Cisco 200-125 Online Practice Questions and Exam Preparation

Cisco 200-125 Online Questions & Answers

• Question 441:

  The following have already been configured on the router:

  The basic router configuration

  The appropriate interfaces have been configured for NAT inside and NAT outside.

  The appropriate static routes have also been configured (since the company will be a stub network, no routing protocol will be required)

  All passwords have been temporarily set to “cisco”.

  The task is to complete the NAT configuration using all IP addresses assigned by the ISP to provide Internet access for the hosts in the Weaver LAN. Functionality can be tested by clicking on the host provided for testing.

  Configuration information:

  router name – Weaver

  inside global addresses – 198.18.184.105 - 198.18.184.110/29

  inside local addresses - 192.168.100.17 – 192.168.100.30/28

  number of inside hosts – 14

  

  A network associate is configuring a router for the weaver company to provide internet access. The ISP has provided the company six public IP addresses of 198.18.184.105 198.18.184.110. The company has 14 hosts that need to access the internet simultaneously. The hosts in the company LAN have been assigned private space addresses in the range of 192.168.100.17 – 192.168.100.30.

  Correct Answer. Check the answer below
  Check the answer below

  ---

  The company has 14 hosts that need to access the internet simultaneously but we just have 6 public IP addresses from 198.18.184.105 to 198.18.184.110/29.

  Therefore we have to use NAT overload (or PAT)

  Double click on the Weaver router to open it

  Router>enable Router#configure terminal

  First you should change the router's name to Weaver

  Router(config)#hostname Weaver

  Create a NAT pool of global addresses to be allocated with their netmask.

  Weaver(config)#ip nat pool mypool 198.18.184.105 198.18.184.110 netmask 255.255.255.248

  Create a standard access control list that permits the addresses that are to be translated.

  Weaver(config)#access-list 1 permit 192.168.100.16 0.0.0.15

  Establish dynamic source translation, specifying the access list that was defined in the prior step.

  Weaver(config)#ip nat inside source list 1 pool mypool overload

  This command translates all source addresses that pass access list 1, which means a source address from 192.168.100.17 to 192.168.100.30, into an address from the pool named mypool (the pool contains addresses from 198.18.184.105

  to 198.18.184.110).

  Overload keyword allows to map multiple IP addresses to a single registered IP address (many-to-one) by using different ports.

  The question said that appropriate interfaces have been configured for NAT inside and NAT outside statements.

  This is how to configure the NAT inside and NAT outside, just for your understanding:

  Weaver(config)#interface fa0/0Weaver(config-if)#ip nat insideWeaver(config-if)#exitWeaver(config)#interface s0/0Weaver(config-if)#ip nat outsideWeaver(config-if)#end

  Finally, we should save all your work with the following command:

  Weaver#copy running-config startup-config

  Check your configuration by going to "Host for testing" and type:

  C :\>ping 192.0.2.114

  The ping should work well and you will be replied from 192.0.2.114

• Question 442:

  Refer to the exhibit.

  

  According to the routing table, where will the router send a packet destined for 10.1.5.65?

  A. 10.1.1.2
  B. 10.1.2.2
  C. 10.1.3.3
  D. 10.1.4.4
  C. 10.1.3.3

  ---

  The destination IP address 10.1.5.65 belongs to 10.1.5.64/28, 10.1.5.64/29 and 10.1.5.64/27 subnets but the "longest prefix match" algorithm will choose the most specific subnet mask -> the prefix "/29 will be chosen to route the packet. Therefore the next-hop should be 10.1.3.3 ->.

• Question 443:

  Which utility can you use to determine whether a switch can send echo requests and replies?

  A. SSH
  B. traceroute
  C. ping
  D. Telnet
  C. ping

• Question 444:

  In a GLBP network, who is responsible for the ARP request?

  A. AVF
  B. AVG
  C. Active Router
  D. Standby Router
  B. AVG

  ---

  Members of a GLBP group elect one gateway to be the active virtual gateway (AVG) for that group. Other group members provide backup for the AVG in the event that the AVG becomes unavailable. The AVG assigns a virtual MAC address to each member of the GLBP group. Each gateway assumes responsibility for forwarding packets sent to the virtual MAC address assigned to it by the AVG. These gateways are known as active virtual forwarders (AVFs) for their virtual MAC address. The AVG is responsible for answering Address Resolution Protocol (ARP) requests for the virtual IP address. Load sharing is achieved by the AVG replying to the ARP requests with different virtual MAC addresses. Reference: http://www.cisco.com/en/US/docs/ios/12_2t/12_2t15/feature/guide/ft_glbp.html

• Question 445:

  Which command would you configure globally on a Cisco router that would allow you to view directly connected Cisco devices?

  A. enable cdp
  B. cdp enable
  C. cdp run
  D. run cdp
  C. cdp run

  ---

  CDP is enabled on Cisco routers by default. If you prefer not to use the CDP capability, disable it with the no cdp run command. In order to reenable CDP, use the cdp run command in global configuration mode. The "cdp enable" command is an interface command, not global.

• Question 446:

  Which two advantages do dynamic routing protocols provide over static routing? (Choose two)

  A. Dynamic routing protocols are easier to manage on very large networks
  B. Dynamic routing protocols automatically adapt to reroute traffic if possible
  C. Only dynamic routing is supported on all topologies that require multiple routers
  D. Dynamic routing is more secure than static routing
  E. Dynamic routing requires fewer resources than static routing
  A. Dynamic routing protocols are easier to manage on very large networks
  B. Dynamic routing protocols automatically adapt to reroute traffic if possible

• Question 447:

  What value is primarily used to determine which port becomes the root port on each nonroot switch in a spanning-tree topology?

  A. path cost
  B. lowest port MAC address
  C. VTP revision number
  D. highest port priority number
  E. port priority number and MAC address
  A. path cost

  ---

  The path cost to the root bridge is the most important value to determine which port will become the root port on each non-root switch. In particular, the port with lowest cost to the root bridge will become root port (on non-root switch).

• Question 448:

  Based on the output below from SwitchB, Which Statement is True ?

  

  A. VLAN 40 is running the per VLAN Spanning Tree Protocol
  B. The Fa0/11 role confirms that SwitchB is the root bridge for VLAN 40
  C. SwitchB is not the root bridge, because not all of the interface roles are designated
  D. The MAC Address of the root bridge is 0017:596d.1580
  C. SwitchB is not the root bridge, because not all of the interface roles are designated

• Question 449:

  which network appliance checks the state of a packet to determine whether the packet is legitimate?

  A. the firewall
  B. the LAN controller
  C. the load balancer
  D. the Layer 2 switch
  A. the firewall

• Question 450:

  Which two statements about stateful firewalls in an enterprise network are true? (Choose two )

  A. They can fitter HTTP and HTTPS traffic in the inbound direction only
  B. They can use information about previous packets to make decisions about future packets.
  C. They are most effective when placed in front of the router connected to the Internet
  D. They are more susceptible to DoS attacks than stateless firewalls
  E. They can track the number of active TCP connections
  B. They can use information about previous packets to make decisions about future packets.
  E. They can track the number of active TCP connections