Cisco CCNA 200-301 Questions & Answers

• Question 841:

  Which action does the router take as rt forwards a packet through the network?

  A. The router replaces the source and desinaoon labels wth the sending router uterface label as a source and the next hop router label as a desbnabon

  B. The router encapsulates the source and destination IP addresses with the sending router P address as the source and the neighbor IP address as the destination

  C. The router replaces the original source and destination MAC addresses with the sending router MAC address as the source and neighbor MAC address as the destination

  D. The router encapsulates the original packet and then includes a tag that identifies the source router MAC address and transmit transparently to the destination

  Correct Answer: C

• Question 842:

  When a site-to-site VPN is configured which IPsec mode provides encapsulation and encryption of the entire original IP packet?

  A. IPsec tunnel mode with AH

  B. IPsec transport mode with AH

  C. IPsec tunnel mode with ESP

  D. IPsec transport mode with ESP

  Correct Answer: C

  Authentication Header (AH) Encapsulating Security Payload (ESP)

• Question 843:

  What is the role of a firewall in an enterprise network?

  A. Forwards packets based on stateless packet inspection

  B. Processes unauthorized packets and allows passage to less secure segments of the network

  C. determines which packets are allowed to cross from unsecured to secured networks

  D. explicitly denies all packets from entering an administrative domain

  Correct Answer: C

  The role of a firewall in an enterprise network is to determine which packets are allowed to cross from unsecured to secured networks.

• Question 844:

  What is the benefit of configuring PortFast on an interface?

  A. After the cable is connected, the interface uses the fastest speed setting available for that cable type

  B. After the cable is connected, the interface is available faster to send and receive user data

  C. The frames entering the interface are marked with higher priority and then processed faster by a switch.

  D. Real-time voice and video frames entering the interface are processed faster

  Correct Answer: B

  Comme le port prend va à l'état "forwading" directement, l'interface est effectivement prête à processer de la donnée plus vite

• Question 845:

  How are VLAN hopping attacks mitigated?

  A. enable dynamic ARP inspection

  B. manually implement trunk ports and disable DTP

  C. activate all ports and place in the default VLAN

  D. configure extended VLANs

  Correct Answer: B

• Question 846:

  Which two protocols must be disabled to increase security for management connections to a Wireless LAN Controller? (Choose two)

  A. Telnet

  B. SSH

  C. HTTP

  D. HTTPS

  E. TFTP

  Correct Answer: AC

• Question 847:

  When a client and server are not on the same physical network, which device is used to forward requests and replies between client and server for DHCP?

  A. DHCP relay agent

  B. DHCP server

  C. DHCPDISCOVER

  D. DHCPOFFER

  Correct Answer: A

  A DHCP relay agent is any host that forwards DHCP packets between clients and servers. Relay agents are used to forward requests and replies between clients and servers when they are not on the same physical subnet. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_dhcp/configuration/15-sy/dhcp-15-sy-book/dhcp-relay-agent.html#GUID-9E110360-34EA-40BB-9314-2AFABD7F2FDA

• Question 848:

  Which QoS tool can you use to optimize voice traffic on a network that is primarily intended for data traffic?

  A. FIFO

  B. WFQ

  C. PQ

  D. WRED

  Correct Answer: C

  Deciding Which Queueing Policy to Use

  PQ guarantees strict priority in that it ensures that one type of traffic will be sent, possibly at the expense of all others.

  Strict PQ allows delay-sensitive data such as voice to be dequeued and sent before packets in other queues are dequeued.

  https://www.cisco.com/c/en/us/td/docs/ios/qos/configuration/guide/12_2sr/qos_12_2sr_book/congstion_mgmt_oview.html

• Question 849:

  Which two events occur automatically when a device Is added to Cisco DNA Center? (Choose two.)

  A. The device Is assigned to the Global site.

  B. The device Is placed into the Unmanaged state.

  C. The device Is placed into the Provisioned state.

  D. The device Is placed into the Managed state.

  E. The device is assigned to the Local site.

  Correct Answer: AD

  Device in Global Site: When you successfully add, import, or discover a device, Cisco DNA Center places the device in the Managed state and assigns it to the Global site by default. Even if you have defined SNMP server, Syslog server, and NetFlow collector settings for the Global site, Cisco DNA Center does not change these settings on the device.

• Question 850:

  What must be considered when using 802:11 ta?

  A. It is compatible with 802 lib- and 802 11-compliant wireless devices

  B. It is used in place of 802 11b/g when many nonoverlapping channels are required

  C. It is susceptible to interference from 2 4 GHz devices such as microwave ovens.

  D. It is chosen over 802 11b/g when a lower-cost solution is necessary

  Correct Answer: A