Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 331:

  What is the role of a firewall in an enterprise network?

  A. Forwards packets based on stateless packet inspection
  B. Processes unauthorized packets and allows passage to less secure segments of the network
  C. determines which packets are allowed to cross from unsecured to secured networks
  D. explicitly denies all packets from entering an administrative domain
  C. determines which packets are allowed to cross from unsecured to secured networks

  ---

  The role of a firewall in an enterprise network is to determine which packets are allowed to cross from unsecured to secured networks.

• Question 332:

  Which statement describes virtualization on containers?

  A. It emulates a physical computer and enables multiple machines to run with many operating systems on a physical machine.
  B. It contains a guest operating system and virtual partition of hardware for OS and requires application libraries.
  C. It is a type of operating system virtualization that allows the host operating system to control the different CPU memory processes.
  D. It separates virtual machines from each other and allocates memory, processors, and storage to compute.
  C. It is a type of operating system virtualization that allows the host operating system to control the different CPU memory processes.

  ---

  Containers provide a lightweight form of operating system-level virtualization, where the host OS allows multiple isolated environments (containers) to run applications. Unlike traditional virtualization, containers share the host OS kernel but keep processes, memory, and file systems isolated from each other. Each container has its own environment, but they are much more lightweight than full virtual machines (VMs) because they don't require a separate guest OS in each instance.

• Question 333:

  Which alternative to password authentication is implemented to allow enterprise devices to log in to the corporate network?

  A. 90-day renewal policies
  B. magic links
  C. one-time passwords
  D. digital certificates
  D. digital certificates

• Question 334:

  What is a characteristic of a Layer 2 switch?

  A. tracks the number of active TCP connections
  B. maintains stateful transaction information
  C. filters based on a transport layer protocol
  D. supports segmentation using tagging protocols
  D. supports segmentation using tagging protocols

• Question 335:

  DRAG DROP

  Drag and drop each broadcast IP address on the left to the Broadcast Address column on the right. Not all options are used.

  Select and Place:

  

  

• Question 336:

  Refer to the exhibit.

  

  Which prefix does Router1 use for traffic to Host A?

  A. 10.10.10.0/28
  B. 10.10.13.0/25
  C. 10.10.13.144/28
  D. 10.10.13.208/29
  D. 10.10.13.208/29

  ---

  Host A address fall within the address range. However, if more than one route to the same subnet exist (router will use the longest stick match, which match more specific route to the subnet). If there are route 10.10.13.192/26 and 10.10.13.208/29, the router will forward the packet to /29 rather than /28.

• Question 337:

  Which interface mode must be configured to connect the lightweight APs in a centralized architecture?

  A. WLAN dynamic
  B. trunk
  C. access
  D. management
  C. access

  ---

  While the Cisco WLCs always connect to 802.1Q trunks, Cisco lightweight APs do not understand VLAN tagging and should only be connected to the access ports of the neighbor switch. This is an example switch port configuration from the Catalyst 3750: interface GigabitEthernet1/0/22 description Access Port Connection to Cisco Lightweight AP switchport access vlan 5 switchport mode access no shutdown

  Reference: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/69719-wlc-lwap-config.html

• Question 338:

  Which technology must be implemented to configure network device monitoring with the highest security?

  A. IP SLA
  B. syslog
  C. NetFlow
  D. SNMPv3
  D. SNMPv3

  ---

  SNMPv3 (Simple Network Management Protocol version 3) is the technology that should be implemented to configure network device monitoring with the highest security. SNMPv3 provides authentication, encryption, and access control, making it the most secure version of SNMP. It allows for secure and encrypted communication between network devices and network management systems, ensuring the confidentiality and integrity of the monitoring data.

• Question 339:

  Which condition must be met before an NMS handles an SNMP trap from an agent?

  A. The NMS software must be loaded with the MIB associated with the trap.
  B. The NMS must be configured on the same router as the SNMP agent
  C. The NMS must receive a trap and an inform message from the SNMP agent within a configured interval
  D. The NMS must receive the same trap from two different SNMP agents to verify that it is reliable.
  A. The NMS software must be loaded with the MIB associated with the trap.

  ---

  To manage and monitor devices, the characteristics of the devices must be represented using a format known to both the agent and the NMS. These characteristics can represent physical properties such as fan speeds, or services such as routing tables. The data structure defining these characteristics is known as a Management Information Base (MIB). This data model is typically organized into tables, but can also include simple values. An example of the former is routing tables, and an example of the latter is a timestamp indicating the time at which the agent was started.

  A MIB is a text file, written in abstract syntax notation one (ASN.1) notation, which describes the variables containing the information that SNMP can access. The variables described in a MIB, which are also called MIB objects, are the items that can be monitored using SNMP. There is one MIB object for each element being monitored. All MIBs are, in fact, part of one large hierarchical structure, with leaf nodes containing unique identifiers, data types, and access rights for each variable and the paths providing classifications. A standard path structure includes branches for private subtrees.

  For reference, the structure of the MIBs for SNMPv2 is defined by its Structure of Management Information (SMI) defined in the RFC2578 document. This SMI defines the syntax and basic data types available to MIBs. The Textual Conventions (type definitions) defined in the RFC2579 document define additional data types and enumerations.

  Before an NMS can manage a device through its agent, the MIB corresponding to the data presented by the agent must be loaded into the NMS. The mechanism for doing this varies depending on the implementation of the network management software. This gives the NMS the information required to address and correctly interpret the data model presented by the agent. Note that MIBs can reference definitions in other MIBs, so to use a given MIB, it might be necessary to load others.

• Question 340:

  Refer to the exhibit.

  

  Router R1 receives static routing updates from routers A, B, C, and D. The network engineer wants R1 to advertise static routes in OSPF area 1. Which summary address must be advertised in OSPF?

  A. 10.1.41.0/25
  B. 10.1.40.0/24
  C. 10.1.40.0/25
  D. 10.1.40.0/23
  D. 10.1.40.0/23