Cisco 200-120 Online Practice Questions and Exam Preparation

Cisco 200-120 Online Questions & Answers

• Question 41:

  Which layer in the OSI reference model is responsible for determining the availability of the receiving program and checking to see if enough resources exist for that communication?

  A. transport
  B. network
  C. presentation
  D. session
  E. application
  E. application

  ---

  This question is to examine the OSI reference model.

  The Application layer is responsible for identifying and establishing the availability of the intended communication partner and determining whether sufficient resources for the intended communication exist.

• Question 42:

  What are the benefits of using Netflow? (Choose three.)

  A. Network, Application and User Monitoring
  B. Network Planning
  C. Security Analysis
  D. Accounting/Billing
  A. Network, Application and User Monitoring
  C. Security Analysis
  D. Accounting/Billing

  ---

  NetFlow traditionally enables several key customer applications including:

  +

  Network Monitoring ?NetFlow data enables extensive near real time network monitoring capabilities. Flow-based analysis techniques may be utilized to visualize traffic patterns associated with individual routers and switches as well as on a network-wide basis (providing aggregate traffic or application based views) to provide proactive problem detection, efficient troubleshooting, and rapid problem resolution.

  +

  Application Monitoring and Profiling ?NetFlow data enables network managers to gain a detailed, time-based, view of application usage over the network. This information is used to plan, understand new services, and allocate network and application resources (e.g. Web server sizing and VoIP deployment) to responsively meet customer demands.

  +

  User Monitoring and Profiling ?NetFlow data enables network engineers to gain detailed understanding of customer/user utilization of network and application resources. This information may then be utilized to efficiently plan and allocate access, backbone and application resources as well as to detect and resolve potential security and policy violations.

  +

  Network Planning ?NetFlow can be used to capture data over a long period of time producing the opportunity to track and anticipate network growth and plan upgrades to increase the number of routing devices, ports, or higher- bandwidth interfaces. NetFlow services data optimizes network planning including peering, backbone upgrade planning, and routing policy planning. NetFlow helps to minimize the total cost of network operations while maximizing network performance, capacity, and reliability. NetFlow detects unwanted WAN traffic, validates bandwidth and Quality of Service (QOS) and allows the analysis of new network applications. NetFlow will give you valuable information to reduce the cost of operating your network.

  +

  Security Analysis ?NetFlow identifies and classifies DDOS attacks, viruses and worms in real-time. Changes in network behavior indicate anomalies that are clearly demonstrated in NetFlow data. The data is also a valuable forensic tool to understand and replay the history of security incidents.

  +

  Accounting/Billing ?NetFlow data provides fine-grained metering (e.g. flow data includes details such as IP addresses, packet and byte counts, timestamps, type-of-service and application ports, etc.) for highly flexible and detailed resource utilization accounting. Service providers may utilize the information for billing based on time-of-day, bandwidth usage, application usage, quality of service, etc. Enterprise customers may utilize the information for departmental charge-back or cost allocation for resource utilization.

• Question 43:

  What are three advantages of VLANs? (Choose three.)

  A. VLANs establish broadcast domains in switched networks.
  B. VLANs utilize packet filtering to enhance network security.
  C. VLANs provide a method of conserving IP addresses in large networks.
  D. VLANs provide a low-latency internetworking alternative to routed networks.
  E. VLANs allow access to network services based on department, not physical location.
  F. VLANs can greatly simplify adding, moving, or changing hosts on the network.
  A. VLANs establish broadcast domains in switched networks.
  E. VLANs allow access to network services based on department, not physical location.
  F. VLANs can greatly simplify adding, moving, or changing hosts on the network.

  ---

  VLAN technology is often used in practice, because it can better control layer2 broadcast to improve network security. This makes network more flexible and scalable. Packet filtering is a function of firewall instead of VLAN.

• Question 44:

  Refer to the exhibit.

  

  What statement is true of the configuration for this network?

  A. The configuration that is shown provides inadequate outside address space for translation of the number of inside addresses that are supported.
  B. Because of the addressing on interface FastEthernet0/1, the Serial0/0 interface address will not support the NAT configuration as shown.
  C. The number 1 referred to in the ip nat inside source command references access-list number 1.
  D. ExternalRouter must be configured with static routes to networks 172.16.1.0/24 and 172.16.2.0/24.
  C. The number 1 referred to in the ip nat inside source command references access-list number 1.

  ---

  The "list 1 refers to the access-list number 1.

• Question 45:

  Which set of commands is recommended to prevent the use of a hub in the access layer?

  A. switch(config-if)#switchport mode trunk switch(config-if)#switchport port-security maximum 1
  B. switch(config-if)#switchport mode trunk switch(config-if)#switchport port-security mac-address 1
  C. switch(config-if)#switchport mode access switch(config-if)#switchport port-security maximum 1
  D. switch(config-if)#switchport mode access switch(config-if)#switchport port-security mac-address 1
  C. switch(config-if)#switchport mode access switch(config-if)#switchport port-security maximum 1

  ---

  This question is to examine the layer 2 security configuration.

  In order to satisfy the requirements of this question, you should perform the following configurations in the interface mode:

  First, configure the interface mode as the access mode

  Second, enable the port security and set the maximum number of connections to 1.

• Question 46:

  DRAG DROP

  Drag each category on the left to its corresponding router output line on the right. Each router output line is the result of a show ip interface command. Not all categories are used.

  Select and Place:

  

  

  ---

  A simple way to find out which layer is having problem is to remember this rule: “the first statement is for Layer 1, the last statement is for Layer 2 and if Layer 1 is down then surely Layer 2 will be down too”, so you have to check Layer 1 before checking Layer 2. For example, from the output “Serial0/1 is up, line protocol is down” we know that it is a layer 2 problem because the first statement (Serial0/1 is up) is good while the last statement (line protocol is down) is bad. For the statement “Serial0/1 is down, line protocol is down”, both layers are down so the problem belongs to Layer 1.

  There is only one special case with the statement “…. is administrator down, line protocol is down”. In this case, we know that the port is currently disabled and shut down by the administrators.

• Question 47:

  What is the purpose of Inverse ARP?

  A. to map a known IP address to a MAC address
  B. to map a known DLCI to a MAC address
  C. to map a known MAC address to an IP address
  D. to map a known DLCI to an IP address
  E. to map a known IP address to a SPID
  F. to map a known SPID to a MAC address
  D. to map a known DLCI to an IP address

  ---

  Dynamic address mapping relies on the Frame Relay Inverse Address Resolution Protocol (Inverse ARP), defined by RFC 1293, to resolve a next hop network protocol (IP) address to a local DLCI value. The Frame Relay router sends out Inverse ARP requests on its Frame Relay PVC to discover the protocol address of the remote device connected to the Frame Relay network. The responses to the Inverse ARP requests are used to populate an address-to-DLCI mapping table on the Frame Relay router or access server. The router builds and maintains this address-to-DLCI mapping table, which contains all resolved Inverse ARP requests, including both dynamic and static mapping entries.

• Question 48:

  Refer to the exhibit.

  

  Which of these statements correctly describes the state of the switch once the boot process has been completed?

  A. As FastEthernet0/12 will be the last to come up, it will be blocked by STP.
  B. Remote access management of this switch will not be possible without configuration change.
  C. More VLANs will need to be created for this switch.
  D. The switch will need a different IOS code in order to support VLANs and STP.
  B. Remote access management of this switch will not be possible without configuration change.

  ---

  Notice the line, which says "Interface VLAN1, changed state to administratively down". This shows that VLAN1 is shut down. Hence remote management of this switch is not possible unless VLAN1 is brought back up. Since VLAN1 is the only interface shown in the output, you have to assume that no other VLAN interface has been configured with an IP Address.

  Incorrect Answers:

  A. Whether a port is blocked or not by STP does not depend on the order in which the port became active.

  C. Whether or not more VLANs are needed is not clear form the output.

  D. 12.2(25)SEE2 LANBASE IOS code is capable of handling VLANs and STP. In general any 12.2 code can handle these features.

• Question 49:

  On a corporate network, hosts on the same VLAN can communicate with each other, but they are unable to communicate with hosts on different VLANs. What is needed to allow communication between the VLANs?

  A. a router with subinterfaces configured on the physical interface that is connected to the switch
  B. a router with an IP address on the physical interface connected to the switch
  C. a switch with an access link that is configured between the switches
  D. a switch with a trunk link that is configured between the switches
  A. a router with subinterfaces configured on the physical interface that is connected to the switch

  ---

  Different VLANs can't communicate with each other, they can communicate with the help of Layer3 router. Hence, it is needed to connect a router to a switch, then make the sub-interface on the router to connect to the switch, establishing Trunking links to achieve communications of devices which belong to different VLANs.

  When using VLANs in networks that have multiple interconnected switches, you need to use VLAN trunking between the switches. With VLAN trunking, the switches tag each frame sent between switches so that the receiving switch knows to what VLAN the frame belongs. End user devices connect to switch ports that provide simple connectivity to a single VLAN each. The attached devices are unaware of any VLAN structure.

  By default, only hosts that are members of the same VLAN can communicate. To change this and allow inter-VLAN communication, you need a router or a layer 3 switch.

  Here is the example of configuring the router for inter-vlan communication RouterA(config)#int f0/0.1 RouterA(config-subif)#encapsulation ? dot1Q IEEE 802.1Q Virtual LAN RouterA(config-subif)#encapsulation dot1Q or isl VLAN ID RouterA(config-subif)# ip address x.x.x.x y.y.y.y

• Question 50:

  If the primary root bridge experiences a power loss, which switch takes over?

  A. switch 0004.9A1A.C182
  B. switch 00E0.F90B.6BE3
  C. switch 00E0.F726.3DC6
  D. switch 0040.0BC0.90C5
  A. switch 0004.9A1A.C182