DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Latest 2024 CND Certification Questions & Mock Tests, EC‐Council Certified Network Defender | SPOTO

Explore the latest 2024 CND Certification Questions & Mock Tests, specially crafted for aspiring EC-Council Certified Network Defenders (CND). Whether you're a network administrator, network engineer, network security administrator, or security analyst, our resources cater to professionals in the network administration and cybersecurity domains. The CND certification is esteemed for its vendor-neutral, hands-on approach, providing comprehensive training in network security. Our mock exams and practice tests are meticulously designed to prepare you thoroughly for the certification exam, covering essential topics and skills required for success. Developed under the guidance of industry experts, our exam materials ensure a solid understanding of network security concepts and practices. Don't miss out on the latest practice tests, as they are invaluable tools to maximize your chances of passing the CND certification exam and propelling your career in cybersecurity forward.

Take other online exams
Question #1
The ip helper-address command does what?
A. assigns an IP address to a host
B. resolves an IP address from a DNS server
C. relays a DHCP request across networks
D. resolves an IP address overlapping issue
View answer
Correct Answer: S
Question #2
Which router command will configure an interface with the IP address 10.10.80.1/19?
A. router(config-if)# ip address 10
B. router(config-if)# ip address 10
C. router(config-if)# ip address 10
D. router(config-if)# ip address 10
E. router(config-if)# ip address 10
F. router(config-if)# ip address 10
View answer
Correct Answer: B
Question #3
Which two statements are correct? (Choose two.)
A. This is a default route
B. Adding the subnet mask is optional for the ip route command
C. This will allow any host on the 172
D. This command is incorrect, it needs to specify the interface, such as s0/0/0 rather than an IP address
E. The same command needs to be entered on RouterA so that hosts on the 172
View answer
Correct Answer: B
Question #4
The following commands are entered on the router: Burbank(config)# enable secret fortress Burbank(config)# line con 0 Burbank(config-line)# login Burbank(config-line)# password n0way1n Burbank(config-line)# exit Burbank(config)# service password-encryption What is the purpose of the last command entered?
A. to require the user to enter an encrypted password during the login process
B. to prevent the vty, console, and enable passwords from being displayed in plain text in the configuration files
C. to encrypt the enable secret password
D. to provide login encryption services between hosts attached to the router
View answer
Correct Answer: D
Question #5
Which two of these functions do routers perform on packets? (Choose two.)
A. Examine the Layer 2 headers of inbound packets and use that information to determine the next hops for the packets
B. Update the Layer 2 headers of outbound packets with the MAC addresses of the next hops
C. Examine the Layer 3 headers of inbound packets and use that information to determine the next hops for the packets
D. Examine the Layer 3 headers of inbound packets and use that information to determine the complete paths along which the packets will be routed to their ultimate destinations
E. Update the Layer 3 headers of outbound packets so that the packets are properly directed to valid next hops
F. Update the Layer 3 headers of outbound packets so that the packets are properly directed to their ultimate destinations
View answer
Correct Answer: D
Question #6
If CDP is enabled on all devices and interfaces, which devices will appear in the output of a show cdp neighbors command issued from R2?
A. R2 and R3
B. R1 and R3
C. R3 and S2
D. R1, S1, S2, and R3
E. R1, S1, S2, R3, and S3
View answer
Correct Answer: C
Question #7
What happens when computers on a private network attempt to connect to the Internet through a Cisco router running PAT?
A. The router uses the same IP address but a different TCP source port number for each connection
B. An IP address is assigned based on the priority of the computer requesting the connection
C. The router selects an address from a pool of one-to-one address mappings held in the lookup table
D. The router assigns a unique IP address from a pool of legally registered addresses for the duration of the connection
View answer
Correct Answer: S
Question #8
What is the simplest way to configure routing between the regional office network 10.89.0.0/20 and the corporate network?
A. router1(config)#ip route 10
B. router2(config)#ip route 10
C. router1(config)#ip route 10
D. router2(config)#ip route 0
View answer
Correct Answer: ADE
Question #9
Which default gateway address should be assigned to HostA?
A. 192
B. 192
C. 192
D. 192
E. 10
F. 10
View answer
Correct Answer: C
Question #10
If the resume command is entered after the sequence that is shown in the exhibit, which router prompt will be displayed?
A. Router1>
B. Router1#
C. Router2>
D. Router2#
View answer
Correct Answer: CD
Question #11
Why would a network administrator configure port security on a switch?
A. to prevent unauthorized Telnet access to a switch port
B. to prevent unauthorized hosts from accessing the LAN
C. to limit the number of Layer 2 broadcasts on a particular switch port
D. block unauthorized access to the switch management interfaces
View answer
Correct Answer: S
Question #12
An administrator is in the process of changing the configuration of a router. What command will allow the administrator to check the changes that have been made prior to saving the new configuration?
A. Router# show startup-config
B. Router# show current-config
C. Router# show running-config
D. Router# show memory
E. Router# show flash
F. Router# show processes
View answer
Correct Answer: AC
Question #13
The two routers have had their startup configurations cleared and have been restarted. At a minimum, what must the administrator do to enable CDP to exchange information between R1 and R2?
A. Configure the router with the cdp enable command
B. Enter no shutdown commands on the R1 and R2 fa0/1 interfaces
C. Configure IP addressing and no shutdown commands on both the R1 and R2 fa0/1 interfaces
D. Configure IP addressing and no shutdown commands on either of the R1 or R2 fa0/1 interfaces
View answer
Correct Answer: BC
Question #14
An administrator has connected devices to a switch and, for security reasons, wants the dynamically learned MAC addresses from the address table added to the running configuration. What must be done to accomplish this?
A. Enable port security and use the keyword sticky
B. Set the switchport mode to trunk and save the running configuration
C. Use the switchport protected command to have the MAC addresses added to the configuration
D. Use the no switchport port-security command to allow MAC addresses to be added to the configuration
View answer
Correct Answer: C
Question #15
Which command would you use to configure a static route on Router1 to network 192.168.202.0/24 with a nondefault administrative distance?
A. router1(config)#ip route 1 192
B. router1(config)#ip route 192
C. router1(config)#ip route 5 192
D. router1(config)#ip route 192
View answer
Correct Answer: B
Question #16
What does administrative distance refer to?
A. the cost of a link between two neighboring routers
B. the advertised cost to reach a network
C. the cost to reach a network that is administratively set
D. a measure of the trustworthiness of a routing information source
View answer
Correct Answer: AC
Question #17
In the configuration of NAT, what does the keyword overload signify?
A. When bandwidth is insufficient, some hosts will not be allowed to access network translation
B. The pool of IP addresses has been exhausted
C. Multiple internal hosts will use one IP address to access external network resources
D. If the number of available IP addresses is exceeded, excess traffic will use the specified address pool
View answer
Correct Answer: D
Question #18
On a live network, which commands will verify the operational status of router interfaces? (Choose two.)
A. Router# show interfaces
B. Router# show ip protocols
C. Router# debug interface
D. Router# show ip interface brief
E. Router# show start
View answer
Correct Answer: C
Question #19
What two things does a router do when it forwards a packet? (Choose two.)
A. switches the packet to the appropriate outgoing interfaces
B. computes the destination host address
C. determines the next hop on the path
D. updates the destination IP address
E. forwards ARP requests
View answer
Correct Answer: C
Question #20
Which IOS command is used to initiate a login into a VTY port on a remote router?
A. router# login
B. router# telnet
C. router# trace
D. router# ping
E. router(config)# line vty 0 5
F. router(config-line)# login
View answer
Correct Answer: D
Question #21
The network administrator made the entries that are shown and then saved the configuration. From a console connection, what password or password sequence is required for the administrator to access privileged mode on Router1?
A. cisco
B. sanfran
C. sanjose
D. either cisco or sanfran
E. either cisco or sanjose
F. sanjose and sanfran
View answer
Correct Answer: C
Question #22
What is the best practice when assigning IP addresses in a small office of six hosts?
A. Use a DHCP server that is located at the headquarters
B. Use a DHCP server that is located at the branch office
C. Assign the addresses by using the local CDP protocol
D. Assign the addresses statically on each node
View answer
Correct Answer: AD
Question #23
A company has placed a networked PC in a lobby so guests can have access to the corporate directory. A security concern is that someone will disconnect the directory PC and re-connect their laptop computer and have access to the corporate network. For the port servicing the lobby, which three configuration steps should be performed on the switch to prevent this? (Choose three.)
A. Enable port security
B. Create the port as a trunk port
C. Create the port as an access port
D. Create the port as a protected port
E. Set the port security aging time to 0
F. Statically assign the MAC address to the address table
G. Configure the switch to discover new MAC addresses after a set time of inactivity
View answer
Correct Answer: B
Question #24
When configuring NAT, the Internet interface is considered to be what?
A. local
B. inside
C. global
D. outside
View answer
Correct Answer: S
Question #25
The command ip route 192.168.100.160 255.255.255.224 192.168.10.2 was issued on a router. No routing protocols or other static routes are configured on the router. Which statement is true about this command?
A. The interface with IP address 192
B. The command sets a gateway of last resort for the router
C. Packets that are destined for host 192
D. The command creates a static route for all IP traffic with the source address 192
View answer
Correct Answer: D

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.