Cisco 300-115 Online Practice Questions and Exam Preparation

Cisco 300-115 Online Questions & Answers

• Question 801:

  A question about load balancing in HSRP.

  A. MHSRP
  B. www.certbus.com
  C. www.certbus.com
  D. www.certbus.com
  A. MHSRP

• Question 802:

  A DHCP configured router is connected directly to a switch that has been provisioned with DHCP snooping. IP Source Guard with the ip verify source port-security command is configured under the interfaces that connect to all DHCP clients

  on the switch. However, clients are not receiving an IP address via the DHCP server.

  Which option is the cause of this issue?

  A. The DHCP server does not support information option 82.
  B. The DHCP client interfaces have storm control configured.
  C. Static DHCP bindings are not configured on the switch.
  D. DHCP snooping must be enabled on all VLANs, even if they are not utilized for dynamic address allocation.
  A. The DHCP server does not support information option 82.

  ---

  When you enable both IP Source Guard and Port Security, using the ip verify source port- security interface configuration command, there are two caveats:

  The DHCP server must support option 82, or the client is not assigned an IP address.

  The MAC address in the DHCP packet is not learned as a secure address. The MAC address of the DHCP client is learned as a secure address only when the switch receives non-DHCP data traffic. Reference: http://www.cisco.com/c/en/us/ td/docs/switches/lan/ catalyst3550/software/release/12- 2_25_see/configuration/ guide/3550SCG/ swdhcp82.html#wp1069615

• Question 803:

  The network monitoring application alerts a network engineer of a client PC that is acting as a rogue DHCP server. Which two commands help trace this PC when the MAC address is known? (Choose two.)

  A. switch# show mac address-table
  B. switch# show port-security
  C. switch# show ip verify source
  D. switch# show ip arp inspection
  E. switch# show mac address-table address
  A. switch# show mac address-table
  E. switch# show mac address-table address

  ---

  These two commands will show the MAC address table, including the switch port that the particular host is using. Here is an example output: Switch> show mac-address-table

  Dynamic Addresses Count: 9 Secure Addresses (User-defined) Count: 0 Static Addresses (User-defined) Count: 0

  System Self Addresses Count: 41 Total MAC addresses: 50 Non-static Address Table: Destination Address Address Type VLAN Destination Port ------------------- ------------ ---- -------------------- 0010.0de0.e289 Dynamic 1 FastEthernet0/1 0010.7b00.1540 Dynamic 2 FastEthernet0/5 0010.7b00.1545 Dynamic 2 FastEthernet0/5

• Question 804:

  Drag and Drop

  Drag and drop the descriptions of switching technologies from the left correct technologies on the right.

  Select and Place:

  

  

• Question 805:

  Which statement about local database device authentication is true?

  A. It supports the full functionality of the AAA accounting feature
  B. It can be used as a fallback authentication method when the connection to the remote network access server fails.
  C. It is most appropriate for authentication on a large network with many endusers
  D. It is primarily used for authentication without usernames
  B. It can be used as a fallback authentication method when the connection to the remote network access server fails.

• Question 806:

  Which form of centralized device authentication allows each AAA feature to function separately?

  A. local database
  B. RADIUS
  C. TACACS+
  D. kerberos
  C. TACACS+

• Question 807:

  Two switches had two redundant links between them. An interface on the primary link has a problem and the admin wants to move the traffic to the other link.What action must he perform?

  A. Change priority for secondary connection to a lower value than the primary.
  B. Change STP mode to RSTP.
  C. Configure a point-to-point connection for the secondary link
  D. Apply bpdufilter on the primary connection.
  A. Change priority for secondary connection to a lower value than the primary.

• Question 808:

  Which two options are true about TACACS+? (Choose two.)

  A. Decentralize login to avoid security breach xxxxxx (not remembering full)
  B. Support PAP and CHAP
  C. Combines authentication and authorization
  D. Entire packet is encrypted
  A. Decentralize login to avoid security breach xxxxxx (not remembering full)
  D. Entire packet is encrypted

• Question 809:

  Which option TPI 802.1Q tag?

  A. 0x0806
  B. 0x888E
  C. 0x0800
  D. 0x8100
  D. 0x8100

• Question 810:

  Which two tasks must you perform to enable AAA operations with a remote security database? (Choose two)

  A. Configure network equipment to query the remote security database.
  B. Configure a user profile in the local database of each device to which the user will have access.
  C. Configure SSH to provide remote access to network equipment.
  D. Configure Cisco Discovery Protocol on all interfaces used for authentication
  E. Configure user profiles on the remote security database
  A. Configure network equipment to query the remote security database.
  E. Configure user profiles on the remote security database