol, no redistribution is required.
TestInside    642-066
B. If using static routes between the CE and PE routers, no redistribution of other VPN routes is required.
C. If the PE-CE protocol is not BGP, redistribution of other VPN routes from MP-BGP is required.
D. If RIP is the routing protocol that is used between the PE-CE routers, no redistribution is required, but any
other protocol will require redistribution.
E. If using OSPF or EIGRP as the PE-CE routing protocol, redistribution is not required, but any other protocol or
static route will require redistribution.
Answer: C 
6. You would like to log messages up to the severity level "Notification." Which three of these commands will you
need to issue in order to enable syslog messages to be sent to the syslog server at the IP address 10.1.5.5? (Choose
three.)
A. logging on
B. logging host 10.1.5.5
C. logging trap notifications
D. logging syslog notifications
E. logging monitor notifications
F. logging console notifications
Answer: ABC 
7. Refer to the exhibit. What is the HSRP state and priority of this interface after HSRP reaches its steady state? 
A. Active, Priority 151
B. Active, Priority 201
C. Active, Priority 251
D. Standby, Priority 151
TestInside    642-066
E. Standby, Priority 201
F. Standby, Priority 251
Answer: D 
8. While your MPLS core is using Cisco routers, the core of a company you have acquired is not. After extending
your MPLS VPN networks by integrating the cores, you discover that the end-to-end LPS path between PE
routers cannot be established.
Which of the following may have caused this problem?
A. the MTUs do not match
B. the BGP protocol versions do not match
C. MPLS is not supported between different vendors
D. MP-BGP is not supported between different vendors
E. you are using Cisco proprietary TDP in your existing core
Answer: E 
9. You are troubleshooting an issue which is causing full-sized packets entering the MPLS cloud to be dropped.
You have discovered that one of the switches in the MPLS core is not a Cisco switch, but otherwise the MPLS
MTU size is set to 1508 bytes on the routers. Based on this information, which of these may be the reason the
packets are being dropped?
A. no switches support oversized packets
B. by definition, the maximum MTU is 1500 bytes
C. the switch on your MPLS core that was not produced by Cisco does not support oversized packets
D. in this situation, the MTU setting is irrelevant; in MPLS the maximum acceptable IP packet size is 1492 bytes
E. as MPLS VPN labeling increases the size of the packet by 8 bytes, the IP MTU should have been changed to
1508
Answer: C 
10. Refer to the exhibit. Which two of these events will be the result of issuing the above command? (Choose
two.) 
A. A 64-bit IPv4 prefix will be created.
TestInside    642-066
B. The route distinguisher will be used to indicate VPN membership.
C. Extended BGP communities will be used to encode route distinguishers.
D. A 96-bit VPNv4 prefix will be created and propagated across the IP network.
E. The route distinguisher is 64 bits and will be prepended to an existing IPv4 route to make it globally unique.
Answer: DE 
11. Refer to the exhibit. You want to minimize the downtime that results from supervisor engine switchovers on
Cisco 6500 Series Switches and Cisco 7600 Series Routers. To achieve this, you are considering deploying a
Cisco Nonstop Forwarding with Stateful Switchover solution using OSPF.
In the exhibit you can see the output of the show ip ospf neighbor detail command. Which trait of systems using
Cisco Nonstop Forwarding with Stateful Switchover and OSPF is shown in the exhibit output and will impact
your plan? 
A. Stateful Switchover for Cisco Nonstop Forwarding only works with BGP.
B. Stateful Switchover for Cisco Nonstop Forwarding must be configured on all adjacent routers.
C. Cisco Nonstop Forwarding with Stateful Switchover helper mode is not supported on the adjacent router.
D. Cisco Nonstop Forwarding with Stateful Switchover helper mode for OSPF has been standardized and is
supported on the adjacent router.
Answer: D 
12. What can be specified in IP VACLs?
A. IP source only
B. IP destination only
C. protocol and IP source only
D. IP source, IP destination, and ports
Answer: D
TestInside    642-066
13. Which two of the following actions must an OSPF NSF-capable router execute after a supervisor engine
switchover? (Choose two.)
A. send the graceful restart message
B. exchange the complete routing table
C. re-acquire the link state database content for the network
D. re-learn the available OSPF neighbors with neighbor relationship restart
E. re-learn the available OSPF neighbors without neighbor relationship restart
Answer: CE 
14. Cisco Catalyst switches support which three PVLAN port types? (Choose three.)
A. private
B. isolated
C. permanent
D. community
E. non-isolated
F. promiscuous
Answer: BDF 
15. What is the function of the no switchport Catalyst switch interface configuration command?
A. switches the port from access mode to trunk mode
B. converts the port from physical Layer 2 port to physical Layer 3 port
C. enables the interface for Layer 2 switching
D. disables the interface to prevent traffic flow
E. clears all the configurations on the interface
Answer: B 
16. What is the purpose of using VPN hardware acceleration equipment?
A. to use WebVPN instead of IPSec
B. to decrease performance and efficiency
C. to offload encryption functions from a router CPU
D. to offload encryptions functions from router memory
TestInside    642-066
Answer: C 
17. Refer to the exhibit. Which show command would display the information in the exhibit? 
A. show policy-map
B. show policy-map high-priority
C. show interfaces fastEthernet 0/1 policy-map
D. show policy-map interfaces fastEthernet 0/1
Answer: D 
18. You are operating a multi-vendor network and are considering adding redundancy at the access level. Which
routing redundancy solution should you implement?
A. Hot Standby Router Protocol
B. Gateway Load Balancing Protocol
C. Virtual Router Redundancy Protocol
D. both Gateway Load Balancing Protocol and Hot Standby Router Protocol
Answer: C 
19. Which two of the following statements are true about HSRP load sharing? (Choose two)
A. It is achieved by using more than one HSRP group.
B. It is done in regards to either round robin or weight basis.
C. It is used to offload the active router in a certain HSRP group.
TestInside    642-066
D. Single group HSRP is used to achieve more efficient link utilization.
E. The return traffic is influenced by HSRP load sharing configuration.
Answer: AC 
20. When you enter the interface command auto qos voip cisco-phone on a port at the edge of a network, how
does the Cisco Catalyst switch detect if a Cisco IP Phone is connected to the port?
A. by snooping the CoS marking on the incoming frames
B. by using RTP hello messages between the switch port and the Cisco IP Phone
C. by using CDP
D. by using DHCP snooping
E. by snooping the incoming 802.1Q VLAN tag
Answer: C 
21. Which version of NTP was the first to support cryptographic authentication?
A. version 1
B. version 2
C. version 3
D. version 4
E. version 5
Answer: C 
22. Refer to the exhibit. Which of the following statements is true? 
A. BGP NSF awareness is enabled
B. SSO for BGP NSF capability is enabled
C. BGP graceful restart awareness is enabled
D. 10.11.1.187 is configured as an NSF-capable BGP neighbor
Answer: A 
TestInside    642-066
23. When BGP is used as the PE-CE routing protocol, which of these statements is correct?
A. On PE routers, the CE EBGP neighbors are configured in the VRF context.
B. On the CE router, PE neighbors must be configured in the VRF context on the CE router.
C. On PE routers, the CE IBGP neighbors are configured in the global BGP configuration.
D. When using BGP as the PE-CE routing protocol, only public AS numbers can be used when configuring the
BGP neighbor relationships.
E. A separate BGP process must be used on the PE routers for CE routers so that they do not use the same BGP
routing process as that used for the PE router's other provider neighbors.
Answer: A 
24. What is the default severity level of syslog trap messages?
A. debugging (severity=7)
B. informational (severity=6)
C. notifications (severity=5)
D. warnings (severity=4)
E. errors (severity=3)
Answer: B 
25. Refer to the exhibit. For interface FastEthernet0/0, what will happen to dscp af11 traffic if the queue for class
"newclass" reaches a depth of 32? 
TestInside    642-066
A. All packets will be dropped.
B. One out of ten packets will be dropped.
C. A random number of packets will be dropped.
D. No packets will be dropped until the queue depth reaches 40.
E. Packets will be dropped according to the exponential weight setting.
Answer: B 
26. What would the first line in this debug serial interface output indicate? 
A. The mineseen HDLC sequence has missed more than three keepalives.
B. Keepalives are being received from the other end of a point-to-point link and this end is not sending them.
C. The yourseen HDLC sequence number is out of order.
D. The HDLC myseq has missed more than three keepalive messages, the WAN link keepalive activity will not
occur, and you should expect to see a Layer 2 issue.
Answer: B 
27. How are RIP routing contexts implemented in MPLS VPN?
A. RIP does not support routing contexts
B. routing contexts are implemented in a single routing process
C. routing contexts are implemented using multiple routing processes
D. routing contexts are implemented as several instances of a single routing process
E. routing contexts are implemented as a single instance of several routing processes
Answer: D 
28. Which of these tools should you use to compress VoIP packets on a low-speed Frame Relay circuit?
A. RTP header compression
B. TCP header compression
C. FRF.9 payload compression
D. Predictor payload compression
TestInside    642-066
E. Cisco proprietary payload compression
Answer: A 
29. Why is it appropriate to use conditional label advertising when deploying MPLS?
A. to make CEF tables smaller
B. to enable label switching on the frame mode interface
C. to restrict MPLS availability to predefined time periods
D. to restrict label switching to a limited number of networks
E. to restrict end users from seeing the routers in the MPLS network
Answer: D 
30. When HSRP is configured on a network, which two of these items are provided, which are shared between the
routers that run HSRP? (Choose two.)
A. TCP-based hello packets
B. the impact of flapping links if timers are too low
C. a shared single interface
D. the ability to track serial interfaces
E. UDP-based hello packets
Answer: BD 
31. Refer to the exhibit. Which two of these statements are correct? (Choose two.) 
A. PE11 originated label 20.
B. PE11 originated label 21.
C. The PE11 upstream neighbor originated label 21.
D. The PE11 downstream neighbor originated label 20.
E. PE11 will append label 21 to incoming packets labeled 32.
F. PE11 will impose label 20 on incoming packets labeled 32.
Answer: AC
TestInside    642-066
32. What is required to enable fragmentation of large FTP packets when voice quality on the network is affected
by FTP transfers?
A. Configure MLP on the Frame Relay interfaces.
B. Configure TCP header compression on interfaces.
C. Fragmentation is not supported with service internetworking.
D. Configure FRF.12 fragmentation on the Frame Relay interfaces.
Answer: A 
33. Which command retrieves and displays information about each Cisco product in the form of a UDI?
A. show status
B. show hardware
C. show inventory
D. show environment
Answer: C 
34. Refer to the exhibit. As shown in the configuration, RIP is being used as the PE-CE routing protocol. Which of
these statements is correct? 
A. Though preferred, it is not necessary that the RIP parameters be specified in the VRF.
B. Though RIPv2 is specified in the configuration, any version of RIP supports VRFs.
C. On the receiving end, the RIP hop count is copied into a BGP extended community attribute.
D. On the sending end, the RIP hop count is copied into the BGP multi-exit discriminator attribute.
TestInside    642-066
E. Because RIP is being used as the PE-CE routing protocol, the redistribution commands in the configuration are
not necessary because redistribution occurs automatically between RIP and BGP.
Answer: D 
35. Which three of the following steps are mandatory when configuring MPLS on Cisco IOS? (Choose three.)
A. start LDP
B. enable CEF switching
C. configure the MPLS ID
D. disable IP TTL propagation
E. configure conditional label advertising
F. enable label switching on frame mode interfaces
Answer: ABF 
36. You have just configured HSRP group 10 in your network. Which MAC address will your default gateway
use?
A. 0000.5E00.010a
B. 0000.0cac.070a
C. 0000.0c07.ac0a
D. 0000.0c07.0110
E. 0000.5e00.0110
Answer: C 
37. Refer to the exhibit. A display of class maps for a configuration is shown in the exhibit. What will the
class-map "all-traffic" match? 
TestInside    642-066
A. all voice traffic
B. all traffic with dscp 18 or dscp 43
C. all traffic with dscp 18 and dscp 43
D. all traffic with ip precedence 0 or 1
E. all traffic with ip precedence 4 and 5
Answer: B 
38. Which three configuration steps must be completed for a Cisco router in order to enable local AAA Login
Authentication? (Choose three.)
A. enable AAA
B. define a method list
C. define an authorization policy
D. apply the method list to an interface
E. set up a TACACS+ authentication server
F. specify the default method list and apply it to the interface
Answer: ABD 
39. Your customer recently acquired a smaller competitor. The acquired company is not currently using Cisco
routers, so you have connected the two WANs via an authenticated PPP link. After configuring both routers,
issuing the show interface s0/0 command on the Cisco router shows the interface to be in the up/down state.
Which two of these are possible causes? (Choose two.)
A. MTUs do not match.
B. Bandwidth statements do not match.
C. IP addresses are not in the same subnet.
D. CHAP passwords do not match.
E. CDP versions do not match.
Answer: AD 
40. On a Cisco Catalyst 4500 Series switch, the fail LED is lit for one if its two power supplies. Which command
would you use to check on this problem?
A. show environment
TestInside    642-066
B. show module
C. show errdisable detect
D. show diagnostic content
E. show hardware
Answer: A 
41. When HSRP is configured on a network, which two of these items are provided, which are shared between the
routers that run HSRP? (Choose two.)
A. UDP-based hello packets
B. MAC address
C. TCP-based hello packets
D. IP address
E. shared single interface
Answer: BD 
42. Refer to the exhibit. You have a non-Cisco switch that is not communicating properly while connected to the
distribution-layer Cisco switching fabric. Which two best-practice actions can you take to overcome this problem?
(Choose two.)
<e ip="45-1.gif"></e>
A. Turn off MST (802.1s) on all switches.
B. Turn on MST (802.1s) on all switches.
C. Turn on RSTP (802.1w) on all switches.
D. Turn off RSTP (802.1w) on all switches.
Answer: BD 
43. What is the maximum number of Cisco Catalyst 3750 Series switches that can be united into a single
manageable unit using the Cisco StackWise technology?
A. 3
B. 6
C. 9
D. 12
TestInside    642-066
Answer: C 
44. Refer to the exhibit. In analyzing the configuration of the router, which three of these statements are correct?
(Choose three.) 
A. Neighbor 172.16.32.14 will receive VPNv4 routes.
B. Neighbor 172.16.32.15 will receive Internet routes.
C. Neighbor 172.16.32.15 will receive VPNv4 routes.
D. Neighbor 172.16.32.27 will receive VPNv4 routes.
E. Neighbor 172.16.32.27 will receive Internet routes.
F. Neighbor 172.16.32.14 will receive both VPNv4 and Internet routes.
Answer: CDE 
45. On a Cisco Catalyst switch, which configuration command is used to apply a VACL named "test" to filter the
traffic within VLAN100?
A. interface vlan 100
ip access-group test
B. interface vlan 100
ip access-group test in
C. interface vlan 100
ip access-group test out
D. vlan filter test vlan-list 100
E. vlan access-map test 100
TestInside    642-066
Answer: D 
46. What are three pieces of information that the Cisco IOS show inventory command displays on a Cisco ISR
router? (Choose three.)
A. installed hardware
B. Unique Device Identifier
C. system internal temperature
D. main power supply condition
E. the status of installed hardware
F. installed hardware serial numbers
Answer: ABF 
47. Referring to the partial Cisco Catalyst switch configuration shown, which two of these statements are correct?
(Choose two.) 
A. A router connected to the fastethernet 1/4 interface will be able to communicate with hosts connected to
interface fastethernet 1/1, 1/2, and 1/3.
TestInside    642-066
B. A router connected to the fastethernet 1/4 interface will not be able to communicate with the host connected to
interface fastethernet 1/3.
C. Hosts connected to interface fastethernet 1/1 and 1/2 can communicate with each other.
D. Hosts connected to interface fastethernet 1/1, 1/2, and 1/3 can communicate with each other.
Answer: AC 
48. Which of these is a prerequisite for and must always run with Cisco NSF?
A. BGP
B. SSO
C. RPR
D. SRM
Answer: B 
49. When EIGRP is used as the PE-CE routing protocol, which of these statements is correct?
A. Configuration of the VPN is only required on the PE router.
B. EIGRP can be used only as the PE-CE routing protocol if the PE and CE routers are in the same AS.
C. When using EIGRP as the PE-CE routing protocol, EIGRP does not require a VRF.
D. Unlike other routing protocols that are used between PE and CE routers, EIGRP supports backdoor links.
E. Other EIGRP AS routes are automatically advertised to the CE router and do not require a redistribution
configuration command to be configured.
Answer: A 
50. Your customer wants to build a network for a financial trading floor that has a requirement for multiple
high-value transactions, which are also vital to the customer. What are the two most critical requirements?
(Choose two.)
A. no single point of failure
B. trading database server location
C. redundant application servers location
D. deterministic response to all failures
E. determine which protocol to use
Answer: AD
TestInside    642-066
51. Refer to the exhibit.  
Users complain that they intermittently lose data and connections to important servers. After investigation, you
discover that the 802.1Q trunk between DSW111 and ASW1 is down. Even though the HSRP group 11 is being
serviced by DSW112, you discover that the SVI for VLAN 11 is in the up state on DSW111. 
Which three Cisco Catalyst IOS commands should you use on DSW111 to find the source of this problem?
(Choose three.)
A. show vtp status
B. show interfaces vlan 11
C. show standby vlan 11 brief
D. show spanning-tree vlan 11
E. show interfaces <fast | gig> mod/port trunk
Answer: BDE