Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 1011:

  Which attribute does a router use to select the best path when two or more different routes to the same destination exist from two different routing protocols?

  A. dual algorithm
  B. metric
  C. administrative distance
  D. hop count
  C. administrative distance

  ---

  Administrative distance is the feature used by routers to select the best path when there are two or more different routes to the same destination from different routing protocols. Administrative distance defines the reliability of a routing protocol.

• Question 1012:

  In an SDN architecture, which function of a network node is centralized on a controller?

  A. Creates the IP routing table
  B. Discards a message due filtering
  C. Makes a routing decision
  D. Provides protocol access for remote access devices
  C. Makes a routing decision

  ---

  A controller, or SDN controller, centralizes the control of the networking devices. The degree of control, and the type of control, varies widely. For instance, the controller can perform all control plane functions (such as making routing decisions) replacing the devices' distributed control plane.

  https://www.ciscopress.com/articles/article.asp?p=2995354andseqNum=2#:~:text=A%20controller%2C%20or%20SDN%20controller,the%20devices'%20distributed%20control%20plane

• Question 1013:

  What are two characteristics of a controller-based network? (Choose two.)

  A. It uses Telnet to report system issues.
  B. The administrator can make configuration updates from the CLI.
  C. It uses northbound and southbound APIs to communicate between architectural layers.
  D. It decentralizes the control plane, which allows each device to make its own forwarding decisions.
  E. It moves the control plane to a central point.
  C. It uses northbound and southbound APIs to communicate between architectural layers.
  E. It moves the control plane to a central point.

• Question 1014:

  Which configuration management mechanism uses TCP port 22 by default when communicating with managed nodes?

  A. Ansible
  B. Python
  C. Puppet
  D. Chef
  A. Ansible

  ---

  Ansible:

  uses SSH (port 22) for remote device communication

  uses YAML for fundamental configuration

  Chef:

  uses TCP port 10002 for configuration push jobs

  uses Ruby for fundamental configuration elements

  Puppet:

  uses TCP 8140 for communication

  fundamental configuration elements are stored in a manifest

• Question 1015:

  Which output displays a JSON data representation?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

  ---

  JSON data is written as name/value pairs.

  A name/value pair consists of a field name (in double quotes), followed by a colon, followed by a value:

  "name":"Mark"

  JSON can use arrays. Array values must be of type string, number, object, array, boolean or null. For example:

  {

  "name":"John",

  "age":30,

  "cars":[ "Ford", "BMW", "Fiat" ]

  }

  JSON can have empty object like "taskId":{}

• Question 1016:

  Refer to the exhibit.

  

  After the switch configuration, the ping test fails between PC A and PC B. Based on the output for switch 1, which error must be corrected?

  A. The PCs are in the incorrect VLAN.
  B. All VLANs are not enabled on the trunk.
  C. Access mode is configured on the switch ports.
  D. There is a native VLAN mismatch.
  D. There is a native VLAN mismatch.

  ---

  There is VLAN Mismatch. Remember there is no any intervlan routing on the two sitches thus minimising the chance of communication. https://www.youtube.com/watch?v=klqpX6U-_JY

• Question 1017:

  Which solution is appropriate when mitigating password attacks where the attacker was able to sniff the clear-text password of the system administrator?

  A. next-generation firewall to keep stateful packet inspection
  B. multifactor authentication using two separate authentication sources
  C. ACL to restrict incoming Telnet sessions "admin" accounts
  D. IPS with a block list of known attack vectors
  B. multifactor authentication using two separate authentication sources

  ---

  Multifactor authentication (MFA) adds an additional layer of security beyond just a username and password. By requiring a second form of authentication (such as a temporary code sent to a mobile device, a fingerprint scan, or a hardware token), even if an attacker has obtained the clear-text password, they would still need access to the second authentication factor to gain entry. This significantly reduces the risk of unauthorized access.

• Question 1018:

  What are two recommendations for protecting network ports from being exploited when located in an office space outside of an IT closet? (Choose two)

  A. configure static ARP entries
  B. enable the PortFast feature on ports
  C. implement port-based authentication
  D. configure ports to a fixed speed
  E. shut down unused ports
  C. implement port-based authentication
  E. shut down unused ports

  ---

  The 802.1x standard defines a client-server-based access control and authentication protocol that prevents unauthorized clients from connecting to a LAN through publicly accessible ports unless they are properly authenticated. The authentication server authenticates each client connected to a switch port before making available any services offered by the switch or the LAN. Unused or “empty” ports within any network device pose a security risk, as someone might plug a cable into them and connect an unauthorised device to the network. This can lead to a number of issues, including:

  1. Network not functioning as it should

  2. Network information vulnerable to outsiders Therefore, you should shut down every port that is not used on routers, switches, and other network devices. Depending upon the device, the shutdown state might be the default, but you should always verify this.

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_8021x/configuration/xe-3se/3850/sec-user-8021x-xe-3se-3850-book/config-ieee-802x-pba.html

• Question 1019:

  Which two statements about EtherChannel technology are true? (Choose two.)

  A. EtherChannel provides increased bandwidth by bundling existing FastEthernet or Gigabit Ethernet interfaces into a single EtherChannel.
  B. STP does not block EtherChannel links.
  C. You can configure multiple EtherChannel links between two switches, using up to a limit of sixteen physical ports.
  D. EtherChannel does not allow load sharing of traffic among the physical links within the EtherChannel.
  E. EtherChannel allows redundancy in case one or more links in the EtherChannel fail.
  A. EtherChannel provides increased bandwidth by bundling existing FastEthernet or Gigabit Ethernet interfaces into a single EtherChannel.
  E. EtherChannel allows redundancy in case one or more links in the EtherChannel fail.

• Question 1020:

  DRAG DROP

  Drag and drop the wireless architecture benefits from the left onto the architecture types on the right.

  Select and Place: