Cisco 300-115 Online Practice Questions and Exam Preparation

Cisco 300-115 Online Questions & Answers

• Question 451:

  On which interface can port security be configured?

  A. static trunk ports
  B. destination port for SPAN
  C. EtherChannel port group
  D. dynamic access point
  A. static trunk ports

  ---

  Port Security and Port Types

  You can configure port security only on Layer 2 interfaces. Details about port security and different types of interfaces or ports are as follows:

  Access ports--You can configure port security on interfaces that you have configured as Layer 2 access ports. On an access port, port security applies only to the access VLAN. Trunk ports--You can configure port security on interfaces that

  you have configured as Layer 2 trunk ports. VLAN maximums are not useful for access ports. The device allows VLAN maximums only for VLANs associated with the trunk port.

  SPAN ports--You can configure port security on SPAN source ports but not on SPAN destination ports.

  Ethernet Port Channels--Port security is not supported on Ethernet port channels. Reference: http:// www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/4_1/ nx- os/security/configuration/guide/sec_nx- os-cfg/sec_portsec.html

• Question 452:

  A network engineer wants to ensure Layer 2 isolation of customer traffic using a private VLAN. Which configuration must be configured before the VLAN is configured?

  A. Ensure all switches are configured as VTP server mode.
  B. Configure VTP Transparent mode.
  C. Enable VTP version 3.
  D. Disable VTP and manually assign VLANS.
  B. Configure VTP Transparent mode.

• Question 453:

  Which two statements about PortFast is true? (Choose two.)

  A. It will skip all spanning-tree states.
  B. Only when the port is active when it moves to the forwarding state.
  C. It is mostly used when connecting to workstations and servers.
  D. It skips the learning state.
  C. It is mostly used when connecting to workstations and servers.
  D. It skips the learning state.

• Question 454:

  Which statement about the default behavior of a Cisco switch MAC address table is true?

  A. MAC addresses are not learned on extended VLANs.
  B. MAC addresses are aged out of the MAC table after 600 seconds
  C. MAC addresses are associated with a VLAN
  D. MAC address filtering is enabled on trunk ports.
  C. MAC addresses are associated with a VLAN

• Question 455:

  Refer to the exhibit.

  

  If all switches in this environment are running PVSTP+, which switch is elected as the STP root switch when a new VLAN is added to the network?

  A. switch 5
  B. switch 2
  C. switch 4
  D. switch 1
  E. switch 3
  B. switch 2

• Question 456:

  An engineer is configuring an EtherChannel between two switches using LACP. If the EtherChannel mode on switch 1 is configured to active, which two modes on switch 2 establish an operational EtherChannel? (Choose two.)

  A. active
  B. auto
  C. desirable
  D. on
  E. passive
  A. active
  E. passive

• Question 457:

  In a Cisco switch, what is the default period of time after which a MAC address ages out and is discarded?

  A. 100 seconds
  B. 180 seconds
  C. 300 seconds
  D. 600 seconds
  C. 300 seconds

  ---

  To configure the aging time for all MAC addresses, perform this task:

  Command Purpose

  Step 1 switch# configure ter- Enters configuration mode.

  minal

  Step 2 switch(config)# mac-ad- Specifies the time before an entry ages out and is dis- dress-table aging- time carded from the MAC address table. The range is from seconds [vlan vlan_id] 0 to 1000000; the default is 300 seconds. Entering

  the value 0 disables the MAC aging. If a VLAN is not specified, the aging specification applies to all VLANs.

  Reference:

  http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/configuration/guide/cli/M ACAddress.html

• Question 458:

  Refer to the exhibit.

  

  Which router is elected as the VRRP virtual router master?

  A. router D
  B. router A
  C. router B
  D. router C
  D. router C

• Question 459:

  Which statement is true about unknown UDLD?

  A. It is not an error and it will detect a neighbor after 5 seconds.
  B. No issue with UDLD
  C. UDLD is not configured correctly
  D. https://www.CertBus.com/300-115.html
  A. It is not an error and it will detect a neighbor after 5 seconds.

• Question 460:

  Which security feature inspects ARP packets based on valid-to-MAC address bindings?

  A. DAI
  B. BPDU guard
  C. port security
  D. IP Source Guard
  A. DAI