Cisco 200-125 Online Practice Questions and Exam Preparation

Cisco 200-125 Online Questions & Answers

• Question 711:

  Which three commands can you use to set a router boot image? (Choose three.)

  A. Router(config)# boot system flash c4500-p-mz.121-20.bin
  B. Router(config)# boot system tftp c7300-js-mz.122-33.SB8a.bin
  C. Router(config)#boot system rom c7301-advipservicesk9-mz.124-24.T4.bin
  D. Router> boot flash:c180x-adventerprisek9-mz-124-6T.bin
  E. Router(config)#boot flash:c180x-adventerprisek9-mz-124-6T.bin
  F. Router(config)#boot bootldr bootflash:c4500-jk9s-mz.122-23f.bin
  A. Router(config)# boot system flash c4500-p-mz.121-20.bin
  B. Router(config)# boot system tftp c7300-js-mz.122-33.SB8a.bin
  C. Router(config)#boot system rom c7301-advipservicesk9-mz.124-24.T4.bin

• Question 712:

  Drag and drop the descriptions of logging from the left onto the correct logging features or compenents on the right.

  Select and Place:

  

  

  ---

  Accespt incoming cnc over vty lines-----------------------terminal Display logging inf during a terminal session----------terminal monitor Provides loval access to a device------------------------console Stores log msg externally --------------------------------syslog server logging Stores log msg in RAM------------------------------------buffered logging

• Question 713:

  which two statements correctly describe the ping utility?(choose two))

  A. it uses ICMP
  B. it can identify source of an ICMP "time exceeded"message
  C. it can identify the path that a packet takes to a remote device
  D. it can verify connectivity to a remote device without identifying the path
  E. it use UDP
  A. it uses ICMP
  D. it can verify connectivity to a remote device without identifying the path

• Question 714:

  Drag and Drop

  Drag and drop each WAN design option on the left onto the correct description on the right.

  Select and Place:

  

  

• Question 715:

  Which two authentication methods are compatible with MLPPP on a serial interface? (Choose two.)

  A. LEAP
  B. PEAP
  C. CHAP
  D. TACACS+
  E. PAP
  C. CHAP
  E. PAP

  ---

  Explanation: PPP Authentication Methods

  In this part we will learn more about two authentication methods used in Authentication Phase of PPP.

  PPP has two built-in security mechanisms which are Password Authentication Protocol (PAP) and Challenge Handshake Authentication Protocol (CHAP).

• Question 716:

  Which command is necessary to permit SSH or Telnet access to a cisco switch that is otherwise configured for these vty line protocols?

  A. transport type all
  B. transport output all
  C. transport preferred all
  D. transport input all
  D. transport input all

• Question 717:

  Which of the following privilege level is the most secured?

  A. Level 0
  B. Level 1
  C. Level 15
  D. Level 16
  C. Level 15

• Question 718:

  A user is unable to connect to the Internet. Based on the layered approach to troubleshooting and beginning with the lowest layer, drag each procedure on the left to its proper category on the right.

  Select and Place:

  

  

  ---

  The question asks us to “begin with the lowest layer” so we have to begin with Layer 1:

  verify physical connection; in this case an Ethernet cable connection. For your information, “verify Ethernet cable connection” means that we check if the type of connection (crossover, straight-through, rollover…) is correct, the RJ45 headers are plugged in, the signal on the cable is acceptable…

  Next we “verify NIC operation”. We do this by simply making a ping to the loopback interface 127.0.0.1. If it works then the NIC card (layer 1, 2) and TCP/IP stack (layer 3) are working properly.

  Verify IP configuration belongs to layer 3. For example, checking if the IP can be assignable for host, the PC's IP is in the same network with the gateway… Verifying the URL by typing in your browser some popular websites like google.com, microsoft.com to assure that the far end server is not down (it sometimes make we think we can't access to the Internet). We are using a URL so this step belongs to layer 7 of the OSI model.

• Question 719:

  Which two best practices protect your network from VLAN hopping attacks? (Choose two)

  A. Change the native VLAN to an unused VLAN ID
  B. Assign all access ports to VLANS other than the native VLAN
  C. Configure an ACL to prevent traffic from changing VLANS.
  D. Configure dynamic ARP inspection
  E. Configure port security
  A. Change the native VLAN to an unused VLAN ID
  B. Assign all access ports to VLANS other than the native VLAN

• Question 720:

  Which major component of the network virtualization architecture isolates users according to policy?

  A. network services virtualization
  B. access control.
  C. path isolation
  D. policy enforcement
  B. access control.