Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 41:

  Which role does machine learning play in identifying network security breaches?

  A. It identifies patterns indicating intrusions.
  B. It assigns security clearance levels.
  C. It monitors for outdated software.
  D. It dictates security policy updates.
  A. It identifies patterns indicating intrusions.

  ---

  Machine learning (ML) is used in network security to analyze vast amounts of data and detect abnormal patterns that may indicate potential intrusions or attacks. By learning the normal behavior of network traffic over time, ML can identify deviations from the norm, such as unusual traffic spikes, unauthorized access attempts, or other anomalous activities that may signify a security breach. This helps improve the detection of both known and unknown threats.

• Question 42:

  What is difference between RADIUS and TACACS+?

  A. RADIUS logs all commands that are entered by the administrator, but TACACS+ logs only start, stop, and interim commands.
  B. TACACS+ separates authentication and authorization, and RADIUS merges them.
  C. TACACS+ encrypts only password information, and RADIUS encrypts the entire payload.
  D. RADIUS is most appropriate for dial authentication, but TACACS+ can be used for multiple types of authentication.
  B. TACACS+ separates authentication and authorization, and RADIUS merges them.

  ---

  TACAS+ A-Authentictaion | A-Authorization (Both A's are sperated by a C) = TACAS+ seperates Authentication and Authorization.

• Question 43:

  In software defined architectures, which plane is distributed and responsible for traffic forwarding?

  A. management plane
  B. control plane
  C. policy plane
  D. data plane
  D. data plane

  ---

  data plane aka forwarding plane

• Question 44:

  DRAG DROP

  Match the functions to the corresponding layers.

  Select and Place:

  

  

• Question 45:

  What is a reason to implement HSRP on a network?

  A. to Identify the closest hop to the default gateway In a LAN network
  B. to provide load balancing over multiple gateways in a LAN network
  C. to optimally route traffic based on the forwarding capacity of the edge routing devices in the LAN network
  D. to ensure that user traffic in a LAN rapidly recovers from the failure of an edge routing device
  D. to ensure that user traffic in a LAN rapidly recovers from the failure of an edge routing device

• Question 46:

  Refer to the exhibit.

  

  All interfaces are in the same VLAN. All switches are configured with the default STP priorities. During the STP elections, which switch becomes the root bridge?

  A. MDF-DC-1: 0d:E0:43:96:02:30
  B. MDF-DC-2: 0d:0E:18:1B:05:97
  C. MDF-DC-4: 0d:E0:19:A1:B3:19
  D. MDF-DC-3: 0d:0E:18:2A:3C:9D
  B. MDF-DC-2: 0d:0E:18:1B:05:97

• Question 47:

  Which protocol does an access point use to draw power from a connected switch?

  A. Internet Group Management Protocol
  B. Adaptive Wireless Path Protocol
  C. Cisco Discovery Protocol
  D. Neighbor Discovery Protocol
  C. Cisco Discovery Protocol

  ---

  CDP is used in output power negotiations for POE capable devices; like IP Phones, AccessPoints etc. https://learningnetwork.cisco.com/s/article/cisco-discovery-protocol-cdp-x

• Question 48:

  Refer to the exhibit. Which minimum configuration items are needed to enable Secure Shell version 2 access to R15?

  

  A. Router(config)#hostname R15 R15(config)#crypto key generate rsa general-keys modulus 1024 R15(config-line)#line vty 0 15 R15(config-line)#transport input ssh R15(config)#ip ssh source-interface Fa0/0 R15(config)#ip ssh stricthostkeycheck
  B. Router(config)#crypto key generate rsa general-keys modulus 1024 Router(config)#ip ssh version 2 Router(config-line)#line vty 0 15 Router(config-line)#transport input ssh Router(config)#ip ssh logging events R15(config)#ip ssh stricthostkeycheck
  C. Router(config)#ip domain-name cisco.com Router(config)#crypto key generate rsa general-keys modulus 1024 Router(config)#ip ssh version 2 Router(config-line)#line vty 0 15 Router(config-line)#transport input all Router(config)#ip ssh logging events
  D. Router(config)#hostname R15 R15(config)#ip domain-name cisco.com R15(config)#crypto key generate rsa general-keys modulus 1024 R15(config)#ip ssh version 2 R15(config-line)#line vty 0 15 R15(config-line)#transport input ssh
  D. Router(config)#hostname R15 R15(config)#ip domain-name cisco.com R15(config)#crypto key generate rsa general-keys modulus 1024 R15(config)#ip ssh version 2 R15(config-line)#line vty 0 15 R15(config-line)#transport input ssh

  ---

  
  

• Question 49:

  Which two host addresses are reserved for private use within an enterprise network? (Choose two.)

  A. 10.172.76.200
  B. 12.17.1.20
  C. 172.15.2.250
  D. 172.31.255.100
  E. 192.169.32.10
  A. 10.172.76.200
  D. 172.31.255.100

  ---

  Class B IP addresses. Configurations range from 172.16.0.0 to 172.31.255.255

• Question 50:

  What is the difference between an IPv6 link-local address and a unique local address?

  A. The scope of an IPv6 link-local address is limited to a directly attached interface, but an IPv6 unique local address is used throughout a company site or network.
  B. The scope of an IPv6 link-local address is global, but the scope of an IPv6 unique local address is limited to a loopback address.
  C. The scope of an IPv6 link-local address can be used throughout a company site or network, but an IPv6 unique local address is limited to a loopback address.
  D. The scope of an IPv6 link-local address is limited to a loopback address, and an IPv6 unique local address is limited to a directly attached interface.
  A. The scope of an IPv6 link-local address is limited to a directly attached interface, but an IPv6 unique local address is used throughout a company site or network.