Cisco 200-301 Exam Questions Simulate Actual 200-301 Exam

Category:

Comments:

0 Comments

Post Date:

October 10, 2023

200-301 exam dumps questions are designed to simulate the actual exam. This means that you will get a feel for the types of questions you can expect to see on the exam, as well as the format and difficulty level. In addition, CCNA 200-301 dumps are often accompanied by detailed explanations and answers. This means that if you get a question wrong, you can learn from your mistake and understand why the correct answer is the right one. Test free online 200-301 exam dumps below.

Page 1 of 30

1. Refer to the exhibit.

Packets are flowing from 192.168 10.1 to the destination at IP address 192.168.20 75.

Which next hop will the router select for the packet?

10.10101

10.10.10.11

10.10.10.12

10.101014

2. Which two protocols are used by an administrator for authentication and configuration on access points?

Kerberos

802.1Q

802.1x

TACACS+

RADIUS

3. Which components are contained within a virtual machine?

physical resources, including the NIC, RAM, disk, and CPU

configuration files backed by physical resources from the Hypervisor

applications running on the Hypervisor

processes running on the Hypervisor and a guest OS

4. Refer to the exhibit.

A network engineer executes the show ip route command on router D.

What is the next hop to network 192.168 1 0/24 and why?

The next hop is 10.0.2.1 because it uses distance vector routing

The next hop is 10.0.2.1 because it is a link-state routing protocol

The next hop is 10.0.0.1 because it has a better administrative distance

The next hop is 10.0.0.1 because it has a higher metric.

5. When a WLAN with WPA2 PSK is configured in the Wireless LAN Controller GUI which format is supported?

Unicode

base64

decimal

ASCII

6. Refer to the exhibit.

The default-information originate command is configured under the R1 OSPF configuration After testing workstations on VLAN 20 at Site B cannot reach a DNS server on the Internet.

Which action corrects the configuration issue?

Add the default-information originate command onR2

Configure the ip route 0.0.0.0 0.0.0.0 10.10.10.18 command on R1

Configure the ip route 0.0.0.0 0.0.0.0 10.10.10.2 command on R2

Add the always keyword to the default-information originate command on R1

7. Refer to the exhibit.

An engineer is configuring a new router on the network and applied this configuration.

Which additional configuration allows the PC to obtain its IP address from a DHCP server?

Configure the ip dhcp relay information command under interface Gi0/1.

Configure the ip dhcp smart-relay command globally on the router

Configure the ip helper-address 172.16.2.2 command under interface Gi0/0

Configure the ip address dhcp command under interface Gi0/0

8. A Cisco engineer must configure a single switch interface to meet these requirements

• accept untagged frames and place them in VLAN 20

• accept tagged frames in VLAN 30 when CDP detects a Cisco IP phone.

Which command set must the engineer apply?

switchport mode dynamic desirable switchport access vlan 20 switchport trunk allowed vlan 30 switchport voice vlan 30

switchport mode dynamic auto switchport trunk native vlan 20 switchport trunk allowed vlan 30 switchport voice vlan 30

switchport mode access switchport access vlan 20 switchport voice vlan 30

switchport mode trunk switchport access vlan 20 switchport voice vlan 30

9. What is the primary purpose of a console port on a Cisco WLC?

In-band management via an asynchronous transport

out-of-band management via an IP transport

in-band management via an IP transport

out-of-band management via an asynchronous transport

10. Refer to the exhibit.

Which action must be taken to ensure that router A is elected as the DR for OSPF area 0?

Configure the OSPF priority on router A with the lowest value between the three routers.

Configure router B and router C as OSPF neighbors of router

Configure the router A interfaces with the highest OSPF priority value within the area.

Configure router A with a fixed OSPF router ID

Page 2 of 30

11. Which CRUD operation modifies an existing table or view?

read

create

replace

update

12. Which two protocols must be disabled to increase security for management connections to a Wireless LAN Controller? (Choose two)

Telnet

SSH

HTTP

HTTPS

TFTP

13. Which enhancement is implemented in WPA3?

applies 802.1x authentication

usesTKIP

employs PKI to identify access points

protects against brute force attacks

14. What mechanism carries multicast traffic between remote sites and supports encryption?

ISATAP

GRE over iPsec

iPsec over ISATAP

GRE

15. Which characteristic differentiates the concept of authentication from authorization and accounting?

user-activity logging

service limitations

consumption-based billing

identity verification

16. A client experiences slow throughput from a server that is directly connected to the core switch in a data center. A network engineer finds minimal latency on connections to the server, but data transfers are unreliable, and the output of the show Interfaces counters errors command shows a high FCS-Err count on the interface that is connected to the server.

What is the cause of the throughput issue?

high bandwidth usage

a physical cable fault

a speed mismatch

a cable that is too long

17. An engineer is configuring remote access to a router from IP subnet 10.139.58.0/28. The domain

name, crypto keys, and SSH have been configured.

Which configuration enables the traffic on the destination router?

Option A

Option B

Option C

Option D

18. What is a DHCP client?

a workstation that requests a domain name associated with its IP address

a host that is configured to request an IP address automatically

a server that dynamically assigns IP addresses to hosts.

a router that statically assigns IP addresses to hosts.

19. What event has occurred if a router sends a notice level message to a syslog server?

A TCP connection has been torn down

An ICMP connection has been built

An interface line has changed status

A certificate has expired.

20. Refer to me exhibit.

Which action is taken by the router when a packet is sourced from 10.10.10.2 and destined for 10.10.10.16?

It uses a route that is similar to the destination address

It discards the packets.

It floods packets to all learned next hops.

It Queues the packets waiting for the route to be learned.

Page 3 of 30

21. What is the role of SNMP in the network?

to monitor network devices and functions using a TCP underlay that operates on the presentation layer

to collect data directly from network devices using an SSL underlay that operates on the transport layer

to monitor and manage network devices using a UDP underlay that operates on the application layer

to collect telemetry and critical information from network devices using an SSH underlay that operates on the network layer

22. Refer to the exhibit.

The IPv6 address for the LAN segment on router R1 must be configured using the EUI-64 format.

When configured which ipv6 address is produced by the router?

2001:db8:1a44:41a4:C801:BEFF:FE4A:1

2001:db8:1a44:41a4:C081:BFFF:FE4A:1

2001:db8:1a44:41a4:4562:098F:FE36:1

2001:db8:1a44:41a4:C800:BAFE:FF00:1

23. Which physical component is distributed among multiple virtual machines running on the same hypervisor?

external storage

hardware resources

network interfaces

backplane network

24. Which two minimum parameters must be configured on an active interface to enable OSPFv2 to operate? (Choose two)

OSPF area

OSPF MD5 authentication key

iPv6 address

OSPf process ID

OSPf stub flag

25. Refer to the exhibit.

Which next-hop IP address has the least desirable metric when sourced from R1?

10.10.10.5

10.10.10.3

10.10.10.4

10.10.10.2

26. DRAG DROP

Drag and drop the TCP or UDP details from the left onto their corresponding protocols on the right.

27. Refer to the exhibit.

Which entry is the longest prefix match for host IP address 192.168.10.5?

28. What are two benefits of FHRPs? (Choose two.)

They enable automatic failover of the default gateway.

They allow multiple devices to serve as a single virtual gateway for clients in the network.

They are able to bundle multiple ports to increase bandwidth.

They prevent loops in the Layer 2 network.

They allow encrypted traffic.

29. Refer to Exhibit.

All routers in the network are configured R2 must be the DR. After the engineer connected the devices, R1 was elected as the DR.

Which command sequence must be configure on R2 to Be elected as the DR in the network?

Option A

Option B

Option C

Option D

30. Which goal is achieved by the implementation of private IPv4 addressing on a network?

provides an added level of protection against Internet exposure

provides a reduction in size of the forwarding table on network routers

allows communication across the Internet to other private networks

allows servers and workstations to communicate across public network boundaries

Page 4 of 30

31. DRAG DROP

Drag and drop the characteristics of transport layer protocols from the left onto the corresponding protocols on the right.

32. Refer to the exhibit.

How many objects, Keys and JSON list values are present?

three objects, two Keys, and three JSON list values

three objects, three keys and two JSON Ml values

one object, three keys, and three JSON list values

one object, three keys and two JSON list values

33. Which function is performed by DHCP snooping?

propagates VLAN information between switches

listens to multicast traffic for packet forwarding

provides DDoS mitigation

rate-limits certain traffic

34. Refer to the exhibit.

Which command configures OSPF on the point-to-point link between routers R1 and R2?

router-id 10.0.0.15

neighbor 10.1.2.0 cost 180

ipospf priority 100

network 10.0.0.0 0.0.0.255 area 0

35. What is a requirement when configuring or removing LAG on a WLC?

The Incoming and outgoing ports for traffic flow must be specified If LAG Is enabled.

The controller must be rebooted after enabling or reconfiguring LA

The management interface must be reassigned if LAG disabled.

Multiple untagged interfaces on the same port must be supported.

36. A packet is destined for 10.10.1.22.

Which static route does the router choose to forward the packet?

ip route 10.10.1.0 255.255.255.240 10.10.255.1

ip route 10.10.1.16 255.255.255.252 10.10.255.1

ip route 10.10.1.20 255.255.255.252 10.10.255.1

ip route 10.10.1.20 255.255.255.254 10.10.255.1

37. Which type of information resides on a DHCP server?

a list of the available IP addresses in a pool

a list of public IP addresses and their corresponding names

usernames and passwords for the end users in a domain

a list of statically assigned MAC addresses

38. Refer to the exhibit.

Which switch becomes the root bridge?

A)

Option A

Option B

Option C

Option D

39. Refer to the exhibit.

An engineer executed the script and added commands that were not necessary for SSH and now must remove the commands.

metric

cost

longest prefix

administrative distance

40. Which command enables a router to become a DHCP client?

ip address dhcp

ip helper-address

ip dhcp pool

ip dhcp client

Page 5 of 30

41. Refer to the Exhibit.

The router R1 is in the process of being configured. Routers R2 and R3 are configured correctly for the new environment.

Which two commands must be configured on R1 for PC1 to communicate to all PCs on the 10.10.10.0/24 network? (Choose two.)

ip route 10.10.10.0 255.255.255.0 192.168.2.3

ip route 10.10.10.10 255.255.255.255 192.168.2.2

ip route 10.10.10.10 255.255.255.255 g0/1

ip route 10.10.10.8 255.255.255.248 g0/1

ip route 10.10.10.0 255.255.255.248 192.168.2.2

42. PC1 tries to send traffic to newly installed PC2. The PC2 MAC address is not listed in the MAC address table of the switch, so the switch sends the packet to all ports in the same VLAN.

Which switching concept does this describe?

MAC address aging

MAC address table

frame flooding

spanning-tree protocol

43. What are two benefits of controller-based networking compared to traditional networking?

controller-based increases network bandwidth usage, while traditional lightens the load on the network.

controller-based inflates software costs, while traditional decreases individual licensing costs

Controller-based reduces network configuration complexity, while traditional increases the potential for errors

Controller-based provides centralization of key IT functions. While traditional requires distributes management function

controller-based allows for fewer network failure, while traditional increases failure rates.

44. A network administrator is setting up a new IPv6 network using the 64-bit address 2001 0EB8 00C1 2200:0001 0000 0000 0331/64 To simplify the configuration the administrator has decided to compress the address.

Which IP address must the administrator configure?

ipv6 address 21:EB8:C1:2200:1::331/64

ipv6 address 2001:EB8:C1:22:1::331/64

ipv6 address 2001 :EB8:C 1:2200.1 ::331-64

ipv6 address 2001:EB8:C1:2200:1:0000:331/64

45. DRAG DROP

A network engineer is configuring an OSPFv2 neighbor adjacency.

Drag and drop the parameters from the left onto their required categories on the right. Not all parameters are used

46. Which two functions are performed by the core layer in a three-tier architecture? (Choose two)

Provide uninterrupted forwarding service.

Police traffic that is sent to the edge of the network.

Provide direct connectivity for end user devices.

Ensure timely data transfer between layers.

Inspect packets for malicious activity.

47. R1 as an NTP server must have:

• NTP authentication enabled

• NTP packets sourced from Interface loopback 0

• NTP stratum 2

• NTP packets only permitted to client IP 209.165 200 225

How should R1 be configured?

ntp authenticate ntp authentication-key 2 md5 CISCO123 ntp source Loopback0 nntp access-group server-only 10 ntp master 2 ! access-list 10 permit 209.165.200.225

ntp authenticate ntp authentication-key 2 md5 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp stratum 2 ! access-list 10 permit udp host 209.165.200.225 any eq 123

ntp authenticate ntp authentication-key 2 sha1 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp master 2 ! access-list 10 permit udp host 209.165.200.225 any eq 123

ntp authenticate ntp authentication-key 2 md5 CISCO123 ntp interface Loopback0 ntp access-groud server-only 10

48. What must be considered before deploying virtual machines?

location of the virtual machines within the data center environment

whether to leverage VSM to map multiple virtual processors to two or more virtual machines

resource limitations, such as the number of CPU cores and the amount of memory

support for physical peripherals, such as monitors, keyboards, and mice

49. Refer to the exhibit.

What does route 10.0.1.3/32 represent in the routing table?

the 10.0.0.0 network

a single destination address

the source 10.0.1.100

all hosts in the 10.0.1.0 subnet

50. A wireless access point is needed and must meet these requirements:

• "zero-touch" deployed and managed by a WLC

• process only real-time MAC functionality

• used in a split-MAC architecture.

Which access point type must be used?

autonomous

lightweight

mesh

cloud-based

Page 6 of 30

51. Refer to the exhibit.

Which two commands were used to create port channel 10? (Choose two)

interface range g0/0-1 channel-group 10 mode active

interface range g0/0-1 channel-group 10 mode desirable

interface range g0/0-1 channel-group 10 mode passive

interface range g0/0-1 channel-group 10 mode auto

interface range g0/0-1 channel-group 10 mode on

52. When deploying syslog, which severity level logs informational message?

53. In software-defined architecture, which place handles switching for traffic through a Cisco router?

Control

Management

Data

application

54. What is an advantage of using auto mode versus static mode for power allocation when an access point is connected to a PoE switch port?

All four pairs of the cable are used

It detects the device is a powered device

The default level is used for the access point

Power policing is enabled at the same time

55. Refer to the Exhibit.

After applying this configuration to router R1, a network engineer is verifying the implementation. If all links are operating normally, and the engineer sends a series of packets from PC1 to PC3.

How are the packets routed?

They are routed to 172.16.20.2.

They are routed to 192.168.100.2.

They are distributed sent round robin to interfaces SO/0/0 and S0/0/1.

They are routed to 10.0.0.2.

56. An engineer has configured the domain name, user name, and password on the local router.

What is the next step to complete the configuration tor a Secure Shell access RSA key?

crypto key Import rsa pem

crypto key pubkey-chain rsa

crypto key generate rsa

crypto key zeroize rsa

57. Which design element is a best practice when deploying an 802.11b wireless infrastructure?

disabling TPC so that access points can negotiate signal levels with their attached wireless devices.

setting the maximum data rate to 54 Mbps on the Cisco Wireless LAN Controller

allocating nonoverlapping channels to access points that are in close physical proximity to one another

configuring access points to provide clients with a maximum of 5 Mbps

58. In a cloud-computing environment what is rapid elasticity?

control and monitoring of resource consumption by the tenant

automatic adjustment of capacity based on need

pooling resources in a multitenant model based on need

self-service of computing resources by the tenant

59. Which IP header field is changed by a Cisco device when QoS marking is enabled?

Header Checksum

Type of service

DSCP

ECN

60. Refer to the exhibit.

If OSPF Is running on this network, how does Router2 handle traffic from Site B to 10.10.13.128/25 at Site A?

It load-balances traffic out of Fa0/1 and Fa0/2.

It is unreachable and discards the traffic.

It sends packets out of interface Fa0/2.

It sends packets out of interface Fa0/1.

Page 7 of 30

61. What is a difference between an IPv6 multicast address and an IPv6 anycast address?

A packet sent to an IPv6 multicast address is delivered to one or more destinations at once, but a packet sent to an IPv6 anycast address is routed to the closest interface with that address.

An IPv6 multicast address uses the prefix 2002::/15 and forwards to one destination, and an IPv6 anycast address uses the prefix ff00::/8 and forwards to any destination in a group.

IPv6 multicast addresses are used to transition from IPv4 to IPv6, and IPv6 anycast addresses are used for address aggregation in an IPv6-only environment.

An IPv6 multicast address is assigned to numerous interfaces within a subnet, but an IPv6 anycast address is used for a predefined group of nodes in an all-IPv6 routers group.

62. DRAG DROP

Drag and drop the characteristics of network architectures from the left onto the type of architecture on the right.

63. Refer to the exhibit.

The entire contents of the MAC address table are shown. Sales-4 sends a data frame to Sales-1.

What does the switch do as it receives the frame from Sales-4?

Perform a lookup in the MAC address table and discard the frame due to a missing entry.

Insert the source MAC address and port into the forwarding table and forward the frame to Sales-1.

Map the Layer 2 MAC address to the Layer 3 IP address and forward the frame.

Flood the frame out of all ports except on the port where Sales-1 is connected.

64. Refer to the exhibit.

What is represented by the word "switch’’ in line 2 of the JSON schema?

array

key

value

object

65. What is an appropriate use for private IPv4 addressing?

on the public-facing interface of a firewall

to allow hosts inside to communicate in both directions with hosts outside the organization

on internal hosts that stream data solely to external resources

on hosts that communicates only with other internal hosts

66. A network engineer is installing an IPv6-only capable device. The client has requested that the device IP address be reachable only from the internal network.

Which type of IPv6 address must the

engineer assign?

unique local address

link-local address

aggregatable global address

IPv4-compatible IPv6 address

67. DRAG DROP

Refer to the exhibit.

Drag and drop the destination IPs from the left onto the paths to reach those destinations on the right.

68. Refer to the exhibit.

Which switch in this configuration will be elected as the root bridge?

SW1: 0C:E0:38:00:36:75

SW2: 0C:0E:15:22:05:97

SW3: 0C:0E:15:1A:3C:9D

SW4: 0C:E0:18:A1:B3:19

SW1

SW2

SW3

SW4

69. Refer to the exhibit.

Between which zones do wireless users expect to experience intermittent connectivity?

between zones 1 and 2

between zones 2 and 5

between zones 3 and 4

between zones 3 and 6

70. Which WAN access technology is preferred for a small office / home office architecture?

broadband cable access

frame-relay packet switching

dedicated point-to-point leased line

Integrated Services Digital Network switching.

Page 8 of 30

71. Which two spanning-tree states are bypassed on an interface running PortFast? (Choose two.)

disabled

listening

forwarding

learning

blocking

72. What is a function of Cisco Advanced Malware Protection for a Next-Generation IPS?

authorizing potentially compromised wireless traffic

inspecting specific files and file types for malware

authenticating end users

URL filtering

73. What does a switch search for in the CAM table when forwarding a frame?

source MAC address and aging time

destination MAC address and flush time

source MAC address and source port

destination MAC address and destination port

74. Which level of severity must be set to get informational syslogs?

alert

critical

notice

debug

75. What is a characteristic of cloud-based network topology?

wireless connections provide the sole access method to services

onsite network services are provided with physical Layer 2 and Layer 3 components

services are provided by a public, private, or hybrid deployment

physical workstations are configured to share resources

76. The address block 192 168 32 0/24 must be subnetted into smaller networks.

The engineer must meet these requirements

• Create 8 new subnets

• Each subnet must accommodate 30 hosts

• Interface VLAN 10 must use the last usable IP in the first new subnet

• A Layer 3 interface is used

Which configuration must be applied to the interface?

A)

Option A

Option B

Option C

Option D

77. What is the primary function of a Layer 3 device?

to analyze traffic and drop unauthorized traffic from the Internet

to transmit wireless traffic between hosts

to pass traffic between different networks

forward traffic within the same broadcast domain

78. Which spanning-tree enhancement avoids the learning and listening states and immediately places ports in the forwarding state?

BPDUfilter

PortFast

Backbonefast

BPDUguard

79. A network administrator is asked to configure VLANS 2, 3 and 4 for a new implementation. Some ports must be assigned to the new VLANS with unused remaining.

Which action should be taken for the unused ports?

configure port in the native VLAN

configure ports in a black hole VLAN

configure in a nondefault native VLAN

configure ports as access ports

80. DRAG DROP

Drag and drop the statements about AAA from the left onto the corresponding AAA services on the right. Not all options are used.

Page 9 of 30

81. Which is a fact related to FTP?

It uses block numbers to identify and mitigate data-transfer errors

It always operates without user authentication

It relies on the well-known UDP port 69.

It uses two separate connections for control and data traffic

82. Refer to the exhibit.

If R1 receives a packet destined to 172.161.1, to which IP address does it send the packet?

192.168.12.2

192.168.13.3

192.168.14.4

192.168.15.5

83. What is a DNS lookup operation?

DNS server pings the destination to verify that it is available

serves requests over destination port 53

DNS server forwards the client to an alternate IP address when the primary IP is down

responds to a request for IP address to domain name resolution to the DNS server

84. Which two outcomes are predictable behaviors for HSRP? (Choose two.)

The two routers synchronize configurations to provide consistent packet forwarding

The two routers negotiate one router as the active router and the other as the standby router

Each router has a different IP address, both routers act as the default gateway on the LAN, and traffic is load-balanced between them

The two routers share a virtual IP address that is used as the default gateway for devices on the LAN

The two routers share the same interface IP address and default gateway traffic is load-balanced between them

85. Which WPA3 enhancement protects against hackers viewing traffic on the Wi-Fi network?

TKiP encryption

AES encryption

scrambled encryption key

SAE encryption

86. Refer to exhibit.

Which statement explains the configuration error message that is received?

It is a broadcast IP address

The router does not support /28 mask.

It belongs to a private IP address range.

IT is a network IP address.

87. An engineer configured an OSPF neighbor as a designated router.

Which state verifies the designated router is in the proper mode?

Exchange

2-way

Full

Init

88. 1.Which command entered on a switch configured with Rapid PVST* listens and learns for a specific time period?

switch(config)#spanning-tree vlan 1 max-age 6

switch(config)#spanning-tree vlan 1 hello-time 10

switch(config)#spanning-tree vlan 1 priority 4096

switch(config)#spanning-tree vlan 1 forward-time 20

89. What provides centralized control of authentication and roaming In an enterprise network?

a lightweight access point

a firewall

a wireless LAN controller

a LAN switch

90. Refer to the exhibit.

The primary route across Gi0/0 is configured on both routers. A secondary route must be configured

to establish connectivity between the workstation networks.

Which command set must be configured to complete this task?

A)

Option A

Option B

Option C

Option D

Page 10 of 30

91. Refer to the exhibit.

An engineer is updating the management access configuration of switch SW1 to allow secured, encrypted remote configuration.

Which two commands or command sequences must the engineer apply to the switch? (Choose two.)

SW1(config)#enable secret ccnaTest123

SW1(config)#username NEW secret R3mote123

SW1(config)#line vty 0 15 SW1(config-line)#transport input ssh

SW1(config)# crypto key generate rsa

SW1(config)# interface f0/1 SW1(config-if)# switchport mode trunk

92. Refer to the exhibit.

After configuring a new static route on the CPE. the engineer entered this series of commands to verify that the new configuration is operating normally.

When is the static default route installed into the routing table?

when 203 0 113.1 is no longer reachable as a next hop

when the default route learned over external BGP becomes invalid

when a route to 203.0 113 1 is learned via BGP

when the default route over external BGP changes its next hop

93. DRAG DROP

Drag and drop the statement about AAA services from the left to the corresponding AAA services on the right.

94. Which technology must be implemented to configure network device monitoring with the highest security?

IP SLA

syslog

NetFlow

SNMPv3

95. When a WPA2-PSK WLAN is configured in the Wireless LAN Controller, what is the minimum number of characters that is required in ASCII format?

96. Refer to the exhibit.

Which route type does the routing protocol Code D represent in the output?

internal BGP route

/24 route of a locally configured IP

statically assigned route

route learned through EIGRP

97. Refer to the Exhibit.

Refer to the exhibit. An engineer is building a new Layer 2 LACP EtherChannel between SW1 and SW2. and they executed the given show commands to verify the work.

Which additional task must be performed so that the switches successfully bundle the second member in the LACP port-channel?

Configure the switchport trunk allowed vlan 300 command on SW1 port-channel 1

Configure the switchport trunk allowed vlan 300 command on interface Fa0/2 on SW1.

Configure the switchport trunk allowtd vlan add 300 command on interface Fa0 2 on SW2.

Configure the switchport trunk allowtd vlan add 300 command on SW1 port-channel 1

98. Which technology can prevent client devices from arbitrarily connecting to the network without state remediation?

802.1x

IP Source Guard

MAC Authentication Bypass

802.11n

99. Refer to the exhibit.

R1 has just received a packet from host A that is destined to host B.

Which route in the routing table is used by R1 to reac B?

10.10.13.0/25 [108/0] via 10.10.10.10

10.10.13.0/25 [110/2] via 10.10.10.2

10.10.13.0/25 [110/2] via 10.10.10.6

10.10.13.0/25 [1/0] via 10.10.10.2

100. Refer to the exhibit.

Which configuration for RTR-1 deniess SSH access from PC-1 to any RTR-1 interface and allows all other traffic?

A)

Option A

Option B

Option C

Option D

Page 11 of 30

101. Refer to the exhibit.

An engineer must configure a floating static route on an external EIGRP network. The destination subnet is the /29 on the LAN Interface of R86.

Which command must be executed on R14?

ip route 10.80.65.0.255.255.248.0.10.73.65.66.1

ip route 10.80.65.0.255.255.255..240 fa0/1 89

ip route 10.80.65.0.255.255.248.0.10.73.65.66.171

ip route 10.80.65.0.0.0.224.10.80.65.0. 255

102. Which field within the access-request packet is encrypted by RADIUS?

authorized services

authenticator

username

password

103. Which communication interaction takes place when a southbound API Is used?

between the SDN controller and PCs on the network

between the SON controller and switches and routers on the network

between the SON controller and services and applications on the network

between network applications and switches and routers on the network

104. Refer to the exhibit.

Option A

Option B

Option C

Option D

105. Refer to the exhibit.

SW1#show run int gig 0/1

interface GigabitEthernet0/1

switchport access vlan 11

switchport trunk allowed vlan 1-10

switchport trunk encapsulation dot1q

switchport trunk native vlan 5

switchport mode trunk

speed 1000

duplex full

Which action is expected from SW1 when the untagged frame is received on the GigabitEthernet0/1 interface?

The frame is processed in VLAN 5.

The frame is processed in VLAN 11

The frame is processed in VLAN 1

The frame is dropped

106. Which protocol is used for secure remote CLI access?

HTTPS

HTTP

Telnet

SSH

107. Refer to the exhibit.

Site A was recently connected to site B over a new single-mode fiber path. Users at site A report Intermittent connectivity Issues with applications hosted at site B.

What is the reason for the problem?

Heavy usage is causing high latency.

An incorrect type of transceiver has been inserted into a device on the link.

physical network errors are being transmitted between the two sites.

The wrong cable type was used to make the connection.

108. A port security violation has occurred on a switch port due to the maximum MAC address count being exceeded.

Which command must be configured to increment the security-violation count and forward an SNMP trap?

switchport port-security violation access

switchport port-security violation protect

switchport port-security violation restrict

switchport port-security violation shutdown

109. Which network allows devices to communicate without the need to access the Internet?

1729.0.0/16

172.28.0.0/16

192.0.0.0/8

209.165.201.0/24

110. Which two WAN architecture options help a business improve scalability and reliability for the network? (Choose two.)

asynchronous routing

single-homed branches

dual-homed branches

static routing

dynamic routing

Page 12 of 30

111. DRAG DROP

Drag and drop the SNMP components from the left onto the descriptions on the right.

112. Refer to the exhibit.

An engineer configures interface fa0/1 on SW1 and SW2 to pass traffic from two different VLANs. For security reasons, company policy requires the native VLAN to be set to a nondefault value.

Which configuration meets this requirement?

A)

Option A

Option B

Option C

Option D

113. Which capability does TFTP provide?

loads configuration files on systems without data storage devices

provides authentication for data communications over a private data network

provides encryption mechanisms for file transfer across a WAN

provides secure file access within the LAN

114. Refer to the exhibit.

The nip server 192.168.0.3 command has been configured on router 1 to make it an NTP client of router 2.

Which command must be configured on router 2 so that it operates in server-only mode and relies only on its internal clock?

Router2(config)#ntp passive

Router2(config)#ntp server 172.17.0.1

Router2(config)#ntp master 4

Router2(config)#ntp server 192.168.0.2

115. Refer to the exhibit.

The EtherChannel is configured with a speed of 1000 and duplex as full on both ends of channel group 1.

What is the next step to configure the channel on switch A to respond to but not initiate LACP communication?

interface range gigabitethernet0/0/0-15 channel-group 1 mode on

interface range gigabitethernet0/0/0-15 channel-group 1 mode desirable

interface port-channel 1 channel-group 1 mode auto

interface port-channel 1 channel-group 1 mode passive

116. Refer to the exhibit.

Shortly after SiteA was connected to SiteB over a new single-mode fiber path users at SiteA report intermittent connectivity issues with applications hosted at SiteB.

What is the cause of the intermittent connectivity issue?

Interface errors are incrementing

An incorrect SFP media type was used at SiteA

High usage is causing high latency

The sites were connected with the wrong cable type

117. Two switches are connected and using Cisco Dynamic Trunking Protocol SW1 is set to Dynamic Desirable

What is the result of this configuration?

The link is in a down state.

The link is in an error disables state

The link is becomes an access port.

The link becomes a trunk port.

118. Refer to Exhibit.

Routers R1 and R2 have been configured with their respective LAN interfaces The two circuits are operational and reachable across WAN.

Which command set establishes failover redundancy if the primary circuit goes down?

Option A

Option B

Option C

Option D

119. Which set of 2.4 GHz nonoverlapping wireless channels is standard in the United States?

channels 2, 7, 9, and 11

channels 1, 6, 11, and 14

channels 2, 7, and 11

channels 1, 6, and 11

120. What are two capabilities provided by VRRP within a LAN network? (Choose two.)

dynamic routing updates

bandwidth optimization

granular QoS

load sharing

redundancy

Page 13 of 30

121. What is a characteristic of private IPv4 addressing?

traverse the Internet when an outbound ACL is applied

issued by IANA in conjunction with an autonomous system number

composed of up to 65.536 available addresses

used without tracking or registration

122. Refer to the exhibit.

Router R1 resides in OSPF Area 0. After updating the R1 configuration to influence the paths that it will use to direct traffic, an engineer verified that each of the four Gigabit interfaces has the same route to 10.10.0.0/16.

Which interface will R1 choose to send traffic to reach the route?

GigabitEthernet0/0

GigabltEthornet0/1

GigabitEthernet0/2

GigabitEthernet0/3

123. An engineer is configuring a switch port that is connected to a VoIP handset.

Which command must the engineer configure to enable port security with a manually assigned MAC address of abod-bod on voice VLAN 4?

switchport port-security mac-address abcd.abcd.abcd

switchport port-security mac-address abed.abed.abed vlan 4

switchport port-security mac-address sticky abcd.abcd.abcd vlan 4

switchport port-security mac-address abcd.abcd.abcd vlan voice

124. When the active router in an HSRP group fails, what router assumes the role and forwards packets?

backup

standby

listening

forwarding

125. An email user has been lured into clicking a link in an email sent by their company's security organization. The webpage that opens reports that it was safe but the link could have contained malicious code.

Which type of security program is in place?

Physical access control

Social engineering attack

brute force attack

user awareness

126. A wireless administrator has configured a WLAN; however, the clients need access to a less congested 5-GHz network for their voice quality.

What action must be taken to meet the requirement?

enable AAA override

enable RX-SOP

enable DTIM

enable Band Select

127. Which type of port is used to connect lo the wired network when an autonomous AP maps two VLANs to its WLANs?

LAG

EtherChannel

trunk

access

128. DRAG DROP

Drag and drop the SNMP components from the left onto the description on the right.

129. A user configured OSPF in a single area between two routers A serial interface connecting R1 and R2 is running encapsulation PPP By default which OSPF network type is seen on this interface when the user types show ip ospf interface on R1 or R2?

port-to-multipoint

broadcast

point-to-point

nonbroadcast

130. Refer to the exhibit.

Which two commands, when configured on router R1, fulfill these requirements? (Choose two.) Packets towards the entire network 2001:db8:2::/64 must be forwarded through router R2.

Packets toward host 2001:db8:23::14 preferably must be forwarded through R3.

Ipv6 route 2001:db8:23::/128 fd00:12::2

Ipv6 route 2001:db8:23::14/128 fd00:13::3

Ipv6 route 2001:db8:23::14/64 fd00:12::2

Ipv6 route 2001:db8:23::/64 fd00:12::2

Ipv6 route 2001:db8:23::14/64 fd00:12::2 200

Page 14 of 30

131. Refer to the exhibit.

Which configuration issue is preventing the OSPF neighbor relationship from being established between the two routers?

R2 is using the passive-interface default command

R1 has an incorrect network command for interface Gi1/0

R2 should have its network command in area 1

R1 interface Gil/0 has a larger MTU size

132. Which command automatically generates an IPv6 address from a specified IPv6 prefix and MAC address of an interface?

ipv6 address dhcp

ipv6 address 2001:DB8:5:112::/64 eui-64

ipv6 address autoconfig

ipv6 address 2001:DB8:5:112::2/64 link-local

133. Refer to the exhibit.

An engineer is updating the R1 configuration to connect a new server to the management network. The PCs on the management network must be blocked from pinging the default gateway of the new server.

Which command must be configured on R1 to complete the task?

R1(config)#lp route 172.16.2.2 255.255.255.248 gi0/1

R1(config)#jp route 172.16.2.2 255.255.255.255 gi0/0

R1(config>#ip route 172.16.2.0 255.255.255.0 192.168.1.15

R1(config)#ip route 172.16.2.0 255.255.255.0 192.168.1.5

134. Which two VPN technologies are recommended by Cisco for multiple branch offices and large-scale deployments? (Choose two.)

site-to-site VPN

IDMVPN

IGETVPN

IPsec remote access

clientless VPN

135. Which type of address is shared by routers in a HSRP implementation and used by hosts on the subnet as their default gateway address?

multicast address

loopback IP address

virtual IP address

broadcast address

136. What is the definition of backdoor malware?

malicious code that is installed onto a computer to allow access by an unauthorized user

malicious code with the main purpose of downloading other malicious code

malicious program that is used to launch other malicious programs

malicious code that infects a user machine and then uses that machine to send spam

137. Why would a network administrator choose to implement automation in a network environment?

To simplify the process of maintaining a consistent configuration state across all devices

To centralize device information storage

To implement centralized user account management

To deploy the management plane separately from the rest of the network

138. DRAG DROP

Drag and drop the DHCP snooping terms from the left onto the descriptions on the right.

139. Which WLC management connection type is vulnerable to man-in-the-middle attacks?

SSH

HTTPS

Telnet

console

140. How does QoS optimize voice traffic?

reducing bandwidth usage

by reducing packet loss

by differentiating voice and video traffic

by increasing jitter

Page 15 of 30

141. Refer to Itie exhibit

A network engineer started to configure port security on a new switch.

These requirements must be met:

* MAC addresses must be learned dynamically

* Log messages must be generated without disabling the interface when unwanted traffic is seen.

Which two commands must be configured to complete this task (Choose two)

SW(config-if)=switchport port-security mac-address sticky

SW(config-if)=switchport port-security violation restrict

SW(config-if)=switchport port-security mac-address 0010.7B84.45E6

SW(config-if)=switchport port-security maximum 2

SW(config-if)=switchport port-security violation shutdown

142. What are two differences between WPA2 and WPA3 wireless security? (Choose two.)

WPA3 um AES for stronger protection than WPA2 which uses SAE

WPA2 uses 1 M-bit key encryption and WPA3 requires 256-brt key encryption

WPA3 uses AES for stronger protection than WPA2 which uses TKIP WPA3 uses

SAE tor stronger protection than WPA2 which uses AES

WPA2 uses 12B-M key encryption and WPA3 supports 128 bit and 192 bit key encryption

143. What is the function of "off-the-shell" switches in a controller-based network?

providing a central view of the deployed network

forwarding packets

making routing decisions

setting packet-handling policies

144. Refer to the exhibit.

All routers in the network are configured correctly, and the expected routes are being exchanged among the routeis.

Which set or routes are learned from neighbors and Installed on router 2?

A)

Option A

Option B

Option C

Option D

145. An engineer is configuring switch SW1 to act an NTP server when all upstream NTP server connectivity fails.

Which configuration must be used?

A)

Option A

Option B

Option C

Option D

146. DRAG DROP

Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they mitigate on the right.

147. Refer to the exhibit.

Packets received by the router from BGP enter via a serial interface at 209.165.201.10. Each route is present within the routing table.

Which interface is used to forward traffic with a destination IP of 10.10.10.24?

F0/10

F0/11

F0/12

F0/13

148. Which MAC address is recognized as a VRRP virtual address?

0000.5E00.010a

0005.3711.0975

0000.0C07.AC99

0007.C070/AB01

149. Refer to the exhibit.

The image server and client A are running an application that transfers an extremely high volume of data between the two. An engineer is configuring a dedicated circuit between R1 and R2.

Which set of commands must the engineer apply to the routers so that only traffic between the image server and client A is forces to use the new circuit?

R1(config)#ip route 10.10.13.10 255.255.255.255 10.10.10.6 R2(config)#ip route 192.168.0.100 255.255.255.255 10.10.10.5

R1(config)#ip route 10.10.13.10 255.255.255.128 10.10.10.6 R2(config)#lp route 192.168.0.100 255.255.255.0 10.10.10.5

R1(config)#ip route 10.10.13.10 255.255.255.252 10.10.10.6 R2(config)#tp route 192.168.0.100 255.255.255.252 10.10.10.5

R1(config)#ip route 10.10.13.10 255.255.255.255 10.10.10.2 R2(config)#ip route 192.168.0.100 255.255.255.255 10.10.10.1

150. Which group of channels in the 802.1ib/g/n/ac/ax 2.4 GHz frequency Bands are nonoverlapping channels?

channels 1, 5, and 10

channels 1,6, and 11

channels 1,5, and 11

channels 1,6, and 10

Page 16 of 30

151. DRAG DROP

Refer to the exhibit.

An engineer is required to verify that the network parameters are valid for the users wireless LAN connectivity on a /24 subnet..

Drag and drop the values from the left onto the network parameters on the right. Not all values are used.

152. What is the advantage of separating the control plane from the data plane within an SDN network?

decreases overall network complexity

limits data queries to the control plane

reduces cost

offloads the creation of virtual machines to the data plane

153. What are two characteristics of the distribution layer in a three-tier network architecture? (Choose two.)

serves as the network aggregation point

provides a boundary between Layer 2 and Layer 3 communications

designed to meet continuous, redundant uptime requirements

is the backbone for the network topology

physical connection point for a LAN printer

154. What is the default behavior of a Layer 2 switch when a frame with an unknown destination MAC address is received?

The Layer 2 switch drops the received frame

The Layer 2 switch floods packets to all ports except the receiving port in the given VLA

The Layer 2 switch sends a copy of a packet to CPU for destination MAC address learning.

The Layer 2 switch forwards the packet and adds the destination MAC address to its MAC address table

155. Which protocol must be implemented to support separate authorization and authentication solutions for wireless APs?

RADIUS

TACACS+

802.1X

Kerberos

156. While examining excessive traffic on the network, it is noted that all incoming packets on an interface appear to be allowed even though an IPv4 ACL is applied to the interface.

Which two misconfigurations cause this behavior? (Choose two)

The packets fail to match any permit statement

A matching permit statement is too high in the access test

A matching permit statement is too broadly defined

The ACL is empty

A matching deny statement is too high in the access list

157. An administrator must use the password complexity not manufacturer-name command to prevent users from adding “cisco” as a password.

Which command must be issued before this command?

Password complexity enable

confreg 0x2142

service password-encryption

158. DRAG DROP

Drag the descriptions of device management from the left onto the types of device management on the right.

159. Which WLC interface provides out-of-band management in the Cisco Unified Wireless Network Architecture?

service port

virtual

AP-Manager

dynamic

160. How does frame switching function on a switch?

forwards frames to a neighbor port using CDP

modifies frames that contain a known source VLAN

inspects and drops frames from unknown destinations

forwards known destinations to the destination port

Page 17 of 30

161. The SW1 interface g0/1 is in the down/down state.

Which two configurations are valid reasons for the interface conditions? (choose two)

There is a duplex mismatch

There is a speed mismatch

There is a protocol mismatch

The interface is shut down

The interface is error-disabled

162. Refer to the exhibit.

Which configuration on RTR-1 denies SSH access from PC-1 to any RTR-1 interface and allows all other traffic?

access-list 100 deny tcp host 172.16.1.33 any eq 22 access-list 100 permit ip any any interface GigabitEthernet0/0 ip access-group 100 in

access-list 100 deny tcp host 172.16.1.33 any eq 22 access-list 100 permit ip any any line vty 0 15 access-class 100 in

access-list 100 deny tcp host 172.16.1.33 any eq 23 access-list 100 permit ip any any interface Gigabit Ethernet0/0 ip access-group 100 in

access-list 100 deny tcp host 172.16.1.33 any eq 23 access-list 100 permit ip any any line vty 0 15 access-class 100 in

163. What is a function of an endpoint on a network?

forwards traffic between VLANs on a network

connects server and client devices to a network

allows users to record data and transmit to a tile server

provides wireless services to users in a building

164. Refer to the exhibit.

An architect is managing a wireless network with APs from several branch offices connecting to the WLC in the data center. There is a new requirement for a single WLAN to process the client data traffic without sending it to the WLC.

Which action must be taken to complete the request?

Enable local HTTP profiling.

Enable Disassociation Imminent.

Enable FlexConnect Local Switching.

Enable local DHCP Profiling.

165. Refer to the exhibit.

How does router R1 handle traffic to the 172.16.1.4/30 subnet?

It sends all traffic over the path via 172.16.9.5 using 172.16.4.4 as a backup.

It sends all traffic over the path via 10.0.1.100.

It load-balances traffic over 172.16.9.5 and 172.16.4.4.

It sends all traffic over the path via 172.16.4.4.

166. Refer to the exhibit.

Which route does R1 select for traffic that is destined to 192 168.16.2?

192.168.16.0/21

192.168.16.0/24

192.168 26.0/26

192.168.16.0/27

167. Which 802.11 frame type is Association Response?

management

control

action

protected frame

168. Refer to the exhibit.

Host A sent a data frame destined for host D

What does the switch do when it receives the frame from host A?

It drops the frame from the switch CAM table.

It floods the frame out of all ports except port Fa0/1.

It shuts down the port Fa0/1 and places it in err-disable mode.

It experiences a broadcast storm.

169. DRAG DROP

Drag and drop the functions of DHCP from the left onto any of the positions on the right Not all functions are used

170. What describes a northbound REST API for SON?

application-facing interface for SNMP GET requests

network-element-facing interface for GET POST PUT and DELETE methods

network-element-facing interface for the control and data planes

application-facing interface far GET, POST, PUT, and DELETE methods

Page 18 of 30

171. Which type of IPv4 address must be assigned to a server to protect it from external access and allow only internal users access while restricting internet access?

global unicast

public

private

multicast

172. What is a characteristics of a collapsed-core network topology?

It allows the core and distribution layers to run as a single combined layer.

It enables the core and access layers to connect to one logical distribution device over an EtherChannel.

It enables all workstations in a SOHO environment to connect on a single switch with internet access.

It allows wireless devices to connect directly to the core layer, which enables faster data transmission.

173. Which type of traffic is sent with pure IPsec?

broadcast packets from a switch that is attempting to locate a MAC address at one of several remote sites

multicast traffic from a server at one site to hosts at another location

spanning-tree updates between switches that are at two different sites

unicast messages from a host at a remote site to a server at headquarters

174. What uses HTTP messages to transfer data to applications residing on different hosts?

OpenFlow

OpenStack

OpFlex

REST

175. Which two WAN architecture options help a business scalability and reliability for the network? (Choose two)

asychronous routing

single-homed branches

dual-homed branches

static routing

dynamic routing

176. Which signal frequency appears 60 times per minute?

1 Hz signal

1 GHz signal

60 Hz signal

60 GHz signal

177. DRAG DROP

Drag and drop the subnet masks from the left onto the corresponding subnets on the right. Not all subnet masks used.

178. Which type of API allows SDN controllers to dynamically make changes to the network?

northbound API

REST API

SOAP API

southbound API

179. Refer to the exhibit.

An extended ACL has been configured and applied to router R2 The configuration failed to work as intended.

Which two changes stop outbound traffic on TCP ports 25 and 80 to 10.0.20 0 26 from the 10.0.10 0/26 subnet while still allowing all other traffic? (Choose two)

Add a "permit ip any any" statement to the begining of ACL 101 for allowed traffic.

Add a "permit ip any any" statement at the end of ACL 101 for allowed traffic

The source and destination IPs must be swapped in ACL 101

The ACL must be configured the Gi0/2 interface inbound on R1

The ACL must be moved to the Gi0/1 interface outbound on R2

180. How is the native VLAN secured in a network?

separate from other VLANs within the administrative domain

give it a value in the private VLAN range

assign it as VLAN 1

configure it as a different VLAN ID on each end of the link

Page 19 of 30

181. Refer to the exhibit.

A network engineer is configuring a WLAN to connect with the 172.16.10.0/24 network on VLAN 20. The engineer wants to limit the number of devices that connect to the WLAN on the USERWL SSID to 125.

Which configuration must the engineer perform on the WLC?

In the Management Software activation configuration, set the Clients value to 125.

In the Controller IPv6 configuration, set the Throttle value to 125.

In the WLAN configuration, set the Maximum Allowed Clients value to 125.

In the Advanced configuration, set the DTIM value to 125.

182. Where is the interface between the control plane and data plane within the software-defined

architecture?

control layer and the infrastructure layer

application layer and the infrastructure layer

control layer and the application layer

application layer and the management layer

183. In QoS, which prioritization method is appropriate for interactive voice and video?

expedited forwarding

traffic policing

round-robin scheduling

low-latency queuing

184. Refer to the exhibit.

An engineer is configuring an EtherChannel using LACP between Switches 1 and 2.

Which configuration must be applied so that only Switch 1 sends LACP initiation packets?

Switch 1 (config-if)#channel-group 1 mode on Swrtch2(config-if)#channel-group 1 mode passive

Switch1(config-if)#channel-group 1 mode passive Switch2(config-if)#channel-group 1 mode active

Switch1{config-if)£channel-group 1 mode active Switch2(config-if)#channel-group 1 mode passive

Switch1(config-if)#channel-group 1 mode on Switch2(config-if)#channel-group 1 mode active

185. Refer to the exhibit.

PC1 is trying to ping PC3 for the first time and sends out an ARP to S1.

Which action is taken by S1?

It forwards it out G0/3 only

It is flooded out every port except G0/0.

It drops the frame.

It forwards it out interface G0/2 only.

186. Which two protocols are supported on service-port interfaces? (Choose two.)

RADIUS

TACACS+

SCP

Telnet

SSH

187. DRAG DROP

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

188. Refer to the exhibit.

Which types of JSON data is shown

Object

Sequence

String

boolean

189. Refer to the exhibit. Local access for R4 must be established and these requirements must be met:

• Only Telnet access is allowed.

• The enable password must be stored securely.

• The enable password must be applied in plain text.

• Full access to R4 must be permitted upon successful login.

Which configuration script meets the requirements?

A)

Option

190. DRAG DROP

Drag and chop the TCP/IP protocols from the left onto their primary transmission protocols on the right.

Page 20 of 30

191. Which port type does a lightweight AP use to connect to the wired network when it is configured in local mode?

EtherChannel

LAG

trunk

access

192. Which interface mode must be configured to connect the lightweight APs in a centralized architecture?

WLAN dynamic

management

trunk

access

193. What software defined architecture plane assists network devices with making packet-forwarding decisions by providing Layer 2 reachability and Layer 3 routing information?

data plane

control plane

policy plane

management plane

194. A network engineer must implement an IPv6 configuration on the vlan 2000 interface to create a routable locally-unique unicast address that is blocked from being advertised to the internet.

Which configuration must the engineer apply?

interface vlan 2000 ipv6 address ffc0:0000:aaaa::1234:2343/64

interface vlan 2000 Ipv6 address fc00:0000:aaaa:a15d:1234:2343:8aca/64

interface vlan 2000 ipv6 address fe80;0000:aaaa::1234:2343/64

interface vlan 2000 ipv6 address fd00::1234:2343/64

195. Which type of security program is violated when a group of employees enters a building using the ID badge of only one person?

intrusion detection

user awareness

physical access control

network authorization

196. After installing a new Cisco ISE server, which task must the engineer perform on the Cisco WLC to connect wireless clients on a specific VLAN based on their credentials?

Enable the allow AAA Override

Enable the Even: Driven RR

Disable the LAG Mode or Next Reboot.

Enable the Authorized MIC APs against auth-list or AA

197. Refer to the exhibit.

What is the next-hop P address for R2 so that PC2 reaches the application server via ElGRP?

192.168.30.1

10.10 105

10.10.10.6

192.168.201

198. What occurs to frames during the process of frame flooding?

Frames are sent to every port on the switch in the same VLAN except from the originating port

Frames are sent to every port on the switch that has a matching entry in the MAC address table.

Frames are sent to all ports, including those that are assigned to other VLANs.

Frames are sent to every port on the switch in the same VLA

199. Which device tracks the state of active connections in order to make a decision to forward a packet through?

wireless access point

firewall

wireless LAN controller

router

200. What is a benefit of a point-to-point leased line?

flexibility of design

simplicity of configurator

low cost

full-mesh capability

Page 21 of 30

201. Refer to the exhibit.

What are two conclusions about this configuration? {Choose two.)

The spanning-tree mode is Rapid PVST+.

This is a root bridge.

The root port is FastEthernet 2/1.

The designated port is FastEthernet 2/1.

The spanning-tree mode is PVST+.

202. To improve corporate security, an organization is planning to implement badge authentication to limit access to the data center.

Which element of a security program is being deployed?

user training

user awareness

vulnerability verification

physical access control

203. Refer to the exhibit.

All interfaces are in the same VLAN. All switches are configured with the default STP priorities.

During the STP electronics, which switch becomes the root bridge?

MDF-DC-4:08:E0:19: 08:B3:19

MDF-DC-3:08:0E:18::1A:3C:9D

MDF-DC-08:0E:18:22:05:97

MDF-DC-1:DB:E:44:02:54:79

204. Refer to the exhibit.

An administrator received a call from a branch office regarding poor application performance hosted at the headquarters. Ethernet 1 is connected between Router1 and the LAN switch.

What identifies the issue?

The QoS policy is dropping traffic.

There is a duplex mismatch.

The link is over utilized.

The MTU is not set to the default value.

205. A Cisco engineer at a new branch office is configuring a wireless network with access points that connect to a controller that is based at corporate headquarters Wireless client traffic must terminate at the branch office and access-point survivability is required in the event of a WAN outage.

Which access point mode must be selected?

Lightweight with local switching disabled

Local with AP fallback enabled

OfficeExtend with high availability disabled

FlexConnect with local switching enabled

206. What are two southbound APIs? (Choose two)

OpenFlow

NETCONF

Thrift

CORBA

DSC

207. What is the function of a hub-and-spoke WAN topology?

allows access restrictions to be implemented between subscriber sites.

provides direct connections between subscribers

supports Layer 2 VPNs

supports application optimization

208. Where does the configuration reside when a helper address Is configured lo support DHCP?

on the router closest to the server

on the router closest to the client

on every router along the path

on the switch trunk interface

209. Refer to the exhibit.

What is represented by "R1" and "SW1" within the JSON output?

key

array

value

object

210. A network administrator must to configure SSH for remote access to router R1 The requirement is to use a public and private key pair to encrypt management traffic to and from the connecting client.

Which configuration, when applied, meets the requirements?

R1#enable R1#configure terminal R1(config)#ip domain-name cisco.com R1(config)#crypto key generate ec keysize 2048

R1#enable R1#configure terminal R1(config)#ip domain-name cisco.com R1(config)#crypto key generate rsa modulus 1024

R1#enable R1#configure terminal R1(config)#ip domain-name cisco.com R1(config)#crypto key generate ec keysize 1024

R1#enable R1#configure terminal R1(config)#ip domain-name cisco.com R1(config)#crypto key encrypt rsa name myKey

Page 22 of 30

211. What is a characteristic of RSA?

It uses preshared keys for encryption

It requires both sides to have identical keys

It is a private-key encryption algorithm

It is a public-key cryptosystem

212. Refer to the exhibit.

A newly configured PC fails to connect to the internet using TCP port 80 to www cisco com.

Which setting must be modified for the connection to work?

Subnet Mask

DNS Servers

Default Gateway

DHCP Server

213. Refer to the exhibit.

Based on the LACP neighbor status, in which mode is the SW1 port channel configured?

passive

mode on

auto

active

214. What is the difference in data transmission delivery and reliability between TCP and UDP?

TCP transmits data at a higher rate and ensures packet delivery. UDP retransmits lost data to ensure applications receive the data on the remote end.

UDP sets up a connection between both devices before transmitting data. TCP uses the three-way handshake to transmit data with a reliable connection.

UDP is used for multicast and broadcast communication. TCP is used for unicast communication and transmits data at a higher rate with error checking.

TCP requires the connection to be established before transmitting data. UDP transmits data at a higher rate without ensuring packet delivery.

215. DRAG DROP

Drag and drop the Ansible terms from the left onto the right.

216. Refer to the exhibit.

After the configuration is applied, the two routers fail to establish an OSPF neighbor relationship.

What is the reason for the problem?

The OSPF router IDs are mismatched.

Router2 is using the default hello timer.

The network statement on Router1 is misconfigured.

The OSPF process IDs are mismatched.

217. Which IPv6 address range is suitable for anycast addresses for distributed services such DHCP or DNS?

FF00:1/12

2001:db8:0234:ca3e::1/128

2002:db84:3f37:ca98:be05:8/64

FE80::1/10

218. Which action implements physical access control as part of the security program of an organization1?

backing up syslogs at a remote location

configuring a password for the console port

configuring enable passwords on network devices

setting up IP cameras to monitor key infrastructure

219. What must a network administrator consider when deciding whether to configure a new wireless network with APs in autonomous mode or APs running in cloud-based mode?

Autonomous mode APs are less dependent on an underlay but more complex to maintain than APs in cloud-based mode.

Cloud-based mode APs relay on underlays and are more complex to maintain than APs in autonomous mode.

Cloud-based mode APs are easy to deploy but harder to automate than APs in autonomous mode.

Autonomous mode APs are easy to deploy and automate than APs in cloud-based mode.

220. Refer to the exhibit.

SW1(config-line)#line vty 0 15

SW1(config-line)#no login local

SW1(config-line)#password cisco

SW2(config)#username admin1 password abcd1234

SW2(config)#username admin2 password abcd1234

SW2(config-line)#line vty 0 15

SW2(config-line)#login local

SW3(config)#username admin1 secret abcd1234

SW3(config)#username admin2 secret abcd1234

SW3(config-line)#line vty 0 15

SW3(config-line)#login local

SW4(config)#username admin1 password abcd1234

SW4(config)#username admin2 password abcd1234

SW4(config-line)#line console 0

SW4(config-line)#login local

An administrator configures four switches for local authentication using passwords that are stored in a cryptographic hash. The four switches must also support SSH access for administrators to manage the network infrastructure.

Which switch is configured correctly to meet these requirements?

SW1

SW2

SW3

SW4

Page 23 of 30

221. What is the collapsed layer in collapsed core architectures?

core and WAN

access and WAN

distribution and access

core and distribution

222. What are two roles of the Dynamic Host Configuration Protocol (DHCP)? (Choose two)

The DHCP server offers the ability to exclude specific IP addresses from a pool of IP addresses

The DHCP client can request up to four DNS server addresses

The DHCP server assigns IP addresses without requiring the client to renew them

The DHCP server leases client IP addresses dynamically.

The DHCP client maintains a pool of IP addresses it can assign.

223. DRAG DROP

Refer to the exhibit.

The Router1 routing table has multiple methods to reach 10.10.10.0/24 as shown. The default Administrative Distance is used..

Drag and drop the network conditions from the left onto the routing methods that Router1 uses on the right.

224. A Cisco engineer is configuring a factory-default router with these three passwords:

• The user EXEC password for console access is p4ssw0rd1

• The user EXEC password for Telnet access is s3cr3t2

• The password for privileged EXEC mode is pnv4t3p4ss.

Which command sequence must the engineer configured

enable secret priv4t3p4ss ! line con 0 password login p4ssword1 ! line vty 0 15 password login s3cr3t2 login

enable secret privilege 15 priv4t3p4ss ! line con 0 password p4ssword1 login ! line vty 0 15 password s3cr3t2 login

enable secret priv4t3p4ss ! line con 0 password p4ssword1 login ! line vty 0 15 password s3cr3t2 login

enable secret priv4t3p4ss ! line con 0

225. DRAG DROP

Drag and drop the HTTP methods used with REST-Based APIs from the left onto the descriptions on the right.

226. DRAG DROP

Drag and drop the facts about wireless architectures from the left onto the types of access point on the right. Not all options are used.

227. An organization has decided to start using cloud-provided services.

Which cloud service allows the organization to install its own operating system on a virtual machine?

platform-as-a-service

software-as-a-service

network-as-a-service

infrastructure-as-a-service

228. Refer to the exhibit.

A network administrator must permit traffic from the 10.10.0.0/24 subnet to the WAN on interlace Seria10.

What is the effect of the configuration as the administrator applies the command?

The permit command fails and returns an error code.

The router accepts all incoming traffic to Seria10 with the last octet of the source IP set to 0.

The sourced traffic from IP range 10.0.0.0 -10.0.0.255 is allowed on Seria10.

The router fails to apply the access list to the interface.

229. Refer to the exhibit.

When PC-A sends traffic to PC-B, which network component is in charge of receiving the packet from PC-A verifying the IP addresses, and forwarding the packet to PC-B?

Layer 2 switch

Router

Load balancer

firewall

230. In which circumstance would a network architect decide to implement a global unicast subnet instead of a unique local unicast subnet?

when the subnet must be available only within an organization

when the subnet does not need to be routable

when the addresses on the subnet must be equivalent to private IPv4 addresses

when the subnet must be routable over the internet

Page 24 of 30

231. Which access point mode relies on a centralized controller for management, roaming, and SSID configuration?

repeater mode

autonomous mode

bridge mode

lightweight mode

232. Configure SSH connectivity from R1 to R3, while excluding access via other remote connection protocols. Access for user root and password Cisco must be set on router R3 using RSA and 1024 bits. Verify connectivity using an SSH session from router R1 using a destination address of 10.1.3.11. Do NOT modify console access or line numbers to accomplish this task.

233. Refer to the exhibit.

An administrator must configure interfaces Gi1/1 and Gi1/3 on switch SW11 PC-1 and PC-2 must be placed in the Data VLAN and Phone-1 must be placed in the Voice VLAN.

Which configuration meets these requirements?

interface gigabitethernet1/1 switchport mode access switchport access vlan 8 ! interface gigabitethernet1/3 switchport mode access switchport voice vlan 8 switchport access vlan 9

interface gigabitethernet1/1 switchport mode access switchport access vlan 9 ! interface gigabitethernet1/3 switchport mode trunk switchport voice vlan 8 switchport access vlan 9

interface gigabitethernet1/1 switchport mode access switchport access vlan 8 ! interface gigabitethernet1/3 switchport mode access switchport access vlan 8 switchport voice vlan 9

interface gigabitethernet1/1 switchport mode access switchport access vlan 8 ! interface gigabitethernet1/3 switchport mode trunk switchport voice vlan 8 switchport access vlan 9

234. DRAG DROP

Drag and drop the descriptions from the left onto the configuration-management technologies on the right.

235. Where does wireless authentication happen?

SSID

radio

band

Layer 2

236. What are two features of the DHCP relay agent? (Choose two.)

assigns DNS locally and then forwards request to DHCP server

permits one IP helper command under an individual Layer 3 interface

allows only MAC-to-IP reservations to determine the local subnet of a client

minimizes the necessary number of DHCP servers

configured under the Layer 3 interface of a router on the client subnet

237. Refer to the exhibit.

All VLANs are present in the VLAN database.

Which command sequence must be applied to complete the configuration?

Interface FastEthernet0/1 switchport trunk native vlan 10 switchport trunk allowed vlan 10,15

Interface FastEthernet0/1 switchport mode trunk switchport trunk allowed vlan 10,15

interface FastEthernet0/1 switchport mode access switchport voice vlan 10

Interface FastEthernet0/1 switchport trunk allowed vlan add 10 vlan 10 private-vlan isolated

238. An engineer needs to add an old switch back into a network.

To prevent the switch from corrupting the VLAN database which action must be taken?

Add the switch in the VTP domain with a lower revision number

Add the switch with DTP set to dynamic desirable

Add the switch in the VTP domain with a higher revision number

Add the switch with DTP set to desirable

239. When a client and server are not on the same physical network, which device is used to forward requests and replies between client and server for DHCP?

DHCP relay agent

DHCP server

DHCPDISCOVER

DHCPOFFER

240. How does Rapid PVST+ create a fast loop-free network topology?

It requires multiple links between core switches

It generates one spanning-tree instance for each VLAN

It maps multiple VLANs into the same spanning-tree instance

It uses multiple active paths between end stations.

Page 25 of 30

241. Which two transport layer protocols carry syslog messages? (Choose two.)

UDP

RTP

TCP

ARP

242. Which type of encryption does WPA1 use for data protection?

AES

TKIP

PEAP

EAP

243. DRAG DROP

Drag and drop the device behaviors from the left onto the matching HSRP slate on the right.

244. Which virtual MAC address is used by VRRP group 1?

0050.0c05.ad81

0007.c061.bc01

0000.5E00.0101

0500.3976.6401

245. Refer to the exhibit.

A network engineer is in the process of establishing IP connectivity between two sites. Routers R1 and R2 are partially configured with IP addressing. Both routers have the ability to access devices on their respective LANs.

Which command set configures the IP connectivity between devices located on both LANs in each site?

Option A

Option B

Option C

Option D

246. DRAG DROP

Refer to the exhibit.

Drag and drop the networking parameters from the left onto the correct values on the right.

247. Which network plane is centralized and manages routing decisions?

policy plane

management plane

control plane

data plane

248. DRAG DROP

Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they

mitigate on the right.

249. In which situation is private IPv4 addressing appropriate for a new subnet on the network of an organization?

There is limited unique address space, and traffic on the new subnet will stay local within the organization.

The network has multiple endpoint listeners, and it is desired to limit the number of broadcasts.

Traffic on the subnet must traverse a site-to-site VPN to an outside organization.

The ISP requires the new subnet to be advertised to the internet for web services.

250. Refer to the exhibit.

An administrator is tasked with configuring a voice VLAN.

What is the expected outcome when a Cisco phone is connected to the GigabitEfriemet3/1/4 port on a switch?

The phone and a workstation that is connected to the phone do not have VLAN connectivity

The phone and a workstation that is connected to the phone send and receive data in VLAN 50.

The phone sends and receives data in VLAN 50, but a workstation connected to the phone has no VLAN connectivity

The phone sends and receives data in VLAN 50, but a workstation connected to the phone sends and receives data in VLAN 1

Page 26 of 30

251. DRAG DROP

Drag and drop each characteristic of device-management technologies from the left onto the deployment type on the right.

252. What is the role of nonoverlapping channels in a wireless environment?

to reduce interference

to allow for channel bonding

to stabilize the RF environment

to increase bandwidth

253. What are two reasons for an engineer to configure a floating state route? (Choose two)

to automatically route traffic on a secondary path when the primary path goes down

to route traffic differently based on the source IP of the packet

to enable fallback static routing when the dynamic routing protocol fails

to support load balancing via static routing

to control the return path of traffic that is sent from the router

254. Which two must be met before SSH can operate normally on a Cisco IOS switch? (Choose two)

The switch must be running a k9 (crypto) IOS image

The Ip domain-name command must be configured on the switch

IP routing must be enabled on the switch

A console password must be configured on the switch

Telnet must be disabled on the switch

255. When a WPA2-PSK WLAN is configured in the wireless LAN Controller, what is the minimum number of characters that in ASCll format?

256. How does authentication differ from authorization?

Authentication verifies the identity of a person accessing a network, and authorization determines what resource a user can access.

Authentication is used to record what resource a user accesses, and authorization is used to determine what resources a user can access

Authentication is used to determine what resources a user is allowed to access, and authorization is used to track what equipment is allowed access to the network

Authentication is used to verify a person's identity, and authorization is used to create syslog messages for logins.

257. Refer to the exhibit.

Which type of route does R1 use to reach host 10.10.13.10/32?

floating static route

host route

default route

network route

258. Refer to the exhibit.

How does the router manage traffic to 192.168.12.16?

It selects the RIP route because it has the longest prefix inclusive of the destination address.

It chooses the OSPF route because it has the longest prefix inclusive of the destination address.

it load-balances traffic between all three routes

It chooses the EIGRP route because it has the lowest administrative distance

259. Which type of address is the public IP address of a NAT device?

outside global

outsdwde local

inside global

insride local

outside public

inside public

260. Refer to the exhibit.

For security reasons, automatic neighbor discovery must be disabled on the R5 Gi0/1 interface.

These tasks must be completed:

• Disable all neighbor discovery methods on R5 interface Gi0/1.

• Permit neighbor discovery on R5 interface Gi0/2.

• Verify there are no dynamically learned neighbors on R5 interface Gi0/1.

• Display the IP address of R6*s interface Gi0/2.

Which configuration must be used?

R5(config)#int Gi0/1 R5(config-if)#no cdp run R5(config-if)#exit R5(config)#lldp run R5(config)#cdp enable R5#sh cdp neighbor R5#sh lldp neighbor

R5(config)#int Gi0/1 R5(config-if)#no cdp enable R5(config-if)#exit R5(config)#no lldp run R5(config)#cdp run R5#sh cdp neighbor R5#sh lldp neighbor

R5(config)#int Gi0/1 R5(config-if)#no cdp enable R5(config-if)#exit R5(config)#no lldp run R5(config)#cdp run R5#sh cdp neighbor detail R5#sh lldp neighbor

R5(config)#int Gi0/1 R5(config-if)#no cdp enable R5(config-if)#exit R5(config)#lldp run R5(config)#no cdp run R5#sh cdp neighbor detail R5#sh lldp neighbor

Page 27 of 30

261. A WLC sends alarms about a rogue AP, and the network administrator verifies that the alarms are caused by a legitimate autonomous AP.

Place the AP into manual containment.

Remove the AP from WLC management.

Manually remove the AP from Pending state.

Set the AP Class Type to Friendly.

262. Refer to the exhibit.

Router OldR is replacing another router on the network with the intention of having OldR and R2 exchange routes_ After the engineer applied the initial OSPF configuration: the routes were still missing on both devices.

Which command sequence must be issued before the clear IP ospf process command is entered to enable the neighbor relationship?

Option A

Option B

Option C

Option D

263. Refer to the exhibit.

Router R1 Fa0/0 is unable ping router R3 Fa0/1.

Which action must be taken in router R1 to help resolve the configuration issue?

set the default network as 20.20.20.0/24

set the default gateway as 20.20.20.2

configure a static route with Fa0/1 as the egress interface to reach the 20.20.20.0/24 network

configure a static route with 10.10.10.2 as the next hop to reach the 20.20.20.0/24 network

264. Refer to the exhibit.

What does router R1 use as its OSPF router-ID?

10.10.1.10

10.10.10.20

172.16.15.10

192.168.0.1

265. Refer to the exhibit.

The loopback1 interface of the Atlanta router must reach the lookback3 interface of the Washington router.

ipv6 route 2000::1/128 2012::2

ipv6 route 2000::1/128 2012::1

ipv6 route 2000:3 123 s0/0/0

ipv6 route 2000::3/128 2023::3

ipv6 route 2000::1/128 s0/0/1

266. What are two reasons lo configure PortFast on a switch port attached to an end host? (Choose two.)

to enable the number of MAC addresses learned on the port to l

to protect the operation of the port from topology change processes

to enable the pod to enter the forwarding state immediately when the host boots up

to prevent the port from participating in Spanning Tree Protocol operations

to block another switch or host from communicating through the port

267. Refer to the exhibit.

What is the metric of the route to the 192.168.10.33/28 subnet?

110

128

192

193

268. Refer to the exhibit.

How many objects are present in the given JSON-encoded data?

one

four

seven

nine

269. A network engineer is configuring a switch so that it is remotely reachable via SSH. The engineer has already configured the host name on the router.

Which additional command must the engineer configure before entering the command to generate the RSA key?

password password

crypto key generate rsa modulus 1024

ip domain-name domain

ip ssh authentication-retries 2

270. When an access point is seeking to join wireless LAN controller, which message is sent to the AP-Manager interface?

Discovery response

DHCP request

DHCP discover

Discovery request

Page 28 of 30

271. Refer to the exhibit.

What is represented beginning with line 1 and ending with line 5?

value

object

key

array

272. An engineering team asks an implementer to configure syslog for warning conditions and error conditions.

Which command does the implementer configure to achieve the desired result?

logging trap 5

logging trap 2

logging trap 4

logging trap 3

273. What is the benefit of using FHRP?

reduced management overhead on network routers

balancing traffic across multiple gateways in proportion to their loads

higher degree of availability

reduced ARP traffic on the network

274. What is the expected outcome when an EUI-64 address is generated?

The seventh bit of the original MAC address of the interface is inverted

The interface ID is configured as a random 64-bit value

The characters FE80 are inserted at the beginning of the MAC address of the interface

The MAC address of the interface is used as the interface ID without modification

275. DRAG DROP

Drag and drop the wireless architecture benefits from the left onto the architecture types on the right.

276. How do AAA operations compare regarding user identification, user services and access control?

Authorization provides access control and authentication tracks user services

Authentication identifies users and accounting tracks user services

Accounting tracks user services, and authentication provides access control

Authorization identifies users and authentication provides access control

277. Which PoE mode enables powered-device detection and guarantees power when the device is detected?

dynamic

static

active

auto

278. Configure an IPv6 default router on router R2 destined for router R4.

279. Which EtherChannel mode must be configured when using LAG on a WLC?

active

auto

passive

280. Which type of IPv6 address is publicly routable in the same way as IPv4 public address?

global unicast

link-local

unique local

multicast

Page 29 of 30

281. Which IPv6 address type provides communication between subnets and is unable to route on the Internet?

global unicast

unique local

link-local

multicast

282. Refer to the exhibit.

What is the next step to complete the implementation for the partial NAT configuration shown?

Reconfigure the static NAT entries that overlap the NAT pool

Configure the NAT outside interface

Modify the access list for the internal network on e0/1

Apply the ACL to the pool configuration

283. Refer to the exhibit.

The New York router is configured with static routes pointing to the Atlanta and Washington sites.

Which two tasks must be performed so that the Serial0/0/0 interfaces on the Atlanta and Washington routers can reach one another? (Choose two.)

Configure the ipv6 route 2012::/126 2023::1 command on the Washington router.

Configure the ipv6 route 2023::/126 2012::1 command on the Atlanta router.

Configure the Ipv6 route 2012::/126 s0/0/0 command on the Atlanta router.

Configure the ipv6 route 2023::/126 2012::2 command on the Atlanta router.

Configure the ipv6 route 2012::/126 2023::2 command on the Washington router.

284. Refer to the exhibit.

Switch A is newly configured. All VLANs are present in the VLAN database. The IP phone and PC A on Gi0/1 must be configured for the appropriate VLANs to establish connectivity between the PCs.

Which command set fulfills the requirement?

SwitchA(config-if)#switchport mode access SwitchA(config-if)#switchport access vian 50 SwitchA(config-if)#switchport voice vlan 51

SwitchA(config-if)#switchport mode access SwitchA(config-if)#switchport access vlan 50 SwitchA(config-if)#switchport voice vlan untagged

SwitchA(config-if)#switchport mode trunk SwitchA(config-if)#switchport trunk allowed vlan add 50, 51 SwitchA(config-if)#switchport voice vlan dot1p

SwitchA(config-if)#switchport mode trunk SwitchA(config-if)#switchport trunk allowed vlan 50, 51 SwitchA(config-if)#mls qos trust cos

285. A DHCP pool has been created with the name NOCC. The pool is using 192.168.20.0/24 and must use the next to last usable IP address as the default gateway for the DHCP clients.

What is the next step in the process?

default-router192.168.20.253

network 192.168.20.254 255.255.255.0 secondary

ip default-gateway 0.0.0.0 0.0.0.0 192.168.20.253

next-server 192.168.20.254

286. Refer to the exhibit.

Which route must be configured on R1 so that OSPF routing is used when OSPF is up. but the server is still reachable when OSPF goes down?

ip route 10.1.1.10 255.255.255.255 172.16.2.2 100

ip route 10.1.1.0 255.255.255.0 gi0/1 125

ip route 10.1.1.0 255.255.255.0 172.16.2.2 100

ip route 10.1.1.10 255.255.255.255 gi0/0 125

287. DRAG DROP

Drag and drop the TCP or UDP details from the left onto their corresponding protocols on the right.

288. How is a configuration change made to a wireless AP in lightweight mode?

SSH connection to the management IP of the AP

EolP connection via the parent WLC

CAPWAP/LWAPP connection via the parent WLC

HTTPS connection directly to the out-of-band address of the AP

289. What are two characteristics of a controller-based network? (Choose two)

The administrator can make configuration updates from the CLI

It uses northbound and southbound APIs to communicate between architectural layers

It moves the control plane to a central point.

It decentralizes the control plane, which allows each device to make its own forwarding decisions

It uses Telnet to report system issues.

290. Which functionality is provided by the console connection on a Cisco WLC?

out-of-band management

secure in-band connectivity for device administration

unencrypted in-band connectivity for file transfers

HTTP-based GUI connectivity

Page 30 of 30

291. Which networking function occurs on the data plane?

forwarding remote client/server traffic

facilitates spanning-tree elections

processing inbound SSH management traffic

sending and receiving OSPF Hello packets

292. Which type of attack can be mitigated by dynamic ARP inspection?

worm

malware

DDoS

man-in-the-middle

293. Refer to the exhibit.

What is the subnet mask of the route to the 10.10.13.160 prefix?

255.255.255.240

255.255.255.128

255.255.248.

255.255.255.248

TAGS:

200-301, 200-301 exam dumps

Notify of

Label

Name*

Email*

Website

Label

Name*

Email*

Website

0 Comments

Oldest

Newest Most Voted

Inline Feedbacks

View all comments

Get 200-301 Dumps Full Version

Q&As: 959
Versions: PDF and Software Download Now

About Dumpsinfo

Dumpsinfo is a good platform providing the latest exam information and dumps questions for all IT certification exams. You can study all the latest exam dumps questions online.

[email protected]

Mon - Sat 9:00am - 6:00pm

Cisco 200-301 Exam Questions Simulate Actual 200-301 Exam

Related

Posts

100-160 Dumps Guarantee You Pass 100-160 Exam Easily

Pass 300-815 Exam to Get Cisco Certification

Test Online 300-445 Dumps Questions to Be Certified

Improve Your Knowledge with 300-540 Exam Dumps

About Us

EMAIL

Services

Opening Hours