Cisco 200-125 Online Practice Questions and Exam Preparation

Cisco 200-125 Online Questions & Answers

• Question 491:

  Which step must you perform first to begin a TACACS+ configuration?

  A. Configure a TACACS+ server.
  B. Associate the TACACS+ server to an AAA group
  C. Enable AAA services.
  D. Configure a local user
  C. Enable AAA services.

• Question 492:

  Which statement about spanning-tree root-bridge election is true?

  A. Every root bridge must reside on the same root switch.
  B. It is always performed automatically.
  C. Every VLAN must use the same root bridge.
  D. Each VLAN must have its own root bridge.
  B. It is always performed automatically.

• Question 493:

  Which IOS troubleshooting tool should you use to direct system messages to your screen?

  A. terminal monitor
  B. log events
  C. local SPAN
  D. APIC-EM
  A. terminal monitor

• Question 494:

  Wich component of a routing table entry represents the subnet mask?

  A. Routing protocol code
  B. Prefix
  C. metric
  D. Network mask
  D. Network mask

• Question 495:

  What are types of IPv6 static routes? (Choose Three )

  A. Recursive Static routes
  B. Directly connected static routes
  C. Fully specified static routes
  D. Dynamically specified static routes
  E. injected static routes
  F. Redistributed static routes
  A. Recursive Static routes
  B. Directly connected static routes
  C. Fully specified static routes

  ---

  Static Routes Directly Attached Static Routes Recursive Static Routes Fully Specified Static Routes Floating Static Routes

• Question 496:

  Standard industrialized protocol of etherchannel?

  A. LACP
  B. PAGP
  C. PRP
  D. REP
  A. LACP

• Question 497:

  Which two tasks can help you gather relevant facts when you troubleshoot a network problem?(choose two)

  A. Eliminate known issues first
  B. Define the problem in terms of symptoms and causes
  C. Ask questions of the users who are affected by the problem
  D. Change one setting or component and then analyze the result
  E. Collect technical data from network management systems and logging servers
  B. Define the problem in terms of symptoms and causes
  E. Collect technical data from network management systems and logging servers

• Question 498:

  A network associate is adding security to the configuration of the Corp1 router. The user on host C should be able to use a web browser to access financial information from the Finance Web Server. No other hosts from the LAN nor the Core

  should be able to use a web browser to access this server. Since there are multiple resources for the corporation at this location including other resources on the Finance Web Server, all other traffic should be allowed.

  The task is to create and apply an access-list with no more than three statements that will allow ONLY host C web access to the Finance Web Server. No other hosts will have web access to the Finance Web Server. All other traffic is

  permitted.

  Access to the router CLI can be gained by clicking on the appropriate host.

  All passwords have been temporarily set to "cisco".

  The Core connection uses an IP address of 198.18.196.65.

  The computers in the Hosts LAN have been assigned addresses of 192.168.33.1 - 192.168.33.254

  

  host A 192.168.33.1

  

  host B 192.168.33.2

  

  host C 192.168.33.3

  

  host D 192.168.33.4

  The servers in the Server LAN have been assigned addresses of 172.22.242.17 - 172.22.242.30.

  The Finance Web Server is assigned an IP address of 172.22.242.23.

  

  Correct Answer. Check the answer below
  Check the answer below

  ---

  Select the console on Corp1 router Configuring ACL

  Corp1>enableCorp1#configure terminal

  comment: To permit only Host C (192.168.33.3){source addr} to access finance server address (172.22.242.23) {destination addr} on port number 80 (web)

  Corp1(config)#access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80

  comment: To deny any source to access finance server address (172.22.242.23) {destination addr} on port number 80 (web)

  Corp1(config)#access-list 100 deny tcp any host 172.22.242.23 eq 80

  comment: To permit ip protocol from any source to access any destination because of the implicit deny any any statement at the end of ACL.

  Corp1(config)#access-list 100 permit ip any any

  Applying the ACL on the Interface comment: Check show ip interface brief command to identify the interface type and number by checking the IP address configured.

  Corp1(config)#interface fa 0/1

  If the ip address configured already is incorrect as well as the subnet mask. This should be corrected in order ACL to work type this commands at interface mode :

  no ip address 192.x.x.x 255.x.x.x (removes incorrect configured ipaddress and subnet mask)

  Configure Correct IP Address and subnet mask:

  ip address 172.22.242.30 255.255.255.240 ( range of address specified going to server is given as 172.22.242.17 - 172.22.242.30 )

  Comment: Place the ACL to check for packets going outside the interface towards the finance web server.

  Corp1(config-if)#ip access-group 100 outCorp1(config-if)#end

  Important: To save your running config to startup before exit.

  Corp1#copy running-config startup-config

  Verifying the Configuration:

  1.

  Step1: show ip interface brief command identifies the interface on which to apply access list.

  2.

  Step2: Click on each host A, B, C, and D. Host opens a web browser page, Select address box of the web browser and type the ip address of finance web server (172.22.242.23) to test whether it permits /deny access to the finance web Server.

  3.

  Step 3: Only Host C (192.168.33.3) has access to the server. If the other host can also access then maybe something went wrong in your configuration. Check whether you configured correctly and in order.

  4.

  Step 4: If only Host C (192.168.33.3) can access the Finance Web Server you can click on NEXT button to successfully submit the ACL SIM.

• Question 499:

  What command can you enter to configure the switch as an authoritative ntp server with site id : 15122473?

  A. Switch(config)#ntp master 3
  B. Switch(config)#ntp peer IP 193.168.2.2
  C. Switch(config)#ntp server IP 193.168.22
  D. Switch(config)#ntp source IP 193.168.2.2
  A. Switch(config)#ntp master 3

• Question 500:

  Which command can you enter to display the operational status of the network ports on a router?

  A. show interface status
  B. B. show ip interface brief
  C. show running-config interface fastethernet 0/1
  D. show interface switchport
  B. B. show ip interface brief