New Year Special Sale - 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: spcl70

Practice Free 200-301 Implementing and Administering Cisco Solutions (200-301 CCNA) v1.1 Exam Questions Answers With Explanation

We at Crack4sure are committed to giving students who are preparing for the Cisco 200-301 Exam the most current and reliable questions . To help people study, we've made some of our Implementing and Administering Cisco Solutions (200-301 CCNA) v1.1 exam materials available for free to everyone. You can take the Free 200-301 Practice Test as many times as you want. The answers to the practice questions are given, and each answer is explained.

Question # 6

Which function is performed by DHCP snooping?

A.

propagates VLAN information between switches

B.

listens to multicast traffic for packet forwarding

C.

provides DDoS mitigation

D.

rate-limits certain traffic

Question # 7

Refer to the exhibit.

200-301 question answer

An engineer is bringing up a new circuit to the MPLS provider on the Gi0/1 interface of Router1 The new circuit uses eBGP and teams the route to VLAN25 from the BGP path What s the expected behavior for the traffic flow for route 10.10.13.0/25?

A.

Traffic to 10.10.13.0.25 is load balanced out of multiple interfaces

B.

Route 10.10.13.0/25 is updated in the routing table as being learned from interface Gi0/1.

C.

Traffic to 10.10.13.0/25 is asymmeteical

D.

Route 10.10.13.0/25 learned via the GiO/0 interface remains in the routing table

Question # 8

Which statement correctly compares traditional networks and controller-based networks?

A.

Only traditional networks offer a centralized control plane

B.

Only traditional networks natively support centralized management

C.

Traditional and controller-based networks abstract policies from device configurations

D.

Only controller-based networks decouple the control plane and the data plane

Question # 9

Which QoS tool is used to optimize voice traffic on a network that is primarily intended for data traffic?

A.

FIFO

B.

WFQ

C.

PQ

D.

WRED

Question # 10

What are two benefits of FHRPs? (Choose two.)

A.

They enable automatic failover of the default gateway.

B.

They allow multiple devices to serve as a single virtual gateway for clients in the network.

C.

They are able to bundle multiple ports to increase bandwidth.

D.

They prevent loops in the Layer 2 network.

E.

They allow encrypted traffic.

Question # 11

What is the role of nonoverlapping channels in a wireless environment?

A.

to reduce interference

B.

to allow for channel bonding

C.

to stabilize the RF environment

D.

to increase bandwidth

Question # 12

Drag and drop the wireless architecture benefits from the left onto the architecture types on the right.

200-301 question answer

Question # 13

Drag and drop the network topology architecture types from the left onto the corresponding function on the right. Not all architecture types are used.

200-301 question answer

Question # 14

Refer to the exhibit.

200-301 question answer

An OSPF neighbor relationship must be configured using these guidelines:

• R1 is only permitted to establish a neighbor with R2

• R1 will never participate in DR elections

• R1 will use a router-id of 101.1.1.

Which configuration must be used?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option

B.

Option

C.

Option

D.

Option

Question # 15

Which WLC interface provides out-of-band management in the Cisco Unified Wireless Network Architecture?

A.

service port

B.

virtual

C.

AP-Manager

D.

dynamic

Question # 16

A network engineer must migrate a router loopback interface to the IPv6 address space. If the current IPv4 address of the interface is 10.54.73.1/32, and the engineer configures IPv6 address 0.0.0.0.0:ffff:a36:4901, which prefix length must be used?

A.

/64

B.

/96

C.

/124

D.

/128

Question # 17

What is the difference between SNMP traps and SNMP polling?

A.

SNMP traps are used for proactive monitoring, and SNMP polling is used for reactive monitoring.

B.

SNMP traps send periodic updates via the MIB, and SNMP polling sends data on demand.

C.

SNMP traps are initiated by the network management system, and network devices initiate SNMP polling.

D.

SNMP traps are initiated using a push model at the network device, and SNMP polling is initiated at the server.

Question # 18

Drag and drop the Ansible terms from the left onto the right.

200-301 question answer

Question # 19

Refer to the exhibit.

200-301 question answer

R1 has taken the DROTHER role in the OSPF DR/BDR election process. Which configuration must an engineer implement so that R1 is elected as the DR?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 20

Which wireless security protocol relies on Perfect Forward Secrecy?

A.

WPA3

B.

WPA

C.

WEP

D.

WPA2

Question # 21

Which event has occurred if a router sends a notice level message to a syslog server?

A.

An ICMP connection has been built

B.

A certificate has expired

C.

An interface line has changed status

D.

A TCP connection has been torn down

Question # 22

Which cable type must be used to interconnect one switch using 1000 BASE-SX GBiC modules and another switch using 1000 BASE-SX SFP modules?

A.

LC to SC

B.

SC t ST

C.

SC to SC

D.

LC to LC

Question # 23

Refer to the exhibit.

200-301 question answer

The EtherChannel is configured with a speed of 1000 and duplex as full on both ends of channel group 1. What is the next step to configure the channel on switch A to respond to but not initiate LACP communication?

A.

interface range gigabitethernet0/0/0-15 channel-group 1 mode on

B.

interface range gigabitethernet0/0/0-15 channel-group 1 mode desirable

C.

interface port-channel 1 channel-group 1 mode auto

D.

interface port-channel 1 channel-group 1 mode passive

Question # 24

Refer to the exhibit.

200-301 question answer

Router R1 resides in OSPF Area 0. After updating the R1 configuration to influence the paths that it will use to direct traffic, an engineer verified that each of the four Gigabit interfaces has the same route to 10.10.0.0/16. Which interface will R1 choose to send traffic to reach the route?

A.

GigabitEthernet0/0

B.

GigabltEthornet0/1

C.

GigabitEthernet0/2

D.

GigabitEthernet0/3

Question # 25

Which action is taken by the data plane within a network device?

A.

forwards traffic to the next hop

B.

constructs a routing table based on a routing protocol

C.

provides CLI access to the network device

D.

looks up an egress interface in the forwarding information base

Question # 26

Which protocol uses the SSL?

A.

HTTP

B.

SSH

C.

HTTPS

D.

Telnet

Question # 27

Refer to the exhibit.

200-301 question answer

What is a reason for poor performance on the network interface?

A.

The interface is receiving excessive broadcast traffic.

B.

The cable connection between the two devices is faulty.

C.

The interface is operating at a different speed than the connected device.

D.

The bandwidth setting of the interface is misconfigured

Question # 28

Refer to the exhibit.

200-301 question answer

Which action must be taken to ensure that router A is elected as the DR for OSPF area 0?

A.

Configure the OSPF priority on router A with the lowest value between the three routers.

B.

Configure router B and router C as OSPF neighbors of router A.

C.

Configure the router A interfaces with the highest OSPF priority value within the area.

D.

Configure router A with a fixed OSPF router ID

Question # 29

Refer to the exhibit.

200-301 question answer

Which route must be configured on R1 so that OSPF routing is used when OSPF is up. but the server is still reachable when OSPF goes down?

A.

ip route 10.1.1.10 255.255.255.255 172.16.2.2 100

B.

ip route 10.1.1.0 255.255.255.0 gi0/1 125

C.

ip route 10.1.1.0 255.255.255.0 172.16.2.2 100

D.

ip route 10.1.1.10 255.255.255.255 gi0/0 125

Question # 30

Why implement VRRP?

A.

to provide end users with a virtual gateway in a multivendor network

B.

to leverage a weighting scheme to provide uninterrupted service

C.

to detect link failures without the overhead of Bidirectional Forwarding Detection

D.

to hand over to end users the autodiscovery of virtual gateways

Question # 31

Which two server types support dornas name to IP address resolution? (Choose two >

A.

ESX host

B.

resolver

C.

web

D.

file transfer

E.

authentication

Question # 32

An on-site service desk technician must verify the IP address and DNS server information on a users Windows computer. Which command must the technician enter at the command prompt on the user's computer?

A.

ipconfig /all

B.

ifconfig -a

C.

show interface

D.

netstat -r

Question # 33

In which circumstance would a network architect decide to implement a global unicast subnet instead of a unique local unicast subnet?

A.

when the subnet must be available only within an organization

B.

when the subnet does not need to be routable

C.

when the addresses on the subnet must be equivalent to private IPv4 addresses

D.

when the subnet must be routable over the internet

Question # 34

Refer to the exhibit.

200-301 question answer

Which configuration for RTR-1 deniess SSH access from PC-1 to any RTR-1 interface and allows all other traffic?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 35

NO: 346

What must a network administrator consider when deciding whether to configure a new wireless network with APs in autonomous mode or APs running in cloud-based mode?

    Autonomous mode APs are less dependent on an underlay but more complex to maintain than APs in cloud-based mode.

    Cloud-based mode APs relay on underlays and are more complex to maintain than APs in autonomous mode.

A.

Cloud-based mode APs are easy to deploy but harder to automate than APs in autonomous mode.

B.

Autonomous mode APs are easy to deploy and automate than APs in cloud-based mode.

Question # 36

Refer to the exhibit.

200-301 question answer

What is represented by "R1" and "SW1" within the JSON output?

A.

key

B.

array

C.

value

D.

object

Question # 37

What describes the functionality of southbound APIs?

A.

They use HTTP messages to communicate.

B.

They enable communication between the controller and the network device.

C.

They convey information from the controller to the SDN applications.

D.

They communicate with the management plane.

Question # 38

What must be considered for a locally switched FlexConnect AP if the VLANs that are used by the AP and client access are different?

A.

The APs must be connected to the switch with multiple links in LAG mode

B.

The switch port mode must be set to trunk

C.

The native VLAN must match the management VLAN of the AP

D.

IEEE 802.10 trunking must be disabled on the switch port.

Question # 39

An engineer must configure neighbor discovery between the company router and an ISP

200-301 question answer

What is the next step to complete the configuration if the ISP uses a third-party router?

A.

Enable LLDP globally.

B.

Disable CDP on gi0/0.

C.

Enable LLDP TLVs on the ISP router.

D.

Disable auto-negotiation.

Question # 40

Refer to the exhibit.

200-301 question answer

Which two configurations must the engineer apply on this network so that R1 becomes the DR? (Choose two.)

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

E)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

E.

Option E

Question # 41

200-301 question answer

Refer to the exhibit. An engineer configured the New York router with static routes that point to the Atlanta and Washington sites. Which command must be configured on the Atlanta and Washington routers so that both sites are able to reach the Lo2 interface on the New York router?

A.

ipv6 route ::/0 Serial 0/0/0

B.

ipv6 route 0.0.0.0 0.0.0.0 Serial 0/0/0

C.

ipv6 route ::/0 2000::2

D.

ipv6 route ::/0 Serial 0/0/1

Question # 42

Refer to the exhibit.

200-301 question answer

Packets are flowing from 192.168 10.1 to the destination at IP address 192.168.20 75. Which next hop will the router select for the packet?

A.

10.10101

B.

10.10.10.11

C.

10.10.10.12

D.

10.101014

Question # 43

What is a benefit of a point-to-point leased line?

A.

flexibility of design

B.

simplicity of configurator

C.

low cost

D.

full-mesh capability

Question # 44

What is used to identify spurious DHCP servers?

A.

DHCPREQUEST

B.

DHCPDISCOVER

C.

DHCPACK

D.

DHCPOFFER

Question # 45

Refer to the exhibit.

200-301 question answer

An engineer is configuring a new Cisco switch NewSW, to replace SW2 The details have been provided

• Switches SW1 and SW2 are third-party devices without support for trunk ports

• The existing connections must be maintained between PC1 PC2 and PC3

• Allow the switch to pass traffic from future VLAN 10. Which configuration must be applied?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 46

A network engineer is upgrading a small data center to host several new applications, including server backups that are expected to account for up to 90% of the bandwidth during peak times. The data center connects to the MPLS network provider via a primary circuit and a secondary circuit. How does the engineer inexpensively update the data center to avoid saturation of the primary circuit by traffic associated with the backups?

A.

Assign traffic from the backup servers to a dedicated switch.

B.

Configure a dedicated circuit for the backup traffic.

C.

Place the backup servers in a dedicated VLAN.

D.

Advertise a more specific route for the backup traffic via the secondary circuit.

Question # 47

200-301 question answer

Refer to the exhibit. How will the device handle a packet destined to IP address 100.100.100.100?

A.

If will choose the route with the longest match.O 100.100.100.100'32 (110/21) via 192.168.1.1. 00:05:57. EmernetO/1.

B.

It will always prefer the static route over dynamic routes and choose the routeS 100.100.0.0/16(1/0] via 192.168.4.1.

C.

It will choose the route with the highest metric.D 100.100.100.0/24 (90/435200) via 192.168.2.1. 00:00:13. EthernetO/2.

D.

It will choose the route with the lowest metric,R 100.0.0.0/8 [120/2] via 192.168.3.1. 00:00:13. EthernetO/3.

Question # 48

Refer to the exhibit.

200-301 question answer

In which structure does the word "warning" directly reside?

A.

array

B.

object

C.

Boolean

D.

string

Question # 49

Which IPsec transport mode encrypts the IP header and the payload?

A.

pipe

B.

control

C.

transport

D.

tunnel

Question # 50

Which protocol is used in Software Defined Access (SDA) to provide a tunnel between two edge nodes in different fabrics?

A.

Generic Router Encapsulation (GRE)

B.

Virtual Local Area Network (VLAN)

C.

Virtual Extensible LAN (VXLAN)

D.

Point-to-Point Protocol

Question # 51

Which interface enables communication between a program on the controller and a program on the networking devices?

A.

northbound interface

B.

software virtual interface

C.

southbound interface

D.

tunnel Interface

Question # 52

Which AP mode serves as the primary hub in a point-to-multipoint network topology.

A.

FlexConnect

B.

SE-Connect

C.

bridge

D.

local

Question # 53

Refer to the exhibit.

200-301 question answer

What is represented by the word "switch’’ in line 2 of the JSON schema?

A.

array

B.

key

C.

value

D.

object

Question # 54

Refer to the exhibit.

200-301 question answer

Switch AccSw2 has just been added to the network along with PC2. All VLANs have been implemented on AccSw2. How must the ports on AccSw2 be configured to establish Layer 2 connectivity between PC1 and PC2?

A.

200-301 question answer

B.

B. 200-301 question answer

C.

C. 200-301 question answer

D.

D. 200-301 question answer

Question # 55

Which set of methods is supported with the REST API?

A.

GET, POST, MOD, ERASE

B.

GET, POST, ERASE, CHANGE

C.

GET, PUT, POST, DELETE

D.

GET, PUT, ERASE, CHANGE

Question # 56

Refer to the exhibit.

200-301 question answer

The router has been configured with a supernet to accommodate the requirement for 380 users on a subnet The requirement already considers 30% future growth. Which configuration verifies the IP subnet on router R4?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 57

Refer to the exhibit.

200-301 question answer

Users need to connect to the wireless network with IEEE 802. 11r-compatible devices. The connection must be maintained as users travel between floors or to other areas in the building What must be the configuration of the connection?

A.

Select the WPA Policy option with the CCKM option.

B.

Disable AES encryption.

C.

Enable Fast Transition and select the FT 802.1x option.

D.

Enable Fast Transition and select the FT PSK option.

Question # 58

Refer to the exhibit.

200-301 question answer

An engineer assumes a configuration task from a peer Router A must establish an OSPF neighbor relationship with neighbor 172 1 1 1 The output displays the status of the adjacency after 2 hours. What is the next step in the configuration process for the routers to establish an adjacency?

A.

Configure router A to use the same MTU size as router B.

B.

Set the router B OSPF ID to a nonhost address.

C.

Configure a point-to-point link between router A and router B.

D.

Set the router B OSPF ID to the same value as its IP address

Question # 59

What is a requirement when configuring or removing LAG on a WLC?

A.

The Incoming and outgoing ports for traffic flow must be specified If LAG Is enabled.

B.

The controller must be rebooted after enabling or reconfiguring LAG.

C.

The management interface must be reassigned if LAG disabled.

D.

Multiple untagged interfaces on the same port must be supported.

Question # 60

What mechanism carries multicast traffic between remote sites and supports encryption?

A.

ISATAP

B.

GRE over iPsec

C.

iPsec over ISATAP

D.

GRE

Question # 61

Which HTTP status code is returned after a successful REST API request?

A.

200

B.

301

C.

404

D.

500

Question # 62

Which virtual MAC address is used by VRRP group 1?

A.

0050.0c05.ad81

B.

0007.c061.bc01

C.

0000.5E00.0101

D.

0500.3976.6401

Question # 63

Aside from discarding, which two states does the switch port transition through while using RSTP (802.1w)? (Choose two)

A.

listening

B.

blocking

C.

forwarding

D.

learning

E.

speaking

Question # 64

Refer to the Exhibit.

200-301 question answer

After the switch configuration the ping test fails between PC A and PC B Based on the output for switch 1. which error must be corrected?

A.

There is a native VLAN mismatch

B.

Access mode is configured on the switch ports.

C.

The PCs are m the incorrect VLAN

D.

All VLANs are not enabled on the trunk

Question # 65

Drag and drop the IPv4 network subnets from the left onto the correct usable host ranges on the right

200-301 question answer

Question # 66

Which statement identifies the functionality of virtual machines?

A.

Virtualized servers run most efficiently when they are physically connected to a switch that is separate from the hypervisor

B.

The hypervisor can virtualize physical components including CPU. memory, and storage

C.

Each hypervisor can support a single virtual machine and a single software switch

D.

The hypervisor communicates on Layer 3 without the need for additional resources

Question # 67

Drag and drop the 802.11 wireless standards from the left onto the matching statements on the right

200-301 question answer

Question # 68

How does Cisco DNA Center gather data from the network?

A.

Network devices use different services like SNMP, syslog, and streaming telemetry to send data to the controller

B.

Devices establish an iPsec tunnel to exchange data with the controller

C.

Devices use the call-home protocol to periodically send data to the controller.

D.

The Cisco CU Analyzer tool gathers data from each licensed network device and streams it to the controller.

Question # 69

Which global command encrypt all passwords in the running configuration?

A.

password-encrypt

B.

enable password-encryption

C.

enable secret

D.

service password-encryption

Question # 70

Which WAN access technology is preferred for a small office / home office architecture?

A.

broadband cable access

B.

frame-relay packet switching

C.

dedicated point-to-point leased line

D.

Integrated Services Digital Network switching.

Question # 71

Drag and drop the descriptions of file-transfer protocols from the left onto the correct protocols on the right.

200-301 question answer

Question # 72

Which command automatically generates an IPv6 address from a specified IPv6 prefix and MAC address of an interface?

A.

ipv6 address dhcp

B.

ipv6 address 2001:DB8:5:112::/64 eui-64

C.

ipv6 address autoconfig

D.

ipv6 address 2001:DB8:5:112::2/64 link-local

Question # 73

Refer to the exhibit.

200-301 question answer

An administrator must turn off the Cisco Discovery Protocol on the port configured with address last usable address in the 10.0.0.0/30 subnet. Which command set meets the requirement?

A.

interface gi0/1no cdp enable

B.

interface gi0/1clear cdp table

C.

interface gi0/0no cdp advertise-v2

D.

interface gi0/0no cdp run

Question # 74

Drag and drop the attack-mitigation techniques from the left onto the Types of attack that they mitigate on the right.

200-301 question answer

Question # 75

An engineer is asked to protect unused ports that are configured in the default VLAN on a switch.

Which two steps will fulfill the request? (Choose two)

A.

Configure the ports in an EtherChannel.

B.

Administratively shut down the ports

C.

Configure the port type as access and place in VLAN 99

D.

Configure the ports as trunk ports

E.

Enable the Cisco Discovery Protocol

Question # 76

What is the difference regarding reliability and communication type between TCP and UDP?

A.

TCP is reliable and is a connection-oriented protocol UDP is not reliable and is a connectionless protocol

B.

TCP is not reliable and is a connection-oriented protocol; UDP is reliable and is a connectionless protocol

C.

TCP is not reliable and is a connectionless protocol; UDP is reliable and is a connection-oriented protocol

D.

TCP is reliable and is a connectionless protocol; UDP is not reliable and is a connection-oriented protocol

Question # 77

How are the switches in a spine-and-leaf topology interconnected?

A.

Each leaf switch is connected to one of the spine switches.

B.

Each leaf switch is connected to two spine switches, making a loop.

C.

Each leaf switch is connected to each spine switch.

D.

Each leaf switch is connected to a central leaf switch, then uplinked to a core spine switch.

Question # 78

Which option about JSON is true?

A.

uses predefined tags or angle brackets () to delimit markup text

B.

used to describe structured data that includes arrays

C.

used for storing information

D.

similar to HTML, it is more verbose than XML

Question # 79

What occurs when overlapping Wi-Fi channels are implemented?

A.

The wireless network becomes vulnerable to unauthorized access.

B.

Wireless devices are unable to distinguish between different SSIDs

C.

Users experience poor wireless network performance.

D.

Network communications are open to eavesdropping.

Question # 80

What are two improvements provided by automation for network management in an SDN environment? (Choose two)

A.

Data collection and analysis tools establish a baseline for the network

B.

Artificial intelligence identifies and prevents potential design failures.

C.

Machine learning minimizes the overall error rate when automating troubleshooting processes

D.

New devices are onboarded with minimal effort

E.

Proprietary Cisco APIs leverage multiple network management tools.

Question # 81

Refer to the exhibit.

200-301 question answer

Which two commands, when configured on router R1, fulfill these requirements? (Choose two.)

Packets towards the entire network 2001:db8:2::/64 must be forwarded through router R2.

Packets toward host 2001:db8:23::14 preferably must be forwarded through R3.

A.

Ipv6 route 2001:db8:23::/128 fd00:12::2

B.

Ipv6 route 2001:db8:23::14/128 fd00:13::3

C.

Ipv6 route 2001:db8:23::14/64 fd00:12::2

D.

Ipv6 route 2001:db8:23::/64 fd00:12::2

E.

Ipv6 route 2001:db8:23::14/64 fd00:12::2 200

Question # 82

Which level of severity must be set to get informational syslogs?

A.

alert

B.

critical

C.

notice

D.

debug

Question # 83

In QoS, which prioritization method is appropriate for interactive voice and video?

A.

expedited forwarding

B.

traffic policing

C.

round-robin scheduling

D.

low-latency queuing

Question # 84

After installing a new Cisco ISE server, which task must the engineer perform on the Cisco WLC to connect wireless clients on a specific VLAN based on their credentials?

A.

Enable the allow AAA Override

B.

Enable the Even: Driven RRM.

C.

Disable the LAG Mode or Next Reboot.

D.

Enable the Authorized MIC APs against auth-list or AAA.

Question # 85

How will Link Aggregation be Implemented on a Cisco Wireless LAN Controller?

A.

One functional physical port is needed to pass client traffic.

B.

The EthernetChannel must be configured in "mode active".

C.

When enabled, the WLC bandwidth drops to 500 Mbps.

D.

To pass client traffic, two or more ports must be configured.

Question # 86

Drag and drop the network protocols from the left onto the correct transport services on the right.

200-301 question answer

Question # 87

Which feature on the Cisco Wireless LAN Controller when enabled restricts management access from specific networks?

A.

CPU ACL

B.

TACACS

C.

Flex ACL

D.

RADIUS

Question # 88

Which command entered on a switch configured with Rapid PVST* listens and learns for a specific time period?

A.

switch(config)#spanning-tree vlan 1 max-age 6

B.

switch(config)#spanning-tree vlan 1 hello-time 10

C.

switch(config)#spanning-tree vlan 1 priority 4096

D.

switch(config)#spanning-tree vlan 1 forward-time 20

Question # 89

Drag and drop the QoS congestion management terms from the left onto the description on the right.

200-301 question answer

Question # 90

What is recommended for the wireless infrastructure design of an organization?

A.

group access points together to increase throughput on a given channel

B.

configure the first three access points are configured to use Channels 1, 6, and 11

C.

include a least two access points on nonoverlapping channels to support load balancing

D.

assign physically adjacent access points to the same Wi-Fi channel

Question # 91

which purpose does a northbound API serve in a controller-based networking architecture?

A.

communicates between the controller and the physical network hardware

B.

reports device errors to a controller

C.

generates statistics for network hardware and traffic

D.

facilitates communication between the controller and the applications

Question # 92

What is a role of wireless controllers in an enterprise network?

A.

centralize the management of access points in an enterprise network

B.

support standalone or controller-based architectures

C.

serve as the first line of defense in an enterprise network

D.

provide secure user logins to devices on the network.

Question # 93

An engineer is configuring an encrypted password for the enable command on a router where the local user database has already been configured Drag and drop the configuration commands from the left into the correct sequence on the right Not all commands are used

200-301 question answer

Question # 94

Which two minimum parameters must be configured on an active interface to enable OSPFv2 to operate? (Choose two)

A.

OSPF area

B.

OSPF MD5 authentication key

C.

iPv6 address

D.

OSPf process ID

E.

OSPf stub flag

Question # 95

Which configuration ensures that the switch is always the root for VLAN 750?

A.

Switch(config)#spanning-tree vlan 750 priority 38003685

B.

Switch(config)#spanning-tree vlan 750 root primary

C.

Switch(config)#spanning-tree vlan 750 priority 614440

D.

Switch(config)#spanning-tree vlan 750 priority 0

Question # 96

What does a router do when configured with the default DNS lookup settings, and a URL is entered on the CLI?

A.

initiates a ping request to the URL

B.

prompts the user to specify the desired IP address

C.

continuously attempts to resolve the URL until the command is cancelled

D.

sends a broadcast message in an attempt to resolve the URL

Question # 97

Refer to the exhibit.

200-301 question answer

An administrator is tasked with configuring a voice VLAN. What is the expected outcome when a Cisco phone is connected to the GigabitEfriemet3/1/4 port on a switch?

A.

The phone and a workstation that is connected to the phone do not have VLAN connectivity

B.

The phone and a workstation that is connected to the phone send and receive data in VLAN 50.

C.

The phone sends and receives data in VLAN 50, but a workstation connected to the phone has no VLAN connectivity

D.

The phone sends and receives data in VLAN 50, but a workstation connected to the phone sends and receives data in VLAN 1

Question # 98

Refer to the exhibit.

200-301 question answer

If R1 receives a packet destined to 172.161.1, to which IP address does it send the packet?

A.

192.168.12.2

B.

192.168.13.3

C.

192.168.14.4

D.

192.168.15.5

Question # 99

Drag and drop the lightweight access point operation modes from the left onto the descriptions on the right

200-301 question answer

Question # 100

A Cisco IP phone receive untagged data traffic from an attached PC. Which action is taken by the phone?

A.

It allows the traffic to pass through unchanged

B.

It drops the traffic

C.

It tags the traffic with the default VLAN

D.

It tags the traffic with the native VLAN

Question # 101

An organization secures its network with multi-factor authentication using an authenticator app on employee smartphone. How is the application secured in the case of a user’s smartphone being lost or stolen?

A.

The application requires an administrator password to reactivate after a configured Interval.

B.

The application requires the user to enter a PIN before it provides the second factor.

C.

The application challenges a user by requiring an administrator password to reactivate when the smartphone is rebooted.

D.

The application verifies that the user is in a specific location before it provides the second factor.

Question # 102

Refer to the exhibit.

200-301 question answer

An engineer deploys a topology in which R1 obtains its IP configuration from DHCP. If

the switch and DHCP server configurations are complete and correct. Which two sets of commands must be configured on R1 and R2 to complete the task? (Choose two)

A.

R1(config)# interface fa0/0R1(config-if)# ip helper-address 198.51.100.100

B.

R2(config)# interface gi0/0R2(config-if)# ip helper-address 198.51.100.100

C.

R1(config)# interface fa0/0R1(config-if)# ip address dhcpR1(config-if)# no shutdown

D.

R2(config)# interface gi0/0R2(config-if)# ip address dhcp

E.

R1(config)# interface fa0/0R1(config-if)# ip helper-address 192.0.2.2

Question # 103

What are two characteristics of a public cloud Implementation? (Choose two.)

A.

It is owned and maintained by one party, but it is shared among multiple organizations.

B.

It enables an organization to fully customize how It deploys network resources.

C.

It provides services that are accessed over the Internet.

D.

It Is a data center on the public Internet that maintains cloud services for only one company.

E.

It supports network resources from a centralized third-party provider and privately-owned virtual resources

Question # 104

Refer to the exhibit.

200-301 question answer

How many JSON objects are presented?

A.

1

B.

2

C.

3

D.

4

Question # 105

What does a switch search for in the CAM table when forwarding a frame?

A.

source MAC address and aging time

B.

destination MAC address and flush time

C.

source MAC address and source port

D.

destination MAC address and destination port

Question # 106

What are two benefits of network automation? (Choose two.)

A.

Faster changes with more reliable results

B.

Reduced operational costs

C.

Fewer network failures

D.

Reduced hardware footprint

E.

Increased network security

Question # 107

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

200-301 question answer

Question # 108

Refer to the exhibit.

200-301 question answer

What does route 10.0.1.3/32 represent in the routing table?

A.

the 10.0.0.0 network

B.

a single destination address

C.

the source 10.0.1.100

D.

all hosts in the 10.0.1.0 subnet

Question # 109

What is the operating mode and role of a backup port on a shared LAN segment in Rapid PVST+?

A.

forwarding mode and provides the lowest-cost path to the root bridge for each VLAN

B.

learning mode and provides the shortest path toward the root bridge handling traffic away from the LAN

C.

blocking mode and provides an alternate path toward the designated bridge

D.

listening mode and provides an alternate path toward the root bridge

Question # 110

Refer to the exhibit.

200-301 question answer

Packets are flowing from 192.168.10.1 to the destination at IP address 192.168.20.75. Which next hop will the router select for the packet?

A.

10.10.10.1

B.

10.10.10.11

C.

10.10.10.12

D.

10.10.10.14

Question # 111

Which syslog severity level is considered the most severe and results in the system being considered unusable?

A.

Alert

B.

Error

C.

Emergency

D.

Critical

Question # 112

Which two spanning-tree states are bypassed on an interface running PortFast? (Choose two.)

A.

disabled

B.

listening

C.

forwarding

D.

learning

E.

blocking

Question # 113

Refer to the exhibit.

200-301 question answer

Which two commands must be added to update the configuration of router R1 so that it accepts only encrypted connections? (Choose two )

A.

username CNAC secret R!41!4319115@

B.

ip ssh version 2

C.

line vty 0 4

D.

crypto key generate rsa 1024

E.

transport input ssh

Question # 114

What is the purpose of the ip address dhcp command?

A.

to configure an Interface as a DHCP server

B.

to configure an interface as a DHCP helper

C.

to configure an interface as a DHCP relay

D.

to configure an interface as a DHCP client

Question # 115

Refer to the exhibit.

200-301 question answer

Packets received by the router from BGP enter via a serial interface at 209.165.201.10. Each route is present within the routing table. Which interface is used to forward traffic with a destination IP of 10.10.10.24?

A.

F0/10

B.

F0/11

C.

F0/12

D.

F0/13

Question # 116

Refer to the exhibit.

200-301 question answer

An engineer built a new L2 LACP EtherChannel between SW1 and SW2 and executed these show commands to verify the work. Which additional task allows the two switches to establish an LACP port channel?

A.

Change the channel-group mode on SW2 to auto

B.

Change the channel-group mode on SW1 to desirable.

C.

Configure the interface port-channel 1 command on both switches.

D.

Change the channel-group mode on SW1 to active or passive.

Question # 117

An engineer is configuring remote access to a router from IP subnet 10.139.58.0/28. The domain name, crypto keys, and SSH have been configured. Which configuration enables the traffic on the destination router?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 118

What is a function of a Next-Generation IPS?

A.

makes forwarding decisions based on learned MAC addresses

B.

serves as a controller within a controller-based network

C.

integrates with a RADIUS server to enforce Layer 2 device authentication rules

D.

correlates user activity with network events

Question # 119

What is a requirement for nonoverlapping Wi-Fi channels?

A.

different security settings

B.

discontinuous frequency ranges

C.

different transmission speeds

D.

unique SSIDs

Question # 120

Refer to the exhibit.

200-301 question answer

A network engineer must update the configuration on Switch2 so that it sends LLDP packets every minute and the information sent via LLDP is refreshed every 3 minutes Which configuration must the engineer apply?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 121

200-301 question answer

Question # 122

Which cable type must be used when connecting a router and switch together using these criteria?

• Pins 1 and 2 are receivers and pins 3 and 6 are transmitters

• Auto detection MDi-X is unavailable

A.

straight-through

B.

rollover

C.

crossover

D.

console

Question # 123

What are two benefits of network automation? (Choose two.)

A.

Faster changes with more reliable results

B.

Reduced operational costs

C.

Fewer network failures

D.

Reduced hardware footprint

E.

Increased network security

Question # 124

How do traditional campus device management and Cisco DNA Center device management differ in regards to deployment?

A.

Traditional campus device management schemes typically deploy patches and updates quicker than Cisco DNA Center device management.

B.

Cisco DNA Center device management is implemented at a lower cost than most traditional campus device management options.

C.

Traditional campus device management allows a network to scale quicker than using Cisco DNA Center device management.

D.

Cisco DNA Center device management deploys a network faster than traditional campus device management.

Question # 125

What is a characteristic of RSA?

A.

It uses preshared keys for encryption

B.

It requires both sides to have identical keys

C.

It is a private-key encryption algorithm

D.

It is a public-key cryptosystem

Question # 126

Which protocol is used in Software Defined Access (SDA) to provide a tunnel between two edge nodes in different fabrics?

A.

Generic Router Encapsulation (GRE)

B.

Virtual Local Area Network (VLAN)

C.

Virtual Extensible LAN (VXLAN)

D.

Point-to-Point Protocol

Question # 127

Drag and drop the Cisco IOS attack mitigation features from the left onto the types of network attack they mitigate on the right.

200-301 question answer

Question # 128

What is a benefit of a point-to-point leased line?

A.

flexibility of design

B.

simplicity of configurator

C.

low cost

D.

full-mesh capability

Question # 129

Refer to the exhibit.

200-301 question answer

An architect is managing a wireless network with APs from several branch offices connecting to the WLC in the data center. There is a new requirement for a single WLAN to process the client data traffic without sending it to the WLC. Which action must be taken to complete the request?

A.

Enable local HTTP profiling.

B.

Enable Disassociation Imminent.

C.

Enable FlexConnect Local Switching.

D.

Enable local DHCP Profiling.

Question # 130

A WLC sends alarms about a rogue AP, and the network administrator verifies that the alarms are caused by a legitimate autonomous AP.

A.

Place the AP into manual containment.

B.

Remove the AP from WLC management.

C.

Manually remove the AP from Pending state.

D.

Set the AP Class Type to Friendly.

Question # 131

Why is a first-hop redundancy protocol implemented?

A.

to protect against default gateway failures

B.

to prevent loops in a network

C.

to enable multiple switches to operate as a single unit

D.

to provide load-sharing for a multilink segment

Question # 132

What is the role of the root port in a switched network?

A.

It replaces the designated port when the designated port fails

B.

It is the best path to the root from a nonroot switch.

C.

It replaces the designated port when the root port fails.

D.

It is administratively disabled until a failover occurs.

Question # 133

What are two differences between WPA2 and WPA3 wireless security? (Choose two.)

A.

WPA3 um AES for stronger protection than WPA2 which uses SAE

B.

WPA2 uses 1 M-bit key encryption and WPA3 requires 256-brt key encryption

C.

WPA3 uses AES for stronger protection than WPA2 which uses TKIP WPA3 uses

D.

SAE tor stronger protection than WPA2 which uses AES

E.

WPA2 uses 12B-M key encryption and WPA3 supports 128 bit and 192 bit key encryption

Question # 134

What is a purpose of traffic shaping?

A.

It enables dynamic flow identification.

B.

It enables policy-based routing.

C.

It provides best-effort service.

D.

It limits bandwidth usage.

Question # 135

What is a difference between an IPv6 multicast address and an IPv6 anycast address?

A.

A packet sent to an IPv6 multicast address is delivered to one or more destinations at once, but a packet sent to an IPv6 anycast address is routed to the closest interface with that address.

B.

An IPv6 multicast address uses the prefix 2002::/15 and forwards to one destination, and an IPv6 anycast address uses the prefix ff00::/8 and forwards to any destination in a group.

C.

IPv6 multicast addresses are used to transition from IPv4 to IPv6, and IPv6 anycast addresses are used for address aggregation in an IPv6-only environment.

D.

An IPv6 multicast address is assigned to numerous interfaces within a subnet, but an IPv6 anycast address is used for a predefined group of nodes in an all-IPv6 routers group.

Question # 136

Two switches have been implemented and all interfaces are at the default configuration level. A trunk link must be implemented between two switches with these requirements:

• using an industry-standard trunking protocol

• permitting VLANs 1 -10 and denying other VLANs

How must the interconnecting ports be configured?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 137

Which two features introduced in SNMPv2 provides the ability to retrieve large amounts of data in one request

A.

Get

B.

GetNext

C.

Set

D.

GetBulk

E.

Inform

Question # 138

What happens when a switch receives a frame with a destination MAC address that recently aged out?

A.

The switch references the MAC address aging table for historical addresses on the port that received the frame.

B.

The switch floods the frame to all ports in all VLANs except the port that received the frame

C.

The switch drops the frame and learns the destination MAC address again from the port that received the frame

D.

The switch floods the frame to all ports in the VLAN except the port that received the frame.

Question # 139

How is a configuration change made to a wireless AP in lightweight mode?

A.

SSH connection to the management IP of the AP

B.

EolP connection via the parent WLC

C.

CAPWAP/LWAPP connection via the parent WLC

D.

HTTPS connection directly to the out-of-band address of the AP

Question # 140

Two switches are connected and using Cisco Dynamic Trunking Protocol SW1 is set to Dynamic Desirable

What is the result of this configuration?

A.

The link is in a down state.

B.

The link is in an error disables state

C.

The link is becomes an access port.

D.

The link becomes a trunk port.

Question # 141

Refer to the exhibit.

200-301 question answer

Which outcome is expected when PC_A sends data to PC_B?

A.

The switch rewrites the source and destination MAC addresses with its own.

B.

The source MAC address is changed.

C.

The source and destination MAC addresses remain the same.

D.

The destination MAC address is replaced with ffff.ffff.ffff.

Question # 142

Refer to the exhibit An IPv6 address must be obtained automatically on the LAN interface on R1 Which command must be implemented to accomplish the task?

200-301 question answer

A.

Ipv6 address 2001:dbB:d8d2:1008:4343:61:0010::/64

B.

Ipv6 address autoconfig

C.

Ipv6 address fe80::/10

D.

Ipv6 address dhcp

Question # 143

What is the difference between controller-based networks and traditional networks as they relate to control-plane and/or data-plane functions?

A.

Controller-based networks centralize all important data-plane functions, and traditional networks distribute data-plane functions.

B.

Controller-based networks centralize all important control-plane functions, and traditional networks distribute control-plane functions.

C.

Traditional networks centralize all important control-plane functions, and controller-based networks distribute control-plane functions.

D.

Traditional networks centralize all important data-plane functions, and controller-based networks distribute data-plane functions.

Question # 144

How does network automation help reduce network downtime?

A.

Changes can be implemented in parallel across multiple devices at once, which increases the speed of the change rate.

B.

By using automation platforms with intent-based configuration, all changes are checked for possible outages before being implemented.

C.

Emails can be generated based on when a network admin performs a network change, which increases visibility.

D.

Configuration templates and testing can be built into implementation, which increases the success rate of a network change.

Question # 145

Why was the RFC 1918 address space defined?

A.

conserve public IPv4 addressing

B.

preserve public IPv6 address space

C.

reduce instances of overlapping IP addresses

D.

support the NAT protocol

Question # 146

Which technology allows for multiple operating systems to be run on a single host computer?

A.

virtual routing and forwarding

B.

network port ID visualization

C.

virtual device contexts

D.

server visualization

Question # 147

What facilitates a Telnet connection between devices by entering the device name?

A.

SNMP

B.

DNS lookup

C.

syslog

D.

NTP

Question # 148

A network administrator must enable DHCP services between two sites. What must be configured for the router to pass DHCPDISCOVER messages on to the server?

A.

a DHCP Relay Agent

B.

DHCP Binding

C.

a DHCP Pool

D.

DHCP Snooping

Question # 149

Which CRUD operation corresponds to the HTTP GET method?

A.

read

B.

update

C.

create

D.

delete

Question # 150

A network engineer must configure an interface with IP address 10.10.10.145 and a subnet mask equivalent to 11111111.11111111.11111111.11111000. Which subnet mask must the engineer use?

A.

/29

B.

/30

C.

/27

D.

/28

Question # 151

What describes a northbound REST API for SON?

A.

application-facing interface for SNMP GET requests

B.

network-element-facing interface for GET POST PUT and DELETE methods

C.

network-element-facing interface for the control and data planes

D.

application-facing interface far GET, POST, PUT, and DELETE methods

Question # 152

Which EtherChannel mode must be configured when using LAG on a WLC?

A.

on

B.

active

C.

auto

D.

passive

Question # 153

Which two command sequences must you configure on switch to establish a Layer 3 EtherChannel with an open-standard protocol? (Choose two )

A.

interface GigabitEthernet0/0/1channel-group 10 mode on

B.

interface GigabitEthernet0/0/1channel-group 10 mode active

C.

interface GigabitEthernet0/0/1channel-group 10 mode auto

D.

interface port-channel 10switchportswitchport mode trunk

E.

interface port-channel 10no switchportip address 172.16.0.1.255.255.255.0

Question # 154

Which API is used in controller-based architectures to interact with edge devices?

A.

overlay

B.

northbound

C.

underlay

D.

southbound

Question # 155

What criteria is used first during the root port selection process?

A.

local port ID

B.

lowest path cost to the root bridge

C.

lowest neighbor's bridge ID

D.

lowest neighbor's port ID

Question # 156

What criteria is used first during me root port selection process?

A.

local port ID

B.

lowest path cost to the root bridge

C.

lowest neighbor's bridge ID

D.

lowest neighbor's port ID

Question # 157

A network administrator is asked to configure VLANS 2, 3 and 4 for a new implementation. Some ports must be assigned to the new VLANS with unused remaining. Which action should be taken for the unused ports?

A.

configure port in the native VLAN

B.

configure ports in a black hole VLAN

C.

configure in a nondefault native VLAN

D.

configure ports as access ports

Question # 158

Refer to the exhibit.

200-301 question answer

A network engineer must configured communication between PC A and the File Server. To prevent interruption for any other communications, which command must be configured?

A.

Switch trunk allowed vlan 12

B.

Switchport trunk allowed vlan none

C.

Switchport trunk allowed vlan add 13

D.

Switchport trunk allowed vlan remove 10-11

Question # 159

Which 802.11 management frame type is sent when a client roams between access points on the same SSID?

A.

Reassociation Request

B.

Probe Request

C.

Authentication Request

D.

Association Request

Question # 160

What is a difference between local AP mode and FiexConnet AP mode?

A.

Local AP mode creates two CAPWAP tunnels per AP to the WLC

B.

FiexConnect AP mode fails to function if the AP loses connectivity with the WLC

C.

FlexConnect AP mode bridges the traffic from the AP to the WLC when local switching is configured

D.

Local AP mode causes the AP to behave as if it were an autonomous AP

Question # 161

What must be considered when using 802:11 ta?

A.

It is compatible with 802 lib- and 802 11-compliant wireless devices

B.

It is used in place of 802 11b/g when many nonoverlapping channels are required

C.

It is susceptible to interference from 2 4 GHz devices such as microwave ovens.

D.

It is chosen over 802 11b/g when a lower-cost solution is necessary

Question # 162

What event has occurred if a router sends a notice level message to a syslog server?

A.

A TCP connection has been torn down

B.

An ICMP connection has been built

C.

An interface line has changed status

D.

A certificate has expired.

Question # 163

Where does the configuration reside when a helper address Is configured lo support DHCP?

A.

on the router closest to the server

B.

on the router closest to the client

C.

on every router along the path

D.

on the switch trunk interface

Question # 164

Refer to the exhibit.

200-301 question answer

Which command provides this output?

A.

show ip route

B.

show ip interface

C.

show interface

D.

show cdp neighbor

Question # 165

What is a similarity between OM3 and OM4 fiber optic cable?

A.

Both have a 50 micron core diameter

B.

Both have a 9 micron core diameter

C.

Both have a 62.5 micron core diameter

D.

Both have a 100 micron core diameter

Question # 166

Refer to exhibit.

200-301 question answer

Which statement explains the configuration error message that is received?

A.

It is a broadcast IP address

B.

The router does not support /28 mask.

C.

It belongs to a private IP address range.

D.

IT is a network IP address.

Question # 167

Which two capacities of Cisco DNA Center make it more extensible as compared to traditional campus device management? (Choose two)

A.

adapters that support all families of Cisco IOS software

B.

SDKs that support interaction with third-party network equipment

C.

customized versions for small, medium, and large enterprises

D.

REST APIs that allow for external applications to interact natively with Cisco DNA Center

E.

modular design that is upgradable as needed

Question # 168

Drag and drop the functions of DHCP from the left onto any of the positions on the right Not all functions are used

200-301 question answer

Question # 169

Which two outcomes are predictable behaviors for HSRP? (Choose two.)

A.

The two routers synchronize configurations to provide consistent packet forwarding

B.

The two routers negotiate one router as the active router and the other as the standby router

C.

Each router has a different IP address, both routers act as the default gateway on the LAN, and traffic is load-balanced between them

D.

The two routers share a virtual IP address that is used as the default gateway for devices on the LAN

E.

The two routers share the same interface IP address and default gateway traffic is load-balanced between them

Question # 170

Refer to the exhibit.

200-301 question answer

The network administrator wants VLAN 67 traffic to be untagged between Switch 1 and Switch 2 while all other VLANs are to remain tagged.

Which command accomplishes this task?

A.

switchport access vlan 67

B.

switchport trunk allowed vlan 67

C.

switchport private-vlan association host 67

D.

switchport trunk native vlan 67

Question # 171

A network engineer is configuring an OSPFv2 neighbor adjacency Drag and drop the parameters from the left onto their required categories on the right. Not all parameters are used

200-301 question answer

Question # 172

What is a practice that protects a network from VLAN hopping attacks?

A.

Enable dynamic ARP inspection

B.

Configure an ACL to prevent traffic from changing VLANs

C.

Change native VLAN to an unused VLAN ID

D.

Implement port security on internet-facing VLANs

Question # 173

Refer to Exhibit.

200-301 question answer

The loopback1 interface of the Atlanta router must reach the loopback3 interface of the Washington router. Which two static host routes must be configured on the NEW York router? (Choose two)

A.

ipv6 route 2000::1/128 2012::1

B.

ipv6 route 2000::3/128 2023::3

C.

ipv6 route 2000::3/128 s0/0/0

D.

ipv6 route 2000::1/128 2012::2

E.

ipv6 route 2000::1/128 s0/0/1

Question # 174

What are two functions of a server on a network? (Choose two)

A.

achieves redundancy by exclusively using virtual server clustering

B.

runs applications that send and retrieve data for workstations that make requests

C.

handles requests from multiple workstations at the same time

D.

runs the same operating system in order to communicate with other servers

E.

housed solely in a data center that is dedicated to a single client

Question # 175

Which IPv6 address block sends packets to a group address rather than a single address?

A.

2000::/3

B.

FC00::/7

C.

FE80::/10

D.

FF00::/8

Question # 176

A manager asks a network engineer to advise which cloud service models are used so employees do not have to waste their time installing, managing, and updating software which is only used occasionally Which cloud service model does the engineer recommend?

A.

infrastructure-as-a-service

B.

platform-as-a-service

C.

business process as service to support different types of service

D.

software-as-a-service

Question # 177

Which WLC port connects to a switch to pass normal access-point traffic?

A.

redundancy

B.

console

C.

distribution system

D.

service

Question # 178

When a floating static route is configured, which action ensures that the backup route is used when the primary route fails?

A.

The floating static route must have a higher administrative distance than the primary route so it is used as a backup

B.

The administrative distance must be higher on the primary route so that the backup route becomes secondary.

C.

The floating static route must have a lower administrative distance than the primary route so it is used as a backup

D.

The default-information originate command must be configured for the route to be installed into the routing table

Question # 179

Refer to the exhibit.

200-301 question answer

Which password must an engineer use to enter the enable mode?

A.

adminadmin123

B.

default

C.

testing 1234

D.

cisco123

Question # 180

Refer to the exhibit.

200-301 question answer

The default-information originate command is configured under the R1 OSPF configuration After testing workstations on VLAN 20 at Site B cannot reach a DNS server on the Internet Which action corrects the configuration issue?

A.

Add the default-information originate command onR2

B.

Configure the ip route 0.0.0.0 0.0.0.0 10.10.10.18 command on R1

C.

Configure the ip route 0.0.0.0 0.0.0.0 10.10.10.2 command on R2

D.

Add the always keyword to the default-information originate command on R1

Question # 181

Which configuration management mechanism uses TCP port 22 by default when communicating with managed nodes?

A.

Ansible

B.

Python

C.

Puppet

D.

Chef

Question # 182

What is the effect when loopback interfaces and the configured router ID are absent during the OSPF Process configuration?

A.

No router ID is set, and the OSPF protocol does not run.

B.

The highest up/up physical interface IP address is selected as the router ID.

C.

The lowest IP address is incremented by 1 and selected as the router ID.

D.

The router ID 0.0.0.0 is selected and placed in the OSPF process.

Question # 183

Which function does an SNMP agent perform?

A.

it sends information about MIB variables in response to requests from the NMS

B.

it requests information from remote network nodes about catastrophic system events.

C.

it manages routing between Layer 3 devices in a network

D.

it coordinates user authentication between a network device and a TACACS+ or RADIUS server

Question # 184

An engineer is configuring NAT to translate the source subnet of 10.10.0.0/24 to any of three addresses 192.168.30.1, 192.168.3.2, 192.168.3.3 Which configuration should be used?

200-301 question answer

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 185

Refer to the exhibit.

200-301 question answer

Which IPv6 configuration is required for R17 to successfully ping the WAN interface on R18?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 186

With REST API, which standard HTTP header tells a server which media type is expected by the client?

A.

Accept-Encoding: gzip. deflate

B.

Accept-Patch: text/example; charset=utf-8

C.

Content-Type: application/json; charset=utf-8

D.

Accept: application/json

Question # 187

Refer to the exhibit.

200-301 question answer

A network administrator has been tasked with securing VTY access to a router. Which access-list entry accomplishes this task?

A.

access-list 101 permit tcp 10.1.10 0.0.0.255 172.16.10 0.0.0.255 eq ssh

B.

access-list 101 permit tcp 10.11.0 0.0.0.255 172.16.10 0.0.0.255 eq scp

C.

access-list 101 permit tcp 10.11.0 0.0.0.255 172.16.10 0.0.0.255 eq telnet

D.

access-list 101 permit tcp 10.1.10 0.0.0.255 172.16.10 0.0.0.255 eq https

Question # 188

Refer to the exhibit.

200-301 question answer

Between which zones do wireless users expect to experience intermittent connectivity?

A.

between zones 1 and 2

B.

between zones 2 and 5

C.

between zones 3 and 4

D.

between zones 3 and 6

Question # 189

A router running EIGRP has learned the same route from two different paths. Which parameter does the router use to select the best path?

A.

cost

B.

adminstrative distance

C.

metric

D.

as-path

Question # 190

What is a characteristic of private IPv4 addressing?

A.

traverse the Internet when an outbound ACL is applied

B.

issued by IANA in conjunction with an autonomous system number

C.

composed of up to 65.536 available addresses

D.

used without tracking or registration

Question # 191

Drag and drop the descriptions from the left onto the configuration-management technologies on the right.

200-301 question answer

Question # 192

Which two outcomes are predictable behaviors for HSRP? (Choose two)

A.

The two routers share a virtual IP address that is used as the default gateway for devices on the LAN.

B.

The two routers negotiate one router as the active router and the other as the standby router

C.

Each router has a different IP address both routers act as the default gateway on the LAN, and traffic is load balanced between them.D The two routers synchronize configurations to provide consistent packet forwarding

D.

The two routed share the same IP address, and default gateway traffic is load-balanced between them

Question # 193

Router A learns the same route from two different neighbors, one of the neighbor routers is an OSPF neighbor and the other is an EIGRP neighbor. What is the administrative distance of the route that will be installed in the routing table?

A.

20

B.

90

C.

110

D.

115

Question # 194

What is a function of TFTP in network operations?

A.

transfers a backup configuration file from a server to a switch using a username and password

B.

transfers files between file systems on a router

C.

transfers a configuration files from a server to a router on a congested link

D.

transfers IOS images from a server to a router for firmware upgrades

Question # 195

A network administrator enabled port security on a switch interface connected to a printer. What is the next configuration action in order to allow the port to learn the MAC address of the printer and insert it into the table automatically?

A.

enable dynamic MAC address learning

B.

implement static MAC addressing.

C.

enable sticky MAC addressing

D.

implement auto MAC address learning

Question # 196

Refer to Exhibit.

200-301 question answer

Which configuration must be applied to the router that configures PAT to translate all addresses in VLAN 200 while allowing devices on VLAN 100 to use their own IP addresses?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 197

Refer to the exhibit.

200-301 question answer

Router R1 is running three different routing protocols. Which route characteristic is used by the router to forward the packet that it receives for destination IP 172.16.32.1?

A.

longest prefix

B.

metric

C.

cost

D.

administrative distance

Question # 198

How do AAA operations compare regarding user identification, user services and access control?

A.

Authorization provides access control and authentication tracks user services

B.

Authentication identifies users and accounting tracks user services

C.

Accounting tracks user services, and authentication provides access control

D.

Authorization identifies users and authentication provides access control

Question # 199

Which type of IPv6 address is publicly routable in the same way as IPv4 public address?

A.

global unicast

B.

link-local

C.

unique local

D.

multicast

Question # 200

When deploying syslog, which severity level logs informational message?

A.

0

B.

2

C.

4

D.

6

Question # 201

Drag the descriptions of device management from the left onto the types of device management on the right.

200-301 question answer

Question # 202

Drag and drop the Cisco Wireless LAN Controller security settings from the left onto the correct security mechanism categories on the right.

200-301 question answer

Question # 203

An administrator must secure the WLC from receiving spoofed association requests. Which steps must be taken to configure the WLC to restrict the requests and force the user to wait 10 ms to retry an association request?

A.

Enable Security Association Teardown Protection and set the SA Query timeout to 10

B.

Enable MAC filtering and set the SA Query timeout to 10

C.

Enable 802.1x Layer 2 security and set me Comeback timer to 10

D.

Enable the Protected Management Frame service and set the Comeback timer to 10

Question # 204

Which condition must be met before an NMS handles an SNMP trap from an agent?

A.

The NMS software must be loaded with the MIB associated with the trap.

B.

The NMS must be configured on the same router as the SNMP agent

C.

The NMS must receive a trap and an inform message from the SNMP agent within a configured interval

D.

The NMS must receive the same trap from two different SNMP agents to verify that it is reliable.

Question # 205

What is the expected outcome when an EUI-64 address is generated?

A.

The seventh bit of the original MAC address of the interface is inverted

B.

The interface ID is configured as a random 64-bit value

C.

The characters FE80 are inserted at the beginning of the MAC address of the interface

D.

The MAC address of the interface is used as the interface ID without modification

Question # 206

What is the purpose of an SSID?

A.

It provides network security

B.

It differentiates traffic entering access posits

C.

It identities an individual access point on a WLAN

D.

It identifies a WLAN

Question # 207

What are two benefits of network automation? (Choose two)

A.

reduced operational costs

B.

reduced hardware footprint

C.

faster changes with more reliable results

D.

fewer network failures

E.

increased network security

Question # 208

Refer to the exhibit.

200-301 question answer

Which action is expected from SW1 when the untagged frame is received on the GigabitEthernet0/1 interface?

A.

The frame is processed in VLAN 5.

B.

The frame is processed in VLAN 11

C.

The frame is processed in VLAN 1

D.

The frame is dropped

Question # 209

Refer to the exhibit.

200-301 question answer

Which route type is configured to reach the internet?

A.

host route

B.

default route

C.

floating static route

D.

network route

Question # 210

What are two differences between optical-fiber cabling and copper cabling? (Choose two)

A.

Light is transmitted through the core of the fiber

B.

A BNC connector is used for fiber connections

C.

The glass core component is encased in a cladding

D.

Fiber connects to physical interfaces using Rj-45 connections

E.

The data can pass through the cladding

Question # 211

Which technology can prevent client devices from arbitrarily connecting to the network without state remediation?

A.

802.1x

B.

IP Source Guard

C.

MAC Authentication Bypass

D.

802.11n

Question # 212

Refer to the exhibit.

200-301 question answer

What action establishes the OSPF neighbor relationship without forming an adjacency?

A.

modify hello interval

B.

modify process ID

C.

modify priority

D.

modify network type

Question # 213

When a WPA2-PSK WLAN is configured in the wireless LAN Controller, what is the minimum number of characters that in ASCll format?

A.

6

B.

8

C.

12

D.

18

Question # 214

Refer to the exhibit.

200-301 question answer

If configuring a static default route on the router with the ip route 0.0.0.0 0.0.0.0 10.13.0.1 120 command how does the router respond?

A.

It ignores the new static route until the existing OSPF default route is removed

B.

It immediately replaces the existing OSPF route in the routing table with the newly configured static route

C.

It starts load-balancing traffic between the two default routes

D.

It starts sending traffic without a specific matching entry in the routing table to GigabitEthernet0/1

Question # 215

Which action must be taken to assign a global unicast IPv6 address on an interface that is derived from the MAC address of that interface?

A.

configure a stateful DHCPv6 server on the network

B.

enable SLAAC on an interface

C.

disable the EUI-64 bit process

D.

explicitly assign a link-local address

Question # 216

Which two QoS tools provides congestion management? ( Choose two )

A.

CAR

B.

CBWFQ

C.

PQ

D.

PBR

E.

FRTS

Question # 217

How do traditional campus device management and Cisco DNA Center device management differ in regards to deployment?

A.

Cisco DNA Center device management can deploy a network more quickly than traditional campus device management

B.

Traditional campus device management allows a network to scale more quickly than with Cisco DNA Center device management

C.

Cisco DNA Center device management can be implemented at a lower cost than most traditional campus device management options

D.

Traditional campus device management schemes can typically deploy patches and updates more quickly than Cisco DNA Center device management

Question # 218

When a site-to-site VPN is used, which protocol is responsible for the transport of user data?

A.

IKEv2

B.

IKEv1

C.

IPsec

D.

MD5

Question # 219

Which two must be met before SSH can operate normally on a Cisco IOS switch? (Choose two)

A.

The switch must be running a k9 (crypto) IOS image

B.

The Ip domain-name command must be configured on the switch

C.

IP routing must be enabled on the switch

D.

A console password must be configured on the switch

E.

Telnet must be disabled on the switch

Question # 220

Why does a switch flood a frame to all ports?

A.

The frame has zero destination MAC addresses.

B.

The source MAC address of the frame is unknown

C.

The source and destination MAC addresses of the frame are the same

D.

The destination MAC address of the frame is unknown.

Question # 221

Refer to the exhibit.

200-301 question answer

Which command must be executed for Gi1.1 on SW1 to become a trunk port if Gi1/1 on SW2 is configured in desirable or trunk mode?

A.

switchport mode trunk

B.

switchport mode dot1-tunnel

C.

switchport mode dynamic auto

D.

switchport mode dynamic desirable

Question # 222

Where does wireless authentication happen?

A.

SSID

B.

radio

C.

band

D.

Layer 2

Question # 223

Refer to the exhibit.

200-301 question answer

An engineer must configure GigabitEthernet1/1 to accommodate voice and data traffic Which configuration accomplishes this task?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 224

Refer to the exhibit.

200-301 question answer

A network engineer is in the process of establishing IP connectivity between two sites. Routers R1 and R2 are partially configured with IP addressing. Both routers have the ability to access devices on their respective LANs. Which command set configures the IP connectivity between devices located on both LANs in each site?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 225

What is a capability of FTP in network management operations?

A.

encrypts data before sending between data resources

B.

devices are directly connected and use UDP to pass file information

C.

uses separate control and data connections to move files between server and client

D.

offers proprietary support at the session layer when transferring data

Question # 226

What is a characteristic of spine-and-leaf architecture?

A.

Each device is separated by the same number of hops

B.

It provides variable latency

C.

It provides greater predictability on STP blocked ports.

D.

Each link between leaf switches allows for higher bandwidth.

Question # 227

Refer to the exhibit.

200-301 question answer

Which change to the configuration on Switch?

allows the two switches to establish an GtherChannel?

A.

Change the protocol to EtherChannel mode on.

B.

Change the LACP mode to active

C.

Change the LACP mode to desirable

D.

Change the protocol to PAqP and use auto mode

Question # 228

Which two values or settings must be entered when configuring a new WLAN in the Cisco Wireless LAN Controller GUI? (Choose two)

A.

management interface settings

B.

QoS settings

C.

Ip address of one or more access points

D.

SSID

E.

Profile name

Question # 229

What are two behaviors of a point-to-point WAN topology? (Choose two.)

A.

It uses a single router to route traffic between sites.

B.

It leverages a dedicated connection.

C.

It connects remote networks through a single line.

D.

t delivers redundancy between the central office and branch offices.

E.

It provides direct connections between each router in the topology.

Question # 230

Which AP mode wirelessly connects two separate network segments each set up within a different campus building?

A.

mesh

B.

local

C.

bridge

D.

point-to-point

Question # 231

Refer to the exhibit.

200-301 question answer

What is the correct next hop for router R1 to reach IP addresses 192.168.2.86 and 10.20.1.50?

A.

172.16.1.4

B.

172.16.1.1

C.

172.16.1.2

D.

172.16.1.3

Question # 232

Which interface condition is occurring in this output?

200-301 question answer

A.

duplex mismatch

B.

queueing

C.

bad NIC

D.

broadcast storm

Question # 233

What is represented by the word "switch" within this JSON schema?

200-301 question answer

A.

array

B.

value

C.

key

D.

object

Question # 234

Which interface is used to send traffic to the destination network?

O 10.18.75.113/27 [110/6906] via GO/6

O 10.18.75.113/27 [110/23018] via GO/3

R 10.18.75.113/27 [120/16] via GO/16

R 10.18.75.113/27 [120/14] via GO/23

A.

G0/23

B.

G0/3

C.

G0/16

D.

G0/6

Question # 235

Which action prevents debug messages from being sent via syslog while allowing other messages when an abnormally high number of syslog messages are generated by a device with the debug process turned on?

A.

Use an access list to filter out the syslog messages.

B.

Turn off the logging monitor in global configuration mode.

C.

Disable logging to the console.

D.

Set the logging trap severity level to informational.

Question # 236

How does MAC learning function?

A.

inserts MAC addresses dynamically into the CAM table

B.

restricts ports to a maximum of 10 dynamically-learned addresses

C.

protects against denial of service attacks

D.

rewrites the source and destination MAC address

Question # 237

Refer to the exhibit.

200-301 question answer

Network services must be enabled on interface Gil/0734. Which configuration meets the needs for this implementation?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option

B.

Option

C.

Option

D.

Option

Question # 238

What is the function of generative AI in network operations?

A.

It disables unused services.

B.

It deploys network firmware updates.

C.

It creates synthetic network configurations.

D.

It computes optimal data storage solutions.

Question # 239

200-301 question answer

Refer to the exhibit. What is preventing host A from reaching the internet?

A.

The domain name server is unreachable.

B.

LAN and WAN network segments are different.

C.

IP address assignment is incorrect.

D.

The default gateway should be the first usable IP address.

Question # 240

What are two benefits of private IPv4 addressing? (Choose two.)

A.

provides external internet network connectivity

B.

provides unlimited address ranges

C.

propagates routing information to WAN links

D.

reuses addresses at multiple sites

E.

conserves globally unique address space

Question # 241

What is a function of a northbound API in an SDN environment?

A.

It supports distributed processing for configuration.

B.

It relies on global provisioning and configuration.

C.

It upgrades software and restores files.

D.

It provides orchestration and network automation services.

Question # 242

200-301 question answer

Refer to the exhibit. An administrator is configuring a new WLAN for a wireless network that has these requirements:

    Dual-band clients that connect to the WLAN must be directed to the 5-GHz spectrum.

    Wireless clients on this WLAN must be able to apply VLAN settings from RADIUS attributes.

Which two actions meet these requirements? (Choose two.)

A.

Enable the Aironet IE option.

B.

Enable the Coverage Hole Detection option.

C.

Set the MFP Client Protection option to Required

D.

Enable the client band select option.

E.

Enable the allow AAA Override option

Question # 243

Refer to the exhibit.

200-301 question answer

Users will be using a preconfigured secret key and SSID and must have a secured key hashing algorithm configured. The AAA server must not be used for the user authentication method. Which action completes the task?

A.

Enable AutoConfig iPSK.

B.

SetCCMP128(AES).

C.

Configure PSK Format HEX with key string.

D.

Configure PSK-SHA2.

Question # 244

200-301 question answer

Refer to the exhibit. How must OSPF be configured on the GigabitEthernet0/0 interface of the neighbor device to achieve the desired neighbor relationship?

A.

Router(config)#interface GigabitEthernet 0/0Router(config-if)#ip ospf network point-to-point

B.

Router(config)#interface GigabitEthernet 0/0Router(config-if)#ip ospf cost 5

C.

Router(config)#interface GigabitEthernet 0/0Router(config-if)#ip ospf 1 area 2

D.

Router(config)#interface GigabitEthernet 0/0Router(config-if)#ip ospf priority 1

Question # 245

Which AP feature provides a captive portal for users to authenticate, register, and accept terms before accessing the internet?

A.

Whole Home

B.

Hotspot

C.

One-Click

D.

Enhanced Bluetooth

Question # 246

What is a similarity between global and unique local IPv6 addresses?

A.

They are allocated by the same organization.

B.

They are routable on the global internet.

C.

They use the same process for subnetting.

D.

They are part of the multicast IPv6 group type.

Question # 247

Drag and drop the characteristic from the left onto the cable type on the right.

200-301 question answer

Question # 248

Why are API keys used to enforce rate limiting?

A.

to uniquely identify clients to monitor their usage patterns

B.

to encrypt data to prevent excessive usage

C.

to contain embedded permissions that automatically expire

D.

to track the geographical location of each request

Question # 249

What is the maximum length of characters used in an SSID?

A.

16

B.

32

C.

48

D.

64

Question # 250

What is a characteristic of private IPv4 addressing?

A.

traverses the Internet when an outbound ACL Is applied

B.

used without allocation from a regional Internet authority

C.

shared address space between an ISP and subscriber

D.

reduces the need for isolated networks

Question # 251

200-301 question answer

Refer to the exhibit. Inter-VLAN routing is configured on SW1. Client A is running Linux as an OS in VLAN 10 with a default gateway IP 10.0.0.1 but cannot ping client B in VLAN 20 running Windows. What action must be taken to verify that client A has the correct IP settings?

A.

Run the ipconfig command on client A and ensure that the IP address is within the host range of 10.0.0.1 - 10.0.255.254.

B.

Run the ifconfig command on client A to confirm that its IP and subnet mask fall within 255.254.0.0.

C.

Run the ipconfig command on client A to confirm that the correct 10.0.0.1 default gateway is used.

D.

Run the ifconfig command on client A to confirm that the subnet mask is set to 255.255.128.0.

Question # 252

200-301 question answer

Refer to the exhibit. Which tasks must be performed on the Download File tab to install new software using TCP port 22?)

A.

Set the File Type to Code, set the Transfer Mode to SFTP, and specify the IP address of the WLC.

B.

Set the File Type to Configuration, set the Transfer Mode to FTP, and specify the IP address of the file server.

C.

Set the File Type to Code, set the Transfer Mode to SFTP, and specify the IP address of the file server.

D.

Set the File Type to Configuration, set the Transfer Mode to SFTP, and specify the IP address of the WLC.

Question # 253

Why does an administrator choose to implement a remote access IPsec VPN?

A.

to establish an encrypted tunnel between a remote user and a private network over the internet

B.

to allow access to an enterprise network using any internet-enabled location via a web browser using SSL

C.

to provide a secure link between an HTTPS server, authentication subsystem, and an end-user

D.

to use cryptography for authentication between a device and user over a negotiated VPN gateway

Question # 254

200-301 question answer

Refer to the exhibit. The routers R1-LAB and R2-LAB are configured with link-local addresses. What command must be applied to interface Gi0/0 on R1-LAB for an automated address self-assignment on the IPv6 network?

A.

ipv6 address 2001:db8:1:0FFA:0::/64

B.

ipv6 address 2001:db8:0:0FFA::1/64

C.

ipv6 address 2001:db8:0:0FFA::/64 eui-64

D.

ipv6 address 2001:db8:0:0FFA::/64 anycast

Question # 255

What is the main capability of multifactor authentication?

A.

Identifying permissions for end users using three authentication factors

B.

Authenticating and authorizing end users using two authentication factors

C.

Confirming end-user identity using two or more authentication factors

D.

Verifying end-user access permissions using two authentication factors

Question # 256

Which interface is used to send traffic to the destination network?

10.90.207.87/26 [110/1912] via F0/7

10.90.207.87/26 [110/28968] via F0/6

10.90.207.87/26 [120/14] via F0/4

10.90.207.87/26 [120/11] via F0/5

A.

F0/7

B.

F0/5

C.

F0/4

D.

F0/6

Question # 257

200-301 question answer

Refer to the exhibit.

Which configuration is needed to configure a WLAN with WPA2 only and with a password that is 63 characters long?

A.

Disable WPA Policy and WPA Encryption and then enable PSK using ASCII.

B.

Enable PSK and FT PSK and then disable WPA Policy.

C.

Disable WPA Encryption and then enable FT PSK.

D.

Enable PSK using Hex format and then disable WPA Policy.

Question # 258

200-301 question answer

Refer to the exhibit.

How does router R1 forward packets destined to 10.0.4.10?

A.

via 10.0.4.2

B.

via 10.0.0.2

C.

via FastEthernet0/1

D.

via FastEthernet1/1

Question # 259

Which interface on the WLC is used exclusively as a DHCP relay?

A.

distribution

B.

service

C.

AP-manager

D.

virtual

Question # 260

Which interface is used to send traffic to the destination network?

10.174.208.210/28 [110/2708] via G0/21

10.174.208.210/28 [110/25445] via G0/20

10.174.208.210/28 [120/1] via G0/12

10.174.208.210/28 [120/4] via G0/16

A.

G0/12

B.

G0/20

C.

G0/21

D.

G0/16

Question # 261

What is the purpose of the service-set identifier?

A.

It identifies the wired network to which a network device is connected.

B.

It identifies a wireless network for a mobile device to connect.

C.

It identifies the wireless network to which an application must connect.

D.

It identifies the wired network to which a user device is connected.

Question # 262

Refer to the exhibit.

200-301 question answer

Of the routes learned with dynamic routing protocols, which has the least preferred metric?

A.

Local

B.

EIGRP

C.

OSPF

D.

RIP

Question # 263

How does a network administrator securely manage an AP in lightweight mode?

A.

using the CLI via an out-of-band connection

B.

using the WLC GUI via HTTPS

C.

using the AP GUI via an in-band SSH connection

D.

using the CLI via a virtual interface with SSH

Question # 264

200-301 question answer

Refer to the exhibit. An LACP EtherChannel between two directly connected switches is in the configuration process.

Which command must be configured on switch SW2’s Gi0/1-2 interfaces to establish the channel to SW1?

A.

channel-group 1 mode desirable

B.

channel-group 1 mode on

C.

channel-group 1 mode auto

D.

channel-group 1 mode active

Question # 265

Where are the real-time control functions processed in a split MAC architecture?

A.

Centralized cloud management platform

B.

Central WLC

C.

Individual AP

D.

Client device

Question # 266

Aswitch receives a frame with the destination MAC address 3C:5D: 7E:9F: 1A:2B.

Switch# show ethernet-frame-and-mac-address-table

200-301 question answer

How does the switch handle the frame?

A.

It ages out the frame until the MAC address becomes known.

B.

It drops the frame to avoid unnecessary network congestion.

C.

It switches the frame to a predetermined port based on settings.

D.

It floods the frame to all ports except the incoming port.

Question # 267

Refer to the exhibit.

200-301 question answer

An engineer must document all Wi-Fi services on a new wireless LAN controller. The Wi-Fi SSID "Office_WLan" has Layer 2 Security. What is determined by this configuration?

A.

There is a strong mutual authentication used between NAC and the network devices using x.509 standard.

B.

There is an extra layer of security that ensures only authorized devices with known MAC addresses connect to the network.

C.

There is a robust security mechanism configured to protect against various Layer 2 and Layer 3 attacks.

D.

There is Galois cache algorithm configured that provides strong encryption and authentication.

Question # 268

200-301 question answer

Refer to the exhibit. A packet sourced from 10.10.10.1 is destined for 172.16.3.254. What is the subnet mask of the destination route?

A.

0.0.0.0

B.

255.255.254.0

C.

255.255.255.0

D.

255.255.255.255

Question # 269

What is a characteristic of private IPv4 addressing?

A.

alleviates the shortage of IPv4 addresses

B.

reduces the forwarding table on network routers

C.

enables secure connectivity over the internet

D.

used as the NAT outside global IP address

Question # 270

200-301 question answer

Refer to the exhibit. Which two commands, when configured on router R1. fulfill these requirements? (Choose two.) ' Packets toward the entire network 2001:db8:23: :/64 must be forwarded through router R2. ' Packets toward host 2001: db8:23::14 preferably must be forwarded through R3.

A.

ipv6 route 2001:db8:23: :/128 fd00:12::2

B.

Ipv6 route 2001:db8:23::14/128 fd00:13::3

C.

ipv6 route 2001:db8:23::14/64 fd00:12::2 200

D.

ipv6 route 2001:db8:23: l4/64 fd00:12::2

E.

ipv6 route 2001:db8:23: :/64 fd00:12::2

Question # 271

What is the total number of users permitted to simultaneously browse the controller management pages when using the AireOS GUI?

A.

2

B.

5

C.

8

D.

9

Question # 272

200-301 question answer

Refer to the exhibit. A secondary route is required on router R1 to pass traffic to the LAN network on R2 if the primary link fails. Which command must be entered to configure the router?

A.

ip route 10.0.2.0 255.255.255.240 10.0.0.7 92

B.

ip route 10.0.2.0 255.255.255.248 10.0.0.6 91

C.

ip route 10.0.2.0 256.255.255.240 10.0.0.6 91

D.

ip route 10.0.2.0 255.255.255.248 null0 93

Question # 273

200-301 question answer

Refer to the exhibit. The route for 10.220.100.96/27 has been very unstable. The same route has four backups to routers A, B, C, and D via the respective methods. The routing protocol defaults for router Y have not been changed. When the current route for 10.220.100.96/27 becomes unavailable, which router will router Y use to route traffic to 10.220.100.96/27?

A.

router D

B.

router B

C.

router C

D.

router A

Question # 274

A new DHCP server has been deployed in a corporate environment with lease time set to eight hours. Which CMD command on a Windows-based device allows the engineer to verify the DHCP lease expiration?

A.

ipconfig /renew

B.

ipconfig

C.

ipconfig /all

D.

ipconfig /displaydns

Question # 275

How does MAC learning function?

A.

Sends frames with unknown destinations to a multicast group.

B.

Increases security on the management VLAN.

C.

Rewrites the source and destination MAC address.

D.

Associates the MAC address with the port on which it is received.

Question # 276

Why would a network administrator implement the HSRP protocol?

A.

To provide network redundancy in the case of a router failure

B.

To use an open standard protocol that is configured on Cisco and third-party routers

C.

To allow hosts in a network to use the same default gateway virtual IP when load-balancing traffic

D.

To allow clients to be configured with multiple default gateway IPs

Question # 277

Which two northbound APIs are found in a software-defined network? (Choose two.)

A.

OpenFlow

B.

REST

C.

OpFlex

D.

SOAP

E.

NETCONF

Question # 278

Which statement describes virtualization on containers?

A.

It is a type of operating system virtualization that allows the host operating system to control the different CPU memory processes.

B.

It emulates a physical computer and enables multiple machines to run with many operating systems on a physical machine.

C.

It separates virtual machines from each other and allocates memory, processors, and storage to compute.

D.

It contains a guest operating system and virtual partition of hardware for OS and requires application libraries.

Question # 279

200-301 question answer

Refer to the exhibit. What is the administrative distance for the advertised prefix that includes the host IP address 10.30.0.1?

A.

10.0.0.2

B.

110

C.

30

D.

2

Question # 280

Which feature, when used on a WLC, allows it to bundle its distribution system ports into one 802.3ad group?

A.

QinQ

B.

ISL

C.

PAgP

D.

LAG

Question # 281

What is a characteristic of a Layer 2 switch?

A.

tracks the number of active TCP connections

B.

transmits exclusively at half duplex

C.

offers link bundling to servers

D.

uses routers to create collision domains

Question # 282

200-301 question answer

Three switches must be configured for Layer 2 connectivity. The company requires only the designated VLANs to be configured on their respective switches and permitted accross any links between switches for security purposes. Do not modify or delete VTP configurations.

The network needs two user-defined VLANs configured:

VLAN 110: MARKETING

VLAN 210: FINANCE

1. Configure the VLANs on the designated switches and assign them as access ports to the interfaces connected to the PCs.

2. Configure the e0/2 interfaces on Sw1 and Sw2 as 802.1q trunks with only the required VLANs permitted.

3. Configure the e0/3 interfaces on Sw2 and Sw3 as 802.1q trunks with only the required VLANs permitted.

200-301 question answer

Question # 283

Which header must be included in a REST request from an application that requires JSON-formatted content?

A.

Content-Type: application/json

B.

Accept-Encoding: application/json

C.

Accept: application/json

D.

Accept-Language: application/json

Question # 284

200-301 question answer

Refer to the exhibit. During initial configuration testing, the Windows workstation PC1 cannot connect with the 172.16.2.0/24 network.

Which set of actions corrects the configuration?

A.

Change the IP address to 172.16.1.6 and change the subnet mask to 255.255.255.248.

B.

Change the IP address to 172.16.1.6 and change the DNS servers to 172.16.1.12 and 172.16.1.13.

C.

Change the IP address to 172.16.1.9 and change the default gateway to 172.16.1.7.

D.

Change the IP address to 172.16.1.9 and change the DNS server to 172.16.1.12 only.

Question # 285

Physical connectivity is implemented between the two Layer 2 switches,

and the network connectivity between them must be configured.

I . Configure an LACP EtherChanneI and number it as 44; configure it

between switches SWI and SW2 using interfaces EthernetO/O and

Ethernet0/1 on both sides. The LACP mode must match on both ends.

2. Configure the EtherChanneI as a trunk link.

3. Configure the trunk link with 802. Iq tags.

4. Configure VLAN 'MONITORING' as the untagged VLAN of the

EtherChannel.

==================

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using

the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

200-301 question answer

Question # 286

How does automation affect network management processes?

A.

It interoperates with ISE to define and manage patch and update schedules.

B.

It performs configuration updates based on user profiles.

C.

It improves the efficiency of system lifecycle management.

D.

It provides a reactive support model.

Question # 287

Which combination of methods satisfies the minimum security requirements when a new multifactor authentication solution is deployed?

A.

password of 8 to 15 characters and personal 12-diglt PIN

B.

authorized USB dongle and mobile phone

C.

fingerprint scanning and facial recognition

D.

complex password and time-based one-time password

Question # 288

A network security team noticed that an increasing number of employees are becoming victims of phishing attacks. Which security program should be implemented to mitigate the problem?

A.

Physical access control

B.

Software firewall enabled on all PCs

C.

Email system patches

D.

User awareness training

Question # 289

Which key function is provided by the data plane?

A.

Making routing decisions

B.

Originating packets

C.

Forwarding traffic to the next hop

D.

Exchanging routing table data

Question # 290

Configure IPv4 and IPv6 connectivity between two routers. For IPv4, use a /28 network from the 192.168.1.0/24 private range. For IPv6, use the first /64 subnet from the 2001:0db8:aaaa::/48 subnet.

1. Using Ethernet0/1 on routers R1 and R2, configure the next usable/28 from the 192.168.1.0/24 range. The network 192.168.1.0/28 is unavailable.

2. For the IPv4 /28 subnet, router R1 must be configured with the first usable host address.

3. For the IPv4 /28 subnet, router R2 must be configured with the last usable host address.

4. For the IPv6 /64 subnet, configure the routers with the IP addressing provided from the topology.

5. A ping must work between the routers on the IPv4 and IPv6 address ranges.

200-301 question answer 200-301 question answer

Question # 291

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

200-301 question answer

Question # 292

How does automation leverage data models to reduce the operational complexity of a managed network?

A.

Reduces the response time for specific requests to devices with many interfaces

B.

Categorizes traffic and provides insights

C.

Allows the controller to be vendor-agnostic

D.

Streamlines monitoring using SNMP and other polling tools

Question # 293

200-301 question answer

Refer to the exhibit. All routers In the network are configured. R2 must be the DR. After the engineer connected the devices, R1 was elected as the DR. Which command sequence must be configured on R2 to be elected as the DR in the network?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 294

200-301 question answer

Refer to the exhibit. Which interface does a packet take to reach the host address of 192.168.18.16?

A.

GigabitEthernet1/0

B.

GigabitEthernet0/0

C.

GigabitEthernet2/0

D.

Null0

Question # 295

Which role do predictive Al models play in network load balancing?

A.

They anticipate future traffic spikes.

B.

They assign IP addresses to devices.

C.

They select correct cabling types for deployment.

D.

They solely monitor historical traffic volumes.

Question # 296

Which syslog message logging level displays interface line protocol up/down events?

A.

Informational

B.

debugging

C.

alerts

D.

notifications

Question # 297

200-301 question answer

Refer to the exhibit. Which next hop is used to route packets to the application server at 152.168.32.85?

A.

10.10.1.2

B.

10.10.2.2

C.

10.10.3.2

D.

10.10.4.2

Question # 298

What are two reasons for an engineer to configure a floating state route? (Choose two)

A.

to automatically route traffic on a secondary path when the primary path goes down

B.

to route traffic differently based on the source IP of the packet

C.

to enable fallback static routing when the dynamic routing protocol fails

D.

to support load balancing via static routing

E.

to control the return path of traffic that is sent from the router

Question # 299

Refer to the exhibit.

200-301 question answer

Drag and drop the networking parameters from the left onto the correct values on the right.

200-301 question answer

Question # 300

An engineer needs to configure LLDP to send the port description time length value (TLV). What command sequence must be implemented?

A.

switch(config-line)#IIdp port-description

B.

switch(config)#IIdp port-description

C.

switch(config-if)#IIdp port-description

D.

switch#IIdp port-description

Question # 301

Which action is taken by a switch port enabled for PoE power classification override?

A.

When a powered device begins drawing power from a PoE switch port a syslog message is generated

B.

As power usage on a PoE switch port is checked data flow to the connected device is temporarily paused

C.

If a switch determines that a device is using less than the minimum configured power it assumes the device has failed and disconnects

D.

Should a monitored port exceeds the maximum administrative value for power, the port is shutdown and err-disabled

Question # 302

An engineer observes high usage on the 2.4GHz channels and lower usage on the 5GHz channels. What must be configured to allow clients to preferentially use 5GH2 access points?

A.

Re- Anchor Roamed Clients

B.

11ac MU-MIMO

C.

OEAP Split Tunnel

D.

Client Band Select

Question # 303

An implementer is preparing hardware for virtualization to create virtual machines on a host. What is needed to provide communication between hardware and virtual machines?

A.

hypervisor

B.

router

C.

straight cable

D.

switch

Question # 304

Refer to the exhibit.

200-301 question answer

What does router R1 use as its OSPF router-ID?

A.

10.10.1.10

B.

10.10.10.20

C.

172.16.15.10

D.

192.168.0.1

Question # 305

Which unified access point mode continues to serve wireless clients after losing connectivity to the Cisco Wireless LAN Controller?

A.

sniffer

B.

mesh

C.

flexconnect

D.

local

Question # 306

Which statement about Link Aggregation when implemented on a Cisco Wireless LAN Controller is true?

A.

To pass client traffic two or more ports must be configured.

B.

The EtherChannel must be configured in "mode active"

C.

When enabled the WLC bandwidth drops to 500 Mbps

D.

One functional physical port is needed to pass client traffic

Question # 307

A user configured OSPF and advertised the Gigabit Ethernet interface in OSPF By default, which type of OSPF network does this interface belong to?

A.

point-to-multipoint

B.

point-to-point

C.

broadcast

D.

nonbroadcast

Question # 308

A Cisco engineer is configuring a factory-default router with these three passwords:

• The user EXEC password for console access is p4ssw0rd1

• The user EXEC password for Telnet access is s3cr3t2

• The password for privileged EXEC mode is pnv4t3p4ss Which command sequence must the engineer configured

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 309

Refer to the exhibit.

200-301 question answer

An engineer is configuring an EtherChannel using LACP between Switches 1 and 2 Which configuration must be applied so that only Switch 1 sends LACP initiation packets?

A.

Switch 1 (config-if)#channel-group 1 mode onSwrtch2(config-if)#channel-group 1 mode passive

B.

Switch1(config-if)#channel-group 1 mode passiveSwitch2(config-if)#channel-group 1 mode active

C.

Switch1{config-if)£channel-group 1 mode activeSwitch2(config-if)#channel-group 1 mode passive

D.

Switch1(config-if)#channel-group 1 mode onSwitch2(config-if)#channel-group 1 mode active

Question # 310

What differentiates the TCP and UDP protocols?

A.

TCP tracks segments being transmitted or received by assigning segment numbers, and UDP adjusts data flow according to network conditions.

B.

TCP establishes a connection with the device on the other end before transferring, and UDP transfers without establishing a connection.

C.

TCP sends data at a constant rate with error checking on upper protocol layers, and UDP provides error-checking and sequencing.

D.

TCP immediately transmits data without waiting for a handshake, and UDP awaits a response from the receiver before sending additional data.

Question # 311

In which way does generative AI aid network simulations?

Question # 312

200-301 question answer

200-301 question answer

200-301 question answer

IP connectivity and OSPF are preconfigured on all devices where necessary. Do not make any changes to the IP addressing or OSPF. The company policy uses connected interfaces and next hops when configuring static routes except for load balancing or redundancy without floating static. Connectivity must be established between subnet 172.20.20.128/25 on the Internet and the LAN at 192.168.0.0/24 connected to SW1:

1. Configure reachability to the switch SW1 LAN subnet in router R2.

2. Configure default reachability to the Internet subnet in router R1.

3. Configure a single static route in router R2 to reach to the Internet subnet considering both redundant links between routers R1 and R2. A default route is NOT allowed in router R2.

4. Configure a static route in router R1 toward the switch SW1 LAN subnet where the primary link must be through Ethernet0/1. and the backup link must be through Ethernet0/2 using a floating route. Use the minimal administrative distance value when required.

Question # 313

Refer to the exhibit.

200-301 question answer

An engineer is configuring a new router on the network and applied this configuration. Which additional configuration allows the PC to obtain its IP address from a DHCP server?

A.

Configure the ip dhcp relay information command under interface Gi0/1.

B.

Configure the ip dhcp smart-relay command globally on the router

C.

Configure the ip helper-address 172.16.2.2 command under interface Gi0/0

D.

Configure the ip address dhcp command under interface Gi0/0

Question # 314

Refer to the exhibit.

200-301 question answer

An engineer has started to configure replacement switch SW1. To verify part of the configuration, the engineer issued the commands as shown and noticed that the entry for PC2 is missing. Which change must be applied to SW1 so that PC1 and PC2 communicate normally?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 315

Which value is the unique identifier that an access point uses to establish and maintain wireless connectivity to wireless network devices?

A.

VLANID

B.

SSID

C.

RFID

D.

WLANID

Question # 316

Refer to the exhibit.

200-301 question answer

A company is configuring a failover plan and must implement the default routes in such a way that a floating static route will assume traffic forwarding when the primary link goes down. Which primary route configuration must be used?

A.

ip route 0.0.0.0 0.0.0.0 192.168.0.2 GigabitEthernetl/0

B.

ip route 0.0.0.0 0.0.0.0 192.168.0.2 tracked

C.

ip route 0.0.0.0 0.0.0.0 192.168.0.2 floating

D.

ip route 0.0.0.0 0.0.0.0 192.168.0.2

Question # 317

Refer to the exhibit.

200-301 question answer

A static route must be configured on R14 to forward traffic for the 172 21 34 0/25 network that resides on R86 Which command must be used to fulfill the request?

A.

ip route 172.21.34.0 255.255.255.192 10.73.65.65

B.

ip route 172.21.34.0 255.255.255.0 10.73.65.65

C.

ip route 172.21.34.0 255.255.128.0 10.73.65.64

D.

ip route 172.21.34.0 255.255.255.128 10.73.65.66

Question # 318

Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they mitigate on the right.

200-301 question answer

Question # 319

Refer to the exhibit.

200-301 question answer

Host A sent a data frame destined for host D

200-301 question answer

What does the switch do when it receives the frame from host A?

A.

It drops the frame from the switch CAM table.

B.

It floods the frame out of all ports except port Fa0/1.

C.

It shuts down the port Fa0/1 and places it in err-disable mode.

D.

It experiences a broadcast storm.

Question # 320

Refer to the exhibit.

200-301 question answer

Router R1 currently is configured to use R3 as the primary route to the Internet, and the route uses the default administrative distance settings. A network engineer must configure R1 so that it uses R2 as a backup, but only if R3 goes down. Which command must the engineer configure on R1 so that it correctly uses R2 as a backup route, without changing the administrative distance configuration on the link to R3?

A.

ip route 0.0.0.0 0.0.0.0 g0/1 1

B.

ip route 0.0.0.0 0.0.0.0 209.165.201.5 10

C.

ip route 0.0.0.0 0.0.0.0 209.165.200.226 1

D.

ip route 0,0.0.0 0.0.0.0 g0/1 6

Question # 321

Which WLC management connection type is vulnerable to man-in-the-middle attacks?

A.

SSH

B.

HTTPS

C.

Telnet

D.

console

Question # 322

How does Rapid PVST+ create a fast loop-free network topology?

A.

lt requires multiple links between core switches

B.

It generates one spanning-tree instance for each VLAN

C.

It maps multiple VLANs into the same spanning-tree instance

D.

It uses multiple active paths between end stations.

Question # 323

Refer to the exhibit.

200-301 question answer

Which configuration enables DHCP addressing for hosts connected to interface FastEthernetO/1 on router R4?

A.

interface FastEthernet0/0ip helper-address 10.0.1.1iaccess-list 100 permit udp host 10.0.1.1 eq bootps host 10.148.2.1

B.

interface FastEthernot0/1ip helper-address 10.0.1.1!access-list 100 permit tcp host 10.0.1.1 eq 67 host 10.148.2.1

C.

interface FastEthernetO/0ip helper-address 10.0.1.1Iaccess-list 100 permit host 10.0.1.1 host 10.148.2.1 eq bootps

D.

interface FastEthernet0/1ip helper-address 10.0.1.1!access-list 100 permit udp host 10.0.1.1 eq bootps host 10.148.2.1

Question # 324

What provides centralized control of authentication and roaming In an enterprise network?

A.

a lightweight access point

B.

a firewall

C.

a wireless LAN controller

D.

a LAN switch

Question # 325

Refer to the exhibit.

200-301 question answer

All VLANs are present in the VLAN database. Which command sequence must be applied to complete the configuration?

A.

Interface FastEthernet0/1 switchport trunk native vlan 10 switchport trunk allowed vlan 10,15

B.

Interface FastEthernet0/1 switchport mode trunk switchport trunk allowed vlan 10,15

C.

interface FastEthernet0/1 switchport mode access switchport voice vlan 10

D.

Interface FastEthernet0/1 switchport trunk allowed vlan add 10 vlan 10 private-vlan isolated

Question # 326

Drag and drop the descriptions of AAA services from the left onto the corresponding services on the right.

200-301 question answer

Question # 327

Refer to the exhibit.

200-301 question answer

Which minimum configuration items are needed to enable Secure Shell version 2 access to R15?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 328

Refer to the exhibit.

200-301 question answer

An IP subnet must be configured on each router that provides enough addresses for the number of assigned hosts and anticipates no more than 10% growth for now hosts. Which configuration script must be used?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 329

Refer to the exhibit.

200-301 question answer

How should the configuration be updated to allow PC1 and PC2 access to the Internet?

A.

Modify the configured number of the second access list.

B.

Add either the ip nat {inside|outside} command under both interfaces.

C.

Remove the overload keyword from the ip nat inside source command.

D.

Change the ip nat inside source command to use interface GigabitEthernet0/0.

Question # 330

Which Layer 2 switch function encapsulates packets for different VLANs so that the packets traverse the same port and maintain traffic separation between the VLANs?

A.

VLAN numbering

B.

VLAN DSCP

C.

VLAN tagging

D.

VLAN marking

Question # 331

Which type of network attack overwhelms the target server by sending multiple packets to a port until the half-open TCP resources of the target are exhausted?

A.

SYIM flood

B.

reflection

C.

teardrop

D.

amplification

Question # 332

Refer to the exhibit.

200-301 question answer

Switch A is newly configured. All VLANs are present in the VLAN database. The IP phone and PC A on Gi0/1 must be configured for the appropriate VLANs to establish connectivity between the PCs. Which command set fulfills the requirement?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 333

Which QoS per-hop behavior changes the value of the ToS field in the IPv4 packet header?

A.

shaping

B.

classification

C.

policing

D.

marking

Question # 334

What is an expected outcome when network management automation is deployed?

A.

A distributed management plane must be used.

B.

Software upgrades are performed from a central controller

C.

Complexity increases when new device configurations are added

D.

Custom applications are needed to configure network devices

Question # 335

Refer to the exhibit.

200-301 question answer

Which network prefix was learned via EIGRP?

A.

172.16.0.0/16

B.

192.168.2.0/24

C.

207.165.200.0/24

D.

192.168.1.0/24

Question # 336

Which two components comprise part of a PKI? (Choose two.)

A.

preshared key that authenticates connections

B.

RSA token

C.

CA that grants certificates

D.

clear-text password that authenticates connections

E.

one or more CRLs

Question # 337

Refer to the exhibit.

200-301 question answer

Which two commands must be configured on router R1 to enable the router to accept secure remote-access connections? (Choose two)

A.

transport input telnet

B.

crypto key generate rsa

C.

ip ssh pubkey-chain

D.

login console

E.

username cisco password 0 Cisco

Question # 338

A network engineer is installing an IPv6-only capable device. The client has requested that the device IP address be reachable only from the internal network. Which type of IPv6 address must the engineer assign?

A.

unique local address

B.

link-local address

C.

aggregatable global address

D.

IPv4-compatible IPv6 address

Question # 339

Refer to the exhibit.

200-301 question answer

Site A was recently connected to site B over a new single-mode fiber path. Users at site A report Intermittent connectivity Issues with applications hosted at site B. What is the reason for the problem?

A.

Heavy usage is causing high latency.

B.

An incorrect type of transceiver has been inserted into a device on the link.

C.

physical network errors are being transmitted between the two sites.

D.

The wrong cable type was used to make the connection.

Question # 340

A network engineer must configure two new subnets using the address block 10 70 128 0/19 to meet these requirements:

• The first subnet must support 24 hosts

• The second subnet must support 472 hosts

• Both subnets must use the longest subnet mask possible from the address block

Which two configurations must be used to configure the new subnets and meet a requirement to use the first available address in each subnet for the router interfaces? (Choose two )

A.

interface vlan 1234ip address 10.70.159.1 255.255.254.0

B.

interface vlan 1148ip address 10.70.148.1 255.255.254.0

C.

interface vlan 4722ip address 10.70.133.17 255.255.255.192

D.

interface vlan 3002ip address 10.70.147.17 255.255.255.224

E.

interface vlan 155ip address 10.70.155.65 255.255.255.224

Question # 341

Which field within the access-request packet is encrypted by RADIUS?

A.

authorized services

B.

authenticator

C.

username

D.

password

Question # 342

Refer to the exhibit.

200-301 question answer

Which command configures OSPF on the point-to-point link between routers R1 and R2?

A.

router-id 10.0.0.15

B.

neighbor 10.1.2.0 cost 180

C.

ipospf priority 100

D.

network 10.0.0.0 0.0.0.255 area 0

Question # 343

A network administrator is setting up a new IPv6 network using the 64-bit address 2001 0EB8 00C1 2200:0001 0000 0000 0331/64 To simplify the configuration the administrator has decided to compress the address Which IP address must the administrator configure?

A.

ipv6 address 21:EB8:C1:2200:1::331/64

B.

ipv6 address 2001:EB8:C1:22:1::331/64

C.

ipv6 address 2001 :EB8:C 1:2200.1 ::331-64

D.

ipv6 address 2001:EB8:C1:2200:1:0000:331/64

Question # 344

Refer to the exhibit.

200-301 question answer

Which configuration allows routers R14 and R86 to form an OSPFv2 adjacency while acting as a central point for exchanging OSPF information between routers?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 345

Refer to the exhibit.

200-301 question answer

Which two commands when used together create port channel 10? (Choose two.)

A.

int range g0/0-1channel-group 10 mode active

B.

int range g0/0-1 chanm.l-group 10 mode desirable

C.

int range g0/0-1channel-group 10 mode passive

D.

int range g0/0-1 channel-group 10 mode auto

E.

int range g0/0-1 channel-group 10 mode on

Question # 346

Refer to the exhibit.

200-301 question answer

Traffic sourced from the loopback0 Interface is trying to connect via ssh to the host at 10.0.1.15. What Is the next hop to the destination address?

A.

192.168.0.7

B.

192.168.0.4

C.

192.168.0.40

D.

192.168.3.5

Question # 347

Which two network actions occur within the data plane? (Choose two.)

A.

Add or remove an 802.1Q trunking header.

B.

Make a configuration change from an incoming NETCONF RPC.

C.

Run routing protocols.

D.

Match the destination MAC address to the MAC address table.

E.

Reply to an incoming ICMP echo request.

Question # 348

Refer to the exhibit.

200-301 question answer

Which switch becomes the root of a spanning tree for VLAN 20 if all li links are of equal speed?

200-301 question answer

A.

SW1

B.

SW2

C.

SW3

D.

SW4

Question # 349

A network engineer is configuring a switch so that it is remotely reachable via SSH. The engineer has already configured the host name on the router. Which additional command must the engineer configure before entering the command to generate the RSA key?

A.

password password

B.

crypto key generate rsa modulus 1024

C.

ip domain-name domain

D.

ip ssh authentication-retries 2

Question # 350

Refer to the exhibit.

200-301 question answer

Which next-hop IP address does Routed use for packets destined to host 10 10.13.158?

A.

10.10.10.5

B.

10.10.11.2

C.

10.10.12.2

D.

10.10.10.9

Question # 351

An engineer is tasked to configure a switch with port security to ensure devices that forward unicasts multicasts and broadcasts are unable to flood the port The port must be configured to permit only two random MAC addresses at a time Drag and drop the required configuration commands from the left onto the sequence on the right Not all commands are used.

200-301 question answer

Question # 352

Refer to the exhibit.

200-301 question answer

The link between PC1 and the switch is up. but it is performing poorly. Which interface condition is causing the performance problem?

A.

There is a duplex mismatch on the interface

B.

There is an issue with the fiber on the switch interface.

C.

There is a speed mismatch on the interface.

D.

There is an interface type mismatch

Question # 353

Refer to the exhibit.

200-301 question answer

Users on existing VLAN 100 can reach sites on the Internet. Which action must the administrator take to establish connectivity to the Internet for users in VLAN 200?

A.

Define a NAT pool on the router.

B.

Configure static NAT translations for VLAN 200.

C.

Configure the ip nat outside command on another interface for VLAN 200.

D.

Update the NAT INSIDF RANGFS ACL

Question # 354

Which protocol is used for secure remote CLI access?

A.

HTTPS

B.

HTTP

C.

Telnet

D.

SSH

Question # 355

Refer to the exhibit.

200-301 question answer

The following must be considered:

• SW1 is fully configured for all traffic

• The SW4 and SW9 links to SW1 have been configured

• The SW4 interface Gi0/1 and Gi0/0 on SW9 have been configured

• The remaining switches have had all VLANs adde d to their VLAN database

Which configuration establishes a successful ping from PC2 to PC7 without interruption to traffic flow between other PCs?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 356

Which action implements physical access control as part of the security program of an organization?

A.

configuring a password for the console port

B.

backing up syslogs at a remote location

C.

configuring enable passwords on network devices

D.

setting up IP cameras to monitor key infrastructure

Question # 357

R1 as an NTP server must have:

• NTP authentication enabled

• NTP packets sourced from Interface loopback 0

• NTP stratum 2

• NTP packets only permitted to client IP 209.165 200 225

How should R1 be configured?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question # 358

Refer to the exhibit.

200-301 question answer

An engineer is configuring the HO router. Which IPv6 address configuration must be applied to the router fa0'1 interface for the router to assign a unique 64-brt IPv6 address to Itself?

A.

ipv6 address 2001:DB8:0:1:C601:42FF:FE0F:7/64

B.

ipv6 address 2001:DB8:0:1:C601:42FE:800F:7/64

C.

ipv6 address 2001 :DB8:0:1:FFFF:C601:420F:7/64

D.

iov6 address 2001 :DB8:0:1:FE80:C601:420F:7/64

Question # 359

An engineer must configure R1 for a new user account. The account must meet these requirements:

* It must be configured in the local database.

* The username is engineer.

* It must use the strongest password configurable. Which command must the engineer configure on the router?

A.

R1 (config)# username engineer2 algorithm-type scrypt secret test2021

B.

R1(config)# username engineer2 secret 5 password S1$b1Ju$kZbBS1Pyh4QzwXyZ

C.

R1(config)# username engineer2 privilege 1 password 7 test2021

D.

R1(config)# username englneer2 secret 4 S1Sb1Ju$kZbBS1Pyh4QzwXyZ

200-301 PDF

$42

$139.99

3 Months Free Update

  • Printable Format
  • Value of Money
  • 100% Pass Assurance
  • Verified Answers
  • Researched by Industry Experts
  • Based on Real Exams Scenarios
  • 100% Real Questions

200-301 PDF + Testing Engine

$57

$189.99

3 Months Free Update

  • Exam Name: Implementing and Administering Cisco Solutions (200-301 CCNA) v1.1
  • Last Update: Dec 14, 2025
  • Questions and Answers: 1237
  • Free Real Questions Demo
  • Recommended by Industry Experts
  • Best Economical Package
  • Immediate Access

200-301 Engine

$48

$159.99

3 Months Free Update

  • Best Testing Engine
  • One Click installation
  • Recommended by Teachers
  • Easy to use
  • 3 Modes of Learning
  • State of Art Technology
  • 100% Real Questions included