Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 1411:

  Refer to the exhibit.

  

  A network engineer is configuring a WLAN to use a WPA2 PSK and allow only specific clients to join.

  Which two actions must be taken to complete the process? (Choose two.)

  A. Enable the OSEN Policy option.
  B. Enable the 802.1X option for Authentication Key Management.
  C. Enable the WPA2 Policy option.
  D. Enable the MAC Filtering option.
  E. Enable the CCKM option for Authentication Key Management.
  C. Enable the WPA2 Policy option.
  D. Enable the MAC Filtering option.

• Question 1412:

  A new DHCP server has been deployed in a corporate environment with lease time set to eight hours.

  Which CMD command on a Windows-based device allows the engineer to verify the DHCP lease expiration?

  A. ipconfig /renew
  B. ipconfig
  C. ipconfig /all
  D. ipconfig /displaydns
  C. ipconfig /all

• Question 1413:

  DRAG DROP

  A network engineer is configuring an OSPFv2 neighbor adjacency. Drag and drop the parameters from the left onto their required categories on the right. No all parameters are used.

  Select and Place:

  

  

• Question 1414:

  A WLC sends alarms about a rogue AP, and the network administrator verifies that the alarms are caused by a legitimate autonomous AP.

  A. Place the AP into manual containment.
  B. Remove the AP from WLC management.
  C. Manually remove the AP from Pending state.
  D. Set the AP Class Type to Friendly.
  D. Set the AP Class Type to Friendly.

  ---

  A WLC will send alarms about a rogue AP when it detects an AP that is not under its management. This can happen when a legitimate autonomous AP is installed on the network. To stop the alarms, the network administrator must set the AP Class Type to Friendly. This will tell the WLC that the AP is a legitimate AP and that it should not send alarms about it.

  The other options are incorrect for the following reasons:

  Removing the AP from WLC management will stop the alarms, but it will also prevent the WLC from managing the AP. This is not necessary, since the AP is a legitimate AP. Placing the AP into manual containment will stop the alarms, but it will also prevent the AP from being used by clients. This is not necessary, since the AP is a legitimate AP. Manually removing the AP from Pending state will not stop the alarms. The WLC will continue to send alarms about the AP until the AP Class Type is set to Friendly.

• Question 1415:

  An organization secures its network with multi-factor authentication using an authenticator app on employee smartphones. How is the applic secured in the case of a user's smartphone being lost or stolen?

  A. The application requires the user to enter a PIN before it provides the second factor
  B. the application challenges a user by requiring an administrator password to reactivate when the smartphone is rebooted
  C. The application requires an aadministrator password to reactivate after a configured interval
  D. The application verifies that the user is in a specific location before it provides the second factor
  A. The application requires the user to enter a PIN before it provides the second factor

  ---

  The organization should enforce strong device lock mechanisms, such as PIN, password, fingerprint, or facial recognition, on the employee smartphones. This ensures that even if the device is lost or stolen, unauthorized individuals cannot access the contents of the device or the authenticator app.

• Question 1416:

  Which two IPv6 addresses are used to provide connectivity between two routers on a shared link? (Choose two)

  A. FF02::0001:FF00:0000/104
  B. ff06:bb43:cc13:dd16:1bb:ff14:7545:234d
  C. 2002::512:1204b:1111::1/64
  D. 2001:701:104b:1111::1/64
  E. ::ffff:10.14.101.1/96
  D. 2001:701:104b:1111::1/64
  E. ::ffff:10.14.101.1/96

  ---

  the IPv6 address "::ffff:10.14.101.1/96" is a valid representation of an IPv6 address with an embedded IPv4 address. This format is known as IPv4-mapped IPv6 address.

  In this case, "::ffff:10.14.101.1" represents the IPv4 address "10.14.101.1" embedded within an IPv6 address. The "::ffff:" prefix indicates that the following part of the address is an IPv4 address. The "/96" suffix indicates the network prefix length, specifying that the first 96 bits represent the network portion of the address.

• Question 1417:

  Which technology can prevent client devices from arbitrarily connecting to the network without state remediation?

  A. 802.1x
  B. IP Source Guard
  C. MAC Authentication Bypass
  D. 802.11n
  A. 802.1x

  ---

  802.1x is a security standard that prevents client devices from arbitrarily connecting to the network without state remediation. It provides a framework for authenticating devices that are attempting to access a LAN or WLAN.

  802.1x uses a supplicant (client device) and an authenticator (network access device) to establish a secure connection. The supplicant sends an authentication request to the authenticator, which then forwards the request to an authentication server. If the authentication server approves the request, the supplicant is allowed to access the network. If the request is denied, the supplicant is not allowed to access the network.

• Question 1418:

  When an access point is seeking to join wireless LAN controller, which message is sent to the AP-Manager interface?

  A. Discovery response
  B. DHCP request
  C. DHCP discover
  D. Discovery request
  D. Discovery request

  ---

  https://mrncciew.com/2013/03/17/ap-registration/

• Question 1419:

  What is a characteristic of private IPv4 addressing?

  A. traverse the Internet when an outbound ACL is applied
  B. issued by IANA in conjunction with an autonomous system number
  C. composed of up to 65.536 available addresses
  D. used without tracking or registration
  D. used without tracking or registration

• Question 1420:

  Refer to the exhibit. If the network environment is operating normally, which type of device must be connected to interface FastEthernet 0/1?

  

  A. DHCP client
  B. access point
  C. router
  D. PC
  C. router

  ---

  Definitly the router. Routers are networki devices that are under Administrative control. Hence, they are configured Trusted in DAI and DHCP Snooping