Cisco 200-120 Online Practice Questions and Exam Preparation

Cisco 200-120 Online Questions & Answers

• Question 271:

  Which two types of NAT addresses are used in a Cisco NAT device? (Choose two.)

  A. inside local
  B. inside global
  C. inside private
  D. outside private
  E. external global
  F. external local
  A. inside local
  B. inside global

• Question 272:

  Which three are valid modes for a switch port used as a VLAN trunk? (Choose three.)

  A. transparent
  B. auto
  C. on
  D. desirable
  E. blocking
  F. forwarding
  B. auto
  C. on
  D. desirable

  ---

  These are the different types of trunk modes:

  ON: This mode puts the port into permanent trunk mode and negotiates to convert the link into a trunk link. The port becomes a trunk port even if the adjacent port does not agree to the change.

  

  OFF: This mode puts the port into permanent non-trunk mode and negotiates to convert the link into a non-trunk link. The port becomes a non-trunk port even if the adjacent port does not agree to the change.

  

  Desirable: This mode causes the port to actively attempt to convert the link into a trunk link. The port becomes a trunk port if the adjacent port is set to on, desirable, or auto mode.

  

  Auto: This mode enables the port to convert the link into a trunk link. The port becomes a trunk port if the adjacent port is set to on or desirable mode. This is the default mode for Fast and Gigabit Ethernet ports.

  

  Nonegotiate: This mode puts the port into permanent trunk mode, but does not allow the port to generate Dynamic Trunking Protocol (DTP) frames. The adjacent port must be configured manually as a trunk port to establish a trunk link.

  

• Question 273:

  What authentication type is used by SNMPv2?

  A. HMAC-MD5
  B. HMAC-SHA
  C. CBC-DES
  D. community strings
  D. community strings

  ---

  SNMP Versions

  Cisco IOS software supports the following versions of SNMP:

  SNMPv1 -- The Simple Network Management Protocol: A Full Internet Standard, defined in RFC 1157. (RFC 1157 replaces the earlier versions that were published as RFC 1067 and RFC 1098.) Security is based on community strings.

  

  SNMPv2c -- The community-string based Administrative Framework for SNMPv2. SNMPv2c (the "c" stands for "community") is an Experimental Internet Protocol defined in RFC 1901, RFC 1905, and RFC 1906. SNMPv2c is an update of

  

  the protocol operations and data types of SNMPv2p (SNMPv2 Classic), and uses the community-based security model of SNMPv1.

  SNMPv3 -- Version 3 of SNMP. SNMPv3 is an interoperable standards-based protocol defined in RFCs 2273 to 2275. SNMPv3 provides secure access to devices by a combination of authenticating and encrypting packets over the

  

  network.

  

  Reference: http://www.cisco.com/c/en/us/td/docs/ios/12_2/configfun/configuration/guide/ffun_c/fcf014.html

• Question 274:

  Refer to the exhibit.

  

  Host A pings interface S0/0 on router 3. What is the TTL value for that ping?

  A. 252
  B. 253
  C. 254
  D. 255
  B. 253

  ---

  From the CCNA ICND2 Exam book: "Routers decrement the TTL by 1 every time they forward a packet; if a router decrements the TTL to 0, it throws away the packet. This prevents packets from rotating forever." I want to make it clear that before the router forwards a packet, the TTL is still remain the same. For example in the topology above, pings to S0/1 and S0/0 of Router 2 have the same TTL. The picture below shows TTL values for each interface of each router and for Host B. Notice that Host A initializes ICMP packet with a TTL of 255:

  

• Question 275:

  Which IPv6 address is the equivalent of the IPv4 interface loopback address 127.0.0.1?

  A. ::1
  B. ::
  C. 2000::/3
  D. 0::/10
  A. ::1

  ---

  In IPv6 the loopback address is written as, ::1

  This is a 128bit number, with the first 127 bits being '0' and the 128th bit being '1'. It's just a single address, so could also be written as ::1/128.

• Question 276:

  Refer to the topology shown in the exhibit.

  

  Which three ports will be STP designated ports if all the links are operating at the same bandwidth? (Choose three.)

  A. Switch A - Fa0/0
  B. Switch A - Fa0/1
  C. Switch B - Fa0/0
  D. Switch B - Fa0/1
  E. Switch C - Fa0/0
  F. Switch C - Fa0/1
  B. Switch A - Fa0/1
  C. Switch B - Fa0/0
  D. Switch B - Fa0/1

  ---

  This question is to check the spanning tree election problem.

  1.

  First, select the root bridge, which can be accomplished by comparing the bridge ID, the smallest will be selected. Bridge-id= bridge priority + MAC address. The three switches in the figure all have the default priority, so we should compare the MAC address, it is easy to find that SwitchB is the root bridge.

  2.

  Select the root port on the non-root bridge, which can be completed through comparing root path cost. The smallest will be selected as the root port.

  3.

  Next, select the Designated Port. First, compare the path cost, if the costs happen to be the same, then compare the BID, still the smallest will be selected. Each link has a DP. Based on the exhibit above, we can find DP on each link. The DP on the link between SwitchA and SwitchC is SwitchA'Fa0/1, because it has the smallest MAC address.

• Question 277:

  A network administrator is verifying the configuration of a newly installed host by establishing an FTP connection to a remote server. What is the highest layer of the protocol stack that the network administrator is using for this operation?

  A. application
  B. presentation
  C. session
  D. transport
  E. internet
  F. data link
  A. application

  ---

  FTP belongs to Application layer and it is also the highest layer of the OSI model.

• Question 278:

  A network administrator needs to configure port security on a switch. Which two statements are true? (Choose two.)

  A. The network administrator can apply port security to dynamic access ports.
  B. The network administrator can apply port security to EtherChannels.
  C. When dynamic MAC address learning is enabled on an interface, the switch can learn new addresses, up to the maximum defined.
  D. The sticky learning feature allows the addition of dynamically learned addresses to the running configuration.
  E. The network administrator can configure static secure or sticky secure MAC addresses in the voice VLAN.
  C. When dynamic MAC address learning is enabled on an interface, the switch can learn new addresses, up to the maximum defined.
  D. The sticky learning feature allows the addition of dynamically learned addresses to the running configuration.

  ---

  Follow these guidelines when configuring port security:

  +

  Port security can only be configured on static access ports, trunk ports, or 802.1Q tunnel ports.

  +

  A secure port cannot be a dynamic access port.

  +

  A secure port cannot be a destination port for Switched Port Analyzer (SPAN).

  +

  A secure port cannot belong to a Fast EtherChannel or Gigabit EtherChannel port group.

  +

  You cannot configure static secure or sticky secure MAC addresses on a voice VLAN.

  +

  When you enable port security on an interface that is also configured with a voice VLAN, you must set the maximum allowed secure addresses on the port to at least two.

  +

  If any type of port security is enabled on the access VLAN, dynamic port security is automatically enabled on the voice VLAN.

  +

  When a voice VLAN is configured on a secure port that is also configured as a sticky secure port, all addresses seen on the voice VLAN are learned as dynamic secure addresses, and all addresses seen on the access VLAN (to which the port belongs) are learned as sticky secure addresses.

  +

  The switch does not support port security aging of sticky secure MAC addresses.

  +

  The protect and restrict options cannot be simultaneously enabled on an interface.

  (Reference: http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/software/release/12.1_19_ea1/configuration/guide/swtrafc.html)

• Question 279:

  Refer to the graphic.

  

  R1 is unable to establish an OSPF neighbor relationship with R3. What are possible reasons for this problem? (Choose two.)

  A. All of the routers need to be configured for backbone Area 1.
  B. R1 and R2 are the DR and BDR, so OSPF will not establish neighbor adjacency with R3.
  C. A static route has been configured from R1 to R3 and prevents the neighbor adjacency from being established.
  D. The hello and dead interval timers are not set to the same values on R1 and R3.
  E. EIGRP is also configured on these routers with a lower administrative distance.
  F. R1 and R3 are configured in different areas.
  D. The hello and dead interval timers are not set to the same values on R1 and R3.
  F. R1 and R3 are configured in different areas.

  ---

  This question is to examine the conditions for OSPF to create neighborhood.

  So as to make the two routers become neighbors, each router must be matched with the following items:

  1.

  The area ID and its types;

  2.

  Hello and failure time interval timer;

  3.

  OSPF Password (Optional).

• Question 280:

  Which command can you enter to display the hits counter for NAT traffic?

  A. show ip nat statistics
  B. debug ip nat
  C. show ip debug nat
  D. clear ip nat statistics
  A. show ip nat statistics