Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 401:

  DRAG DROP

  Drag and drop the REST principles from the left onto their definitions on the right.

  Select and Place:

  

  

• Question 402:

  What prevents a workstation from receiving a DHCP address?

  A. DTP
  B. STP
  C. VTP
  D. 802.10
  B. STP

  ---

  The time it takes to get to the Forwarding state might be too long for a client's DHCP process (which starts after the interface on the client becomes 'up'). Using Spanning-Tree PortFast can mitigate this exact issue. So yes, STP can prevent workstations from getting an IP-adress using DHCP.

• Question 403:

  Refer to the exhibit.

  

  An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate directly to enable privilege mode via Telnet using a local username and password?

  A. R1(config)#username admin R1(config-if)#line vty 0 4 R1(config-line)#password p@ss1234
  B. R1(config)#username admin R1(config-if)#line vty 0 4 R1(config-line)#password p@ss1234 R1(config-line)#transport input telnet
  C. R1(config)#username admin secret p@ss1234 R1(config-if)#line vty 0 4 R1(config-line)#login local R1(config)#enable secret p@ss1234
  D. R1(config)#username admin privilege 15 secret p@ss1234 R1(config-if)#line vty 0 4 R1(config-line)#login local
  D. R1(config)#username admin privilege 15 secret p@ss1234 R1(config-if)#line vty 0 4 R1(config-line)#login local

  ---

  Level 15 is Privileged Exec Mode, which is what the question is asking about.

• Question 404:

  Refer to the exhibit. Traffic that is flowing over interface TenGigabitEthernet0/0 experiences slow transfer speeds. What is the reason for the issue?

  

  A. heavy traffic congestion
  B. a duplex incompatibility
  C. a speed conflict
  D. queuing drops
  B. a duplex incompatibility

  ---

  According to OCG and Boson practice exams, collisions are duplex incompatibility.

• Question 405:

  How does QoS optimize voice traffic?

  A. reducing bandwidth usage
  B. by reducing packet loss
  C. by differentiating voice and video traffic
  D. by increasing jitter
  B. by reducing packet loss

  ---

  Key guidelines are Delay one way: 150ms or less Jitter: 30ms or less Loss: 1% or less

• Question 406:

  A network engineer is configuring a switch so that it is remotely reachable via SSH. The engineer has already configured the host name on the router. Which additional command must the engineer configure before entering the command to generate the RSA key?

  A. password password
  B. crypto key generate rsa modulus 1024
  C. ip domain-name domain
  D. ip ssh authentication-retries 2
  C. ip domain-name domain

• Question 407:

  Refer to the exhibit.

  

  What is occurring on this switch?

  A. Frames are dropped after 16 failed transmission attempts
  B. The internal transmit buffer is overloaded
  C. A high number of frames smaller than 64 bytes are received
  D. An excessive number of frames greater than 1518 bytes are received
  A. Frames are dropped after 16 failed transmission attempts

  ---

  The retransmission algorithm helps to ensure that the packets do not retransmit at the same time. However, if the two devices retry at nearly the same time, packets can collide again; the process repeats until either the packets finally pass onto the network without collisions, or 16 consecutive collisions occur and the packets are discarded.

• Question 408:

  A network engineer is implementing a corporate SSID for WPA3-Personal security with a PSK. Which encryption cipher must be configured?

  A. CCMP128
  B. GCMP256
  C. CCMP256
  D. GCMP128
  A. CCMP128

  ---

  WPA2 uses CCMP-128 security level with AES-128 cipher suite plus CBC-MAC cipher (personal or enterprise mode).

  WPA3 also uses CCMP-128 security level with AES-128 cipher suite plus CBC-MAC cipher (personal or enterprise mode);

  (or) GCMP-128 security level with AES-128 cipher suite plus GMAC cipher (enterprise mode);

  (or) GCMP-192 security level (called Suite B) with AES-256 cipher suite plus GMAC cipher (enterprise mode).

  In the case the question asked for the AES cipher (not the security level which is also 128 bits), CCMP-128 in this case refers to the 128 bit AES cipher.

  According to RFC 5430, this confusion between cipher and elliptic curve security level is common, which represents the set of encryption ciphers plus the integrity cipher (AES Encryption + MIC CBC-MAC / or MIC GMAC).

• Question 409:

  Which three are characteristics of an IPv6 anycast address? (Choose three.)

  A. one-to-many communication model
  B. one-to-nearest communication model
  C. any-to-many communication model
  D. a unique IPv6 address for each device in the group
  E. the same address for multiple devices in the group
  F. delivery of packets to the group interface that is closest to the sending device
  B. one-to-nearest communication model
  E. the same address for multiple devices in the group
  F. delivery of packets to the group interface that is closest to the sending device

  ---

  A new address type made specifically for IPv6 is called the Anycast Address. These IPv6 addresses are global addresses, these addresses can be assigned to more than one interface unlike an IPv6 unicast address. Anycast is designed to send a packet to the nearest interface that is a part of that anycast group. The sender creates a packet and forwards the packet to the anycast address as the destination address which goes to the nearest router. The nearest router or interface is found by using the metric of a routing protocol currently running on the network. However in a LAN setting the nearest interface is found depending on the order the neighbors were learned. The anycast packet in a LAN setting forwards the packet to the neighbor it learned about first.

• Question 410:

  DRAG DROP

  Drag and drop the attack-mitigation techniques from the left onto the types of attack that they mitigate on the right.

  Select and Place: