Cisco 200-125 Online Practice Questions and Exam Preparation

Cisco 200-125 Online Questions & Answers

• Question 1151:

  Refer to the exhibit.

  

  What is the result of setting the no login command?

  A. Telnet access is denied.
  B. Telnet access requires a new password at the first login.
  C. Telnet access requires a new password.
  D. no password is required for telnet access.
  D. no password is required for telnet access.

• Question 1152:

  Which two commands can you enter to verify that a configured NetFlow data export is operational? (Choose two.)

  A. show ip flow export
  B. show ip cache flow
  C. ip flow ingress
  D. ip flow egress
  E. interface ethernet 0/0
  F. ip flow-export destination
  A. show ip flow export
  B. show ip cache flow

• Question 1153:

  Which two protocols can detect native vlan mismatch errors?

  A. STP
  B. Cisco Discovery Protocol
  C. VTP
  D. DTP
  E. PAgP
  B. Cisco Discovery Protocol
  C. VTP

• Question 1154:

  What are the benefits of using Netflow? (Choose three.)

  A. Network, Application and User Monitoring
  B. Network Planning
  C. Security Analysis
  D. Accounting/Billing
  A. Network, Application and User Monitoring
  C. Security Analysis
  D. Accounting/Billing

  ---

  NetFlow traditionally enables several key customer applications including:

  +

  Network Monitoring ?NetFlow data enables extensive near real time network monitoring capabilities. Flow-based analysis techniques may be utilized to visualize traffic patterns associated with individual routers and switches as well as on a network-wide basis (providing aggregate traffic or application based views) to provide proactive problem detection, efficient troubleshooting, and rapid problem resolution.

  +

  Application Monitoring and Profiling ?NetFlow data enables network managers to gain a detailed, time-based, view of application usage over the network. This information is used to plan, understand new services, and allocate network and application resources (e.g. Web server sizing and VoIP deployment) to responsively meet customer demands.

  +

  User Monitoring and Profiling ?NetFlow data enables network engineers to gain detailed understanding of customer/user utilization of network and application resources. This information may then be utilized to efficiently plan and allocate access, backbone and application resources as well as to detect and resolve potential security and policy violations.

  +

  Network Planning ?NetFlow can be used to capture data over a long period of time producing the opportunity to track and anticipate network growth and plan upgrades to increase the number of routing devices, ports, or higher- bandwidth interfaces. NetFlow services data optimizes network planning including peering, backbone upgrade planning, and routing policy planning. NetFlow helps to minimize the total cost of network operations while maximizing network performance, capacity, and reliability. NetFlow detects unwanted WAN traffic, validates bandwidth and Quality of Service (QOS) and allows the analysis of new network applications. NetFlow will give you valuable information to reduce the cost of operating your network.

  +

  Security Analysis ?NetFlow identifies and classifies DDOS attacks, viruses and worms in real-time. Changes in network behavior indicate anomalies that are clearly demonstrated in NetFlow data. The data is also a valuable forensic tool to understand and replay the history of security incidents.

  +

  Accounting/Billing ?NetFlow data provides fine-grained metering (e.g. flow data includes details such as IP addresses, packet and byte counts, timestamps, type-of-service and application ports, etc.) for highly flexible and detailed resource utilization accounting. Service providers may utilize the information for billing based on time-of-day, bandwidth usage, application usage, quality of service, etc. Enterprise customers may utilize the information for departmental charge-back or cost allocation for resource utilization.

• Question 1155:

  Which VTP mode prevents you from making changes to vlans?

  A. Server.
  B. Client.
  C. Transparent.
  D. Off
  B. Client.

  ---

  VTP Client

  ?VTP clients function the same way as VTP servers, but you cannot create, change, or delete VLANs on a

  VTP client.

  ?A VTP client only stores the VLAN information for the entire domain while the switch is on.

  ?A switch reset deletes the VLAN information.

  ?You must configure VTP client mode on a switch.

• Question 1156:

  Refer to Exhibit.

  

  If Computer A is sending traffic to computer B, which option is the source ip address when a packet leaves R1 on interface F0/1?

  A. IP address of the R2 interface F0/1
  B. Ip address of computer B C. Ip address of R1 interface F0/1
  D. Ip address of Computer A
  D. Ip address of Computer A

• Question 1157:

  A network administrator has configured access list 173 to prevent Telnet and ICMP traffic from reaching a server with the address of 192.168.13.26. Which commands can the administrator issue to verify that the access list is working properly? (Choose three.)

  A. Router# ping 192.168.13.26
  B. Router# debug access-list 173
  C. Router# show open ports 192.168.13.26
  D. Router# show access-lists
  E. Router# show ip interface
  A. Router# ping 192.168.13.26
  D. Router# show access-lists
  E. Router# show ip interface

• Question 1158:

  What is the first step you perform to configure an SNMPv3 user?

  A. Configure server traps.
  B. Configure the server group.
  C. Configure the server host.
  D. Configure the remote engine ID.
  B. Configure the server group.

  ---

  The first task in configuring SNMPv3 is to define a view. To simplify things, we'll create a view that allows access to the entire internet subtree:

  router(config)#snmp-server view readview internet included This command creates a view called readview. If you want to limit the view to the system tree, for example, replace internet with system. The included keyword states that the

  specified tree should be included in the view; use excluded if you wanted to exclude a certain subtree.

  Next, create a group that uses the new view. The following command creates a group called readonly ; v3 means that SNMPv3 should be used. The auth keyword specifies that the entity should authenticate packets without encrypting them;

  read readview says that the view named readview should be used whenever members of the readonly group access the router.

  router(config)#snmp-server group readonly v3 auth read readview

• Question 1159:

  On a corporate network, hosts on the same VLAN can communicate with each other, but they are unable to communicate with hosts on different VLANs. What is needed to allow communication between the VLANs?

  A. a router with subinterfaces configured on the physical interface that is connected to the switch
  B. a router with an IP address on the physical interface connected to the switch
  C. a switch with an access link that is configured between the switches
  D. a switch with a trunk link that is configured between the switches
  A. a router with subinterfaces configured on the physical interface that is connected to the switch

  ---

  Different VLANs can't communicate with each other, they can communicate with the help of Layer3 router. Hence, it is needed to connect a router to a switch, then make the sub- interface on the router to connect to the switch, establishing Trunking links to achieve communications of devices which belong to different VLANs.

  When using VLANs in networks that have multiple interconnected switches, you need to use VLAN trunking between the switches. With VLAN trunking, the switches tag each frame sent between switches so that the receiving switch knows to what VLAN the frame belongs. End user devices connect to switch ports that provide simple connectivity to a single VLAN each. The attached devices are unaware of any VLAN structure.

  By default, only hosts that are members of the same VLAN can communicate. To change this and allow inter-VLAN communication, you need a router or a layer 3 switch.

  Here is the example of configuring the router for inter-vlan communication RouterA(config)#int f0/0.1 RouterA(config-subif)#encapsulation ? dot1Q IEEE 802.1Q Virtual LAN RouterA(config-subif)#encapsulation dot1Q or isl VLAN ID RouterA(config-subif)# ip address x.x.x.x y.y.y.y

• Question 1160:

  When you are troubleshooting an ACL issue on a router, which command would you use to verify which interfaces are affected by the ACL?

  A. show ip access-lists
  B. show access-lists
  C. show interface
  D. show ip interface
  E. list ip interface
  D. show ip interface

  ---

  Incorrect answer:

  show ip access-lists does not show interfaces affected by an ACL.