Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 291:

  Refer to the exhibit.

  

  An administrator must connect SW_1 and the printer to the network. SW_2 requires DTP to be used for the connection to SW_1. The printer is configured as an access port with VLAN 5.

  Which set of commands completes the connectivity?

  A. switchport mode dynamic auto switchport private-vlan association host 5
  B. switchport mode trunk switchport trunk pruning vlan add 5
  C. switchport mode dynamic desirable switchport trunk allowed vlan add 5
  D. switchport mode dynamic auto switchport trunk encapsulation negotiate
  C. switchport mode dynamic desirable switchport trunk allowed vlan add 5

• Question 292:

  An engineer is monitoring network traffic from their sales and product development departments, which are on two separate networks. What must be configured in order to maintain data privacy for both departments?

  A. Use passive IDS ports for both departments.
  B. Use a dedicated IPS inline set for each department to maintain traffic separation.
  C. Use 802.1Q inline set Trunk interfaces with VLANs to maintain logical traffic separation.
  D. Use one pair of inline set in TAP mode for both departments.
  D. Use one pair of inline set in TAP mode for both departments.

  ---

  https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html

• Question 293:

  Refer to the exhibit.

  

  The ntp server 192.168.0.3 command has been configured on router 1 to make it an NTP client of router 2.

  Which command must be configured on router 2 so that it operates in server-only mode and relies only on its internal clock?

  A. Router2(config)#ntp passive
  B. Router2(config)#ntp server 172.17.0.1
  C. Router2(config)#ntp master 4
  D. Router2(config)#ntp server 192.168.0.2
  C. Router2(config)#ntp master 4

  ---

  ntp master {stratum-level}: NTP server mode -- the device acts only as an NTP server, and not as an NTP client. The device gets its time information from the internal clock on the device.

  ntp server {address | hostname}: NTP client/server mode -- the device acts as both client and server. First, it acts as an NTP client, to synchronize time with a server. Once synchronized, the device can then act as an NTP server, to supply time to other NTP clients.

• Question 294:

  What is a function of Opportunistic Wireless Encryption in an environment?

  A. provide authentication
  B. protect traffic on open networks
  C. offer compression
  D. increase security by using a WEP connection
  B. protect traffic on open networks

  ---

  The function of Opportunistic Wireless Encryption (OWE) in an environment is to protect traffic on open networks. Open networks, such as public Wi-Fi hotspots, do not typically have encryption enabled by default, making them vulnerable to eavesdropping and data interception. OWE provides a mechanism to encrypt wireless communication on these open networks, adding a layer of security to protect the transmitted data. It helps ensure the confidentiality and integrity of the network traffic, even in the absence of a pre-shared key or a separate authentication mechanism.

• Question 295:

  Which security element uses a combination of one-time passwords, a login name, and a personal smartphone?

  A. rule-based access control
  B. software-defined segmentation
  C. multifactor authentication
  D. attribute-based access control
  C. multifactor authentication

  ---

  Multifactor Authentication (MFA) enhances security by requiring multiple forms of verification before granting access. It typically involves:

  Something you know (e.g., login name and password),

  Something you have (e.g., a one-time password or code sent to a smartphone),

  Something you are (e.g., biometrics like fingerprints or facial recognition).

  In this case, a one-time password (OTP) sent to a smartphone is combined with the login name to provide a second layer of security beyond just the password.

• Question 296:

  What is a function of Wireless LAN Controller?

  A. register with a single access point that controls traffic between wired and wireless endpoints.
  B. use SSIDs to distinguish between wireless clients.
  C. send LWAPP packets to access points.
  D. monitor activity on wireless and wired LANs
  C. send LWAPP packets to access points.

  ---

  Lightweight APs (LAPs) is devices require no initial configuration. LAPs use the Lightweight Access Point Protocol (LWAPP) to communicate with a WLAN controller (WLC), as shown in the below figure. Controller-based APs are useful in situations where many APs are required in the network. As more APs are added, each AP is automatically configured and managed by the WLC.

  

• Question 297:

  What is a network appliance that checks the state of a packet to determine whether the packet is legitimate?

  A. Layer 2 switch
  B. load balancer
  C. firewall
  D. LAN controller
  C. firewall

• Question 298:

  DRAG DROP

  Drag and drop the REST API call method for HTTP from the left onto the action they perform on the right.

  Select and Place:

  

  

• Question 299:

  Refer to the exhibit.

  

  The router R1 is in the process of being configured. Routers R2 and R3 are configured correctly for the new environment.

  Which two commands must be configured on R1 for PC1 to communicate to all PCs on the 10.10.10.0/24 network? (Choose two.)

  A. ip route 10.10.10.0 255.255.255.0 192.168.2.3
  B. ip route 10.10.10.10 255.255.255.255 192.168.2.2
  C. ip route 10.10.10.10 255.255.255.255 g0/1
  D. ip route 10.10.10.8 255.255.255.248 g0/1
  E. ip route 10.10.10.0 255.255.255.248 192.168.2.2
  A. ip route 10.10.10.0 255.255.255.0 192.168.2.3
  B. ip route 10.10.10.10 255.255.255.255 192.168.2.2

  ---

  10.10.10.0 255.255.255.248 Usable address range 10.10.10.1 to 10.10.10.6

• Question 300:

  Which role do predictive Al models play in network load balancing?

  A. They anticipate future traffic spikes.
  B. They assign IP addresses to devices.
  C. They select correct cabling types for deployment.
  D. They solely monitor historical traffic volumes.
  A. They anticipate future traffic spikes.