Cisco 300-115 Online Practice Questions and Exam Preparation

Cisco 300-115 Online Questions & Answers

• Question 81:

  Which two device types does DHCP snooping treat as untrusted in an ISP environment? (Choose two.)

  A. end host devices
  B. customer edge services
  C. user-facing provider edge devices
  D. provider edge devices
  E. provider devices
  A. end host devices
  B. customer edge services

• Question 82:

  Which two features does TACACS+ support? (Choose two.)

  A. Combining authorization and authentication to streamline AAA services.
  B. Decentralizing network access management, reducing the potential impact of a security breach to a central device.
  C. UDP communication between the network access server and the security server.
  D. Encrypting the entire TCP Packet containing TACACS + information
  E. PAP and CHAP authentication.
  D. Encrypting the entire TCP Packet containing TACACS + information
  E. PAP and CHAP authentication.

• Question 83:

  Which two statements about UDLD aggressive mode are true? (Choose two.)

  A. UDLD attempts to re-establish a downed link one time before declaring the link down.
  B. UDLD message are send every 15 seconds.
  C. If a unidirectional link is detected, the port state is determined by spanning tree.
  D. UDLD automatically chooses the messaging interval based on the configured timers.
  E. The UDLD detection timer is four times the message interval by default
  F. If a unidirectional link is detected, the port state is changed to errdisable.
  B. UDLD message are send every 15 seconds.
  F. If a unidirectional link is detected, the port state is changed to errdisable.

• Question 84:

  A network engineer deployed a switch that operates the LAN base feature set and decides to use the SDM VLAN template. The SDM template is causing the CPU of the switch to spike during peak working hours. What is the root cause of this issue?

  A. The VLAN receives additional frames from neighboring switches.
  B. The SDM VLAN template causes the MAC address-table to overflow.
  C. The VLAN template disables routing in hardware.
  D. The switch needs to be rebooted before the SDM template takes effect.
  C. The VLAN template disables routing in hardware.

  ---

  SDM Template Notes:

  All templates are predefined. There is no way to edit template category individual values.

  The switch reload is required to use a new SDM template.

  The ACL merge algorithm, as opposed to the original access control entries (ACEs) configured by the user, generate the number of TCAM entries listed for security and QoS ACEs. The first eight lines (up to Security ACEs) represent

  approximate hardware boundaries set when a template is used. If the boundary is exceeded, all processing overflow is sent to the CPU which can have a major impact on the performance of the switch. Choosing the VLAN template will

  actually disable routing (number of entry for unicast or multicast route is zero) in hardware. Reference: http://www.cisco.com/c/en/us/support/docs/switches/catalyst-3750- series- switches/44921- swdatabase-3750ss-44921.html

• Question 85:

  Which three characteristics of AAA with RADIUS are true? (Choose three.)

  A. It uses a client-server architecture.
  B. It uses standards-based implemented.
  C. It runs on UDP port 1812.
  D. It is a Cisco proprietary implementation.
  E. It runs on TCP port 49.
  F. It uses a client-private cloud architecture.
  A. It uses a client-server architecture.
  B. It uses standards-based implemented.
  C. It runs on UDP port 1812.

• Question 86:

  Which two commands do you enter to add VLAN 20 on a switch VLAN configuration file? (Choose two.)

  A. switchport trunk native vlan 20
  B. switchport access vlan 20
  C. vlan 20
  D. switchport trunk allowed vlan 20
  E. encapsulation dot1q 20
  B. switchport access vlan 20
  C. vlan 20

• Question 87:

  Regarding high availability, with the MAC address 0000.0c07.ac03, what does the "03" represent?

  A. The GLBP group number
  B. The type of encapsulation
  C. The HSRP router number
  D. The VRRP group number
  E. The HSRP group number
  F. The active router number
  E. The HSRP group number

• Question 88:

  A network engineer is installing a switch for temporary workers to connect to. The engineer does not want this switch participating in Spanning Tree with the rest of the network; however, end user connectivity is still required. Which spanning-tree feature accomplishes this?

  A. BPDUblock
  B. BPDUfilter
  C. BPDUignore
  D. BPDUguard
  E. BPDUdisable
  B. BPDUfilter

• Question 89:

  Which two statements about default FHRP behavior are true? (Choose two.)

  A. A backup GLBP active virtual gateway can become active only if the current active virtual gateway fails.
  B. Preemption is enabled by default.
  C. Unless specifically Configured, the priority of an HSRP router is 200.
  D. A standby HSRP router becomes active if it has a higher priority than the priority of the current active router
  E. A VRRP backup virtual router becomes the master router if its priority is higher than the priority of the current master router.
  A. A backup GLBP active virtual gateway can become active only if the current active virtual gateway fails.
  E. A VRRP backup virtual router becomes the master router if its priority is higher than the priority of the current master router.

• Question 90:

  Which two statements about TACACS+ are true? (Choose two.)

  A. It is a Cisco-proprietary technology
  B. It support several less-common protocol in addition to IP.
  C. It encrypts only the packet header.
  D. It is more reliable than RADIUS because it communicates with UDP packets.
  E. It is backwards-compatible with TACACS.
  F. It combines accounting and authorization functions.
  A. It is a Cisco-proprietary technology
  B. It support several less-common protocol in addition to IP.