Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 941:

  What are two functions of a firewall within an enterprise? (Choose two.)

  A. It enables traffic filtering based on URLs.
  B. It serves as an endpoint for a site-to-site VPN in standalone mode.
  C. It provides support as an endpoint for a remote access VPN in multiple context mode.
  D. It offers Layer 2 services between hosts.
  E. It enables wireless devices to connect to the network.
  A. It enables traffic filtering based on URLs.
  B. It serves as an endpoint for a site-to-site VPN in standalone mode.

  ---

  A:Traffic Filtering based on URLs: A firewall can be configured to filter network traffic based on Uniform Resource Locators (URLs) or website addresses. This feature allows organizations to enforce web access policies by blocking or allowing specific URLs or categories of websites.

  B:Endpoint for Site-to-Site VPN in Standalone Mode: A firewall can act as an endpoint for a site-to-site Virtual Private Network (VPN) connection. In this mode, the firewall establishes secure communication tunnels between different locations or networks, ensuring the confidentiality and integrity of data transmitted over the VPN.

• Question 942:

  What is a characteristic of frame switching?

  A. populates the ARP table with the egress port
  B. drops received MAC addresses not listed in the address table
  C. stores and forwards frames in a buffer and uses error checking
  D. rewrites the source and destination MAC address
  C. stores and forwards frames in a buffer and uses error checking

• Question 943:

  Which type of attack can be mitigated by dynamic ARP inspection?

  A. worm
  B. malware
  C. DDoS
  D. man-in-the-middle
  D. man-in-the-middle

• Question 944:

  A network administrator is evaluating network security in the aftermath of an attempted ARP spoofing attack. If Port-channel1 is the uplink interface of the access-layer switch toward the distribution-layer switch, which two configurations must the administrator configure on the access-layer switch to provide adequate protection? (Choose two.)

  A. ip dhcp snooping vlan 1-4094 ! interface Port-channel1 switchport protected switchport port-security maximum 1
  B. ip dhcp snooping vlan 1-4094 ip dhcp snooping ! interface Port-channel1 ip dhcp snooping trust
  C. ip dhcp snooping ! interface Port-channel1 switchport port-security maximum 1 switchport port-security
  D. ip arp inspection trust ! interface Port-channel1 switchport port-security maximum 4094 switchport port-security ip verify source mac-check
  E. ip arp inspection vlan 1-4094 ! interface Port-channel1 ip arp inspection trust
  B. ip dhcp snooping vlan 1-4094 ip dhcp snooping ! interface Port-channel1 ip dhcp snooping trust
  E. ip arp inspection vlan 1-4094 ! interface Port-channel1 ip arp inspection trust

  ---

  
  

• Question 945:

  DRAG DROP

  Drag and drop the Cisco Wireless LAN Controller security settings from the left onto the correct security mechanism categories on the right.

  Select and Place:

  

  

• Question 946:

  Refer to the exhibit.

  

  HQC needs to use a configuration that: Handles up to 150,000 concurrent connections. Minimizes consumption of public IP addresses.

  Which configuration meets the requirements?

  A. ip nat pool NATPOOL 209.165.201.1 209.165.201.5 netmask 255.255.255.248ip nat inside source list HQC interface gigabitEthernet0/0 overload
  B. ip nat pool NATPOOL 209.165.200.225 209.165.200.226 netmask 255.255.255.252ip nat outside source list HQC pool NATPOOL overload
  C. ip nat pool NATPOOL 209.165.201.1 209.165.201.3 netmask 255.255.255.248ip nat inside source list HQC pool NATPOOL overload
  D. ip nat pool NATPOOL 209.165.201.1 209.165.201.248 netmask 255.255.255.248ip nat outside source list HQC pool NATPOOL overload
  A. ip nat pool NATPOOL 209.165.201.1 209.165.201.5 netmask 255.255.255.248ip nat inside source list HQC interface gigabitEthernet0/0 overload

• Question 947:

  What is the function of northbound API?

  A. It upgrades software and restores files.
  B. It relies on global provisioning and configuration.
  C. It supports distributed processing for configuration.
  D. It provides a path between an SDN controller and network applications.
  D. It provides a path between an SDN controller and network applications.

  ---

  The purpose of a northbound API is to facilitate communication between the controller and the applications that run on top of it. This allows external applications to access network information and make changes to the network configuration.

• Question 948:

  What is a characteristic of an SSID in wireless networks?

  A. uses policies to prevent unauthorized users
  B. identifies an access point on a WLAN
  C. prompts a user for a login ID
  D. associates a name to a WLAN
  D. associates a name to a WLAN

• Question 949:

  Refer to the exhibit.

  

  An engineer is creating a secure preshared key based SSID using WPA2 for a wireless network running on 2.4 GHz and 5 GHz. Which two tasks must the engineer perform to complete the process? (Choose two.)

  A. Select the 802.1x option for Auth Key Management
  B. Select the AES (CCMP128) option for WPA2 WPA3 Encryption
  C. Select the AES option for Auth Key Management
  D. Select the PSK option for Auth Key Management
  E. Select the WPA Policy option.
  B. Select the AES (CCMP128) option for WPA2 WPA3 Encryption
  D. Select the PSK option for Auth Key Management

• Question 950:

  Refer to the exhibit.

  

  Which interface does a packet take to reach the host address of 192.168.18.16?

  A. null 0
  B. GigabitEthemet2/0
  C. GigabitEthernet1/0
  D. GigabitEthernet0/0
  C. GigabitEthernet1/0