Cisco 200-125 Online Practice Questions and Exam Preparation

Cisco 200-125 Online Questions & Answers

• Question 631:

  Which command can you enter to verify that a router is synced with a configures time source?

  A. show ntp authenticate
  B. ntp associations
  C. ntp server time
  D. ntp authenticate
  E. show ntp associations
  E. show ntp associations

• Question 632:

  Which benefit of a hub-and-spoke WAN topology is true?

  A. It allows you to implement access restrictions between subscriber sites
  B. It supports application optimization.
  C. It supports Layer 2 VPNs
  D. It allows you to provide direct connections between subscribers.
  A. It allows you to implement access restrictions between subscriber sites

• Question 633:

  Refer to the exhibit.

  

  The following commands are executed on interface fa0/1 of 2950Switch. 2950Switch(config-if)# switchport port-security 2950Switch(config-if)# switchport port-security mac-address sticky 2950Switch(config-if)# switchport port-security maximum 1 The Ethernet frame that is shown arrives on interface fa0/1. What two functions will occur when this frame is received by 2950Switch? (Choose two.)

  A. The MAC address table will now have an additional entry of fa0/1 FFFF.FFFF.FFFF.
  B. Only host A will be allowed to transmit frames on fa0/1.
  C. This frame will be discarded when it is received by 2950Switch.
  D. All frames arriving on 2950Switch with a destination of 0000.00aa.aaaa will be forwarded out fa0/1.
  E. Hosts B and C may forward frames out fa0/1 but frames arriving from other switches will not be forwarded out fa0/1.
  F. Only frames from source 0000.00bb.bbbb, the first learned MAC address of 2950Switch, will be forwarded out fa0/1.
  B. Only host A will be allowed to transmit frames on fa0/1.
  D. All frames arriving on 2950Switch with a destination of 0000.00aa.aaaa will be forwarded out fa0/1.

  ---

  The configuration shown here is an example of port security, specifically port security using sticky addresses. You can use port security with dynamically learned and static MAC addresses to restrict a port's ingress traffic by limiting the MAC addresses that are allowed to send traffic into the port. When you assign secure MAC addresses to a secure port, the port does not forward ingress traffic that has source addresses outside the group of defined addresses. If you limit the number of secure MAC addresses to one and assign a single secure MAC address, the device attached to that port has the full bandwidth of the port.

  Port security with sticky MAC addresses provides many of the same benefits as port security with static MAC addresses, but sticky MAC addresses can be learned dynamically. Port security with sticky MAC addresses retains dynamically learned MAC addresses during a link-down condition.

• Question 634:

  What can you change to select switch as root bridge?

  A. make lower priority
  B. make higher priority
  C. make lower path cost
  D. make higher path cost
  A. make lower priority

• Question 635:

  Refer to the exhibit.

  

  The Bigtime router is unable to authenticate to the Littletime router. What is the cause of the problem?

  A. The usernames are incorrectly configured on the two routers.
  B. The passwords do not match on the two routers.
  C. CHAP authentication cannot be used on a serial interface.
  D. The routers cannot be connected from interface S0/0 to interface S0/0.
  E. With CHAP authentication, one router must authenticate to another router. The routers cannot be configured to authenticate to each other.
  B. The passwords do not match on the two routers.

  ---

  With CHAP authentication, the configured passwords must be identical on each router. Here, it is configured as little123 on one side and big123 on the other.

• Question 636:

  In which byte of an IP packet can traffic be marked ?

  A. the Tos byte
  B. the Qos byte
  C. the Cos byte
  D. the Dscp byte
  A. the Tos byte

  ---

  Reference: http://flylib.com/books/2/686/1/html/2/images/1587051990/graphics/13fig01.gif

• Question 637:

  If you configure syslog messages without specifying the logging trap level, which log messages will the router send?

  A. 0-4
  B. 0-5
  C. 0-6
  D. 0-2
  E. 0-1
  C. 0-6

• Question 638:

  Which step in the router boot process searches for an IOS image to load into the router?

  A. bootstrap
  B. POST
  C. mini-IOS
  D. ROMMON mode
  A. bootstrap

• Question 639:

  Scenario

  Refer to the topology. Your company has connected the routers R1, R2, and R3 with serial links. R2 and R3 are connected to the switches SW1 and SW2, respectively. SW1 and SW2 are also connected to the routers R4 and R5.

  The EIGRP routing protocol is configured.

  You are required to troubleshoot and resolve the EIGRP issues between the various routers.

  Use the appropriate show commands to troubleshoot the issues.

  

  Which path does traffic take from R1 to R5?

  A. The traffic goes through R2.
  B. The traffic goes through R3.
  C. The traffic is equally load-balanced over R2 and R3.
  D. The traffic is unequally load-balanced over R2 and R3.
  C. The traffic is equally load-balanced over R2 and R3.

• Question 640:

  Assuming the default switch configuration, which VLAN range can be added, modified, and removed on a Cisco switch?

  A. 1 through 1001
  B. 2 through 1001
  C. 1 through 1002
  D. 2 through 1005
  B. 2 through 1001

  ---

  VLAN 1 is the default VLAN on Cisco switch. It always exists and cannot be added, modified or removed. VLANs 1002-1005 are default VLANs for FDDI and Token Ring and they can't be deleted or used for Ethernet.