Summer Certification Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Pass the Cisco CCNA 200-301 Questions and answers with ValidTests

Exam 200-301 All Questions
Exam 200-301 Premium Access

View all detail and faqs for the 200-301 exam

Viewing page 7 out of 8 pages
Viewing questions 301-350 out of questions
Questions # 301:

Refer to the exhibit.

Question # 301

Which command must be executed for Gi1.1 on SW1 to become a trunk port if Gi1/1 on SW2 is configured in desirable or trunk mode?

Options:

A.

switchport mode trunk

B.

switchport mode dot1-tunnel

C.

switchport mode dynamic auto

D.

switchport mode dynamic desirable

Expert Solution
Questions # 302:

Refer to the exhibit.

Question # 302

An engineer configured the New York router with state routes that point to the Atlanta and Washington sites. When command must be configured on the Atlanta and Washington routers so that both sites are able to reach the loopback2 interface on the New York router?

Options:

A.

ipv6 route ::/0 Serial 0/0/1

B.

ipv6 route 0/0 Serial 0/0/0

C.

ipv6 route ::/0 Serial 0/0/0

D.

ip route 0.0.0.0.0.0.0.0 Serial 0/0/0

E.

ipv6 route ::/0 2000::2

Expert Solution
Questions # 303:

When a client and server are not on the same physical network, which device is used to forward requests and replies between client and server for DHCP?

Options:

A.

DHCP relay agent

B.

DHCP server

C.

DHCPDISCOVER

D.

DHCPOFFER

Expert Solution
Questions # 304:

What are two recommendations for protecting network ports from being exploited when located in an office space outside of an IT closer? (Choose two.)

Options:

A.

enable the PortFast feature on ports

B.

implement port-based authentication

C.

configure static ARP entries

D.

configure ports to a fixed speed

E.

shut down unused ports

Expert Solution
Questions # 305:

Refer to Exhibit.

Question # 305

Which configuration must be applied to the router that configures PAT to translate all addresses in VLAN 200 while allowing devices on VLAN 100 to use their own IP addresses?

Question # 305

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Expert Solution
Questions # 306:

Refer to Exhibit.

Question # 306

An engineer is configuring the NEW York router to reach the Lo1 interface of the Atlanta router using interface Se0/0/0 as the primary path. Which two commands must be configured on the New York router so that it can reach the Lo1 interface of the Atlanta router via Washington when the link between New York and Atlanta goes down? (Choose two)

Options:

A.

ipv6 router 2000::1/128 2012::1

B.

ipv6 router 2000::1/128 2012::1 5

C.

ipv6 router 2000::1/128 2012::2

D.

ipv6 router 2000::1/128 2023::2 5

E.

ipv6 router 2000::1/128 2023::3 5

Expert Solution
Questions # 307:

Refer to the exhibit.

Question # 307

What is the effect of this configuration?

Options:

A.

All ARP packets are dropped by the switch

B.

Egress traffic is passed only if the destination is a DHCP server.

C.

All ingress and egress traffic is dropped because the interface is untrusted

D.

The switch discard all ingress ARP traffic with invalid MAC-to-IP address bindings.

Expert Solution
Questions # 308:

What makes Cisco DNA Center different from traditional network management applications and their management of networks?

Options:

A.

It omits supports auto-discovery of network elements in a greenfield deployment.

B.

It modular design allows someone to implement different versions to meet the specific needs of an organization

C.

It abstracts policy from the actual device configuration

D.

It does not support high availability of management functions when operating in cluster mode

Expert Solution
Questions # 309:

Refer to the exhibit.

Question # 309

The nip server 192.168.0.3 command has been configured on router 1 to make it an NTP client of router 2. Which command must be configured on router 2 so that it operates in server-only mode and relies only on its internal clock?

Options:

A.

Router2(config)#ntp passive

B.

Router2(config)#ntp server 172.17.0.1

C.

Router2(config)#ntp master 4

D.

Router2(config)#ntp server 192.168.0.2

Expert Solution
Questions # 310:

Which action must be taken to assign a global unicast IPv6 address on an interface that is derived from the MAC address of that interface?

Options:

A.

configure a stateful DHCPv6 server on the network

B.

enable SLAAC on an interface

C.

disable the EUI-64 bit process

D.

explicitly assign a link-local address

Expert Solution
Questions # 311:

Which technology can prevent client devices from arbitrarily connecting to the network without state remediation?

Options:

A.

802.1x

B.

IP Source Guard

C.

MAC Authentication Bypass

D.

802.11n

Expert Solution
Questions # 312:

Refer to the exhibit.

Question # 312

Which prefix does Router 1 use for traffic to Host A?

Options:

A.

10.10.10.0/28

B.

10.10.13.0/25

C.

10.10.13.144/28

D.

10.10.13.208/29

Expert Solution
Questions # 313:

Refer to the exhibit.

Question # 313

An engineer must configure the interface that connects to PC 1 and secure it in a way that only PC1 is allowed to use the port No VLAN tagging can be used except for a voice VLAN. Which command sequence must be entered to configure the switch?

A)

Question # 313

B)

Question # 313

C)

Question # 313

D)

Question # 313

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Expert Solution
Questions # 314:

How does network automation help reduce network downtime?

Options:

A.

Changes can be implemented in parallel across multiple devices at once, which increases the speed of the change rate.

B.

By using automation platforms with intent-based configuration, all changes are checked for possible outages before being implemented.

C.

Emails can be generated based on when a network admin performs a network change, which increases visibility.

D.

Configuration templates and testing can be built into implementation, which increases the success rate of a network change.

Expert Solution
Questions # 315:

Refer to the exhibit.

Question # 315

A new VLAN and switch are added to the network. A remote engineer configures OldSwitch and must ensure that the configuration meets these requirements:

• accommodates current configured VLANs

• expands the range to include VLAN 20

• allows for IEEE standard support for virtual LANs

Which configuration on the NewSwitch side of the link meets these requirements?

A)

Question # 315

B)

Question # 315

C)

Question # 315

D)

Question # 315

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Expert Solution
Questions # 316:

Which part of the HTTP request is used in REST API basic authentication to carry credentials?

Options:

A.

cookie

B.

content-type

C.

authorization

D.

accept

Expert Solution
Questions # 317:

Drag and drop the elements of a security program from the left onto the corresponding descriptions on the right.

Question # 317

Options:

Expert Solution
Questions # 318:

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

Question # 318

Options:

Expert Solution
Questions # 319:

Question # 319

Refer to the exhibit. An engineer must translate the PC1 IP address to 10.199.77.100 and permit PC1 to ping the loopback 0 on router R2. What command set must be used?

A)

Question # 319

B)

Question # 319

C)

Question # 319

D)

Question # 319

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Expert Solution
Questions # 320:

Refer to the exhibit.

Question # 320

A network engineer must configure router R1 with a host route to the server. Which command must the engineer configure?

Options:

A.

R1(conftg)#lp route 10.10.10.0 255.255.255.0 192.168.0.2

B.

R1(Config)#lp route 10.10.10.10 265.255.255.255 192 168.0.2

C.

R1(config)#ip route 192.168.0.2 255.255.255.255 10.10.10.10

D.

R1(config)3|p route 0.0.0.0 0.0 0.0 192 168.0.2

Expert Solution
Questions # 321:

Which interface or port on the WLC is the default for in-band device administration and communications between the controller and access points?

Options:

A.

virtual interface

B.

management interface

C.

console port

D.

service port

Expert Solution
Questions # 322:

Which enhancement is implemented in WPA3?

Options:

A.

applies 802.1x authentication

B.

usesTKIP

C.

employs PKI to identify access points

D.

protects against brute force attacks

Expert Solution
Questions # 323:

Which type of DNS record is used to specify the mail server responsible for accepting email messages on behalf of a recipient's domain?

Options:

A.

MX record

B.

TXT record

C.

A record

D.

SRV record

Expert Solution
Questions # 324:

What is the temporary state that switch ports always enter immediately after the boot process when Rapid PVST+ is used?

Options:

A.

discarding

B.

listening

C.

forwarding

D.

learning

Expert Solution
Questions # 325:

Refer to the exhibit.

Question # 325

A network administrator must permit traffic from the 10.10.0.0/24 subnet to the WAN on interlace Seria10. What is the effect of the configuration as the administrator applies the command?

Options:

A.

The permit command fails and returns an error code.

B.

The router accepts all incoming traffic to Seria10 with the last octet of the source IP set to 0.

C.

The sourced traffic from IP range 10.0.0.0 -10.0.0.255 is allowed on Seria10.

D.

The router fails to apply the access list to the interface.

Expert Solution
Questions # 326:

Question # 326

A)

Question # 326

B)

Question # 326

C)

Question # 326

D)

Question # 326

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Expert Solution
Questions # 327:

By default, how long will the switch continue to know a workstation MAC address after the workstation stops sending traffic?

Options:

A.

200 seconds

B.

300 seconds

C.

600 seconds

D.

900 seconds

Expert Solution
Questions # 328:

SIP-based Call Admission Control must be configured in the Cisco WLC GUI. SIP call-snooping ports are configured. Which two actions must be completed next? (Choose two.)

Options:

A.

Set the QoS level to silver or greater for voice traffic.

B.

Set the QoS level to platinum for voice traffic.

C.

Enable Media Session Snooping on re WLAN.

D.

Enable traffic shaping for the LAN interlace of the WLC.

E.

Configure two different QoS rotes tor data and voice traffic.

Expert Solution
Questions # 329:

Which device segregates a network into separate zones that have their own security policies?

Options:

A.

IPS

B.

firewall

C.

access point

D.

switch

Expert Solution
Questions # 330:

What is the functionality of the Cisco DNA Center?

Options:

A.

data center network pokey con

B.

console server that permits secure access to all network devices

C.

IP address cool distribution scheduler

D.

software-defined controller for automaton of devices and services

Expert Solution
Questions # 331:

Question # 331

Refer to the exhibit.

A network administrator configures an interface control re switch so that it connects to interface Gi1/0/1 on switch Cat9300-1. Which configuration must be applied to the new interface?

A)

Question # 331

B)

Question # 331

C)

Question # 331

D)

Question # 331

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Expert Solution
Questions # 332:

Refer to the exhibit.

Question # 332

The network engineer is configuring a new WLAN and is told to use a static password for authentication instead of the RADIUS servers. Which additional set of tasks must the engineer perform to complete the configuration?

Options:

A.

Crable PSKEnable iod 1s

B.

Select WPA2 PolicyDisable PMFEnable PSK

C.

Select WPA PolicyEnable PSK

D.

Select WPA PolicySelect WRAS Policy

Expert Solution
Questions # 333:

Drag and drop the statements about AAA from the left onto the corresponding AAA services on the right. Not all options are used.

Question # 333

Options:

Expert Solution
Questions # 334:

Refer to the exhibit.

Question # 334

What is the subnet mask of the route to the 10.10.13.160 prefix?

Options:

A.

255.255.255.240

B.

255.255.255.128

C.

255.255.255.248

D.

255.255.248.0

Expert Solution
Questions # 335:

Question # 335

Refer to the exhibit. A network administrator is configuring a router for user access via SSH. The service-password encryption command has been issued. The configuration must meet these requirements:

• Create the username as CCUser.

• Create the password as NA!2Scc.

• Encrypt the user password.

What must be configured to meet the requirements?

Options:

A.

username CCUser privies 10 password NA!2Scc

B.

username CCUser password NA!2Scc enable password level 5 NA!2$cc

C.

username CCUser secret NA!2Scc

D.

username CCUser privilege 15 password NA!2Scc enable secret 0 NA!2$cc

Expert Solution
Questions # 336:

How does MAC learning function on a switch?

Options:

A.

broadcasts frames to all ports without queueing

B.

adds unknown source MAC addresses to the address table

C.

sends a retransmission request when a new frame is received

D.

sends frames with unknown destinations to a multicast group

Expert Solution
Questions # 337:

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

Question # 337

Options:

Expert Solution
Questions # 338:

Refer to the exhibit.

Question # 338

How many JSON objects are presented?

Options:

A.

1

B.

2

C.

3

D.

4

Expert Solution
Questions # 339:

Refer to the exhibit.

Question # 339

The DHCP server is configured with a DHCP pool for each of the subnets represented. Which command must be configured on switch SW1 to allow DHCP clients on VLAN 10 to receive dynamic IP addresses from the DHCP server?

Options:

A.

SW1(config-if)#ip helper-address 192.168.20.2

B.

SW1(config-if)#ip helper-address 192.168.20.1

C.

SW1(config-if)#ip helper-address 192.168.10.2

D.

SW1(config-if)#ip helper-address 192.168.10.1

Expert Solution
Questions # 340:

Which type of address is shared by routers in a HSRP implementation and used by hosts on the subnet as their default gateway address?

Options:

A.

multicast address

B.

loopback IP address

C.

virtual IP address

D.

broadcast address

Expert Solution
Questions # 341:

Why is TCP desired over UDP for application that require extensive error checking, such as HTTPS?

Options:

A.

UDP operates without acknowledgments, and TCP sends an acknowledgment for every packet received.

B.

UDP reliably guarantees delivery of all packets, and TCP drops packets under heavy load.

C.

UDP uses flow control mechanisms for the delivery of packets, and TCP uses congestion control for efficient packet delivery.

D.

UDP uses sequencing data tor packets to arrive in order, and TCP offers trie capability to receive packets in random order.

Expert Solution
Questions # 342:

Question # 342

Refer to the exhibit. How does router R1 handle traffic to the 172.16.1.4/30 subnet?

Options:

A.

It sends all traffic over the path via 172.16.9.5 using 172.16.4.4 as a backup.

B.

It sends all traffic over the path via 172.16.4.4.

C.

It load-balances traffic over 172.16.9.5 and 172.16.4.4.

D.

It sends all traffic over the path via 10.0.1.100

Expert Solution
Questions # 343:

What is a reason to implement LAG on a Cisco WLC?

Options:

A.

Increase the available throughput on the link.

B.

Increase security by encrypting management frames

C.

Allow for stateful failover between WLCs

D.

Enable the connected switch ports to use different Layer 2 configurations

Expert Solution
Questions # 344:

A router has two static routes to the same destination network under the same OSPF process. How does the router forward packets to the destination if the next-hop devices are different?

Options:

A.

The router chooses the route with the oldest age.

B.

The router load-balances traffic over all routes to the destination.

C.

The router chooses the next hop with the lowest MAC address.

D.

The router chooses the next hop with the lowest IP address.

Expert Solution
Questions # 345:

Refer to the exhibit.

Question # 345

How many JSON objects are represented?

Options:

A.

1

B.

2

C.

3

D.

4

Expert Solution
Questions # 346:

Refer to the exhibit.

Question # 346

What is the subnet mask of the route to the 10.10.13.160 prefix?

Options:

A.

255.255.255.240

B.

255.255.255.128

C.

255.255.248.

D.

255.255.255.248

Expert Solution
Questions # 347:

Drag and drop the TCP or UDP details from the left onto their corresponding protocols on the right.

Question # 347

Options:

Expert Solution
Questions # 348:

Refer to the exhibit.

Question # 348An engineer assigns IP addressing to the current VLAN with three PCs. The configuration must also account for the expansion of 30 additional VLANS using the same Class C subnet for subnetting and host count. Which command set fulfills the request while reserving address space for the expected growth?

Options:

A.

Switch(config)#interface vlan 10

Switch(config-if)#ip address 192.168.0.1 265 255.255.252

B.

Switch(config)#interface vlan 10

Switch(config-if)#ip address 192.168.0.1 255 255.255.248

C.

Switch(config)#interface vlan 10

Switch(config-if)#ip address 192.168.0.1 255 255.255.0

D.

Switch(config)#interface vlan 10

Switch(config-if)#ip address 192.168.0.1 255.255.255.128

Expert Solution
Questions # 349:

A DHCP pool has been created with the name NOCC. The pool is using 192.168.20.0/24 and must use the next to last usable IP address as the default gateway for the DHCP clients. What is the next step in the process?

Options:

A.

default-router192.168.20.253

B.

network 192.168.20.254 255.255.255.0 secondary

C.

ip default-gateway 0.0.0.0 0.0.0.0 192.168.20.253

D.

next-server 192.168.20.254

Expert Solution
Questions # 350:

What is used as a solution for protecting an individual network endpoint from attack?

Options:

A.

Router

B.

Wireless controller

C.

Anti software

D.

Cisco DNA Center

Expert Solution
Viewing page 7 out of 8 pages
Viewing questions 301-350 out of questions