Cisco 300-115 Online Practice Questions and Exam Preparation

Cisco 300-115 Online Questions & Answers

• Question 91:

  Which command is used to override the priority of frames arriving on the Cisco IP phone port?

  A. mls qos dscp
  B. mls qos cos
  C. switchport priority extend trust
  D. http://certbus.com
  C. switchport priority extend trust

• Question 92:

  A question about VRRP with an exhibit. Which switch becomes the master?

  A. interface ..... ip address x.x.x.2 vrrp 1 priority 100
  B. interface ..... ip address x.x.x.3 vrrp 1 priority 110
  C. interface ..... ip address x.x.x.2 vrrp 1 priority 120
  D. interface ..... ip address x.x.x.1 vrrp 1 priority 95
  C. interface ..... ip address x.x.x.2 vrrp 1 priority 120

• Question 93:

  A network engineer must adjust the STP interface attributes to influence root port selection. Which two elements are used to accomplish this? (Choose two.)

  A. port-priority
  B. cost
  C. forward-timers
  D. link type
  E. root guard
  A. port-priority
  B. cost

  ---

  Explanation: Spanning tree forces redundant data paths into a standby (blocked) state. If a network segment in the spanning tree fails and a redundant path exists, the spanning-tree algorithm recalculates the spanning-tree topology and activates the standby path. Switches send and receive spanning-tree frames, called bridge protocol data units (BPDUs), at regular intervals. The switches do not forward these frames but use them to construct a loop-free path. BPDUs contain information about the sending switch and its ports, including switch and MAC addresses, switch priority, port priority, and path cost. Spanning tree uses this information to elect the root switch and root port for the switched network and the root port and designated port for each switched segment. When two ports on a switch are part of a loop, the spanning-tree port priority and path cost settings control which port is put in the forwarding state and which is put in the blocking state. The spanning-tree port priority value represents the location of a port in the network topology and how well it is located to pass traffic. The path cost value represents the media speed. Reference: http://www.cisco.com/c/en/us/td/docs/ switches/lan/catalyst3750x_3560x/software/ release/12- 2_55_se/configuration/ guide/3750xscg/swstp.html

• Question 94:

  A question about interface trunk is configured with vlan dot1q tag native command. What will happen when it receives untagged frame?

  A. Drop it.
  B. Send it over the default VLAN.
  C. http://certbus.com
  D. http://certbus.com
  A. Drop it.

• Question 95:

  Which two differences between RADIUS and TACACS+ are true? (Choose two)

  A. Only TACACS+ can combine authentication and authorization functions
  B. Only RADIUS uses UDP
  C. Only RADIUS provides granular control over the CLI commands that a user can execute
  D. Only TACACS+ uses user privilege levels to determine which commands the user can execute
  E. Only TACACS+ uses UDP
  B. Only RADIUS uses UDP
  D. Only TACACS+ uses user privilege levels to determine which commands the user can execute

• Question 96:

  Which feature is automatically configured when an administrator enables a voice VLAN?

  A. 802.1Q trunking
  B. PortFast
  C. QoS
  D. private VLANs
  B. PortFast

• Question 97:

  Based on the show spanning-tree vlan 200 output shown in the exhibit, which two statements about the STP process for VLAN 200 are true? (Choose two.)

  

  A. BPDUs will be sent out every two seconds.
  B. The time spent in the listening state will be 30 seconds.
  C. The time spent in the learning state will be 15 seconds.
  D. The maximum length of time that the BPDU information will be saved is 30 seconds.
  E. This switch is the root bridge for VLAN 200.
  F. BPDUs will be sent out every 10 seconds.
  B. The time spent in the listening state will be 30 seconds.
  F. BPDUs will be sent out every 10 seconds.

• Question 98:

  A Cisco Catalyst switch that is prone to reboots continues to rebuild the DHCP snooping database. What is the solution to avoid the snooping database from being rebuilt after every device reboot?

  A. A DHCP snooping database agent should be configured.
  B. Enable DHCP snooping for all VLANs that are associated with the switch.
  C. Disable Option 82 for DHCP data insertion.
  D. Use IP Source Guard to protect the DHCP binding table entries from being lost upon rebooting.
  E. Apply ip dhcp snooping trust on all interfaces with dynamic addresses.
  A. A DHCP snooping database agent should be configured.

  ---

  Minimum DHCP Snooping Configuration

  The minimum configuration steps for the DHCP snooping feature are as follows:

  1.Define and configure the DHCP server.

  2. Enable DHCP snooping on at least one VLAN.

  By default, DHCP snooping is inactive on all VLANs.

  3.Ensure that DHCP server is connected through a trusted interface. By default, the trust state of all interfaces is untrusted. 4.Configure the DHCP snooping database agent. This step ensures that database entries are restored after a restart

  or switchover. 5.Enable DHCP snooping globally. The feature is not active until you complete this step.

  Reference:

  http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/sno odhcp.html#wp1090479

• Question 99:

  Which three commands configure RSPN to capture outgoing traffic one VLAN on an interface while ignoring other VLAN traffic on the same interface? (choose three)

  A. monitor session 2 source interface gigabitethernet0/3 both
  B. monitor session 2 source interface gigabitethernet0/3 tx
  C. monitor session 2 destination remote vlan 912
  D. monitor session 2 source interface gigabitethernet0/3 rx
  E. monitor session 2 filter vlan 2 - 7,12
  F. monitor session 2 destination interface gigabitethernet1/0/2
  B. monitor session 2 source interface gigabitethernet0/3 tx
  C. monitor session 2 destination remote vlan 912
  E. monitor session 2 filter vlan 2 - 7,12

• Question 100:

  Which two authentication methods does HSRP use? (Choose two.)

  A. WPA2 authentication
  B. SHA-128 authentication
  C. MD5 authentication
  D. Plain text authentication
  E. Teredo
  F. No authentication methods do exist
  C. MD5 authentication
  D. Plain text authentication