Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 611:

  Which interface is used to send traffic to the destination network?

  10.174.208.210/28 [110/2708] via G0/21

  10.174.208.210/28 [110/25445] via G0/20

  10.174.208.210/28 [120/1] via G0/12

  10.174.208.210/28 [120/4] via G0/16

  A. G0/12
  B. G0/20
  C. G0/21
  D. G0/16
  C. G0/21

• Question 612:

  Refer to the exhibit. Which two commands were used to create port channel 10? (Choose two.)

  

  A. int range g0/0-1 channel-group 10 mode active
  B. int range g0/0-1 channel-group 10 mode desirable
  C. int range g0/0-1 channel-group 10 mode passive
  D. int range g0/0-1 channel-group 10 mode auto
  E. int range g0/0-1 channel-group 10 mode on
  A. int range g0/0-1 channel-group 10 mode active
  C. int range g0/0-1 channel-group 10 mode passive

• Question 613:

  CCNA Lab simulation

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window

  4. All necessary preconfigurations have been applied

  5. Do not change the enable password or hostname for any device

  6. Save your configurations to NVRAM before moving to the next item

  7. Click Next at the bottom of the screen to submit this lab and move to the next question

  8. When Next is clicked the lab closes and cannot be reopened

  Topology

  

  Tasks

  Physical connectivity is implemented between the two Layer 2 switches, and the network connectivity between them must be configured.

  1.Configure an LACP EtherChannel and number it as 44; configure it between switches SW1 and SW2 using interfaces Ethemet0/0 and Ethernet0/1 on both sides. The LACP mode must match on both ends.

  2.Configure the EtherChannel as a trunk link.

  3.Configure the trunk link with 802.1q tags.

  4.Configure VLAN 'MONITORING' as the untagged VLAN of the EtherChannel.

  A. Check the Explanation below
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. Check the Explanation below

  ---

  Explanation

  S1

  interface range eth0/0-1

  shut

  channel-group 44 mode active

  no shut

  interface port-channel 44

  switchport mode trunk

  switchport trunk encapsulation dot1q

  switchport trunk native vlan 746

  S2

  interface range eth0/0-1

  shut

  channel-group 44 mode active

  no shut

  interface port-channel 44

  switchport mode trunk

  switchport trunk encapsulation dot1q

  switchport trunk native vlan 746

  First before you create an etherchannel you have to shutdown the ports you going to create it on. Second when you go into the etherchannel interface to create the trunk you have to type the command interface port-channel 44. Lastly you have to you have issue the no shutdown command on the interface ranges on both switches at the end to bring them back up.

• Question 614:

  Which fact must the engineer consider when implementing IPsec on a new network?

  A. The tunnel secures the entire packet and transport only safeguards the payload.
  B. The AH and ESP operate on top of the TCP protocol and use ports 50 and 51 respectively.
  C. IPsec tunnel mode has lower overhead than transport mode.
  D. The AH is used only in combination with ESP.
  A. The tunnel secures the entire packet and transport only safeguards the payload.

  ---

  IPsec Tunnel Mode: In tunnel mode, the entire original IP packet (including the header and payload) is encapsulated and encrypted. This mode is typically used for site-to-site VPNs, where the traffic between two networks needs to be fully secured. IPsec Transport Mode: In transport mode, only the payload of the IP packet is encrypted, while the original IP header is left intact. This mode is often used for end-to-end communication between two devices, such as in host-to-host scenarios.

• Question 615:

  Which two components comprise part of a PKI? (Choose two.)

  A. preshared key that authenticates connections
  B. RSA token
  C. CA that grants certificates
  D. clear-text password that authenticates connections
  E. one or more CRLs
  C. CA that grants certificates
  E. one or more CRLs

  ---

  CRL (Certificate Revocation List) is a list of digital certificates that have been revoked by the issuing CA before their expiration date. CA (Certificate Authority) is a trusted entity that grants digital certificates to organizations or individuals, which can be used to establish secure connections and exchange data securely

  Both are the integral parts of Public Key Infrastructure (PKI)

• Question 616:

  DRAG DROP

  Drag and drop the characteristics of network architectures from the left onto the type of architecture on the right.

  Select and Place:

  

  

• Question 617:

  Refer to the exhibit.

  

  A network engineer must configure the WLC to allow only DHCP and DNS packets for User1 and User2. Which configuration must be used?

  A. Enable Web Authentication for 802.1X standard in the Layer 2 Security configuration
  B. Enable Fallback Policy with MAC filtering under the Layer 3 Security configuration
  C. Enable Web policy and Authentication in the Layer 3 Security configuration.
  D. Enable Web Authentication under the AAA Server configuration on the WLAN.
  C. Enable Web policy and Authentication in the Layer 3 Security configuration.

• Question 618:

  Refer to the exhibit.

  

  What is the administrative distance for the advertised prefix that includes the host IP address 192.168.20.1?

  A. 192.168.10.2
  B. 24
  C. 1
  C. 1

  ---

  Looking at the routing table, we can see that:

  The network 192.168.20.0/24 is listed as a static route (indicated by the "S").

  The route is learned via 192.168.10.2.

  A static route, by default, has an administrative distance (AD) of 1, unless it is manually changed.

  Administrative distance is the value used by routers to select the best path when there are multiple routes to the same destination. Lower values are preferred.

  Static routes have an AD of 1 by default, meaning they are typically more trusted than dynamic routing protocols like OSPF (AD of 110) or EIGRP (AD of 90).

• Question 619:

  Which Layer 2 switch function encapsulates packets for different VLANs so that the packets traverse the same port and maintain traffic separation between the VLANs?

  A. VLAN numbering
  B. VLAN DSCP
  C. VLAN tagging
  D. VLAN marking
  C. VLAN tagging

  ---

  "marking" is for QoS stuff.

• Question 620:

  Which properly is shared by 10GBase-SR and 10GBase-LR interfaces?

  A. Both require fiber cable media for transmission.
  B. Both require UTP cable media for transmission.
  C. Both use the single-mode fiber type.
  D. Both use the multimode fiber type.
  A. Both require fiber cable media for transmission.

  ---

  10GBase-SR and 10GBase-LR are two types of 10 Gbps Ethernet standards for optical fiber communication.

  10GBase-SR (Short Reach) is a 10 Gbps Ethernet standard for short-distance optical fiber communication, typically used for data center and campus network applications. It supports distances up to 300 meters over multi-mode fiber (MMF) cable.

  10GBase-LR (Long Reach) is a 10 Gbps Ethernet standard for long-distance optical fiber communication, typically used for WAN (Wide Area Network) applications. It supports distances up to 10 kilometers over single-mode fiber (SMF) cable, making it well suited for high-speed inter-building or inter-data center connections.