Cisco 200-101 Online Practice Questions and Exam Preparation

Cisco 200-101 Online Questions & Answers

• Question 21:

  Which command is used to enable CHAP authentication, with PAP as the fallback method, on a serial interface?

  A. Router(config-if)# ppp authentication chap fallback ppp
  B. Router(config-if)# ppp authentication chap pap
  C. Router(config-if)# authentication ppp chap fallback ppp
  D. Router(config-if)# authentication ppp chap pap
  B. Router(config-if)# ppp authentication chap pap

  ---

  http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfathen.html

• Question 22:

  What is a valid HSRP virtual MAC address?

  A. 0000.5E00.01A3
  B. 0007.B400.AE01
  C. 0000.0C07.AC15
  D. 0007.5E00.B301
  C. 0000.0C07.AC15

  ---

  Hot Standby Router Protocol Features and Functionality http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a0080094a91.shtml

  HSRP Addressing In most cases when you configure routers to be part of an HSRP group, they listen for the HSRP MAC address for that group as well as their own burned-in MAC address. The exception is routers whose Ethernet controllers only recognize a single MAC address (for example, the Lance controller on the Cisco 2500 and Cisco 4500 routers). These routers use the HSRP MAC address when they are the Active router, and their burned-in address when they are not. HSRP uses the following MAC address on all media except Token Ring: 0000.0c07.ac** (where ** is the HSRP group number)

• Question 23:

  Which three of these statements regarding 802.1Q trunking are correct? (Choose three.)

  A. 802.1Q native VLAN frames are untagged by default.
  B. 802.1Q trunking ports can also be secure ports.
  C. 802.1Q trunks can use 10 Mb/s Ethernet interfaces.
  D. 802.1Q trunks require full-duplex, point-to-point connectivity.
  E. 802.1Q trunks should have native VLANs that are the same at both ends.
  A. 802.1Q native VLAN frames are untagged by default.
  C. 802.1Q trunks can use 10 Mb/s Ethernet interfaces.
  E. 802.1Q trunks should have native VLANs that are the same at both ends.

  ---

  CCNA Self-Study (ICND Exam): Extending Switched Networks with Virtual LANs http://www.ciscopress.com/articles/article.asp? p=102157andseqNum=2

• Question 24:

  Refer to the exhibit.

  

  Based on the exhibited routing table, how will packets from a host within the 192.168.10.192/26 LAN be forwarded to 192.168.10.1?

  A. The router will forward packets from R3 to R2 to R1.
  B. The router will forward packets from R3 to R1 to R2.
  C. The router will forward packets from R3 to R2 to R1 AND from R3 to R1.
  D. The router will forward packets from R3 to R1.
  C. The router will forward packets from R3 to R2 to R1 AND from R3 to R1.

  ---

  From the routing table we learn that network 192.168.10.0/30 is learned via 2 equal- cost paths (192.168.10.9 and192.168.10.5) - traffic to this network will be load- balanced.

• Question 25:

  Refer to the exhibit.

  

  Assume that all router interfaces are operational and correctly configured. In addition, assume that OSPF has been correctly configured on router R2. How will the default route configured on R1 affect the operation of R2?

  A. Any packet destined for a network that is not directly connected to router R1 will be dropped.
  B. Any packet destined for a network that is not directly connected to router R2 will be dropped immediately.
  C. Any packet destined for a network that is not directly connected to router R2 will be dropped immediately because of the lack of a gateway on R1.
  D. The networks directly connected to router R2 will not be able to communicate with the 172.16.100.0, 172.16.100.128, and 172.16.100.64 subnetworks.
  E. Any packet destined for a network that is not referenced in the routing table of router R2 will be directed to R1. R1 will then send that packet back to R2 and a routing loop will occur.
  E. Any packet destined for a network that is not referenced in the routing table of router R2 will be directed to R1. R1 will then send that packet back to R2 and a routing loop will occur.

  ---

  First, notice that the more-specific routes will always be favored over less-specific routes regardless of the administrative distance set for a protocol. In this case, because we use OSPF for three networks (172.16.100.0 0.0.0.3, 172.16.100.64 0.0.0.63, 172.16.100.128 0.0.0.31) so the packets destined for these networks will not be affected by the default route. The default route configured on R1 "ip route 0.0.0.0 0.0.0.0 serial0/0 will send any packet whose destination network is not referenced in the routing table of router R1 to R2, it doesn't drop anything so answers A, B and C are not correct. D is not correct too because these routes are declared in R1 and the question says that "OSPF has been correctly configured on router R2, so network directly connected to router R2 can communicate with those three subnetworks. As said above, the default route configured on R1 will send any packet destined for a network that is not referenced in its routing table to R2; R2 in turn sends it to R1 because it is the only way and a routing loop will occur.

• Question 26:

  Which three statements about RSTP are true? (Choose three.)

  A. RSTP significantly reduces topology reconverging time after a link failure.
  B. RSTP expands the STP port roles by adding the alternate and backup roles.
  C. RSTP port states are blocking, discarding, learning, or forwarding.
  D. RSTP provides a faster transition to the forwarding state on point-to-point links than STP does.
  E. RSTP also uses the STP proposal-agreement sequence.
  F. RSTP uses the same timer-based process as STP on point-to-point links.
  A. RSTP significantly reduces topology reconverging time after a link failure.
  B. RSTP expands the STP port roles by adding the alternate and backup roles.
  D. RSTP provides a faster transition to the forwarding state on point-to-point links than STP does.

  ---

  http://www.cisco.com/en/US/tech/tk389/tk621/technologies_white_paper09186a0080094cfa.shtml

  Convergence Cisco enhanced the original 802.1D specification with features such as Uplink Fast, Backbone Fast, and Port Fast to speed up the convergence time of a bridged network. The drawback is that these mechanisms are proprietary and need additional configuration. Alternate and Backup Port Roles These two port roles correspond to the blocking state of 802.1D. A blocked port is defined as not being the designated or root port. A blocked port receives a more useful BPDU than the one it sends out on its segment.

  Remember that a port absolutely needs to receive BPDUs in order to stay blocked. RSTP introduces these two roles for this purpose. Rapid Transition to Forwarding State Rapid transition is the most important feature introduced by 802.1w. The legacy STA passively waited for the network to converge before it turned a port into the forwarding state. The achievement of faster convergence was a matter of tuning the conservative default parameters (forward delay and max_age timers) and often put the stability of the network at stake. The new rapid STP is able to actively confirm that a port can safely transition to the forwarding state without having to rely on any timer configuration. There is now a real feedback mechanism that takes place between RSTP-compliant bridges. In order to achieve fast convergence on a port, the protocol relies upon two new variables: edge ports and link type.

• Question 27:

  Select and Place:

  

  

  ---

  + holddown timer: prevents a router from improperly reinstating a route from a regular routing update

  + split horizon: prevents information about a route from being sent in the direction from which the route was learned

  + defining a maximum: prevents invalid updates from looping the internetwork indefinitely

  + route poisoning: causes a routing protocol to advertise an infinite metric for a failed route

  + triggered update: decreases convergence time by immediately sending route information in response to a topology change

• Question 28:

  Refer to the exhibit.

  

  The output that is shown is generated at a switch. Which three statements are true? (Choose three.)

  A. All ports will be in a state of discarding, learning, or forwarding.
  B. Thirty VLANs have been configured on this switch.
  C. The bridge priority is lower than the default value for spanning tree.
  D. All interfaces that are shown are on shared media.
  E. All designated ports are in a forwarding state.
  F. This switch must be the root bridge for all VLANs on this switch.
  A. All ports will be in a state of discarding, learning, or forwarding.
  C. The bridge priority is lower than the default value for spanning tree.
  E. All designated ports are in a forwarding state.

  ---

  From the output, we see that all ports are in Designated role (forwarding state) -> A and E are correct. The command "show spanning-tree vlan 30 only shows us information about VLAN 30. We don't know how many VLAN exists in this

  switch -> B is not correct.

  The bridge priority of this switch is 24606 which is lower than the default value bridge priority 32768 -> C is correct.

  All three interfaces on this switch have the connection type "p2p", which means Point-to-point environment not a shared media -> D is not correct.

  The only thing we can specify is this switch is the root bridge for VLAN 3o but we can not guarantee it is also the root bridge for other VLANs -> F is not correct.

• Question 29:

  Which two statements about using the CHAP authentication mechanism in a PPP link are true? (Choose two.)

  A. CHAP uses a two-way handshake.
  B. CHAP uses a three-way handshake.
  C. CHAP authentication periodically occurs after link establishment.
  D. CHAP authentication passwords are sent in plaintext.
  E. CHAP authentication is performed only upon link establishment.
  F. CHAP has no protection from playback attacks.
  B. CHAP uses a three-way handshake.
  C. CHAP authentication periodically occurs after link establishment.

  ---

  Understanding and Configuring PPP CHAP Authentication http://www.cisco.com/en/US/tech/tk713/tk507/technologies_tech_note09186a00800b4131.shtml

  One-Way and Two-Way Authentication

  CHAP is defined as a one-way authentication method. However, you use CHAP in both directions to create a two-way authentication. Hence, with two-way CHAP, a separate three-way handshake is initiated by each side. In the Cisco CHAP

  implementation, by default, the called party must authenticate the calling party (unless authentication is completely turned off). Therefore, a one-way authentication initiated by the called party is the minimum possible authentication. However,

  the calling party can also verify the identity of the called party, and this results in a two-way authentication.

  One-way authentication is often required when you connect to non-Cisco devices.

• Question 30:

  Which three statements are typical characteristics of VLAN arrangements? (Choose three.)

  A. A new switch has no VLANs configured.
  B. Connectivity between VLANs requires a Layer 3 device.
  C. VLANs typically decrease the number of collision domains.
  D. Each VLAN uses a separate address space.
  E. A switch maintains a separate bridging table for each VLAN.
  F. VLANs cannot span multiple switches.
  B. Connectivity between VLANs requires a Layer 3 device.
  D. Each VLAN uses a separate address space.
  E. A switch maintains a separate bridging table for each VLAN.

  ---

  By default, all ports on a new switch belong to VLAN 1 (default and native VLAN). There are also some well-known VLANs (for example: VLAN 1002 for fddi-default; VLAN 1003 for token-ring...) configured by default -> A is not correct.

  To communicate between two different VLANs we need to use a Layer 3 device like router or Layer 3 switch -> B is correct.

  VLANs don't affect the number of collision domains, they are the same -> C is not correct. Typically, VLANs increase the number of broadcast domains. We must use a different network (or sub-network) for each VLAN. For example we can

  use 192.168.1.0/24 for VLAN 1, 192.168.2.0/24 for VLAN 2 -> D is correct. A switch maintains a separate bridging table for each VLAN so that it can send frame to ports on the same VLAN only. For example, if a PC in VLAN 2 sends a frame

  then the switch look-ups its bridging table and only sends frame out of its ports which belong to VLAN 2 (it also sends this frame on trunk ports) -> E is correct.

  We can use multiple switches to expand VLAN -> F is not correct.