Cisco CCNA 200-301 Questions & Answers

• Question 501:

  Which two network actions occur within the data plane? (Choose two.)

  A. Add or remove an 802.1Q trunking header.

  B. Make a configuration change from an incoming NETCONF RPC.

  C. Run routing protocols.

  D. Match the destination MAC address to the MAC address table.

  E. Reply to an incoming ICMP echo request.

  Correct Answer: AD

  Actions DATA PLANE:

  ?De-encapsulating and re-encapsulating a packet in a data-link frame (routers, Layer 3 switches)

  ?Adding or removing an 802.1Q trunking header (routers and switches)

  ?Matching an Ethernet frame's destination Media Access Control (MAC) address to the MAC address table (Layer 2 switches)

  ?Matching an IP packet's destination IP address to the IP routing table (routers, Layer 3 switches)

  ?Encrypting the data and adding a new IP header (for virtual private network [VPN] processing)

  ?Changing the source or destination IP address (for Network Address Translation [NAT] processing)

  ?Discarding a message due to a filter (access control lists [ACLs], port security

• Question 502:

  Which field within the access-request packet is encrypted by RADIUS?

  A. authorized services

  B. authenticator

  C. username

  D. password

  Correct Answer: D

• Question 503:

  What is a requirement when configuring or removing LAG on a WLC?

  A. The Incoming and outgoing ports for traffic flow must be specified If LAG Is enabled.

  B. The controller must be rebooted after enabling or reconfiguring LAG.

  C. The management interface must be reassigned if LAG disabled.

  D. Multiple untagged interfaces on the same port must be supported.

  Correct Answer: B

  When you enable LAG or make any changes to the LAG configuration, you must immediately reboot the controller.

• Question 504:

  What is a function of a Next-Generation IPS?

  A. makes forwarding decisions based on learned MAC addresses

  B. serves as a controller within a controller-based network

  C. integrates with a RADIUS server to enforce Layer 2 device authentication rules

  D. correlates user activity with network events

  Correct Answer: D

• Question 505:

  What is the difference between IPv6 unicast and anycast addressing?

  A. IPv6 anycast nodes must be explicitly configured to recognize the anycast address, but IPv6 unicast nodes require no special configuration

  B. IPv6 unicast nodes must be explicitly configured to recognize the unicast address, but IPv6 anycast nodes require no special configuration

  C. An individual IPv6 unicast address is supported on a single interface on one node but an IPv6 anycast address is assigned to a group of interfaces on multiple nodes.

  D. Unlike an IPv6 anycast address, an IPv6 unicast address is assigned to a group of interfaces on multiple nodes

  Correct Answer: C

• Question 506:

  Which action is taken by the data plane within a network device?

  A. forwards traffic to the next hop

  B. constructs a routing table based on a routing protocol

  C. provides CLI access to the network device

  D. looks up an egress interface in the forwarding information base

  Correct Answer: A

  The data plane forwards traffic flows. The data plane is the forwarding plane, which is responsible for the switching of packets through the router.

• Question 507:

  Which protocol is used for secure remote CLI access?

  A. HTTPS

  B. HTTP

  C. Telnet

  D. SSH

  Correct Answer: D

• Question 508:

  An engineer must configure R1 for a new user account. The account must meet these requirements:

  1.

  It must be configured in the local database.

  2.

  The username is engineer.

  3.

  It must use the strongest password configurable.

  Which command must the engineer configure on the router?

  A. R1 (config)# username engineer2 algorithm-type scrypt secret test2021

  B. R1(config)# username engineer2 secret 5 .password S1$b1Ju$kZbBS1Pyh4QzwXyZ

  C. R1(config)# username engineer2 privilege 1 password 7 test2021

  D. R1(config)# username englneer2 secret 4 S1Sb1Ju$kZbBS1Pyh4QzwXyZ

  Correct Answer: D

  The command starts with the "username" keyword, followed by the desired username, which in this case is "engineer". The "secret" keyword is used to specify the password. The number "5" following the secret keyword indicates the

  password encryption type, which is SHA256-based salted password hashing algorithm (scrypt) in this case. The password itself is specified after the encryption type.

  it specifies the use of the strongest password encryption method (scrypt) and provides a secure password. The provided password, "S1$b1Ju$kZbBS1Pyh4QzwXyZ", is a strong password that meets the requirement for a strong password.

• Question 509:

  Refer to the exhibit. Which action must be taken to ensure that router A is elected as the DR for OSPF area 0?

  

  A. Configure the OSPF priority on router A with the lowest value between the three routers.

  B. Configure router B and router C as OSPF neighbors of router A.

  C. Configure the router A interfaces with the highest OSPF priority value within the area.

  D. Configure router A with a fixed OSPF router ID

  Correct Answer: C

• Question 510:

  What is the purpose of the ip address hcp command?

  A. to configure an Interface as a DHCP server

  B. to configure an interface as a DHCP helper

  C. to configure an interface as a DHCP relay

  D. to configure an interface as a DHCP client

  Correct Answer: D

  This command enables the DHCP client on the interface and removes all manually-configured addresses on the interface. https://www.cisco.com/c/en/us/td/docs/routers/nfvis/switch_command/b-nfvis-switch-command-reference/ip_addressing_commands.pdf