Cisco 200-301 Online Practice Questions and Exam Preparation

Cisco 200-301 Online Questions & Answers

• Question 981:

  How does IPsec provide secure networking for applications within an organization?

  A. It takes advantage of FTP to secure file transfers between nodes on the network.
  B. It provides GRE tunnels to transmit traffic securely between network nodes.
  C. It enables sets of security associations between peers.
  D. It leverages TFTP providing secure file transfers among peers on the network.
  C. It enables sets of security associations between peers.

  ---

  IPsec (Internet Protocol Security) is a protocol suite that provides secure communication over Internet Protocol (IP) networks. It achieves this by authenticating and encrypting each IP packet within a communication session. One of the key concepts in IPsec is the establishment of security associations (SAs) between peers.

  Security associations are the combination of algorithms and keys used to secure communication between two devices. They define the security parameters for the communication, including the encryption algorithm, integrity algorithm, and keying information. By establishing these security associations, IPsec ensures confidentiality, integrity, and authenticity of the data being transmitted between network nodes.

• Question 982:

  DRAG DROP

  Drag and drop the 802.11 wireless standards from the left onto the matching statements on the right

  Select and Place:

  

  

• Question 983:

  Refer to the exhibit. The following must be considered:

  1. SW1 is fully configured for all traffic.
  2. The SW4 and SW5 links to SW1 have been configured.
  3. The SW4 interface Gi0/1 and Gi0/0 on SW9 have been configured.
  4. The remaining switches have had all VLANs added to their VLAN database.

  Which configuration establishes a successful ping from PC2 to PC7 without interruption to traffic flow between other PCs?

  

  A. SW4 interface Gi0/7 switchport mode trunk switchport trunk allowed vlan 108 ! interface Gi0/2 switchport mode access switchport access vlan 14 SW11# interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 14,108 ! interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 14,108 SW9# interface Gi0/2 switchport mode access switchport access vlan 14
  B. SW4 interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 14,108 SW11# interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 14,108 ! interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 14,108 SW9# interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 14
  C. SW4 interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 14 SW11# interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 14 SW9# interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 108
  D. SW4 interface Gi0/2 switchport mode access switchport access vlan 14 SW11# interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 14 ! interface Gi0/0 switchport mode access switchport access vlan 14 ! interface Gi0/1 switchport mode trunk SW9# interface Gi0/2 switchport mode access switchport access vlan 14
  B. SW4 interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 14,108 SW11# interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 14,108 ! interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 14,108 SW9# interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 14

  ---

  
  

• Question 984:

  Which command must be configured to enable port security with a manually assigned MAC address of aabb.

  cc00.1234 for a VoIP handset on VLAN 4?

  A. switchport port-security mac-address aabb.cc00.1234
  B. switchport port-security mac-address aabb.cc00.1234 vlan 4
  C. mac-address-table static aabb.cc00.1234 vlan 4 interface fa0/1
  D. switchport port-security mac-address sticky
  B. switchport port-security mac-address aabb.cc00.1234 vlan 4

  ---

  Explanation

  To configure port security with a manually assigned MAC address for a VoIP phone on a specific voice VLAN, the command must include both the MAC address and the VLAN number.

  switchport port-security mac-address aabb.cc00.1234 is incomplete because the VLAN is not specified.

  mac-address-table static aabb.cc00.1234 vlan 4 interface fa0/1 configures a static MAC address table entry, not port security.

  switchport port-security mac-address sticky enables sticky learning instead of manually assigning a MAC address.

• Question 985:

  Which switching method verifies the frame check sequence before forwarding frames?

  A. Cut-through
  B. Fragment-free
  C. Store-and-forward
  D. Fast switching
  C. Store-and-forward

  ---

  Store-and-forward switching receives the entire frame and verifies the Frame Check Sequence (FCS) before forwarding it. This method ensures that corrupted frames are not propagated through the network.

• Question 986:

  An engineer must configure a /30 subnet between two routes. Which usable IP address and subnet mask combination meets this criteria?

  A. interface e0/0 description to HQ-A370:98968 ip address 10.2.1.3 255.255.255.252
  B. interface e0/0 description to HQ-A370:98968 ip address 192.168.1.1 255.255.255.248
  C. interface e0/0 description to HQ-A370:98968 ip address 172.16.1.4 255.255.255.248
  D. interface e0/0 description to HQ-A370:98968 ip address 209.165.201.2 225.255.255.252
  D. interface e0/0 description to HQ-A370:98968 ip address 209.165.201.2 225.255.255.252

  ---

  Option D is the correct (the question has a typo, mask is 255.255.255.252) Network: 209.165.201.0 Broadcast: 209.165.201.3 Usable IPs: 209.165.201.1 - 209.165.201.2

  Option A not correct because that IP is broadcast Network: 10.2.1.0 Broadcast: 10.2.1.3 Usable IPs: 10.2.1.1 - 10.2.1.2

  Option B and C are wrong because they have a /29 mask

• Question 987:

  What is a function of Opportunistic Wireless Encryption in an environment?

  A. offer compression
  B. increase security by using a WEP connection
  C. provide authentication
  D. protect traffic on open networks
  D. protect traffic on open networks

• Question 988:

  What is represented by the word "VPN11" within this JSON schema?

  

  A. key
  B. array
  C. object
  D. value
  D. value

• Question 989:

  Which protocol is used in Software Defined Access (SDA) to provide a tunnel between two edge nodes in different fabrics?

  A. Generic Router Encapsulation (GRE)
  B. Virtual Local Area Network (VLAN)
  C. Virtual Extensible LAN (VXLAN)
  D. Point-to-Point Protocol (PPP)
  C. Virtual Extensible LAN (VXLAN)

  ---

  The SD(Cisco?Software-Defined Access)-Access fabric uses the VXLAN data plane to provide transport of the full original Layer 2 frame and additionally uses LISP as the control plane to resolve endpoint-to-location (EID-to-RLOC) mappings. The SD-Access fabric replaces sixteen (16) of the reserved bits in the VXLAN header to transport up to 64,000 SGTs using a modified VXLAN-GPO (sometimes called VXLAN-GBP) format described in https://tools.ietf.org/html/ draft-smith-vxlan-group-policy-04.

• Question 990:

  Which device segregates a network into separate zones that have their own security policies?

  A. IPS
  B. firewall
  C. access point
  D. switch
  B. firewall