NEW QUESTION 1
Which two actions are examples of network device hardening for Cisco Industrial Ethernet Switches? (Choose two)

• A. Disable unused services
• B. Shutdown network ports which are not in use
• C. Only allow administrative access using Telnet
• D. Deploy IP67 versions of Cisco Industrial Ethernet Switches
• E. Set the native VLAN on all trunk ports to VLAN 1

Answer: AB

NEW QUESTION 2
It is common to use Resilient Ethernet Protocol (REP) on the manufacturing floor as a resiliency protocol, as opposed to the Enterprise where it is not generally deployed. What are two reasons why REP is more suitable for the plant floor? (Choose two)

• A. REP is only supported on Industrial Ethernet switches, it is not supported on Catalyst switches.
• B. REP converges faster than Spanning Tree, allowing for greater network availability.
• C. REP supports Industrial Ethernet protocols better because it moves the packets faster.
• D. Running dual cables from access switches to an aggregation switch can have a much higher cost on the plant floor than in the Enterprise and running a ring protocol like REP provides resiliency at a lower cost.
• E. Industrial protocols can be negatively impacted by the number of nodes the Ethernet frame traverses, REP provides a topology with no more than 3 nodes for any data path.

Answer: BD

NEW QUESTION 3
DRAG DROP

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 4
Exhibit:

Refer to the exhibit. CCNA.com has the industrial network shown in the exhibit. All switches are configured as layer 2 switches and are using VLAN 1 as their management VLAN. Each VLAN 1 interface has been assigned the correct IP address. What is the purpose of assigning a default gateway to SW-C switch?

• A. allows connectivity between the VLAN 1 interface on SW-C and other devices in the network.
• B. allows connectivity between Host A and other devices in the network.
• C. allows connectivity between Host B and other devices in the network.
• D. allows the switch to pass traffic between Host A and Host B

Answer: A

NEW QUESTION 5
You are called at home at 3am by an unskilled machine operator with a suspected network related problem; the controller LEDs are all normal but the output module's communications LED is not on. The operator has verfied the cable is functional and
correctly connected from the communication module to the switch. What is the next check that you ask the unskilled machine operator to make?

• A. Log onto the switch using the console port and check that IGMP snooping is enabled
• B. Open wireshark and check whether the controller is issuing a forward open instruction to the device
• C. Open the diagnostic faceplate on the HMI for the control panel switch and check that the relevant ports are enabled and not in alarm
• D. Open Studio 5000 and check the module status tab for the affected output module

Answer: C

NEW QUESTION 6
What is the reason that ProfiNET frames are discarded by default on Catalyst switches?

• A. ProfiNET uses a nonstandard Ethernet frame format
• B. The frames have an 802.1q tag with VLAN ID equal to 0 (zero)
• C. Catalyst switches do not support ProfiNET traffic
• D. A ProfiNET VLAN must be configured and enabled on a Catalyst switch

Answer: B

NEW QUESTION 7
Refer to the exhibit.

NAT has been configured on the router 'GW' and the IP addresses of router 'GW' have been configured properly. Users of PC1 and PC2 are able to ping the IP address 198.51.100.1 but are unable to reach any other IP addresses on the Internet. The ISP confirmed that their configuration is correct. Which option would likely correct the problem?

• A. ip access-list extended ACL_OUTBOUND permit ip 10.1.1.0 0.0.0.255 anyinterface Ethernet1ip access-group ACL_OUTBOUND out
• B. interface Ethernet1 ip nat outside
• C. interface Ethernet0 ip nat inside
• D. ip route 0.0.0.0 0.0.0.0 198.51.100.1

Answer: D

NEW QUESTION 8
Which option allows an EtherNet/IP I/O device to be safely installed where it is subject to water immersion?

• A. The device is rated IP20 and the power wiring is installed securely to the terminal block.
• B. The device is rated IP67 and a power cordset is used.
• C. The device is rated IP67 and immersed to 10 m.
• D. The device is rated IP20 and immersed to 10 m.

Answer: B

NEW QUESTION 9
A cookie cutter machine requires 2 standard controllers and a safety controller. All of these controllers and machine level I/O have been placed on VLAN 104. The safety controller must monitor an emergency stop connected to an I/O adapter on an adjacent machine (VLAN 105). Which packet type will be used?

• A. UDP Multicast TTL = 1
• B. UDP Multicast TTL = 2
• C. UDP Unicast
• D. TCP Unicast

Answer: C

NEW QUESTION 10
How are I/O timeout and Safety I/O timeout calculated?

• A. An I/O connection will timeout based on the lower of 4x RPI or 100m
• B. Safety I/O timeout is calculated as 4xRPI.
• C. An I/O connection will timeout based on the lower of 3x RPI or 100m
• D. Safety I/O timeout is calculated as 3xRPI.
• E. An I/O connection will timeout based on the lower of 4x RPI or 150m
• F. Safety I/Otimeout is calculated as 2xRPI.
• G. An I/O connection will timeout based on the lower of 3x RPI or 150m
• H. Safety I/O timeout is calculated as 3xRPI.

Answer: A

NEW QUESTION 11
Refer to the exhibit.

SW1, SW2 and virtual switch are connected in a loop. SW1 and SW2 are standard layer-2 switches. Which loop prevention mechanism is best suited for use within this topology?

• A. Per-VLAN Rapid Spanning Tree Protocol+
• B. End-Host Mode
• C. Multi-chassis EtherChannel
• D. BPDU Guard

Answer: B

NEW QUESTION 12
Which statement is correct regarding Media Redundancy Protocol (MRP) in a ring of ProfiNET devices?

• A. When a link fault is detected, MRP rings must converge in less than 100 milliseconds
• B. MRP defines two device roles, Media Redundancy Master and Media Redundancy Client
• C. MRP can support rings of up to 250 devices
• D. MRP is only supported on network switches

Answer: B

NEW QUESTION 13
Which command globally enables QoS on a Cisco Industrial Ethernet switch?

• A. switch(config)#qos enable
• B. switch(config)#mls queuing enable
• C. switch#enable queuing
• D. switch(config)#mls qos

Answer: D

NEW QUESTION 14
A small manufacturing company has a Class C network address on the plant floor and needs to create five subnets, each accommodating 25 endpoints. Which subnet mask needs to be configured?

• A. 255.255.240.0
• B. 255.255.255.128
• C. 255.255.255.192
• D. 255.255.255.224
• E. 255.255.255.240
• F. 255.255.255.248

Answer: D

NEW QUESTION 15
EtherNet/IP is an Ethernet implementation of which protocol?

• A. CIP
• B. Industrial Protocol
• C. DeviceNet
• D. ControlNet

Answer: A

NEW QUESTION 16
Which selection is a reason why IGMP snooping should be configured on a switched network?

• A. IGMP snooping populates the snooping table with the results of DHCP requests and can be used by Dynamic ARP Inspection to block IP spoofing attacks at Layer-2.
• B. IGMP snooping verifies the source IP address of every IPv4 packet to ensure that it hasn't been originated from a port different than its return path.
• C. IGMP snooping is used to filter ping requests and results to avoid overflowing the MAC address table of the switch.
• D. IGMP snooping allows a Layer-2 switch to limit the transmission of multicast frames to only the ports that have members of the relevant IGMP group.

Answer: D

NEW QUESTION 17
AP CAPWAP control traffic should be isolated from wireless client traffic. Which scenario represents the correct configuration to support the SSIDs of this controller-based access point in FlexConnect local switching mode?

• A. [MISSING]
• B. [MISSING]
• C. [MISSING]
• D. [MISSING]

Answer: C

NEW QUESTION 18
Refer to the exhibit.

Which three options are needed to configure NAT on router GW so PC1 and PC2 will be able to ping 203.0.113.1? (Choose three)

• A. interface Ethernet0 ip nat insideinterface Ethernet1 ip nat outside
• B. ip access-list standard ACL_NAT permit 10.1.1.0 0.0.0.255
• C. ip nat inside source static tcp 10.1.1.0 80 interface Ethernet1 80
• D. interface Ethernet0 ip nat outside interface Ethernet1 ip nat inside
• E. ip nat inside source list ACL_NAT interface Ethernet1 overload
• F. ip access-list extended ACL_NAT permit tcp 10.1.1.0 0.0.0.255 any eq 80

Answer: ABE

NEW QUESTION 19
Why is SSH preferred over Telnet as a method of accessing a network device to alter or view the configuration?

• A. Telnet encrypts only the login information, not the entire transmission.
• B. SSH requires fewer network resources and no additional configuration.
• C. Telnet is more difficult to use and configure than SSH.
• D. SSH encrypts the login and session information.

Answer: D

NEW QUESTION 20
Refer to the exhibit.

A new device, PanelView, has been added to the network. See the table for device details:
All devices are able to ping their default gateway and all other devices except PanelView. PanelView can only ping its default gateway.
After the administrator has done some investigation they have discovered the following information:
L3SW1# show run interface
interface Vlan1 no ip address shutdown
!
interface Vlan191
ip address 10.10.27.125 255.255.255.192
ip helper-address 165.28.96.96
ip helper-address 165.28.32.235 no ip redirects
standby 191 ip 10.10.27.126
standby 191 priority 120
standby 191 preempt delay minimum 90 no ip route-cache
!
interface Vlan398
ip vrf forwarding mosaic
ip address 10.15.153.203 255.255.255.0
ip helper-address 10.15.154.252
ip helper-address 10.1.0.252
standby 98 ip 10.15.153.202
standby 98 priority 120
standby 98 preempt delay minimum 90
!
interface Vlan399
ip vrf forwarding mosaic
ip address 10.15.154.203 255.255.255.0
ip helper-address 10.1.0.252
ip helper-address 10.1.1.252
standby 99 ip 10.15.154.254
standby 99 priority 120
standby 99 preempt delay minimum 90
!
L3SW1# show ip route connected
10.0.0.0/8 is variably subnetted, 1149 subnets, 17 masks C 10.10.27.64/26 is directly connected, Vlan191
C 10.10.31.254/32 is directly connected, Loopback1
What is preventing PanelView from pinging the other endpoints in the network?

• A. Routing isn't enabled on L3SW1 for SVI 398 and SVI 399
• B. SVI 191 is in a different routing instance than SVI 398 and SVI 399
• C. Firewall1 is blocking pings from PanelView to the other endpoints
• D. An access list on L3SW1 is blocking pings from PanelView to the other endpoints

Answer: B

NEW QUESTION 21
Which three network mechanisms can be used for securely segmenting an industrial network? (Choose three)

• A. VLANs
• B. OSPF
• C. REP
• D. VRFs
• E. Firewalls
• F. Spanning-tree

Answer: ADE

NEW QUESTION 22
What can be done to increase the security in depth in an industrial zone?

• A. Add additional disk storage to the IDS server
• B. Add specific SCADA signatures to the IDS server
• C. Create a high availability solution for the IDS server
• D. Place a 'data diode' in front of the IDS server

Answer: B

NEW QUESTION 23
Given the CIA triad elements, which ensures first that the data is encrypted and secure, second that the data is trustworthy, and third that the data is accessible by those who need it?

• A. CIA
• B. ICA
• C. ACI
• D. CAI

Answer: A

NEW QUESTION 24
It is determined that an intermittent high packet loss event is occurring within a segment of the network. The assigned task is to determine the cause. Which of these conditions should be suspected?

• A. [MISSING]
• B. [MISSING]
• C. [MISSING]
• D. [MISSING]

Answer: D

NEW QUESTION 25
......