Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 551:

  DRAG DROP

  Drag and drop the network topology architecture types from the left onto the corresponding function on the right. Not all architecture types are used.

  Select and Place:

  

  

• Question 552:

  R1, as an NTP server, must have:

  1. NTP authentication enabled
  2. NTP packets sourced from interface Loopback0
  3. NTP stratum 2
  4. NTP packets permitted only to client IP 209.165.200.225

  How should R1 be configured?

  A. ntp authenticate ntp authentication-key 2 sha1 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp master 2 ! access-list 10 permit udp host 209.165.200.225 any eq 123
  B. ntp authenticate ntp authentication-key 2 md5 CISCO123 ntp interface Loopback0 ntp access-group server-only 10 ntp stratum 2 ! access-list 10 permit 209.165.200.225
  C. ntp authenticate ntp authentication-key 2 md5 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp master 2 ! access-list 10 permit 209.165.200.225
  D. ntp authenticate ntp authentication-key 2 md5 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp stratum 2 ! access-list 10 permit udp host 209.165.200.225 any eq 123
  C. ntp authenticate ntp authentication-key 2 md5 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp master 2 ! access-list 10 permit 209.165.200.225

  ---

  
  

• Question 553:

  Which AP mode is used in a wireless mesh deployment?

  A. Local
  B. Monitor
  C. FlexConnect
  D. Bridge
  D. Bridge

  ---

  In a wireless mesh deployment, Bridge mode is commonly used for Access Points (APs) that connect wirelessly to form a mesh network. In this mode, APs can communicate with each other to extend the network without requiring a wired backhaul. This allows for flexible placement of APs in areas where wiring is impractical, enabling a larger coverage area by allowing the APs to relay signals to each other.

• Question 554:

  A network architect is considering whether to implement Cisco DNA Center to deploy devices on a new network. The organization is focused on reducing the time it currently takes to deploy devices in a traditional campus design. For which reason would Cisco DNA Center be more appropriate than traditional management options?

  A. Cisco DNA Center supports deployment with a single pane of glass.
  B. Cisco DNA Center provides zero-touch provisioning to third-party devices.
  C. Cisco DNA Center reduces the need for analytics on third-party access points and devices.
  D. Cisco DNA Center minimizes the level of syslog output when reporting on Cisco devices.
  A. Cisco DNA Center supports deployment with a single pane of glass.

• Question 555:

  AAA stands for authentication, authorization, and accounting

  A. False
  B. True
  B. True

• Question 556:

  Refer to the exhibit.

  Router R1 is configured with static NAT. Addressing on the router and the web server are correctly configured, but there is no connectivity between the web server and users on the Internet. What is a possible reason for this lack of connectivity?

  

  A. The router NAT configuration has an incorrect inside local address
  B. The inside global address is incorrect
  C. The NAT configuration on interface S0/0/1 is incorrect
  D. Interface Fa0/0 should be configured with the command ip nat outside
  A. The router NAT configuration has an incorrect inside local address

• Question 557:

  Refer to the exhibit. An engineer is configuring a new router on the network and applied this configuration. Which additional configuration allows the PC to obtain its IP address from a DHCP server?

  

  A. Configure the ip dhcp relay information command under interface Gi0/1.
  B. Configure the ip dhcp smart-relay command globally on the router
  C. Configure the ip helper-address 172.16.2.2 command under interface Gi0/0
  D. Configure the ip address dhcp command under interface Gi0/0
  C. Configure the ip helper-address 172.16.2.2 command under interface Gi0/0

• Question 558:

  Refer to the exhibit.

  

  An engineer must document all Wi-Fi services on a new wireless LAN controller. The Wi-Fi SSID " Office_WLan " has Layer 2 Security.

  What is determined by this configuration?

  A. There is a strong mutual authentication used between NAC and the network devices using x.509 standard.
  B. There is an extra layer of security that ensures only authorized devices with known MAC addresses connect to the network.
  C. There is a robust security mechanism configured to protect against various Layer 2 and Layer 3 attacks.
  D. There is Galois cache algorithm configured that provides strong encryption and authentication.
  C. There is a robust security mechanism configured to protect against various Layer 2 and Layer 3 attacks.

• Question 559:

  Which two wireless security stewards use Counter Mode Cipher Block Chaining Message Authentication Code Protocol for encryption and data integrity'? (Choose two.)

  A. WPA2
  B. WPA3
  C. Wi-Fi 6
  D. WEP
  E. WPA
  A. WPA2
  B. WPA3

  ---

  CCMP is an encryption protocol based on the Advanced Encryption Standard (AES) algorithm. It provides both encryption and data integrity by combining the Counter Mode (CTR) for encryption and the Cipher Block Chaining Message Authentication Code (CBC-MAC) for data integrity.

  WPA3 (Wi-Fi Protected Access 3) and WPA2 (Wi-Fi Protected Access 2) are the latest and most commonly used wireless security standards. Both WPA3 and WPA2 support the use of CCMP as the encryption and integrity protocol for securing wireless communications.

  On the other hand, WEP (Wired Equivalent Privacy) is an older and weaker security standard that uses the RC4 encryption algorithm, not CCMP. WEP has been found to have significant security vulnerabilities and is no longer recommended for use.

• Question 560:

  DRAG DROP

  Drag and drop the characteristic from the left onto the IPv6 address type on the right.

  Select and Place: