Cisco CCNA 200-301 Questions & Answers

• Question 291:

  What is the purpose of an ESSID?

  A. It allows multiple access points to provide a common network for client connections.

  B. It supports fast roaming features such as 802.11 r, 802.11k, and 802.11v.

  C. It serves as the wireless MAC address of the access point.

  D. It provides greater security than a standard SSID.

  Correct Answer: A

  ESSID stands for Extended Service Set Identifier. It is essentially the name of a wireless network. When multiple access points are used to cover a larger area or provide better coverage, they can be configured with the same ESSID to allow client devices to seamlessly roam between them while maintaining a continuous connection to the network. This helps create a common network for client connections, enabling devices to switch between access points without losing connectivity. The ESSID serves as a way for clients to identify and connect to the desired wireless network. The other options (B, C, and D) do not accurately describe the purpose of an ESSID.

• Question 292:

  What is a characteristic of an SSID in wireless networks?

  A. allows easy file sharing between endpoints

  B. provides protection against spyware

  C. associates a name to a wireless network

  D. eliminates network piggybacking

  Correct Answer: C

  An SSID (Service Set Identifier) is a name that identifies a wireless network. It is used to differentiate between different wireless networks within range of each other. When a device wants to connect to a specific wireless network, it needs to know the SSID of that network. The SSID is used during the process of associating a device with a wireless access point or router.

• Question 293:

  Which capability does TFTP provide?

  A. loads configuration files on systems without data storage devices

  B. provides authentication for data communications over a private data network

  C. provides encryption mechanisms for file transfer across a WAN

  D. provides secure file access within the LAN

  Correct Answer: A

  TFTP (Trivial File Transfer Protocol) is a simple file transfer protocol that is often used to transfer configuration files or firmware to network devices, such as routers or switches, during the boot process. TFTP is lightweight and lacks advanced features like authentication or encryption, making it suitable for basic file transfer operations in situations where security is not a primary concern.

• Question 294:

  Which selections must be used on the WLC when implementing a RADIUS server for wireless authentication?

  A. Client Exclusion and SSH

  B. Network Access Control State and SSH

  C. AAA Override and the IP address of the server

  D. 802.1x and the MAC address of the server

  Correct Answer: C

  AAA Override: This feature on a WLC allows the WLC to override the user roles based on the RADIUS attributes received from the RADIUS server. This is important for dynamic role assignment and other policy-related decisions. The IP address of the server: This is crucial for the WLC to know where the RADIUS server is located so that it can send authentication requests to it.

• Question 295:

  What is a characteristic of a Layer 2 switch?

  A. responsible for sending data in a particular sequence

  B. uses routers to create collision domains

  C. avoids MAC address storage for faster transmission

  D. uses the data link layer for communications

  Correct Answer: D

• Question 296:

  Which protocol does a REST API use to communicate?

  A. SSH

  B. STP

  C. SNMP

  D. HTTP

  Correct Answer: D

• Question 297:

  How does MAC learning function?

  A. restricts ports to a maximum of 10 dynamically-learned addresses

  B. increases security on the management VLAN

  C. drops received MAC addresses not listed in the address table

  D. associates the MAC address with the port on which it is received

  Correct Answer: D

• Question 298:

  What is a characteristic of a Layer 2 switch?

  A. transfers all frames received to every connected device

  B. offers one collision domain for all connected devices

  C. transmits exclusively at half duplex

  D. supports segmentation using tagging protocols

  Correct Answer: D

  Layer 2 switches are capable of supporting network segmentation using tagging protocols, such as VLANs (Virtual Local Area Networks). VLANs allow the network to be logically divided into separate broadcast domains, providing isolation and improved network management. VLAN tagging, typically done using the 802.1Q standard, allows the switch to identify and differentiate frames belonging to different VLANs.

• Question 299:

  What is a characteristic of frame switching?

  A. populates the ARP table with the egress port

  B. drops received MAC addresses not listed in the address table

  C. stores and forwards frames in a buffer and uses error checking

  D. rewrites the source and destination MAC address

  Correct Answer: C

• Question 300:

  How does IPsec provide secure networking for applications within an organization?

  A. It takes advantage of FTP to secure file transfers between nodes on the network.

  B. It provides GRE tunnels to transmit traffic securely between network nodes.

  C. It enables sets of security associations between peers.

  D. It leverages TFTP providing secure file transfers among peers on the network.

  Correct Answer: C

  IPsec (Internet Protocol Security) is a protocol suite that provides secure communication over Internet Protocol (IP) networks. It achieves this by authenticating and encrypting each IP packet within a communication session. One of the key concepts in IPsec is the establishment of security associations (SAs) between peers.

  Security associations are the combination of algorithms and keys used to secure communication between two devices. They define the security parameters for the communication, including the encryption algorithm, integrity algorithm, and keying information. By establishing these security associations, IPsec ensures confidentiality, integrity, and authenticity of the data being transmitted between network nodes.