Cisco 200-101 Online Practice Questions and Exam Preparation

Cisco 200-101 Online Questions & Answers

• Question 81:

  Refer to the exhibit.

  

  What three actions will the switch take when a frame with an unknown source MAC address arrives at the interface? (Select three.)

  A. Send an SNMP trap.
  B. Send a syslog message.
  C. Increment the Security Violation counter.
  D. Forward the traffic.
  E. Write the MAC address to the startup-config.
  F. Shut down the port.
  A. Send an SNMP trap.
  B. Send a syslog message.
  C. Increment the Security Violation counter.

  ---

  Switchport Security Concepts and Configuration

  http://www.ciscopress.com/articles/article.asp?p=1722561

  Switchport Security Violations

  The second piece of switchport port-security that must be understood is a security violation including what it is what causes it and what the different violation modes that exist. A switchport violation occurs in one of two situations:

  When the maximum number of secure MAC addresses has been reached (by default, the maximum number of secure MAC addresses per switchport is limited to

  1) An address learned or configured on one secure interface is seen on another secure interface in the same VLAN The action that the device takes when one of these violations occurs can be configured:

  Protect--This mode permits traffic from known MAC addresses to continue to be forwarded while dropping traffic from unknown MAC addresses when over the allowed MAC address limit. When configured with this mode, no notification action

  is taken when traffic is dropped. Restrict--This mode permits traffic from known MAC addresses to continue to be forwarded while dropping traffic from unknown MAC addresses when over the allowed MAC address limit. When configured

  with this mode, a syslog message is logged, a Simple Network Management Protocol (SNMP) trap is sent, and a violation counter is incremented when traffic is dropped.

  Shutdown--This mode is the default violation mode; when in this mode, the switch will automatically force the switchport into an error disabled (err-disable) state when a violation occurs. While in this state, the switchport forwards no traffic.

  The switchport can be brought out of this error disabled state by issuing the errdisable recovery cause CLI command or by disabling and re-enabling the switchport. Shutdown VLAN--This mode mimics the behavior of the shutdown mode but

  limits the error disabled state the specific violating VLAN.

• Question 82:

  Refer to the exhibit.

  

  A technician has configured the FastEthernet 0/1 interface on Sw11 as an access link in VLAN

  1. Based on the output from the show vlan brief command issued on Sw12, what will be the result of making this change on Sw11?

  A. Only the hosts in VLAN 1 on the two switches will be able to communicate with each other.
  B. The hosts in all VLANs on the two switches will be able to communicate with each other.
  C. Only the hosts in VLAN 10 and VLAN 15 on the two switches will be able to communicate with each other.
  D. Hosts will not be able to communicate between the two switches.
  D. Hosts will not be able to communicate between the two switches.

  ---

  VLANs are local to each switch's database, and VLAN information is not passed between switches without implementing VLAN Trunk Protocol (VTP). Trunks carry traffic from all VLANs to and from the switch by default but, can be configured

  to carry only specified VLAN traffic. Trunk links are required to pass VLAN information between switches. So Sw11 port should be trunk not access port. Additionally, there are no ports assigned to VLAN 1.

• Question 83:

  What occurs on a Frame Relay network when the CIR is exceeded?

  A. All TCP traffic is marked discard eligible.
  B. All UDP traffic is marked discard eligible and a BECN is sent.
  C. All TCP traffic is marked discard eligible and a BECN is sent.
  D. All traffic exceeding the CIR is marked discard eligible.
  D. All traffic exceeding the CIR is marked discard eligible.

  ---

  Committed information rate (CIR): The minimum guaranteed data transfer rate agreed to by the Frame Relay switch. Frames that are sent in excess of the CIR are marked as discard eligible (DE) which means they can be dropped if the congestion occurs within the Frame Relay network. Note: In the Frame Relay frame format, there is a bit called Discard eligible (DE) bit that is used to identify frames that are first to be dropped when the CIR is exceeded.

• Question 84:

  Refer to the exhibit.

  

  If the router Cisco returns the given output and has not had its router ID set manually, what value will OSPF use as its router ID?

  A. 192.168.1.1
  B. 172.16.1.1
  C. 1.1.1.1
  D. 2.2.2.2
  D. 2.2.2.2

• Question 85:

  

  

  What would be the destination Layer 2 address in the frame header for a frame that is being forwarded by Dubai to the host address of 172.30.4.4?

  A. 825
  B. 230
  C. 694
  D. 387
  C. 694

  ---

  According to command output 172.30.4.4 is using the 694 dlci value. http://www.cisco.com/en/US/docs/ios/12_2/wan/command/reference/wrffr4.html#wp1029343

• Question 86:

  A network administrator is troubleshooting an EIGRP problem on a router and needs to confirm the IP addresses of the devices with which the router has established adjacency. The retransmit interval and the queue counts for the adjacent routers also need to be checked. What command will display the required information?

  A. Router# show ip eigrp adjacency
  B. Router# show ip eigrp topology
  C. Router#show ip eigrp interfaces
  D. Router#show ip eigrp neighbors
  D. Router#show ip eigrp neighbors

  ---

  Implementing EIGRP http://www.ciscopress.com/articles/article.asp?p=1171169andseqNum=3 Below is an example of the show ip eigrp neighbors command. The retransmit interval (Smooth Round Trip Timer SRTT) and the queue counts (Q count, which shows the number of queued EIGRP packets) for the adjacent routers are listed: R1#show ip eigrp neighbors IP-EIGRP neighbors for process 1 H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 0 10.10.10.2 Fa0/0 12 00:00:39 1282 5000 0 3

• Question 87:

  Refer to the exhibit.

  

  The network is converged. After link-state advertisements are received from Router_A, what information will Router_E contain in its routing table for the subnets 208.149.23.64 and 208.149.23.96?

  A. O 208.149.23.64 [110/13] via 190.173.23.10, 00:00:07, FastEthernet 0/0 O 208.149.23.96 [110/13] via 190.173.23.10, 00:00:16, FastEthernet 0/0
  B. O 208.149.23.64 [110/1] via 190.172.23.10, 00:00:07, Serial 1/0 O 208.149.23.96 [110/3] via 190.173.23.10, 00:00:16, FastEthernet 0/0
  C. O 208.149.23.64 [110/13] via 190.172.23.10, 00:00:07, Serial 1/0 O 208.149.23.96 [110/13] via 190.172.23.10, 00:00:16, Serial 1/0 O 208.149.23.96 [110/13] via 190.173.23.10, 00:00:16, FastEthernet 0/0
  D. O 208.149.23.64 [110/3] via 190.172.23.10, 00:00:07, Serial 1/0 O 208.149.23.96 [110/3] via 190.172.23.10, 00:00:16, Serial 1/0
  A. O 208.149.23.64 [110/13] via 190.173.23.10, 00:00:07, FastEthernet 0/0 O 208.149.23.96 [110/13] via 190.173.23.10, 00:00:16, FastEthernet 0/0

  ---

  Router_E learns two subnets subnets 208.149.23.64 and 208.149.23.96 via Router_A through FastEthernet interface. The interface cost is calculated with the formula 108 / Bandwidth. For FastEthernet it is 108 / 100 Mbps = 108 / 100,000,000 = 1. Therefore the cost is 12 (learned from Router_A) + 1 = 13 for both subnets - B is not correct. The cost through T1 link is much higher than through T3 link (T1 cost = 108 / 1.544 Mbps = 64; T3 cost = 108 / 45 Mbps = 2) so surely OSPF will choose the path through T3 link -> Router_E will choose the path from Router_A through FastEthernet0/0, not Serial1/0 - C and D are not correct. In fact, we can quickly eliminate answers B, C and D because they contain at least one subnet learned from Serial1/0 - they are surely incorrect.

• Question 88:

  Which statements are true about EIGRP successor routes? (Choose two.)

  A. A successor route is used by EIGRP to forward traffic to a destination.
  B. Successor routes are saved in the topology table to be used if the primary route fails.
  C. Successor routes are flagged as 'active' in the routing table.
  D. A successor route may be backed up by a feasible successor route.
  E. Successor routes are stored in the neighbor table following the discovery process.
  A. A successor route is used by EIGRP to forward traffic to a destination.
  D. A successor route may be backed up by a feasible successor route.

  ---

  Introduction to EIGRP http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080093f07.shtml

  Feasible Successors A destination entry is moved from the topology table to the routing table when there is a feasible successor. All minimum cost paths to the destination form a set. From this set, the neighbors that have an advertised metric less than the current routing table metric are considered feasible successors. Feasible successors are viewed by a router as neighbors that are downstream with respect to the destination. These neighbors and the associated metrics are placed in the forwarding table. When a neighbor changes the metric it has been advertising or a topology change occurs in the network, the set of feasible successors may have to be re-evaluated. However, this is not categorized as a route recomputation.

• Question 89:

  Refer to the exhibit.

  

  Which of these correctly describes the results of port security violation of an unknown packet?

  A. port enabled; unknown packets dropped; no SNMP or syslog messages
  B. port enabled; unknown packets dropped; SNMP or syslog messages
  C. port disabled; no SNMP or syslog messages
  D. port disabled; SNMP or syslog messages
  D. port disabled; SNMP or syslog messages

  ---

  Configuring Port Security http://packetlife.net/blog/2010/may/3/port-security/

  We can view the default port security configuration with show port-security:

  

  http://www.ciscopress.com/articles/article.asp?p=1722561

  Switchport Security Violations

  The second piece of switchport port-security that must be understood is a security violation including what it is what causes it and what the different violation modes that exist. A switchport violation occurs in one of two situations:

  When the maximum number of secure MAC addresses has been reached (by default, the maximum number of secure MAC addresses per switchport is limited to

  1)

  An address learned or configured on one secure interface is seen on another secure interface in the same VLAN The action that the device takes when one of these violations occurs can be configured:

  Protect--This mode permits traffic from known MAC addresses to continue to be forwarded while dropping traffic from unknown MAC addresses when over the allowed MAC address limit. When configured with this mode, no notification action

  is taken when traffic is dropped. Restrict--This mode permits traffic from known MAC addresses to continue to be forwarded while dropping traffic from unknown MAC addresses when over the allowed MAC address limit. When configured

  with this mode, a syslog message is logged, a Simple Network Management Protocol (SNMP) trap is sent, and a violation counter is incremented when traffic is dropped.

  Shutdown--This mode is the default violation mode; when in this mode, the switch will automatically force the switchport into an error disabled (err-disable) state when a violation occurs. While in this state, the switchport forwards no traffic.

  The switchport can be brought out of this error disabled state by issuing the errdisable recovery cause CLI command or by disabling and re-enabling the switchport. Shutdown VLAN--This mode mimics the behavior of the shutdown mode but

  limits the error disabled state the specific violating VLAN.

• Question 90:

  Refer to the exhibit

  

  .

  Which switch provides the spanning-tree designated port role for the network segment that services the printers?

  A. Switch1
  B. Switch2
  C. Switch3
  D. Switch4
  C. Switch3

  ---

  First, the question asks what switch services the printers, so it can be Switch 3 or Switch 4 which is connected directly to the Printers. Designated port is a port that is in the forwarding state. All ports of the root bridge are designated ports. Switch 3 and Switch 4 has same priority so it will see on lowest MAC address and here switch 3 has lowest MAC address. So switch 3 segment will play a Designated port role. By comparing the MAC address of Switch 3 and Switch 4 we found that the MAC of Switch 3 is smaller. Therefore the interface connected to the Printers of Switch 3 will become designated interface and the interface of Switch 4 will be blocked.