Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 261:

  What is the function of generative AI in network operations?

  A. It computes optimal data storage solutions.
  B. It creates synthetic network configurations.
  C. It disables unused services.
  D. It deploys network firmware updates.
  B. It creates synthetic network configurations.

  ---

  Generative AI is capable of generating new content, models, or configurations based on patterns it has learned from existing data. In network operations, it can be used to create synthetic network configurations, simulate different network setups, or predict how changes to the network would affect performance. This helps network administrators optimize the network, plan for expansions, or troubleshoot issues by testing various configurations without making actual changes to the live network.

• Question 262:

  Which management security process is invoked when a user logs in to a network device using their username and password?

  A. authentication
  B. auditing
  C. accounting
  D. authorization
  A. authentication

• Question 263:

  Which two cable types must be used to connect an access point to the WLC when 2.5-Gbps and 5-Gbps upload speeds are required? (Choose two.)

  A. 10GBASE-T
  B. 1000BASE-LX/LH
  C. Cat 5e
  D. Cat 5
  E. Cat 3
  A. 10GBASE-T
  C. Cat 5e

  ---

  A more viable option is to upgrade your Cat5e cable without ever touching a wall. This is the approach that Cisco and the NBASE-T Alliance have taken to give us an immediate and cost effective solution. Thanks to their work, there is now a solution where you can get 2.5 and even 5 Gbps across existing Cat5e cable.

  https://www.mercadoit.com/blog/noticias-it/como-cisco-catalyst-multigigabit-puede-aumentar-las-velocidades-de-red/

• Question 264:

  A network engineer is configuring a new router at a branch office. The router is connected to an upstream WAN network that allows the branch to communicate with the head office. The central time server with IP address 172.24.54.8 is located behind a firewall at the head office.

  Which command must the engineer configure so that the software clock of the new router synchronizes with the time server?

  A. ntp server 172.24.54.8
  B. ntp master 172.24.54.8
  C. ntp peer 172.24.54.8
  D. ntp client 172.24.54.8
  A. ntp server 172.24.54.8

• Question 265:

  Which two pieces of information can you learn by viewing the routing table? (Choose two.)

  A. whether an ACL was applied inbound or outbound to an interface
  B. the EIGRP or BGP autonomous system
  C. whether the administrative distance was manually or dynamically configured
  D. which neighbor adjacencies are established
  E. the length of time that a route has been known
  C. whether the administrative distance was manually or dynamically configured
  D. which neighbor adjacencies are established

• Question 266:

  Which access layer threat-mitigation technique provides security based on identity?

  A. Dynamic ARP Inspection
  B. using a non-default native VLAN
  C. 802.1x
  D. DHCP snooping
  C. 802.1x

  ---

  https://alexwilkins.dev/index.php/1-7-describe-common-access-layer-threat-mitigation-techniques/

• Question 267:

  Which wireless security protocol relies on Perfect Forward Secrecy?

  A. WPA3
  B. WPA
  C. WEP
  D. WPA2
  A. WPA3

  ---

  WPA3 (Wi-Fi Protected Access 3) is the newest wireless security protocol designed to encrypt data using a frequent and automatic encryption type called Perfect Forward Secrecy.

• Question 268:

  Refer to the exhibit. Which switch becomes the root of the spanning tree for VLAN 110?

  

  A. Switch 1
  B. Switch 2
  C. Switch 3
  D. Switch 4
  B. Switch 2

  ---

  The root bridge is the bridge with the lowest Bridge ID. All the decisions like which ports are the root ports (the port with the best path to the root bridge) are made from the perspective of the root bridge. In case of a tie (not the case in this example) then the root bridge will be the switch with the lowest MAC address.

• Question 269:

  DRAG DROP

  Drag and drop the Wi-Fi terms from the left onto the descriptions on the right.

  Select and Place:

  

  

• Question 270:

  CCNA Lab simulation

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked the lab closes and cannot be reopened.

  Topology

  

  Tasks

  Refer to the topology. All physical cabling is in place. Configure local users accounts, modify the Named ACL (NACL), and configure DHCP Snooping. The current contents of the NACL must remain intact.

  1.Configure a local account on Sw103 with telnet access only on virtual ports 0-4. Use the following information: Username: devnet Password: access8cli Algorithm type: SHA256 Privilege level: Exec mode

  2.Using the minimum number of ACEs, modify the existing NACL "INTERNET_ACL" to control network traffic destined for the Internet, and apply the ACL on R1: Allow HTTPS from 172.16.0.0/16 Allow Telnet only for VLAN 101 Restrict all other traffic and log the ingress interface, source MAC address, the packet's source and destination IP addresses, and ports

  3.Configure Sw101: Enable DHCP Snooping for VLAN 101 Disable DHCP Option-82 data insertion Enable DHCP Snooping MAC address verification

  A. Check the Explanation below
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. Check the Explanation below

  ---

  Explanation

  SW103:

  SW103>en

  SW103#config t

  SW103(config)# username devnet privilege 15 algorithm-type sha256 secret access8cli

  SW103(config)# line vty 0 4

  SW103(config-line)#login local

  SW103(config-line)#transport input telnet

  SW103(config-line)#end

  SW103# wr

  R1:

  R1>en

  R1#config t

  R1(config)# ip access-list extended INTERNET_ACL

  R1(config-ext-nacl)#permit tcp 172.16.0.0 0.0.255.255 any eq 443

  R1(config-ext-nacl)#permit tcp 172.16.101.0 0.0.0.255 any eq telnet

  R1(config-ext-nacl)#deny ip any any log

  R1(config-ext-nacl)#end

  R1#wr

  SW101:

  Sw101>en

  Sw101#config t

  Sw101(config)#ip dhcp snooping vlan 101

  Sw101(config)#no ip dhcp snooping information option

  Sw101(config)#ip dhcp snooping verify mac-address

  Sw101(config)#end

  Sw101#wr