Cisco CCNA 200-301 Questions & Answers

• Question 1121:

  Refer to the exhibit. An administrator configures four switches for local authentication using passwords that are stored as a cryptographic hash. The four switches must also support SSH access for administrators to manage the network infrastructure. Which switch is configured correctly to meet these requirements?

  

  A. SW1

  B. SW2

  C. SW3

  D. SW4

  Correct Answer: C

• Question 1122:

  How do traditional campus device management and Cisco DNA Center device management differ in regards to deployment?

  A. Traditional campus device management allows a network to scale more quickly than with Cisco DNA Center device management.

  B. Cisco DNA Center device management can deploy a network more quickly than traditional campus device management.

  C. Cisco DNA Center device management can be implemented at a lower cost than most traditional campus device management options.

  D. Traditional campus device management schemes can typically deploy patches and updates more quickly than Cisco DNA Center device management.

  Correct Answer: B

  Manages software upgrades and controls the consistency of image versions and configurations across your network.

  Speeds and simplifies the deployment of new software images and patches. Pre-and post-checks help prevent adverse effects from an upgrade.

  Automation: Plug and Play (PnP)

  Zero-touch provisioning for new device installation. Allows off-the-shelf Cisco devices to be provisioned simply by connecting to the network.

  Enables deployment of new devices in minutes and without onsite support visits. Eliminates repetitive tasks and staging.

• Question 1123:

  Refer to the exhibit. If the network environment is operating normally, which type of device must be connected to interface FastEthernet 0/1?

  

  A. DHCP client

  B. access point

  C. router

  D. PC

  Correct Answer: C

  Definitly the router. Routers are networki devices that are under Administrative control. Hence, they are configured Trusted in DAI and DHCP Snooping

• Question 1124:

  Which WPA3 enhancement protects against hackers viewing traffic on the Wi-Fi network?

  A. SAE encryption

  B. TKIP encryption

  C. scrambled encryption key

  D. AES encryption

  Correct Answer: A

  The WPA3 enhancement that protects against hackers viewing traffic on the Wi-Fi network is SAE (Simultaneous Authentication of Equals) encryption. SAE is a secure key establishment protocol that provides stronger protection against password guessing attacks and offline dictionary attacks compared to the previous WPA2-Personal (PSK) protocol. SAE uses the Dragonfly key exchange method and provides forward secrecy, which means that if an attacker obtains the Wi-Fi network password, they cannot decrypt previously captured traffic.

• Question 1125:

  Refer to the exhibit.

  

  An engineer deploys a topology in which R1 obtains its IP configuration from DHCP. If the switch and DHCP server configurations are complete and correct. Which two sets of commands must be configured on R1 and R2 to complete the task? (Choose two)

  A. R1(config)# interface fa0/0 R1(config-if)# ip helper-address 198.51.100.100

  B. R2(config)# interface gi0/0 R2(config-if)# ip helper-address 198.51.100.100

  C. R1(config)# interface fa0/0 R1(config-if)# ip address dhcp R1(config-if)# no shutdown

  D. R2(config)# interface gi0/0 R2(config-if)# ip address dhcp

  E. R1(config)# interface fa0/0 R1(config-if)# ip helper-address 192.0.2.2

  Correct Answer: BC

• Question 1126:

  Refer to the exhibit. What configuration on RTR-1 denies SSH access from PC-1 to any RTR-1 interface and allows all other traffic?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 1127:

  While examining excessive traffic on the network, it is noted that all incoming packets on an interface appear to be allowed even though an IPv4 ACL is applied to the interface. Which two misconfigurations cause this behavior? (Choose two.)

  A. The ACL is empty

  B. A matching permit statement is too broadly defined

  C. The packets fail to match any permit statement

  D. A matching deny statement is too high in the access list

  E. A matching permit statement is too high in the access list

  Correct Answer: BE

  https://community.cisco.com/t5/routing/apply-empty-acl-what-happens/td-p/740473

• Question 1128:

  The service password-encryption command is entered on a router. What is the effect of this configuration?

  A. restricts unauthorized users from viewing clear-text passwords in the running configuration

  B. prevents network administrators from configuring clear-text passwords

  C. protects the VLAN database from unauthorized PC connections on the switch

  D. encrypts the password exchange when a VPN tunnel is established

  Correct Answer: A

• Question 1129:

  What event has occurred if a router sends a notice level message to a syslog server?

  A. A certificate has expired

  B. An interface line has changed status

  C. A TCP connection has been torn down

  D. An ICMP connection has been built

  Correct Answer: B

  0 Emergencies System shutting down due to missing fan tray 1 Alerts Temperature limit exceeded 2 Critical Memory allocation failures 3 Errors Interface Up/Down messages 4 Warnings Configuration file written to server, via SNMP request 5 Notifications Line protocol Up/Down 6 Information Access-list violation logging 7 Debugging Debug messages

• Question 1130:

  Which function does an SNMP agent perform?

  A. It sends information about MIB variables in response to requests from the NMS

  B. It manages routing between Layer 3 devices in a network

  C. It coordinates user authentication between a network device and a TACACS+ or RADIUS server

  D. It requests information from remote network nodes about catastrophic system events

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-16/snmp-xe-16-book/nm-snmp-cfg-snmp-support.html