Cisco 200-120 Online Practice Questions and Exam Preparation

Cisco 200-120 Online Questions & Answers

• Question 141:

  What can be done to secure the virtual terminal interfaces on a router? (Choose two.)

  A. Administratively shut down the interface.
  B. Physically secure the interface.
  C. Create an access list and apply it to the virtual terminal interfaces with the access-group command.
  D. Configure a virtual terminal password and login process.
  E. Enter an access list and apply it to the virtual terminal interfaces using the access-class command.
  D. Configure a virtual terminal password and login process.
  E. Enter an access list and apply it to the virtual terminal interfaces using the access-class command.

  ---

  It is a waste to administratively shut down the interface. Moreover, someone can still access the virtual terminal interfaces via other interfaces -> We cannot physically secure a virtual interface because it is "virtual" ->.

  To apply an access list to a virtual terminal interface we must use the "access-class" command. The "access-group" command is only used to apply an access list to a physical interface -> C is not correct. The most simple way to secure the

  virtual terminal interface is to configure a username and password to prevent unauthorized login.

• Question 142:

  Refer to the exhibit.

  

  According to the routing table, where will the router send a packet destined for 10.1.5.65?

  A. 10.1.1.2
  B. 10.1.2.2
  C. 10.1.3.3
  D. 10.1.4.4
  C. 10.1.3.3

  ---

  The destination IP address 10.1.5.65 belongs to 10.1.5.64/28, 10.1.5.64/29 and 10.1.5.64/27 subnets but the "longest prefix match" algorithm will choose the most specific subnet mask -> the prefix "/29 will be chosen to route the packet. Therefore the next-hop should be 10.1.3.3 ->.

• Question 143:

  Refer to the exhibit.

  

  Statements A, B, C, and D of ACL 10 have been entered in the shown order and applied to interface E0 inbound, to prevent all hosts (except those whose addresses are the first and last IP of subnet 172.21.1.128/28) from accessing the network. But as is, the ACL does not restrict anyone from the network. How can the ACL statements be re-arranged so that the system works as intended?

  A. ACDB
  B. BADC
  C. DBAC
  D. CDBA
  D. CDBA

  ---

  Routers go line by line through an access list until a match is found and then will not look any further, even if a more specific of better match is found later on in the access list. So, it it best to begin with the most specific entries first, in this cast the two hosts in line C and D. Then, include the subnet (B) and then finally the rest of the traffic (A).

• Question 144:

  Refer to the exhibit.

  

  Which switch provides the spanning-tree designated port role for the network segment that services the printers?

  A. Switch1
  B. Switch2
  C. Switch3
  D. Switch4
  C. Switch3

  ---

  Printers are connected by hubs. Decide the switch that provides the spanning-tree designated port role between Switch3 and Switch4. They have the same priority 32768. Compare their MAC addresses. Switch3 with a smaller MAC address will provide a designated port for printers.

• Question 145:

  What are three features of the IPv6 protocol? (Choose three.)

  A. optional IPsec
  B. autoconfiguration
  C. no broadcasts
  D. complicated header
  E. plug-and-play
  F. checksums
  B. autoconfiguration
  C. no broadcasts
  E. plug-and-play

  ---

  An important feature of IPv6 is that it allows plug and play option to the network devices by allowing them to configure themselves independently. It is possible to plug a node into an IPv6 network without requiring any human intervention. This feature was critical to allow network connectivity to an increasing number of mobile devices. This is accomplished by autoconfiguration. IPv6 does not implement traditional IP broadcast, i.e. the transmission of a packet to all hosts on the attached link using a special broadcast address, and therefore does not define broadcast addresses. In IPv6, the same result can be achieved by sending a packet to the link-local all nodes multicast group at address ff02::1, which is analogous to IPv4 multicast to address 224.0.0.1.

• Question 146:

  Which two options are valid WAN connectivity methods? (Choose two.)

  A. PPP
  B. WAP
  C. DSL
  D. L2TPv3
  E. Ethernet
  A. PPP
  C. DSL

  ---

  The Point-to-Point Protocol (PPP) provides a standard method for transporting multi-protocol datagrams over point-to-point links. PPP was originally emerged as an encapsulation protocol for transporting IP traffic between two peers. It is a

  data link layer protocol used for WAN connections.

  DSL is also considered a WAN connection, as it can be used to connect networks, typically when used with VPN technology.

• Question 147:

  What is the alternative notation for the IPv6 address B514:82C3:0000:0000:0029:EC7A:0000:EC72?

  A. B514 : 82C3 : 0029 : EC7A : EC72
  B. B514 : 82C3 :: 0029 : EC7A : EC72
  C. B514 : 82C3 : 0029 :: EC7A : 0000 : EC72
  D. B514 : 82C3 :: 0029 : EC7A : 0 : EC72
  D. B514 : 82C3 :: 0029 : EC7A : 0 : EC72

  ---

  There are two ways that an IPv6 address can be additionally compressed: compressing leading zeros and substituting a group of consecutive zeros with a single double colon (::). Both of these can be used in any number of combinations to notate the same address. It is important to note that the double colon (::) can only be used once within a single IPv6 address notation. So, the extra 0's can only be compressed once.

• Question 148:

  Which two are advantages of static routing when compared to dynamic routing? (Choose two.)

  A. Configuration complexity decreases as network size increases.
  B. Security increases because only the network administrator may change the routing table.
  C. Route summarization is computed automatically by the router.
  D. Routing tables adapt automatically to topology changes.
  E. An efficient algorithm is used to build routing tables, using automatic updates.
  F. Routing updates are automatically sent to neighbors.
  G. Routing traffic load is reduced when used in stub network links.
  B. Security increases because only the network administrator may change the routing table.
  G. Routing traffic load is reduced when used in stub network links.

  ---

  Since static routing is a manual process, it can be argued that it is more secure (and more prone to human errors) since the network administrator will need to make changes to the routing table directly. Also, in stub networks where there is only a single uplink connection, the load is reduced as stub routers just need a single static default route, instead of many routes that all have the same next hop IP address.

• Question 149:

  DRAG DROP

  A user is unable to connect to the Internet. Based on the layered approach to troubleshooting and beginning with the lowest layer, drag each procedure on the left to its proper category on the right.

  Select and Place:

  

  

  ---

  The question asks us to “begin with the lowest layer” so we have to begin with Layer 1: verify physical connection; in this case an Ethernet cable connection. For your information, “verify Ethernet cable connection” means that we check if the type of connection (crossover, straight-through, rollover…) is correct, the RJ45 headers are plugged in, the signal on the cable is acceptable…

  Next we “verify NIC operation”. We do this by simply making a ping to the loopback interface 127.0.0.1. If it works then the NIC card (layer 1, 2) and TCP/IP stack (layer 3) are working properly.

  Verify IP configuration belongs to layer 3. For example, checking if the IP can be assignable for host, the PC's IP is in the same network with the gateway…

  Verifying the URL by typing in your browser some popular websites like google.com, microsoft.com to assure that the far end server is not down (it sometimes make we think we can't access to the Internet). We are using a URL so this step belongs to layer 7 of the OSI model.

• Question 150:

  What are three values that must be the same within a sequence of packets for Netflow to consider them a network flow? (Choose three.)

  A. source IP address
  B. source MAC address
  C. egress interface
  D. ingress interface
  E. destination IP address
  F. IP next-hop
  A. source IP address
  D. ingress interface
  E. destination IP address

  ---

  Each packet that is forwarded within a router or switch is examined for a set of IP packet attributes. These attributes are the IP packet identity or fingerprint of the packet and determine if the packet is unique or similar to other packets. Traditionally, an IP Flow is based on a set of 5 and up to 7 IP packet attributes. IP Packet attributes used by NetFlow: ?IP source address ?IP destination address ?Source port ?Destination port ?Layer 3 protocol type ?Class of Service ?Router or switch interface All packets with the same source/destination IP address, source/destination ports, protocol interface and class of service are grouped into a flow and then packets and bytes are tallied. This methodology of fingerprinting or determining a flow is scalable because a large amount of network information is condensed into a database of NetFlow information called the NetFlow cache.

  Reference: http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ios-netflow/prod_white_paper0900aecd80406232.html