Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 1401:

  Refer to the exhibit.

  

  Which password must an engineer use to enter the enable mode?

  A. adminadmin123
  B. cisco123
  C. default
  D. testing1234
  D. testing1234

  ---

  If neither the enable password command nor the enable secret command is configured, and if there is a line password configured for the console, the console line password serves as the enable password for all VTY sessions -> The "enable secret" will be used first if available, then "enable password" and line password.

• Question 1402:

  What are network endpoints?

  A. act as routers to connect a user to the service prowler network
  B. a threat to the network if they are compromised
  C. support inter-VLAN connectivity
  D. enforce policies for campus-wide traffic going to the internet
  B. a threat to the network if they are compromised

  ---

  https://www.paloaltonetworks.com/cyberpedia/what-is-an-endpoint

• Question 1403:

  Which interface mode must be configured to connect the lightweight APs in a centralized architecture?

  A. WLAN dynamic
  B. management
  C. trunk
  D. access
  D. access

• Question 1404:

  DRAG DROP

  Drag and drop each characteristic of device-management technologies from the left onto the deployment type on the right.

  Select and Place:

  

  

• Question 1405:

  Refer to the exhibit.

  

  How does the router manage traffic to 192.168.12.16?

  A. It chooses the EIGRP route because it has the lowest administrative distance.
  B. It load-balances traffic between all three routes.
  C. It chooses the OSPF route because it has the longest prefix inclusive of the destination address.
  D. It selects the RIP route because it has the longest prefix inclusive of the destination address.
  D. It selects the RIP route because it has the longest prefix inclusive of the destination address.

  ---

  OSPF ( /28) Is not inclusive of the IP address. 0-15 = 16 IPs = /28. RIP is because /27 = 32 IPs, 0-31

• Question 1406:

  What is the primary effect of the spanning-tree portfast command?

  A. It immediately enables the port in the listening state.
  B. It immediately puts the port into the forwarding state when the switch is reloaded.
  C. It enabled BPDU messages.
  D. It minimizes spanning-tree convergence time.
  D. It minimizes spanning-tree convergence time.

  ---

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_55_se/configuration/guide/3560_scg/swstpopt.html

• Question 1407:

  Refer to the exhibit.

  

  What is the next step to complete the implementation for the partial NAT configuration shown?

  A. Reconfigure the static NAT entries that overlap the NAT pool
  B. Configure the NAT outside interface
  C. Modify the access list for the internal network on e0/1
  D. Apply the ACL to the pool configuration
  A. Reconfigure the static NAT entries that overlap the NAT pool

  ---

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-16/nat-xe-16-book/iadnat-addr-consv.html#:~:text=ip%20nat%20pool%20net%2D208%20172.31.233.208%20172.31.233.223,inside%0A!%0Aaccess%2Dlist% 201%20permit%2010.114.11.0%200.0.0.255

• Question 1408:

  Which action does the router take as it forwards a packet through the network?

  A. The router replaces the source and desinaoon labels wth the sending router uterface label as a source and the next hop router label as a desbnabon
  B. The router encapsulates the source and destination IP addresses with the sending router P address as the source and the neighbor IP address as the destination
  C. The router replaces the original source and destination MAC addresses with the sending router MAC address as the source and neighbor MAC address as the destination
  D. The router encapsulates the original packet and then includes a tag that identifies the source router MAC address and transmit transparently to the destination
  C. The router replaces the original source and destination MAC addresses with the sending router MAC address as the source and neighbor MAC address as the destination

  ---

• Question 1409:

  Which wireless band provides the greatest number of nonoverlapping channels?

  A. 2.4 GHz
  B. 5 GHz
  C. 900 MHz
  D. 60 GHz
  B. 5 GHz

  ---

  The 5 GHz band provides significantly more nonoverlapping channels than the 2.4 GHz band, reducing interference and improving performance in high-density wireless environments.

• Question 1410:

  Which security method is used to prevent man-in-the-middle attack?

  A. authorization
  B. authentication
  C. anti-replay
  D. accounting
  B. authentication

  ---

  Authentication is the security method used to prevent man-in-the-middle attacks. Man-in-the-middle attacks occur when an attacker intercepts and alters communication between two parties, without their knowledge. By authenticating the identities of the communicating parties, it becomes more difficult for an attacker to impersonate one of them and insert themselves into the communication. Authentication methods can include passwords, digital certificates, biometric authentication, two-factor authentication (2FA), and other mechanisms that verify the identity of the communicating parties. By ensuring that the parties involved are who they claim to be, authentication helps protect against man-in-the-middle attacks and helps establish a secure and trusted communication channel.