Real CCNA 640-802 Questions and Answers

 
  • Increase font size
  • Default font size
  • Decrease font size

CCNA - Access List Questions

Here you will find answers to CCNA Access list questions

Question 1:

Your boss is learning a CCNA training course, refer to the exhibit. The access list has been configured on the S0/0 interface of router RTB in the outbound direction. Which two packets, if routed to the interface, will be denied? (Choose two)

accesslist1

access-list 101 deny tcp 192.168.15.32 0.0.0.15 any eq telnet
access-list 101 permit ip any any


A. source ip address: 192.168.15.5; destination port: 21
B. source ip address:, 192.168.15.37 destination port: 21
C. source ip address:, 192.168.15.41 destination port: 21
D. source ip address:, 192.168.15.36 destination port: 23
E. source ip address: 192.168.15.46; destination port: 23
F. source ip address:, 192.168.15.49 destination port: 23

 

Answer: D E

 

Question 2:

Refer to the graphic. It has been decided that PC1 should be denied access to Server. Which of the following commands are required to prevent only PC1 from accessing Server1 while allowing all other traffic to flow normally? (Choose two)

 accesslist2

A - Router(config)# interface fa0/0
      Router(config-if)# ip access-group 101 out
B - Router(config)# interface fa0/0
      Router(config-if)# ip access-group 101 in
C - Router(config)# access-list 101 deny ip host 172.16.161.150 host 172.16.162.163
      Router(config)# access-list 101 permit ip any any
D - Router(config)# access-list 101 deny ip 172.16.161.150 0.0.0.255 172.16.162.163 0.0.0.0
      Router(config)# access-list 101 permit ip any any

 

Answer: B C

 

Question 3:

Refer to the exhibit. Why would the network administrator configure RA in this manner?

accesslist3

A. to give students access to the Internet
B. to prevent students from accessing the command prompt of RA
C. to prevent administrators from accessing the console of RA
D. to give administrators access to the Internet
E. to prevent students from accessing the Internet
F. to prevent students from accessing the Admin network

 

Answer: B

 

Question 4:

An access list was written with the four statements shown in the graphic. Which single access list statement will combine all four of these statements into a single statement that will have exactly the same effect?

accesslist4

A. access-list 10 permit 172.29.16.0 0.0.0.255
B. access-list 10 permit 172.29.16.0 0.0.1.255
C. access-list 10 permit 172.29.16.0 0.0.3.255
D. access-list 10 permit 172.29.16.0 0.0.15.255
E. access-list 10 permit 172.29.0.0 0.0.255.255

 

Answer: C

Comments
say500 10-14-2008
You are doing a great job! Keep up the work. I noticed that Q1 and Q2 are the same. Hopefully I would like another access list question to replace the redundant one. Thanks again.
9tut 10-14-2008
Thank for your detection, I updated it
KDJ 10-30-2008
Thanks a million
naveen 11-10-2008
its great job but if the question have two router make question littile confusing

thanks

,,,,,,
amr 12-01-2008
i can't understand Q 3 please i need a discusion
9tut 12-03-2008
In question 3, access-list 2 is applied to vty lines (from line 0 to line 4). From the command "access-list 2 permit 10.1.1.0 0.0.0.255" we know that it will only permit packets in the Admin section go through. Therefore we can deduce it is used to prevent students from accessing the command prompt of RA through vty lines. Notice that in this case if the students want to access RA they have to use vty line (telnet) because they are far away from RA so they can not use console line
Kamran 12-04-2008
In question 4 I don't understand how one can figure out the block size without the subnet mask or the giving the slash notation, e.g. /30. Can someone explain? THanks.
Inan 12-04-2008
Excelent!!!
9tut 12-04-2008
To Kamran: /30 is a short way to write subnet mask. It means the subnet mask has 30 number 1 in its binary form
/30 = 11111111.11111111.11111111.11111100 (30 number 1 in binary form) = 255.255.255.252 (in decimal form)
Kamran 12-05-2008
Yes, I understand that but my question is in Q4 it does not say anywhere /30, only the answer 'C' implies that it is /30.

I have seen few practise questions in Lammle's CCNA certification book regarding wildcard masks and they all have either / notation specified or subnet masks in the questions. Q4 above does not.

For arguments sake, in Q4, I can use block size of 16 to include valid hosts, 16, 17, 18 and 19, right. If you agree why would not answer D be the right choice.

I will appreciate any help here since I am scheduled to take my test on the 18th of this month.....
9tut 12-05-2008
D is not the correct answer because by using a wildcard mask of 0.0.15.255, you will allow packets in the range of 172.29.16.0 to 172.29.31.255 go through, but the question just wants to let packets from 172.29.16.0 to 172.29.19.255 go through.
Kamran 12-05-2008
ok, so it seems that one has to go through all choices and eliminate the ones that do not fit the question. I was looking for an answer that will lead me to find the right block size without looking at the answers. Anyhow, thanks for your efforts in answering my questions, I really appreciate a quick response from you.
tino 12-06-2008
very nice, thanks a lot
Aziz 12-20-2008
I have an easy steps to figure it out:
First convert 16, 17, 18 and 19 to binary as shown below:

00010000 --> 16
00010001 --> 17
00010010 --> 18
00010011 --> 19
_________________All same bits, set 1___
11111100

invert the result
00000011 ----convert to Decimal--> 3

172.29.16.0 0.0.3.255

I hope this could clear the picture for others.
9tut 12-20-2008
Thank Aziz, nice explanation!
Adam 12-23-2008
I still do not how you found the answer for quetsion 4.
I'd really appreciate if you could explain it in detail.
Anonymous 12-26-2008
its done by summarizartion...cidr
metrix 12-29-2008
wildcardmask 0.0.3.255 = subnetmask 255.255.252.0
252=128+64+32+16+8+((4))+2+1
now we know the increment is 4
so subnets would be
172.29.16.0 -172.29.19.255
Tharsh 01-20-2009
plz send me latest ccna question i want to take the exam next week 25/01/2009
aNgeL 01-24-2009
i understand everything except q1 could someone help me out thanks =(
R 01-25-2009
Re: aNgeL

Telnet is port 23, so that immediately eliminates A,B,C

>access-list 101 deny tcp 192.168.15.32 0.0.0.15 any eq telnet

this access list mask covers the address range 196.168.15.32 to 192.168.15.47. Making D&E the correct answers.
yaq 02-02-2009
you are wrong
c is actually the answer. pls take note.
Umair Shahid 02-08-2009
i have confusion in Question NO .4. They use the Wild Card mask 0.0.3.255 which means that in the third octest Last two bits donot match. If the subnet mask will be 255.255.252.0 mean the same last two bits are for host in third octet. Right. But my question is that is you use last two bits you get 4 host 2^2 and you get 4 hosts. In which one is network id and one is broadcast id and their is only 2 valid hosts. So are you think that according to this sistuation we use wildcard mask 0.0.7.255 instead of 0.0.3.255? I will be very thank full to you.
ciscodreamer 02-12-2009
To Umair,

network address = 172.29.16.0
broadcast address = 172.29.19.255

172.29.16.1 1st useable host
l172.29.19.254 last useable host

So then..

172.29.20.0 - 172.29.23.255
172.29.24.0 - 172.29.27.255
172.29.28.0 -......................


Please Cisco Experts correct me if am wrong also.

Thanks!
ciscodreamer 02-12-2009
I realized with the help of my friend that we don't care anymore about networks, subnetting on this etc....Since We really don't know the network architecture of the given question. To narrow it , our approached Umair is not related to the question.

The question just stated to only allow only the said range.

to further see what I implied..Example the subnet of this
172.29.16.0 - 172.29.23.255

the administrator only want to allow the network range 172.29.16.0 - 172.29.19.0..and that is what we are required to do in the ACL..

Yet, Cisco Fiasco and 9tut still need your feedback..
sharaf 02-16-2009
vow thankz frends

i really believed 4th one is wrong

what an explanation

thankz frendss
Amit.jp 02-19-2009
Passed ccna on17 ..Very easy
Micgrad 02-23-2009
Hi, The anwser to Q4 is correct! from the books read on subnetting it is clear that you need to maximize the use of your subnet blocks. if you use any block size higher that the one the accommodates what is shown in the question you're waste the remaining except you intend to increase host on your network which the question doesnt state. But even with that, one has to be careful cos the redundant addresses might get used up in some other subnets and you know what that means.

Thanks 9tut, your right and your efforts are appreciated
shu 02-27-2009
I am pasting my comments to each window because people would know that exam has been changed if anybody know or 9tut administrator so kindly update to us.

hello, guys today i gave the test and got 706 out of 1000 failed, because there was no current update in 9tut and even p4sure.

2 simulatoin came 1. Nat, 2. Simple router configuratoin and set passwords.

but the theory questoins was totally different from pass4sure and 9tut, only i can say 10 to 15 percent came from both.

so kindly update.

ok guys best of luck.

just let me know is there any latest version after 3.22 pass4sure?

thanx
asad 03-03-2009
please can any body tell me that the pass4sure 3.22 is still the valid one to use.
Tharaka 03-04-2009
pass4sure is valid, but do not rely on p4s coz you will get 10-15 questions out of the dump you need to learn the questions. P4S and 9TUT will save your time.
Anonymous 03-09-2009
Isn't the Testking vaild now as well?
pramod 03-10-2009
p4s 3.22 is invalid frm feb 27th ! new one has released with 503 qs !
exam 03-16-2009
The exam has been updated with more focus on ACL, NAT, VLANS and Switching.
razzanarts 03-25-2009
all new ccna questions... e-books, pass4sure, testking.. free download

http://cisco-training640-802.*.com/
razzanarts 03-25-2009
all new ccna questions... e-books, pass4sure, testking.. free download

http://cisco-training640-802.*.com/
othe 03-29-2009
alhamdulillah...passing CCNA exam :)

A lot of question is from P4S 3.22, 400-503 & 9tut (labsim like ACL, NAT & RIPv2), it's about 5 or 7 is new kind of question that see on P4S or 9tut.
thanks @ll & spcecially for 9tut & P4S.

thank's
taimoor 03-29-2009
othe plz leme me knw do u have date latest p4s 3.22?plz send me aur tell me da link,from where i download?
thx
Urooj Shaikh 04-05-2009
Hello Guys,

i have my exam on 10th April, any 1 have latest Dumps?

my address is : mohd.urooj@yahoo.com

thanks in advance...
Denis 04-17-2009
i had my ccna on the 13th and i was unlucky so i intend to retake the exams on the 19th of april, the last exams i had 818/1000 rather painfull right , wish me luck on this one
mogual 04-30-2009
hi everybody, does questions in the ccna exam have already change ?
i'm asking because i'm still preparing with the p4s v3.22 + update (103).i'll take the exam next week and asking to friend some tips to make it right and manage the stress.thx to respond
mogual10@gmail.com
@yahoo.fr
iskket 05-04-2009
Hi 9tut;

How could I be able to quickly see the answers of question 1(access List)?
I can see that 21 is not telnet and thus A, B, C will be dropped. However, I could not find a valid reason whay F is wrong and how D and E could only be also correct. Please explain.
Iskket.
9tut 05-05-2009
The wildcard mask is 0.0.0.15 so it will affect all IP addresses in the range of 192.168.15.32 to 192.168.15.47 (and they will be filtered out). Please read more about wildcard mask to understand why.
@ccna 05-09-2009
hi all
thanks for the administartor of this site it is a good work,and for all ppl particepating
i just wanna say that the exam has been changed on 1-5-2009 please if any one has idea of the changes
thanks again.
BootyBandit 05-12-2009
iskket,

The reason that F is not a correct answer in question number 1 is that, you are configuring an access list on RTB. The ip 192.168.15.49 is the fast ethernet address of RTA, which does not pass through RTB to access the Telnet Server.

Hope this clears things up.
i tr00f 9 05-14-2009
For access lists questions it ALWAYS comes down to subnets.

Q1 - is PRIME example. The reason it is D and E is as follows.

access-list 101 deny tcp 192.168.15.32 0.0.0.15 any eq telnet
access-list 101 permit ip any any

A. source ip address: 192.168.15.5; destination port: 21- This is obviously STUPID if you pick this, its FTP! (port 21 of TCP)

B. source ip address:, 192.168.15.37 destination port: 21
Again its FTP (port 21 of TCP)

C. source ip address:, 192.168.15.41 destination port: 21
Again its FTP (port 21 of TCP)

D. source ip address:, 192.168.15.36 destination port: 23

E. source ip address: 192.168.15.46; destination port: 23

F. source ip address:, 192.168.15.49 destination port: 23

If you were a smart cookie you SEE that the subnet is





D) 192.168.15.32/29 (the increment is 8)
32 + 8 = 40. 33 through 38 is range, .39 is broadcast and .40 is the next network. So naturally the ONLY answer that can fit into that range would be 192.168.15.36!

E)
192.168.15.40/29 (The increment is 8)

So if you added 8 to 40 you get 48 but. You can't use .40 as that's the network, you can't use 47 or 48 because that's the broadcast address of that network range and you cannot use 48 as that's the NEXT network.

F) If you pick this you are in trouble. #1 There is no subnet for that range!
192.168.15.49 would be part of the 192.168.15.48 network with a range of 48 through 56. You could not use 49 as it's in a different subnet that is NOT listed. But FYI the range would be .49 through .54 with .55 and .56 used for broadcast and the next network.

So REMEMBER even though the question is about an ACL, you still have to know subnetting to pick the right answer!

You can *Try* to memorize p4s, but I tell you when you know the material, questions are not that difficult. Take the time to learn subnetting you NEED IT BIG TIME BIG TIME BIG TIME to take the CCNA, the CCNP and just in real life you need to know!!

Learn subnetting. CBT nuggets ccna does a good job, so does trainsignal and Lammle (sybex 6th edition) those are my main study guides and I just glanced at this stuff on this site, but I already knew the answer to over 90% of the questions on here except that STUPID frame relay question about "password required" or not required or it is but they don't want it.

What's up with that? Crazy.
i tr00f 9 05-14-2009
....continued it cut me off!


Learn subnetting. CBT nuggets ccna does a good job, so does trainsignal and Lammle (sybex 6th edition) those are my main study guides and I just glanced at this stuff on this site, but I already knew the answer to over 90% of the questions on here except that STUPID frame relay question about "password required" or not required or it is but they don't want it.

What's up with that? Crazy.
nana 05-27-2009
Hi guys.

I'll b writing 640-802 on Tuesday 020509 can any1 pls help my email add is ntshabaku@yahoo.com
nana 05-27-2009
I'll b writing 640-802 on Tuesday 020609 can any1 pls help my email add is ntshabaku@yahoo.com
mohamed 06-05-2009
Have you some LABs for CCNA security certification (640-553)...?? please contact me at: ms.kebaili@gmail.co
geminiii 06-10-2009
hii ... can any1 tell me tht is there is any update in pass4sure v8.03 ???? n has the test changed ????? n retake of ccna exam is free or not ????
bob 06-21-2009
@i tr00f,

0.0.0.15 is /28 or .240 giving 16 hosts minus the network and minus the broadcast - so increment of 16 not 8, that said, there are 14 available hosts. .36 and .46 using the telnet port 23 permit. in the acl.

Q1 is correct, answer is DE
faisal 06-30-2009
how i get CBT nuggets?.it is vedio lecture?pls help
Sean 07-07-2009
Good job! Keep up the great work, great web site!
zorro 07-08-2009
thnx i tr00f 9 very much
Muguta 07-14-2009
First & foremost is to thank 9tut for their great great work.i sat for my ccna on 10/7/09 and i finished b4 time coz of their amazing site.All the
sims were from the site i.e acl,frame-relay,nat & ripv2. The only change was the ip addresses.
The exam wasnt hard as long as you've studied and understand the mystery.i reaped 930.
Thanks to 9tut once again.All the best for those who are due to sit for the exam the soonest.
My phone no +254721-694210
envy 07-21-2009
Hi
Anyone looking for IT forum for Cisco Microsoft Comptia and others
visit
http://www.certcollection.org
you have to register but the site is helpful for IT exam prep material

Good Luck
Gilly 07-29-2009
Hey guys,

Let people not fool you, i wrote today and this site is good for simulations and Acl questions, Troubleshooting ...

Visit Exam Collection and go through the 136 VCE and also go through your pass4ssure V.7.58.

I passed today with 930/1000. good luck

www.excamcollection.com

Bye
ali khan 07-29-2009
http://www.4shared.com/file/121191658/2e1d6eee/642-892V334.html

testinside latest 642-892 Questoin version 3.34 197Q&A

http://www.4shared.com/file/121193803/642fa6a2/pass4sure_640-802_350_QA.html


http://www.4shared.com/file/121195104/d0f15752/pass4srue_642-845_374_QA.html


http://www.4shared.com/file/121193803/642fa6a2/pass4sure_640-802_350_QA.html


http://www.4shared.com/file/121195716/23697b8d/pass4sure_642-892_399_QA.html



download as soon as possiable may link deleted with 72 hours.
ammar 07-29-2009
Hi,
Mail address: examtech@yahoo.com
For 100% sure pass in 1st attempt
With special step by step lab complete solution
Exam: CCNA, CCNP, CCIE R&S and other
Any exam question not over then 256 and no name change no option up down, no less or more option, like real exam 99%.
Thanks
concerned 08-01-2009
KNOWLEDGE is FREE
HELP is FREE

Join certcollection.org
MEMBERSHIP is FREE
KNOWLEDGE is FREE
HELP is FREE

You can get the LATEST pass4sure test engines FREE,
cbt nuggets FREE,
pdf files FREE

FREE MEMBERSHIP @ certcollection.org

JOIN NOW and ENJOY the FREEDOM :)
vie 08-14-2009
Hi guies
i am gona do the exam befor Ramadan . 4 the scand time

i dont wont to fail this time so please

please if u have any advise to help me passing that exam E.mail it to me

thanks .vuolit.girgis@gmail.com
jara 08-16-2009
Vie, I am writing the comments about the exam on each page with the questions.
pritish 08-23-2009
I am having CCNA 2 morrow plz send the latest dumps

pritsk02@gmail.com
naka 08-26-2009
please
someonesend me p4s 8.14!
my email address yoshinakayama33@gmail.com

I have only 3.22 pass4sure.. I think this is old one.

thank you
pandu 08-30-2009
Hi Friends,

I am having CCNA exam on 2nd September 2009,

I have only practiced the questons with routing protocols simulations in the ICND2 &1 books with the "Do u know Quiz" questions.

Can any one send me the p4s 8.14! latest dump please !!!!

My E-mail address: panduranga.u@gmail.com
durga prasad 09-11-2009
Good One keep it up

excellent knowledge .........
xavier 09-18-2009
I´ll have my second CCNA exam tomorrow and I so scared because i really suck, my first attempt i scored 788 marks, hey guys wish me good luck

regards from chiapas, mexico
xavier 09-19-2009
hey fellas once again me, let tell you something, today i did my second CCNA exam i scored 986 marks, i so happy, and screw you guys because no one gave me a tip o wished me a good luck, also thanks for all information in this web site.

Best regards from Mexico city.

Xavier
samo 09-24-2009
i passed the CCNA 640-802 today
thank you very very much
all of the questions from pass4sure 8.14 and 9tut
with the simulation lab of frame relay and another one for access-list and the third one for basic configuration and rip version 2

note : it's so easy to pass it's not difficult believe me!!
spy 09-24-2009
is there a second chance if i fail the first attempt on the exams? is it free of charge? i am from the philippines. i am planning to take the exams next month
zed 10-07-2009
I would like to get the latest materials from someone,

use messsenger

address kem_lawes@hotmail.com
mr. k 10-09-2009
Hi I accendentally came in contact with your site.
I think you have the solution for my ccna cert. exams I will be gald if you can send me the latest dump material and pass4sure cos what am reading now is old according to the comment from your site. thank in adance. fkbampah @yahoo.com
Mr DDV1 10-23-2009
You are a dedicated servant of the cisco community , thank you .
ERIC 10-29-2009
Even if we fail in CCNA exam will be get the certificate from cisco . I got 804 . Jus missed by a silly mistake . I made a blunder in NAT simulation . Made a mistake in wild card mask . I wanna know will i get certi from cisco . plz reply
Chris 11-04-2009
Hi There,

Ref Q1. The subnets are indeed /248 so am i reading this right in that the question is misleading?
Would it not be that by stating 0.0.0.15 as the wildcard mask, they are actually saying that anything "from" 192.168.15.32 all the way to 192.168.15.47 (Covering two subnets) would be blocked, thereby making the answer C+D?

I thought I had this sorted but now and confused. Can anyone help clarify?

Currently setting this up in a sim. Will let you know once i've got it working......

Cheers
Chris 11-04-2009
Guys,

The answer must indeed be C+D, assuming i have recreated this right on a simlab using Ciscos Packet Tracer 5.1.

Once the ACL was applied, I could telnet to RTB Router (From a PC with IP Address 192.168.15.44/29) but not to RTA. As soon as I removed the ACL from the S0/0 interface on RTB, i was again able to telnet. So, i'm guessing that the wildcard mask 0.0.0.15 when referencing a /248 subnet, must cover two subnets.

Any other comments most welcome. Want to make sure I have understood it correctly!!! Guess it is one of those questions that makes sure you RTFQ and understand it :-)


Cheers All
Chris 11-04-2009
oops, i ment Answers are D+E....
Blackrose 11-10-2009
I would like to comment on question number 4.

It would appear that answer D would be correct, unless I am tired and not working this out correctly.

0.0.3.255 = 255.255.252.0 right?

172.29.16.0 Network
172.29.16.1 First
172.29.17.254 Last
172.29.17.255 Broadcast

So how does .18.0 and .19.0 work in this? Please explain.
skreben 11-30-2009
oooo, boy!
256-253 in the third octet = 4.
172.29.16.0 + 4 in the third octet = 172.29.20.0
broadcast - 172.16.19.255
Anonymous 12-04-2009
how can i make use of packet tracer 5.0 simulator. i dont know how to make use of it.
Anonymous 12-05-2009
Any thoughts on CCNA Cutoff..?
tymer 12-07-2009
this is good...... thanks guys
Khalil 12-13-2009
Hello Fri,

I am giong to take CCNA exam in after 15 days, hence it is request for any help regarding this test.
Khalil 12-13-2009
please also telll me how to make frame-relay lab in packet tracer simu.
JoJo 12-14-2009
Dear 9tut,
I am just wondering, how did you manage to find these questions?
jbm 12-18-2009
Hello all,

Thank you all for your comments and good work done by 9tut,

am doing my exam on 29th, could email latest p4s latest I guess its 8.14 or testing/killtest

sphiwam@yahoo.co.uk
Floyd 12-22-2009
Hi all,
could u email d latest p4s latest I guess its 8.14 to floyd_suares@hotmail.com
Adalarasan P 12-22-2009
Pls do send me p4s latest update 8.14 to my mail id..
peggy 12-25-2009
The easiest way to answer Q4 can be achieved by calculating "hot octed"'s wild card simply by reducing 1 from number of networks (4) and here we get 3. also note that all networks have 0.0.0.255 wild card so to supernet you have to borrow bits from last network octed which is third octed and we call that hot octed so we get 0.0.3.255 for wild card. the lowest network is 16.0 so we get 172.29.16.0 for supernetted network IP.(thank me if this helps not GOD,lool)

My question is about Q2 and why answer A is wrong,I think the reason is cisco recommendation on putting extended access lists as close as possible to source.but practically answer A should work fine.
9tut 12-25-2009
Q2 answer A is wrong because we need to apply access-list to the inbound direction of Fa0/0, not the outbound direction.

I think you didn't read the question carefully and think answer A something like this
Router(config)# interface fa0/1
Router(config-if)# ip access-group 101 out
If it were "fa0/1" then A would be correct too.
peggy 12-26-2009
Yap 9tut, your right,I read it like fa0/1.I just can't stand read the questions word by word.don't know how to deal with that :-)
BHARAT 01-04-2010
hello guys i have a vey big doubt pls help me out i ahev couple of questions 1st how do i start to use 9tut i mean the step by step way 2 nd i have been studying from pass4sure v 7.73 +8.03+v8.14 +testinside v 26 i just have testinside left to study i am studyin lab sims and all other stuff frm 9tut m 9tut bt i am confused as to how to use this website plssss help me guys and aslo tell me is the material i am using is enough plssss mail me my query answers at bharat.bkj@gmail.com
Pragmatic Titu 01-06-2010
I need CCNA last updated Dumps(29.12.09), Anybody help me? if yes then mail me at jalal_titu@yahoo.com
nochi 01-07-2010
Help on question number 2!

I'm really confused wether it should be IN or OUT.

my answer is OUT because you're preventing the PC1 from accessing (from going out the router) the SERVER.

Please help me with this one. thanks a lot!
9tut 01-07-2010
Traffic flows from PC1 to the Server so port Fa0/0 is the inbound port -> we must use inbound direction
Nader 01-09-2010
Q4:

I am Extremely Sure that the wild mask is 0.0.0.3

here is my explanation of this case :

We have 16 to 19 so the largest is 19

the largest is smaller than 32 which is from
128 64 32 16 8 4 2 1

so in this case we need 6 bits to represent as ones in the third octet i.e the subnet mask is 252 or /30 , in this case the corresponding wild mask will be 0.0.0.3 .
9tut 01-09-2010
Wildcard masks are calculated differently with the subnet masks. To cover addresses from 172.29.16.0 to 172.29.19.0 we need a subnet mask of 255.255.252.0. Reverse this subnet mask we get 0.0.3.255 and that is the wildcard mask we need.
Al-kebsi 01-13-2010
ATTENTION!!!!!!!!!!!!!!!!

the P4S 640-802 has a new version updated on Jan 2010 and the real exam Q have been updated.

So if anyone has got the latest P4S CCNA, please share it on this great forum.

Many thanks in advance
Zeeshan 01-14-2010
I appeared in exam 0n 13th of Jan. unfortunately failed coz didnt nail NAT sim. Tip: whole the exam was from Testinside v11.72. i promise!!!!
v vamshi 01-15-2010
the questions were good,and so us eful to all the people who r preparing for certification but as a learners we have some doubts so for that we ra expecting explenation tooo....
v vamshi 01-16-2010
i have one doubt in q3 as we know that there acceess-list specfiying that 2 is standard access-list but if we use standard access-list it stops all the services,according to that option's i hope B and F also right.....
am i correct please give explanation any body..........
baja 01-19-2010
I have a question I have been studying Pass4sure 8.14 and
then started looking at Testinside 11.72. Please let me know if
I can pass the 640-802 exam with just 9tut.com and testinside 11.72
or do I need the latest pass4sure my exam is this coming Monday please let me
know at my email bajapantycmetoto@aol.com. Also I have watched the cbtnuggets vids
and went through some of the chapters in sybex and cisco press. If anyone has the
lasted pass4sure please let me know pleasssseeeee.
Oscar 01-20-2010
Gday 9tut,

Query regarding Q. No.3: Why we can not choose "pemit admin to access internet" choice.

i have gone through your comment related to question but still can not digest it. It will be nice to have your comments as i do have exam tomorrow morning :).

Best Regards,
Oscar.

P.S: Wonderful work and extraordinary patience to reply to genuine queries of ccna students.
9tut 01-20-2010
The access-list is just applied to VTY lines (telnet) so it can't "permit admin to access internet". Admins can access internet with or without this access list.
9tut 01-20-2010
@vvamshi: Configure an access-list like this is not an effective way to prevent students from accessing Admin network because they can do it via SSH or HTTP...
nguyễn thanh sơn 01-22-2010
172.29.16.0
172.29.17.0
172.29.18.0
172.29.19.0

....

ip range : 172.29.16.0-->172.29.19.255 ( A-->B )

B - A ------>>>>> 0.0.3.255

hehe
nishu 01-27-2010
i have a problem with Q3 i think the answer is C since access-class is used for putting the acl on the vty lines of the router plz help me clear the doubt 9tut any help will be kindly appreciated
saintdalion 02-05-2010
If any one has problem outside the 9tut or question or may need advice on how i passed and how he too will then he or she should send me an email at saintdalion@yahoo.com and everyone should take 9tut serious.send me an email and lets discuss wat ever u fail proir to ur exam
M Geroge 02-13-2010
I read this question in the Actual Tests Dumps and I am not sure of the validity of AT's answer as I personally believe it to be "None of the above". So please help me to the right solution with explanation. Thanks a lot in advance....

Q:
You need to place an access list on the fa0 interface of Home router; that will deny access to all hosts that lie within the range 192.168.160.0 - 192.168.191.0.
Hosts in the 192.168.195.0 network should be granted access. Which one of the following answer choices fulfills your needs?

A. access-list 1 deny 192.168.163.0 0.0.0.255
B. access-list 1 deny 192.168.128.0 0.0.127.255
C. access-list 1 deny 192.168.160.0 0.0.255.255
D. access-list 1 deny 192.168.160.0 0.0.31.255
E. None of the above

Answer: E (my view)
D (as per Actual Test Q. No. 604)
Siddiqi 02-15-2010
I read this question in the Actual Tests Dumps and I am not sure of the validity of AT's answer as I personally believe it to be "None of the above". So please help me to the right solution with explanation. Thanks a lot in advance....

Answer to ur q is D. reason it is correct beacause 31.255 only block the same range which is in question.
siddiqi 02-15-2010
please let me know which web site good for exam question. i am planning to buy from realexam.com./for 802 exam
olubukola 02-19-2010
pls i need latest dump on ccna, i will be writing the exam nextweek
olubukola 02-19-2010
pls i need latest dump on ccna, i will be writing the exam nextweek. my e-mail is olubukolaoyetunji@yahoo.com
siddiqi 02-19-2010
whats the latest version of pass4sure?
Raghu 02-20-2010
Hi folks shall i have access to calculater in exam.........if not will i be allowed to use pen and paper?. For subnetting......?
DEVIL 02-26-2010
HI ALL.. I AM NEW TO THIS SITE. . IT GAVE ME CONFIDENCE THAT I CAN CLEAR THE EXAM WITH EASE. . GOING TO TAKE THE TEST TOM
DEVIL 02-26-2010
HI RAGHU . . YOU ARE NOT ALLOWED TO USE CALC BUT YOU WILL BE GIVEN PEN AND PAPER. . TO BE IN THE SAFER SIDE, U CARY A PAPER AND PEN
DEVIL 02-26-2010
HEY GEORGE ITS VERY CLEAR THAT THE ANSWER IS D. . YOU NEED TO BLOCK 31 ADDRESSES, SO IT IS OBVIOUS THAT IT IS 31.255.
samer 02-27-2010
hi all i passed today with 1000/1000 thx god
thanks alot for 9tut
about question 4 in fr hot spot the answer a: no password
about your answer 9tut telnet its not like this in exam u can modify it to te1net its one not L
im sure cuz i have full mark

i finish my exam in 55 min
All questions are from TI 11.72 and lab sims are from 9tut.
my labsims are NAT, RIPv2 and Frame relay.
tooo easy...im ready to help any one brothers
my email samer_hussan@hotmail.com
Ali 03-02-2010
can i find the latest dumps they are changed.
deo 03-13-2010
it has helped done alot to me and l think it needs areward for that.
Add A Comment
Name:
Website:

3.26 Copyright (C) 2008 Compojoom.com / Copyright (C) 2007 Alain Georgette / Copyright (C) 2006 Frantisek Hliva. All rights reserved."

Last Updated ( Sunday, 08 November 2009 11:53 )