Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 421:

  What is represented by the word "port" within this JSON schema?

  

  A. value
  B. array
  C. key
  D. object
  C. key

• Question 422:

  What is a functionality of the control plane in the network?

  A. It looks up an egress interface in the forwarding information base.
  B. It forwards traffic to the next hop.
  C. It exchanges topology information with other routers.
  D. It provides CLI access to the network device.
  C. It exchanges topology information with other routers.

• Question 423:

  Refer to the exhibit.

  

  What commands are needed to add a subinterface to Ethernet0/0 on R1 to allow for VLAN 20, with IP address 10.20.20.1/24?

  A. R1(config)#interface ethernet0/0 R1(config)#encapsulation dot1q 20 R1(config)#ip address 10.20.20.1 255.255.255.0
  B. R1(config)#interface ethernet0/0.20 R1(config)#encapsulation dot1q 20 R1(config)#ip address 10.20.20.1 255.255.255.0
  C. R1(config)#interface ethernet0/0.20 R1(config)#ip address 10.20.20.1 255.255.255.0
  D. R1(config)#interface ethernet0/0 R1(config)#ip address 10.20.20.1 255.255.255.0
  B. R1(config)#interface ethernet0/0.20 R1(config)#encapsulation dot1q 20 R1(config)#ip address 10.20.20.1 255.255.255.0

• Question 424:

  Refer to the exhibit. When PC-A sends traffic to PC-B, which network component is in charge of receiving the packet from PC-A verifying the IP addresses, and forwarding the packet to PC-B?

  

  A. Layer 2 switch
  B. Router
  C. Load balancer
  D. firewall
  B. Router

  ---

  PC--A and PC-B are not in the same network. Switches send traffic in layer 2 and within the same VLA while routers route traffic to different subnet and at layer 3.

• Question 425:

  Which enhancement is implemented in WPA3?

  A. applies 802.1x authentication
  B. usesTKIP
  C. employs PKI to identify access points
  D. protects against brute force attacks
  D. protects against brute force attacks

  ---

  WPA3 security overcomes this limitation and does not allow TKIP and WEP. Additionally, WPA3 personal and enterprise connections requires PMF (Protected Management Frame) negotiation mandatorily. PMF provides an additional layer of protection from de-authentication and disassociation attacks.

  1. For personal networks WPA3 utilizes Simultaneous Authentication Of Equals (SAE) as described in IEEE 802.11 standard.

  2. SAE provides following key advantages when compared to WPA2 PSK (pre-shared key): –

  3. Creates shared secret which is different for each SAE authentication.

  4. Protection against brute force “dictionary” attacks and passive attacks.

  5. Provides forward secrecy

  https://blogs.cisco.com/networking/wpa3-bringing-robust-security-for-wi-fi-networks

• Question 426:

  OSPF must be configured between routers R1 and R2. Which OSPF configuration must be applied to router R1 to avoid a DR/BDR election?

  A. router ospf 1 network 192.168.1.1 0.0.0.0 area 0 interface e1/1 ip address 192.168.1.1 255.255.255.252 ip ospf network broadcast
  B. router ospf 1 network 192.168.1.1 0.0.0.0 area 0 interface e1/1 ip address 192.168.1.1 255.255.255.252 ip ospf network point-to-point
  C. router ospf 1 network 192.168.1.1 0.0.0.0 area 0 interface e1/1 ip address 192.168.1.1 255.255.255.252 ip ospf cost 0
  D. router ospf 1 network 192.168.1.1 0.0.0.0 area 0 hello interval 15 interface e1/1 ip address 192.168.1.1 255.255.255.252
  B. router ospf 1 network 192.168.1.1 0.0.0.0 area 0 interface e1/1 ip address 192.168.1.1 255.255.255.252 ip ospf network point-to-point

  ---

  OSPF uses a DR (Designated Router) and BDR (Backup Designated Router) on each multi-access network. A multi-access network is a segment where we have more than two routers. OSPF determines this by looking at the interface type. For example, an Ethernet interface is considered a multi-access network, and a serial interface is considered a point-to-point interface. On point-to-point links, a DR and BDR are not elected since only two routers are directly connected.

• Question 427:

  An administrator is configuring a Cisco Catalyst switch so that it will accept management connections only from hosts in the 203.0.113.0/24 network. Other traffic passing through the switch must transit without interruption. Which two configurations must the engineer apply to the router? (Choose two.)

  A. interface range vlan 1-4094 ip access-group Management out
  B. line vty 0 15 access-class Management in
  C. ip access-list standard Management permit 203.0.113.0 0.0.0.255
  D. ip access-list standard Management permit 203.0.113.0 255.255.255.0
  E. ip access-list extended Management permit tcp any range 22 23 203.0.113.0 0.0.0.255
  B. line vty 0 15 access-class Management in
  C. ip access-list standard Management permit 203.0.113.0 0.0.0.255

  ---

  
  

• Question 428:

  Refer to the exhibit.

  

  An engineer executed the script and added commands that were not necessary for SSH and now must remove the commands. Which two commands must be executed to correct the configuration? (Choose two.)

  A. no ip name-serveer 198.51.100.210
  B. no login local
  C. no service password-encryption
  D. no ip domain mame ccna.cisco.com
  E. no hostname CPE
  A. no ip name-serveer 198.51.100.210
  C. no service password-encryption

  ---

  Login local is required to implement SSH in this case because we are not using AAA authentication. But password service-encryption is not needed because all it does is encrypt any plaintext passwords displayed in the running configuration. It has nothing to do with SSH. For example, you can configure a plaintext password for Telnet access, do service password-encryption to scramble it in the running config, but then when you Telnet into the device, sniff the packet and see that the password is still in plaintext.

• Question 429:

  DRAG DROP

  Drag and drop the DNS commands from the left onto their effects on the right.

  Select and Place:

  

  

• Question 430:

  What is a benefit for external users who consume public cloud resources?

  A. implemented over a dedicated WAN
  B. located in the same data center as the users
  C. all hosted on physical servers
  D. accessed over the Internet
  D. accessed over the Internet