Cisco 300-115 Online Practice Questions and Exam Preparation

Cisco 300-115 Online Questions & Answers

• Question 241:

  An access switch at a remote location is connected to the spanning-tree root with redundant uplinks. A network engineer notices that there are issues with the physical cabling of the current root port. The engineer decides to force the secondary link to be the desired forwarding root port. Which action accomplishes this task?

  A. Change the link-type to point-to-point.
  B. Enable Rapid Spanning Tree to converge using the secondary link.
  C. Adjust the secondary link to have a lower priority than the primary link.
  D. Apply a BPDU filter on the primary interface of the remote switches.
  C. Adjust the secondary link to have a lower priority than the primary link.

• Question 242:

  Drag and Drop

  RSPAN Steps (Concept 2)

  

• Question 243:

  Which two statements apply to topology-based switching?

  A. It is functionally equivalent to Cisco Express Forwarding
  B. It is the preferred switching mode in Cisco multilayer switches
  C. It uses Loop free protocol for switching
  D. disabled by default
  A. It is functionally equivalent to Cisco Express Forwarding
  B. It is the preferred switching mode in Cisco multilayer switches

• Question 244:

  Which command can be used to block a frame with an unknown MAC address from being forwarded out of an interface?

  A. Switchport block unicast
  B. it is not forwarded if the destination MAC address is unkown
  C. Switchport portfast
  D. Switchport protect
  A. Switchport block unicast

• Question 245:

  A network engineer configures port security and 802.1x on the same interface. Which option describes what this configuration allows?

  A. It allows port security to secure the MAC address that 802.1x authenticates.
  B. It allows port security to secure the IP address that 802.1x authenticates.
  C. It allows 802.1x to secure the MAC address that port security authenticates.
  D. It allows 802.1x to secure the IP address that port security authenticates.
  A. It allows port security to secure the MAC address that 802.1x authenticates.

  ---

  Explanation: 802.1X and Port Security You can configure port security and 802.1X on the same interfaces. Port security secures the MAC addresses that 802.1X authenticates. 802.1X processes packets before port security processes them, so when you enable both on an interface, 802.1X is already preventing inbound traffic on the interface from unknown MAC addresses. Reference: http://www.cisco.com/c/en/us/ td/docs/switches/datacenter/sw/4_1/nx- os/security/ configuration/ guide/sec_nx-os-cfg/sec_portsec.html

• Question 246:

  Which authentication service is needed to configure 802.1x?

  A. RADIUS with EAP Extension
  B. TACACS+
  C. RADIUS with CoA
  D. RADIUS using VSA
  A. RADIUS with EAP Extension

  ---

  Explanation: With 802.1x, the authentication server--performs the actual authentication of the client. The authentication server validates the identity of the client and notifies the switch whether or not the client is authorized to access the LAN and switch services. Because the switch acts as the proxy, the authentication service is transparent to the client. The Remote Authentication Dial-In User Service (RADIUS) security system with Extensible Authentication Protocol (EAP) extensions is the only supported authentication server. Reference: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2940/ software/release/12- 1_19_ea1/configuration/guide/2940scg_1/sw8021x.pdf

• Question 247:

  Which database is used to determine the validity of an ARP packet based on a valid IP-to-MAC address binding?

  A. DHCP snooping database
  B. dynamic ARP database
  C. dynamic routing database
  D. static ARP database
  A. DHCP snooping database

  ---

  Information About Dynamic ARP Inspection

  DAI is used to validate ARP requests and responses as follows:

  Intercepts all ARP requests and responses on untrusted ports. Verifies that a packet has a valid IP-to-MAC address binding before updating the ARP cache or forwarding the packet.

  Drops invalid ARP packets.

  DAI can determine the validity of an ARP packet based on valid IP-to-MAC address bindings stored in a DHCP snooping binding database. This database is built by DHCP snooping when it is enabled on the VLANs and on the device. It may

  also contain static entries that you have created.

  Reference:

  http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus1000/hyperv/sw/5_2_1_s_m_1_ 5_2/ troubleshooting/configuration/guide/ n1000v_troubleshooting/ n1000v_trouble_19dhcp.html

• Question 248:

  For which reason would you configure RSPAN instead of SPAN on your network?

  A. RSPAN provides more complete monitoring of the traffic on a single switch.
  B. Only RSPAN devices can monitor traffic on other device
  C. Only RSPAN can log traffic on a VLAN that spans multiple switches.
  D. Only RSPAN supports STP on multiple switches across a campus.
  C. Only RSPAN can log traffic on a VLAN that spans multiple switches.

• Question 249:

  HSRP was implemented and configured on two switches while scheduled network maintenance was performed. After the two switches have finished rebooting, you notice via show commands that Switch2 is the HSRP active router. Which two items are most likely the cause of Switch1 not becoming the active router? (Choose two)

  A. booting delays
  B. standby group number does not match VLAN number
  C. IP addressing is incorrect
  D. premption is disabled
  E. incorrect standby timers
  F. IP redirect is disabled
  A. booting delays
  D. premption is disabled

• Question 250:

  You have three switches working with VLAN 20, then you add a fourth switch through access ports. What do you need to do in order to prepare the new switch to operate well in the future? (Choose two.)

  A. Change the access port links to trunk.
  B. Configure SVI with an IP address for the current VLAN 20.
  C. http://certbus.com
  D. http://certbus.com
  A. Change the access port links to trunk.
  B. Configure SVI with an IP address for the current VLAN 20.