Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 1211:

  Which definition describes JWT in regard to REST API security?

  A. an encrypted JSON token that is used for authentication
  B. an encrypted JSON token that is used for authorization
  C. an encoded JSON token that is used to securely exchange information
  D. an encoded JSON token that is used for authentication
  D. an encoded JSON token that is used for authentication

  ---

  JSON Web Tokens (JWT) is an open standard for securely transmitting information between parties as a JSON object. In the context of REST API security, JWT is typically used for authentication purposes. It is a compact, URL-safe means of representing claims to be transferred between two parties.

  When a user authenticates with a REST API, the server generates a JWT token that contains user information, such as the user ID and access privileges. The token is then sent to the client, typically in the form of an HTTP header, and is included in subsequent requests to the API.

  The server then validates the token to ensure that it was issued by a trusted authority and that it has not been tampered with. If the token is valid, the server grants access to the requested resources. If the token is invalid or has expired, the server denies access to the resources.

  Therefore, the correct definition of JWT in regard to REST API security is that it is an encoded JSON token that is used for authentication.

• Question 1212:

  Refer to the exhibit.

  

  Each router must be configured with the last usable IP address in the subnet. Which configuration fulfills this requirement?

  A. R7# interface FastEthernet1/0 ip address 10.88.31.127 255.255.255.192 R8# interface FastEthernet0/0 ip address 10.19.63.95 255.255.255.240 R9# interface FastEthernet1/1 ip address 10.23.98.159 255.255.255.224
  B. R7# interface FastEthernet1/0 ip address 10.88.31.126 255.255.255.240 R8# interface FastEthernet0/0 ip address 10.19.63.94 255.255.255.192 R9# interface FastEthernet1/1 ip address 10.23.98.158 255.255.255.248
  C. R7# interface FastEthernet1/0 ip address 10.88.31.127 255.255.255.240 R8# interface FastEthernet0/0 ip address 10.19.63.95 255.255.255.192 R9# interface FastEthernet1/1 ip address 10.23.98.159 255.255.255.248
  D. R7# interface FastEthernet1/0 ip address 10.88.31.126 255.255.255.192 R8# interface FastEthernet0/0 ip address 10.19.63.94 255.255.255.240 R9# interface FastEthernet1/1 ip address 10.23.98.158 255.255.255.224
  D. R7# interface FastEthernet1/0 ip address 10.88.31.126 255.255.255.192 R8# interface FastEthernet0/0 ip address 10.19.63.94 255.255.255.240 R9# interface FastEthernet1/1 ip address 10.23.98.158 255.255.255.224

  ---

  
  

• Question 1213:

  A network administrator is setting up a new IPv6 network using the 64-bit address 2001:0EB8:00C1:2200:0001:0000:0000:0331/64. To simplify the configuration, the administrator has decided to compress the address. Which IP address must the administrator configure?

  A. ipv6 address 2001:EB8:C1:22:1::331/64
  B. ipv6 address 21:EB8:C1:2200:1::331/64
  C. ipv6 address 2001:EB8:C1:2200:1:0000:331/64
  D. ipv6 address 2001:EB8:C1:2200:1::331/64
  D. ipv6 address 2001:EB8:C1:2200:1::331/64

• Question 1214:

  CCNA Lab simulation

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology lab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology Tasks

  

  All physical cabling is in place and verified. Router R1 is configured and passing traffic for VLANs 5 and 6. All relevant ports are pre-configured as 802.1q trunks.

  1.Configure SW-1 port E0/0 to permit only VLANS 5 and 6

  2.Configure both SW-1 and SW-2's E0/1 ports to send and receive untagged traffic over VLAN 77

  3.Configure SW-2 E0/2 port to permit only VLAN 6

  4.Configure both SW-3 and SW-4 ports e0/0 and e0/1 for link aggregation using the industry standard protocol with the following requirements:

  1. SW-3 ports must immediately negotiate the aggregation protocol

  2. SW-4 ports must not initiate the negotiation for the aggregation protocol

  3. Use the designated number assignment

  A. Check the Explanation below
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. Check the Explanation below

  ---

  Explanation

  SW-1:

  SW-1>en

  SW-1# Config t

  SW-1(config)# int e0/0

  SW-1(config-if) # switchport trunk allowed vlan 5,6

  SW-1(config)# int e0/1

  SW-1(config-if) # switchport trunk allowed vlan 77

  SW-1(config-if) # end

  SW-1# wr mem

  SW-2:

  SW-2>en

  SW-2# Config t

  SW-2(config)# interface range eth0/0-1

  SW-2(config-if) # channel-group 44 mode active

  SW-2(config)# int e0/1

  SW-2(config-if) # switchport trunk allowed vlan 77

  SW-2(config-if) # end

  SW-2# wr mem

  SW-3>en

  SW-3# Config t

  SW-3(config)# interface range eth0/0-1

  SW-3(config-if) # channel-group 34 mode active

  SW-3(config)# interface port34

  SW-3(config-if) # switchport trunk encapsulation dot1q

  SW-3(config-if) # end

  SW-3# wr mem

  SW-4>en

  SW-4# Config t

  SW-4(config)# interface range eth0/0-1

  SW-4(config-if) # channel-group 34 mode passive

  SW-4(config)# interface port34

  SW-4(config-if) # switchport trunk encapsulation dot1q

  SW-4(config-if) # end

  SW-4# wr mem

• Question 1215:

  A network engineer must configure an access list on a new Cisco IOS router. The access list must deny HTTP traffic to network 10.125.128.32/27 from the 192.168.240.0/20 network, but it must allow the 192.168.240.0/20 network to reach the rest of the 10.0.0.0/8 network.

  Which configuration must the engineer apply?

  A. ip access-list extended deny_outbound 10 permit ip 192.168.240.0 255.255.240.0 10.0.0.0 255.0.0.0 20 deny tcp 192.168.240.0 255.255.240.0 10.125.128.32 255.255.255.224 eq 443 30 permit ip any any
  B. ip access-list extended deny_outbound 10 deny tcp 192.168.240.0 0.0.15.255 10.125.128.32 0.0.0.31 eq 80 20 permit ip 192.168.240.0 0.0.15.255 10.0.0.0 0.255.255.255 30 deny ip any any log
  C. ip access-list extended deny_outbound 10 deny tcp 10.125.128.32 255.255.255.224 192.168.240.0 255.255.240.0 eq 443 20 deny tcp 192.168.240.0 255.255.240.0 10.125.128.32 255.255.255.224 eq 443 30 permit ip 192.168.240.0 255.255.240.0 10.0.0.0 255.0.0.0
  D. ip access-list extended deny_outbound 10 deny tcp 192.168.240.0 0.0.15.255 any eq 80 20 deny tcp 192.168.240.0 0.0.15.255 10.125.128.32 0.0.0.31 eq 80 30 permit ip 192.168.240.0 0.0.15.255 10.0.0.0 0.255.255.255
  B. ip access-list extended deny_outbound 10 deny tcp 192.168.240.0 0.0.15.255 10.125.128.32 0.0.0.31 eq 80 20 permit ip 192.168.240.0 0.0.15.255 10.0.0.0 0.255.255.255 30 deny ip any any log

  ---

  
  

• Question 1216:

  What are two benefits of private IPv4 IP addresses? (Choose two.)

  A. They are routed the same as public IP addresses.
  B. They are less costly than public IP addresses.
  C. They can be assigned to devices without Internet connections.
  D. They eliminate the necessity for NAT policies.
  E. They eliminate duplicate IP conflicts.
  B. They are less costly than public IP addresses.
  C. They can be assigned to devices without Internet connections.

• Question 1217:

  DRAG DROP

  Drag and drop the characteristic from the left onto the IPv6 address type on the right.

  Select and Place:

  

  

• Question 1218:

  Refer to the exhibit. What is represented beginning with line 1 and ending with line 5?

  

  A. object
  B. value
  C. key
  D. array
  D. array

  ---

  Netacad Mod 3 14.2.6

  These are some of the characteristics of JSON:

  It uses a hierarchical structure and contains nested values.

  It uses braces { } to hold objects and square brackets [ ] hold arrays.

  Its data is written as key/value pairs.

• Question 1219:

  What is a characteristic of private IPv4 addressing?

  A. used on the external interface of a firewall
  B. used by ISP's when only one IP is needed to connect to the internet
  C. reduces the forwarding table on network routers
  D. address space which is isolated from the internet
  D. address space which is isolated from the internet

• Question 1220:

  When a floating static route is configured, which action ensures that the backup route is used when the primary route fails?

  A. The administrative distance must be higher on the primary route so that the backup route becomes secondary.
  B. The default-information originate command must be configured for the route to be installed into the routing table.
  C. The floating static route must have a lower administrative distance that the primary route so it is used as a backup.
  D. The floating static route must have a higher administrative distance that the primary route so it is used as a backup
  D. The floating static route must have a higher administrative distance that the primary route so it is used as a backup