Cisco CCNA 200-301 Questions & Answers

• Question 1151:

  A network engineer must create a diagram of a multivendor network. Which command must be configured on the Cisco devices so that the topology of the network can be mapped?

  A. Device(config)#lldp run

  B. Device(config)#cdp run

  C. Device(config-if)#cdp enable

  D. Device(config)#flow-sampler-map topology

  Correct Answer: A

  As CDP only for cisco devices. but since multi vendor then should be LLDP.

• Question 1152:

  How do AAA operations compare regarding user identification, user services, and access control?

  A. Authorization provides access control, and authentication tracks user services

  B. Authentication identifies users, and accounting tracks user services

  C. Accounting tracks user services, and authentication provides access control

  D. Authorization identifies users, and authentication provides access control

  Correct Answer: B

  Authentication identifies users Accounting tracks user services

• Question 1153:

  What is difference between RADIUS and TACACS+?

  A. RADIUS logs all commands that are entered by the administrator, but TACACS+ logs only start, stop, and interim commands.

  B. TACACS+ separates authentication and authorization, and RADIUS merges them.

  C. TACACS+ encrypts only password information, and RADIUS encrypts the entire payload.

  D. RADIUS is most appropriate for dial authentication, but TACACS+ can be used for multiple types of authentication.

  Correct Answer: B

  TACAS+ A-Authentictaion | A-Authorization (Both A's are sperated by a C) = TACAS+ seperates Authentication and Authorization.

• Question 1154:

  What is a characteristic of spine-and-leaf architecture?

  A. Each link between leaf switches allows for higher bandwidth.

  B. It provides greater predictability on STP blocked ports.

  C. It provides variable latency.

  D. Each device is separated by the same number of hops.

  Correct Answer: D

  Find the subnet mask *To have 20 User in a subnet We have to use /27 prefix

  *

  So Host count for /27 prefix is (2^5-2)=30

  *

  Subnet Mask for /27 prefix is (sum of Network bits (128+64+32)=224 , so 255.255.255.224

  Find the network ID

  *As per the /27 prefix each subnet has 30 host and 32 including network ID and Broadcast ID

  * so first network ID is 10.10.255.0 and the second will be 10.10.255.32

• Question 1155:

  Refer to the exhibit. The network administrator wants VLAN 67 traffic to be untagged between Switch 1 and Switch 2, while all other VLANs are to remain tagged. Which command accomplishes this task?

  

  A. switchport access vlan 67

  B. switchport trunk allowed vlan 67

  C. switchport private-vlan association host 67

  D. switchport trunk native vlan 67

  Correct Answer: D

  Native VLAN: The native VLAN is the one into which untagged traffic will be put when it's received on a trunk port. This makes it possible for your VLAN to support legacy devices or devices that don't tag their traffic like some wireless access points and simply network attached devices.

• Question 1156:

  Refer to the exhibit.

  

  An engineer must add a subnet for a new office that will add 20 users to the network. Which IPv4 network and subnet mask combination does the engineer assign to minimize wasting addresses?

  A. 10.10.225.48 255.255.255.240

  B. 10.10.225.32 255.255.255.240

  C. 10.10.225.48 255.255.255.224

  D. 10.10.225.32 255.255.255.224

  Correct Answer: D

  Find the subnet mask *To have 20 User in a subnet We have to use /27 prefix

  *

  So Host count for /27 prefix is (2^5-2)=30

  *

  Subnet Mask for /27 prefix is (sum of Network bits (128+64+32)=224 , so 255.255.255.224

  Find the network ID

  *As per the /27 prefix each subnet has 30 host and 32 including network ID and Broadcast ID

  * so first network ID is 10.10.255.0 and the second will be 10.10.255.32

• Question 1157:

  Refer to the exhibit. Which two commands were used to create port channel 10? (Choose two.)

  

  A. int range g0/0-1 channel-group 10 mode active

  B. int range g0/0-1 channel-group 10 mode desirable

  C. int range g0/0-1 channel-group 10 mode passive

  D. int range g0/0-1 channel-group 10 mode auto

  E. int range g0/0-1 channel-group 10 mode on

  Correct Answer: AC

• Question 1158:

  Which two command sequences must be configured on a switch to establish a Layer 3 EtherChannel with an open-standard protocol? (Choose two.)

  A. interface GigabitEthernet0/0/1 channel-group 10 mode auto

  B. interface GigabitEthernet0/0/1 channel-group 10 mode on

  C. interface port-channel 10 no switchport ip address 172.16.0.1 255.255.255.0

  D. interface GigabitEthernet0/0/1 channel-group 10 mode active

  E. interface port-channel 10 switchport switchport mode trunk

  Correct Answer: CD

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9500/software/release/16-6/configuration_guide/b_166_lyr2_lyr3_9500_cg/b_166_lyr2_lyr3_9500_cg_chapter_011.html#concept_A56CA70C47CD4E6D9381082E649FDA7A

• Question 1159:

  What is the expected outcome when an EUI-64 address is generated?

  A. The interface ID is configured as a random 64-bit value

  B. The characters FE80 are inserted at the beginning of the MAC address of the interface

  C. The seventh bit of the original MAC address of the interface is inverted

  D. The MAC address of the interface is used as the interface ID without modification

  Correct Answer: C

  Ref: Understanding IPv6 EUI-64 Bit Address - Cisco Community

  Post by SunilKhanna

  “…

  The IPv6 EUI-64 format address is obtained through the 48-bit MAC address. The MAC address is first separated into two 24-bits, with one being OUI (Organizationally Unique Identifier) and the other being NIC specific. The 16-bit 0xFFFE is

  then inserted between these two 24-bits for the 64-bit EUI address. IEEE has chosen FFFE as a reserved value which can only appear in EUI-64 generated from the an EUI-48 MAC address.

  …

  Next, the seventh bit from the left, or the universal/local (U/L) bit, needs to be inverted. This bit identifies whether this interface identifier is universally or locally administered.

  …

  Once the above is done, we have a fully functional EUI-64 format address.

  …”

• Question 1160:

  What are two descriptions of three-tier network topologies? (Choose two.)

  A. The distribution layer runs Layer 2 and Layer 3 technologies

  B. The network core is designed to maintain continuous connectivity when devices fail

  C. The access layer manages routing between devices in different domains

  D. The core layer maintains wired connections for each host

  E. The core and distribution layers perform the same functions

  Correct Answer: AB