New 600-199 exam questions from PassLeader 600-199 dumps! Welcome to download the newest PassLeader 600-199 VCE and PDF dumps: http://www.passleader.com/600-199.html (60 Q&As)
P.S. Free 600-199 dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=0B-ob6L_QjGLpR0ozaTdjbGpid28
QUESTION 16
Which three statements are true about the IP fragment offset? (Choose three.)
A. A fragment offset of 0 indicates that it is the first in a series of fragments.
B. A fragment offset helps determine the position of the fragment within the reassembled datagram.
C. A fragment offset number refers to the number of fragments.
D. A fragment offset is measured in 8-byte units.
E. A fragment offset is measured in 16-byte units.
Answer: ABD
QUESTION 17
Which two tools are used to help with traffic identification? (Choose two.)
A. network sniffer
B. ping
C. traceroute
D. route table
E. NetFlow
F. DHCP
Answer: AE
QUESTION 18
Refer to the exhibit. Based on the tcpdump capture, which three statements are true? (Choose three.)
A. Host 10.10.10.20 is requesting the MAC address of host 10.10.10.10 using ARP.
B. Host 10.10.10.10 is requesting the MAC address of host 10.10.10.20.
C. The ARP request is unicast.
D. The ARP response is unicast.
E. The ARP request is broadcast.
F. Host 10.10.10.20 is using the MAC address of ffff.ffff.ffff.
Answer: BDE
QUESTION 19
Refer to the exhibit. Based on the tcpdump output, which two statements are true? (Choose two.)
A. The reply is sent via unicast.
B. All devices in the same subnet on a switched network will see the reply because it was broadcast.
C. The device is coming up for the first time and is requesting an IP address.
D. The ARP request is being sent as a broadcast.
E. The device is requesting an ARP.
F. Host 192.168.10.7 is requesting the operational status of host 192.168.10.8.
Answer: AD
QUESTION 20
Refer to the exhibit. Which two options does the following tcpdump command do? (Choose two.)
A. Read from nvram (non-volatile) and parse the stream.
B. Capture traffic based on host 10.10.10.10 and HTTP traffic.
C. Capture traffic based on host 10.10.10.10 and everything but HTTP traffic.
D. Capture ARP traffic only.
E. Write the capture as a file.
F. Read the capture from a file.
Answer: CE
New 600-199 exam questions from PassLeader 600-199 dumps! Welcome to download the newest PassLeader 600-199 VCE and PDF dumps: http://www.passleader.com/600-199.html (60 Q&As)
P.S. Free 600-199 dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=0B-ob6L_QjGLpR0ozaTdjbGpid28
