Cisco CCNA 200-301 Questions & Answers

• Question 481:

  Which QoS traffic handling technique retains excess packets in a queue and reschedules these packets for later transmission when the configured maximum bandwidth has been surpassed?

  A. weighted random early detection

  B. traffic policing

  C. traffic shaping

  D. traffic prioritization

  Correct Answer: C

• Question 482:

  What is the function of the controller in a software-defined network?

  A. multicast replication at the hardware level

  B. fragmenting and reassembling packets

  C. making routing decisions

  D. forwarding packets

  Correct Answer: C

  Several articles on the purpose of an SDN controller confirms that the controller becomes the control plane. The purpose of the control plane is to "control" how data is forwarded then let the data plane perform the rest.

• Question 483:

  Which wireless security protocol relies on Perfect Forward Secrecy?

  A. WPA3

  B. WPA

  C. WEP

  D. WPA2

  Correct Answer: A

  WPA3 (Wi-Fi Protected Access 3) is the newest wireless security protocol designed to encrypt data using a frequent and automatic encryption type called Perfect Forward Secrecy.

• Question 484:

  Which protocol uses the SSL?

  A. HTTP

  B. SSH

  C. HTTPS

  D. Telnet

  Correct Answer: C

  HTTPS (port 443, TCP): HTTPS combines HTTP with a security protocol (Secure Sockets Layer [SSL]/Transport Layer Security[TLS]). DNS (port 53, TCP, and UDP): DNS is used to resolve Internet names to IP addresses.

• Question 485:

  What is one reason to implement LAG on a Cisco WLC?

  A. to increase security and encrypt management frames

  B. to provide link redundancy and load balancing

  C. to allow for stateful and link-state failover

  D. to enable connected switch ports to failover and use different VLANs

  Correct Answer: B

• Question 486:

  Which PoE mode enables powered-device detection and guarantees power when the device is detected?

  A. dynamic

  B. static

  C. active

  D. auto

  Correct Answer: B

  static--Enables powered-device detection. Pre-allocate (reserve) power for a port before the switch discovers the powered device. The switch reserves power for this port even when no device is connected and guarantees that power will be provided upon device detection.

• Question 487:

  A Cisco engineer must configure a single switch interface to meet these requirements

  1.

  accept untagged frames and place them in VLAN 20

  2.

  accept tagged frames in VLAN 30 when CDP detects a Cisco IP phone

  Which command set must the engineer apply?

  A. switchport mode dynamic desirable switchport access vlan 20 switchport trunk allowed vlan 30 switchport voice vlan 30

  B. switchport mode dynamic auto switchport trunk native vlan 20 switchport trunk allowed vlan 30 switchport voice vlan 30

  C. switchport mode access switchport access vlan 20 switchport voice vlan 30

  D. switchport mode trunk switchport access vlan 20 switchport voice vlan 30

  Correct Answer: C

  The data vlan is connected to the IP phone. Data VLANs connected to the IP phones are untagged by default.

  The IP phone connected to a switchport should learn its vlan using cdp. To configure this, the command is "switchport voice Vlan 30"

  https://www.practicalnetworking.net/stand-alone/voice-vlan-auxiliary-vlan/

  https://docs.nvidia.com/networking-ethernet-software/cumulus-linux-40/Layer-2/Link-Layer-Discovery-Protocol/Voice-VLAN/

• Question 488:

  Which action implements physical access control as part of the security program of an organization?

  A. configuring a password for the console port

  B. backing up syslogs at a remote location

  C. configuring enable passwords on network devices

  D. setting up IP cameras to monitor key infrastructure

  Correct Answer: D

• Question 489:

  Which QoS per-hop behavior changes the value of the ToS field in the IPv4 packet header?

  A. shaping

  B. classification

  C. policing

  D. marking

  Correct Answer: D

• Question 490:

  A network engineer is installing an IPv6-only capable device. The client has requested that the device IP address be reachable only from the internal network. Which type of IPv6 address must the engineer assign?

  A. unique local address

  B. link-local address

  C. aggregatable global address

  D. IPv4-compatible IPv6 address

  Correct Answer: A

  https://www.ciscopress.com/articles/article.asp?p=2803866andseqNum=4

  Global unicast: A routable address in the IPv6 Internet, similar to a public IPv4 address.

  Link-local: Used only to communicate with devices on the same local link.

  Loopback: An address not assigned to any physical interface that can be used for a host to send an IPv6 packet to itself.

  Unspecified address: Used only as a source address and indicates the absence of an IPv6 address.

  Unique local: Similar to a private address in IPv4 (RFC 1918) and not intended to be routable in the IPv6 Internet. However, unlike RFC 1918 addresses, these addresses are not intended to be statefully translated to a global unicast address.

  IPv4 embedded: An IPv6 address that carries an IPv4 address in the low-order 32 bits of the address.