Cisco 200-125 Online Practice Questions and Exam Preparation

Cisco 200-125 Online Questions & Answers

• Question 11:

  What are three values that must be the same within a sequence of packets for Netflow to consider them a network flow? (Choose three.)

  A. source IP address
  B. source MAC address
  C. egress interface
  D. ingress interface
  E. destination IP address
  F. IP next-hop
  A. source IP address
  D. ingress interface
  E. destination IP address

  ---

  Each packet that is forwarded within a router or switch is examined for a set of IP packet attributes. These attributes are the IP packet identity or fingerprint of the packet and determine if the packet is unique or similar to other packets. Traditionally, an IP Flow is based on a set of 5 and up to 7 IP packet attributes. IP Packet attributes used by NetFlow: ?IP source address ?IP destination address ?Source port ?Destination port ?Layer 3 protocol type ?Class of Service ?Router or switch interface All packets with the same source/destination IP address, source/destination ports, protocol interface and class of service are grouped into a flow and then packets and bytes are tallied. This methodology of fingerprinting or determining a flow is scalable because a large amount of network information is condensed into a database of NetFlow information called the NetFlow cache.

  Reference: http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ios- netflow/prod_white_paper0900aecd80406232.html

• Question 12:

  Which functions can be centralized by an SDN controller?

  A. services-plane functions
  B. control-plane functions
  C. data-plane functions
  D. management-plane functions
  B. control-plane functions

• Question 13:

  Which impact of the passive-interface serial0/0 command is true when configuring RIPv2?

  A. The interface begins transmitting RIPvl and RIPv2 routes
  B. The interface stops sending outbound routing updates.
  C. The interface begins ignoring inbound routing updates
  D. The interfile begins accepting RIPvl and RIPv2 routes
  B. The interface stops sending outbound routing updates.

• Question 14:

  Which three functions are major components of a network virtualization architecture? (Choose three.)

  A. network access control
  B. virtual network services
  C. policy enforcement
  D. authentication services
  E. network resilience
  F. path isolation
  A. network access control
  B. virtual network services
  F. path isolation

  ---

  Network virtualization architecture has three main components: + Network access control and segmentation of classes of users: Users are authenticated and either allowed or denied into a logical partition. Users are segmented into

  employees, contractors and consultants, and guests, with respective access to IT assets. This component identifies users who are authorized to access the network and then places them into the appropriate logical partition. + Path isolation:

  Network isolation is preserved across the entire enterprise: from the edge to the campus to the WAN and back again. This component maintains traffic partitioned over a routed infrastructure and transports traffic over and between isolated

  partitions. The function of mapping isolated paths to VLANs and to virtual services is also performed in component.+ Network Services virtualization:

  This component provides access to shared or dedicated network services such as security, quality of service (QoS), and address management (Dynamic Host Configuration Protocol [DHCP] and Domain Name System [DNS]). It also applies

  policy per partition and isolates application environments, if required.

  Reference:

  http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6500-series-switches/white_paper_c11-531522.pdf

• Question 15:

  Which effect of the passive-Interface command on R1 is true?

  

  A. It removes the 172.16.0.0 network from all updates on all interfaces on R1.
  B. It prevents interface Fa0/0 from sending updates.
  C. Interface Fa0/0 operates in RIPv1 mode.
  D. It removes the 172.17.0.0 network from all updates on all interfaces on R1.
  B. It prevents interface Fa0/0 from sending updates.

• Question 16:

  Which statement about the inside interface configuration in a NAT deployment is true?

  A. It is defined globally
  B. It identifies the location of source addresses for outgoing packets to be translated using access or route maps.
  C. It must be configured if static NAT is used
  D. It identifies the public IP address that traffic will use to reach the internet.
  B. It identifies the location of source addresses for outgoing packets to be translated using access or route maps.

  ---

  This module describes how to configure Network Address Translation (NAT) for IP address conservation and how to configure inside and outside source addresses. This module also provides information about the benefits of configuring NAT for IP address conservation. NAT enables private IP internetworks that use nonregistered IP addresses to connect to the Internet. NAT operates on a device, usually connecting two networks, and translates the private (not globally unique) addresses in the internal network into legal addresses before packets are forwarded onto another network. NAT can be configured to advertise to the outside world only one address for the entire network. This ability provides additional security by effectively hiding the entire internal network behind that one address. NAT is also used at the enterprise edge to allow internal users access to the Internet and to allow Internet access to internal devices such as mail servers.

• Question 17:

  How does using the service password-encryption command on a router provide additional security?

  A. by encrypting all passwords passing through the router
  B. by encrypting passwords in the plain text configuration file
  C. by requiring entry of encrypted passwords for access to the device
  D. by configuring an MD5 encrypted key to be used by routing protocols to validate routing exchanges
  E. by automatically suggesting encrypted passwords for use in configuring the router
  B. by encrypting passwords in the plain text configuration file

  ---

  By using this command, all the (current and future) passwords are encrypted. This command is primarily useful for keeping unauthorized individuals from viewing your password in your configuration file

• Question 18:

  Scenario:

  You work for a company that provides managed network services, and of your real estate clients running a small office is experiencing network issues, Troubleshoot the network issues.

  Router R1 connects the main office to internet, and routers R2 and R3 are internal routers

  NAT is enabled on Router R1.

  The routing protocol that is enable between routers R1, R2, and R3 is RIPv2.

  R1 sends default route into RIPv2 for internal routers to forward internet traffic to R1.

  Server1 and Server2 are placed in VLAN 100 and 200 respectively, and dare still running router on stick configuration with router R2.

  You have console access on R1, R2, R3, and L2SW1 devices. Use only show commands to troubleshoot the issues.

  

  

  

  

  

  

  

  

  

  

  

  

  What is the correct statement below after examining the R1 routing table?

  A. Traffic that is destined to 10.10.10.0/24 from R1 LAN network uses static route instead RIPv2 Because the static route AD that is configured is less than the AD of RIPv2
  B. Traffic that is destined to 10.10.10.0/24 from R1 LAN network uses RIPv2 instead static route Because the static route AD that is configured is higher than the AD of RIPv2
  C. Traffic that is destined to 10.10.10.0/24 from R1 LAN network uses static route instead RIPv2 But the traffic is forwarded to the ISP instead of the internal network.
  D. Traffic that is destined to 10.10.10.0/24 from R1 LAN network uses RIPv2 instead static route Because the static route AD that is configured is 255
  B. Traffic that is destined to 10.10.10.0/24 from R1 LAN network uses RIPv2 instead static route Because the static route AD that is configured is higher than the AD of RIPv2

  ---

  Configuration are below for the answer.

  

• Question 19:

  Which two features can mitigate spanning tree issues that are caused by broken fiber cables on interswitch links? (Choose Two)

  A. root guard
  B. DTP
  C. UDLD
  D. BPDU guard
  E. loop guard
  D. BPDU guard
  E. loop guard

• Question 20:

  You have configured a router with an OSPF router ID,but its IP address still reflects the physical interface. Which action can you take to correct the problem in the least disruptive way?

  A. Reload the OSPF process
  B. Reload the router
  C. Save the router configuration
  D. Specify a loopback address
  D. Specify a loopback address