Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 161:

  Which technology can prevent client devices from arbitrarily connecting to the network without state remediation?

  A. 802.1x
  B. IP Source Guard
  C. MAC Authentication Bypass
  D. 802.11n
  A. 802.1x

• Question 162:

  What are two behaviors of a point-to-point WAN topology? (Choose two.)

  A. It leverages a dedicated connection.
  B. It provides direct connections betwaen each router in the topology.
  C. It delivers redundancy between the central office and branch offices.
  D. It uses a single router to route traffic between sites.
  E. It connects remote networks through a single line.
  A. It leverages a dedicated connection.
  E. It connects remote networks through a single line.

  ---

  A point-to-point WAN topology uses a dedicated line or circuit to connect two network devices, such as routers or switches, over a long distance. This dedicated connection is typically established by a service provider and provides a direct link between the two devices, with no intermediary network devices in between. This topology is often used to connect remote sites or branch offices to a central office or data center, and can be used for various WAN technologies such as T1/E1 lines, leased lines, or MPLS circuits.

  Option B is incorrect because a point-to-point topology only provides a direct connection between the two devices at each end of the link, not between each router in the topology.

  Option C is incorrect because point-to-point topologies typically do not provide redundancy between sites, as there is only one dedicated line or circuit connecting the two devices.

  Option D is incorrect because point-to-point topologies require two routers or devices, one at each end of the dedicated line or circuit, to route traffic between the sites.

• Question 163:

  Refer to the exhibit.

  

  The EtherChannel is configured with a speed of 1000 and duplex as full on both ends of channel group 1. What is the next step to configure the channel on switch A to respond to but not initiate LACP communication?

  A. interface range GigabitEthernet0/0/0-15 channel-group 1 mode on
  B. interface range GigabitEthernet0/0/0-15 channel-group 1 mode desirable
  C. interface port-channel 1 channel-group 1 mode auto
  D. interface port-channel 1 channel-group 1 mode passive
  D. interface port-channel 1 channel-group 1 mode passive

  ---

  This questions say that "SW A RESPOND, BUT NOT START LACP COMMUNICATION". Ask that "WHICH LACP MODE DOESN`T START COMMUNICATION?"

  LACP modes -> Active/Passive.

  Active -> Start Communication

  Passive -> Doesn`t start Communication.

• Question 164:

  Which Cisco proprietary protocol ensures traffic recovers immediately, transparently, and automatically when edge devices or access circuits fail?

  A. FHRP
  B. VRRP
  C. HSRP
  D. SLB
  C. HSRP

  ---

  HSRP is a First Hop Redundancy Protocol (FHRP) developed by Cisco that provides high availability for the default gateway or first hop router in a network. It allows multiple routers to work together as a virtual router, sharing the same IP address as the default gateway. When the primary router or interface fails, HSRP quickly detects the failure and automatically transitions to a backup router, ensuring uninterrupted traffic flow.

• Question 165:

  Which encryption method is used by WPA3?

  A. PSK
  B. TKIP
  C. SAE
  D. AES
  D. AES

  ---

  WPA3 (Wi-Fi Protected Access 3) primarily uses the Advanced Encryption Standard (AES) encryption method. AES is a strong and widely adopted encryption algorithm that provides secure and robust encryption for wireless communication. WPA3 improves the security of Wi-Fi networks by incorporating stronger encryption protocols, and AES is the recommended encryption algorithm for ensuring data confidentiality in WPA3.

  TKIP (Temporal Key Integrity Protocol) was used in the earlier WPA and WPA2 security standards but is not used in WPA3 due to its known security vulnerabilities.

  SAE (Simultaneous Authentication of Equals) is the authentication method used in WPA3-Personal (WPA3-PKS) mode, but it is not the encryption method.

  PSK (Pre-Shared Key) refers to a method of authentication rather than encryption and is commonly used in WPA2-Personal mode.

• Question 166:

  DRAG DROP

  Drag and drop the Ansible terms from the left onto the right.

  Select and Place:

  

  

• Question 167:

  What is recommended for the wireless infrastructure design of an organization?

  A. group access points together to increase throughput on a given channel
  B. configure the first three access points are configured to use Channels 1, 6, and 11
  C. include a least two access points on nonoverlapping channels to support load balancing
  D. assign physically adjacent access points to the same Wi-Fi channel
  B. configure the first three access points are configured to use Channels 1, 6, and 11

• Question 168:

  When a site-to-site VPN is used, which protocol is responsible for the transport of user data?

  A. IPsec
  B. IKEv1
  C. MD5
  D. IKEv2
  A. IPsec

  ---

  A site-to-site VPN allows offices in multiple fixed locations to establish secure connections with each other over a public network such as the Internet. A site-to-site VPN means that two sites create a VPN tunnel by encrypting and sending data between two devices. One set of rules for creating a site-to-site VPN is defined by IPsec.

• Question 169:

  Which configuration is needed to generate an RSA key for SSH on a router?

  A. Configure the version of SSH
  B. Configure VTY access.
  C. Create a user with a password.
  D. Assign a DNS domain name
  D. Assign a DNS domain name

• Question 170:

  Which two are features of IPv6? (Choose two.)

  A. anycast
  B. broadcast
  C. multicast
  D. podcast
  E. allcast
  A. anycast
  C. multicast

  ---

  IPv6 addresses are classified by the primary addressing and routing methodologies common in networking: unicast addressing, anycast addressing, and multicast addressing. A unicast address identifies a single network interface. The Internet Protocol delivers packets sent to a unicast address to that specific interface. An anycast address is assigned to a group of interfaces, usually belonging to different nodes. A packet sent to an anycast address is delivered to just one of the member interfaces, typically

  the nearest host, according to the routing protocol's definition of distance. Anycast addresses cannot be identified easily, they have the same format as unicast addresses, and differ only by their presence in the network at multiple points. Almost any unicast address can be employed as an anycast address.

  A multicast address is also used by multiple hosts, which acquire the multicast address destination by participating in the multicast distribution protocol among the network routers. A packet that is sent to a multicast address is delivered to all interfaces that have joined the corresponding multicast group.