Cisco 300-115 Online Practice Questions and Exam Preparation

Cisco 300-115 Online Questions & Answers

• Question 941:

  Which of the following commands to configure a DHCP trust is valid?

  A. (config)# interface FastEthernet 0/1 (config-if)# ip dhcp snooping trust (config-if)# do show ip dhcp snooping | begin pps
  B. (config)# interface FastEthernet 0/1 (config-if) ip dhcp snooping granted (config-if)# do show ip dhcp snooping | enable pps
  C. (config)# interface FastEthernet 0/1 (config-if) ip dhcp snooping allowed-enable (config-if)# do show ip dhcp snooping | start pps
  D. (config)# interface FastEthernet 0/1 (config-if)# ip dhcp snooping enable (config-if)# ip dhcp show snoop | begin pps
  A. (config)# interface FastEthernet 0/1 (config-if)# ip dhcp snooping trust (config-if)# do show ip dhcp snooping | begin pps

• Question 942:

  Which option is a possible cause for an errdisabled interface?

  A. routing loop
  B. cable unplugged
  C. STP loop guard
  D. security violation
  D. security violation

  ---

  There are various reasons for the interface to go into errdisable. The reason can be:

  Duplex mismatch

  Port channel misconfiguration

  BPDU guard violation UniDirectional Link Detection (UDLD) condition Late-collision detection

  Link-flap detection

  Security violation

  Port Aggregation Protocol (PAgP) flap

  Layer 2 Tunneling Protocol (L2TP) guard

  DHCP snooping rate-limit

  Incorrect GBIC / Small Form-Factor Pluggable (SFP) module or cable Address Resolution Protocol (ARP) inspection Inline power

  Reference: http://www.cisco.com/en/US/tech/tk389/tk621/ technologies_tech_note09186a00806cd87b.shtml

• Question 943:

  Which option is the values of the Tag Protocol Identifier for an 802.1Q tagged frame?

  A. 0X0806
  B. 0X88E
  C. 0X8100
  D. 0X0800
  C. 0X8100

• Question 944:

  Lab Simulation - LACP with STP Sim

  You work for SWITCH.com. They have just added a new switch (SwitchB) to the existing network as shown in the topology diagram.

  RouterA is currently configured correctly and is providing the routing function for devices on SwitchA and SwitchB. SwitchA is currently configured correctly, but will need to be modified to support the addition of SwitchB. SwitchB has a minimal

  configuration. You have been tasked with competing the needed configuring of SwitchA and SwitchB. SwitchA and SwitchB use Cisco as the enable password.

  Configuration Requirements for SwitchA

  The VTP and STP configuration modes on SwitchA should not be modified.

  - SwitchA needs to be the root switch for vlans 11, 12, 13, 21, 22 and 23. All other vlans should be left are their default values.

  Configuration Requirements for SwitchB

  -

  Vlan 21 Name: Marketing will support two servers attached to fa0/9 and fa0/10

  -

  Vlan 22 Name: Sales will support two servers attached to fa0/13 and fa0/14

  -

  Vlan 23 Name: Engineering will support two servers attached to fa0/15 and fa0/16

  - Access ports that connect to server should transition immediately to forwarding state upon detecting the connection of a device.

  -SwitchB VTP mode needs to be the same as SwitchA.

  - SwitchB must operate in the same spanning tree mode as SwitchA

  -No routing is to be configured on SwitchB

  -

  Only the SVI vlan 1 is to be configured and it is to use address 192.168.1.11/24

  Inter-switch Connectivity Configuration Requirements

  -

  For operational and security reasons trunking should be unconditional and Vlans 1, 21, 22 and 23 should tagged when traversing the trunk link.

  -

  The two trunks between SwitchA and SwitchB need to be configured in a mode that allows for the maximum use of their bandwidth for all vlans. This mode should be done with a non-proprietary protocol, with SwitchA controlling activation.

  -

  Propagation of unnecessary broadcasts should be limited using manual pruning on this trunk link.

  

  A. Check the answer below
  A. Check the answer below

  ---

  SW-A (close to router) SW-A#configure terminal SW-A(config)#spanning-tree vlan 11-13,21-23 root primary SW-A(config)#vlan 21 SW-A(config-vlan)#name Marketing SW-A(config-vlan)#exit SW-A(config)#vlan 22 SW-A(config-vlan)#name Sales SW-A(config-vlan)#exit SW-A(config)#vlan 23 SW-A(config-vlan)#name Engineering SW-A(config-vlan)#exit SW-A(config)#interface range Fa0/3 ?4 SW-A(config-if-range)#no switchport mode access (These two commands must be deleted to form a trunking link) SW-A(config-if-range)#no switchport access vlan 98 (cannot issued this command on this switch, but don`t worry coz I still got 100%) SW-A(config-if-range)#switchport trunk encapsulation dot1q SW-A(config-if-range)#switchport mode trunk SW-A(config-if-range)#switchport trunk native vlan 99 SW-A(config-if-range)#switchport trunk allowed vlan 1,21-23 SW-A(config-if-range)#channel-group 1 mode active SW-A(config-if-range)#channel-protocol lacp SW-A(config-if-range)#no shutdown SW-A(config-if-range)#end SW-B (far from router) SW-B#configure terminal SW-B(config)#vlan 21 SW-B(config-vlan)#name Marketing SW-B(config-vlan)#exit SW-B(config)#vlan 22 SW-B(config-vlan)#name Sales SW-B(config-vlan)#exit SW-B(config)#vlan 23 SW-B(config-vlan)#name Engineering SW-B(config-vlan)#exit SW-B(config)#vlan 99 not necessary to name it but just name it same as SwitchA SW-B(config-vlan)#name TrunkNative // SW-B(config-vlan)#exit SW-B(config)#interface range Fa0/9 ?10 SW-B(config-if-range)#switchport mode access SW-B(config-if-range)#switchport access vlan 21 SW-B(config-if-range)#spanning-tree portfast SW-B(config-if-range)#no shutdown SW-B(config-if-range)#exit SW-B(config)#interface range Fa0/13 ?14 SW-B(config-if-range)#switchport mode access SW-B(config-if-range)#switchport access vlan 22 SW-B(config-if-range)#spanning-tree portfast SW-B(config-if-range)#no shutdown SW-B(config-if-range)#exit SW-B(config)#interface range Fa0/15 ?16 SW-B(config-if-range)#switchport mode access SW-B(config-if-range)#switchport access vlan 23 SW-B(config-if-range)#spanning-tree portfast SW-B(config-if-range)#no shutdown SW-B(config-if-range)#exit SW-B(config)#vtp mode transparent SW-B(config)#spanning-tree mode rapid-pvst (you can get this IP from SW-A with command show cdp neighbour detail) // not sure about this SW-B (config)#ip default-gateway 192.168.1.1 command because the question says "No routing is to be configured on SwitchB".

  SW-B(config)#interface vlan 1 SW-B(config-if)#ip address 192.168.1.11 255.255.255.0 SW-B(config-if)#no shutdown SW-B(config-if)#exit SW-B(config)#interface range Fa0/3 ?4 (yes I can issued this command on this switch) SW-B(config-if-range)#switchport trunk encapsulation dot1q SW-B(config-if-range)#switchport mode trunk SW-B(config-if-range)#switchport trunk native vlan 99 SW-B(config-if-range)#switchport trunk allowed vlan 1,21-23 //mode passive because "SwitchA controlling activation" SW-B(config-if-range)#channel-group 1 mode passive SW-B(config-if-range)#channel-protocol lacp SW-B(config-if-range)#no shutdown SW-B(config-if-range)#end You may have to configure Interface Port-Channel on both switches. Check the configuration first, if it does not exist, use these commands: interface port-channel1 switchport mode trunk //this command will prevent the "Native VLAN mismatched" error on both switches switchport trunk native vlan 99 switchport trunk allowed vlan 1,21-23,99 Some notes for this sim:

  

  

  +

  You should check the initial status of both switches with these commands: show vtp status (transparent mode on switchA and we have to set the same mode on switchB), show spanning-tree [summary] (rapidpvst mode on switchA and we have to set the same mode on switchB), show vlan (check the native vlan and the existence of vlan99), show etherchannel 1 port-channel and show ip int brief (check if Port-channel 1 has been created and make sure it is up), show run (to check everything again).

  +

  When using "int range f0/x - y" command hit space bar before and after "-" otherwise the simulator does not accept it.

  +

  You must create vlan 99 for the switchB. SwitchA already have vlan 99 configured.

  +

  At the end, you can try to ping from SwitchB to RouterA (you can get the IP on RouterA via the show cdp neighbors detail on SwitchA), not sure if it can ping or not. If not, you can use the "ip default-gateway 192.168.1.1" on SwitchB.

  +

  The name of SwitchA and SwitchB can be swapped or changed so be careful to put your configuration into appropriate switch.

• Question 945:

  Which two statements about VTP are true? (Choose two.)

  A. A switch running in transparent mode saves learned VLANs to its local database.
  B. t supports clear-text passwords only.
  C. In VTPv2, a new switch can learn the VTP domain name from its peer over a trunk port.
  D. Switches running in transparent mode pass VTP messages.
  E. It supports only server switch within a network.
  B. t supports clear-text passwords only.
  D. Switches running in transparent mode pass VTP messages.

• Question 946:

  A physical switch port is part of an EtherChannel group.What happens while the same port is configured as a SPAN destination?

  A. The port forwards traffic in the EtherChannel group and acts as a SPAN source simultaneously
  B. The operation is not allowed as an EtherChannel member cannot be a SPAN source port
  C. The port is put in the errdisabled state and can only be reenabled manually
  D. The port is removed from the EtherChannel group
  D. The port is removed from the EtherChannel group

• Question 947:

  Which tool can error-disable an interface if the storm control threshold is exceeded?

  A. storm control action shutdown
  B. storm control action default
  C. storm control enable
  D. storm control action trap
  B. storm control action default

• Question 948:

  Which portion of AAA looks at what a user has access to?

  A. authorization
  B. authentication
  C. accounting
  D. auditing
  A. authorization

  ---

  AAA consists of the following three elements:

  Authentication: Identifies users by login and password using challenge and response methodology before the user even gains access to the network. Depending on your security options, it can also support encryption. Authorization: After

  initial authentication, authorization looks at what that authenticated user has access to do. RADIUS or TACACS+ security servers perform authorization for specific privileges by defining attribute-value (AV) pairs, which would be specific to the

  individual user rights. In the Cisco IOS, you can define AAA

  authorization with a named list or authorization method.

  Accounting: The last "A" is for accounting. It provides a way of collecting security information that you can use for billing, auditing, and reporting. You can use accounting to see what users do once they are authenticated and authorized. For

  example, with accounting, you could get a log of when users logged in and when they logged out.

  Reference: http://www.techrepublic.com/blog/data-center/what-is-aaa-and-how-do-you- configure-it-in-the- cisco-ios/

• Question 949:

  Which three advantages of TACACS+ are true? (Choose three.)

  A. It integrates authentication and authorization
  B. It controls access to network devices
  C. It controls access to endpoint devices
  D. It encrypted the passwords
  E. It encrypted the whole transition
  F. It separates authentication and authorization
  B. It controls access to network devices
  E. It encrypted the whole transition
  F. It separates authentication and authorization

• Question 950:

  Which layer private VLAN partition the broadcast domain?

  A. Layer 1
  B. Layer 2
  C. Layer 3
  D. Layer 4
  B. Layer 2