Cisco 300-115 Online Practice Questions and Exam Preparation

Cisco 300-115 Online Questions & Answers

• Question 831:

  Which statement is true when UDLD is configured on a link and the link is determined to be unidirectional?

  A. The port remain up for a configured time interval and then error disables if the link remains unidirectional.
  B. LLDP is enabled on the port.
  C. The port sends a log message to the console.
  D. The port is disabled immediately
  A. The port remain up for a configured time interval and then error disables if the link remains unidirectional.

• Question 832:

  Which command would a network engineer apply to error-disable a switchport when a packet- storm is detected?

  A. router(config-if)#storm-control action shutdown
  B. router(config-if)#storm-control action trap
  C. router(config-if)#storm-control action error
  D. router(config-if)#storm-control action enable
  A. router(config-if)#storm-control action shutdown

  ---

  Configuring the Traffic Storm Control Shutdown Mode To configure the traffic storm control shutdown mode on an interface, perform this task: Command Purpose

  Step 1 Router(config)# interface {{type1 Selects an interface to configure. slot/port} | {port-channel num-ber}}

  Step 2 Router(config-if)# storm-control (Optional) Configures traffic storm control to action shutdown error- disable ports when a traffic storm occurs.

  ?Enter the no storm-control action shut-down command to revert to the default action (drop).

  ?Use the error disable detection and recov-ery feature, or the shutdown and no shut-down commands to reenable ports.

  Reference: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12- 2SX/configuration/ guide/book/storm.html

• Question 833:

  Refer to the exhibit. Which two statements abiout the network environment of the device that generated this output are true? (Choose two.)

  

  A. The local device has a higher priority setting than the active router.
  B. The virtual IP address if the HSRP group is 10.1.1.1
  C. If a router with a higher IP address and same HSRP priority as the active router becomes available, that router becomes the new active router 5 seconds later.
  D. If the local device fails to receive a hello from the active router for more than 5 seconds, it can become the active router.
  E. The hello and hold timers are set to custom values.
  B. The virtual IP address if the HSRP group is 10.1.1.1
  C. If a router with a higher IP address and same HSRP priority as the active router becomes available, that router becomes the new active router 5 seconds later.

• Question 834:

  Which command configures an interface to accept LLDP packets without enabling the interface to send the packet?

  A. lldp transmit
  B. lldp tlv-select
  C. lldp receive
  D. lldp run
  C. lldp receive

• Question 835:

  Which two statements about VTP modes are true? (Choose two.)

  A. Private VLANs are supported on devices that run VTP version 2 in transparent mode.
  B. Extended VLANs are supported only on devices that run VTP version 3 in server mode
  C. When VTP pruning is enabled on a VTP server, it is enabled for the entire management domain.
  D. Extended VLANs are supported only on devices that run VTP version 3 in client mode.
  E. Private VLANs are supported on devices that run any version of VTP in server mode.
  A. Private VLANs are supported on devices that run VTP version 2 in transparent mode.
  C. When VTP pruning is enabled on a VTP server, it is enabled for the entire management domain.

• Question 836:

  Which command is needed to enable DHCP snooping if a switchport is connected to a DHCP server?

  A. ip dhcp snooping trust
  B. ip dhcp snooping
  C. ip dhcp trust
  D. ip dhcp snooping information
  A. ip dhcp snooping trust

  ---

  When configuring DHCP snooping, follow these guidelines:

  DHCP snooping is not active until you enable the feature on at least one VLAN, and enable DHCP globally on the switch. Before globally enabling DHCP snooping on the switch, make sure that the devices acting as the DHCP server and the

  DHCP relay agent are configured and enabled. If a Layer 2 LAN port is connected to a DHCP server, configure the port as trusted by entering the "ip dhcp snooping trust" interface configuration command.

  If a Layer 2 LAN port is connected to a DHCP client, configure the port as untrusted by entering the no ip dhcp snooping trust interface configuration command. Reference: http://www.cisco.com/c/en/us/td/docs/ switches/lan/catalyst6500/

  ios/12- 2SX/configuration/guide/book/snoodhcp.html

• Question 837:

  When IP Source Guard with source IP filtering is enabled on an interface, which feature must be enabled on the access VLAN for that interface?

  A. DHCP snooping
  B. storm control
  C. spanning-tree portfast
  D. private VLAN
  A. DHCP snooping

  ---

  IP Source Guard Configuration Guidelines

  You can configure static IP bindings only on nonrouted ports. If you enter the ip source binding mac- address vlan vlan-id ip-address interface interface-id global configuration command on a routed interface, this error message appears:

  Static IP source binding can only be configured on switch port.

  When IP source guard with source IP filtering is enabled on an interface, DHCP snooping must be enabled on the access VLAN for that interface.

  If you are enabling IP source guard on a trunk interface with multiple VLANs and DHCP snooping is enabled on all the VLANs, the source IP address filter is applied on all the VLANs.

  You can enable this feature when 802.1x port-based authentication is enabled. Reference: http:// www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/ software/15- 0_2_EX/security/ configuration_guide/b_sec_152ex_2960-x_cg/

  b_sec_152ex_2960- x_cg_chapter_01110.html

• Question 838:

  Which statement about the MAC address sticky entries in the switch when the copy run start command is entered is true?

  A. A sticky MAC address is retained when the switch reboots.
  B. A sticky MAC address can be a unicast or multicast address.
  C. A sticky MAC address is lost when the switch reboots.
  D. A sticky MAC address ages out of the MAC address table after 600 seconds.
  A. A sticky MAC address is retained when the switch reboots.

• Question 839:

  After port security is deployed throughout an enterprise campus, the network team has been overwhelmed with port reset requests. They decide to configure the network to automate the process of re-enabling user ports. Which command accomplishes this task?

  A. switch(config)# errdisable recovery interval 180
  B. switch(config)# errdisable recovery cause psecure-violation
  C. switch(config)# switchport port-security protect
  D. switch(config)# switchport port-security aging type inactivity
  E. switch(config)# errdisable recovery cause security-violation
  B. switch(config)# errdisable recovery cause psecure-violation

  ---

  Explanation: When a secure port is in the error-disabled state, you can bring it out of this state automatically by configuring the errdisable recovery cause psecure- violation global configuration command or you can manually reenable it by entering the shutdown and no shut down interface configuration commands. This is the default mode. If a port is in per-VLAN errdisable mode, you can also use clear errdisable interface name vlan range command to re-enable the VLAN on the port. You can also customize the time to recover from the specified error disable cause (default is 300 seconds) by entering the errdisable recovery interval interval command. Reference: http://www.cisco.com/c/en/us/td/docs/switches/ lan/ catalyst4500/12- 2/53SG/configuration/config/port_sec.pdf

• Question 840:

  How does AAA accounting feature is used with radius?

  A. it is coupled with authorization feature to identify the feature on network device to which the user has access
  B. it is coupled with authentication feature to determine whether the user can access a device on network
  C. it is a backdoor that contain user of all users allowed to access network
  D. it tracks an individual's usage of network resource
  D. it tracks an individual's usage of network resource