Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 1291:

  R1 has learned route 10.10.10.0/24 via numerous routing protocols. Which route is installed?

  A. route with the next hop that has the highest IP
  B. route with the lowest cost
  C. route with the lowest administrative distance
  D. route with the shortest prefix length
  C. route with the lowest administrative distance

• Question 1292:

  Drag and Drop

  Drag and drop the TCP or UDP details from the left onto their corresponding protocols on the right.

  Select and Place:

  

  

• Question 1293:

  Refer to the exhibit.

  

  What is the effect of this configuration?

  A. The switch port remains administratively down until the interface is connected to another switch.
  B. Dynamic ARP Inspection is disabled because the ARP ACL is missing.
  C. The switch port interface trust state becomes untrusted.
  D. The switch port remains down until it is configured to trust or untrust incoming packets.
  C. The switch port interface trust state becomes untrusted.

  ---

  Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network. It intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. This capability protects the network from certain man-in-the- middle attacks. After enabling DAI, all ports become untrusted ports.

• Question 1294:

  Which set of actions satisfy the requirement for multifactor authentication?

  A. The user enters a user name and password, and then re-enters the credentials on a second screen.
  B. The user swipes a key fob, then clicks through an email link.
  C. The users enters a user name and password, and then clicks a notification in an authentication app on a mobile device.
  D. The user enters a PIN into an RSA token, and then enters the displayed RSA key on a login screen.
  C. The users enters a user name and password, and then clicks a notification in an authentication app on a mobile device.

  ---

  This is an example of how two-factor authentication (2FA) works:

  1. The user logs in to the website or service with their username and password.

  2. The password is validated by an authentication server and, if correct, the user becomes eligible for the second factor.

  3. The authentication server sends a unique code to the user's second-factor method (such as a smartphone app).

  4. The user confirms their identity by providing the additional authentication for their second-factor method.

• Question 1295:

  What causes a port to be placed in the err-disabled state?

  A. nothing plugged into the port
  B. link flapping
  C. latency
  D. shutdown command issued on the port
  B. link flapping

  ---

  There are various reasons for the interface to go into errdisable. The reason can be:

  1. Duplex mismatch

  2. Port channel misconfiguration

  3. BPDU guard violation

  4. UniDirectional Link Detection (UDLD) condition

  5. Late-collision detection

  6. Link-flap detection

  7. Security violation

  8. Port Aggregation Protocol (PAgP) flap

  9. Layer 2 Tunneling Protocol (L2TP) guard 10.DHCP snooping rate-limit 11.Incorrect GBIC / Small Form-Factor Pluggable (SFP) module or cable 12.Address Resolution Protocol (ARP) inspection

  https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/69980-errdisable-recovery.html#anc8

• Question 1296:

  Refer to the exhibit.

  

  An administrator is configuring a new WLAN for a wireless network that has these requirements:

  1. Dual-band clients that connect to the WLAN must be directed to the 5-GHz spectrum.

  2. Wireless clients on this WLAN must be able to apply VLAN settings on the returned RADIUS attributes. Which two actions meet these requirements? (Choose two.)

  A. Enable the Client Band Select option.
  B. Enable the Coverage Hole Detection option.
  C. Enable the Allow AAA Override option.
  D. Set the MFP Client Protection option to Required.
  E. Enable the Aironet IE option
  A. Enable the Client Band Select option.
  C. Enable the Allow AAA Override option.

  ---

  
  

• Question 1297:

  How does MAC learning function?

  A. inserts MAC addresses dynamically into the CAM table
  B. restricts ports to a maximum of 10 dynamically-learned addresses
  C. protects against denial of service attacks
  D. rewrites the source and destination MAC address
  A. inserts MAC addresses dynamically into the CAM table

• Question 1298:

  Which two features introduced in SNMPv2 provides the ability to retrieve large amounts of data in one request

  A. Get
  B. GetNext
  C. Set
  D. GetBulk
  E. Inform
  D. GetBulk
  E. Inform

  ---

  SNMPv2 introduced two features that provide the ability to retrieve large amounts of data in one request and acknowledge a trap using PDUs. These features are:

  GetBulkRequest: This feature allows a management station to retrieve a large amount of data in one request, reducing the number of requests needed to retrieve the same information. The GetBulkRequest PDU specifies a starting OID and a maximum number of variables to be returned in a single response.

  InformRequest: This feature is used to acknowledge receipt of a trap message from an agent. The InformRequest PDU is similar to the trap PDU, but it includes a request identifier, which allows the management station to match the acknowledgment with the original trap. The InformRequest also requires an acknowledgment from the receiving device, which provides greater reliability in trap delivery.

• Question 1299:

  CCNA Lab simulation

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  

  Tasks

  Connectivity between three routers has been established, and IP services must be configured in the order presented to complete the implementation. Tasks assigned include configuration of NAT, NTP, DHCP, and SSH services.

  1.All traffic sent from R3 to the R1 Loopback address must be configured for NAT on R2. All source addresses must be translated from R3 to the IP address of Ethernet0/0 on R2, while using only a standard access list named PUBNET. To verify, a ping must be successful to the R1 Loopback address sourced from R3. Do not use NVI NAT configuration.

  2.Configure R1 as an NTP server and R2 as a client, not as a peer, using the IP address of the R1 Ethernet0/2 interface. Set the clock on the NTP server for midnight on May 1, 2018.

  3.Configure R1 as a DHCP server for the network 10.1.3.0/24 in a pool named NETPOOL. Using a single command, exclude addresses 1 - 10 from the range. Interface Ethernet0/2 on R3 must be issued the IP address of 10.1.3.11 via DHCP.

  4.Configure SSH connectivity from R1 to R3, while excluding access via other remote connection protocols. Access for user netadmin and password N3t4ccess must be set on router R3 using RSA and 1024 bits. Verify connectivity using an SSH session from router R1 using a destination address of 10.1.3.11. Do NOT modify console.

  A. Check the Explanation below
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. Check the Explanation below

  ---

  Explanation

  NAT:

  R2(config)# ip access list standard PUBNET

  R2(config-std-nacl)# permit 10.2.3.3

  R2(config-std-nacl)# permit 10.1.3.11

  R2(config-std-nacl)# permit 192.168.3.1

  R2(config-std-nacl)# exit

  R2(config)# interface e0/1

  R2(config-if)# ip nat inside

  R2(config)# interface e0/0

  R2(config-if)# ip nat outside

  R2(config)# ip nat inside source list PUBNET interface e0/0 overload

  NTP:

  R1# clock set 00:00:00 jan 1 2019

  R1(config)# ntp master 1

  R2(config)# ntp server 10.1.3.1

  DHCP:

  R1(config)# ip dhcp pool NETPOOL

  R1(dhcp-config)# network 10.1.3.0 255.255.255.0

  R1(config)# exit

  R1(config)# ip dhcp excluded-address 10.1. 3.1 10.1.3.10

  R3(config)# interface e0/2

  R3(config-if)# ip address dhcp

  SSH:

  R3(config)# username netadmin password N3t4ccess

  R3(config)# line vty 0 4

  R3(config-line)# login local

  R3(config-line)# exit

  R3(config)# ip domain-name cisco.com

  R3(config)# crypto key generate rsa

• Question 1300:

  What is a characteristic of RSA?

  A. It uses preshared keys for encryption.
  B. It is an asymmetric encryption algorithm.
  C. It is a symmetric decryption algorithm.
  D. It requires both sides to have identical keys for encryption.
  B. It is an asymmetric encryption algorithm.

  ---

  RSA (Rivest-Shamir-Adleman) is an asymmetric encryption algorithm, which is a type of public-key cryptography. In asymmetric encryption, a public key is used for encryption, and a private key is used for decryption. The two keys are mathematically related, but it is computationally infeasible to derive the private key from the public key.