Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 671:

  Refer to the exhibit.

  

  SW1 supports connectivity for a lobby conference room and must be secured. The engineer must limit the connectivity from PC1 to the SW1 and SW2 network. The MAC addresses allowed must be limited to two. Which configuration secures the conference room connectivity?

  A. interface gi1/0/15 switchport port-security switchport port-security maximum 2
  B. interface gi1/0/15 switchport port-security switchport port-security mac-address 0000.abcd.0004vlan 100
  C. interface gi1/0/15 switchport port-security mac-address 0000.abcd.0004 vlan 100
  D. interface gi1/0/15 switchport port-security mac-address 0000.abcd.0004 vlan 100 interface switchport secure-mac limit 2
  A. interface gi1/0/15 switchport port-security switchport port-security maximum 2

• Question 672:

  Which type of attack floods a network with unsolicited ARP replies?

  A. MAC flooding
  B. ARP poisoning
  C. DNS amplification
  D. IP spoofing
  B. ARP poisoning

  ---

  ARP poisoning (also known as ARP spoofing) involves sending forged ARP replies to associate the attacker's MAC address with legitimate IP addresses. This can enable man-in-the-middle attacks or traffic interception.

• Question 673:

  DRAG DROP

  Drag and drop the characteristic from the left onto the IPv6 address type on the right.

  Select and Place:

  

  

• Question 674:

  Which encryption mode is used when a packet is sent from a site-to-site VPN connection where the source and destination IP address portion of a packet is unencrypted?

  A. PPTP
  B. Secure Shell
  C. Transport
  D. PPPoE
  C. Transport

  ---

  In the context of VPNs (Virtual Private Networks), when the source and destination IP address portion of a packet is unencrypted while the actual payload of the packet is encrypted, it is using transport mode encryption.

  Transport mode encrypts only the data portion (payload) of the IP packet, leaving the header (which includes the source and destination IP addresses) unencrypted. This is often used in site-to-site VPNs where the devices at the ends of the VPN tunnel are responsible for the IP header information.

• Question 675:

  Refer to the exhibit.

  

  Which switch in this configuration will be elected as the root bridge?

  SW1: 00:00:05:22:05:97

  SW2: 0C:0A:A8:1A:3C:9D

  SW3: 00:00:18:81:00:19

  SW4: 00:04:82:56:35:78

  A. SW1
  B. SW2
  C. SW3
  D. SW4
  C. SW3

  ---

  
  

• Question 676:

  Which network plane is centralized and manages routing decisions?

  A. policy plane
  B. management plane
  C. control plane
  D. data plane
  C. control plane

• Question 677:

  Refer to the exhibit.

  

  The routers R1-LAB and R2-LAB are configured with link-local addresses.

  What command must be applied to interface Gi0/0 on R1-LAB for an automated address self-assignment on the IPv6 network?

  A. ipv6 address 2001:db8:1:0FFA:0::/64
  B. ipv6 address 2001:db8:0:0FFA::1/64
  C. ipv6 address 2001:db8:0:0FFA::/64 eui-64
  D. ipv6 address 2001:db8:0:0FFA::/64 anycast
  C. ipv6 address 2001:db8:0:0FFA::/64 eui-64

• Question 678:

  Refer to the exhibit. Router R1 must be configured to reach the 10.0.3.0/24 network from the 10.0.1.0/24 segment. Which command must be used to configure the route?

  

  A. route add 10.0.3.0 mask 255.255.255.0 10.0.4.3
  B. route add 10.0.3.0 0.255.255.255 10.0.4.2
  C. ip route 10.0.3.0 255.255.255.0 10.0.4.3
  D. ip route 10.0.3.0 0.255.255.255 10.0.4.2
  C. ip route 10.0.3.0 255.255.255.0 10.0.4.3

• Question 679:

  How does a hub handle a frame traveling to a known destination MAC address differently than a switch?

  A. The hub forwards the frame to all ports, and a switch forwards the frame to the known destination.
  B. The hub forwards the frame to all ports in the FIB table, and a switch forwards the frame the destination MAC is known.
  C. The hub forwards the frame using the information in the MAC table, and a switch uses data in its routing table.
  D. The hub forwards the frame only to the port connected to the known MAC address, and a switch forwards the frame to all ports.
  A. The hub forwards the frame to all ports, and a switch forwards the frame to the known destination.

• Question 680:

  Refer to the exhibit.

  

  An engineer has started to configure replacement switch SW1. To verify part of the configuration, the engineer issued the commands as shown and noticed that the entry for PC2 is missing. Which change must be applied to SW1 so that PC1 and PC2 communicate normally?

  A. SW1(config)#interface fa0/2 SW1(config-if)#no switchport mode trunk SW1(config-if)#no switchport trunk allowed vlan 3 SW1(config-if)#switchport mode access
  B. SW1(config)#interface fa0/1 SW1(config-if)#no switchport access vlan 2 SW1(config-if)#switchport trunk native vlan 2 SW1(config-if)#switchport trunk allowed vlan 3
  C. SW1(config)#interface fa0/1 SW1(config-if)#no switchport access vlan 2 SW1(config-if)#switchport access vlan 3 SW1(config-if)#switchport trunk allowed vlan 2
  D. SW1(config)#interface fa0/2 SW1(config-if)#no switchport access vlan 2 SW1(config-if)#no switchport trunk allowed vlan 3 SW1(config-if)#switchport trunk allowed vlan 2
  A. SW1(config)#interface fa0/2 SW1(config-if)#no switchport mode trunk SW1(config-if)#no switchport trunk allowed vlan 3 SW1(config-if)#switchport mode access

  ---