Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: What type of address is 10.100.34.34? A) Private B) Public C) Multicast D) Reserved Correct Answer: A Explanation: Any 10.x.x.x address is in the RFC1918 private block and used on internal networks. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: What type of address is 192.168.7.126? A) Private B) Public C) Multicast D) Reserved Correct Answer: A Explanation: 192.168.0.0–192.168.255.255 is a private range; hosts here require NAT to reach the internet. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: What type of address is 198.133.219.148? A) Private B) Public C) Multicast D) Reserved Correct Answer: B Explanation: 198.133.219.148 is not in any RFC1918 private block, so it is a public, globally routable IPv4 address. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: What type of address is 192.168.7.98? A) Private B) Public C) Multicast D) Reserved Correct Answer: A Explanation: 192.168.7.98 is within the 192.168.0.0/16 private range defined by RFC1918. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: What is the term used to indicate a variation of delay? A) latency B) serialization delay C) speed mismatch D) jitter Correct Answer: D Explanation: Jitter is the variation in inter-packet arrival time; latency is overall delay. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: A ping shows the time for a packet to go to a destination and return. What is this value called? A) jitter B) latency C) priority D) bandwidth Correct Answer: B Explanation: The ping round-trip time (RTT) is a direct measure of network latency. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: Which device would be classified as a trusted endpoint for QoS marking? A) switch B) router C) firewall D) IP phone Correct Answer: D Explanation: Trusted endpoints (e.g., IP phones, WAPs, video systems) can mark traffic at L2/L3 and are accepted at the QoS trust boundary. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: What is a benefit of deploying Layer 3 QoS marking across an enterprise network? A) Layer 3 marking can carry the QoS information end-to-end. B) Layer 3 marking works on switches that are not IP aware. C) Layer 3 marking is carried in 802.1Q fields. D) Layer 3 marking can carry non-IP traffic. Correct Answer: A Explanation: L3 (IP) markings persist across L2 domains and WANs, enabling end-to-end QoS treatment. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: What is the function of a QoS trust boundary? A) Identifies where traffic cannot be remarked B) Allows only previously marked traffic C) Identifies which devices trust the markings on ingress packets D) Allows only traffic from trusted endpoints Correct Answer: C Explanation: The trust boundary is where the network accepts packet QoS markings (e.g., from trusted endpoints) without rewriting them. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: Which configuration offers the most protection for SNMP get/set messages? A) SNMPv2 for in-band management with RW community strings B) SNMPv1 with out-of-band management C) SNMPv3 configured with the auth security level D) SNMP community strings Correct Answer: C Explanation: SNMPv3 supports authentication (and optionally privacy/encryption) protecting management traffic; SNMPv1/2 do not. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: The command `ntp server 10.1.1.1` on a router does what? A) Sets the syslog server B) Synchronizes the system clock with 10.1.1.1 C) Selects a backup configuration server D) Forces timestamps on logs Correct Answer: B Explanation: `ntp server <ip>` configures the device to use that host as its NTP time source. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: Implementing EtherChannel on the corporate network consists of what? A) Providing redundant links that block/forward dynamically B) Grouping two devices to share a virtual IP address C) Grouping multiple physical ports to increase bandwidth between two switches D) Providing redundant devices for failover Correct Answer: C Explanation: EtherChannel aggregates several physical switch ports into a single logical link to increase throughput and resilience. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: What is a definition of a two-tier LAN design? A) Access+core in one tier; distribution separate B) Distribution+core collapsed into one tier; access separate C) All three tiers collapsed; backbone separate D) Access+distribution collapsed; core separate Correct Answer: B Explanation: In small sites, the distribution and core functions are combined, with a distinct access layer. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: A host can reach local devices but not remote networks. What is the most likely cause? A) Incorrect subnet mask B) Invalid default gateway address C) Bad NIC cable D) Invalid IP address Correct Answer: B Explanation: Without a correct default gateway, the host cannot forward traffic beyond its local network. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: In which step of gathering symptoms is the problem localized to core, distribution, or access? A) Gather information B) Narrow the scope C) Document the symptoms D) Determine ownership Correct Answer: B Explanation: Narrowing the scope places the issue within a specific network layer to target likely devices. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: Which type of network traffic cannot be managed using congestion-avoidance tools? A) TCP B) ICMP C) IP D) UDP Correct Answer: D Explanation: UDP is connectionless and lacks built-in congestion control; queuing helps but true avoidance cannot be signaled. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text.

Output: Question: When QoS is implemented in a converged network, which two factors are controlled to improve real-time traffic? (Choose two.) A) delay B) packet addressing C) jitter D) packet routing Correct Answer: A,C Explanation: Voice/video quality depends on low delay and low jitter; addressing/routing choices do not directly provide QoS. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: An administrator wants to load a new router configuration from a TFTP server. Which two pieces of information are required before starting? (Choose two.) A) name of the configuration file currently on the router B) configuration register value C) name of the configuration file on the TFTP server D) router IP address E) TFTP server IP address Correct Answer: C,E Explanation: To fetch a file via TFTP the device must know the TFTP server’s IP address and the exact filename to request. The current config name and register value are not needed for this operation. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: What are three functions provided by the syslog service? (Choose three.) A) select the type of logging information captured B) periodically poll agents for data C) provide packet-flow statistics D) provide traffic analysis E) gather logging information for monitoring and troubleshooting F) specify destinations of captured messages Correct Answer: A,E,F Explanation: Syslog is used to collect logs, control what severity/facility is recorded, and define where the messages are sent. It does not poll agents or analyze traffic. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: What is the function of the MIB element in a network management system? A) collect data from SNMP agents B) send and retrieve network management information C) change configurations on SNMP agents D) store data about a device Correct Answer: D Explanation: The Management Information Base (MIB) resides on the managed device and stores structured information about that device. Managers query agents to read those MIB objects. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: When planning redundancy in a hierarchical network, which action should be taken? A) add alternate physical paths for data B) continually purchase backup equipment C) enable STP portfast between switches D) immediately replace any failed module or service Correct Answer: A Explanation: Path redundancy provides alternate physical routes so traffic can continue if a link fails, increasing availability and allowing load sharing. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: In Cisco Borderless Architecture, what is a basic function of the access layer? A) aggregate Layer 2 broadcast domains B) provide access to the user C) aggregate Layer 3 routing boundaries D) provide fault isolation Correct Answer: B Explanation: The access layer connects end devices/users to the network. Aggregation and fault isolation are handled in the distribution/core layers. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: When is the most appropriate time to measure operations to establish a network performance baseline? A) whenever high network use is detected B) during quiet vacation periods C) at random times over a 10-week period D) only during peak business hours Correct Answer: C Explanation: A baseline should represent typical behavior, so samples are collected at random times over an extended period to capture normal variations. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which traffic type requires one-way latency to be no more than about 150 ms? A) voice B) video C) data D) storage replication Correct Answer: A Explanation: VoIP is highly sensitive to delay; ITU recommendations target ≤150 ms one-way latency for acceptable call quality. Data apps usually tolerate higher delays. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: A manager wants log entries to include the time a message was generated. Which Cisco IOS command should be used? A) show cdp interface B) ntp server 10.10.14.9 C) service timestamps log datetime D) clock timezone PST -7 Correct Answer: C Explanation: `service timestamps log datetime` adds date/time stamps to syslog messages; NTP is used to obtain accurate time but does not enable log stamping by itself. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: What are two characteristics of the best-effort QoS model? (Choose two.) A) allows end hosts to signal QoS needs B) uses a connection-oriented approach with QoS C) provides preferential treatment for voice packets D) provides no delivery guarantee for packets E) treats all network packets the same way Correct Answer: D,E Explanation: Best-effort is the default Internet model—no guarantees and all packets are forwarded equally without priority or reservation. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Why is QoS especially important in a converged network carrying voice, video, and data? A) Data communications are most sensitive to jitter. B) Legacy equipment cannot send voice/video without QoS. C) Data must always have first priority. D) Voice and video are more sensitive to latency. Correct Answer: D Explanation: Real-time media is delay- and jitter-sensitive; without QoS, voice/video packets may suffer drops and delay equal to best-effort data, degrading quality. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which statement describes SNMP operation? A) An SNMP agent on a managed device collects info and stores it remotely in the NMS MIB. B) A set request is used by the NMS to change configuration variables in the agent device. C) An NMS polls SNMP agents by using traps to query devices for data. D) A get request is used by the SNMP agent to query the device for data. Correct Answer: B Explanation: In SNMP, the manager (NMS) can modify variables on agents by sending a SET request. Agents locally maintain MIB data; managers poll using GET requests, while traps are unsolicited notifications from agents. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: What are the three layers of the switch hierarchical design model? (Choose three.) A) distribution B) network access C) data link D) enterprise E) access F) core Correct Answer: A,E,F Explanation: The classic hierarchical model uses access (user edge), distribution (policy/routing boundary), and core (high-speed backbone). 'Network access', 'data link', and 'enterprise' are not layers in this model. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which troubleshooting tool would you use to inspect the Layer 2 headers of frames leaving a host? A) knowledge base B) protocol analyzer C) CiscoView D) baselining tool Correct Answer: B Explanation: A protocol analyzer (e.g., Wireshark) captures and decodes frames/packets, showing headers at any OSI layer, including Layer 2. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which traffic type is least resilient to loss? A) video B) data C) voice D) email Correct Answer: A Explanation: Video streams are bursty and consume large bandwidth; even small loss degrades quality. Voice tolerates minimal loss with concealment, and typical data apps can retransmit lost packets. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: A network manager wants to list the contents of flash on a Cisco router. Which command should be used? A) show file systems B) dir C) lldp enable D) service timestamps log datetime Correct Answer: B Explanation: The 'dir' command displays files and directories on a storage device (e.g., flash:), including IOS images and configs. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Voice packets are received in a stream but delays between packets vary, causing broken conversations. What is the cause? A) buffering B) latency C) queuing D) jitter Correct Answer: D Explanation: Jitter is the variation in one-way delay between successive packets; excessive jitter disrupts real-time voice playback. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: A user can reach a site by IP (http://72.163.4.161) but not by name (http://www.cisco.com). What is the issue? A) DHCP B) DNS C) Default Gateway D) TCP/IP Protocol stack Correct Answer: B Explanation: Name resolution is failing; DNS translates hostnames to IP addresses. If DNS is misconfigured or unreachable, names won’t resolve though direct IP access works. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which command shows the size of the Cisco IOS image in flash on a router? A) show flash:0 B) copy flash: tftp: C) config-register 0x2102 D) confreg 0x2142 Correct Answer: A Explanation: 'show flash:0' (or 'show flash:') lists detailed information about flash contents, including the IOS image filename and size. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which queuing algorithm uses a single queue and treats all packets equally? A) CBWFQ B) FIFO C) LLQ D) WFQ Correct Answer: B Explanation: FIFO (First-In, First-Out) processes packets in arrival order without prioritization—simple but unsuitable for time-sensitive traffic when congested. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which traffic type typically requires at least ~30 Kbps of bandwidth per flow? A) voice B) data C) video D) web browsing Correct Answer: A Explanation: Compressed VoIP streams (e.g., G.729) require tens of Kbps plus overhead; ensuring this bandwidth with QoS prevents choppy audio. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: A network manager wants to backup the running configuration to a file server. What command should the administrator use on a Cisco router? A) cd usbflash0: B) show file systems C) copy running-config tftp D) dir Correct Answer: C Explanation: The 'copy running-config tftp' command saves the router’s current active configuration to a TFTP server for backup. It allows restoring configurations after a reset or replacement. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: What type of traffic typically receives lower priority if it is not mission-critical? A) voice B) data C) video D) broadcast Correct Answer: B Explanation: Data traffic, such as file transfers or email, is less time-sensitive than voice or video. QoS systems often deprioritize non-critical data to optimize network performance. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: What type of traffic is described as unpredictable, inconsistent, and bursty? A) audio B) video C) data D) voice Correct Answer: B Explanation: Video traffic varies based on scene complexity and compression, making it bursty and inconsistent. It consumes higher bandwidth and requires QoS prioritization to avoid jitter. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which traffic type can tolerate some latency, jitter, and packet loss without noticeable impact? A) voice B) video C) data D) control Correct Answer: B Explanation: Video applications use buffering and correction to handle small network delays or losses, maintaining smooth playback even under minor instability. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: What type of traffic can tolerate up to 400 milliseconds (ms) of latency before degradation occurs? A) voice B) data C) video D) broadcast Correct Answer: C Explanation: Video traffic can handle slightly higher latency than voice because of buffering mechanisms that smooth playback. Delays beyond 400 ms may cause sync issues. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which type of traffic requires higher priority when interactive? A) data B) voice C) video D) management Correct Answer: A Explanation: Interactive data such as Telnet, SSH, or online gaming needs immediate response and thus must be prioritized to maintain responsiveness. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which type of traffic is predictable and smooth in nature? A) data B) video C) voice D) IoT control Correct Answer: C Explanation: Voice traffic generates data at a consistent rate with evenly spaced packets, ensuring stable and continuous communication in real-time. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which traffic type typically requires at least ~30 Kbps of bandwidth per flow? A) voice B) data C) video D) web browsing Correct Answer: A Explanation: Compressed VoIP streams (e.g., G.729) require tens of Kbps plus overhead; ensuring this bandwidth with QoS prevents choppy audio. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: A company uses a cloud-based payroll system. Which cloud computing model is being used? A) browser as a service (BaaS) B) infrastructure as a service (IaaS) C) software as a service (SaaS) D) wireless as a service (WaaS) Correct Answer: C Explanation: SaaS delivers applications over the internet, such as payroll or CRM systems, managed entirely by the provider. Users access them via a browser. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which cloud model provides services exclusively for a specific organization? A) public cloud B) hybrid cloud C) private cloud D) community cloud Correct Answer: C Explanation: A private cloud is dedicated to a single organization, offering enhanced security and control compared to shared public environments. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Voice packets are being received in a continuous stream by an IP phone, but because of network congestion the delay between each packet varies and is causing broken conversations. What term describes the cause of this condition? A) provides a “pay-as-you-go” model, allowing organizations to treat computing and storage expenses as a utility B) enables rapid responses to increasing data volume requirements C) distributed processing of large data sets in the size of terabytes D) elimination of vulnerabilities to cyber attacks Correct Answer: A,B Explanation: Organizations can use virtualization to consolidate the number of required servers by running many virtual servers on a single physical server. Cloud computing allows organizations to scale their solutions as required and to pay only for the resources they require. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which type of hypervisor is implemented when a user with a laptop running macOS installs a Windows virtual OS instance? A) type 2 B) virtual machine C) type 1 D) bare metal Correct Answer: A Explanation: Type 2 hypervisors, also known as hosted hypervisors, are installed on top of an existing operating system, such as macOS, Windows, or Linux. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which scenario describes the use of a public API? A) It requires a license. B) It can be used with no restrictions. C) It is used between a company and its business partners. D) It is used only within an organization. Correct Answer: B Explanation: Public or open APIs have no restrictions and are available to the public. Some API providers may require a key or token to manage the volume of API requests. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: What technology allows users to access data anywhere and at any time? A) Cloud computing B) Virtualization C) Micromarketing D) Data analytics Correct Answer: A Explanation: Cloud computing eliminates the need for on-site IT infrastructure, allowing access to services and data from anywhere while reducing operational costs. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Because of enormous growth in web traffic, a company has planned to purchase additional servers to help handle the web traffic. What service or technology would support this requirement? A) Virtualization B) Data center C) Cloud services D) Dedicated servers Correct Answer: D Explanation: Dedicated servers provide exclusive access to physical hardware resources, ensuring high performance and reliability during increased web traffic. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which protocol is attacked when a cybercriminal provides an invalid gateway in order to create a man-in-the-middle attack? A) DHCP B) ICMP C) DNS D) HTTP or HTTPS Correct Answer: A Explanation: A rogue DHCP server can assign incorrect default gateways or DNS servers, enabling attackers to intercept traffic or redirect users to malicious sites. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which action takes place in the assurance element of the IBN model? A) Verification and corrective action B) Configuring systems C) Translation of policies D) Integrity checks Correct Answer: A Explanation: The assurance element in the IBN model ensures network-wide verification and correction to maintain policy compliance and optimal performance. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: What is a difference between the functions of Cloud computing and virtualization? A) Cloud computing requires hypervisor technology whereas virtualization is a fault tolerance technology. B) Cloud computing separates the application from the hardware whereas virtualization separates the OS from the underlying hardware. C) Cloud computing provides services on web-based access whereas virtualization provides data access through virtualized connections. D) Cloud computing uses data center technology whereas virtualization is not used in data centers. Correct Answer: B Explanation: Cloud computing separates applications from hardware, while virtualization separates the operating system from hardware. Virtualization is a key component of cloud infrastructure. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: How is the YAML data format structure different from JSON? A) It uses indentations. B) It uses end tags. C) It uses hierarchical levels of nesting. D) It uses brackets and commas. Correct Answer: A Explanation: YAML relies on indentation to define structure, making it more human-readable than JSON, which uses brackets and commas. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which cloud computing opportunity would provide the use of network hardware such as routers and switches for a particular company? A) Software as a Service (SaaS) B) Wireless as a Service (WaaS) C) Infrastructure as a Service (IaaS) D) Browser as a Service (BaaS) Correct Answer: C Explanation: Infrastructure as a Service (IaaS) provides virtualized network resources such as routers, switches, and firewalls through the cloud. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: What component is considered the brains of the ACI architecture and translates application policies? A) the Application Network Profile endpoints B) the Nexus 9000 switch C) the hypervisor D) the Application Policy Infrastructure Controller Correct Answer: A Explanation: The ACI architecture consists of three core components: the Application Network Profile, the Application Policy Infrastructure Controller—which serves as the brains of the ACI architecture—and the Cisco Nexus 9000 switch. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which statement describes the concept of cloud computing? A) separation of management plane from control plane B) separation of application from hardware C) separation of operating system from hardware D) separation of virtualization from infrastructure Correct Answer: C Explanation: Cloud computing separates applications or services from the underlying hardware, while virtualization separates the operating system from the hardware. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which is a requirement of a site-to-site VPN? A) It requires hosts to use VPN client software to encapsulate traffic. B) It requires a VPN gateway at each end of the tunnel to encrypt and decrypt traffic. C) It requires a VPN server at the company edge. D) It requires a client/server architecture. Correct Answer: B Explanation: Site-to-site VPNs use VPN gateways to encapsulate and forward traffic through a tunnel, with peer gateways decrypting it on the other end. Hosts are unaware of the VPN configuration. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which statement describes a VPN? A) VPNs use logical connections to create public networks through the Internet. B) VPNs use open-source virtualization software to create tunnels. C) VPNs use dedicated physical connections between users. D) VPNs use virtual connections to create private networks through public infrastructure. Correct Answer: D Explanation: VPNs form secure private networks over public connections using virtual tunneling, without needing dedicated physical lines. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: Which TCP control field specifies when the sender has no more data to transmit? A) FIN B) RST C) SYN D) PSH Correct Answer: A Explanation: The FIN flag indicates the end of data transmission in TCP, signaling that no more data will be sent. Other flags include SYN for initiating connections, RST for resetting them, and PSH to deliver data immediately. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Easy): Switching, Routing, and Wireless Essentials. Provide exactly 4 options (A-D). 1–3 sentence explanation. Difficulty: easy.

Output: Question: SSL is not responsible for which of the following? A) Mutual authentication of client and server B) Secret communication C) Data integrity protection D) Error detection and correction Correct Answer: D Explanation: SSL ensures encryption, authentication, and integrity for data between browsers and servers, but it does not handle error detection or correction. Difficulty: Easy


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: An administrator is configuring single-area OSPF on a router. One of the networks that must be advertised is 192.168.223.0 255.255.254.0. What wildcard mask should the administrator use in the OSPF network statement? A) 0.0.1.255 B) 0.0.7.255 C) 0.0.15.255 D) 0.0.31.255 Correct Answer: A Explanation: A subnet mask of 255.255.254.0 corresponds to a /23 prefix. Subtracting it from 255.255.255.255 gives 0.0.1.255, allowing OSPF to include all addresses from 192.168.222.0 to 192.168.223.255. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: An administrator is configuring single-area OSPF on a router. One of the networks to advertise is 64.102.0.0 255.255.255.128. What wildcard mask should be used in the OSPF network command? A) 0.0.31.255 B) 0.0.0.63 C) 0.0.63.255 D) 0.0.0.127 Correct Answer: D Explanation: The subnet mask 255.255.255.128 represents a /25 network with 128 IPs. Subtracting from 255.255.255.255 gives 0.0.0.127 as the wildcard mask, ensuring inclusion of all addresses from 64.102.0.0 to 64.102.0.127. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: An administrator needs to configure OSPF on a router to advertise 128.107.0.0 255.255.255.192. Which wildcard mask should be used in the OSPF network command? A) 0.0.63.255 B) 0.0.0.63 C) 0.0.0.3 D) 0.0.0.7 Correct Answer: B Explanation: A /26 network mask (255.255.255.192) allows 64 IP addresses. The corresponding wildcard mask 0.0.0.63 lets OSPF include all addresses within that 64-host block. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: An administrator must advertise 192.168.181.0 255.255.254.0 in OSPF. Which wildcard mask is correct for the OSPF network statement? A) 0.0.63.255 B) 0.0.15.255 C) 0.0.1.255 D) 0.0.31.255 Correct Answer: C Explanation: A /23 prefix uses a subnet mask of 255.255.254.0, meaning two /24 networks are combined. Subtracting gives 0.0.1.255, matching the full 192.168.180.0–192.168.181.255 range. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: While configuring OSPF for 198.19.0.0 255.255.252.0, which wildcard mask should be used? A) 0.0.63.255 B) 0.0.3.255 C) 0.0.31.255 D) 0.0.0.255 Correct Answer: B Explanation: A /22 prefix (255.255.252.0) covers four /24 subnets. The wildcard mask 0.0.3.255 matches addresses from 198.19.0.0 to 198.19.3.255. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: An administrator needs to advertise 128.107.0.0 255.255.252.0 in OSPF. Which wildcard mask should be configured? A) 0.0.3.255 B) 0.0.0.7 C) 0.0.0.3 D) 0.0.63.255 Correct Answer: A Explanation: The 255.255.252.0 mask represents a /22 prefix. Subtracting from 255.255.255.255 yields 0.0.3.255, allowing OSPF to include all four /24 subnets in that /22 range. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: A network engineer configures OSPF to advertise 64.100.0.0 255.255.255.0. What wildcard mask should be used? A) 0.0.0.31 B) 0.0.0.255 C) 0.0.0.63 D) 0.0.0.127 Correct Answer: B Explanation: A /24 subnet mask equals 255.255.255.0, and its corresponding wildcard mask is 0.0.0.255. This allows OSPF to include the entire /24 network range. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: Consider the following access list: access-list 100 permit ip host 192.168.10.1 any access-list 100 deny icmp 192.168.10.0 0.0.0.255 any echo access-list 100 permit ip any any Which two actions occur if this ACL is applied inbound on interface G0/0 with IP 192.168.10.254? (Choose two.) A) Only Layer 3 connections are allowed. B) Devices on 192.168.10.0/24 cannot reply to pings. C) Devices on 192.168.10.0/24 can ping 192.168.11.0. D) Telnet/SSH is allowed from any host on 192.168.10.0. E) Only 192.168.10.1 can access the router. Correct Answer: D,E Explanation: The ACL allows host 192.168.10.1 full access. Other devices are blocked from sending ICMP echo requests but can initiate Telnet/SSH sessions since subsequent ACEs permit IP traffic. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: What effect does the command Router1(config-ext-nacl)# permit tcp 172.16.4.0 0.0.0.255 any eq www have when applied inbound on the F0/0 interface? A) All TCP traffic is permitted. B) Only TCP traffic from 172.16.4.0/24 to port 80 destinations is allowed. C) All traffic from 172.16.4.0/24 is permitted. D) The command is rejected for being incomplete. Correct Answer: B Explanation: This ACL permits TCP packets sourced from 172.16.4.0/24 toward any destination using port 80 (HTTP). Any traffic not matching these criteria is implicitly denied by default. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: What type of IP address is 198.133.219.148? A) Private B) Public C) Static D) Reserved Correct Answer: B Explanation: The IP 198.133.219.148 is not part of the private address ranges defined by RFC 1918; therefore, it is classified as a public IP address accessible via the Internet. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: Which type of VPN allows multicast and broadcast traffic over a secure site-to-site VPN? A) Dynamic multipoint VPN B) SSL VPN C) IPsec virtual tunnel interface D) GRE over IPsec Correct Answer: D Explanation: GRE over IPsec combines GRE’s flexibility in handling multicast and broadcast traffic with IPsec’s strong encryption, enabling secure site-to-site VPNs that support routing protocols like OSPF or EIGRP. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: Which type of VPN involves passenger, carrier, and transport protocols? A) GRE over IPsec B) Dynamic multipoint VPN C) MPLS VPN D) IPsec virtual tunnel interface Correct Answer: A Explanation: GRE over IPsec tunnels encapsulate the original data (passenger protocol) using GRE (carrier protocol), which is then secured and transmitted via IPsec (transport protocol). Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: Which type of VPN supports multiple sites by applying configurations to virtual interfaces instead of physical interfaces? A) Dynamic multipoint VPN B) IPsec virtual tunnel interface C) MPLS VPN D) GRE over IPsec Correct Answer: B Explanation: IPsec Virtual Tunnel Interfaces (VTIs) simplify VPN deployment by using virtual interfaces to send encrypted traffic, eliminating the need for GRE tunnels and enabling easier multi-site scalability. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: Which type of VPN involves a nonsecure tunneling protocol being encapsulated by IPsec? A) Dynamic multipoint VPN B) SSL VPN C) IPsec virtual tunnel interface D) GRE over IPsec Correct Answer: D Explanation: GRE is a nonsecure protocol that can encapsulate multiple traffic types, but when wrapped inside IPsec, it gains encryption and authentication for secure site-to-site communication. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: What role do network devices play in the IntServ QoS model? A) Reserve resources before data transmission begins B) Provide best-effort forwarding without guarantees C) Handle multiple traffic classes dynamically D) Apply QoS policies hop-by-hop for scalability Correct Answer: A Explanation: In the IntServ model, routers reserve bandwidth and buffers per traffic flow using RSVP signaling, ensuring guaranteed performance at the expense of scalability. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: What are two approaches to prevent packet loss due to congestion on an interface? (Choose two.) A) Decrease buffer space B) Disable queuing mechanisms C) Drop lower-priority packets D) Prevent bursts of traffic E) Increase link capacity Correct Answer: C,E Explanation: Preventing congestion involves increasing link capacity to handle traffic efficiently and using congestion avoidance by dropping lower-priority packets before queues overflow. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: What are two reasons to create a network baseline? (Choose two.) A) To select a routing protocol B) To determine equipment requirements C) To design a network according to a model D) To identify future abnormal network behavior E) To evaluate security vulnerabilities F) To determine if the network meets performance policies Correct Answer: D,F Explanation: A network baseline allows engineers to compare future performance against normal conditions, detect anomalies, and verify that policy-based performance requirements are being met. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: A network administrator is deploying QoS with a priority queue for voice traffic so that it is forwarded before all other traffic. Which queuing method would be best? A) LLQ B) CBWFQ C) WFQ D) FIFO Correct Answer: A Explanation: Low Latency Queuing (LLQ) assigns voice packets to a strict priority queue, ensuring that delay-sensitive traffic like VoIP is transmitted before any other data type. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: What are two characteristics of voice traffic? (Choose two.) A) Latency should not exceed 150 ms B) Traffic is inconsistent and unpredictable C) Requires 384 kbps minimum bandwidth D) Consumes high network resources E) Dropped packets are not retransmitted Correct Answer: A,E Explanation: Voice traffic is delay-sensitive; latency beyond 150 ms disrupts call quality, and lost packets are not retransmitted due to real-time constraints. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: Which characteristic would most influence a network engineer to choose a multilayer switch instead of a Layer 2 switch? A) Ability to use VLAN-based forwarding paths B) Ability to build a routing table C) Ability to supply power to connected devices D) Ability to aggregate multiple ports Correct Answer: B Explanation: Multilayer switches operate at Layer 3 and can perform routing between VLANs by maintaining a routing table, unlike Layer 2 switches that only forward frames based on MAC addresses. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: A network administrator configures a router with the command sequence: R1(config)# boot system tftp://c1900-universalk9-mz.SPA.152-4.M3.bin R1(config)# boot system rom What is the effect of the command sequence? A) On next reboot, the router will load the IOS image from ROM. B) The router will search and load a valid IOS image in the sequence of flash, TFTP, and ROM. C) The router will copy the IOS image from the TFTP server and then reboot the system. D) The router will load IOS from the TFTP server. If the image fails to load, it will load the IOS image from ROM. Correct Answer: D Explanation: The boot system command defines the IOS loading order. The router first attempts to boot from the TFTP server and will use the ROMmon image if it fails to locate or load the TFTP image. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: A network designer is considering whether to implement a switch block on the company network. What is the primary advantage of deploying a switch block? A) It is network application software that prevents single device failure. B) Failure of a switch block will not impact all end users. C) It is a security feature on all new Catalyst switches. D) A single core router provides all inter-VLAN routing. Correct Answer: B Explanation: Implementing switch blocks localizes the effect of network failures, providing redundancy and fault isolation so that one device failure doesn’t disrupt the entire network. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: A network manager wants the device to ignore the startup configuration file during boot and bypass passwords. Which command should be used? A) copy usbflash0:/R1-Config B) copy running-config tftp C) confreg 0x2142 D) config-register 0x2102 Correct Answer: C Explanation: The command 'confreg 0x2142' changes the configuration register so that the router bypasses the startup configuration, useful during password recovery to access the device without stored credentials. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: Which network traffic management technology is a basic element in SDN implementations? A) OpenFlow B) OpenStack C) IEEE 802.1aq D) Interface to the Routing System Correct Answer: A Explanation: OpenFlow is the foundational protocol for SDN, providing communication between the control plane (SDN controller) and the data plane (network devices) for centralized management. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: What are two functions of hypervisors? (Choose two.) A) To partition the hard drive to run virtual machines B) To manage virtual machines C) To protect the host from malware infection from the virtual machines D) To allocate physical system resources to virtual machines E) To share antivirus software across virtual machines Correct Answer: B,D Explanation: A hypervisor manages and allocates hardware resources to multiple virtual machines running on a host, allowing them to operate independently with shared physical resources. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: What is the function of the key contained in most RESTful APIs? A) It is the top-level object of the API query. B) It is used to authenticate the requesting source. C) It represents the main query components of an API request. D) It is used for encrypting messages in API communication. Correct Answer: B Explanation: API keys authenticate and identify the source of a client request, ensuring that only authorized users can access the RESTful API’s resources. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: Which two configuration management tools are developed using Ruby? (Choose two.) A) Puppet B) Ansible C) SaltStack D) Chef E) RESTCONF Correct Answer: A,D Explanation: Puppet and Chef are both Ruby-based configuration management tools. In contrast, Ansible and SaltStack use Python, and RESTCONF is a network management protocol. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: Which term describes a set of instructions for execution by the configuration management tool Puppet? A) Playbook B) Cookbook C) Manifest D) Pillar Correct Answer: C Explanation: In Puppet, configuration scripts are called Manifests. They define system configurations and the desired state that Puppet applies to managed nodes. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: Which term describes a set of instructions executed by the configuration management tool SaltStack? A) Cookbook B) Manifest C) Pillar D) Playbook Correct Answer: C Explanation: In SaltStack, Pillars are used to define configuration data and variable values that determine how specific tasks are executed on target systems. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: What are three components used in the query portion of a typical RESTful API request? (Choose three.) A) API server B) Format C) Parameters D) Key E) Protocol F) Resources Correct Answer: B,C,D Explanation: RESTful API queries specify request details using components like parameters (input data), format (data type such as JSON or XML), and key (authentication token) to define the request context. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: How does virtualization help with disaster recovery within a data center? A) Support of live migration B) Guarantee of power C) Improvement of business practices D) Supply of consistent air flow Correct Answer: A Explanation: Live migration enables moving virtual machines from one server to another, even across data centers, minimizing downtime during failures and improving disaster recovery resilience. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: Which statement describes an important characteristic of a site-to-site VPN? A) It must be statically set up. B) After the initial connection is established, it can dynamically change connection information. C) It requires using a VPN client on the host PC. D) It is commonly implemented over dial-up or cable networks. Correct Answer: A Explanation: Site-to-site VPNs use static configurations between gateway devices of two networks, creating a permanent tunnel that remains established for all users within both networks. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: In which TCP attack does a cybercriminal attempt to overwhelm a target host with half-open TCP connections? A) Reset attack B) Session hijacking attack C) SYN flood attack D) Port scan attack Correct Answer: C Explanation: A TCP SYN flood attack exploits the three-way handshake by sending numerous SYN requests without completing connections, overwhelming the server with half-open sessions and exhausting its resources. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: A small company is considering moving many of its data center functions to the cloud. What are three advantages of this plan? (Choose three.) A) The company only pays for the resources it uses. B) Cloud services are billed at a fixed rate regardless of use. C) The company avoids managing hardware expansion for increased demand. D) The company can scale resources up or down as needed. E) Cloud services require the company to maintain its own servers. Correct Answer: A,C,D Explanation: Cloud computing offers scalability, cost-efficiency, and elasticity—allowing companies to pay only for what they use, increase or decrease resources dynamically, and avoid in-house infrastructure management. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: ABCTech is implementing automation for product testing across multiple OS environments such as Windows, Linux, and macOS. Which technology supports this requirement? A) Dedicated servers B) Software-defined networking C) Virtualization D) Cisco ACI Correct Answer: C Explanation: Virtualization allows one physical machine to host multiple operating systems using virtual machines, enabling isolated and flexible testing environments without requiring multiple physical computers. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: A multinational company has employees working remotely across time zones and needs secure access to company data anytime, anywhere. Which service best meets this requirement? A) Dedicated servers B) Cloud services C) Cisco ACI D) Virtualization Correct Answer: B Explanation: Cloud services provide remote, scalable access to company resources over the Internet, allowing global teams to collaborate securely and efficiently without requiring on-site infrastructure. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: Following a global product launch, a company’s client database and order systems are overloading its local infrastructure. What technology can address this scalability issue? A) Cloud services B) Dedicated servers C) Data center D) Virtualization Correct Answer: A Explanation: Cloud services offer on-demand scalability and elastic computing, allowing businesses to handle spikes in traffic or data loads without investing in new physical servers. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: A network administrator needs a backup site for company data as part of a disaster recovery plan. Which service fulfills this requirement? A) Virtualization B) Software-defined networking C) Data center D) Dedicated servers Correct Answer: C Explanation: Data centers provide secure, redundant facilities for storing and managing critical data. Backup data centers ensure continuity by replicating data and services in case of outages or disasters. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: Consider a link with a packet loss probability of 0.2. What is the expected number of transmissions to successfully transfer 200 packets using the stop-and-wait protocol? A) 125 B) 250 C) 225 D) 150 Correct Answer: B Explanation: The expected number of transmissions equals N/(1–p). For 200 packets with a 0.2 loss rate, this equals 200 / 0.8 = 250 transmissions on average. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: In a pure ALOHA network, each frame is 1,000 bits long, with a transmission rate of 1 Mbps and 1,000 total transmissions per second. What is the approximate throughput of the network? A) 130 to 140 B) 140 to 150 C) 120 to 130 D) 100 to 110 Correct Answer: A Explanation: The efficiency of pure ALOHA is G × e^(-2G). With G = 1, efficiency ≈ 0.135. For 1,000 frames per second, throughput ≈ 1,000 × 0.135 = 135 frames per second. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: A TCP server listens on port P of host S. While a client is connected, S crashes and reboots. The client does not use a TCP keepalive timer. Which behaviors are possible? A) If the client is waiting to receive a packet, it may wait indefinitely B) After reboot, the server application can listen again on port P C) If the client sends a packet after the reboot, it receives an RST D) If the client sends a packet after the reboot, it receives a FIN Correct Answer: A,B,C Explanation: Without keepalives, an idle TCP can wait indefinitely. After reboot the process can bind to the same port. Because the old connection state is lost, any new segment from the client will typically be answered with RST (abrupt close), not FIN (orderly close). Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: A firewall must allow internal hosts to initiate TCP connections freely and send on established connections, while external hosts may only send on existing or actively opening connections (no new inbound opens). What is the minimum computational capability required? A) A combinational circuit B) A finite automaton C) A pushdown automaton with one stack D) A pushdown automaton with two stacks Correct Answer: D Explanation: Tracking an unbounded number of concurrent TCP connection states requires unbounded memory and random access to per-flow state; two stacks (TM-equivalent) are sufficient, whereas a finite automaton lacks memory and a single-stack PDA’s LIFO access is inadequate. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Hard): Create 1 multiple-choice question about Switching, Routing, and Wireless Essentials based on the given text. Provide exactly 4 options (A–D). Fill 'correct_answer' and write a concise 1–3 sentence explanation. Difficulty: hard.

Output: Question: Data is transmitted continuously at 2.048 Mbps for 10 hours and 512 bit errors are observed. What is the bit error rate (BER)? A) 6.9 e-9 B) 6.9 e-6 C) 69 e-9 D) 4 e-9 Correct Answer: A Explanation: Total bits = 2.048×10^6 × 36,000 = 7.3728×10^10. BER = 512 / 7.3728×10^10 ≈ 6.94×10^-9 ≈ 6.9 e-9. Difficulty: Hard


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: Which three statements describe features of the OSPF topology table? A) It is a link-state database that represents the network topology. B) Its contents are the result of running the SPF algorithm. C) When converged, all routers in an area have identical topology tables. D) The topology table contains feasible successor routes. E) The table can be viewed via the show ip ospf database command. Correct Answer: A,C,E Explanation: The OSPF topology table is a link-state database (LSDB) containing all routers and links within the same area. All routers share identical LSDBs once converged, viewable through the show ip ospf database command. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: Which step does an OSPF-enabled router take immediately after establishing an adjacency? A) Builds the topology table B) Exchanges link-state advertisements C) Chooses the best path D) Executes the SPF algorithm Correct Answer: B Explanation: After establishing adjacency, OSPF routers exchange LSAs to share link-state information before constructing the LSDB and running the SPF algorithm. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: What are the two purposes of an OSPF router ID? (Choose two.) A) To uniquely identify the router within the OSPF domain B) To facilitate router participation in the election of the designated router C) To enable the SPF algorithm to determine the lowest cost path D) To facilitate network convergence Correct Answer: A,B Explanation: The router ID uniquely identifies each OSPF router and is used in DR/BDR elections. It is not involved in SPF cost calculation or directly in convergence processes. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: An administrator is configuring single-area OSPF on a router. One of the networks that must be advertised is 192.168.223.0/23. What wildcard mask should the administrator use in the OSPF network statement? A) 0.0.1.255 B) 0.0.7.255 C) 0.0.15.255 D) 0.0.31.255 Correct Answer: A Explanation: A subnet mask of 255.255.254.0 corresponds to a /23 prefix, which results in a wildcard mask of 0.0.1.255. This allows matching all addresses from 192.168.222.0 to 192.168.223.255. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: Which step in the OSPF link-state routing process involves calculating the best route to each destination? A) Load balancing equal-cost paths B) Declaring a neighbor to be inaccessible C) Choosing the best route D) Executing the SPF algorithm Correct Answer: D Explanation: The router executes the Shortest Path First (SPF) algorithm, also known as Dijkstra’s algorithm, to compute optimal paths and generate the routing table. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: Why would a network engineer alter the default OSPF reference bandwidth parameter? A) To force a specific link to be used in the destination route B) To more accurately reflect the cost of links greater than 100 Mb/s C) To enable the link for OSPF routing D) To increase the physical link speed Correct Answer: B Explanation: By default, OSPF assigns the same cost to all links above 100 Mb/s. Adjusting the reference bandwidth allows costs to scale accurately for higher-speed interfaces such as Gigabit and 10-Gigabit links. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: Which three OSPF states are involved when two routers are forming an adjacency? (Choose three.) A) Exchange B) Init C) ExStart D) Two-way E) Loading F) Down Correct Answer: B,D,E Explanation: During adjacency formation, routers move through the Down, Init, and Two-way states before exchanging LSAs and reaching Full state. These states indicate neighbor discovery and database synchronization. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: Which command verifies the configured OSPF hello and dead timer intervals on a point-to-point WAN link? A) show ipv6 ospf interface serial 0/0/0 B) show ip ospf neighbor C) show ip ospf interface fastethernet 0/1 D) show ip ospf interface serial 0/0/0 Correct Answer: D Explanation: The show ip ospf interface serial 0/0/0 command displays the hello and dead timer intervals for OSPFv2 on point-to-point serial links. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: An OSPF router has directly connected networks 172.16.0.0/16, 172.16.1.0/16, and 172.16.2.0/16. Which network command advertises only 172.16.1.0? A) router(config-router)# network 172.16.1.0 0.0.255.255 area 0 B) router(config-router)# network 172.16.0.0 0.0.15.255 area 0 C) router(config-router)# network 172.16.1.0 0.0.0.0 area 0 D) router(config-router)# network 172.16.1.0 255.255.255.0 area 0 Correct Answer: C Explanation: To advertise only 172.16.1.0/16, the wildcard mask must exactly match the first 16 bits. The 0.0.0.0 mask ensures only that single network is matched. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: Which two packet filters could be used in an IPv4 extended ACL? (Choose two.) A) Destination UDP port number B) Computer type C) Destination MAC address D) ICMP message type E) Source TCP hello address Correct Answer: A,D Explanation: Extended ACLs can filter packets based on source or destination IP, TCP/UDP port numbers, or specific protocol types such as ICMP. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: What type of ACL offers greater flexibility and control over network access? A) numbered standard B) named standard C) extended D) flexible Correct Answer: C Explanation: Extended ACLs can filter on protocol, source/destination IPs, and L4 ports, providing much finer control than standard ACLs (which match only source IP). Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: What is the quickest way to remove a single ACE from a named ACL? A) Use the no keyword and the sequence number of the ACE to be removed. B) Copy the ACL to a text editor, remove the ACE, then paste it back. C) Use no access-list to delete the whole ACL and recreate it. D) Disable the ACL and edit it offline. Correct Answer: A Explanation: Named ACLs support sequence numbers; removing one entry is done with no <sequence-number>, avoiding a full ACL rewrite. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: A standard ACL must allow only host 192.168.15.23 to reach the router vty. Which two commands meet the requirement? (Choose two.) A) Router1(config)# access-list 10 permit 192.168.15.23 0.0.0.0 B) Router1(config)# access-list 10 permit 192.168.15.23 0.0.0.255 C) Router1(config)# access-list 10 permit 192.168.15.23 255.255.255.255 D) Router1(config)# access-list 10 permit host 192.168.15.23 Correct Answer: A,D Explanation: To match a single host in a standard ACL, use a wildcard of 0.0.0.0 after the IP or the host keyword before the IP; both match only 192.168.15.23. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: You must deny any traffic from 172.16.0.0/16 but permit all other traffic using a standard ACL. Which two lines should the ACL include? (Choose two.) A) access-list 95 deny 172.16.0.0 255.255.0.0 B) access-list 95 permit any C) access-list 95 host 172.16.0.0 D) access-list 95 deny 172.16.0.0 0.0.255.255 Correct Answer: B,D Explanation: Standard ACLs use wildcards; 0.0.255.255 matches the /16. A final permit any allows all other sources; host and classful masks are incorrect here. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: In which TCP attack does an attacker overwhelm a host with many half-open connections? A) port scan attack B) SYN flood attack C) session hijacking attack D) reset attack Correct Answer: B Explanation: SYN floods send large numbers of SYNs with spoofed sources; the victim replies with SYN-ACKs and waits for ACKs that never arrive, exhausting resources. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: A rogue device hands out an invalid default gateway to perform a man-in-the-middle attack. Which protocol is being abused? A) DHCP B) DNS C) ICMP D) HTTP or HTTPS Correct Answer: A Explanation: A rogue DHCP server can supply a malicious default gateway (and DNS) to redirect traffic through the attacker for interception or DoS. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: What is a best practice when applying ACLs to vty lines? A) Place identical restrictions on all vty lines. B) Remove the vty password since the ACL restricts access. C) Apply ip access-group inbound on vty lines. D) Use only extended access lists. Correct Answer: A Explanation: Apply the same ACL to all vty lines to prevent users from bypassing restrictions by selecting a different line; ACLs limit which IPs can remote in. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: Which ACE pair permits 192.168.10.0/24 to access web service on 172.17.80.1 but blocks Telnet? A) deny tcp host 192.168.10.0 any eq 23; permit tcp host 192.168.10.1 eq 80 B) permit tcp 192.168.10.0 0.0.0.255 any eq 80; deny tcp 192.168.10.0 0.0.0.255 any eq 23 C) permit 192.168.10.0 0.0.0.255 host 172.17.80.1; deny tcp 192.168.10.0 0.0.0.255 any eq telnet D) permit tcp 192.168.10.0 0.0.0.255 host 172.17.80.1 eq 80; deny tcp 192.168.10.0 0.0.0.255 any eq 23 Correct Answer: D Explanation: The permit must specify TCP, the source network with wildcard, destination host 172.17.80.1, and port 80; a following deny blocks Telnet (TCP/23) from the same source. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: When configuring ACLs, when should a technician use the any keyword? A) To add a note for documentation B) To log a match when an ACE is hit C) To identify any IP address (wildcard match) D) To match only one specific IP address Correct Answer: C Explanation: The any keyword expands to 0.0.0.0 255.255.255.255 and matches any IPv4 address; host is used to match exactly one IP. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: What is the effect of applying inbound on Fa0/0: Router1(config-ext-nacl)# permit tcp 172.16.4.0 0.0.0.255 any eq www ? A) Permits all TCP and denies all other traffic. B) Permits TCP from 172.16.4.0/24 to any destination on port 80. C) Permits all traffic from 172.16.4.0/24 to anywhere. D) Command is rejected as incomplete. Correct Answer: B Explanation: The ACE matches source 172.16.4.0/24, protocol TCP, any destination, with destination port 80 (www). Other traffic is subject to subsequent ACEs or the implicit deny. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: You need an ACE that allows HTTP traffic from any source to a web server at 192.168.1.1. Which line is correct? A) access-list 101 permit tcp any host 192.168.1.1 eq 80 B) access-list 101 permit tcp host 192.168.1.1 eq 80 any C) access-list 101 permit tcp host 192.168.1.1 any eq 80 D) access-list 101 permit tcp any eq 80 host 192.168.1.1 Correct Answer: A Explanation: The keywords any (source), host 192.168.1.1 (destination), and eq 80 (HTTP) correctly define “any → server:80”. The other options misuse host/port position. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: A technician must restrict which IPs can reach the router’s VTY (SSH/Telnet). Which command applies standard ACL 20 to inbound VTY access? A) access-class 20 in B) no ip access-group 20 in C) no access-list 20 D) ip access-group 20 in Correct Answer: A Explanation: access-class is used on VTY lines to bind a standard ACL for management-plane access control; ip access-group applies ACLs to interfaces, not VTY. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: Users are redirected from a legitimate site to a fake site after a recent DNS reply. Which attack best fits this symptom? A) DNS amplification and reflection B) ARP cache poisoning C) DNS cache poisoning D) domain generation Correct Answer: C Explanation: DNS cache poisoning inserts forged DNS records so clients resolve a domain to an attacker-controlled IP, causing redirection to malicious sites. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: Which statement describes a core capability of an IPS deployed inline at the network edge? A) It can stop malicious packets. B) It is deployed in offline mode. C) It has no impact on latency. D) It is focused only on identifying potential incidents. Correct Answer: A Explanation: IPS operates inline and can actively drop malicious traffic; being inline may add latency, and it does more than mere detection. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: After entering ip access-list standard aaa in global configuration, what prompt should you see? A) Router(config-line)# B) Router(config-std-nacl)# C) Router(config)# D) Router(config-router)# Correct Answer: B Explanation: Named standard ACL configuration mode changes the prompt to Router(config-std-nacl)# where you add permit/deny statements. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: In a numbered ACL, you need to block host 192.168.23.8 and place the ACE as the 40th entry. Which line would you use? A) remove all ACLs B) 40 deny host 192.168.23.8 C) apply ACL to all interfaces D) access-class 40 in Correct Answer: B Explanation: Sequence numbers define evaluation order in numbered/named ACLs; the ACE “40 deny host 192.168.23.8” denies that single IP. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: While documenting an ACL, you want to annotate a rule with human-readable text. Which keyword should you use? A) log B) remark C) host D) deny Correct Answer: B Explanation: The remark keyword adds a description line in an ACL for documentation; it does not affect packet matching or actions. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: An edge router should allow only reply traffic from outbound TCP sessions to return. Which ACL option fits? A) display all restricted traffic B) allow specific traffic through an interface C) permit only new connections D) established Correct Answer: D Explanation: The established keyword permits TCP packets with ACK/RST set—i.e., responses to existing sessions—blocking unsolicited inbound connection attempts. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: You need an ACL action that explicitly blocks certain traffic from traversing an interface. Which option should be used? A) host B) display all restricted traffic C) deny D) log Correct Answer: C Explanation: The deny action prevents matched traffic from passing; administrators add explicit denies for clarity even though an implicit deny exists at the end. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: You must match exactly one IP in an ACL without writing a wildcard. Which keyword helps? A) remark B) log C) any D) host Correct Answer: D Explanation: The host keyword specifies a single IPv4 address (equivalent to wildcard 0.0.0.0), simplifying entries such as permit host 192.168.1.10. Difficulty: Moderate


Instruction: GENERATE MCQ (English, Level: Moderate): Create 1 scenario-based multiple-choice question about Switching, Routing, and Wireless Essentials from the 'question' text. Provide exactly 4 options (A–D). Fill 'correct_answer' with the letter(s) that are correct (allow multiple letters if applicable) and write a concise 'explanation' (1–3 sentences). Difficulty level: moderate. Prefer questions that require light interpretation of configs/outputs without being tricky.

Output: Question: During cleanup, you decide to remove an old numbered ACL from a router. Which command deletes ACL 101 from the configuration? A) apply ACL 101 to all interfaces B) secure administrative access with ACL 101 C) no ip access-list all D) no ip access-list 101 Correct Answer: D Explanation: The command 'no ip access-list 101' removes the specified numbered ACL from the running configuration; it does not affect other ACLs. Difficulty: Moderate