Cisco 200-125 Online Practice Questions and Exam Preparation

Cisco 200-125 Online Questions & Answers

• Question 731:

  Drag and drop the steps to configure a basic GRE tunnel from the left into the correct sequence on the right (Not all options are used)

  Select and Place:

  

  

  ---

  Create a logical tunnel interface Specify the carrier protocol Specify the passenger protocol Specify the source and destination address for the tunnel endpoints.

• Question 732:

  What command instructs the device to timestamp Syslog debug messages in milliseconds?

  A. service timestamps log datetime localtime
  B. service timestamps debug datetime msec
  C. service timestamps debug datetime localtime
  D. service timestamps log datetime msec
  B. service timestamps debug datetime msec

  ---

  Enable millisecond (msec) timestamps using the service timestamps command:

  router(config)#service timestamps debug datetime msec. router(config)#service timestamps log datetime msec The "service timestamps debug". command configures the system to apply a time stamp to debugging messages. The time-stamp format for datetime is MMM DD HH:MM:SS, where MMM is the month, DD is the date, HH is the hour (in 24-hour notation), MM is the minute, and SS is the second. With the additional keyword msec, the system includes milliseconds in the time stamp, in the format HH:DD:MM:SS.mmm, where .mmm is milliseconds.

• Question 733:

  What is the authoritative source for an address lookup?

  A. a recursive DNS search
  B. the operating system cache
  C. the ISP local cache
  D. the browser cache
  A. a recursive DNS search

• Question 734:

  Which configuration can be used with PAT to allow multiple inside address to be translated to a single outside address ?

  A. Dynamic Routing
  B. DNS
  C. Preempt
  D. overload
  D. overload

• Question 735:

  A corporation wants to add security to its network. The requirements are:

  1.

  Host B should be able to use a web browser (HTTP) to access the Finance Web Server.

  2.

  Other types of access from host B to the Finance Web Server should be blocked.

  3.

  All access from hosts in the Core or local LAN to the Finance Web Server should be blocked.

  4.

  All hosts in the Core and on local LAN should be able to access the Public Web Server.

  You have been tasked to create and apply a numbered access list to a single outbound interface. This access list can contain no more than three statements that meet these requirements.

  Access to the router CLI can be gained by clicking on the appropriate host.

  1.

  All passwords have been temporarily set to “cisco”.

  2.

  The Core connection uses an IP address of 198.18.132.65.

  3.

  The computers in the Hosts LAN have been assigned addresses of 192.168.201.1 – 192.168.201.254.

  4.

  host A 192.168.201.1

  5.

  host B 192.168.201.2

  6.

  host C 192.168.201.3

  7.

  host D 192.168.201.4

  8.

  The Finance Web Server has been assigned an address of 172.22.237.17.

  9.

  The Public Web Server in the Server LAN has been assigned an address of 172.22.237.18.

  

  

  

  

  Correct Answer. Check the answer below
  Check the answer below

  ---

  We should create an access-list and apply it to the interface that is connected to the Server LAN because it can filter out traffic from both S2 and Core networks. To see which interface this is, use the “show ip interface brief” command:

  From this, we know that the servers are located on the fa0/1 interface, so we will place our numbered access list here in the outbound direction.

  Corp1#configure terminal

  Our access-list needs to allow host B – 192.168125.2 to the Finance Web Server 172.22.109.17 via HTTP (port 80), so our first line is this:

  Corp1(config)#access-list 100 permit tcp host 192.168.125.2 host 172.22.109.17 eq 80

  Then, our next two instructions are these:

  

  Other types of access from host B to the Finance Web Server should be blocked.

  

  All access from hosts in the Core or local LAN to the Finance Web Server should be blocked.

  This can be accomplished with one command (which we need to do as our ACL needs to be no more than 3 lines long), blocking all other access to the finance web server:

  Corp1(config)#access-list 100 deny ip any host 172.22.109.17

  Our last instruction is to allow all hosts in the Core and on the local LAN access to the Public Web Server (172.22.109.18)

  Corp1(config)#access-list 100 permit ip host 172.22.109.18 any

  Finally, apply this access-list to Fa0/1 interface (outbound direction)

  Corp1(config)#interface fa0/1Corp1(config-if)#ip access-group 100 out

  Notice: We have to apply the access-list to Fa0/1 interface (not Fa0/0 interface) so that the access-list can filter traffic coming from both the LAN and the Core networks.

  To verify, just click on host B to open its web browser. In the address box type

  http://172.22.109.17 to check if you are allowed to access Finance Web Server or not. If your configuration is correct then you can access it.

  Click on other hosts (A, C and D) and check to make sure you can't access Finance Web Server from these hosts. Then, repeat to make sure they can reach the public server at 172.22.109.18. Finally, save the configuration

  Corp1(config-if)#endCorp1#copy running-config startup-config

• Question 736:

  Which task must you perform to enable an lOS device to use DNS services?

  A. Configure manual bindings
  B. Configure a name server
  C. Configure the relay agent information option.
  D. Configure a relay agent information reforwarding policy
  A. Configure manual bindings

  ---

  Explanation: https://www.cisco.com/c/en/us/td/docs/ios- xml/ios/ipaddr_dns/configuration/15-mt/dns-15-mt-book/dns-config-dns.html

• Question 737:

  TION NO: 123

  In which byte of an IP packet can traffic be marked?

  A. the ToS byte
  B. the QoS byte
  C. the DSCP byte
  D. the CoS byte
  A. the ToS byte

• Question 738:

  which command should you use to display detailed information about EBGP peers?

  A. show ip bgp paths
  B. show ip bgp summary
  C. show ip bgp
  D. show ip bgp neighbors
  D. show ip bgp neighbors

• Question 739:

  

  Refer to the exhibit.When PC 1 sends a packet to PC2,the packet has which source and destination IP address when it arrives at interface Gi0/0 on router R2?

  A. source 192.168.10.10 and destination 10.10.2.2
  B. source 192.168.20.10 and destination 192.168.20.1
  C. source 192.168.10.10 and destination 192.168.20.10
  D. source 10.10.1.1 and destination 10.10.2.2
  C. source 192.168.10.10 and destination 192.168.20.10

• Question 740:

  Refer to the exhibit.

  

  Which subnet mask will place all hosts on Network B in the same subnet with the least amount of wasted addresses?

  A. 255.255.255.0
  B. 255.255.254.0
  C. 255.255.252.0
  D. 255.255.248.0
  B. 255.255.254.0

  ---

  310 hosts < 512 = 29 -> We need a subnet mask of 9 bits 0 -> 1111 1111.1111 1111.1111 1110.0000 0000 -> 255.255.254.0