Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 1561:

  In what way does a network supervisor reduce maintenance costs while maintaining network integrity on a traditionally managed network?

  A. They install an automated network-monitoring system to provide early warning of network issues.
  B. They employ additional network administrators to proactively manage the network.
  C. They use automation to centralize network-management tasks.
  D. They automate change-management processes that verify issue resolution.
  C. They use automation to centralize network-management tasks.

  ---

  Using automation to centralize network-management tasks is a strategy that can help reduce maintenance costs while maintaining network integrity. By automating routine and repetitive tasks, a network supervisor can streamline operations, reduce the likelihood of errors, and enhance overall efficiency. Centralized management through automation allows for more effective monitoring, configuration management, and troubleshooting, contributing to network stability.

• Question 1562:

  Which standard is required when more than one distribution system port and only one IP address are configured for a Cisco WLC?

  A. 802.3ad
  B. 802.1q
  C. 802.1d
  D. 802.1af
  B. 802.1q

  ---

  In a Cisco Wireless LAN Controller (WLC) setup, when more than one distribution system (DS) port is configured and only one IP address is used, 802.1q is the standard required. This is because 802.1q is the IEEE standard for VLAN tagging, which allows the same physical port to carry multiple VLANs, and is essential when handling traffic from multiple ports that share a single IP address.

• Question 1563:

  DRAG DROP

  Drag and drop the statements about device management from the left onto the corresponding types on the right.

  Select and Place:

  

  

• Question 1564:

  A Cisco engineer must configure a single switch interface to meet these requirements

  1. accept untagged frames and place them in VLAN 20

  2. accept tagged frames in VLAN 30 when CDP detects a Cisco IP phone

  Which command set must the engineer apply?

  A. switchport mode dynamic desirable switchport access vlan 20 switchport trunk allowed vlan 30 switchport voice vlan 30
  B. switchport mode dynamic auto switchport trunk native vlan 20 switchport trunk allowed vlan 30 switchport voice vlan 30
  C. switchport mode access switchport access vlan 20 switchport voice vlan 30
  D. switchport mode trunk switchport access vlan 20 switchport voice vlan 30
  C. switchport mode access switchport access vlan 20 switchport voice vlan 30

  ---

  The data vlan is connected to the IP phone. Data VLANs connected to the IP phones are untagged by default.

  The IP phone connected to a switchport should learn its vlan using cdp. To configure this, the command is "switchport voice Vlan 30"

  https://www.practicalnetworking.net/stand-alone/voice-vlan-auxiliary-vlan/

  https://docs.nvidia.com/networking-ethernet-software/cumulus-linux-40/Layer-2/Link-Layer-Discovery-Protocol/Voice-VLAN/

• Question 1565:

  Which command must be entered so that the default gateway is automatically distributed when DHCP is configured on a router?

  A. dns-server
  B. default-router
  C. ip helper-address
  D. default-gateway
  B. default-router

• Question 1566:

  Refer to the exhibit.

  

  The loopback1 interface of the Atlanta router must reach the loopback3 interface of the Washington router.

  Which two IPv6 static routes must be configured?

  A. ipv6 route 2000::1/128 2012::2
  B. ipv6 route 2000::1/128 2012::1
  C. ipv6 route 2000:3 123 s0/0/0
  D. ipv6 route 2000::3/128 2023::3
  E. ipv6 route 2000::1/128 s0/0/1
  B. ipv6 route 2000::1/128 2012::1
  D. ipv6 route 2000::3/128 2023::3

• Question 1567:

  What is a zero-day exploit?

  A. It is when a new network vulnerability is discovered before a fix is available
  B. It is when the perpetrator inserts itself in a conversation between two parties and captures or alters data.
  C. It is when the network is saturated with malicious traffic that overloads resources and bandwidth
  D. It is when an attacker inserts malicious code into a SQL server.
  A. It is when a new network vulnerability is discovered before a fix is available

  ---

  "Zero-day" is a broad term that describes recently discovered security vulnerabilities that hackers can use to attack systems. The term "zero-day" refers to the fact that the vendor or developer has only just learned of the flaw – which means they have had “zero days” to fix it.

• Question 1568:

  Refer to the exhibit.

  

  A frame on VLAN 1 on switch S1 is sent to switch S2 where the frame is received on VLAN 2. What causes this behavior?

  A. trunk mode mismatches
  B. allowing only VLAN 2 on the destination
  C. native VLAN mismatches
  D. VLANs that do not correspond to a unique IP subnet
  C. native VLAN mismatches

  ---

  Untagged frames are encapsulated with the native VLAN. In this case, the native VLANs are different so although S1 will tag it as VLAN 1 it will be received by S2.

• Question 1569:

  What protocol allows an engineer to back up 20 network router configurations globally while using the copy function?

  A. SMTP
  B. SNMP
  C. TCP
  D. FTP
  B. SNMP

  ---

  It will use SNMP to send a copy command to all the switches, and the copy command will use TFTP to send the config to the TFTP Server.

• Question 1570:

  Refer to the exhibit.

  

  A network administrator must permit traffic from the 10.10.0.0/24 subnet to the WAN on interlace Seria10. What is the effect of the configuration as the administrator applies the command?

  A. The permit command fails and returns an error code.
  B. The router accepts all incoming traffic to Seria10 with the last octet of the source IP set to 0.
  C. The sourced traffic from IP range 10.0.0.0 -10.0.0.255 is allowed on Seria10.
  D. The router fails to apply the access list to the interface.
  D. The router fails to apply the access list to the interface.

  ---

  The router will fail to apply the ACL to the Serial interface because it doesn't use the right syntax. The right interface subcommand is: ip access-group 10 in. Also it would not work as intended because it includes the wrong subnet.