Cisco 200-125 Online Practice Questions and Exam Preparation

Cisco 200-125 Online Questions & Answers

• Question 31:

  which two TCP messages use a 32-bit number as part of the initial TCP handshake? (choose two)

  A. FIN
  B. RST
  C. SYN
  D. SYN-ACK
  E. ACK
  C. SYN
  D. SYN-ACK

• Question 32:

  Which path does a router choose when it receives a packet with multiple possible paths to the destination over different routing?

  A. the path with the lowest administrative distance
  B. the path with the lowest metric
  C. the path with both the lowest administrative distance and the highest metric
  D. the path with both the lowest administrative distance and lowest metric
  A. the path with the lowest administrative distance

• Question 33:

  A corporation wants to add security to its network. The requirements are:

  1.

  Host C should be able to use a web browser (HTTP) to access the Finance Web Server.

  2.

  Other types of access from host C to the Finance Web Server should be blocked.

  3.

  All access from hosts in the Core or local LAN to the Finance Web Server should be blocked.

  4.

  All hosts in the Core and on local LAN should be able to access the Public Web Server.

  You have been tasked to create and apply a numbered access list to a single outbound interface. This access list can contain no more than three statements that meet these requirements.

  Access to the router CLI can be gained by clicking on the appropriate host.

  1.

  All passwords have been temporarily set to “cisco”.

  2.

  The Core connection uses an IP address of 198.18.209.65.

  3.

  The computers in the Hosts LAN have been assigned addresses of 192.168.78.1 – 192.168.78.254.

  4.

  host A 192.168.78.1

  5.

  host B 192.168.78.2

  6.

  host C 192.168.78.3

  7.

  host D 192.168.78.4

  8.

  The Finance Web Server has been assigned an address of 172.22.146.17.

  9.

  The Public Web Server in the Server LAN has been assigned an address of 172.22.146.18.

  

  

  Corp1(config)#access-list 100 permit tcp host 192.168.125.3 host 172.22.109.17 eq 80

  Correct Answer. Check the answer below
  Check the answer below

  ---

  We should create an access-list and apply it to the interface that is connected to the Server LAN because it can filter out traffic from both S2 and Core networks. To see which interface this is, use the “show ip int brief” command:

  

  From this, we know that the servers are located on the fa0/1 interface, so we will place our numbered access list here in the outbound direction.

  Corp1#configure terminal

  Our access-list needs to allow host C – 192.168125.3 to the Finance Web Server 172.22.109.17 via HTTP (port 80), so our first line is this:

  Then, our next two instructions are these:

  Other types of access from host C to the Finance Web Server should be blocked.

  All access from hosts in the Core or local LAN to the Finance Web Server should be blocked.

  This can be accomplished with one command (which we need to do as our ACL needs to be no more than 3 lines long), blocking all other access to the finance web server:

  Corp1(config)#access-list 100 deny ip any host 172.22.109.17

  Our last instruction is to allow all hosts in the Core and on the local LAN access to the Public Web Server (172.22.109.18)

  Corp1(config)#access-list 100 permit ip host 172.22.109.18 any

  Finally, apply this access-list to Fa0/1 interface (outbound direction)

  Corp1(config)#interface fa0/1Corp1(config-if)#ip access-group 100 out

  Notice: We have to apply the access-list to Fa0/1 interface (not Fa0/0 interface) so that the access-list can filter traffic coming from both the LAN and the Core networks.

  To verify, just click on host C to open its web browser. In the address box type http://172.22.109.17 to check if you are allowed to access Finance Web Server or not. If your configuration is correct then you can access it.

  Click on other hosts (A, B and D) and check to make sure you can't access Finance Web Server from these hosts. Then, repeat to make sure they can reach the public server at 172.22.109.18. Finally, save the configuration

  Corp1(config-if)#endCorp1#copy running-config startup-config

• Question 34:

  How many host addresses are available on the network 192.168.1.0 subnet 255.255.255.240 ?

  A. 6
  B. 8
  C. 14
  D. 16
  C. 14

• Question 35:

  When EIGRP for IPv6 is configured, what is the effect of the distance 100 150 command?

  A. It adds 100 to the external administrative distance and adds 150 to the internal administrative distance
  B. It sets the internal EIGRP administrative distance to 100 and the external EIGRP administrative distance to 150
  C. It sets the external EIGRP administrative distance to 100 and the internal EIGRP administrative distance to 150 E.
  D. It adds 10O to the internal administrative distance and adds 150 to the external administrative distance
  B. It sets the internal EIGRP administrative distance to 100 and the external EIGRP administrative distance to 150

• Question 36:

  Drag and drop

  Select and Place:

  

  

• Question 37:

  Which statement about VLAN configuration is true?

  A. The switch must be in VTP server or transparent mode before you can configure a VLAN
  B. The switch must be in config-vlan mode before you configure an extended VLAN
  C. Dynamic inter-VLAN routing is supported on VLAN2 through VLAN 4064
  D. A switch in VTP transparent mode save the VLAN databases to the running configuration only
  A. The switch must be in VTP server or transparent mode before you can configure a VLAN

• Question 38:

  

  R1# show running-config

  interface Loopback0 description ***Loopback*** ip address 192.168.1.1 255.255.255.255 ip ospf 1 area 0

  ! interface Ethernet0/0 description **Connected to R1-LAN** ip address 10.10.110.1 255.255.255.0 ip ospf 1 area 0 ! interface Ethernet0/1 description **Connected to L2SW** ip address 10.10.230.1 255.255.255.0 ip ospf hello-interval 25 ip ospf 1 area 0 ! router ospf 1 log-adjacency-changes

  

  R2# show running-config R2 ! interface Loopback0 description **Loopback** ip address 192.168.2.2 255.255.255.255 ip ospf 2 area 0 ! interface Ethernet0/0 description **Connected to R2-LAN** ip address 10.10.120.1 255.255.255.0 ip ospf 2 area 0 ! interface Ethernet0/1 description **Connected to L2SW** ip address 10.10.230.2 255.255.255.0 ip ospf 2 area 0 ! router ospf 2 log-adjacency-changes

  

  R3# show running-config R3 username R6 password CISCO36 ! interface Loopback0 description **Loopback** ip address 192.168.3.3 255.255.255.255 ip ospf 3 area 0 ! interface Ethernet0/0 description **Connected to L2SW** ip address 10.10.230.3 255.255.255.0 ip ospf 3 area 0

  ! interface Serial1/0 description **Connected to R4-Branch1 office**

  ip address 10.10.240.1 255.255.255.252

  encapsulation ppp ip ospf 3 area 0 ! interface Serial1/1 description **Connected to R5-Branch2 office** ip address 10.10.240.5 255.255.255.252 encapsulation ppp ip ospf hello-interval 50 ip ospf 3 area 0

  ! interface Serial1/2 description **Connected to R6-Branch3 office** ip address 10.10.240.9 255.255.255.252 encapsulation ppp ip ospf 3 area 0 ppp authentication chap ! router ospf 3 router-id 192.168.3.3 !

  

  R4# show running-config R4 ! interface Loopback0 description **Loopback** ip address 192.168.4.4 255.255.255.255 ip ospf 4 area 2

  ! interface Ethernet0/0 ip address 172.16.113.1 255.255.255.0 ip ospf 4 area 2 ! interface Serial1/0 description **Connected to R3-Main Branch office** ip address 10.10.240.2 255.255.255.252 encapsulation ppp ip ospf 4 area 2 ! router ospf 4 log-adjacency-changes

  

  R5# show running-config R5 !

  interface Loopback0 description **Loopback** ip address 192.168.5.5 255.255.255.255 ip ospf 5 area 0

  !

  interface Ethernet0/0 ip address 172.16.114.1 255.255.255.0 ip ospf 5 area 0 ! interface Serial1/0 description **Connected to R3-Main Branch office** ip address 10.10.240.6 255.255.255.252 encapsulation ppp ip ospf 5 area 0 ! router ospf 5 log-adjacency-changes

  

  R6# show running-config R6 username R3 password CISCO36 ! interface Loopback0 description **Loopback** ip address 192.168.6.6 255.255.255.255 ip ospf 6 area 0 ! interface Ethernet0/0 ip address 172.16.115.1 255.255.255.0 ip ospf 6 area 0 ! interface Serial1/0 description **Connected to R3-Main Branch office** ip address 10.10.240.10 255.255.255.252 encapsulation ppp ip ospf 6 area 0 ppp authentication chap ! router ospf 6 router-id 192.168.3.3 !

  

  An OSPF neighbor adjacency is not formed between R3 in the main office and R6 in the Branch3 office. What is causing the problem?

  A. There is an area ID mismatch.
  B. There is a PPP authentication issue; the username is not configured on R3 and R6.
  C. There is an OSPF hello and dead interval mismatch.
  D. The R3 router ID is configured on R6.
  D. The R3 router ID is configured on R6.

• Question 39:

  Which cloud service that usually provides software beyond the basic operating system is normally used for development?

  A. infrastructure-as-a-service
  B. database-as-a-service
  C. software-as-a-service
  D. platform-as-a-service
  D. platform-as-a-service

• Question 40:

  Which two statements about fiber cable are true? (Choose two)

  A. Single-mode fiber supports SC and LC connectors only.
  B. Multimode cable supports speeds between 100 Mbps and 9.92 Gbps.
  C. Single-mode cable is most appropriate for installations longer than 10 km.
  D. Fiber cable is relatively inexpensive and supports a higher data rate than coaxial cable.
  E. Mulitimode cable supports speeds between 100 Mbps and 100 Gpbs.
  D. Fiber cable is relatively inexpensive and supports a higher data rate than coaxial cable.
  E. Mulitimode cable supports speeds between 100 Mbps and 100 Gpbs.