Cisco 300-115 Online Practice Questions and Exam Preparation

Cisco 300-115 Online Questions & Answers

• Question 671:

  Which two VLAN ranges can you add, modify or delete on a switch? (Choose two.)

  A. VLANs 1-1001
  B. VLANs 1005-4094
  C. VLANs 1006-4094
  D. VLANs 2-1001
  E. VLANs 2-4094
  C. VLANs 1006-4094
  D. VLANs 2-1001

• Question 672:

  A network engineer is trying to prevent users from connecting unauthorized equipment to a production network. Which feature can be implemented campus-wide to satisfy this requirement?

  A. switchport block
  B. UplinkFast
  C. BPDU Guard
  D. private VLANs
  A. switchport block

• Question 673:

  What effect does the mac address-table aging-time 180 command have on the MAC address- table?

  A. This is how long a dynamic MAC address will remain in the CAM table.
  B. The MAC address-table will be flushed every 3 minutes.
  C. The default timeout period will be 360 seconds.
  D. ARP requests will be processed less frequently by the switch.
  E. The MAC address-table will hold addresses 180 seconds longer than the default of 10 minutes.
  A. This is how long a dynamic MAC address will remain in the CAM table.

  ---

  You can configure the amount of time that an entry (the packet source MAC address and port that packet ingresses) remain in the MAC table. To configure the aging time for all MAC addresses, perform this task: Command Purpose Step 1 switch# configure Enters configuration mode. terminal Step 2 switch(config)# mac- Specifies the time before an entry ages out address- table aging- and is discarded from the MAC address table. time seconds [vlan The range is from 0 to 1000000; the default is vlan_id] 300 seconds. Entering the value 0 disables the MAC aging. If a VLAN is not specified, the aging specification applies to all VLANs. This example shows how to set the aging time for entries in the MAC address table to 600 seconds (10 minutes): switch# configure terminal switch(config)# mac-address-table aging-time 600 Reference: http:// www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/configuration/ guide/ cli/ CLIConfigurationGuide/MACAddress.html#wp1126206

• Question 674:

  When you configure private VLANs on a switch, which port type connects the switch to the gateway router?

  A. promiscuous
  B. community
  C. isolated
  D. trunked
  A. promiscuous

  ---

  There are mainly two types of ports in a Private VLAN: Promiscuous port (P-Port) and Host port. Host port further divides in two types Isolated port (I-Port) and Community port (C-port). Promiscuous port (P-Port):

  The switch port connects to a router, firewall or other common gateway device. This port can communicate with anything else connected to the primary or any secondary VLAN. In other words, it is a type of a port that is allowed to send and

  receive frames from any other port on the VLAN.

  Host Ports:

  o Isolated Port (I-Port): Connects to the regular host that resides on isolated VLAN. This port communicates only with P-Ports. o Community Port (C-Port): Connects to the regular host that resides on community VLAN. This port communicates with P-Ports and ports on the same community VLAN. Reference: http://en.wikipedia.org/ wiki/Private_VLAN

• Question 675:

  Which three restrictions of port security features are true? (Choose three.)

  A. It is not supported on EtherChannel port-channel interfaces
  B. Static MAC address assignments are not supported.
  C. It is not supported on destination SPAN ports
  D. It is not supported on PVLAN ports
  E. A single device supports up to two sticky MAC addresses.
  A. It is not supported on EtherChannel port-channel interfaces
  B. Static MAC address assignments are not supported.
  C. It is not supported on destination SPAN ports

• Question 676:

  What is needed for Virtual Switching System "VSS"?

  A. portchannel
  B. trunk
  C. Virtual Switching Link "or VSL"
  D. Virtual trunk
  C. Virtual Switching Link "or VSL"

• Question 677:

  What attack technique can be used to force user traffic through an attacking device, causing a man-in-the- middle attack?

  A. VLAN hopping
  B. DHCP spoofing
  C. Rogue device
  D. MAC flooding
  B. DHCP spoofing

• Question 678:

  Which two statements about an access port with voice VLAN are true? (Choose two.)

  A. They support a single VLAN for data traffic.
  B. They require VTP.
  C. Frame on the voice VLAN are tagged with a Layer 2 CoS value.
  D. They can be configured on VLANs 1 through 1001.
  E. They can be configured on trunk ports and access ports.
  A. They support a single VLAN for data traffic.
  C. Frame on the voice VLAN are tagged with a Layer 2 CoS value.

• Question 679:

  A question about RADIUS replays. (Choose three.)

  A. accept
  B. challenge
  C. change password
  D. www.certbus.com
  A. accept
  B. challenge
  C. change password

• Question 680:

  Drag and Drop

  Drag the appropriate from left to right on description.

  Select and Place: