Cisco 200-101 Online Practice Questions and Exam Preparation

Cisco 200-101 Online Questions & Answers

• Question 1:

  What is one benefit of PVST+?

  A. PVST+ supports Layer 3 load balancing without loops.
  B. PVST+ reduces the CPU cycles for all the switches in the network.
  C. PVST+ allows the root switch location to be optimized per VLAN.
  D. PVST+ automatically selects the root bridge location, to provide optimized bandwidth usage.
  C. PVST+ allows the root switch location to be optimized per VLAN.

  ---

  Per VLAN Spanning Tree (PVST) Introduction http://www.cisco.com/en/US/tech/tk389/tk621/tk846/tsd_technology_support_sub-protocol_home.html Per VLAN Spanning Tree (PVST) maintains a spanning tree instance for each VLAN configured in the network. This means a switch can be the root bridge of a VLAN while another switch can be the root bridge of other VLANs in a common

  topology. For example, Switch 1 can be the root bridge for Voice data while Switch 2 can be the root bridge for Video data. If designed correctly, it can optimize the network traffic. http://www.ciscopress.com/articles/article.asp?p=102157andseqNum=4

• Question 2:

  Which PPP subprotocol negotiates authentication options?

  A. NCP
  B. ISDN
  C. SLIP
  D. LCP
  E. DLCI
  D. LCP

  ---

  A protocol that establishes, configures, and tests data link connections used by the PPP Link Control Protocol offers PPP encapsulation different options, including the following:

  Authentication - options includes PAP and CHAP Compression - Data compression increases the throughput on a network link, by reducing the amount of data that must be transmitted. Error Detection -Quality and Magic numbers are used

  by PPP to ensure a reliable, loop-free data link. Multilink - Supported in IOS 11.1 and later, multilink is supported on PPP links between Cisco routers. This splits the load for PPP over two or more parallel circuits and is called a bundle.

• Question 3:

  Which command enables IPv6 forwarding on a Cisco router?

  A. ipv6 local
  B. ipv6 host
  C. ipv6 unicast-routing
  D. ipv6 neighbor
  C. ipv6 unicast-routing

  ---

  http://www.ciscopress.com/articles/article.asp?p=31948andseqNum=4

  The first step of enabling IPv6 on a Cisco router is the activation of IPv6 traffic forwarding to forward unicast IPv6 packets between network interfaces. By default, IPv6 traffic forwarding is disabled on Cisco routers.

  The ipv6 unicast-routing command is used to enable the forwarding of IPv6 packets between interfaces on the router. The syntax for this command is as follows:

  Router(config)#ipv6 unicast-routing

  The ipv6 unicast-routing command is enabled on a global basis.

• Question 4:

  In GLBP, which router will respond to client ARP requests?

  A. The active virtual gateway will reply with one of four possible virtual MAC addresses.
  B. All GLBP member routers will reply in round-robin fashion.
  C. The active virtual gateway will reply with its own hardware MAC address.
  D. The GLBP member routers will reply with one of four possible burned in hardware addresses.
  A. The active virtual gateway will reply with one of four possible virtual MAC addresses.

• Question 5:

  Lab - Access List Simulation

  A network associate is adding security to the configuration of the Corp1 router. The user on host C should be able to use a web browser to access financial

  information from the Finance Web Server. No other hosts from the LAN nor the Core should be able to use a web browser to access this server. Since there are

  multiple resources for the corporation at this location including other resources on the Finance Web Server, all other traffic should be allowed.

  The task is to create and apply a numbered access-list with no more than three statements that will allow ONLY host C web access to the Finance Web Server.

  No other hosts will have web access to the Finance Web Server. All other traffic is permitted.

  Access to the router CLI can be gained by clicking on the appropriate host.

  All passwords have been temporarily set to “cisco”.

  The Core connection uses an IP address of 198.18.196.65

  The computers in the Hosts LAN have been assigned addresses of 192.168.33.1 – 92.168.33.254

  Host A 192.168.33.1

  Host B 192.168.33.2

  Host C 192.168.33.3

  Host D 192.168.33.4

  The servers in the Server LAN have been assigned addresses of 172.22.242.17 – 172.22.242.30

  The Finance Web Server is assigned an IP address of 172.22.242.23.

  The Public Web Server is assigned an IP address of 172.22.242.17

  

  Correct Answer. Corp1#configure terminal
  Corp1#configure terminal

  ---

  Our access-list needs to allow host C – 192.168.33.3 to the Finance Web Server 172.22.242.23 via web (port 80)

  Corp1(config)#access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80

  Deny other hosts access to the Finance Web Server via web

  Corp1(config)#access-list 100 deny tcp any host 172.22.242.23 eq 80

  All other traffic is permitted

  Corp1(config)#access-list 100 permit ip any any

  Apply this access-list to Fa0/1 interface (outbound direction)

  Corp1(config)#interface fa0/1 Corp1(config-if)#ip access-group 100 out

  :

  Select the console on Corp1 router

  Configuring ACL

  Corp1>enable

  Corp1#configure terminal

  Comment: To permit only Host C (192. 168. 33. 3){source addr} to access finance server address (172.22.242. 23){destination addr} on port number 80 (web)

  Corp1(config)# access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80

  Comment: To deny any source to access finance server address (172. 22. 242. 23) {destination addr} on port number 80 (web)

  Corp1(config)# access-list 100 deny tcp any host 172.22.242.23 eq 80

  Comment: To permit ip protocol from any source to access any destination because of the implicit deny any any statement at the end of ACL.

  Corp1(config)# access-list 100 permit ip any any

  Applying the ACL on the Interface

  Comment: Check show ip interface brief command to identify the interface type and number by checking the IP address configured.

  Corp1(config)#interface fa 0/1

  If the ip address configured already is incorrect as well as the subnet mask. this should be corrected in order ACL to work type this commands at interface mode :

  no ip address 192. x. x. x 255. x. x. x (removes incorrect configured ip address and subnet mask) Configure Correct IP Address and subnet mask :

  ip address 172. 22. 242. 30 255. 255. 255. 240 ( range of address specified going to server is given as 172.22. 242. 17 172. 22. 242. 30 )

  Comment: Place the ACL to check for packets going outside the interface towards the finance web server.

  Corp1(config-if)#ip access-group 100 out

  Corp1(config-if)#end

  Important: To save your running config to startup before exit.

  Corp1#copy running-config startup-config

  Verifying the Configuration :

  Step1: Show ip interface brief command identifies the interface on which to apply access list .

  Step2: Click on each host A, B, C and D . Host opens a web browser page , Select address box of the web browser and type the ip address of finance web server(172. 22. 242. 23) to test whether it permits /deny access to the finance web

  Server.

• Question 6:

  Refer to the exhibit.

  

  At the end of an RSTP election process, which access layer switch port will assume the discarding role?

  A. Switch3, port fa0/1
  B. Switch3, port fa0/12
  C. Switch4, port fa0/11
  D. Switch4, port fa0/2
  E. Switch3, port Gi0/1
  F. Switch3, port Gi0/2
  C. Switch4, port fa0/11

  ---

  In this question, we only care about the Access Layer switches (Switch3 and 4). Switch 3 has a lower bridge ID than Switch 4 (because the MAC of Switch3 is smaller than that of Switch4) so both ports of Switch3 will be in forwarding state. The alternative port will surely belong to Switch4. Switch4 will need to block one of its ports to avoid a bridging loop between the two switches. But how does Switch4 select its blocked port? Well, the answer is based on the BPDUs it receives from Switch3. A BPDU is superior than another if it has:

  1.

  A lower Root Bridge ID

  2.

  A lower path cost to the Root

  3.

  A lower Sending Bridge ID

  4.

  A lower Sending Port ID

  These four parameters are examined in order. In this specific case, all the BPDUs sent by Switch3 have the same Root Bridge ID, the same path cost to the Root and the same Sending Bridge ID. The only parameter left to select the best one is the Sending Port ID (Port ID = port priority + port index). In this case the port priorities are equal because they use the default value, so Switch4 will compare port index values, which are unique to each port on the switch, and because Fa0/12 is inferior to Fa0/1, Switch4 will select the port connected with Fa0/1 (of Switch3) as its root port and block the other port -> Port fa0/11 of Switch4 will be blocked (discarding role)

• Question 7:

  A router receives information about network 192.168.10.0/24 from multiple sources. What will the router consider the most reliable information about the path to that network?

  A. an OSPF update for network 192.168.0.0/16
  B. a static route to network 192.168.10.0/24
  C. a static route to network 192.168.10.0/24 with a local serial interface configured as the next hop
  D. a RIP update for network 192.168.10.0/24
  E. a directly connected interface with an address of 192.168.10.254/24
  F. a default route with a next hop address of 192.168.10.1
  E. a directly connected interface with an address of 192.168.10.254/24

  ---

  What Is Administrative Distance? http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080094195.shtml

  Select the Best Path Administrative distance is the first criterion that a router uses to determine which routing protocol to use if two protocols provide route information for the same destination. Administrative distance is a measure of the trustworthiness of the source of the routing information. Administrative distance has only local significance, and is not advertised in routing updates. Note: The smaller the administrative distance value, the more reliable the protocol. For example, if a router receives a route to a certain network from both Open Shortest Path First (OSPF) (default administrative distance - 110) and Interior Gateway Routing Protocol (IGRP) (default administrative distance - 100), the router chooses IGRP because IGRP is more reliable. This means the router adds the IGRP version of the route to the routing table.

  

• Question 8:

  What can be done to Frame Relay to resolve split-horizon issues?(Choose two.)

  A. Disable Inverse ARP.
  B. Create a full-mesh topology.
  C. Develop multipoint subinterfaces.
  D. Configure point-to-point subinterfaces.
  E. Remove the broadcast keyword from the frame-relay map command.
  B. Create a full-mesh topology.
  D. Configure point-to-point subinterfaces.

  ---

  IP split horizon checking is disabled by default for Frame Relay encapsulation to allow routing updates to go in and out of the same interface. An exception is the Enhanced Interior Gateway Routing Protocol (EIGRP) for which split horizon must be explicitly disabled.

  Certain protocols such as AppleTalk, transparent bridging, and Internetwork Packet Exchange (IPX) cannot be supported on partially meshed networks because they require split horizon to be enabled (a packet received on an interface cannot be transmitted over the same interface, even if the packet is received and transmitted on different virtual circuits).

  Configuring Frame Relay subinterfaces ensures that a single physical interface is treated as multiple virtual interfaces. This capability allows you to overcome split horizon rules so packets received on one virtual interface can be forwarded to another virtual interface, even if they are configured on the same physical interface.

• Question 9:

  What are three reasons that an organization with multiple branch offices and roaming users might implement a Cisco VPN solution instead of point-to-point WAN links? (Choose three.)

  A. reduced cost
  B. better throughput
  C. broadband incompatibility
  D. increased security
  E. scalability
  F. reduced latency
  A. reduced cost
  D. increased security
  E. scalability

  ---

  Enhance Productivity and Cut Costs

  Cisco VPN solutions provide exceptional security through encryption and authentication technologies that protect data in transit from unauthorized access and attacks. A Cisco VPN helps you:

  Use highly secure communications, with access rights tailored to individual users Quickly add new sites or users, without significantly expanding your existing infrastructure Improve productivity by extending corporate networks, applications,

  and collaboration tools Reduce communications costs while increasing flexibility

• Question 10:

  Refer to the exhibit.

  

  C-router is to be used as a "router-on-a-stick" to route between the VLANs. All the interfaces have been properly configured and IP routing is operational. The hosts in the VLANs have been configured with the appropriate default gateway. What is true about this configuration?

  A. These commands need to be added to the configuration: C-router(config)# router eigrp 123 C-router(config-router)# network 172.19.0.0
  B. These commands need to be added to the configuration: C-router(config)# router ospf 1 C-router(config-router)# network 172.19.0.0 0.0.3.255 area 0
  C. These commands need to be added to the configuration: C-router(config)# router rip C-router(config-router)# network 172.19.0.0
  D. No further routing configuration is required.
  D. No further routing configuration is required.

  ---

  http://www.cisco.com/en/US/tech/tk389/tk815/technologies_configuration_example09186a00800949f d.shtml https://learningnetwork.cisco.com/servlet/JiveServlet/download/5669-2461/Router%20on%20a %20Stick.pdf.