Cisco CCNA 200-301 Questions & Answers

• Question 931:

  Which protocol prompts the Wireless LAN Controller to generate its own local web administration SSL certificate for GUI access?

  A. HTTPS

  B. RADIUS

  C. TACACS+

  D. HTTP

  Correct Answer: A

  You can protect communication with the GUI by enabling HTTPS. HTTPS protects HTTP browser sessions by using the Secure Sockets Layer (SSL) protocol. When you enable HTTPS, the controller generates its own local web administration SSL certificate and automatically applies it to the GUI. You also have the option of downloading an externally generated certificate. Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/configuration-guide/b_cg80/b_cg80_chapter_011.html

• Question 932:

  An engineer requires a scratch interface to actively attempt to establish a trunk link with a neighbor switch.

  What command must be configured?

  A. switchport mode trunk

  B. switchport mode dynamic desirable

  C. switchport mode dynamic auto

  D. switchport nonegotiate

  Correct Answer: B

  Ref: Dynamic Trunking Protocol – Wikipedia

  Switch port modes

  ...

  Dynamic Auto — Makes the Ethernet port willing to convert the link to a trunk link. The port becomes a trunk port if the neighboring port is set to trunk or dynamic desirable mode. This is the default mode for some switchports.

  Dynamic Desirable — Makes the port actively attempt to convert the link to a trunk link. The port becomes a trunk port if the neighboring Ethernet port is set to trunk, dynamic desirable or dynamic auto mode.

  …”

• Question 933:

  When using Rapid PVST+, which command guarantees the switch is always the root bridge for VLAN 200?

  A. spanning -tree vlan 200 priority 614440

  B. spanning -tree vlan 200 priority 38572422

  C. spanning -tree vlan 200 priority 0

  D. spanning -tree vlan 200 root primary

  Correct Answer: C

  About root primary command:

  https://community.cisco.com/t5/switching/spanning-tree-vlan-root-primary/td-p/1269595

  Paraphrasing from this source:

  The "spanning-tree root primary" command is actually a macro and it is executed only one time. If after this somebody configures another device with a lower priority, this node cannot react to this and it will lose its root bridge role.

  If you use "spanning-tree vlan 1 priority 0", only another device with pri 0 and a lower MAC address can take the role of root bridge.

• Question 934:

  What role does a hypervisor provide for each virtual machine in server virtualization?

  A. infrastructure-as-a-service.

  B. Software-as-a-service

  C. control and distribution of physical resources

  D. services as a hardware controller.

  Correct Answer: C

  The hypervisor creates and manages virtual machines on a host computer and allocates physical system resources to them.

• Question 935:

  What is the function of a server?

  A. It transmits packets between hosts in the same broadcast domain.

  B. It provides shared applications to end users.

  C. It routes traffic between Layer 3 devices.

  D. It Creates security zones between trusted and untrusted networks

  Correct Answer: B

• Question 936:

  An engineer must establish a trunk link between two switches. The neighboring switch is set to trunk or desirable mode. What action should be taken?

  A. configure switchport nonegotiate

  B. configure switchport mode dynamic desirable

  C. configure switchport mode dynamic auto

  D. configure switchport trunk dynamic desirable

  Correct Answer: C

  A manager asks a network engineer to advise which cloud service models are used so employees do not have to waste their time installing, managing, and updating software which is only used occasionally

• Question 937:

  An engineer must configure a/30 subnet between two routers. Which usable IP address and subnet mask combination meets this criteria?

  A. interface e0/0

  description to HQ-A371:19452 ip address 209.165.201.2 255.255.255.252

  B. interface e0/0 description to HQ-A371:19452 ip address 10.2.1.3 255.255.255.252

  C. interface e0/0 description to HQ-A371:19452 ip address 172.16.1.4 255.255.255.248

  D. interface e0/0 description to HQ-A371:19452 ip address 192.168.1.1 255.255.255.248

  Correct Answer: A

• Question 938:

  Refer to the exhibit.

  

  An engineer is bringing up a new circuit to the MPLS provider on the Gi0/1 interface of Router1 The new circuit uses eBGP and teams the route to VLAN25 from the BGP path. What's the expected behavior for the traffic flow for route 10.10.13.0/25?

  A. Traffic to 10.10.13.0.25 is load balanced out of multiple interfaces

  B. Route 10.10.13.0/25 is updated in the routing table as being learned from interface Gi0/1.

  C. Traffic to 10.10.13.0/25 is asymmeteical

  D. Route 10.10.13.0/25 learned via the GiO/0 interface remains in the routing table

  Correct Answer: D

• Question 939:

  What is a function of Wireless LAN Controller?

  A. register with a single access point that controls traffic between wired and wireless endpoints.

  B. use SSIDs to distinguish between wireless clients.

  C. send LWAPP packets to access points.

  D. monitor activity on wireless and wired LANs

  Correct Answer: C

  Lightweight APs (LAPs) is devices require no initial configuration. LAPs use the Lightweight Access Point Protocol (LWAPP) to communicate with a WLAN controller (WLC), as shown in the below figure. Controller-based APs are useful in situations where many APs are required in the network. As more APs are added, each AP is automatically configured and managed by the WLC.

  

• Question 940:

  In software defined architectures, which plane is distributed and responsible for traffic forwarding?

  A. management plane

  B. control plane

  C. policy plane

  D. data plane

  Correct Answer: D

  data plane aka forwarding plane