Cisco 200-120 Online Practice Questions and Exam Preparation

Cisco 200-120 Online Questions & Answers

• Question 211:

  SIMULATION A network associate is adding security to the configuration of the Corp1 router. The user on host C should be able to use a web browser to access financial information from the Finance Web Server. No other hosts from the LAN nor the Core should be able to use a web browser to access this server. Since there are multiple resources for the corporation at this location including other resources on the Finance Web Server, all other traffic should be allowed. The task is to create and apply an access-list with no more than three statements that will allow ONLY host C web access to the Finance Web Server. No other hosts will have web access to the Finance Web Server. All other traffic is permitted.

  

  Access to the router CLI can be gained by clicking on the appropriate host. All passwords have been temporarily set to "cisco". The Core connection uses an IP address of 198.18.247.65 The computers in the Hosts LAN have been assigned addresses of 192.168.240.1 - 192.168.240.254 host A 192.168.240.1 host B 192.168.240.2 host C 192.168.240.3

  Correct Answer. Check the answer below
  Check the answer below

  ---

  Corp1#conf t Corp1(config)# access-list 128 permit tcp host 192.168.240.1 host 172.22.141.26 eq www Corp1(config)# access-list 128 deny tcp any host 172.22.141.26 eq www Corp1(config)# access-list 128 permit ip any any Corp1(config)#int fa0/1 Corp1(config-if)#ip access-group 128 out Corp1(config-if)#end Corp1#copy run startup-config

• Question 212:

  What two things will a router do when running a distance vector routing protocol? (Choose two.)

  A. Send periodic updates regardless of topology changes.
  B. Send entire routing table to all routers in the routing domain.
  C. Use the shortest-path algorithm to the determine best path.
  D. Update the routing table based on updates from their neighbors.
  E. Maintain the topology of the entire network in its database.
  A. Send periodic updates regardless of topology changes.
  D. Update the routing table based on updates from their neighbors.

  ---

  Distance means how far and Vector means in which direction. Distance Vector routing protocols pass periodic copies of routing table to neighbor routers and accumulate distance vectors. In distance vector routing protocols, routers discover the best path to destination from each neighbor. The routing updates proceed step by step from router to router.

• Question 213:

  What are three reasons that an organization with multiple branch offices and roaming users might implement a Cisco VPN solution instead of point-to-point WAN links? (Choose three.)

  A. reduced cost
  B. better throughput
  C. broadband incompatibility
  D. increased security
  E. scalability
  F. reduced latency
  A. reduced cost
  D. increased security
  E. scalability

  ---

  IPsec offer a number of advantages over point to point WAN links, particularly when multiple locations are involved. These include reduced cost, increased security since all traffic is encrypted, and increased scalability as s single WAN link can be used to connect to all locations in a VPN, where as a point to point link would need to be provisioned to each location.

• Question 214:

  What are three components that comprise the SNMP framework? (Choose three.)

  A. MIB
  B. agent
  C. set
  D. AES
  E. supervisor
  F. manager
  A. MIB
  B. agent
  F. manager

  ---

  The SNMP framework consists of three parts:

  An SNMP manager -- The system used to control and monitor the activities of network devices using SNMP.

  

  An SNMP agent -- The software component within the managed device that maintains the data for the device and reports these data, as needed, to managing systems. Cisco Nexus 1000V supports the agent and MIB. To enable the

  

  SNMP agent, you must define the relationship between the manager and the agent.

  A managed information base (MIB) -- The collection of managed objects on the SNMP agent.

  

  SNMP is defined in RFCs 3411 to 3418.

  Reference: http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus1000/sw/4_0_4_s_v_1_3/system_management/configuration/guide/n1000v_system/n1000v_system_10snmp.html

• Question 215:

  SIMULATION

  A corporation wants to add security to its network. The requirements are:

  Host B should be able to use a web browser (HTTP) to access the Finance Web Server.

  Other types of access from host B to the Finance Web Server should be blocked.

  All access from hosts in the Core or local LAN to the Finance Web Server should be blocked.

  All hosts in the Core and on local LAN should be able to access the Public Web Server.

  You have been tasked to create and apply a numbered access list to a single outbound interface. This access list can contain no more than three statements that meet these requirements.

  Access to the router CLI can be gained by clicking on the appropriate host.

  All passwords have been temporarily set to “cisco”.

  The Core connection uses an IP address of 198.18.132.65.

  The computers in the Hosts LAN have been assigned addresses of 192.168.201.1 – 192.168.201.254.

  -

  host A 192.168.201.1

  -

  host B 192.168.201.2

  -

  host C 192.168.201.3

  -

  host D 192.168.201.4

  The Finance Web Server has been assigned an address of 172.22.237.17.

  The Public Web Server in the Server LAN has been assigned an address of 172.22.237.18.

  

  

  

  From this, we know that the servers are located on the fa0/1 interface, so we will place our numbered access list here in the outbound direction.

  Corp1(config)#access-list 100 permit tcp host 192.168.125.2 host 172.22.109.17 eq 80

  Correct Answer. Check the answer below
  Check the answer below

  ---

  We should create an access-list and apply it to the interface that is connected to the Server LAN because it can filter out traffic from both S2 and Core networks. To see which interface this is, use the “show ip interface brief” command:

  Corp1#configure terminal

  Our access-list needs to allow host B – 192.168125.2 to the Finance Web Server 172.22.109.17 via HTTP (port 80), so our first line is this:

  Then, our next two instructions are these:

  Other types of access from host B to the Finance Web Server should be blocked.

  All access from hosts in the Core or local LAN to the Finance Web Server should be blocked.

  This can be accomplished with one command (which we need to do as our ACL needs to be no more than 3 lines long), blocking all other access to the finance web server:

  Corp1(config)#access-list 100 deny ip any host 172.22.109.17

  Our last instruction is to allow all hosts in the Core and on the local LAN access to the Public Web Server (172.22.109.18)

  Corp1(config)#access-list 100 permit ip host 172.22.109.18 any

  Finally, apply this access-list to Fa0/1 interface (outbound direction)

  Corp1(config)#interface fa0/1Corp1(config-if)#ip access-group 100 out

  Notice: We have to apply the access-list to Fa0/1 interface (not Fa0/0 interface) so that the access-list can filter traffic coming from both the LAN and the Core networks.

  To verify, just click on host B to open its web browser. In the address box type http://172.22.109.17 to check if you are allowed to access Finance Web Server or not. If your configuration is correct then you can access it.

  Click on other hosts (A, C and D) and check to make sure you can't access Finance Web Server from these hosts. Then, repeat to make sure they can reach the public server at 172.22.109.18. Finally, save the configuration

  Corp1(config-if)#endCorp1#copy running-config startup-config

• Question 216:

  Which IEEE standard protocol is initiated as a result of successful DTP completion in a switch over Fast Ethernet?

  A. 802.3ad
  B. 802.1w
  C. 802.1D
  D. 802.1Q
  D. 802.1Q

  ---

  Dynamic Trunking Protocol (DTP) is a Cisco proprietary protocol for negotiating trunking on a link between two devices and for negotiating the type of trunking encapsulation (802.1Q) to be used.

• Question 217:

  Which port state is introduced by Rapid-PVST?

  A. learning
  B. listening
  C. discarding
  D. forwarding
  C. discarding

  ---

  PVST+ is based on IEEE802.1D Spanning Tree Protocol (STP). But PVST+ has only 3 port states (discarding, learning and forwarding) while STP has 5 port states (blocking, listening, learning, forwarding and disabled). So discarding is a new port state in PVST+.

• Question 218:

  Which of the following statements describe the network shown in the graphic? (Choose two.)

  

  A. There are two broadcast domains in the network.
  B. There are four broadcast domains in the network.
  C. There are six broadcast domains in the network.
  D. There are four collision domains in the network.
  E. There are five collision domains in the network.
  F. There are seven collision domains in the network.
  A. There are two broadcast domains in the network.
  F. There are seven collision domains in the network.

  ---

  Only router can break up broadcast domains so in the exhibit there are 2 broadcast domains: from e0 interface to the left is a broadcast domain and from e1 interface to the right is another broadcast domain ->. Both router and switch can break up collision domains so there is only 1 collision domain on the left of the router (because hub doesn't break up collision domain) and there are 6 collision domains on the right of the router (1 collision domain from e1 interface to the switch + 5 collision domains for 5 PCs in Production) ->.

• Question 219:

  Refer to the exhibit.

  

  The Bigtime router is unable to authenticate to the Littletime router. What is the cause of the problem?

  A. The usernames are incorrectly configured on the two routers.
  B. The passwords do not match on the two routers.
  C. CHAP authentication cannot be used on a serial interface.
  D. The routers cannot be connected from interface S0/0 to interface S0/0.
  E. With CHAP authentication, one router must authenticate to another router. The routers cannot be configured to authenticate to each other.
  B. The passwords do not match on the two routers.

  ---

  With CHAP authentication, the configured passwords must be identical on each router. Here, it is configured as little123 on one side and big123 on the other.

• Question 220:

  Two routers named Atlanta and Brevard are connected via their serial interfaces as illustrated, but they are unable to communicate. The Atlanta router is known to have the correct configuration.

  

  Given the partial configurations, identify the fault on the Brevard router that is causing the lack of connectivity.

  A. incompatible IP address
  B. insufficient bandwidth
  C. incorrect subnet mask
  D. incompatible encapsulation
  E. link reliability too low
  F. IPCP closed
  D. incompatible encapsulation

  ---

  Because Interface Serial 0 of Atlanta Router has 192.168.10.1 And Interface Serial 1 of Router Brevard has 192.168.11.2. These are from different network.