Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 631:

  What differentiates the TCP and UDP protocols?

  A. TCP sends data at a constant rate with error checking on upper protocol layers, and UDP provides error-checking and sequencing.
  B. TCP establishes a connection with the device on the other end before transferring, and UDP transfers without establishing a connection.
  C. TCP immediately transmits data without waiting for a handshake, and UDP awaits a response from the receiver before sending additional data.
  D. TCP tracks segments being transmitted or received by assigning segment numbers, and UDP adjusts data flow according to network conditions.
  B. TCP establishes a connection with the device on the other end before transferring, and UDP transfers without establishing a connection.

  ---

  TCP (Transmission Control Protocol) is a connection-oriented protocol, meaning it establishes a connection (a three-way handshake) before data transmission begins. TCP provides reliability through error checking, sequencing, and acknowledgment of segments, ensuring that data is delivered in the correct order and without loss. UDP (User Datagram Protocol) is a connectionless protocol, meaning it does not establish a connection before sending data. UDP sends data without error-checking mechanisms or sequencing, making it faster but less reliable compared to TCP. UDP is commonly used for real-time applications where speed is prioritized over guaranteed delivery, such as video streaming or gaming.

• Question 632:

  An engineer is configuring a switch port that is connected to a VoIP handset. Which command must the engineer configure to enable port security with a manually assigned MAC address of abcd.abcd.abcd on voice VLAN 4?

  A. switchport port-security mac-address abcd.abcd.abcd
  B. switchport port-security mac-address abcd.abcd.abcd vlan 4
  C. switchport port-security mac-address sticky abcd.abcd.abcd vlan 4
  D. switchport port-security mac-address abcd.abcd.abcd vlan voice
  A. switchport port-security mac-address abcd.abcd.abcd

  ---

  To configure port security with a manually assigned MAC address, the correct command is switchport port-security mac-address, followed by the MAC address.

  In this case, you are configuring a switch port that connects to a VoIP handset and want to specify a static MAC address. The VLAN used for voice traffic (VLAN 4) is typically configured separately in the voice VLAN configuration, so the vlan keyword is not required directly in this command.

• Question 633:

  Which type of VLAN is used to carry untagged traffic on an IEEE 802.1Q trunk?

  A. Voice VLAN
  B. Native VLAN
  C. Management VLAN
  D. Default VLAN
  B. Native VLAN

  ---

  The native VLAN carries untagged traffic across an 802.1Q trunk. Any frame received without a VLAN tag is assumed to belong to the native VLAN.

• Question 634:

  Which IPsec transport mode encrypts the IP header and the payload?

  A. pipe
  B. control
  C. transport
  D. tunnel
  D. tunnel

  ---

  IPsec Tunnel vs. Transport Mode

  In order to authenticate data packets and guarantee their integrity, IPsec includes two protocols. These are the AH (Authentication Header) protocol and the ESP (Encapsulating Security Payload) protocol. Both protocols, in turn, support two encapsulation modes -- tunnel mode and transport mode. Let's break down their core differences.

  Tunnel Mode

  In tunnel mode, the entire original IP packet is encapsulated to become the payload of a new IP packet. Additionally, a new IP header is added on top of the original IP packet. Since a new packet is created using the original information, tunnel mode is useful for protecting traffic between different networks.

  Transport Mode

  The main difference in transport mode is that it retains the original IP header. In other words, payload data transmitted within the original IP packet is protected, but not the IP header.

• Question 635:

  DRAG DROP

  Drag and drop the TCP or UDP details from the left onto their corresponding protocols on the right.

  Select and Place:

  

  

• Question 636:

  Under which condition is TCP preferred over UDP?

  A. UDP is used when low latency is optimal, and TCP is used when latency is tolerable.
  B. TCP is used when dropped data is more acceptable, and UDP is used when data is accepted out-of-order.
  C. TCP is used when data reliability is critical, and UDP is used when missing packets are acceptable.
  D. UDP is used when data is highly interactive, and TCP is used when data is time-sensitive.
  C. TCP is used when data reliability is critical, and UDP is used when missing packets are acceptable.

• Question 637:

  Refer to the exhibit.

  

  A packet sourced from 10.10.10.1 is destined for 172.16.3.254. What is the subnet mask of the destination route?

  A. 0.0.0.0
  B. 255.255.254.0
  C. 255.255.255.0
  D. 255.255.255.255
  B. 255.255.254.0

• Question 638:

  A network engineer is upgrading a small data center to host several new applications, including server backups that are expected to account for up to 90% of the bandwidth during peak times. The data center connects to the MPLS network provider via a primary circuit and a secondary circuit. How does the engineer inexpensively update the data center to avoid saturation of the primary circuit by traffic associated with the backups?

  A. Assign traffic from the backup servers to a dedicated switch.
  B. Configure a dedicated circuit for the backup traffic.
  C. Place the backup servers in a dedicated VLAN.
  D. Advertise a more specific route for the backup traffic via the secondary circuit.
  D. Advertise a more specific route for the backup traffic via the secondary circuit.

  ---

  To inexpensively update the data center and avoid saturation of the primary circuit by traffic associated with the backups, the network engineer can implement the following solution:

  Advertise a more specific route for the backup traffic via the secondary circuit.

  By advertising a more specific route for the backup traffic via the secondary circuit, the engineer can ensure that the backup traffic is directed through the secondary circuit instead of overwhelming the primary circuit. This can be achieved by configuring the routing protocols or static routes to prioritize the secondary circuit for the backup traffic.

  This approach allows the engineer to leverage the existing infrastructure and circuits without the need for additional dedicated equipment or circuits, making it a cost-effective solution. It effectively separates the backup traffic from other data center traffic and ensures efficient utilization of the available network resources.

• Question 639:

  What is the main capability of multifactor authentication?

  A. Identifying permissions for end users using three authentication factors
  B. Authenticating and authorizing end users using two authentication factors
  C. Confirming end-user identity using two or more authentication factors
  D. Verifying end-user access permissions using two authentication factors
  C. Confirming end-user identity using two or more authentication factors

• Question 640:

  What causes a port to be placed in the err-disabled state?

  A. latency
  B. port security violation
  C. shutdown command issued on the port
  D. nothing plugged into the port
  B. port security violation

  ---

  This mode is the default violation mode; when in this mode, the switch will automatically force the switchport into an error disabled (err-disable) state when a violation occurs. While in this state, the switchport forwards no traffic. The switchport can be brought out of this error disabled state by issuing the errdisable recovery cause CLI command or by disabling and reenabling the switchport.