Cisco 300-101 Online Practice Questions and Exam Preparation

Cisco 300-101 Online Questions & Answers

• Question 31:

  Which option is the minimum logging level that displays a log message when an ACL drops an incoming packet?

  A. level3
  B. level4
  C. level5
  D. level6
  E. level7
  D. level6

• Question 32:

  A network engineer enables a trunk port and encounters the following message:%LINEPROTO-5- UPDOWN: Line protocol on Interface FastEthernet 1/1, changed state to up. What is the severity level of this message?

  A. alert
  B. critical
  C. notification
  D. informational
  C. notification

• Question 33:

  The OSPF database of a router shows LSA types 1, 2, 7, and a type 3 default route only. Which type of area is this router connected to?

  A. NSSA totally stub
  B. stub area
  C. totally stubby area
  D. NSSA
  A. NSSA totally stub

• Question 34:

  which command sequence can you enter on a router to configure Unicast Reverse Path Forwarding in loose mode?

  A. interface GigabitEthernet0/0 ip verigy unicast source reachable-via all
  B. interface GigabitEthernet0/0 ip verigy unicast source reachable-via loose
  C. interface GigabitEthernet0/0 ip verigy unicast source reachable-via any
  D. interface GigabitEthernet0/0 ip verigy unicast source reachable-via rx
  C. interface GigabitEthernet0/0 ip verigy unicast source reachable-via any

• Question 35:

  Which two statements about configuring Frame Relay point-to-multipoint connections are true? (Choose two.)

  A. They ignore the broadcast keyword in the frame-relay DLCI mapping.
  B. They require the same DLCI on each side of the link.
  C. Changing a point-to-multipoint subinterface to a different type requires the interface to be deleted and recreated.
  D. They require the frame-relay mapping command to be configured.
  E. They require inverse ARP.
  D. They require the frame-relay mapping command to be configured.
  E. They require inverse ARP.

• Question 36:

  When policy-based routing (PBR) is being configured, Which three criteria can the set command specify? (Choose three.)

  

  A. all interfaces through which the packets can be routed
  B. all interfaces in the path toward the destination
  C. adjacent next hop router in the path toward the destination
  D. all routers in the path toward the destination
  E. all networks in the path toward the destination
  F. type of service and precedence in the IP packets
  A. all interfaces through which the packets can be routed
  C. adjacent next hop router in the path toward the destination
  F. type of service and precedence in the IP packets

• Question 37:

  Drag and Drop

  Drag and Drop for COPP and MPP

  Select and Place:

  

  

  ---

  CoPP and MPP

  https://www.cisco.com/c/en/us/about/security-center/copp-best-practices.html

  Control Plane Policing (CoPP) – CoPP is the Cisco IOS-wide route processor protection mechanism. As illustrated in Figure 2, and similar to rACLs, CoPP is deployed once to the punt path of the router. However, unlike rACLs that only apply to receive destination IP packets, CoPP applies to all packets that punt to the route processor for handling. CoPP therefore covers not only receive destination IP packets, it also exceptions IP packets and non-IP packets. In addition, CoPP is implemented using the Modular QoS CLI (MQC) framework for policy construction. In this way, in addition to simply permit and deny functions, specific packets may be permitted but rate-limited. This behavior substantially improves the ability to define an effective CoPP policy. (Note: that “Control Plane Policing” is something of a misnomer because CoPP generally protects the punt path to the route processor and not solely the control plane.)

  CoPP Policy Construction and Deployment Concepts

  Before describing the details of CoPP policy construction and deployment, some of the important details related to MQC and its operation, especially within the context of CoPP are discussed.

  In MQC, the class-map command is used to define a traffic class. A traffic class contains three major elements: a name, one or a series of match commands, and an instruction on how to evaluate these match commands. Match commands are used to specify various criteria for classifying packets. Packets are checked to see whether they match the criteria specified in the match commands. If a packet matches the specified criteria, that packet is considered a member of the class and is treated according to the QoS specifications set in the service policy. Packets that fail to meet any of the matching criteria are classified as members of the default class.

  The instruction for evaluating match commands is specified as either match-any or match-all. When more than one match statement is included, match-any requires that a packet match at least one of the statements to be included in the class. If match-all is used, a packet must match all of the statements to be included in the class.

  The policy-map command is used to associate a traffic class, defined by the class-map command, with one or more QoS policies. The result of this association is called a service policy. A service policy contains three elements: a name, a traffic class (specified with the class command), and the QoS policies. The purpose of the service policy is to associate a traffic class with one or more QoS policies. Classes included within policy maps are processed top-down. When a packet is found to match a class, no further processing is performed. That is, a packet can only belong to a single class, and it is the first one to which a match occurs. When a packet does not match any of the defined classes, it is automatically placed in the class class-default. The default class is always applied, whether it is explicitly configured or not.

  The service-policy command is used to attach the service policy, as specified with the policy-map command, to an interface. In the case of CoPP, this is the control-plane interface. Because the elements of the service policy can be applied to packets entering, or in some versions of CoPP, leaving the interface, users are required to specify whether the service policy characteristics should be applied to incoming or outgoing packets.

  It is important to note that MQC is a general framework used for enabling all QoS throughout Cisco IOS, and not exclusively for CoPP. Not all features available within the MQC framework are available or applicable to CoPP policies. For example, only certain classification (match) criteria are applicable to CoPP. In some instances, there are MQC platform and/or IOS-dependencies that may apply to CoPP. Consult the appropriate product references and configuration guides

  for any CoPP-specific dependencies.

  Constructing the CoPP Policy

  Deploying the CoPP Policy

  Verifying the CoPP Policy

  Tuning the CoPP Policy

  https://www.cisco.com/c/en/us/td/docs/ios/12_4t/12_4t11/htsecmpp.html#wp1049321

  Management Plane

  The management plane is the logical path of all traffic related to the management of a routing platform. One of three planes in a communication architecture that is structured in layers and planes, the management plane performs management functions for a network and coordinates functions among all the planes (management, control, data). The management plane also is used to manage a device through its connection to the network.

  Examples of protocols processed in the management plane are Simple Network Management Protocol (SNMP), Telnet, HTTP, Secure HTTP (HTTPS), and SSH. These management protocols are used for monitoring and for CLI access.

  Restricting access to devices to internal sources (trusted networks) is critical.

  Benefits of the Management Plane Protection Feature

  Implementing the MPP feature provides the following benefits:

  -Greater access control for managing a device than allowing management protocols on all interfaces

  -Improved performance for data packets on nonmanagement interfaces

  -Support for network scalability

  -Simplifies the task of using per-interface ACLs to restrict management access to the device

  -Fewer ACLs needed to restrict access to the device

  -Management packet floods on switching and routing interfaces are prevented from reaching the CPU

• Question 38:

  Drag and Drop

  Drag and drop the steps in the NAT process for IPV4-initiated packers from the left into the correct sequence on the right.

  Select and Place:

  

  

• Question 39:

  Which option to the command service timestamps debug enables the logging server to capture the greatest amount of information from the router?

  A. uptime
  B. show-timezone
  C. year
  D. msec
  D. msec

• Question 40:

  Refer to the exhibit.

  

  Which routes will be injected into the routing protocol?

  A. the EIGRP 20 routes into RIP that match access-list 1
  B. any routing update with a metric of 1
  C. all RIP routes into EIGRP 20
  D. the RIP routes into EIGRP 20 that match access-list 1
  A. the EIGRP 20 routes into RIP that match access-list 1