Summer Special - 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: c4sdisc65

200-301 PDF

$49

$139.99

3 Months Free Update

  • Printable Format
  • Value of Money
  • 100% Pass Assurance
  • Verified Answers
  • Researched by Industry Experts
  • Based on Real Exams Scenarios
  • 100% Real Questions

200-301 PDF + Testing Engine

$66.5

$189.99

3 Months Free Update

  • Exam Name: Cisco Certified Network Associate
  • Last Update: Sep 12, 2025
  • Questions and Answers: 1191
  • Free Real Questions Demo
  • Recommended by Industry Experts
  • Best Economical Package
  • Immediate Access

200-301 Engine

$56

$159.99

3 Months Free Update

  • Best Testing Engine
  • One Click installation
  • Recommended by Teachers
  • Easy to use
  • 3 Modes of Learning
  • State of Art Technology
  • 100% Real Questions included

200-301 Practice Exam Questions with Answers Cisco Certified Network Associate Certification

Question # 6

Which IPsec transport mode encrypts the IP header and the payload?

A.

pipe

B.

control

C.

transport

D.

tunnel

Full Access
Question # 7

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

200-301 question answer

Full Access
Question # 8

What is a functionality of the control plane in the network?

A.

It exchanges topology information with other routers.

B.

It forwards traffic to the next hop.

C.

It looks up an egress interface in the forwarding information base.

D.

It provides CLI access to the network device.

Full Access
Question # 9

Refer to the exhibit.

200-301 question answer

After configuring a new static route on the CPE. the engineer entered this series of commands to verify that the new configuration is operating normally When is the static default route installed into the routing table?

A.

when 203 0 113.1 is no longer reachable as a next hop B. when the default route learned over external BGP becomes invalid

B.

when a route to 203.0 113 1 is learned via BGP

C.

when the default route over external BGP changes its next hop

Full Access
Question # 10

Refer to the exhibit.

200-301 question answer

An engineer configures interface fa0/1 on SW1 and SW2 to pass traffic from two different VLANs. For security reasons, company policy requires the native VLAN to be set to a nondefault value. Which configuration meets this requirement?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 11

Which device separates networks by security domains?

A.

firewall

B.

access point

C.

intrusion protection system

D.

wireless controller

Full Access
Question # 12

What is a DHCP client?

A.

a server that dynamically assigns IP addresses to hosts

B.

a router that statically assigns IP addresses to hosts

C.

a host that is configured to request an IP address automatically

D.

a workstation that requests a domain name associated with its IP address

Full Access
Question # 13

Which two features introduced in SNMPv2 provides the ability to retrieve large amounts of data in one request

A.

Get

B.

GetNext

C.

Set

D.

GetBulk

E.

Inform

Full Access
Question # 14

Drag and drop the WLAN components from the left onto the component details on the right.

200-301 question answer

Full Access
Question # 15

Drag and drop the Ansible features from the left to the right Not all features are used.

200-301 question answer

Full Access
Question # 16

Refer to the exhibit.

200-301 question answer

The EtherChannel is configured with a speed of 1000 and duplex as full on both ends of channel group 1. What is the next step to configure the channel on switch A to respond to but not initiate LACP communication?

A.

interface range gigabitethernet0/0/0-15 channel-group 1 mode on

B.

interface range gigabitethernet0/0/0-15 channel-group 1 mode desirable

C.

interface port-channel 1 channel-group 1 mode auto

D.

interface port-channel 1 channel-group 1 mode passive

Full Access
Question # 17

Refer to the exhibit.

200-301 question answer

What is the prefix length for the route that router1 will use to reach host A?

A.

/25

B.

/27

C.

/28

D.

/29

Full Access
Question # 18

Refer to the exhibit.

200-301 question answer

A new VLAN and switch are added to the network. A remote engineer configures OldSwitch and must ensure that the configuration meets these requirements:

• accommodates current configured VLANs

• expands the range to include VLAN 20

• allows for IEEE standard support for virtual LANs

Which configuration on the NewSwitch side of the link meets these requirements?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 19

Refer to the exhibit.

200-301 question answer

A Cisco engineer creates a new WLAN called lantest. Which two actions must be performed so that only high-speed 2.4-Ghz clients connect? (Choose two.)

A.

Enable the Broadcast SSID option

B.

Enable the Status option.

C.

Set the Radio Policy option to 802 11g Only.

D.

Set the Radio Policy option to 802.11a Only.

E.

Set the Interface/Interface Group(G) to an interface other than guest

Full Access
Question # 20

Refer to the exhibit.

200-301 question answer

A newly configured PC fails to connect to the internet using TCP port 80 to www cisco com Which setting must be modified for the connection to work?

A.

Subnet Mask

B.

DNS Servers

C.

Default Gateway

D.

DHCP Server

Full Access
Question # 21

200-301 question answer

Refer to the exhibit. Users at a branch office are experiencing application performance issues, poor VoIP audio quality, and slow downloads. What is the cause of the issues?

A.

broadcast storm

B.

overutilization

C.

interface configuration

D.

QoS queuing

Full Access
Question # 22

Refer to the exhibit.

200-301 question answer

Switch AccSw2 has just been added to the network along with PC2. All VLANs have been implemented on AccSw2. How must the ports on AccSw2 be configured to establish Layer 2 connectivity between PC1 and PC2?

A.

200-301 question answer

B.

B. 200-301 question answer

C.

C. 200-301 question answer

D.

D. 200-301 question answer

Full Access
Question # 23

What is the temporary state that switch ports always enter immediately after the boot process when Rapid PVST+ is used?

A.

discarding

B.

listening

C.

forwarding

D.

learning

Full Access
Question # 24

Refer to the exhibit.

200-301 question answer

R1 has just received a packet from host A that is destined to host B. Which route in the routing table is used by R1 to reac B?

A.

10.10.13.0/25 [108/0] via 10.10.10.10

B.

10.10.13.0/25 [110/2] via 10.10.10.2

C.

10.10.13.0/25 [110/2] via 10.10.10.6

D.

10.10.13.0/25 [1/0] via 10.10.10.2

Full Access
Question # 25

Which alternative to password authentication Is Implemented to allow enterprise devices to log in to the corporate network?

A.

magic links

B.

one-time passwords

C.

digital certificates

D.

90-day renewal policies

Full Access
Question # 26

Refer to the exhibit.

200-301 question answer

Router R1 receives static routing updates from routers A. B, C, and D. The network engineer wants R1 to advertise static routes in OSPF area 1. Which nary address must be advertised in OSPF?

A.

10.1.40.0/25

B.

10.1.40.0/24

C.

10.1.40.0/23

D.

10.1.41.0/25

Full Access
Question # 27

What is the purpose of using First Hop Redundancy Protocol on a specific subnet?

A.

ensures a loop-free physical topology

B.

filters traffic based on destination IP addressing

C.

sends the default route to the hosts on a network

D.

forwards multicast hello messages between routers

Full Access
Question # 28

When an access point is seeking to join wireless LAN controller, which message is sent to the AP- Manager interface?

A.

Discovery response

B.

DHCP request

C.

DHCP discover

D.

Discovery request

Full Access
Question # 29

Which IP header field is changed by a Cisco device when QoS marking is enabled?

A.

Header Checksum

B.

Type of service

C.

DSCP

D.

ECN

Full Access
Question # 30

What is the difference between SNMP traps and SNMP polling?

A.

SNMP traps are used for proactive monitoring, and SNMP polling is used for reactive monitoring.

B.

SNMP traps send periodic updates via the MIB, and SNMP polling sends data on demand.

C.

SNMP traps are initiated by the network management system, and network devices initiate SNMP polling.

D.

SNMP traps are initiated using a push model at the network device, and SNMP polling is initiated at the server.

Full Access
Question # 31

Refer to the exhibit.

200-301 question answer

An engineer must configure the interface that connects to PC 1 and secure it in a way that only PC1 is allowed to use the port No VLAN tagging can be used except for a voice VLAN. Which command sequence must be entered to configure the switch?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 32

Which interface or port on the WLC is the default for in-band device administration and communications between the controller and access points?

A.

virtual interface

B.

management interface

C.

console port

D.

service port

Full Access
Question # 33

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

200-301 question answer

Full Access
Question # 34

Drag and drop the Cisco IOS attack mitigation features from the left onto the types of network attack they mitigate on the right.

200-301 question answer

Full Access
Question # 35

Refer to the exhibit.

200-301 question answer

Router OldR is replacing another router on the network with the intention of having OldR and R2 exchange routes_ After the engineer applied the initial OSPF

configuration: the routes were still missing on both devices. Which command sequence must be issued before the clear IP ospf process command is entered to enable the neighbor relationship?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 36

Refer to the exhibit.

200-301 question answer

The Router1 routing table has multiple methods to reach 10.10.10.0/24 as shown. The default Administrative Distance is used. Drag and drop the network conditions from the left onto the routing methods that Router1 uses on the right.

200-301 question answer

Full Access
Question # 37

What is the functionality of the Cisco DNA Center?

A.

data center network pokey con

B.

console server that permits secure access to all network devices

C.

IP address cool distribution scheduler

D.

software-defined controller for automaton of devices and services

Full Access
Question # 38

An engineer is configuring SSH version 2 exclusively on the R1 router. What is the minimum configuration required to permit remote management using the cryptographic protocol?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 39

The clients and OHCP server reside on different subnets. Which command must be used to forward requests and replies between clients on the 10.10.0.1/24 subnet and the DHCP server at 192.168.10.1?

A.

ip route 192.168.10.1

B.

ip default-gateway 192.168.10.1

C.

ip helper-address 192.168.10.1

D.

ip dhcp address 192.168.10.1

Full Access
Question # 40

Refer to the exhibit.

200-301 question answer

The DHCP server is configured with a DHCP pool for each of the subnets represented. Which command must be configured on switch SW1 to allow DHCP clients on VLAN 10 to receive dynamic IP addresses from the DHCP server?

A.

SW1(config-if)#ip helper-address 192.168.20.2

B.

SW1(config-if)#ip helper-address 192.168.20.1

C.

SW1(config-if)#ip helper-address 192.168.10.2

D.

SW1(config-if)#ip helper-address 192.168.10.1

Full Access
Question # 41

What are two benefits of network automation? (Choose two.)

A.

Faster changes with more reliable results

B.

Reduced operational costs

C.

Fewer network failures

D.

Reduced hardware footprint

E.

Increased network security

Full Access
Question # 42

Refer to the exhibit.

200-301 question answer

Which action must be taken to ensure that router A is elected as the DR for OSPF area 0?

A.

Configure the router A interfaces with the highest OSPF priority value within the area.

B.

Configure router B and router C as OSPF neighbors of router A.

C.

Configure the OSPF priority on router A with the lowest value between the three routers.

D.

Configure router A with a fixed OSPF router ID.

Full Access
Question # 43

Refer to the exhibit.

200-301 question answer

A network administrator must permit traffic from the 10.10.0.0/24 subnet to the WAN on interlace Seria10. What is the effect of the configuration as the administrator applies the command?

A.

The permit command fails and returns an error code.

B.

The router accepts all incoming traffic to Seria10 with the last octet of the source IP set to 0.

C.

The sourced traffic from IP range 10.0.0.0 -10.0.0.255 is allowed on Seria10.

D.

The router fails to apply the access list to the interface.

Full Access
Question # 44

What is a characteristics of a collapsed-core network topology?

A.

It allows the core and distribution layers to run as a single combined layer.

B.

It enables the core and access layers to connect to one logical distribution device over an EtherChannel.

C.

It enables all workstations in a SOHO environment to connect on a single switch with internet access.

D.

It allows wireless devices to connect directly to the core layer, which enables faster data transmission.

Full Access
Question # 45

200-301 question answer

Refer to the exhibit. Clients on the WLAN are required to use 802.11r. What action must be taken to meet the requirement?

A.

Set the Fast Transition option to Enable and enable FT 802.1X under Authentication Key Management

B.

Set the Fast Transition option and the WPA gik-randomize State to disable

C.

Under Protected Management Frames, set the PMF option to Required

D.

Enable CCKM under Authentication Key Management

Full Access
Question # 46

Refer to the exhibit.

200-301 question answer

What does route 10.0.1.3/32 represent in the routing table?

A.

a single destination address

B.

the source 10.0.1.100

C.

all hosts in the 10.0.1.0 subnet

D.

the 10.0.0.0 network

Full Access
Question # 47

What is a benefit of using private IPv4 addressing?

A.

Multiple companies can use the same addresses without conflicts.

B.

Direct connectivity is provided to internal hosts from outside an enterprise network.

C.

Communication to the internet Is reachable without the use of NAT.

D.

All external hosts are provided with secure communication to the Internet.

Full Access
Question # 48

Which type of IPv4 address type helps to conserve the globally unique address classes?

A.

multicast

B.

private

C.

loopback

D.

public

Full Access
Question # 49

R1 has learned route 192.168.12.0/24 via IS-IS, OSPF, RIP, and Internal EIGRP. Under normal operating conditions, which routing protocol's route will be installed in the routing table?

A.

IS-IS

B.

RIP

C.

OSPF

D.

Internal EIGRP

Full Access
Question # 50

Which interface enables communication between a program on the controller and a program on the networking devices?

A.

northbound interface

B.

software virtual interface

C.

southbound interface

D.

tunnel Interface

Full Access
Question # 51

An engineer observes high usage on the 2.4GHz channels and lower usage on the 5GHz channels. What must be configured to allow clients to preferentially use 5GHz access points?

A.

Re-Anchor Roamed Clients

B.

OEAP Split Tunnel

C.

11ac MU-MIMO

D.

Client Band Select

Full Access
Question # 52

Drag and drop the device behaviors from the left onto the matching HSRP slate on the right.

200-301 question answer

Full Access
Question # 53

Refer to the exhibit.

200-301 question answer

Clients on the WLAN are required to use 802.11r. What action must be taken to meet the requirement?

A.

Under Protected Management Frames, set the PMF option to Required.

B.

Enable CCKM under Authentication Key Management.

C.

Set the Fast Transition option and the WPA gtk-randomize State to disable.

D.

Set the Fast Transition option to Enable and enable FT 802.1X under Authentication Key Management.

Full Access
Question # 54

What is the difference between 1000BASE-LX/LH and 1000BASE-ZX interfaces?

A.

1000BASE-ZX is supported on links up to 1000km, and 1000BASE-LX/LH operates over links up to 70 km.

B.

1000BASE-LX/LH interoperates with multimode and single-mode fiber, and 10008ASE-ZX needs a conditioning patch cable with a multimode.

C.

1000BASE-LX/LH is supported on links up to 10km, and 1000BASE-ZX operates over links up to 70 km

D.

1000BASE-ZX interoperates with dual-rate 100M/1G 10Km SFP over multimode fiber, and 1000BASE-LX/LH supports only single-rate.

Full Access
Question # 55

What is the definition of backdoor malware?

A.

malicious code that is installed onto a computer to allow access by an unauthorized user

B.

malicious code with the main purpose of downloading other malicious code

C.

malicious program that is used to launch other malicious programs

D.

malicious code that infects a user machine and then uses that machine to send spam

Full Access
Question # 56

Refer to the exhibit.

200-301 question answer

How many objects, Keys and JSON list values are present?

A.

three objects, two Keys, and three JSON list values

B.

three objects, three keys and two JSON Ml values

C.

one object, three keys, and three JSON list values

D.

one object, three keys and two JSON list values

Full Access
Question # 57

200-301 question answer

Refer to the exhibit. What is the next-hop P address for R2 so that PC2 reaches the application server via ElGRP?

A.

192.168.30.1

B.

10.10 105

C.

10.10.10.6

D.

192.168.201

Full Access
Question # 58

Which port type does a lightweight AP use to connect to the wired network when it is configured in local mode?

A.

EtherChannel

B.

LAG

C.

trunk

D.

access

Full Access
Question # 59

Which two wireless security stewards use Counter Mode Cipher Block Chaining Message Authentication Code Protocol for encryption and data integrity'? (Choose two.)

A.

WPA2

B.

WPA3

C.

Wi-Fi 6

D.

WEP

E.

WPA

Full Access
Question # 60

Which mechanism carries multicast traffic between remote sites and supports encryption?

A.

GRE over IPsec

B.

IPsec over ISATAP

C.

GRE

D.

ISATAP

Full Access
Question # 61

Two switches have been implemented and all interfaces are at the default configuration level. A trunk link must be implemented between two switches with these requirements:

• using an industry-standard trunking protocol

• permitting VLANs 1 -10 and denying other VLANs

How must the interconnecting ports be configured?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 62

What are two characteristics of a controller-based network? (Choose two.)

A.

It uses Telnet to report system issues

B.

It uses northbound and southbound APIs to communicate between architectural layers

C.

It decentralizes the control plane, which allows each device to make its own forwarding decisions

D.

It moves the control plane to a central point

E.

The administrator can make configuration updates from the CLI

Full Access
Question # 63

200-301 question answer

Refer to the exhibit. Traffic from R1 to the 10.10.2.0/24 subnet uses 192.168.1.2 as its next hop. A network engineer wants to update the R1 configuration so that traffic with destination 10.10.2.1 passes through router R3, and all other traffic to the 10.10.2.0/24 subnet passes through R2.

Which command must be used?

A.

ip route 10.10.2.0 255.255.255.0 192.168.1.4 100

B.

ip route 10.10.2.0 255.255.255.0 192.168.1.4 115

C.

ip route 10.10.2.1 255.255.255.255 192.168.1.4 100

D.

ip route 10.10.2.1 255.255.255.255 192.168.1.4 115

Full Access
Question # 64

What are two reasons a switch experiences frame flooding? (Choose two.)

A.

A defective patch cable is connected to the switch port

B.

Topology changes are occurring within spanning-tree

C.

An aged MAC (able entry is causing excessive updates

D.

Port-security is configured globally

E.

The forwarding table has overflowed

Full Access
Question # 65

A router received three destination prefixes:10.0.0/18, and 10.0.0/24. When the show ip route command is executed, which output does it return?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 66

Which properly is shared by 10GBase-SR and 10GBase-LR interfaces?

A.

Both require fiber cable media for transmission.

B.

Both require UTP cable media for transmission.

C.

Both use the single-mode fiber type.

D.

Both use the multimode fiber type.

Full Access
Question # 67

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

200-301 question answer

Full Access
Question # 68

Which type of address is shared by routers in a HSRP implementation and used by hosts on the subnet as their default gateway address?

A.

multicast address

B.

loopback IP address

C.

virtual IP address

D.

broadcast address

Full Access
Question # 69

What is used to identify spurious DHCP servers?

A.

DHCPREQUEST

B.

DHCPDISCOVER

C.

DHCPACK

D.

DHCPOFFER

Full Access
Question # 70

Which action implements physical access control as part of the security program of an organization?

A.

configuring a password for the console port

B.

backing up syslogs at a remote location

C.

configuring enable passwords on network devices

D.

setting up IP cameras to monitor key infrastructure

Full Access
Question # 71

Which value is the unique identifier that an access point uses to establish and maintain wireless connectivity to wireless network devices?

A.

VLANID

B.

SSID

C.

RFID

D.

WLANID

Full Access
Question # 72

Refer to the exhibit.

200-301 question answer

Web traffic is coming in from the WAN interface. Which route takes precedence when the router is processing traffic destined for the LAN network at 10 0.10.0/24?

A.

via next-hop 10.0.1.5

B.

via next-hop 10 0 1.4

C.

via next-hop 10.0 1.50

D.

via next-hop 10.0 1 100

Full Access
Question # 73

A Cisco engineer is configuring a factory-default router with these three passwords:

• The user EXEC password for console access is p4ssw0rd1

• The user EXEC password for Telnet access is s3cr3t2

• The password for privileged EXEC mode is pnv4t3p4ss Which command sequence must the engineer configured

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 74

Refer to the exhibit.

200-301 question answer

The following must be considered:

• SW1 is fully configured for all traffic

• The SW4 and SW9 links to SW1 have been configured

• The SW4 interface Gi0/1 and Gi0/0 on SW9 have been configured

• The remaining switches have had all VLANs adde d to their VLAN database

Which configuration establishes a successful ping from PC2 to PC7 without interruption to traffic flow between other PCs?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 75

What is a requirement when configuring or removing LAG on a WLC?

A.

The Incoming and outgoing ports for traffic flow must be specified If LAG Is enabled.

B.

The controller must be rebooted after enabling or reconfiguring LAG.

C.

The management interface must be reassigned if LAG disabled.

D.

Multiple untagged interfaces on the same port must be supported.

Full Access
Question # 76

What are two benefits of FHRPs? (Choose two.)

A.

They enable automatic failover of the default gateway.

B.

They allow multiple devices to serve as a single virtual gateway for clients in the network.

C.

They are able to bundle multiple ports to increase bandwidth.

D.

They prevent loops in the Layer 2 network.

E.

They allow encrypted traffic.

Full Access
Question # 77

Refer to the exhibit.

200-301 question answer

Traffic sourced from the loopback0 Interface is trying to connect via ssh to the host at 10.0.1.15. What Is the next hop to the destination address?

A.

192.168.0.7

B.

192.168.0.4

C.

192.168.0.40

D.

192.168.3.5

Full Access
Question # 78

What is an expected outcome when network management automation is deployed?

A.

A distributed management plane must be used.

B.

Software upgrades are performed from a central controller

C.

Complexity increases when new device configurations are added

D.

Custom applications are needed to configure network devices

Full Access
Question # 79

Refer to the exhibit.

200-301 question answer

Which plan must be Implemented to ensure optimal QoS marking practices on this network?

A.

As traffic traverses MLS1 remark the traffic, but trust all markings at the access layer.

B.

Trust the IP phone markings on SW1 and mark traffic entering SW2 at SW2.

C.

Remark traffic as it traverses R1 and trust all markings at the access layer.

D.

As traffic enters from the access layer on SW1 and SW2. trust all traffic markings.

Full Access
Question # 80

Refer to the exhibit.

200-301 question answer

An engineer is configuring the HO router. Which IPv6 address configuration must be applied to the router fa0'1 interface for the router to assign a unique 64-brt IPv6 address to Itself?

A.

ipv6 address 2001:DB8:0:1:C601:42FF:FE0F:7/64

B.

ipv6 address 2001:DB8:0:1:C601:42FE:800F:7/64

C.

ipv6 address 2001 :DB8:0:1:FFFF:C601:420F:7/64

D.

iov6 address 2001 :DB8:0:1:FE80:C601:420F:7/64

Full Access
Question # 81

OSPF must be configured between routers R1 and R2. Which OSPF configuration must be applied to router R1 to avoid a DR/BDR election?

A.

router ospf 1network 192.168.1.1 0.0.0.0 area 0interface e1/1ip address 192.168.1.1 255.255.255.252ip ospf network broadcast

B.

router ospf 1network 192.168.1.1 0.0.0.0 area 0interface e1/1ip address 192.168.1.1 255.255.255.252ip ospf network point-to-point

C.

router ospf 1network 192.168.1.1 0.0.0.0 area 0interface e1/1ip address 192.168.1.1 255.255.255.252ip ospf cost 0

D.

router ospf 1network 192.168.1.1 0.0.0.0 area 0hello interval 15interface e1/1Ip address 192.168.1.1 255.255.255.252

Full Access
Question # 82

Refer to the exhibit.

200-301 question answer

R1 learns all routes via OSPF Which command configures a backup static route on R1 to reach the 192 168.20.0/24 network via R3?

A.

R1(config)#ip route 192.168.20.0 255.255.0.0 192.168.30.2

B.

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2 90

C.

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2 111

D.

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2

Full Access
Question # 83

Refer to the exhibit.

200-301 question answer

What is a reason for poor performance on the network interface?

A.

The interface is receiving excessive broadcast traffic.

B.

The cable connection between the two devices is faulty.

C.

The interface is operating at a different speed than the connected device.

D.

The bandwidth setting of the interface is misconfigured

Full Access
Question # 84

Which action is taken by the data plane within a network device?

A.

forwards traffic to the next hop

B.

constructs a routing table based on a routing protocol

C.

provides CLI access to the network device

D.

looks up an egress interface in the forwarding information base

Full Access
Question # 85

Which two components comprise part of a PKI? (Choose two.)

A.

preshared key that authenticates connections

B.

RSA token

C.

CA that grants certificates

D.

clear-text password that authenticates connections

E.

one or more CRLs

Full Access
Question # 86

Refer to the exhibit.

200-301 question answer

Routers R1 and R3 have the default configuration The router R2 priority is set to 99 Which commands on R3 configure it as the DR in the 10.0 4.0/24 network?

A.

R3(config)#interface Gig0/1 R3(config-if)#ip ospf priority 100

B.

R3(config)#interface Gig0/0 R3(config-if)#ip ospf priority 100

C.

R3(config)#interface Gig0/0 R3(config-if)i=ip ospf priority 1

D.

R3(config)#interface Gig0/1 R3(config-if)#ip ospf priority 0

Full Access
Question # 87

Refer to the exhibit.

200-301 question answer

Which route must be configured on R1 so that OSPF routing is used when OSPF is up. but the server is still reachable when OSPF goes down?

A.

ip route 10.1.1.10 255.255.255.255 172.16.2.2 100

B.

ip route 10.1.1.0 255.255.255.0 gi0/1 125

C.

ip route 10.1.1.0 255.255.255.0 172.16.2.2 100

D.

ip route 10.1.1.10 255.255.255.255 gi0/0 125

Full Access
Question # 88

Refer to the exhibit.

200-301 question answer

Which command must be issued to enable a floating static default route on router A?

A.

lp route 0.0.0.0 0.0.0.0 192.168.1.2

B.

ip default-gateway 192.168.2.1

C.

ip route 0.0.0.0 0.0.0.0 192.168.2.1 10

D.

ip route 0.0.0.0 0.0.0.0 192.168.1.2 10

Full Access
Question # 89

An engineer must configure R1 for a new user account. The account must meet these requirements:

* It must be configured in the local database.

* The username is engineer.

* It must use the strongest password configurable. Which command must the engineer configure on the router?

A.

R1 (config)# username engineer2 algorithm-type scrypt secret test2021

B.

R1(config)# username engineer2 secret 5 password S1$b1Ju$kZbBS1Pyh4QzwXyZ

C.

R1(config)# username engineer2 privilege 1 password 7 test2021

D.

R1(config)# username englneer2 secret 4 S1Sb1Ju$kZbBS1Pyh4QzwXyZ

Full Access
Question # 90

Refer to the exhibit.

200-301 question answer

Which two commands when used together create port channel 10? (Choose two.)

A.

int range g0/0-1channel-group 10 mode active

B.

int range g0/0-1 chanm.l-group 10 mode desirable

C.

int range g0/0-1channel-group 10 mode passive

D.

int range g0/0-1 channel-group 10 mode auto

E.

int range g0/0-1 channel-group 10 mode on

Full Access
Question # 91

Refer to the exhibit.

200-301 question answer

Which minimum configuration items are needed to enable Secure Shell version 2 access to R15?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 92

Which two network actions occur within the data plane? (Choose two.)

A.

Add or remove an 802.1Q trunking header.

B.

Make a configuration change from an incoming NETCONF RPC.

C.

Run routing protocols.

D.

Match the destination MAC address to the MAC address table.

E.

Reply to an incoming ICMP echo request.

Full Access
Question # 93

Refer to the exhibit.

200-301 question answer

An engineer is updating the R1 configuration to connect a new server to the management network. The PCs on the management network must be blocked from pinging the default gateway of the new server. Which command must be configured on R1 to complete the task?

A.

R1(config)#lp route 172.16.2.2 255.255.255.248 gi0/1

B.

R1(config)#jp route 172.16.2.2 255.255.255.255 gi0/0

C.

R1(config>#ip route 172.16.2.0 255.255.255.0 192.168.1.15

D.

R1(conflg)#ip route 172.16.2.0 255.255.255.0 192.168.1.5

Full Access
Question # 94

What causes a port to be placed in the err-disabled state?

A.

nothing plugged into the port

B.

link flapping

C.

shutdown command issued on the port

D.

latency

Full Access
Question # 95

Drag and drop the facts about wireless architectures from the left onto the types of access point on the right. Not all options are used.

200-301 question answer

Full Access
Question # 96

What is a function of an endpoint on a network?

A.

forwards traffic between VLANs on a network

B.

connects server and client devices to a network

C.

allows users to record data and transmit to a tile server

D.

provides wireless services to users in a building

Full Access
Question # 97

Drag and drop the characteristics of networking from the left onto the networking types on the right.

200-301 question answer

Full Access
Question # 98

Drag and drop the descriptions of AAA services from the left onto the corresponding services on the right.

200-301 question answer

Full Access
Question # 99

Refer to the exhibit.

200-301 question answer

Packets received by the router from BGP enter via a serial interface at 209 165 201 1 Each route is present within the routing table Which interface is used to forward traffic with a destination IP of 10.1.1.19?

A.

F0/4

B.

F0/0

C.

F0/1

D.

F0/3

Full Access
Question # 100

Drag and drop the Rapid PVST+ forwarding slate actions from the loft to the right. Not all actions are used.

200-301 question answer

Full Access
Question # 101

Refer to the exhibit.

200-301 question answer

Which two commands must be added to update the configuration of router R1 so that it accepts only encrypted connections? (Choose two )

A.

username CNAC secret R!41!4319115@

B.

ip ssh version 2

C.

line vty 0 4

D.

crypto key generate rsa 1024

E.

transport input ssh

Full Access
Question # 102

Refer to the exhibit.

200-301 question answer

The DHCP server and clients are connected to the same switch. What is the next step to complete the DHCP configuration to allow clients on VLAN 1 to receive addresses from the DHCP server?

A.

Configure the ip dhcp snooping trust command on the interlace that is connected to the DHCP client.

B.

Configure the ip dhcp relay information option command on the interface that is connected to the DHCP client.

C.

Configure the ip dhcp snooping trust command on the interface that is connected to the DHCP server.

D.

Configure the Ip dhcp relay information option command on the interface that is connected to the DHCP server.

Full Access
Question # 103

Refer to the exhibit.

200-301 question answer

Which next-hop IP address does Routed use for packets destined to host 10 10.13.158?

A.

10.10.10.5

B.

10.10.11.2

C.

10.10.12.2

D.

10.10.10.9

Full Access
Question # 104

Refer to the exhibit.

200-301 question answer

Which configuration enables DHCP addressing for hosts connected to interface FastEthernetO/1 on router R4?

A.

interface FastEthernet0/0ip helper-address 10.0.1.1iaccess-list 100 permit udp host 10.0.1.1 eq bootps host 10.148.2.1

B.

interface FastEthernot0/1ip helper-address 10.0.1.1!access-list 100 permit tcp host 10.0.1.1 eq 67 host 10.148.2.1

C.

interface FastEthernetO/0ip helper-address 10.0.1.1Iaccess-list 100 permit host 10.0.1.1 host 10.148.2.1 eq bootps

D.

interface FastEthernet0/1ip helper-address 10.0.1.1!access-list 100 permit udp host 10.0.1.1 eq bootps host 10.148.2.1

Full Access
Question # 105

Refer to the exhibit.

200-301 question answer

Router R1 resides in OSPF Area 0. After updating the R1 configuration to influence the paths that it will use to direct traffic, an engineer verified that each of the four Gigabit interfaces has the same route to 10.10.0.0/16. Which interface will R1 choose to send traffic to reach the route?

A.

GigabitEthernet0/0

B.

GigabltEthornet0/1

C.

GigabitEthernet0/2

D.

GigabitEthernet0/3

Full Access
Question # 106

Refer to the exhibit.

200-301 question answer

Which switch becomes the root of a spanning tree for VLAN 20 if all li links are of equal speed?

200-301 question answer

A.

SW1

B.

SW2

C.

SW3

D.

SW4

Full Access
Question # 107

Which wireless security protocol relies on Perfect Forward Secrecy?

A.

WPA3

B.

WPA

C.

WEP

D.

WPA2

Full Access
Question # 108

Drag and drop the statements about networking from the left onto the corresponding networking types on the right.

200-301 question answer

Full Access
Question # 109

A network engineer must implement an IPv6 configuration on the vlan 2000 interface to create a routable locally-unique unicast address that is blocked from being advertised to the internet. Which configuration must the engineer apply?

A.

interface vlan 2000ipv6 address ffc0:0000:aaaa::1234:2343/64

B.

interface vlan 2000Ipv6 address fc00:0000:aaaa:a15d:1234:2343:8aca/64

C.

interface vlan 2000ipv6 address fe80;0000:aaaa::1234:2343/64

D.

interface vlan 2000ipv6 address fd00::1234:2343/64

Full Access
Question # 110

Refer to the exhibit.

200-301 question answer

An engineer is configuring a new router on the network and applied this configuration. Which additional configuration allows the PC to obtain its IP address from a DHCP server?

A.

Configure the ip dhcp relay information command under interface Gi0/1.

B.

Configure the ip dhcp smart-relay command globally on the router

C.

Configure the ip helper-address 172.16.2.2 command under interface Gi0/0

D.

Configure the ip address dhcp command under interface Gi0/0

Full Access
Question # 111

A network engineer is configuring a switch so that it is remotely reachable via SSH. The engineer has already configured the host name on the router. Which additional command must the engineer configure before entering the command to generate the RSA key?

A.

password password

B.

crypto key generate rsa modulus 1024

C.

ip domain-name domain

D.

ip ssh authentication-retries 2

Full Access
Question # 112

Refer to the exhibit.

200-301 question answer

Host A sent a data frame destined for host D

200-301 question answer

What does the switch do when it receives the frame from host A?

A.

It drops the frame from the switch CAM table.

B.

It floods the frame out of all ports except port Fa0/1.

C.

It shuts down the port Fa0/1 and places it in err-disable mode.

D.

It experiences a broadcast storm.

Full Access
Question # 113

Refer to the exhibit.

200-301 question answer

An IP subnet must be configured on each router that provides enough addresses for the number of assigned hosts and anticipates no more than 10% growth for now hosts. Which configuration script must be used?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 114

Refer to the exhibit.

200-301 question answer

Which configuration allows routers R14 and R86 to form an OSPFv2 adjacency while acting as a central point for exchanging OSPF information between routers?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 115

What is the difference between IPv6 unicast and anycast addressing?

A.

IPv6 anycast nodes must be explicitly configured to recognize the anycast address, but IPv6 unicast nodes require no special configuration

B.

IPv6 unicast nodes must be explicitly configured to recognize the unicast address, but IPv6 anycast nodes require no special configuration

C.

An individual IPv6 unicast address is supported on a single interface on one node but an IPv6 anycast address is assigned to a group of interfaces on multiple nodes.

D.

Unlike an IPv6 anycast address, an IPv6 unicast address is assigned to a group of interfaces on multiple nodes

Full Access
Question # 116

Refer to the exhibit.

200-301 question answer

Switch A is newly configured. All VLANs are present in the VLAN database. The IP phone and PC A on Gi0/1 must be configured for the appropriate VLANs to establish connectivity between the PCs. Which command set fulfills the requirement?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 117

Refer to the exhibit.

200-301 question answer

Which network prefix was learned via EIGRP?

A.

172.16.0.0/16

B.

192.168.2.0/24

C.

207.165.200.0/24

D.

192.168.1.0/24

Full Access
Question # 118

How does Rapid PVST+ create a fast loop-free network topology?

A.

lt requires multiple links between core switches

B.

It generates one spanning-tree instance for each VLAN

C.

It maps multiple VLANs into the same spanning-tree instance

D.

It uses multiple active paths between end stations.

Full Access
Question # 119

Which interface mode must be configured to connect the lightweight APs in a centralized architecture?

A.

WLAN dynamic

B.

management

C.

trunk

D.

access

Full Access
Question # 120

What is the purpose of the ip address dhcp command?

A.

to configure an Interface as a DHCP server

B.

to configure an interface as a DHCP helper

C.

to configure an interface as a DHCP relay

D.

to configure an interface as a DHCP client

Full Access
Question # 121

Refer to the exhibit.

200-301 question answer

An engineer is configuring an EtherChannel using LACP between Switches 1 and 2 Which configuration must be applied so that only Switch 1 sends LACP initiation packets?

A.

Switch 1 (config-if)#channel-group 1 mode onSwrtch2(config-if)#channel-group 1 mode passive

B.

Switch1(config-if)#channel-group 1 mode passiveSwitch2(config-if)#channel-group 1 mode active

C.

Switch1{config-if)£channel-group 1 mode activeSwitch2(config-if)#channel-group 1 mode passive

D.

Switch1(config-if)#channel-group 1 mode onSwitch2(config-if)#channel-group 1 mode active

Full Access
Question # 122

Which QoS traffic handling technique retains excess packets in a queue and reschedules these packets for later transmission when the configured maximum bandwidth has been surpassed?

A.

weighted random early detection

B.

traffic policing

C.

traffic shaping

D.

traffic prioritization

Full Access
Question # 123

Refer to the exhibit.

200-301 question answer

Users on existing VLAN 100 can reach sites on the Internet. Which action must the administrator take to establish connectivity to the Internet for users in VLAN 200?

A.

Define a NAT pool on the router.

B.

Configure static NAT translations for VLAN 200.

C.

Configure the ip nat outside command on another interface for VLAN 200.

D.

Update the NAT INSIDF RANGFS ACL

Full Access
Question # 124

Refer to the exhibit.

200-301 question answer

All traffic enters the CPE router from interface Serial0/3 with an IP address of 192 168 50 1 Web traffic from the WAN is destined for a LAN network where servers are load-balanced An IP packet with a destination address of the HTTP virtual IP of 192 1681 250 must be forwarded Which routing table entry does the router use?

A.

192.168.1.0/24 via 192.168.12.2

B.

192.168.1.128/25 via 192.168.13.3

C.

192.168.1.192/26 via 192.168.14.4

D.

192.168.1.224/27 via 192.168.15.5

Full Access
Question # 125

Refer to the exhibit.

200-301 question answer

An engineer assumes a configuration task from a peer Router A must establish an OSPF neighbor relationship with neighbor 172 1 1 1 The output displays the status of the adjacency after 2 hours. What is the next step in the configuration process for the routers to establish an adjacency?

A.

Configure router A to use the same MTU size as router B.

B.

Set the router B OSPF ID to a nonhost address.

C.

Configure a point-to-point link between router A and router B.

D.

Set the router B OSPF ID to the same value as its IP address

Full Access
Question # 126

A network administrator is setting up a new IPv6 network using the 64-bit address 2001 0EB8 00C1 2200:0001 0000 0000 0331/64 To simplify the configuration the administrator has decided to compress the address Which IP address must the administrator configure?

A.

ipv6 address 21:EB8:C1:2200:1::331/64

B.

ipv6 address 2001:EB8:C1:22:1::331/64

C.

ipv6 address 2001 :EB8:C 1:2200.1 ::331-64

D.

ipv6 address 2001:EB8:C1:2200:1:0000:331/64

Full Access
Question # 127

Refer to the exhibit.

200-301 question answer

Site A was recently connected to site B over a new single-mode fiber path. Users at site A report Intermittent connectivity Issues with applications hosted at site B. What is the reason for the problem?

A.

Heavy usage is causing high latency.

B.

An incorrect type of transceiver has been inserted into a device on the link.

C.

physical network errors are being transmitted between the two sites.

D.

The wrong cable type was used to make the connection.

Full Access
Question # 128

Refer to the exhibit.

200-301 question answer

An engineer built a new L2 LACP EtherChannel between SW1 and SW2 and executed these show commands to verify the work. Which additional task allows the two switches to establish an LACP port channel?

A.

Change the channel-group mode on SW2 to auto

B.

Change the channel-group mode on SW1 to desirable.

C.

Configure the interface port-channel 1 command on both switches.

D.

Change the channel-group mode on SW1 to active or passive.

Full Access
Question # 129

R1 as an NTP server must have:

• NTP authentication enabled

• NTP packets sourced from Interface loopback 0

• NTP stratum 2

• NTP packets only permitted to client IP 209.165 200 225

How should R1 be configured?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 130

Which field within the access-request packet is encrypted by RADIUS?

A.

authorized services

B.

authenticator

C.

username

D.

password

Full Access
Question # 131

What is the function of the controller in a software-defined network?

A.

multicast replication at the hardware level

B.

fragmenting and reassembling packets

C.

making routing decisions

D.

forwarding packets

Full Access
Question # 132

What is a function of a Next-Generation IPS?

A.

makes forwarding decisions based on learned MAC addresses

B.

serves as a controller within a controller-based network

C.

integrates with a RADIUS server to enforce Layer 2 device authentication rules

D.

correlates user activity with network events

Full Access
Question # 133

Refer to the exhibit.

200-301 question answer

Router R1 currently is configured to use R3 as the primary route to the Internet, and the route uses the default administrative distance settings. A network engineer must configure R1 so that it uses R2 as a backup, but only if R3 goes down. Which command must the engineer configure on R1 so that it correctly uses R2 as a backup route, without changing the administrative distance configuration on the link to R3?

A.

ip route 0.0.0.0 0.0.0.0 g0/1 1

B.

ip route 0.0.0.0 0.0.0.0 209.165.201.5 10

C.

ip route 0.0.0.0 0.0.0.0 209.165.200.226 1

D.

ip route 0,0.0.0 0.0.0.0 g0/1 6

Full Access
Question # 134

Refer to the exhibit.

200-301 question answer

All VLANs are present in the VLAN database. Which command sequence must be applied to complete the configuration?

A.

Interface FastEthernet0/1 switchport trunk native vlan 10 switchport trunk allowed vlan 10,15

B.

Interface FastEthernet0/1 switchport mode trunk switchport trunk allowed vlan 10,15

C.

interface FastEthernet0/1 switchport mode access switchport voice vlan 10

D.

Interface FastEthernet0/1 switchport trunk allowed vlan add 10 vlan 10 private-vlan isolated

Full Access
Question # 135

Which WLC management connection type is vulnerable to man-in-the-middle attacks?

A.

SSH

B.

HTTPS

C.

Telnet

D.

console

Full Access
Question # 136

What provides centralized control of authentication and roaming In an enterprise network?

A.

a lightweight access point

B.

a firewall

C.

a wireless LAN controller

D.

a LAN switch

Full Access
Question # 137

Refer to the exhibit.

200-301 question answer

An engineer has started to configure replacement switch SW1. To verify part of the configuration, the engineer issued the commands as shown and noticed that the entry for PC2 is missing. Which change must be applied to SW1 so that PC1 and PC2 communicate normally?

A)

200-301 question answer

B)

200-301 question answer

C)

200-301 question answer

D)

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 138

A network engineer must configure two new subnets using the address block 10 70 128 0/19 to meet these requirements:

• The first subnet must support 24 hosts

• The second subnet must support 472 hosts

• Both subnets must use the longest subnet mask possible from the address block

Which two configurations must be used to configure the new subnets and meet a requirement to use the first available address in each subnet for the router interfaces? (Choose two )

A.

interface vlan 1234ip address 10.70.159.1 255.255.254.0

B.

interface vlan 1148ip address 10.70.148.1 255.255.254.0

C.

interface vlan 4722ip address 10.70.133.17 255.255.255.192

D.

interface vlan 3002ip address 10.70.147.17 255.255.255.224

E.

interface vlan 155ip address 10.70.155.65 255.255.255.224

Full Access
Question # 139

Which role do predictive Al models play in network load balancing?

A.

They anticipate future traffic spikes.

B.

They assign IP addresses to devices.

C.

They select correct cabling types for deployment.

D.

They solely monitor historical traffic volumes.

Full Access
Question # 140

Which feature, when used on a WLC, allows it to bundle its distribution system ports into one 802.3ad group?

A.

QinQ

B.

ISL

C.

PAgP

D.

LAG

Full Access
Question # 141

Which security element uses a combination of one-time passwords, a login name, and a personal smartphone?

A.

software-defined segmentation

B.

multifactor authentication

C.

attribute-based access control

D.

rule-based access control

Full Access
Question # 142

What is represented by the word "LB13" within this JSON schema?

200-301 question answer

A.

value

B.

object

C.

array

D.

key

Full Access
Question # 143

What is a characteristic of private IPv4 addressing?

A.

alleviates the shortage of IPv4 addresses

B.

reduces the forwarding table on network routers

C.

enables secure connectivity over the internet

D.

used as the NAT outside global IP address

Full Access
Question # 144

200-301 question answer

Refer to the exhibit. An administrator is configuring a new WLAN for a wireless network that has these requirements:

    Dual-band clients that connect to the WLAN must be directed to the 5-GHz spectrum.

    Wireless clients on this WLAN must be able to apply VLAN settings from RADIUS attributes.

Which two actions meet these requirements? (Choose two.)

A.

Enable the Aironet IE option.

B.

Enable the Coverage Hole Detection option.

C.

Set the MFP Client Protection option to Required

D.

Enable the client band select option.

E.

Enable the allow AAA Override option

Full Access
Question # 145

Which interface condition is occurring in this output?

200-301 question answer

A.

duplex mismatch

B.

queueing

C.

bad NIC

D.

broadcast storm

Full Access
Question # 146

Where are the real-time control functions processed in a split MAC architecture?

A.

Centralized cloud management platform

B.

Central WLC

C.

Individual AP

D.

Client device

Full Access
Question # 147

What is the main purpose of SSH management access?

A.

To support DES 56-bit and 3DES (168-bit) ciphers

B.

To enable secured access to the inbound management interface

C.

To validate management access with username and domain name only

D.

To allow passwords protected with HTTPS encryption to be sent

Full Access
Question # 148

Which AP mode wirelessly connects two separate network segments each set up within a different campus building?

A.

mesh

B.

local

C.

bridge

D.

point-to-point

Full Access
Question # 149

200-301 question answer

Refer to the exhibit. What is preventing host A from reaching the internet?

A.

The domain name server is unreachable.

B.

LAN and WAN network segments are different.

C.

IP address assignment is incorrect.

D.

The default gateway should be the first usable IP address.

Full Access
Question # 150

200-301 question answer

Refer to the exhibit. The route for 10.220.100.96/27 has been very unstable. The same route has four backups to routers A, B, C, and D via the respective methods. The routing protocol defaults for router Y have not been changed. When the current route for 10.220.100.96/27 becomes unavailable, which router will router Y use to route traffic to 10.220.100.96/27?

A.

router D

B.

router B

C.

router C

D.

router A

Full Access
Question # 151

How does MAC learning function?

A.

inserts MAC addresses dynamically into the CAM table

B.

restricts ports to a maximum of 10 dynamically-learned addresses

C.

protects against denial of service attacks

D.

rewrites the source and destination MAC address

Full Access
Question # 152

200-301 question answer

Refer to the exhibit. VLAN 23 is being implemented between SW1 and SW2. The command show interface ethernet0/0 switchport has been issued on SW1. Ethernet0/0 on SW1 is the uplink to SW2. Which command when entered on the uplink interface allows PC 1 and PC 2 to communicate without impact to the communication between PC 11 and PC 12?

A.

switchport trunk allowed vlan 2-1001

B.

switchport trunk allowed vlan add 23

C.

switchport trunk allowed vlan 23

D.

switchport trunk allowed vlan 22-23

Full Access
Question # 153

200-301 question answer

Refer to the exhibit. A secondary route is required on router R1 to pass traffic to the LAN network on R2 if the primary link fails. Which command must be entered to configure the router?

A.

ip route 10.0.2.0 255.255.255.240 10.0.0.7 92

B.

ip route 10.0.2.0 255.255.255.248 10.0.0.6 91

C.

ip route 10.0.2.0 256.255.255.240 10.0.0.6 91

D.

ip route 10.0.2.0 255.255.255.248 null0 93

Full Access
Question # 154

What is a similarity between global and unique local IPv6 addresses?

A.

They are allocated by the same organization.

B.

They are routable on the global internet.

C.

They use the same process for subnetting.

D.

They are part of the multicast IPv6 group type.

Full Access
Question # 155

Refer to the exhibit.

200-301 question answer

The LACP EtherChannel is configured, and the last change is to modify the interfaces on SwitchA to respond to packets received, but not to initiate negotiation. The interface range gigabitethernet0/0-15 command is entered. What must be configured next?

A.

SwitchA(config-if-range) #channel-group 1 mode desirable

B.

SwitchA(config-if-range) #channel-group 1 mode auto

C.

SwitchA(config-if-range) #channel-group 1 mode active

D.

SwitchA(config-if-range) #channel-group 1 mode passive

Full Access
Question # 156

Connectivity between four routers has been established. IP connectivity must be configured in the order presented to complete the implementation. No dynamic routing protocols are included.

1. Configure static routing using host routes to establish connectivity from router R3 to the router R1 Loopback address using the source IP of 209.165.200.230.

2. Configure an IPv4 default route on router R2 destined for router R4.

3. Configure an IPv6 default router on router R2 destined for router R4.

200-301 question answer 200-301 question answer

Full Access
Question # 157

What is the purpose of the service-set identifier?

A.

It identifies the wired network to which a network device is connected.

B.

It identifies a wireless network for a mobile device to connect.

C.

It identifies the wireless network to which an application must connect.

D.

It identifies the wired network to which a user device is connected.

Full Access
Question # 158

200-301 question answer

Refer to the exhibit. Configurations for the switch and PCs are complete.

Which configuration must be applied so that VLANs 2 and 3 communicate back and forth?

A.

interface GigabitEthernet0/0 ip address 10.10.2.10 255.255.252.0

B.

interface GigabitEthernet0/0.3 encapsulation dot1Q 3 native ip address 10.10.2.10 255.255.252.0

C.

interface GigabitEthernet0/0.10 encapsulation dot1Q 3

D.

interface GigabitEthernet0/0.3 encapsulation dot1Q 10 ip address 10.10.2.10 255.255.252.0

Full Access
Question # 159

200-301 question answer

Refer to the exhibit. What is the administrative distance for the advertised prefix that includes the host IP address 10.30.0.1?

A.

10.0.0.2

B.

110

C.

30

D.

2

Full Access
Question # 160

An engineer must update the configuration on two PCs in two different subnets to communicate locally with each other. One PC is configured with IP address 192.168.25.128/25 and the other with 192.168.25.100/25. Which network mask must the engineer configure on both PCs to enable the communication?

A.

255.255.255.224

B.

255.255.255.248

C.

255.255.255.0

D.

255.255.255.252

Full Access
Question # 161

An engineer requires a switch interface to actively attempt to establish a trunk link with a neighbor switch. What command must be configured?

A.

switchport mode dynamic desirable

B.

switchport mode trunk

C.

switchport nonegotiate

D.

switchport mode dynamic auto

Full Access
Question # 162

Which header must be included in a REST request from an application that requires JSON-formatted content?

A.

Content-Type: application/json

B.

Accept-Encoding: application/json

C.

Accept: application/json

D.

Accept-Language: application/json

Full Access
Question # 163

200-301 question answer

Refer to the exhibit. Which configuration enables SW2 to establish an LACP EtherChannel?

A.

200-301 question answer

B.

B. 200-301 question answer

C.

C. 200-301 question answer

D.

D. 200-301 question answer

Full Access
Question # 164

200-301 question answer

All physical cabling between the two switches is installed. Configure the network connectivity between the switches using the designated VLANs and interfaces.

1. Configure VLAN 100 named Compute and VLAN 200 named Telephony where required for each task.

2. Configure Ethernet0/1 on SW2 to use the existing VLAN named Available.

3. Configure the connection between the switches using access ports.

4. Configure Ethernet0/1 on SW1 using data and voice VLANs.

5. Configure Ethemet0/1 on SW2 so that the Cisco proprietary neighbor discovery protocol is turned off for the designated interface only.

200-301 question answer

Full Access
Question # 165

Which statement describes virtualization on containers?

A.

It is a type of operating system virtualization that allows the host operating system to control the different CPU memory processes.

B.

It emulates a physical computer and enables multiple machines to run with many operating systems on a physical machine.

C.

It separates virtual machines from each other and allocates memory, processors, and storage to compute.

D.

It contains a guest operating system and virtual partition of hardware for OS and requires application libraries.

Full Access
Question # 166

Aswitch receives a frame with the destination MAC address 3C:5D: 7E:9F: 1A:2B.

Switch# show ethernet-frame-and-mac-address-table

200-301 question answer

How does the switch handle the frame?

A.

It ages out the frame until the MAC address becomes known.

B.

It drops the frame to avoid unnecessary network congestion.

C.

It switches the frame to a predetermined port based on settings.

D.

It floods the frame to all ports except the incoming port.

Full Access
Question # 167

What is the total number of users permitted to simultaneously browse the controller management pages when using the AireOS GUI?

A.

2

B.

5

C.

8

D.

9

Full Access
Question # 168

200-301 question answer

Refer to the exhibit. Which tasks must be performed on the Download File tab to install new software using TCP port 22?)

A.

Set the File Type to Code, set the Transfer Mode to SFTP, and specify the IP address of the WLC.

B.

Set the File Type to Configuration, set the Transfer Mode to FTP, and specify the IP address of the file server.

C.

Set the File Type to Code, set the Transfer Mode to SFTP, and specify the IP address of the file server.

D.

Set the File Type to Configuration, set the Transfer Mode to SFTP, and specify the IP address of the WLC.

Full Access
Question # 169

Why would a network administrator choose to implement RFC 1918 address space?

A.

to route traffic on the internet

B.

to provide flexibility in the IP network design

C.

to provide overlapping address space with another network

D.

to limit the number of hosts on the network

Full Access
Question # 170

Which IP address is used when an administrator must open a web-based management session with a lightweight AP?

A.

WLCIP

B.

gateway IP

C.

autonomous AP IP

D.

ACS IP

Full Access
Question # 171

Which two principles must be considered when using per-hop behavior in QoS? (Choose two.)

A.

Policing is not supported on subinterfaces.

B.

Shaping and rate limiting have the same effect.

C.

Shaping drops excessive traffic without adding traffic delay.

D.

Shaping levels out traffic bursts by delaying excess traffic.

E.

Policing is performed in the inbound and outbound directions.

Full Access
Question # 172

200-301 question answer

Three switches must be configured for Layer 2 connectivity. The company requires only the designated VLANs to be configured on their respective switches and permitted accross any links between switches for security purposes. Do not modify or delete VTP configurations.

The network needs two user-defined VLANs configured:

VLAN 110: MARKETING

VLAN 210: FINANCE

1. Configure the VLANs on the designated switches and assign them as access ports to the interfaces connected to the PCs.

2. Configure the e0/2 interfaces on Sw1 and Sw2 as 802.1q trunks with only the required VLANs permitted.

3. Configure the e0/3 interfaces on Sw2 and Sw3 as 802.1q trunks with only the required VLANs permitted.

200-301 question answer

Full Access
Question # 173

200-301 question answer

Refer to the exhibit. What is the administrative distance for the advertised prefix that includes the host IP address 192.168.20.1?

A.

0

B.

192.168.10.2

C.

24

D.

1

Full Access
Question # 174

200-301 question answer

Refer to the exhibit.

How does router R1 forward packets destined to 10.0.4.10?

A.

via 10.0.4.2

B.

via 10.0.0.2

C.

via FastEthernet0/1

D.

via FastEthernet1/1

Full Access
Question # 175

Which action prevents debug messages from being sent via syslog while allowing other messages when an abnormally high number of syslog messages are generated by a device with the debug process turned on?

A.

Use an access list to filter out the syslog messages.

B.

Turn off the logging monitor in global configuration mode.

C.

Disable logging to the console.

D.

Set the logging trap severity level to informational.

Full Access
Question # 176

How does automation affect network management processes?

A.

It interoperates with ISE to define and manage patch and update schedules.

B.

It performs configuration updates based on user profiles.

C.

It improves the efficiency of system lifecycle management.

D.

It provides a reactive support model.

Full Access
Question # 177

What is the maximum length of characters used in an SSID?

A.

16

B.

32

C.

48

D.

64

Full Access
Question # 178

200-301 question answer

200-301 question answer

200-301 question answer

IP connectivity and OSPF are preconfigured on all devices where necessary. Do not make any changes to the IP addressing or OSPF. The company policy uses connected interfaces and next hops when configuring static routes except for load balancing or redundancy without floating static. Connectivity must be established between subnet 172.20.20.128/25 on the Internet and the LAN at 192.168.0.0/24 connected to SW1:

1. Configure reachability to the switch SW1 LAN subnet in router R2.

2. Configure default reachability to the Internet subnet in router R1.

3. Configure a single static route in router R2 to reach to the Internet subnet considering both redundant links between routers R1 and R2. A default route is NOT allowed in router R2.

4. Configure a static route in router R1 toward the switch SW1 LAN subnet where the primary link must be through Ethernet0/1. and the backup link must be through Ethernet0/2 using a floating route. Use the minimal administrative distance value when required.

Full Access
Question # 179

Why are API keys used to enforce rate limiting?

A.

to uniquely identify clients to monitor their usage patterns

B.

to encrypt data to prevent excessive usage

C.

to contain embedded permissions that automatically expire

D.

to track the geographical location of each request

Full Access
Question # 180

Which two QoS tools provide congestion management? (Choose two.)

A.

PBR

B.

FRTS

C.

PQ

D.

CBWFQ

E.

CAR

Full Access
Question # 181

Configure IPv4 and IPv6 connectivity between two routers. For IPv4, use a /28 network from the 192.168.1.0/24 private range. For IPv6, use the first /64 subnet from the 2001:0db8:aaaa::/48 subnet.

1. Using Ethernet0/1 on routers R1 and R2, configure the next usable/28 from the 192.168.1.0/24 range. The network 192.168.1.0/28 is unavailable.

2. For the IPv4 /28 subnet, router R1 must be configured with the first usable host address.

3. For the IPv4 /28 subnet, router R2 must be configured with the last usable host address.

4. For the IPv6 /64 subnet, configure the routers with the IP addressing provided from the topology.

5. A ping must work between the routers on the IPv4 and IPv6 address ranges.

200-301 question answer 200-301 question answer

Full Access
Question # 182

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

200-301 question answer

Full Access
Question # 183

What is represented by the word "switch" within this JSON schema?

200-301 question answer

A.

array

B.

value

C.

key

D.

object

Full Access
Question # 184

200-301 question answer

Refer to the exhibit. During initial configuration testing, the Windows workstation PC1 cannot connect with the 172.16.2.0/24 network.

Which set of actions corrects the configuration?

A.

Change the IP address to 172.16.1.6 and change the subnet mask to 255.255.255.248.

B.

Change the IP address to 172.16.1.6 and change the DNS servers to 172.16.1.12 and 172.16.1.13.

C.

Change the IP address to 172.16.1.9 and change the default gateway to 172.16.1.7.

D.

Change the IP address to 172.16.1.9 and change the DNS server to 172.16.1.12 only.

Full Access
Question # 185

What is an advantage of using SDN versus traditional networking when it comes to security?

A.

SDN security is managed near the perimeter of the network with firewalls, VPNs, and IPS, and traditional networking security policies are created based on telemetry data.

B.

SDN exposes an API to configure locally per device for security policies, and traditional networking uses northbound API for network admin interface for configuring security policies.

C.

SDN creates a unified control point making security policies consistent across all devices, and traditional networking must be configured device by device, leaving room for error.

D.

SDN devices communicate with each other to establish a security policy, and in traditional networking, devices communicate upstream to a central location to establish a security policy.

Full Access
Question # 186

What is the function of generative AI in network operations?

A.

It disables unused services.

B.

It deploys network firmware updates.

C.

It creates synthetic network configurations.

D.

It computes optimal data storage solutions.

Full Access
Question # 187

What is a function of a northbound API in an SDN environment?

A.

It supports distributed processing for configuration.

B.

It relies on global provisioning and configuration.

C.

It upgrades software and restores files.

D.

It provides orchestration and network automation services.

Full Access
Question # 188

200-301 question answer

Refer to the exhibit. The static routes were implemented on the border router. What is the next hop IP address for a ping sent to 172.16.153.154 from the border router?

A.

10.56.65.56

B.

10.56.65.65

C.

10.65.56.56

D.

10.65.65.65

Full Access
Question # 189

200-301 question answer

Refer to the exhibit.

Which configuration is needed to configure a WLAN with WPA2 only and with a password that is 63 characters long?

A.

Disable WPA Policy and WPA Encryption and then enable PSK using ASCII.

B.

Enable PSK and FT PSK and then disable WPA Policy.

C.

Disable WPA Encryption and then enable FT PSK.

D.

Enable PSK using Hex format and then disable WPA Policy.

Full Access
Question # 190

How does a network administrator securely manage an AP in lightweight mode?

A.

using the CLI via an out-of-band connection

B.

using the WLC GUI via HTTPS

C.

using the AP GUI via an in-band SSH connection

D.

using the CLI via a virtual interface with SSH

Full Access
Question # 191

Refer to the exhibit.

200-301 question answer

What is occurring on this switch?

A.

A high number of frames smaller than 64 bytes are received.

B.

Frames are dropped after 16 failed transmission attempts.

C.

The internal transmit buffer is overloaded.

D.

An excessive number of frames greater than 1518 bytes are received.

Full Access
Question # 192

200-301 question answer

Refer to the exhibit. An LACP EtherChannel between two directly connected switches is in the configuration process.

Which command must be configured on switch SW2’s Gi0/1-2 interfaces to establish the channel to SW1?

A.

channel-group 1 mode desirable

B.

channel-group 1 mode on

C.

channel-group 1 mode auto

D.

channel-group 1 mode active

Full Access
Question # 193

200-301 question answer

Refer to the exhibit. A guest WLAN must be created that prompts the client for a username and password on the local web page of the WLC. Which two actions must be performed on the Layer 2 tab before enabling the Authentication option on the Layer 3 tab? (Choose two.)

A.

Uncheck the WPA Policy option check box, and check the WPA2 Policy option check box.

B.

Uncheck the MAC Filtering option check box.

C.

Change the WPA Encryption option from TKIP to CCMP(128AES).

D.

Set the Security Type option to Personal.

E.

Set the Layer 2 Security option to None.

Full Access
Question # 194

200-301 question answer

200-301 question answer

IP connectivity between the three routers is configured. OSPF adjacencies must be established.

1. Configure R1 and R2 Router IDs using the interface IP addresses from the link that is shared between them.

2. Configure the R2 links with a max value facing R1 and R3. R2 must become the DR. R1 and R3 links facing R2 must remain with the default OSPF configuration for DR election. Verify the configuration after clearing the OSPF process.

3. Using a host wildcard mask, configure all three routers to advertise their respective Loopback1 networks.

4. Configure the link between R1 and R3 to disable their ability to add other OSPF routers.

Full Access
Question # 195

200-301 question answer

200-301 question answer

Connectivity between three routers has been established, and IP services must be configured jn the order presented to complete the implementation Tasks assigned include configuration of NAT, NTP, DHCP, and SSH services.

1. All traffic sent from R3 to the R1 Loopback address must be configured for NAT on R2. All source addresses must be translated from R3 to the IP address of Ethernet0/0 on R2, while using only a standard access list named NAT To verify, a ping must be successful to the R1 Loopback address sourced from R3. Do not use NVI NAT configuration.

2. Configure R1 as an NTP server and R2 as a client, not as a peer, using the IP address of the R1 Ethernet0/2 interface. Set the clock on the NTP server for midnight on January 1, 2019.

3. Configure R1 as a DHCP server for the network 10.1.3.0/24 in a pool named TEST. Using a single command, exclude addresses 1-10 from the range. Interface Ethernet0/2 on R3 must be issued the IP address of 10.1.3.11 via DHCP.

4. Configure SSH connectivity from R1 to R3, while excluding access via other remote connection protocols. Access for user root and password Cisco must be set on router R3 using RSA and 1024 bits. Verify connectivity using an SSH session from router R1 using a destination address of 10.1.3.11. Do NOT modify console access or line numbers to accomplish this task.

Full Access
Question # 196

What is a characteristic of a Layer 2 switch?

A.

Uses routers to create collision domains

B.

Responsible for sending data in a particular sequence

C.

Avoids MAC address storage for faster transmission

D.

Uses the data link layer for communications

Full Access
Question # 197

A new DHCP server has been deployed in a corporate environment with lease time set to eight hours. Which CMD command on a Windows-based device allows the engineer to verify the DHCP lease expiration?

A.

ipconfig /renew

B.

ipconfig

C.

ipconfig /all

D.

ipconfig /displaydns

Full Access
Question # 198

Why would a network administrator implement the HSRP protocol?

A.

To provide network redundancy in the case of a router failure

B.

To use an open standard protocol that is configured on Cisco and third-party routers

C.

To allow hosts in a network to use the same default gateway virtual IP when load-balancing traffic

D.

To allow clients to be configured with multiple default gateway IPs

Full Access
Question # 199

What differentiates the TCP and UDP protocols?

A.

TCP tracks segments being transmitted or received by assigning segment numbers, and UDP adjusts data flow according to network conditions.

B.

TCP establishes a connection with the device on the other end before transferring, and UDP transfers without establishing a connection.

C.

TCP sends data at a constant rate with error checking on upper protocol layers, and UDP provides error-checking and sequencing.

D.

TCP immediately transmits data without waiting for a handshake, and UDP awaits a response from the receiver before sending additional data.

Full Access
Question # 200

Refer to the exhibit.

200-301 question answer

Users will be using a preconfigured secret key and SSID and must have a secured key hashing algorithm configured. The AAA server must not be used for the user authentication method. Which action completes the task?

A.

Enable AutoConfig iPSK.

B.

SetCCMP128(AES).

C.

Configure PSK Format HEX with key string.

D.

Configure PSK-SHA2.

Full Access
Question # 201

Drag and drop the IPv6 address from the left onto the type on the right.

200-301 question answer

Full Access
Question # 202

Which technology allows for logical Layer 3 separation on physical network equipment?

A.

Virtual Route Forwarding

B.

Virtual Switch System

C.

IPsec Transport Mode

D.

Time Division Multiplexer

Full Access
Question # 203

Why does an administrator choose to implement a remote access IPsec VPN?

A.

to establish an encrypted tunnel between a remote user and a private network over the internet

B.

to allow access to an enterprise network using any internet-enabled location via a web browser using SSL

C.

to provide a secure link between an HTTPS server, authentication subsystem, and an end-user

D.

to use cryptography for authentication between a device and user over a negotiated VPN gateway

Full Access
Question # 204

All physical cabling is in place. Router R4 and PCI are fully configured and

inaccessible. R4's WAN interfaces use .4 in the last octet for each subnet.

Configurations should ensure that connectivity is established end-to-end.

1 . Configure static routing to ensure RI prefers the path through R2 to

reach only PCI on R4's LAN

2. Configure static routing that ensures traffic sourced from RI will take

an alternate path through R3 to PCI in the event of an outage along

the primary path

3. Configure default routes on RI and R3 to the Internet using the least number of hops

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using

the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

200-301 question answer

Full Access
Question # 205

What is the difference between the TCP and UDP protocols?

A.

TCP ensures ordered, reliable data delivery, and UDP offers low latency and high throughput.

B.

TCP is used for transmitting data over the internet, and UDP is used for transmitting data over a local network.

C.

TCP manages multicast and broadcast data transfers, and UDP only handles unicast communications.

D.

TCP is used to ensure data integrity in a file transfer, and UDP is used to broadcast a message to multiple recipients.

Full Access
Question # 206

What is the expected outcome when an EUI-64 address is generated?

A.

The seventh bit of the original MAC address of the interface is inverted

B.

The interface ID is configured as a random 64-bit value

C.

The characters FE80 are inserted at the beginning of the MAC address of the interface

D.

The MAC address of the interface is used as the interface ID without modification

Full Access
Question # 207

What are two characteristics of an SSID? (Choose Two)

A.

It can be hidden or broadcast in a WLAN

B.

It uniquely identifies an access point in a WLAN

C.

It uniquely identifies a client in a WLAN

D.

It is at most 32 characters long.

E.

IT provides secured access to a WLAN

Full Access
Question # 208

What is a function of a Layer 3 switch?

A.

move frames between endpoints limited to IP addresses

B.

transmit broadcast traffic when operating in Layer 3 mode exclusively

C.

forward Ethernet frames between VLANs using only MAC addresses

D.

flood broadcast traffic within a VLAN

Full Access
Question # 209

Refer to the exhibit.

200-301 question answer

Which change to the configuration on Switch?

allows the two switches to establish an GtherChannel?

A.

Change the protocol to EtherChannel mode on.

B.

Change the LACP mode to active

C.

Change the LACP mode to desirable

D.

Change the protocol to PAqP and use auto mode

Full Access
Question # 210

Refer to the exhibit.

200-301 question answer

The entire contents of the MAC address table are shown. Sales-4 sends a data frame to Sales-1.

200-301 question answer

What does the switch do as it receives the frame from Sales-4?

A.

Perform a lookup in the MAC address table and discard the frame due to a missing entry.

B.

Insert the source MAC address and port into the forwarding table and forward the frame to Sales-1.

C.

Map the Layer 2 MAC address to the Layer 3 IP address and forward the frame.

D.

Flood the frame out of all ports except on the port where Sales-1 is connected.

Full Access
Question # 211

Which plane is centralized by an SDN controller?

A.

management-plane

B.

control-plane

C.

data-plane

D.

services-plane

Full Access
Question # 212

Refer to the exhibit.

200-301 question answer

A network engineer must block access for all computers on VLAN 20 to the web server via HTTP All other computers must be able to access the web server Which configuration when applied to switch A accomplishes this task?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 213

What is the same for both copper and fiber interfaces when using SFP modules?

A.

They support an inline optical attenuator to enhance signal strength

B.

They provide minimal interruption to services by being hot-swappable

C.

They offer reliable bandwidth up to 100 Mbps in half duplex mode

D.

They accommodate single-mode and multi-mode in a single module

Full Access
Question # 214

200-301 question answer

Refer to the exhibit. The routers R1-LAB and R2-LAB are configured with link-local addresses. What command must be applied to interface Gi0/0 on R1-LAB for an automated address self-assignment on the IPv6 network?

A.

ipv6 address 2001:db8:1:0FFA:0::/64

B.

ipv6 address 2001:db8:0:0FFA::1/64

C.

ipv6 address 2001:db8:0:0FFA::/64 eui-64

D.

ipv6 address 2001:db8:0:0FFA::/64 anycast

Full Access
Question # 215

Which type of protocol is VRRP?

A.

uses dynamic IP address assignment

B.

allows two or more routers to act as a default gateway

C.

uses a destination IP address 224.0.0.102 for router-to-router communication

D.

uses Cisco-proprietary First Hop Redundancy Protocol

Full Access
Question # 216

Which type of API allows SDN controllers to dynamically make changes to the network?

A.

northbound API

B.

REST API

C.

SOAP API

D.

southbound API

Full Access
Question # 217

Refer to the exhibit.

200-301 question answer

An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate directly to enable privilege mode via Telnet using a local username and password?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 218

When a client and server are not on the same physical network, which device is used to forward requests and replies between client and server for DHCP?

A.

DHCP relay agent

B.

DHCP server

C.

DHCPDISCOVER

D.

DHCPOFFER

Full Access
Question # 219

Refer to Exhibit.

200-301 question answer

Which configuration must be applied to the router that configures PAT to translate all addresses in VLAN 200 while allowing devices on VLAN 100 to use their own IP addresses?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 220

How does the dynamically-learned MAC address feature function?

A.

The CAM table is empty until ingress traffic arrives at each port

B.

Switches dynamically learn MAC addresses of each connecting CAM table.

C.

The ports are restricted and learn up to a maximum of 10 dynamically-learned addresses

D.

It requires a minimum number of secure MAC addresses to be filled dynamically

Full Access
Question # 221

A network administrator needs to aggregate 4 ports into a single logical link which must negotiate layer 2 connectivity to ports on another switch. What must be configured when using active mode on both sides of the connection?

A.

802.1q trunks

B.

Cisco vPC

C.

LLDP

D.

LACP

Full Access
Question # 222

When deploying syslog, which severity level logs informational message?

A.

0

B.

2

C.

4

D.

6

Full Access
Question # 223

Refer to Exhibit.

200-301 question answer

Which action do the switches take on the trunk link?

A.

The trunk does not form and the ports go into an err-disabled status.

B.

The trunk forms but the mismatched native VLANs are merged into a single broadcast domain.

C.

The trunk does not form, but VLAN 99 and VLAN 999 are allowed to traverse the link.

D.

The trunk forms but VLAN 99 and VLAN 999 are in a shutdown state.

Full Access
Question # 224

What prevents a workstation from receiving a DHCP address?

A.

DTP

B.

STP

C.

VTP

D.

802.10

Full Access
Question # 225

What is a role of access points in an enterprise network?

A.

connect wireless devices to a wired network

B.

support secure user logins to devices or the network

C.

integrate with SNMP in preventing DDoS attacks

D.

serve as a first line of defense in an enterprise network

Full Access
Question # 226

Which protocol requires authentication to transfer a backup configuration file from a router to a remote server?

A.

DTP

B.

FTP

C.

SMTP

D.

TFTP

Full Access
Question # 227

Refer to the exhibit.

200-301 question answer

A network engineer is in the process of establishing IP connectivity between two sites. Routers R1 and R2 are partially configured with IP addressing. Both routers have the ability to access devices on their respective LANs. Which command set configures the IP connectivity between devices located on both LANs in each site?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 228

Which communication interaction takes place when a southbound API Is used?

A.

between the SDN controller and PCs on the network

B.

between the SON controller and switches and routers on the network

C.

between the SON controller and services and applications on the network

D.

between network applications and switches and routers on the network

Full Access
Question # 229

What are two reasons that cause late collisions to increment on an Ethernet interface? (Choose two)

A.

when the sending device waits 15 seconds before sending the frame again

B.

when the cable length limits are exceeded

C.

when one side of the connection is configured for half-duplex

D.

when Carrier Sense Multiple Access/Collision Detection is used

E.

when a collision occurs after the 32nd byte of a frame has been transmitted

Full Access
Question # 230

Which statement about Link Aggregation when implemented on a Cisco Wireless LAN Controller is true?

A.

To pass client traffic two or more ports must be configured.

B.

The EtherChannel must be configured in "mode active"

C.

When enabled the WLC bandwidth drops to 500 Mbps

D.

One functional physical port is needed to pass client traffic

Full Access
Question # 231

What is the benefit of configuring PortFast on an interface?

A.

After the cable is connected, the interface uses the fastest speed setting available for that cable type

B.

After the cable is connected, the interface is available faster to send and receive user data

C.

The frames entering the interface are marked with higher priority and then processed faster by a switch.

D.

Real-time voice and video frames entering the interface are processed faster

Full Access
Question # 232

Refer to the exhibit.

200-301 question answer

Only four switches are participating in the VLAN spanning-tree process.

Branch-1 priority 614440

Branch-2: priority 39082416

Branch-3: priority 0

Branch-4: root primary

Which switch becomes the permanent root bridge for VLAN 5?

A.

Branch-1

B.

Branch-2

C.

Branch-3

D.

Branch-4

Full Access
Question # 233

Refer to the exhibit.

200-301 question answer

200-301 question answer

A network administrator assumes a task to complete the connectivity between PC A and the File Server. Switch A and Switch B have been partially configured with VLAN 10, 11, 12, and 13. What is the next step in the configuration?

A.

Add PC A to VLAN 10 and the File Server to VLAN 11 fa VLAN segmentation

B.

Add VLAN 13 to the trunk links on Switch A and Switch B for VLAN propagation

C.

Add a router on a stick between Switch A and Switch B allowing for Inter-VLAN routing.

D.

Add PC A to the same subnet as the Fie Server allowing for intra-VLAN communication.

Full Access
Question # 234

Drag and drop the Cisco Wireless LAN Controller security settings from the left onto the correct security mechanism categories on the right.

200-301 question answer

Full Access
Question # 235

An engineer must establish a trunk link between two switches. The neighboring switch is set to trunk or desirable mode. What action should be taken?

A.

configure switchport nonegotiate

B.

configure switchport mode dynamic desirable

C.

configure switchport mode dynamic auto

D.

configure switchport trunk dynamic desirable

Full Access
Question # 236

What role does a hypervisor provide for each virtual machine in server virtualization?

A.

infrastructure-as-a-service.

B.

Software-as-a-service

C.

control and distribution of physical resources

D.

services as a hardware controller.

Full Access
Question # 237

Refer to Exhibit.

200-301 question answer

How does SW2 interact with other switches in this VTP domain?

A.

It processes VTP updates from any VTP clients on the network on its access ports.

B.

It receives updates from all VTP servers and forwards all locally configured VLANs out all trunk ports

C.

It forwards only the VTP advertisements that it receives on its trunk ports.

D.

It transmits and processes VTP updates from any VTP Clients on the network on its trunk ports

Full Access
Question # 238

200-301 question answer

Refer to the exhibit. After the configuration is applied, the two routers fail to establish an OSPF neighbor relationship. what is the reason for the problem?

A.

The OSPF router IDs are mismatched.

B.

Router2 is using the default hello timer.

C.

The network statement on Router1 is misconfigured.

D.

The OSPF process IDs are mismatched.

Full Access
Question # 239

Refer to the exhibit.

200-301 question answer

Between which zones do wireless users expect to experience intermittent connectivity?

A.

between zones 1 and 2

B.

between zones 2 and 5

C.

between zones 3 and 4

D.

between zones 3 and 6

Full Access
Question # 240

A network engineer must configure the router R1 GigabitEthernet1/1 interface to connect to the router R2 GigabitEthernet1/1 interface. For the configuration to be applied the engineer must compress the address 2001:0db8:0000:0000:0500:000a:400F:583B. Which command must be issued on the interface?

A.

ipv6 address 2001:0db8::5: a: 4F 583B

B.

ipv6 address 2001:db8::500:a:400F:583B

C.

ipv6 address 2001 db8:0::500:a:4F:583B

D.

ipv6 address 2001::db8:0000::500:a:400F:583B

Full Access
Question # 241

Refer to the exhibit.

200-301 question answer

Which command must be executed for Gi1.1 on SW1 to become a trunk port if Gi1/1 on SW2 is configured in desirable or trunk mode?

A.

switchport mode trunk

B.

switchport mode dot1-tunnel

C.

switchport mode dynamic auto

D.

switchport mode dynamic desirable

Full Access
Question # 242

Drag and drop the AAA terms from the left onto the description on the right.

200-301 question answer

Full Access
Question # 243

What is a capability of FTP in network management operations?

A.

encrypts data before sending between data resources

B.

devices are directly connected and use UDP to pass file information

C.

uses separate control and data connections to move files between server and client

D.

offers proprietary support at the session layer when transferring data

Full Access
Question # 244

Refer to the exhibit.

200-301 question answer

Which route type is configured to reach the internet?

A.

host route

B.

default route

C.

floating static route

D.

network route

Full Access
Question # 245

A corporate office uses four floors in a building

• Floor 1 has 24 users

• Floor 2 has 29 users

• Floor 3 has 28 users

•Floor 4 has 22 users

Which subnet summarizes and gives the most efficient distribution of IP addresses for the router configuration?

A.

192.168.0.0/26 as summary and 192.168.0.0/29 for each floor

B.

192.168.0.0.24 as summary and 192.168.0.0/28 for each floor

C.

192.168.0.0/23 as summary and 192.168.0.0/25 for each floor

D.

l92.168.0.0/25 as summary and 192.168.0.0/27 for each floor

Full Access
Question # 246

Refer to the exhibit.

200-301 question answer

A network administrator has been tasked with securing VTY access to a router. Which access-list entry accomplishes this task?

A.

access-list 101 permit tcp 10.1.10 0.0.0.255 172.16.10 0.0.0.255 eq ssh

B.

access-list 101 permit tcp 10.11.0 0.0.0.255 172.16.10 0.0.0.255 eq scp

C.

access-list 101 permit tcp 10.11.0 0.0.0.255 172.16.10 0.0.0.255 eq telnet

D.

access-list 101 permit tcp 10.1.10 0.0.0.255 172.16.10 0.0.0.255 eq https

Full Access
Question # 247

200-301 question answer

Refer to the exhibit. An engineer must add a subnet for a new office that will add 20 users to the network. Which IPv4 network and subnet mask combination does the engineer assign to minimize wasting addresses?

A.

10.10.225.48 255.255.255.240

B.

10.10.225.32 255.255.255.240

C.

10.10.225.48 255.255.255.224

D.

10.10.225.32 255.255.255.224

Full Access
Question # 248

Refer to the exhibit.

200-301 question answer

Which command configures a floating static route to provide a backup to the primary link?

A.

ip route 0.0.0.0 0.0.0.0 209.165.202.131

B.

ip route 209.165.201.0 255.255.255.224 209.165.202.130

C.

ip route 0.0.0.0 0.0.0.0 209.165.200.224

D.

ip route 209.165.200.224 255.255.255.224 209.165.202.129 254

Full Access
Question # 249

Drag the descriptions of IP protocol transmissions from the left onto the IP traffic types on the right.

200-301 question answer

Full Access
Question # 250

Which 802.11 frame type is indicated by a probe response after a client sends a probe request?

A.

action

B.

management

C.

control

D.

data

Full Access
Question # 251

Which action must be taken to assign a global unicast IPv6 address on an interface that is derived from the MAC address of that interface?

A.

configure a stateful DHCPv6 server on the network

B.

enable SLAAC on an interface

C.

disable the EUI-64 bit process

D.

explicitly assign a link-local address

Full Access
Question # 252

What are two differences between optical-fiber cabling and copper cabling? (Choose two)

A.

Light is transmitted through the core of the fiber

B.

A BNC connector is used for fiber connections

C.

The glass core component is encased in a cladding

D.

Fiber connects to physical interfaces using Rj-45 connections

E.

The data can pass through the cladding

Full Access
Question # 253

What Is a syslog facility?

A.

Host that is configured for the system to send log messages

B.

password that authenticates a Network Management System to receive log messages

C.

group of log messages associated with the configured severity level

D.

set of values that represent the processes that can generate a log message

Full Access
Question # 254

An engineer must configure an OSPF neighbor relationship between router R1 and R3 The authentication configuration has been configured and the connecting interfaces are in the same 192.168 1.0/30 sublet. What are the next two steps to complete the configuration? (Choose two.)

A.

configure the hello and dead timers to match on both sides

B.

configure the same process ID for the router OSPF process

C.

configure the same router ID on both routing processes

D.

Configure the interfaces as OSPF active on both sides.

E.

configure both interfaces with the same area ID

Full Access
Question # 255

How does a Cisco Unified Wireless network respond to Wi-Fi channel overlap?

A.

It alternates automatically between 2.4 GHz and 5 GHz on adjacent access points

B.

It allows the administrator to assign channels on a per-device or per-interface basis.

C.

It segregates devices from different manufacturers onto different channels.

D.

It analyzes client load and background noise and dynamically assigns a channel.

Full Access
Question # 256

Which two protocols must be disabled to increase security for management connections to a Wireless LAN Controller? (Choose two.)

A.

Telnet

B.

SSH

C.

HTTP

D.

HTTPS

E.

TFTP

Full Access
Question # 257

When a WPA2-PSK WLAN is configured in the wireless LAN Controller, what is the minimum number of characters that in ASCll format?

A.

6

B.

8

C.

12

D.

18

Full Access
Question # 258

Refer to the exhibit.

200-301 question answer

What is the effect of this configuration?

A.

All ARP packets are dropped by the switch

B.

Egress traffic is passed only if the destination is a DHCP server.

C.

All ingress and egress traffic is dropped because the interface is untrusted

D.

The switch discard all ingress ARP traffic with invalid MAC-to-IP address bindings.

Full Access
Question # 259

An engineer configured an OSPF neighbor as a designated router. Which state verifies the designated router is in the proper mode?

A.

Exchange

B.

2-way

C.

Full

D.

Init

Full Access
Question # 260

What Is the path for traffic sent from one user workstation to another workstation on a separate switch In a Ihree-lter architecture model?

A.

access - core - distribution - access

B.

access - distribution - distribution - access

C.

access - core - access

D.

access -distribution - core - distribution - access

Full Access
Question # 261

Refer to Exhibit.

200-301 question answer

An engineer is configuring the NEW York router to reach the Lo1 interface of the Atlanta router using interface Se0/0/0 as the primary path. Which two commands must be configured on the New York router so that it can reach the Lo1 interface of the Atlanta router via Washington when the link between New York and Atlanta goes down? (Choose two)

A.

ipv6 router 2000::1/128 2012::1

B.

ipv6 router 2000::1/128 2012::1 5

C.

ipv6 router 2000::1/128 2012::2

D.

ipv6 router 2000::1/128 2023::2 5

E.

ipv6 router 2000::1/128 2023::3 5

Full Access
Question # 262

Using direct sequence spread spectrum, which three 2.4-GHz channels are used to limit collisions?

A.

1,6,11

B.

1,5,10

C.

1,2,3

D.

5,6,7

Full Access
Question # 263

Which type of IPv6 address is publicly routable in the same way as IPv4 public address?

A.

global unicast

B.

link-local

C.

unique local

D.

multicast

Full Access
Question # 264

Which WPA3 enhancement protects against hackers viewing traffic on the Wi-Fi network?

A.

TKiP encryption

B.

AES encryption

C.

scrambled encryption key

D.

SAE encryption

Full Access
Question # 265

What is a function of TFTP in network operations?

A.

transfers a backup configuration file from a server to a switch using a username and password

B.

transfers files between file systems on a router

C.

transfers a configuration files from a server to a router on a congested link

D.

transfers IOS images from a server to a router for firmware upgrades

Full Access
Question # 266

R1 has learned route 10.10.10.0/24 via numerous routing protocols. Which route is installed?

A.

route with the lowest cost

B.

route with the next hop that has the highest IP

C.

route with the shortest prefix length

D.

route with the lowest administrative distance

Full Access
Question # 267

How does CAPWAP communicate between an access point in local mode and a WLC?

A.

The access point must directly connect to the WLC using a copper cable

B.

The access point must not be connected to the wired network, as it would create a loop

C.

The access point must be connected to the same switch as the WLC

D.

The access point has the ability to link to any switch in the network, assuming connectivity to the WLC

Full Access
Question # 268

Which goal is achieved by the implementation of private IPv4 addressing on a network?

A.

provides an added level of protection against Internet exposure

B.

provides a reduction in size of the forwarding table on network routers

C.

allows communication across the Internet to other private networks

D.

allows servers and workstations to communicate across public network boundaries

Full Access
Question # 269

What is the purpose of an SSID?

A.

It provides network security

B.

It differentiates traffic entering access posits

C.

It identities an individual access point on a WLAN

D.

It identifies a WLAN

Full Access
Question # 270

Refer to the exhibit.

200-301 question answer

Drag and drop the networking parameters from the left onto the correct values on the right.

200-301 question answer

Full Access
Question # 271

which IPv6 address block forwards packets to a multicast address rather than a unicast address?

A.

2000::/3

B.

FC00::/7

C.

FE80::/10

D.

FF00::/12

Full Access
Question # 272

Which command must be entered when a device is configured as an NTP server?

A.

ntp authenticate

B.

ntp server

C.

ntp peer

D.

ntp master

Full Access
Question # 273

A wireless administrator has configured a WLAN; however, the clients need access to a less congested 5-GHz network for their voice quality. What action must be taken to meet the requirement?

A.

enable AAA override

B.

enable RX-SOP

C.

enable DTIM

D.

enable Band Select

Full Access
Question # 274

Refer to the exhibit.

200-301 question answer

For security reasons, automatic neighbor discovery must be disabled on the R5 Gi0/1 interface. These tasks must be completed:

• Disable all neighbor discovery methods on R5 interface GiO/1.

• Permit neighbor discovery on R5 interface GiO/2.

• Verify there are no dynamically learned neighbors on R5 interface Gi0/1.

• Display the IP address of R6*s interface Gi0/2.

Which configuration must be used?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 275

Which type of address is the public IP address of a NAT device?

A.

outside global

B.

outsdwde local

C.

inside global

D.

insride local

E.

outside public

F.

inside public

Full Access
Question # 276

Which network plane is centralized and manages routing decisions?

A.

policy plane

B.

management plane

C.

control plane

D.

data plane

Full Access
Question # 277

Refer to the exhibit.

200-301 question answer

Based on the LACP neighbor status, in which mode is the SW1 port channel configured?

A.

passive

B.

mode on

C.

auto

D.

active

Full Access
Question # 278

Which command prevents passwords from being stored in the configuration as plain text on a router or switch?

A.

enable secret

B.

service password-encryption

C.

username Cisco password encrypt

D.

enable password

Full Access
Question # 279

Which two capacities of Cisco DNA Center make it more extensible as compared to traditional campus device management? (Choose two)

A.

adapters that support all families of Cisco IOS software

B.

SDKs that support interaction with third-party network equipment

C.

customized versions for small, medium, and large enterprises

D.

REST APIs that allow for external applications to interact natively with Cisco DNA Center

E.

modular design that is upgradable as needed

Full Access
Question # 280

What uses HTTP messages to transfer data to applications residing on different hosts?

A.

OpenFlow

B.

OpenStack

C.

OpFlex

D.

REST

Full Access
Question # 281

Drag and drop the QoS congestion management terms from the left onto the description on the right.

200-301 question answer

Full Access
Question # 282

Drag and drop the DHCP snooping terms from the left onto the descriptions on the right.

200-301 question answer

Full Access
Question # 283

What is the maximum bandwidth of a T1 point-to-point connection?

A.

1.544 Mbps

B.

2.048 Mbps

C.

34.368 Mbps

D.

43.7 Mbps

Full Access
Question # 284

Which two encoding methods are supported by REST APIs? (Choose two)

A.

YAML

B.

JSON

C.

EBCDIC

D.

SGML

E.

XML

Full Access
Question # 285

Refer to the exhibit.

200-301 question answer

If OSPF Is running on this network, how does Router2 handle traffic from Site B to 10.10.13.128/25 at Site A?

A.

It load-balances traffic out of Fa0/1 and Fa0/2.

B.

It is unreachable and discards the traffic.

C.

It sends packets out of interface FaO/2.

D.

It sends packets out of interface Fa0/1.

Full Access
Question # 286

Which level of severity must be set to get informational syslogs?

A.

alert

B.

critical

C.

notice

D.

debug

Full Access
Question # 287

Refer to the exhibit.

200-301 question answer

Which switch becomes the root of the spanning tree for VLAN 110?

200-301 question answer

A.

Switch 1

B.

Switch 2

C.

Switch 3

D.

Switch 4

Full Access
Question # 288

Which configuration ensures that the switch is always the root for VLAN 750?

A.

Switch(config)#spanning-tree vlan 750 priority 38003685

B.

Switch(config)#spanning-tree vlan 750 root primary

C.

Switch(config)#spanning-tree vlan 750 priority 614440

D.

Switch(config)#spanning-tree vlan 750 priority 0

Full Access
Question # 289

What are two roles of Domain Name Services (DNS)? (Choose Two)

A.

builds a flat structure of DNS names for more efficient IP operations

B.

encrypts network Traffic as it travels across a WAN by default

C.

improves security by protecting IP addresses under Fully Qualified Domain Names (FQDNs)

D.

enables applications to identify resources by name instead of IP address

E.

allows a single host name to be shared across more than one IP address

Full Access
Question # 290

Refer to the exhibit.

200-301 question answer

An engineer configured NAT translations and has verified that the configuration is correct.

Which IP address is the source IP?

A.

10.4.4.4

B.

10.4.4.5

C.

172.23.103.10

D.

172.23.104.4

Full Access
Question # 291

What are two functions of a Layer 2 switch? (Choose two)

A.

acts as a central point for association and authentication servers

B.

selects the best route between networks on a WAN

C.

moves packets within a VLAN

D.

moves packets between different VLANs

E.

makes forwarding decisions based on the MAC address of a packet

Full Access
Question # 292

What criteria is used first during me root port selection process?

A.

local port ID

B.

lowest path cost to the root bridge

C.

lowest neighbor's bridge ID

D.

lowest neighbor's port ID

Full Access
Question # 293

Drag and drop the SNMP components from the left onto the descriptions on the right.

200-301 question answer

Full Access
Question # 294

An engineering team asks an implementer to configure syslog for warning conditions and error conditions. Which command does the implementer configure to achieve the desired result?

A.

logging trap 5

B.

logging trap 2

C.

logging trap 4

D.

logging trap 3

Full Access
Question # 295

Which device controls the forwarding of authentication requests for users when connecting to the network using a lightweight access point?

A.

TACACS server

B.

wireless access point

C.

RADIUS server

D.

wireless LAN controller

Full Access
Question # 296

What must be considered when using 802:11 ta?

A.

It is compatible with 802 lib- and 802 11-compliant wireless devices

B.

It is used in place of 802 11b/g when many nonoverlapping channels are required

C.

It is susceptible to interference from 2 4 GHz devices such as microwave ovens.

D.

It is chosen over 802 11b/g when a lower-cost solution is necessary

Full Access
Question # 297

Which MAC address is recognized as a VRRP virtual address?

A.

0000.5E00.010a

B.

0005.3711.0975

C.

0000.0C07.AC99

D.

0007.C070/AB01

Full Access
Question # 298

Which device tracks the state of active connections in order to make a decision to forward a packet through?

A.

wireless access point

B.

firewall

C.

wireless LAN controller

D.

router

Full Access
Question # 299

Which CRUD operation corresponds to the HTTP GET method?

A.

read

B.

update

C.

create

D.

delete

Full Access
Question # 300

What are two benefits of controller-based networking compared to traditional networking?

A.

controller-based increases network bandwidth usage, while traditional lightens the load on the network.

B.

controller-based inflates software costs, while traditional decreases individual licensing costs

C.

Controller-based reduces network configuration complexity, while traditional increases the potential for errors

D.

Controller-based provides centralization of key IT functions. While traditional requires distributes management function

E.

controller-based allows for fewer network failure, while traditional increases failure rates.

Full Access
Question # 301

How do TCP and UDP differ in the way they guarantee packet delivery?

A.

TCP uses checksum, acknowledgement, and retransmissions, and UDP uses checksums only.

B.

TCP uses two-dimensional parity checks, checksums, and cyclic redundancy checks and UDP uses retransmissions only.

C.

TCP uses checksum, parity checks, and retransmissions, and UDP uses acknowledgements only.

D.

TCP uses retransmissions, acknowledgement and parity checks and UDP uses cyclic redundancy checks only.

Full Access
Question # 302

When a site-to-site VPN is configured, which IPsec mode provides encapsulation and encryption of the entire original P packet?

A.

IPsec tunnel mode with AH

B.

IPsec transport mode with AH

C.

IPsec tunnel mode with ESP

D.

IPsec transport mode with ESP

Full Access
Question # 303

Which virtual MAC address is used by VRRP group 1?

A.

0050.0c05.ad81

B.

0007.c061.bc01

C.

0000.5E00.0101

D.

0500.3976.6401

Full Access
Question # 304

Drag and drop the IPv6 address type characteristics from the left to the right.

200-301 question answer

Full Access
Question # 305

Refer to the Exhibit.

200-301 question answer

After the switch configuration the ping test fails between PC A and PC B Based on the output for switch 1. which error must be corrected?

A.

There is a native VLAN mismatch

B.

Access mode is configured on the switch ports.

C.

The PCs are m the incorrect VLAN

D.

All VLANs are not enabled on the trunk

Full Access
Question # 306

Which device performs stateful inspection of traffic?

A.

firewall

B.

switch

C.

access point

D.

wireless controller

Full Access
Question # 307

Which WAN access technology is preferred for a small office / home office architecture?

A.

broadband cable access

B.

frame-relay packet switching

C.

dedicated point-to-point leased line

D.

Integrated Services Digital Network switching.

Full Access
Question # 308

What are two improvements provided by automation for network management in an SDN environment? (Choose two)

A.

Data collection and analysis tools establish a baseline for the network

B.

Artificial intelligence identifies and prevents potential design failures.

C.

Machine learning minimizes the overall error rate when automating troubleshooting processes

D.

New devices are onboarded with minimal effort

E.

Proprietary Cisco APIs leverage multiple network management tools.

Full Access
Question # 309

When using Rapid PVST+, which command guarantees the switch is always the root bridge for VLAN 200?

A.

spanning -tree vlan 200 priority 614440

B.

spanning -tree vlan 200 priority 38572422

C.

spanning -tree vlan 200 priority 0

D.

spanning -tree vlan 200 root primary

Full Access
Question # 310

Refer to the exhibit.

200-301 question answer

Which configuration on RTR-1 denies SSH access from PC-1 to any RTR-1 interface and allows all other traffic?

A.

access-list 100 deny tcp host 172.16.1.33 any eq 22 access-list 100 permit ip any anyinterface GigabitEthernet0/0 ip access-group 100 in

B.

access-list 100 deny tcp host 172.16.1.33 any eq 22 access-list 100 permit ip any anyline vty 0 15 ip access-group 100 in

C.

access-list 100 deny tcp host 172.16.1.33 any eq 23 access-list 100 permit ip any anyinterface GigabitEthernet0/0 ip access-group 100 in

D.

access-list 100 deny tcp host 172.16.1.33 any eq 23 access-list 100 permit ip any anyline vty 0 15 ip access-group 100 in

Full Access
Question # 311

What is the difference in data transmission delivery and reliability between TCP and UDP?

A.

TCP transmits data at a higher rate and ensures packet delivery. UDP retransmits lost data to ensure applications receive the data on the remote end.

B.

UDP sets up a connection between both devices before transmitting data. TCP uses the three-way handshake to transmit data with a reliable connection.

C.

UDP is used for multicast and broadcast communication. TCP is used for unicast communication and transmits data at a higher rate with error checking.

D.

TCP requires the connection to be established before transmitting data. UDP transmits data at a higher rate without ensuring packet delivery.

Full Access
Question # 312

What is the default behavior of a Layer 2 switch when a frame with an unknown destination MAC address is received?

A.

The Layer 2 switch drops the received frame

B.

The Layer 2 switch floods packets to all ports except the receiving port in the given VLAN.

C.

The Layer 2 switch sends a copy of a packet to CPU for destination MAC address learning.

D.

The Layer 2 switch forwards the packet and adds the destination MAC address to its MAC address table

Full Access
Question # 313

Which network action occurs within the data plane?

A.

compare the destination IP address to the IP routing table.

B.

run routing protocols (OSPF, EIGRP, RIP, BGP)

C.

make a configuration change from an incoming NETCONF RPC

D.

reply to an incoming ICMP echo request

Full Access
Question # 314

What is a function of the Cisco DNA Center Overall Health Dashboard?

A.

It provides a summary of the top 10 global issues.

B.

It provides detailed activity logging for the 10 devices and users on the network.

C.

It summarizes the operational status of each wireless devise on the network.

D.

It summarizes daily and weekly CPU usage for servers and workstations in the network.

Full Access
Question # 315

Router R1 must send all traffic without a matching routing-table entry to 192.168.1.1. Which configuration accomplishes this task?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 316

In which two ways does a password manager reduce the chance of a hacker stealing a users password? (Choose two.)

A.

It automatically provides a second authentication factor that is unknown to the original user.

B.

It uses an internal firewall to protect the password repository from unauthorized access.

C.

It protects against keystroke logging on a compromised device or web site.

D.

It stores the password repository on the local workstation with built-in antivirus and anti-malware functionality

E.

It encourages users to create stronger passwords.

Full Access
Question # 317

What is the role of a firewall in an enterprise network?

A.

Forwards packets based on stateless packet inspection

B.

Processes unauthorized packets and allows passage to less secure segments of the network

C.

determines which packets are allowed to cross from unsecured to secured networks

D.

explicitly denies all packets from entering an administrative domain

Full Access
Question # 318

What are two roles of the Dynamic Host Configuration Protocol (DHCP)? (Choose two)

A.

The DHCP server offers the ability to exclude specific IP addresses from a pool of IP addresses

B.

The DHCP client can request up to four DNS server addresses

C.

The DHCP server assigns IP addresses without requiring the client to renew them

D.

The DHCP server leases client IP addresses dynamically.

E.

The DHCP client maintains a pool of IP addresses it can assign.

Full Access
Question # 319

What are two fundamentals of virtualization? (choose two)

A.

The environment must be configured with one hypervisor that serves solely as a network manager to monitor SNMP traffic

B.

It allows logical network devices to move traffic between virtual machines and the rest of the physical network

C.

It allows multiple operating systems and applications to run independently on one physical server.

D.

It allows a physical router to directly connect NICs from each virtual machine into the network

E.

It requires that some servers, virtual machines and network gear reside on the Internet

Full Access
Question # 320

Drag and drop the functions of DHCP from the left onto any of the positions on the right Not all functions are used

200-301 question answer

Full Access
Question # 321

In which situation is private IPv4 addressing appropriate for a new subnet on the network of an organization?

A.

There is limited unique address space, and traffic on the new subnet will stay local within the organization.

B.

The network has multiple endpoint listeners, and it is desired to limit the number of broadcasts.

C.

Traffic on the subnet must traverse a site-to-site VPN to an outside organization.

D.

The ISP requires the new subnet to be advertised to the internet for web services.

Full Access
Question # 322

What criteria is used first during the root port selection process?

A.

local port ID

B.

lowest path cost to the root bridge

C.

lowest neighbor's bridge ID

D.

lowest neighbor's port ID

Full Access
Question # 323

A network engineer must back up 20 network router configurations globally within a customer environment. Which protocol allows the engineer to perform this function using the Cisco IOS MIB?

A.

CDP

B.

SNMP

C.

SMTP

D.

ARP

Full Access
Question # 324

In QoS, which prioritization method is appropriate for interactive voice and video?

A.

expedited forwarding

B.

traffic policing

C.

round-robin scheduling

D.

low-latency queuing

Full Access
Question # 325

What is a characteristic of a SOHO network?

A.

connects each switch to every other switch in the network

B.

enables multiple users to share a single broadband connection

C.

provides high throughput access for 1000 or more users

D.

includes at least three tiers of devices to provide load balancing and redundancy

Full Access
Question # 326

Drag and drop the WLAN components from the left onto the correct descriptions on the right.

200-301 question answer

Full Access
Question # 327

What describes the operation of virtual machines?

A.

Virtual machines are responsible for managing and allocating host hardware resources

B.

In a virtual machine environment, physical servers must run one operating system at a time.

C.

Virtual machines are the physical hardware that support a virtual environment.

D.

Virtual machines are operating system instances that are decoupled from server hardware

Full Access
Question # 328

Which option about JSON is true?

A.

uses predefined tags or angle brackets () to delimit markup text

B.

used to describe structured data that includes arrays

C.

used for storing information

D.

similar to HTML, it is more verbose than XML

Full Access
Question # 329

Aside from discarding, which two states does the switch port transition through while using RSTP (802.1w)? (Choose two)

A.

listening

B.

blocking

C.

forwarding

D.

learning

E.

speaking

Full Access
Question # 330

Which QoS Profile is selected in the GUI when configuring a voice over WLAN deployment?

A.

Bronze

B.

Platinum

C.

Silver

D.

Gold

Full Access
Question # 331

How does QoS optimize voice traffic?

A.

reducing bandwidth usage

B.

by reducing packet loss

C.

by differentiating voice and video traffic

D.

by increasing jitter

Full Access
Question # 332

What does physical access control regulate?

A.

access to spec fie networks based on business function

B.

access to servers to prevent malicious activity

C.

access to computer networks and file systems

D.

access to networking equipment and facilities

Full Access
Question # 333

Refer to the exhibit.

200-301 question answer

How does the router manage traffic to 192.168.12.16?

A.

It selects the RIP route because it has the longest prefix inclusive of the destination address.

B.

It chooses the OSPF route because it has the longest prefix inclusive of the destination address.

C.

it load-balances traffic between all three routes

D.

It chooses the EIGRP route because it has the lowest administrative distance

Full Access
Question # 334

Refer to the exhibit.

200-301 question answer

Which command provides this output?

A.

show ip route

B.

show ip interface

C.

show interface

D.

show cdp neighbor

Full Access
Question # 335

What is a benefit of VRRP?

A.

It provides traffic load balancing to destinations that are more than two hops from the source.

B.

It provides the default gateway redundancy on a LAN using two or more routers.

C.

It allows neighbors to share routing table information between each other.

D.

It prevents loops in a Layer 2 LAN by forwarding all traffic to a root bridge, which then makes the final forwarding decision.

Full Access
Question # 336

Which IPv6 address block sends packets to a group address rather than a single address?

A.

2000::/3

B.

FC00::/7

C.

FE80::/10

D.

FF00::/8

Full Access
Question # 337

How are VLAN hopping attacks mitigated?

A.

enable dynamic ARP inspection

B.

manually implement trunk ports and disable DTP

C.

activate all ports and place in the default VLAN

D.

configure extended VLANs

Full Access
Question # 338

What does a switch use to build its MAC address table?

A.

VTP

B.

DTP

C.

egress traffic

D.

ingress traffic

Full Access
Question # 339

Refer to the exhibit.

200-301 question answer

An access list is required to permit traffic from any host on interface G0/0 and deny traffic from interface G/0/1. Which access list must be applied?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 340

Drag and drop the functions from the left onto the correct network components on the right

200-301 question answer

Full Access
Question # 341

Why was the RFC 1918 address space defined?

A.

conserve public IPv4 addressing

B.

preserve public IPv6 address space

C.

reduce instances of overlapping IP addresses

D.

support the NAT protocol

Full Access
Question # 342

What is the function of a controller in controller-based networking?

A.

It serves as the centralized management point of an SDN architecture.

B.

It centralizes the data plane for the network.

C.

It is the card on a core router that maintains all routing decisions for a campus.

D.

It is a pair of core routers that maintain all routing decisions for a campus

Full Access
Question # 343

How will Link Aggregation be Implemented on a Cisco Wireless LAN Controller?

A.

One functional physical port is needed to pass client traffic.

B.

The EthernetChannel must be configured in "mode active".

C.

When enabled, the WLC bandwidth drops to 500 Mbps.

D.

To pass client traffic, two or more ports must be configured.

Full Access
Question # 344

200-301 question answer

Refer to the exhibit Routers R1 and R2 have been configured with their respective LAN interfaces The two circuits are operational and reachable across WAN Which command set establishes failover redundancy if the primary circuit goes down?

200-301 question answer

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 345

Refer to the exhibit.

200-301 question answer

What commands are needed to add a subinterface to Ethernet0/0 on R1 to allow for VLAN 20, with IP address 10.20.20.1/24?

A.

R1(config)#interface ethernet0/0R1(config)#encapsulation dot1q 20R1(config)#ip address 10.20.20.1 255.255.255.0

B.

R1(config)#interface ethernet0/0.20R1(config)#encapsulation dot1q 20R1(config)#ip address 10.20.20.1 255.255.255.0

C.

R1(config)#interface ethernet0/0.20R1(config)#ip address 10.20.20.1 255.255.255.0

D.

R1(config)#interface ethernet0/0R1(config)#ip address 10.20.20.1 255.255.255.0

Full Access