Cisco 300-320 Online Practice Questions and Exam Preparation

Cisco 300-320 Online Questions & Answers

• Question 31:

  Which three options are recommended practices when configuring VTP? (Choose three.)

  A. Set the switch to transparent mode.
  B. Set the switch to server mode.
  C. Enable VLAN pruning.
  D. Disable VLAN pruning.
  E. Specify a domain name.
  F. Clear the domain name.
  A. Set the switch to transparent mode.
  D. Disable VLAN pruning.
  E. Specify a domain name.

  ---

  explanation:

  http://www.ciscopress.com/articles/article.asp?p=1315434andseqNum=2

• Question 32:

  Which option is a recommended firewall topology?

  A. using two firewalls with stateful failover switched mode
  B. using one firewall with NAT enabled in transparent mode
  C. using two firewalls in active/active mode
  D. using one firewall with stateful failover enabled in routed mode
  C. using two firewalls in active/active mode

• Question 33:

  Which NAC design model matches the following definitions?

  -NAS is deployed centrally in the core or distribution layer.

  -Users are multiple hops away from the Cisco NAS.

  - After authentication and posture assessment, the client traffic no longer passes through the Cisco NAS.

  -

  PBR is needed to direct the user traffic appropriately.

  A. Layer 3 in-band virtual gateway
  B. Layer 3 out-of-band with addressing
  C. Layer 2 in-band virtual gateway
  D. Layer 2 out-of-band virtual gateway
  B. Layer 3 out-of-band with addressing

  ---

  explanation:

  https://www.cisco.com/c/en/us/products/collateral/security/nac-appliance-clean-access/product_data_sheet0900aecd802da1b5.html Passing traffic mode

  Virtual gateway (bridged mode)

  Real IP gateway (routed mode)

  Client access mode

  Layer 2 (client is adjacent to the Cisco NAC Server)

  Layer 3 (client is multiple hops from the Cisco NAC Server)

  Traffic flow model

  In-band (Cisco NAC Server is always in-line with user traffic)

  Out-of-band (Cisco NAC Server is in-line only during authentication, posture assessment, and remediation)

• Question 34:

  Which statement about IPS and IDS solutions is true?

  A. IDS and IPS read traffic only in inline mode.
  B. IDS and IPS read traffic only in promiscuous mode.
  C. An IDS reads traffic in inline mode, and an IPS reads traffic in promiscuous mode.
  D. An IDS reads traffic in promiscuous mode, and an IPS reads traffic in inline mode.
  D. An IDS reads traffic in promiscuous mode, and an IPS reads traffic in inline mode.

• Question 35:

  Refer to the exhibit. Which statement about the ASA is true?

  

  A. The management interface is reachable only from VLAN 30.
  B. The management interface is reachable only from VLAN 40.
  C. It is running in transparent mode.
  D. It is running in routed mode.
  C. It is running in transparent mode.

• Question 36:

  Which two options are storage topologies? (Choose two.)

  A. WAS
  B. DAS
  C. CAS
  D. NAS
  B. DAS
  D. NAS

• Question 37:

  Which two options are VRF components? (Choose two.)

  A. RIB
  B. VSS
  C. FIB
  D. HSRP
  A. RIB
  C. FIB

• Question 38:

  What is the latest Cisco high-availability solution?

  A. VRRP
  B. HSRP
  C. VSS
  D. GLBP
  C. VSS

• Question 39:

  Which two key components are related to one firewall per ISP design option for e-commerce? (Choose two.)

  A. It is a common approach to single-homing.
  B. This approach is commonly used in large sites.
  C. Any failure on an edge router results in a loss of session.
  D. It has one NAT to two ISP-assigned blocks.
  E. It is difficult to set up and administer.
  C. Any failure on an edge router results in a loss of session.
  D. It has one NAT to two ISP-assigned blocks.

• Question 40:

  Which three virtualization categories are in campus networks? (Choose three.)

  A. Layer 2 virtualization
  B. Layer 3 clustering
  C. network virtualization
  D. device virtualization
  E. network clustering
  F. device clustering
  C. network virtualization
  D. device virtualization
  F. device clustering