Cisco CCNA 200-301 Questions & Answers

• Question 1091:

  An engineer is configuring NAT to translate the source subnet of 10.10.0.0/24 to any of three addresses 192.168.30.1, 192.168.3.2, 192.168.3.3 . Which configuration should be used?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

• Question 1092:

  An office has 8 floors with approximately 30-40 users per floor. What command must be configured on the router Switched Virtual Interface to use address space efficiently?

  A. ip address 192.168.0.0 255.255.0.0

  B. ip address 192.168.0.0 255.255.254.0

  C. ip address 192.168.0.0 255.255.255.128

  D. ip address 192.168.0.0 255.255.255.224

  Correct Answer: B

  need ip count: 30-40 * 8 = 320 ip

  255.255.254.0 - 510 ip

• Question 1093:

  Which device performs stateful inspection of traffic?

  A. firewall

  B. switch

  C. access point

  D. wireless controller

  Correct Answer: A

  Stateful inspection, also known as dynamic packet filtering, is a firewall technology that monitors the state of active connections and uses this information to determine which network packets to allow through the firewall.

• Question 1094:

  What criteria is used first during me root port selection process?

  A. local port ID

  B. lowest path cost to the root bridge

  C. lowest neighbor's bridge ID

  D. lowest neighbor's port ID

  Correct Answer: B

• Question 1095:

  Refer to the exhibit.

  

  Router R2 is configured with multiple routes to reach network 10.1.1.0/24 from router R1. Which path is chosen by router R2 to reach the destination network 10.1.1.0/24?

  A. eBGP

  B. static

  C. OSPF

  D. EIGRP

  Correct Answer: B

  Admin Distance: Connected - 0 Static - 1 eBGP - 5 iEIGRP - 90 OSPF - 110 IS-IS - 115 RIP - 120

• Question 1096:

  A network administrator enabled port security on a switch interface connected to a printer. What is the next configuration action in order to allow the port to learn the MAC address of the printer and insert it into the table automatically?

  A. enable dynamic MAC address learning

  B. implement static MAC addressing.

  C. enable sticky MAC addressing

  D. implement auto MAC address learning

  Correct Answer: C

  You can configure an interface to convert the dynamic MAC addresses to sticky secure MAC addresses and to add them to the running configuration by enabling sticky learning. To enable sticky learning, enter the switchport port-security mac-address sticky command

• Question 1097:

  Refer to the exhibit. Which switch in this configuration will be elected as the root bridge?

  

  Level 15 is Privileged Exec Mode, which is what the question is asking about.

  SW1: 0C:E0:38:00:94:04 SW2: 0C:0E:15:22:05:97 SW3: 0C:0E:15:1A:3C:9D SW4: 0C:E0:18:A1:B3:19

  A. SW1

  B. SW2

  C. SW3

  D. SW4

  Correct Answer: C

  The root bridge is determined by the lowest bridge ID, which consists of the priority value and the MAC address. Because the priority values of all of the switches are identical, the MAC address is used to determine the root bridge.

• Question 1098:

  Refer to the exhibit.

  

  An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate directly to enable privilege mode via Telnet using a local username and password?

  A. R1(config)#username admin R1(config-if)#line vty 0 4 R1(config-line)#password p@ss1234

  B. R1(config)#username admin R1(config-if)#line vty 0 4 R1(config-line)#password p@ss1234 R1(config-line)#transport input telnet

  C. R1(config)#username admin secret p@ss1234 R1(config-if)#line vty 0 4 R1(config-line)#login local R1(config)#enable secret p@ss1234

  D. R1(config)#username admin privilege 15 secret p@ss1234 R1(config-if)#line vty 0 4 R1(config-line)#login local

  Correct Answer: D

• Question 1099:

  When the active router in an HSRP group fails, what router assumes the role and forwards packets?

  A. forwarding

  B. backup

  C. standby

  D. listening

  Correct Answer: C

  HSRP uses Active/stanby VRRP uses Master/Backup

• Question 1100:

  An organization secures its network with multi-factor authentication using an authenticator app on employee smartphones. How is the applic secured in the case of a user's smartphone being lost or stolen?

  A. The application requires the user to enter a PIN before it provides the second factor

  B. the application challenges a user by requiring an administrator password to reactivate when the smartphone is rebooted

  C. The application requires an aadministrator password to reactivate after a configured interval

  D. The application verifies that the user is in a specific location before it provides the second factor

  Correct Answer: A