Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 1441:

  Which global command encrypts all passwords in the running configuration?

  A. service password-encryption
  B. enable password-encryption
  C. enable secret
  D. password-encrypt
  A. service password-encryption

  ---

  https://community.cisco.com/t5/other-network-architecture-subjects/service-password-encryption-command/td-p/269324

• Question 1442:

  DRAG DROP

  Drag and drop the characteristic from the left onto the cable type on the right.

  Select and Place:

  

  

• Question 1443:

  What should a network administrator consider when deciding to implement automation?

  A. Automated systems may have difficulty expanding network changes at scale.
  B. Network automation typically is limited to the configuration and management of virtual devices within a network.
  C. Network automation typically increases enterprise management operating costs.
  D. Manual changes frequently lead to configuration errors and inconsistencies.
  D. Manual changes frequently lead to configuration errors and inconsistencies.

  ---

  When deciding to implement automation, a network administrator should consider the benefits and challenges associated with automation. Option D highlights one of the key reasons for implementing automation--manual changes often result in configuration errors and inconsistencies. Automating repetitive and error-prone tasks can help improve the accuracy and reliability of network configurations.

• Question 1444:

  What is a characteristic of a Layer 2 switch?

  A. responsible for sending data in a particular sequence
  B. maintains stateful transaction information
  C. makes forwarding decisions based on MAC addresses
  D. filters based on a transport layer protocol
  C. makes forwarding decisions based on MAC addresses

• Question 1445:

  What is the default port-security behavior on a trunk link?

  A. It causes a network loop when a violation occurs.
  B. It disables the native VLAN configuration as soon as port security is enabled.
  C. It places the port in the err-disabled state if it learns more than one MAC address.
  D. It places the port in the err-disabled slate after 10 MAC addresses are statically configured.
  C. It places the port in the err-disabled state if it learns more than one MAC address.

• Question 1446:

  Which network allows devices to communicate without the need to access the Internet?

  A. 172.9.0.0/16
  B. 172.28.0.0/16
  C. 192.0.0.0/8
  D. 209.165.201.0/24
  B. 172.28.0.0/16

  ---

  This question asks about the private ranges of IPv4 addresses. The private ranges of each class of IPv4 are listed below:

  1. Class A private IP address ranges from 10.0.0.0 to 10.255.255.255

  2. Class B private IP address ranges from 172.16.0.0 to 172.31.255.255

  3. Class C private IP address ranges from 192.168.0.0 to 192.168.255.255

  Only the network 172.28.0.0/16 belongs to the private IP address (of class B).

• Question 1447:

  Which advantage does the network assurance capability of Cisco DNA Center provide over traditional campus management?

  A. Cisco DNA Center correlates information from different management protocols to obtain insights, and traditional campus management requires manual analysis.
  B. Cisco DNA Center handles management tasks at the controller to reduce the load on infrastructure devices, and traditional campus management uses the data backbone.
  C. Cisco DNA Center leverages YANG and NETCONF to assess the status of fabric and nonfabric devices, and traditional campus management uses CLI exclusively.
  D. Cisco DNA Center automatically compares security postures among network devices, and traditional campus management needs manual comparisons.
  A. Cisco DNA Center correlates information from different management protocols to obtain insights, and traditional campus management requires manual analysis.

  ---

• Question 1448:

  What is an Ansible inventory?

  A. unit of Python code to be executed within Ansible
  B. file that defines the target devices upon which commands and tasks are executed
  C. device with Ansible installed that manages target devices
  D. collection of actions to perform on target devices, expressed in YAML format
  B. file that defines the target devices upon which commands and tasks are executed

  ---

  An inventory is a file that contains a list of managed nodes that Ansible can connect to and manage. The inventory file can be a simple text file, a directory of files, or a dynamic script.

• Question 1449:

  What is the primary difference between AAA authentication and authorization?

  A. Authentication identifies and verifies a user who is attempting to access a system, and authorization controls that tasks the user can perform.
  B. Authentication controls the system processes a user can access, and authorization logs the activities the user initiates.
  C. Authentication verifies a username and password, and authorization handles the communication between the authentication agent and the user database.
  D. Authentication identifies a user who is attempting to access a system, and authorization validates the user's password.
  A. Authentication identifies and verifies a user who is attempting to access a system, and authorization controls that tasks the user can perform.

  ---

  
  

  AAA stands for Authentication, Authorization and Accounting.

  1. Authentication: Specify who you are (usually via login username and password)

  2. Authorization: Specify what actions you can do, what resource you can access

  3. Accounting: Monitor what you do, how long you do it (can be used for billing and auditing) An example of AAA is shown below:

  Authentication: "I am a normal user. My username/password is user_tom/learnforever"

  Authorization: "user_tom can access LearnCCNA server via HTTP and FTP"

  Accounting: "user_tom accessed LearnCCNA server for 2 hours". This user only uses "show" commands.

• Question 1450:

  Refer to the exhibit.

  

  Which address will the client contact to renew their IP address when the current lease expires?

  A. 192.168.25.103
  B. 192.168.25.1
  C. 192.168.25.100
  D. 192.168.25.254
  C. 192.168.25.100