Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 391:

  DRAG DROP

  Drag and drop the descriptions of IP protocol transmissions from the left onto the IP traffic types on the right.

  Select and Place:

  

  

• Question 392:

  Which cipher is supported for wireless encryption only with the WPA2 standard?

  A. AES256
  B. AES
  C. RC4
  D. SHA
  B. AES

  ---

  The cipher supported for wireless encryption exclusively with the WPA2 standard is AES (Advanced Encryption Standard). WPA2 primarily uses AES in combination with the Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) for data encryption.

• Question 393:

  Refer to the exhibit. An administrator configures four switches for local authentication using passwords that are stored as a cryptographic hash. The four switches must also support SSH access for administrators to manage the network infrastructure. Which switch is configured correctly to meet these requirements?

  

  A. SW1
  B. SW2
  C. SW3
  D. SW4
  C. SW3

• Question 394:

  An engineer configures interface Gi1/0 on the company PE router to connect to an ISP Neighbor discovery is disabled. Which action is necessary to complete the configuration if the ISP uses third-party network devices?

  

  A. Enable LLDP globally
  B. Disable autonegotiation
  C. Disable Cisco Discovery Protocol on the interface
  D. Enable LLDP-MED on the ISP device
  A. Enable LLDP globally

  ---

  LDDP-MED is used only between network devices (such as switches) and endpoint devices (such as phones). For network-to-network connections, LLDP is used.

  Check table 2, protocol uses:

  https://www.cisco.com/en/US/technologies/tk652/tk701/technologies_white_paper0900aecd804cd46d.html

• Question 395:

  Refer to the exhibit.

  

  A network engineer is updating the configuration on router R1 to connect a new branch office to the company network. R2 has been configured correctly. Which command must the engineer configure so that devices at the new site communicate with the main office?

  A. ip route 172.25.25.1 255.255.255.255 g0/2
  B. ip route 172.25.25.0 255.255.255.0 192.168.2.2
  C. ip route 172.25.25.0 255.255.255.0 192.168.2.1
  D. ip route 172.25.25.1 255.255.255.255 g0/1
  B. ip route 172.25.25.0 255.255.255.0 192.168.2.2

• Question 396:

  What is a characteristic of cloud-based network topology?

  A. wireless connections provide the sole access method to services
  B. onsite network services are provided with physical Layer 2 and Layer 3 components
  C. services are provided by a public, private, or hybrid deployment
  D. physical workstations are configured to share resources
  C. services are provided by a public, private, or hybrid deployment

• Question 397:

  An email user has been lured into clicking a link in an email sent by their company's security organization. The webpage that opens reports that it was safe, but the link could have contained malicious code. Which type of security program is in place?

  A. user awareness
  B. brute force attack
  C. physical access control
  D. social engineering attack
  A. user awareness

  ---

  This is a training program which simulates an attack, not a real attack (as it says "The webpage that opens reports that it was safe") so we believed it should be called a "user awareness" program. Therefore the best answer here should be "user awareness". This is the definition of "User awareness" from CCNA 200-301 Offical Cert Guide Book:

  "User awareness: All users should be made aware of the need for data confidentiality to protect corporate information, as well as their own credentials and personal information. They should also be made aware of potential threats, schemes to mislead, and proper procedures to report security incidents. "

  Note: Physical access control means infrastructure locations, such as network closets and data centers, should remain securely locked.

• Question 398:

  CCNA Lab simulation

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window

  4. All necessary preconfigurations have been applied

  5. Do not change the enable password or hostname for any device

  6. Save your configurations to NVRAM before moving to the next item

  7. Click Next at the bottom of the screen to submit this lab and move to the next question

  8. When Next is clicked the lab closes and cannot be reopened

  Topology

  

  Physical connectivity is implemented between the two Layer 2 switches, and the network connectivity between them must be configured.

  1. Configure an LACP EtherChanneI and number it as 44; configure it between switches SWI and SW2 using interfaces Ethernet0/0 and Ethernet0/1 on both sides. The LACP mode must match on both ends.

  2. Configure the EtherChanneI as a trunk link.

  3. Configure the trunk link with 802. Iq tags.

  4. Configure VLAN 'MONITORING' as the untagged VLAN of the EtherChannel.

  A. Check the Explanation below
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. Check the Explanation below

  ---

  Explanation

  To configure an LACP EtherChannel and number it as 44, configure it between switches SW1 and SW2 using interfaces Ethernet0/0 and Ethernet0/1 on both sides, configure the EtherChannel as a trunk link, configure the trunk link with 802.1q tags, and configure VLAN `MONITORING' as the untagged VLAN of the EtherChannel, you need to follow these steps:

  On both SW1 and SW2, enter the global configuration mode by using the configure terminal command.

  On both SW1 and SW2, select the two interfaces that will form the EtherChannel by using the interface range ethernet 0/0 - 1 command. This will enter the interface range configuration mode.

  On both SW1 and SW2, set the protocol to LACP by using the channel-protocol lacp command.

  On both SW1 and SW2, assign the interfaces to an EtherChannel group number 44 by using the channel- group 44 mode active command. This will create a logical interface named Port-channel44 and set the LACP mode to active on both ends. The LACP mode must match on both ends for the EtherChannel to form.

  On both SW1 and SW2, exit the interface range configuration mode by using the exit command.

  On both SW1 and SW2, enter the Port-channel interface configuration mode by using the interface port- channel 44 command.

  On both SW1 and SW2, configure the Port-channel interface as a trunk link by using the switchport mode trunk command.

  On both SW1 and SW2, configure the Port-channel interface to use 802.1q tags for VLAN identification by using the switchport trunk encapsulation dot1q command.

  On both SW1 and SW2, configure VLAN `MONITORING' as the untagged VLAN of the Port-channel interface by using the switchport trunk native vlan MONITORING command.

  On both SW1 and SW2, exit the Port-channel interface configuration mode by using the exit command.

  On both SW1 and SW2, save the configuration to NVRAM by using the copy running-config startup-config command.

• Question 399:

  Under the CRUD model, which two HTTP methods support the UPDATE operation? (Choose two.)

  A. PATCH
  B. DELETE
  C. GET
  D. POST
  E. PUT
  A. PATCH
  E. PUT

• Question 400:

  How does a switch process a frame received on Fa0/1 with the destination MAC address of 0e38.7363.657b when the table is missing the address?

  A. lt drops the frame immediately.
  B. It forwards the frame back out of interface Fa0/1.
  C. It floods the frame to all interfaces except Fa0/1.
  D. It holds the frame until the MAC address timer expires and then drops the frame.
  C. It floods the frame to all interfaces except Fa0/1.