Cisco 200-125 Online Practice Questions and Exam Preparation

Cisco 200-125 Online Questions & Answers

• Question 161:

  which configuration command can u apply to a HSRP router so that its local interface

  becomes active if all other routers in the group fail?

  A. no additional config is required
  B. standby 1 track ethernet
  C. standby 1 preempt
  D. standby 1 priority 250
  A. no additional config is required

• Question 162:

  Which technology allows a large number of private IP addresses to be represented by a smaller number of public IP addresses?

  A. NAT
  B. NTP
  C. RFC 1631
  D. RFC 1918
  A. NAT

• Question 163:

  Which two VLAN ID indicate a default VLAN?(choose two)

  B. 1
  C. 1005
  D. 1006
  E. 4096
  B. 1
  C. 1005

• Question 164:

  

  The traffic from Branch2 to the main office is using the secondary path instead of the primary path connected to R2. Which cause of the issue is true?

  A. The network 192.168.11.0/30 was not advertised into EIGRP on Branch2.
  B. The IP address was misconfigured between the Branch2 and R2 interfaces.
  C. EIGRP packets were blocked by the inbound ACL on branch2.`
  D. The primary path has more link delay configured then secondary path which causes EIGRP to choose the secondary path.
  C. EIGRP packets were blocked by the inbound ACL on branch2.`

• Question 165:

  In GLBP, which router will respond to client ARP requests?

  A. The active virtual gateway will reply with one of four possible virtual MAC addresses.
  B. All GLBP member routers will reply in round-robin fashion.
  C. The active virtual gateway will reply with its own hardware MAC address.
  D. The GLBP member routers will reply with one of four possible burned in hardware addresses.
  A. The active virtual gateway will reply with one of four possible virtual MAC addresses.

  ---

  One disadvantage of HSRP and VRRP is that only one router is in use, other routers must wait for the primary to fail because they can be used. However, Gateway Load Balancing Protocol (GLBP) can use of up to four routers simultaneously. In GLBP, there is still only one virtual IP address but each router has a different virtual MAC address. First a GLBP group must elect an Active Virtual Gateway (AVG). The AVG is responsible for replying ARP requests from hosts/clients. It replies with different virtual MAC addresses that correspond to different routers (known as Active Virtual Forwarders ?AVFs) so that clients can send traffic to different routers in that GLBP group (load sharing).

• Question 166:

  After you deploy a new WLAN controller on your network,which two additional tasks should you consider ? (choose two)

  A. deploy load balancers
  B. configure additional vlans
  C. configure multiple VRRP groups
  D. deploy POE switches
  E. configure additional security policies
  A. deploy load balancers
  E. configure additional security policies

• Question 167:

  Which two statements about the tunnel mode ipv6ip command are true? (Choose two.)

  A. It enables the transmission of IPv6 packets within the configured tunnel.
  B. It specifies IPv4 as the encapsulation protocol.
  C. It specifies IPv6 as the encapsulation protocol.
  D. It specifies IPv6 as the transport protocol.
  E. It specifies that the tunnel is a Teredo tunnel.
  A. It enables the transmission of IPv6 packets within the configured tunnel.
  B. It specifies IPv4 as the encapsulation protocol.

• Question 168:

  Refer to the exhibit.

  

  Which statement is true?

  A. The Fa0/11 role confirms that SwitchA is the root bridge for VLAN 20.
  B. VLAN 20 is running the Per VLAN Spanning Tree Protocol.
  C. The MAC address of the root bridge is 0017.596d.1580.
  D. SwitchA is not the root bridge, because not all of the interface roles are designated.
  D. SwitchA is not the root bridge, because not all of the interface roles are designated.

  ---

  Only non-root bridge can have root port. Fa0/11 is the root port so we can confirm this switch is not the root bridge ->.

  From the output we learn this switch is running Rapid STP, not PVST ->. 0017.596d.1580 is the MAC address of this switch, not of the root bridge. The MAC address of the root bridge is 0017.596d.2a00 ->. All of the interface roles of the root

  bridge are designated. SwitchA has one Root port and 1 Alternative port so it is not the root bridge.

• Question 169:

  Which command can you enter to configure a local username with an encrypted password and EXEC mode user privileges?

  A. Router(config)#username jdone privilege 1 password 7 08314D5D1A48
  B. Router(config)#username jdone privilege 1 password 7 PASSWORD1
  C. Router(config)#username jdone privilege 15 password 0 08314D5D1A48
  D. Router(config)#username jdone privilege 15 password 0 PASSWORD1
  A. Router(config)#username jdone privilege 1 password 7 08314D5D1A48

• Question 170:

  A network administrator needs to configure port security on a switch. Which two statements are true? (Choose two.)

  A. The network administrator can apply port security to dynamic access ports.
  B. The network administrator can apply port security to EtherChannels.
  C. When dynamic MAC address learning is enabled on an interface, the switch can learn new addresses, up to the maximum defined.
  D. The sticky learning feature allows the addition of dynamically learned addresses to the running configuration.
  E. The network administrator can configure static secure or sticky secure MAC addresses in the voice VLAN.
  C. When dynamic MAC address learning is enabled on an interface, the switch can learn new addresses, up to the maximum defined.
  D. The sticky learning feature allows the addition of dynamically learned addresses to the running configuration.

  ---

  Follow these guidelines when configuring port security:

  +

  Port security can only be configured on static access ports, trunk ports, or 802.1Q tunnel ports.

  +

  A secure port cannot be a dynamic access port.

  +

  A secure port cannot be a destination port for Switched Port Analyzer (SPAN). + A secure port cannot belong to a Fast EtherChannel or Gigabit EtherChannel port group. + You cannot configure static secure or sticky secure MAC addresses on a voice VLAN. + When you enable port security on an interface that is also configured with a voice VLAN, you must set the maximum allowed secure addresses on the port to at least two. + If any type of port security is enabled on the access VLAN, dynamic port security is automatically enabled on the voice VLAN.

  +

  When a voice VLAN is configured on a secure port that is also configured as a sticky secure port, all addresses seen on the voice VLAN are learned as dynamic secure addresses, and all addresses seen on the access VLAN (to which the port belongs) are learned as sticky secure addresses.

  +

  The switch does not support port security aging of sticky secure MAC addresses. + The protect and restrict options cannot be simultaneously enabled on an interface.

  (Reference:

  http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/software/release/12.1_19_ea1 /configuration/guide/swtrafc.html)