Cisco 200-120 Online Practice Questions and Exam Preparation

Cisco 200-120 Online Questions & Answers

• Question 91:

  Which two benefits are provided by creating VLANs? (Choose two.)

  A. added security
  B. dedicated bandwidth
  C. provides segmentation
  D. allows switches to route traffic between subinterfaces
  E. contains collisions
  A. added security
  C. provides segmentation

  ---

  A VLAN is a switched network that is logically segmented on an organizational basis, by functions, project teams, or applications rather than on a physical or geographical basis.

  Security:

  VLANs also improve security by isolating groups. High-security users can be grouped into a VLAN, possible on the same physical segment, and no users outside that VLAN can communicate with them.

  LAN Segmentation

  VLANs allow logical network topologies to overlay the physical switched infrastructure such that any arbitrary collection of LAN ports can be combined into an autonomous user group or community of interest. The technology logically

  segments the network into separate Layer 2 broadcast domains whereby packets are switched between ports designated to be within the same VLAN. By containing traffic originating on a particular LAN only to other LANs in the same VLAN,

  switched virtual networks avoid wasting bandwidth.

• Question 92:

  Refer to the exhibit.

  

  When running OSPF, what would cause router A not to form an adjacency with router B?

  A. The loopback addresses are on different subnets.
  B. The values of the dead timers on the routers are different.
  C. Route summarization is enabled on both routers.
  D. The process identifier on router A is different than the process identifier on router B.
  B. The values of the dead timers on the routers are different.

  ---

  To form an adjacency (become neighbor), router A and B must have the same Hello interval, Dead interval and AREA numbers

• Question 93:

  Which command can you use to set the hostname on a switch?

  A. switch-mdf-c1(config)#hostname switch-mdf1
  B. switch-mdf-c1>hostname switch-mdf1
  C. switch-mdf-c1#hostname switch-mdf1
  D. switch-mdf-c1(config-if)#hostname switch-mdf1
  A. switch-mdf-c1(config)#hostname switch-mdf1

• Question 94:

  Refer to the exhibit.

  

  Given the output for this command, if the router ID has not been manually set, what router ID will OSPF use for this router?

  A. 10.1.1.2
  B. 10.154.154.1
  C. 172.16.5.1
  D. 192.168.5.3
  C. 172.16.5.1

  ---

  The highest IP address of all loopback interfaces will be chosen -> Loopback 0 will be chosen as the router ID.

• Question 95:

  What levels will be trapped if the administrator executes the command router(config)# logging trap 4 (Choose four)

  A. Emergency
  B. Notice
  C. Alert
  D. Error
  E. Warning
  A. Emergency
  C. Alert
  D. Error
  E. Warning

  ---

  The Message Logging is divided into 8 levels as listed below:

  Level Keyword Description 0 emergencies System is unusable 1 alerts Immediate action is needed 2 critical Critical conditions exist 3 errors Error conditions exist 4 warnings Warning conditions exist 5 notification Normal, but significant, conditions exist 6 informational Informational messages 7 debugging Debugging messages

  If you specify a level with the "logging trap level" command, that level and all the higher levels will be logged. For example, by using the "logging trap 4 command, all the logging of emergencies, alerts, critical, errors, warnings will be logged.

• Question 96:

  Refer to the exhibit.

  

  The network administrator requires easy configuration options and minimal routing protocol traffic. What two options provide adequate routing table information for traffic that passes between the two routers and satisfy the requests of the network administrator? (Choose two.)

  A. a dynamic routing protocol on InternetRouter to advertise all routes to CentralRouter.
  B. a dynamic routing protocol on InternetRouter to advertise summarized routes to CentralRouter.
  C. a static route on InternetRouter to direct traffic that is destined for 172.16.0.0/16 to CentralRouter.
  D. a dynamic routing protocol on CentralRouter to advertise all routes to InternetRouter.
  E. a dynamic routing protocol on CentralRouter to advertise summarized routes to InternetRouter.
  F. a static, default route on CentralRouter that directs traffic to InternetRouter.
  C. a static route on InternetRouter to direct traffic that is destined for 172.16.0.0/16 to CentralRouter.
  F. a static, default route on CentralRouter that directs traffic to InternetRouter.

  ---

  The use of static routes will provide the necessary information for connectivity while producing no routing traffic overhead.

• Question 97:

  What are three reasons to collect Netflow data on a company network? (Choose three.)

  A. To identify applications causing congestion.
  B. To authorize user network access.
  C. To report and alert link up / down instances.
  D. To diagnose slow network performance, bandwidth hogs, and bandwidth utilization.
  E. To detect suboptimal routing in the network.
  F. To confirm the appropriate amount of bandwidth that has been allocated to each Class of Service.
  A. To identify applications causing congestion.
  D. To diagnose slow network performance, bandwidth hogs, and bandwidth utilization.
  F. To confirm the appropriate amount of bandwidth that has been allocated to each Class of Service.

  ---

  NetFlow facilitates solutions to many common problems encountered by IT professionals.

  +

  Analyze new applications and their network impact

  Identify new application network loads such as VoIP or remote site additions.

  +

  Reduction in peak WAN traffic

  Use NetFlow statistics to measure WAN traffic improvement from application-policy changes; understand who is utilizing the network and the network top talkers.

  +

  Troubleshooting and understanding network pain points

  Diagnose slow network performance, bandwidth hogs and bandwidth utilization quickly with command line interface or reporting tools. -> D is correct.

  +

  Detection of unauthorized WAN traffic

  Avoid costly upgrades by identifying the applications causing congestion. -> A is correct.

  +

  Security and anomaly detection

  NetFlow can be used for anomaly detection and worm diagnosis along with applications such as Cisco CS-Mars.

  +

  Validation of QoS parameters

  Confirm that appropriate bandwidth has been allocated to each Class of Service (CoS) and that no CoS is over- or under-subscribed.-> F is correct.

• Question 98:

  What value is primarily used to determine which port becomes the root port on each nonroot switch in a spanning-tree topology?

  A. path cost
  B. lowest port MAC address
  C. VTP revision number
  D. highest port priority number
  E. port priority number and MAC address
  A. path cost

  ---

  The path cost to the root bridge is the most important value to determine which port will become the root port on each non-root switch. In particular, the port with lowest cost to the root bridge will become root port (on non-root switch).

• Question 99:

  What is known as "one-to-nearest" addressing in IPv6?

  A. global unicast
  B. anycast
  C. multicast
  D. unspecified address
  B. anycast

  ---

  IPv6 Anycast addresses are used for one-to-nearest communication, meaning an Anycast address is used by a device to send data to one specific recipient (interface) that is the closest out of a group of recipients (interfaces).

• Question 100:

  SIMULATION

  A corporation wants to add security to its network. The requirements are:

  Host C should be able to use a web browser (HTTP) to access the Finance Web Server.

  Other types of access from host C to the Finance Web Server should be blocked.

  All access from hosts in the Core or local LAN to the Finance Web Server should be blocked.

  All hosts in the Core and on local LAN should be able to access the Public Web Server.

  You have been tasked to create and apply a numbered access list to a single outbound interface. This access list can contain no more than three statements that meet these requirements.

  Access to the router CLI can be gained by clicking on the appropriate host.

  All passwords have been temporarily set to “cisco”.

  The Core connection uses an IP address of 198.18.209.65.

  The computers in the Hosts LAN have been assigned addresses of 192.168.78.1 – 192.168.78.254.

  -

  host A 192.168.78.1

  -

  host B 192.168.78.2

  -

  host C 192.168.78.3

  -

  host D 192.168.78.4

  The Finance Web Server has been assigned an address of 172.22.146.17.

  The Public Web Server in the Server LAN has been assigned an address of 172.22.146.18.

  

  

  Corp1(config)#access-list 100 permit tcp host 192.168.125.3 host 172.22.109.17 eq 80

  Correct Answer. Check the answer below
  Check the answer below

  ---

  We should create an access-list and apply it to the interface that is connected to the Server LAN because it can filter out traffic from both S2 and Core networks. To see which interface this is, use the “show ip int brief” command:

  

  From this, we know that the servers are located on the fa0/1 interface, so we will place our numbered access list here in the outbound direction.

  Corp1#configure terminal

  Our access-list needs to allow host C – 192.168125.3 to the Finance Web Server 172.22.109.17 via HTTP (port 80), so our first line is this:

  Then, our next two instructions are these:

  Other types of access from host C to the Finance Web Server should be blocked.

  All access from hosts in the Core or local LAN to the Finance Web Server should be blocked.

  This can be accomplished with one command (which we need to do as our ACL needs to be no more than 3 lines long), blocking all other access to the finance web server:

  Corp1(config)#access-list 100 deny ip any host 172.22.109.17

  Our last instruction is to allow all hosts in the Core and on the local LAN access to the Public Web Server (172.22.109.18)

  Corp1(config)#access-list 100 permit ip host 172.22.109.18 any

  Finally, apply this access-list to Fa0/1 interface (outbound direction)

  Corp1(config)#interface fa0/1Corp1(config-if)#ip access-group 100 out

  Notice: We have to apply the access-list to Fa0/1 interface (not Fa0/0 interface) so that the access-list can filter traffic coming from both the LAN and the Core networks.

  To verify, just click on host C to open its web browser. In the address box type http://172.22.109.17 to check if you are allowed to access Finance Web Server or not. If your configuration is correct then you can access it.

  Click on other hosts (A, B and D) and check to make sure you can't access Finance Web Server from these hosts. Then, repeat to make sure they can reach the public server at 172.22.109.18. Finally, save the configuration

  Corp1(config-if)#endCorp1#copy running-config startup-config