Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 1121:

  What is the function of the controller in a software-defined network?

  A. multicast replication at the hardware level
  B. fragmenting and reassembling packets
  C. making routing decisions
  D. forwarding packets
  C. making routing decisions

  ---

  Several articles on the purpose of an SDN controller confirms that the controller becomes the control plane. The purpose of the control plane is to "control" how data is forwarded then let the data plane perform the rest.

• Question 1122:

  Refer to the exhibit.

  

  Which configuration parameter is preventing host from reaching the internet?

  A. IP address assignment
  B. IP network mask
  C. default gateway
  D. automatic DNS
  C. default gateway

• Question 1123:

  DRAG DROP

  Drag and drop the WLAN components from the left onto the component details on the right.

  Select and Place:

  

  

• Question 1124:

  A user configured OSPF in a single area between two routers. A serial interface connecting R1 and R2 is running encapsulation PPP. By default, which OSPF network type is seen on this interface when the user types show ip ospf interface on R1 and R2?

  A. nonbroadcast
  B. point-to-point
  C. point-to-multipoint
  D. broadcast
  B. point-to-point

  ---

  The default OSPF network type for HDLC and PPP on Serial link is point-to-point (while the default OSPF network type for Ethernet link is Broadcast).

• Question 1125:

  A network administrator needs to aggregate 4 ports into a single logical link which must negotiate layer 2 connectivity to ports on another switch What must be configured when using active mode on both sides of the connection?

  A. 802.1q trunks
  B. Cisco vPC
  C. LLDP
  D. LACP
  D. LACP

  ---

  LACP-Active, Passive (Industry standard) PAgP -Desirable, Auto (Cisco Proprietary)

• Question 1126:

  Which characteristic differentiates the concept of authentication from authorization and accounting?

  A. user-activity logging
  B. service limitations
  C. consumption-based billing
  D. identity verification
  D. identity verification

  ---

  Authentication, authorization, and accounting (AAA) is a term for a framework for intelligently controlling access to computer resources, enforcing policies, auditing usage, and providing the information necessary to bill for services. These combined processes are considered important for effective network management and security.

  As the first process, authentication provides a way of identifying a user, typically by having the user enter a valid user name and valid password before access is granted. The process of authentication is based on each user having a unique set of criteria for gaining access. The AAA server compares a user's authentication credentials with other user credentials stored in a database. If the credentials match, the user is granted access to the network. If the credentials are at variance, authentication fails and network access is denied.

• Question 1127:

  Which two network actions occur within the data plane? (Choose two.)

  A. Add or remove an 802.1Q trunking header.
  B. Make a configuration change from an incoming NETCONF RPC.
  C. Run routing protocols.
  D. Match the destination MAC address to the MAC address table.
  E. Reply to an incoming ICMP echo request.
  A. Add or remove an 802.1Q trunking header.
  D. Match the destination MAC address to the MAC address table.

  ---

  Actions – DATA PLANE:

  De-encapsulating and re-encapsulating a packet in a data-link frame (routers, Layer 3 switches)

  Adding or removing an 802.1Q trunking header (routers and switches)

  Matching an Ethernet frame’s destination Media Access Control (MAC) address to the MAC address table (Layer 2 switches)

  Matching an IP packet’s destination IP address to the IP routing table (routers, Layer 3 switches)

  Encrypting the data and adding a new IP header (for virtual private network [VPN] processing)

  Changing the source or destination IP address (for Network Address Translation [NAT] processing)

  Discarding a message due to a filter (access control lists [ACLs], port security)

• Question 1128:

  CCNA Lab simulation

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked the lab closes and cannot be reopened.

  Topology

  

  Tasks

  Refer to the topology. All physical cabling is in place. Configure a local user account, a Named ACL (NACL), and security.

  Task 1

  Configure a local account on Sw101 with telnet access only on virtual ports 0-4. Use the following information:

  1. Username: support

  2. Password: max2learn

  3. Privilege level: Exec mode Task 2 Configure and apply a single NACL on Sw101 using the following:

  1. Name: ENT_ACL

  2. Restrict only PC2 on VLAN 200 from pinging PC1

  3. Allow only PC2 on VLAN 200 to telnet to Sw101

  4. Prevent all other devices from telnetting from VLAN 200

  5. Allow all other network traffic from VLAN 200

  Task 3

  Configure security on interface Ethernet 0/0 of Sw102:

  1. Set the maximum number of secure MAC addresses to four.

  2. Drop packets with unknown source addresses until the number of secure MAC addresses drops below the configured maximum value. No notification action is required.

  3. Allow secure MAC addresses to be learned dynamically.

  

  A. Check the Explanation below
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. Check the Explanation below

  ---

  Explanation

  Question requires EXEC mode, priv 15 is privilege EXEC mode, dynmaic mac addr is enabled by default, the provided answer is for sticky mac addr on dynmaic learned addr.

  Task 1

  username support password max2learn

  line vty 0 4

  login local

  transport input telnet

  Task 2

  ip access-list extended ENT_ACL

  deny icmp host 192.168.200.10 192.168.100.10

  permit tcp host 192.168.200.10 any eq 23

  deny tcp any any eq 23

  permit ip any any

  int vlan 200

  ip access-group ENT_ACL in

  Task 3

  int e0/0

  switchport port-security

  switchport port-security maximum 4

  switchport port-security voilation protect

• Question 1129:

  Refer to the exhibit.

  

  What is the subnet mask of the route to the 10.10.13.160 prefix?

  A.

  255.255.255.240

  
  B.

  255.255.255.128

  
  C.

  255.255.248.0

  
  D.

  255.255.255.248

  D.

  255.255.255.248

  ---

  
  

• Question 1130:

  Refer to the exhibit.

  

  Which routing protocol has the best administrative distance?

  A. Connected
  B. EIGRP
  C. RIP
  D. OSPF
  A. Connected

  ---

  The Connected routes have the best (lowest) administrative distance of 0, which means they are the most trusted routes by the router. Administrative distance is used to determine which routing protocol's route should be chosen when multiple protocols provide a path to the same destination. The lower the AD, the more trusted the source of the route.