11.11 Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

200-301 Implementing and Administering Cisco Solutions (200-301 CCNA) v1.1 Questions and Answers

Questions 4

Drag and drop the AAA functions from the left onto the correct AAA services on the right

200-301 Question 4

Options:

Buy Now
Questions 5

Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they mitigate on the right.

200-301 Question 5

Options:

Buy Now

200-301 Report Card

Questions 6

Refer to the exhibit.

200-301 Question 6

What commands are needed to add a subinterface to Ethernet0/0 on R1 to allow for VLAN 20, with IP address 10.20.20.1/24?

Options:

A.

R1(config)#interface ethernet0/0R1(config)#encapsulation dot1q 20R1(config)#ip address 10.20.20.1 255.255.255.0

B.

R1(config)#interface ethernet0/0.20R1(config)#encapsulation dot1q 20R1(config)#ip address 10.20.20.1 255.255.255.0

C.

R1(config)#interface ethernet0/0.20R1(config)#ip address 10.20.20.1 255.255.255.0

D.

R1(config)#interface ethernet0/0R1(config)#ip address 10.20.20.1 255.255.255.0

Buy Now
Questions 7

What is the primary effect of the spanning-tree portfast command?

Options:

A.

it enables BPDU messages

B.

It minimizes spanning-tree convergence time

C.

It immediately puts the port into the forwarding state when the switch is reloaded

D.

It immediately enables the port in the listening state

Buy Now
Questions 8

Refer to Exhibit.

200-301 Question 8

The loopback1 interface of the Atlanta router must reach the loopback3 interface of the Washington router. Which two static host routes must be configured on the NEW York router? (Choose two)

Options:

A.

ipv6 route 2000::1/128 2012::1

B.

ipv6 route 2000::3/128 2023::3

C.

ipv6 route 2000::3/128 s0/0/0

D.

ipv6 route 2000::1/128 2012::2

E.

ipv6 route 2000::1/128 s0/0/1

Buy Now
Questions 9

An engineer is asked to protect unused ports that are configured in the default VLAN on a switch.

Which two steps will fulfill the request? (Choose two)

Options:

A.

Configure the ports in an EtherChannel.

B.

Administratively shut down the ports

C.

Configure the port type as access and place in VLAN 99

D.

Configure the ports as trunk ports

E.

Enable the Cisco Discovery Protocol

Buy Now
Questions 10

Which IPv6 address block sends packets to a group address rather than a single address?

Options:

A.

2000::/3

B.

FC00::/7

C.

FE80::/10

D.

FF00::/8

Buy Now
Questions 11

What is the maximum bandwidth of a T1 point-to-point connection?

Options:

A.

1.544 Mbps

B.

2.048 Mbps

C.

34.368 Mbps

D.

43.7 Mbps

Buy Now
Questions 12

Refer to the exhibit.

200-301 Question 12

An engineer built a new L2 LACP EtherChannel between SW1 and SW2 and executed these show commands to verify the work. Which additional task allows the two switches to establish an LACP port channel?

Options:

A.

Change the channel-group mode on SW2 to auto

B.

Change the channel-group mode on SW1 to desirable.

C.

Configure the interface port-channel 1 command on both switches.

D.

Change the channel-group mode on SW1 to active or passive.

Buy Now
Questions 13

If a notice-level messaging is sent to a syslog server, which event has occurred?

Options:

A.

A network device has restarted

B.

An ARP inspection has failed

C.

A routing instance has flapped

D.

A debug operation is running

Buy Now
Questions 14

Which QoS traffic handling technique retains excess packets in a queue and reschedules these packets for later transmission when the configured maximum bandwidth has been surpassed?

Options:

A.

weighted random early detection

B.

traffic policing

C.

traffic shaping

D.

traffic prioritization

Buy Now
Questions 15

Refer to the exhibit.

200-301 Question 15

Which command must be issued to enable a floating static default route on router A?

Options:

A.

lp route 0.0.0.0 0.0.0.0 192.168.1.2

B.

ip default-gateway 192.168.2.1

C.

ip route 0.0.0.0 0.0.0.0 192.168.2.1 10

D.

ip route 0.0.0.0 0.0.0.0 192.168.1.2 10

Buy Now
Questions 16

Refer to the exhibit.

200-301 Question 16

The following must be considered:

• SW1 is fully configured for all traffic

• The SW4 and SW9 links to SW1 have been configured

• The SW4 interface Gi0/1 and Gi0/0 on SW9 have been configured

• The remaining switches have had all VLANs adde d to their VLAN database

Which configuration establishes a successful ping from PC2 to PC7 without interruption to traffic flow between other PCs?

A)

200-301 Question 16

B)

200-301 Question 16

C)

200-301 Question 16

D)

200-301 Question 16

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 17

Which option about JSON is true?

Options:

A.

uses predefined tags or angle brackets () to delimit markup text

B.

used to describe structured data that includes arrays

C.

used for storing information

D.

similar to HTML, it is more verbose than XML

Buy Now
Questions 18

Drag and drop the functions of AAA supporting protocols from the left onto the protocols on the right.

200-301 Question 18

Options:

Buy Now
Questions 19

Refer to the exhibit.

200-301 Question 19

Which switch becomes the root of the spanning tree for VLAN 110?

200-301 Question 19

Options:

A.

Switch 1

B.

Switch 2

C.

Switch 3

D.

Switch 4

Buy Now
Questions 20

What is a difference between local AP mode and FiexConnet AP mode?

Options:

A.

Local AP mode creates two CAPWAP tunnels per AP to the WLC

B.

FiexConnect AP mode fails to function if the AP loses connectivity with the WLC

C.

FlexConnect AP mode bridges the traffic from the AP to the WLC when local switching is configured

D.

Local AP mode causes the AP to behave as if it were an autonomous AP

Buy Now
Questions 21

Refer to the exhibit.

200-301 Question 21

An extended ACL has been configured and applied to router R2 The configuration failed to work as intended Which two

changes stop outbound traffic on TCP ports 25 and 80 to 10.0.20 0 26 from the 10.0.10 0/26 subnet while still allowing all other traffic? (Choose

two )

Options:

A.

Add a "permit ip any any" statement to the begining of ACL 101 for allowed traffic.

B.

Add a "permit ip any any" statement at the end of ACL 101 for allowed traffic

C.

The source and destination IPs must be swapped in ACL 101

D.

The ACL must be configured the Gi0/2 interface inbound on R1

E.

The ACL must be moved to the Gi0/1 interface outbound on R2

Buy Now
Questions 22

When implementing a router as a DHCP server, which two features must be configured'? (Choose two)

Options:

A.

relay agent information

B.

database agent

C.

address pool

D.

smart-relay

E.

manual bindings

Buy Now
Questions 23

Refer to the exhibit.

200-301 Question 23

which path is used by the router for internet traffic ?

Options:

A.

209.165.200.0/27

B.

10.10.10.0/28

C.

0.0.0.0/0

D.

10.10.13.0/24

Buy Now
Questions 24

Refer to the exhibit.

200-301 Question 24

All traffic enters the CPE router from interface Serial0/3 with an IP address of 192 168 50 1 Web traffic from the WAN is destined for a LAN network where servers are load-balanced An IP packet with a destination address of the HTTP virtual IP of 192 1681 250 must be forwarded Which routing table entry does the router use?

Options:

A.

192.168.1.0/24 via 192.168.12.2

B.

192.168.1.128/25 via 192.168.13.3

C.

192.168.1.192/26 via 192.168.14.4

D.

192.168.1.224/27 via 192.168.15.5

Buy Now
Questions 25

Refer to the exhibit.

200-301 Question 25

Users on existing VLAN 100 can reach sites on the Internet. Which action must the administrator take to establish connectivity to the Internet for users in VLAN 200?

Options:

A.

Define a NAT pool on the router.

B.

Configure static NAT translations for VLAN 200.

C.

Configure the ip nat outside command on another interface for VLAN 200.

D.

Update the NAT INSIDF RANGFS ACL

Buy Now
Questions 26

Refer to the exhibit.

200-301 Question 26

The network administrator wants VLAN 67 traffic to be untagged between Switch 1 and Switch 2 while all other VLANs are to remain tagged.

Which command accomplishes this task?

Options:

A.

switchport access vlan 67

B.

switchport trunk allowed vlan 67

C.

switchport private-vlan association host 67

D.

switchport trunk native vlan 67

Buy Now
Questions 27

What must be considered when using 802:11 ta?

Options:

A.

It is compatible with 802 lib- and 802 11-compliant wireless devices

B.

It is used in place of 802 11b/g when many nonoverlapping channels are required

C.

It is susceptible to interference from 2 4 GHz devices such as microwave ovens.

D.

It is chosen over 802 11b/g when a lower-cost solution is necessary

Buy Now
Questions 28

When DHCP is configured on a router, which command must be entered so the default gateway is automatically distributed?

Options:

A.

default-router

B.

default-gateway

C.

ip helper-address

D.

dns-server

Buy Now
Questions 29

What is the purpose of traffic shaping?

Options:

A.

to mitigate delays over slow links

B.

to provide fair queuing for buffered flows

C.

to limit the bandwidth that a flow can use to

D.

be a marking mechanism that identifies different flows

Buy Now
Questions 30

Refer to the exhibit.

200-301 Question 30

Which password must an engineer use to enter the enable mode?

Options:

A.

adminadmin123

B.

default

C.

testing 1234

D.

cisco123

Buy Now
Questions 31

What mechanism carries multicast traffic between remote sites and supports encryption?

Options:

A.

ISATAP

B.

GRE over iPsec

C.

iPsec over ISATAP

D.

GRE

Buy Now
Questions 32

Refer to the exhibit.

200-301 Question 32

After running the code in the exhibit, which step reduces the amount of data that the NETCONF server returns to the NETCONF client, to only the interface's configuration?

Options:

A.

Use the Ixml library to parse the data returned by the NETCONF server for the interface's configuration.

B.

Create an XML filter as a string and pass it to get_config() method as an argument.

C.

Create a JSON filter as a string and pass it to the get_config() method as an argument.

D.

Use the JSON library to parse the data returned by the NETCONF server for the interface's configuration.

Buy Now
Questions 33

which purpose does a northbound API serve in a controller-based networking architecture?

Options:

A.

communicates between the controller and the physical network hardware

B.

reports device errors to a controller

C.

generates statistics for network hardware and traffic

D.

facilitates communication between the controller and the applications

Buy Now
Questions 34

Which two capacities of Cisco DNA Center make it more extensible as compared to traditional campus device management? (Choose two)

Options:

A.

adapters that support all families of Cisco IOS software

B.

SDKs that support interaction with third-party network equipment

C.

customized versions for small, medium, and large enterprises

D.

REST APIs that allow for external applications to interact natively with Cisco DNA Center

E.

modular design that is upgradable as needed

Buy Now
Questions 35

Which WAN access technology is preferred for a small office / home office architecture?

Options:

A.

broadband cable access

B.

frame-relay packet switching

C.

dedicated point-to-point leased line

D.

Integrated Services Digital Network switching.

Buy Now
Questions 36

What criteria is used first during me root port selection process?

Options:

A.

local port ID

B.

lowest path cost to the root bridge

C.

lowest neighbor's bridge ID

D.

lowest neighbor's port ID

Buy Now
Questions 37

A network engineer must back up 20 network router configurations globally within a customer environment. Which protocol allows the engineer to perform this function using the Cisco IOS MIB?

Options:

A.

CDP

B.

SNMP

C.

SMTP

D.

ARP

Buy Now
Questions 38

Drag and drop the Rapid PVST+ forwarding slate actions from the loft to the right. Not all actions are used.

200-301 Question 38

Options:

Buy Now
Questions 39

Which two spanning-tree states are bypassed on an interface running PortFast? (Choose two.)

Options:

A.

disabled

B.

listening

C.

forwarding

D.

learning

E.

blocking

Buy Now
Questions 40

What are two functions of a server on a network? (Choose two)

Options:

A.

achieves redundancy by exclusively using virtual server clustering

B.

runs applications that send and retrieve data for workstations that make requests

C.

handles requests from multiple workstations at the same time

D.

runs the same operating system in order to communicate with other servers

E.

housed solely in a data center that is dedicated to a single client

Buy Now
Questions 41

An engineer must configure Interswitch VLAN communication between a Cisco switch and a third-party switch. Which action should be taken?

Options:

A.

configure IEEE 802.1p

B.

configure IEEE 802.1q

C.

configure ISL

D.

configure DSCP

Buy Now
Questions 42

Which switch technology establishes a network connection immediately when it is plugged in?

Options:

A.

PortFast

B.

BPDU guard

C.

UplinkFast

D.

BackboneFast

Buy Now
Questions 43

What is the primary different between AAA authentication and authorization?

Options:

A.

Authentication verifies a username and password, and authorization handles the communication between the authentication agent and the user database.

B.

Authentication identifies a user who is attempting to access a system, and authorization validates the users password

C.

Authentication identifies and verifies a user who is attempting to access a system, and authorization controls the tasks the user can perform.

D.

Authentication controls the system processes a user can access and authorization logs the activities the user initiates

Buy Now
Questions 44

Which Layer 2 switch function encapsulates packets for different VLANs so that the packets traverse the same port and maintain traffic separation between the VLANs?

Options:

A.

VLAN numbering

B.

VLAN DSCP

C.

VLAN tagging

D.

VLAN marking

Buy Now
Questions 45

What event has occurred if a router sends a notice level message to a syslog server?

Options:

A.

A TCP connection has been torn down

B.

An ICMP connection has been built

C.

An interface line has changed status

D.

A certificate has expired.

Buy Now
Questions 46

Which statement identifies the functionality of virtual machines?

Options:

A.

Virtualized servers run most efficiently when they are physically connected to a switch that is separate from the hypervisor

B.

The hypervisor can virtualize physical components including CPU. memory, and storage

C.

Each hypervisor can support a single virtual machine and a single software switch

D.

The hypervisor communicates on Layer 3 without the need for additional resources

Buy Now
Questions 47

Which command on a port enters the forwarding state immediately when a PC is connected to it?

Options:

A.

switch(config)#spanning-tree portfast default

B.

switch(config)#spanning-tree portfast bpduguard default

C.

switch(config-if)#spanning-tree portfast trunk

D.

switch(config-if)#no spanning-tree portfast

Buy Now
Questions 48

Which WLC management connection type is vulnerable to man-in-the-middle attacks?

Options:

A.

SSH

B.

HTTPS

C.

Telnet

D.

console

Buy Now
Questions 49

What is a characteristic of a Layer 2 switch?

Options:

A.

Maintains stateful transaction information

B.

Responsible for sending data in a particular sequence

C.

Makes forwarding decisions based on MAC addresses

D.

Filters based on a transport layer protocol

Buy Now
Questions 50

How does MAC learning function on a switch?

Options:

A.

broadcasts frames to all ports without queueing

B.

adds unknown source MAC addresses to the address table

C.

sends a retransmission request when a new frame is received

D.

sends frames with unknown destinations to a multicast group

Buy Now
Questions 51

What is the function of a hub-and-spoke WAN topology?

Options:

A.

allows access restrictions to be implemented between subscriber sites.

B.

provides direct connections between subscribers

C.

supports Layer 2 VPNs

D.

supports application optimization

Buy Now
Questions 52

200-301 Question 52

Refer to the exhibit. A network engineer is configuring a wireless LAN with Web Passthrough Layer 3 Web Policy. Which action must the engineer take to complete the configuration?

Options:

A.

Set the Layer 2 Security to 802.1X.

B.

Enable TKIP and CCMP256 WPA2 Encryption.

C.

Set the Layer 2 Security to None.

D.

Enable the WPA Policy.

Buy Now
Questions 53

An engineer must configure a/30 subnet between two routers. Which usable IP address and subnet mask combination meets this criteria?

200-301 Question 53

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 54

Refer to the exhibit.

200-301 Question 54

Which two commands when used together create port channel 10? (Choose two.)

Options:

A.

int range g0/0-1channel-group 10 mode active

B.

int range g0/0-1 chanm.l-group 10 mode desirable

C.

int range g0/0-1channel-group 10 mode passive

D.

int range g0/0-1 channel-group 10 mode auto

E.

int range g0/0-1 channel-group 10 mode on

Buy Now
Questions 55

Which two functions are performed by the core layer in a three-tier architecture? (Choose two)

Options:

A.

Provide uninterrupted forwarding service.

B.

Police traffic that is sent to the edge of the network.

C.

Provide direct connectivity for end user devices.

D.

Ensure timely data transfer between layers.

E.

Inspect packets for malicious activity.

Buy Now
Questions 56

Which output displays a JSON data representation?

200-301 Question 56

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 57

Which function is performed by the collapsed core layer in a two-tier architecture?

Options:

A.

enforcing routing policies

B.

marking interesting traffic for data polices

C.

attaching users to the edge of the network

D.

applying security policies

Buy Now
Questions 58

All physical cabling is in place. Router R4 and PCI are fully configured and

inaccessible. R4's WAN interfaces use .4 in the last octet for each subnet.

Configurations should ensure that connectivity is established end-to-end.

1 . Configure static routing to ensure RI prefers the path through R2 to

reach only PCI on R4's LAN

2. Configure static routing that ensures traffic sourced from RI will take

an alternate path through R3 to PCI in the event of an outage along

the primary path

3. Configure default routes on RI and R3 to the Internet using the least number of hops

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using

the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

200-301 Question 58

Options:

Buy Now
Questions 59

Refer to the exhibit.

200-301 Question 59

The router has been configured with a supernet to accommodate the requirement for 380 users on a subnet The requirement already considers 30% future growth. Which configuration verifies the IP subnet on router R4?

A)

200-301 Question 59

B)

200-301 Question 59

C)

200-301 Question 59

D)

200-301 Question 59

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 60

Drag and drop the statements about networking from the left onto the corresponding networking types on the right.

200-301 Question 60

Options:

Buy Now
Questions 61

A network engineer is configuring a switch so that it is remotely reachable via SSH. The engineer has already configured the host name on the router. Which additional command must the engineer configure before entering the command to generate the RSA key?

Options:

A.

password password

B.

crypto key generate rsa modulus 1024

C.

ip domain-name domain

D.

ip ssh authentication-retries 2

Buy Now
Questions 62

R1 as an NTP server must have:

• NTP authentication enabled

• NTP packets sourced from Interface loopback 0

• NTP stratum 2

• NTP packets only permitted to client IP 209.165 200 225

How should R1 be configured?

A)

200-301 Question 62

B)

200-301 Question 62

C)

200-301 Question 62

D)

200-301 Question 62

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 63

Drag and drop the descriptions of AAA services from the left onto the corresponding services on the right.

200-301 Question 63

Options:

Buy Now
Questions 64

Refer to the exhibit.

200-301 Question 64

An engineer assumes a configuration task from a peer Router A must establish an OSPF neighbor relationship with neighbor 172 1 1 1 The output displays the status of the adjacency after 2 hours. What is the next step in the configuration process for the routers to establish an adjacency?

Options:

A.

Configure router A to use the same MTU size as router B.

B.

Set the router B OSPF ID to a nonhost address.

C.

Configure a point-to-point link between router A and router B.

D.

Set the router B OSPF ID to the same value as its IP address

Buy Now
Questions 65

Refer to the exhibit.

200-301 Question 65

Site A was recently connected to site B over a new single-mode fiber path. Users at site A report Intermittent connectivity Issues with applications hosted at site B. What is the reason for the problem?

Options:

A.

Heavy usage is causing high latency.

B.

An incorrect type of transceiver has been inserted into a device on the link.

C.

physical network errors are being transmitted between the two sites.

D.

The wrong cable type was used to make the connection.

Buy Now
Questions 66

Refer to the exhibit.

200-301 Question 66

What is a reason for poor performance on the network interface?

Options:

A.

The interface is receiving excessive broadcast traffic.

B.

The cable connection between the two devices is faulty.

C.

The interface is operating at a different speed than the connected device.

D.

The bandwidth setting of the interface is misconfigured

Buy Now
Questions 67

Refer to the exhibit.

200-301 Question 67

All VLANs are present in the VLAN database. Which command sequence must be applied to complete the configuration?

Options:

A.

Interface FastEthernet0/1 switchport trunk native vlan 10 switchport trunk allowed vlan 10,15

B.

Interface FastEthernet0/1 switchport mode trunk switchport trunk allowed vlan 10,15

C.

interface FastEthernet0/1 switchport mode access switchport voice vlan 10

D.

Interface FastEthernet0/1 switchport trunk allowed vlan add 10 vlan 10 private-vlan isolated

Buy Now
Questions 68

Refer to the exhibit.

200-301 Question 68

Switch A is newly configured. All VLANs are present in the VLAN database. The IP phone and PC A on Gi0/1 must be configured for the appropriate VLANs to establish connectivity between the PCs. Which command set fulfills the requirement?

A)

200-301 Question 68

B)

200-301 Question 68

C)

200-301 Question 68

D)

200-301 Question 68

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 69

Which interface mode must be configured to connect the lightweight APs in a centralized architecture?

Options:

A.

WLAN dynamic

B.

management

C.

trunk

D.

access

Buy Now
Questions 70

An engineer is tasked to configure a switch with port security to ensure devices that forward unicasts multicasts and broadcasts are unable to flood the port The port must be configured to permit only two random MAC addresses at a time Drag and drop the required configuration commands from the left onto the sequence on the right Not all commands are used.

200-301 Question 70

Options:

Buy Now
Questions 71

Which PoE mode enables powered-device detection and guarantees power when the device is detected?

Options:

A.

dynamic

B.

static

C.

active

D.

auto

Buy Now
Questions 72

Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they mitigate on the right.

200-301 Question 72

Options:

Buy Now
Questions 73

Refer to the exhibit.

200-301 Question 73

Users need to connect to the wireless network with IEEE 802. 11r-compatible devices. The connection must be maintained as users travel between floors or to other areas in the building What must be the configuration of the connection?

Options:

A.

Select the WPA Policy option with the CCKM option.

B.

Disable AES encryption.

C.

Enable Fast Transition and select the FT 802.1x option.

D.

Enable Fast Transition and select the FT PSK option.

Buy Now
Questions 74

Which two components comprise part of a PKI? (Choose two.)

Options:

A.

preshared key that authenticates connections

B.

RSA token

C.

CA that grants certificates

D.

clear-text password that authenticates connections

E.

one or more CRLs

Buy Now
Questions 75

What is one reason to implement LAG on a Cisco WLC?

Options:

A.

to increase security and encrypt management frames

B.

to provide link redundancy and load balancing

C.

to allow for stateful and link-state failover

D.

to enable connected switch ports to failover and use different VLANs

Buy Now
Questions 76

What causes a port to be placed in the err-disabled state?

Options:

A.

nothing plugged into the port

B.

link flapping

C.

shutdown command issued on the port

D.

latency

Buy Now
Questions 77

Refer to the exhibit.

200-301 Question 77

A static route must be configured on R14 to forward traffic for the 172 21 34 0/25 network that resides on R86 Which command must be used to fulfill the request?

Options:

A.

ip route 172.21.34.0 255.255.255.192 10.73.65.65

B.

ip route 172.21.34.0 255.255.255.0 10.73.65.65

C.

ip route 172.21.34.0 255.255.128.0 10.73.65.64

D.

ip route 172.21.34.0 255.255.255.128 10.73.65.66

Buy Now
Questions 78

Refer to the exhibit.

200-301 Question 78

Which next-hop IP address does Routed use for packets destined to host 10 10.13.158?

Options:

A.

10.10.10.5

B.

10.10.11.2

C.

10.10.12.2

D.

10.10.10.9

Buy Now
Questions 79

What is an expected outcome when network management automation is deployed?

Options:

A.

A distributed management plane must be used.

B.

Software upgrades are performed from a central controller

C.

Complexity increases when new device configurations are added

D.

Custom applications are needed to configure network devices

Buy Now
Questions 80

Which action is taken by the data plane within a network device?

Options:

A.

forwards traffic to the next hop

B.

constructs a routing table based on a routing protocol

C.

provides CLI access to the network device

D.

looks up an egress interface in the forwarding information base

Buy Now
Questions 81

Refer to the exhibit.

200-301 Question 81

Which command configures OSPF on the point-to-point link between routers R1 and R2?

Options:

A.

router-id 10.0.0.15

B.

neighbor 10.1.2.0 cost 180

C.

ipospf priority 100

D.

network 10.0.0.0 0.0.0.255 area 0

Buy Now
Questions 82

Refer to the exhibit.

200-301 Question 82

Which plan must be Implemented to ensure optimal QoS marking practices on this network?

Options:

A.

As traffic traverses MLS1 remark the traffic, but trust all markings at the access layer.

B.

Trust the IP phone markings on SW1 and mark traffic entering SW2 at SW2.

C.

Remark traffic as it traverses R1 and trust all markings at the access layer.

D.

As traffic enters from the access layer on SW1 and SW2. trust all traffic markings.

Buy Now
Questions 83

What is a requirement when configuring or removing LAG on a WLC?

Options:

A.

The Incoming and outgoing ports for traffic flow must be specified If LAG Is enabled.

B.

The controller must be rebooted after enabling or reconfiguring LAG.

C.

The management interface must be reassigned if LAG disabled.

D.

Multiple untagged interfaces on the same port must be supported.

Buy Now
Questions 84

A Cisco engineer must configure a single switch interface to meet these requirements

• accept untagged frames and place them in VLAN 20

• accept tagged frames in VLAN 30 when CDP detects a Cisco IP phone

Which command set must the engineer apply?

A)

200-301 Question 84

B)

200-301 Question 84

C)

200-301 Question 84

D)

200-301 Question 84

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 85

What is the difference in data transmission delivery and reliability between TCP and UDP?

Options:

A.

TCP transmits data at a higher rate and ensures packet delivery. UDP retransmits lost data to ensure applications receive the data on the remote end.

B.

UDP sets up a connection between both devices before transmitting data. TCP uses the three-way handshake to transmit data with a reliable connection.

C.

UDP is used for multicast and broadcast communication. TCP is used for unicast communication and transmits data at a higher rate with error checking.

D.

TCP requires the connection to be established before transmitting data. UDP transmits data at a higher rate without ensuring packet delivery.

Buy Now
Questions 86

What is a network appliance that checks the state of a packet to determine whether the packet is legitimate?

Options:

A.

Layer 2 switch

B.

load balancer

C.

firewall

D.

LAN controller

Buy Now
Questions 87

How will Link Aggregation be Implemented on a Cisco Wireless LAN Controller?

Options:

A.

One functional physical port is needed to pass client traffic.

B.

The EthernetChannel must be configured in "mode active".

C.

When enabled, the WLC bandwidth drops to 500 Mbps.

D.

To pass client traffic, two or more ports must be configured.

Buy Now
Questions 88

What is the role of a firewall in an enterprise network?

Options:

A.

Forwards packets based on stateless packet inspection

B.

Processes unauthorized packets and allows passage to less secure segments of the network

C.

determines which packets are allowed to cross from unsecured to secured networks

D.

explicitly denies all packets from entering an administrative domain

Buy Now
Questions 89

Two switches are connected and using Cisco Dynamic Trunking Protocol SW1 is set to Dynamic Desirable

What is the result of this configuration?

Options:

A.

The link is in a down state.

B.

The link is in an error disables state

C.

The link is becomes an access port.

D.

The link becomes a trunk port.

Buy Now
Questions 90

An engineer is configuring an encrypted password for the enable command on a router where the local user database has already been configured Drag and drop the configuration commands from the left into the correct sequence on the right Not all commands are used

200-301 Question 90

Options:

Buy Now
Questions 91

A network engineer is installing an IPv6-only capable device. The client has requested that the device IP address be reachable only from the internal network. Which type of IPv6 address must the engineer assign?

Options:

A.

unique local address

B.

link-local address

C.

aggregatable global address

D.

IPv4-compatible IPv6 address

Buy Now
Questions 92

Drag and drop the statement about networking from the left into the Corresponding networking types on the right. Not all statements are used.

200-301 Question 92

Options:

Buy Now
Questions 93

What is a recommended approach to avoid co-channel congestion while installing access points that use the 2.4 GHz frequency?

Options:

A.

different nonoverlapping channels

B.

different overlapping channels

C.

one overlapping channel

D.

one nonoverlapping channel

Buy Now
Questions 94

Refer to the exhibit.

200-301 Question 94

How must router A be configured so that it only sends Cisco Discovery Protocol Information to router C?

200-301 Question 94

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 95

Which type of attack can be mitigated by dynamic ARP inspection?

Options:

A.

worm

B.

malware

C.

DDoS

D.

man-in-the-middle

Buy Now
Questions 96

Router R1 must send all traffic without a matching routing-table entry to 192.168.1.1. Which configuration accomplishes this task?

200-301 Question 96

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 97

A network administrator is setting up a new IPv6 network using the 64-bit address 2001 0EB8 00C1 2200:0001 0000 0000 0331/64 To simplify the configuration the administrator has decided to compress the address Which IP address must the administrator configure?

Options:

A.

ipv6 address 21:EB8:C1:2200:1::331/64

B.

ipv6 address 2001:EB8:C1:22:1::331/64

C.

ipv6 address 2001 :EB8:C 1:2200.1 ::331-64

D.

ipv6 address 2001:EB8:C1:2200:1:0000:331/64

Buy Now
Questions 98

Refer to the exhibit.

200-301 Question 98

An engineer is configuring the router to provide static NAT for the webserver Drag and drop the configuration commands from the left onto the letters that correspond to its position in the configuration on the right.

200-301 Question 98

Options:

Buy Now
Questions 99

Which two components are needed to create an Ansible script that configures a VLAN on a switch? (Choose two.)

Options:

A.

cookbook

B.

task

C.

playbook

D.

model

E.

recipe

Buy Now
Questions 100

What protocol allows an engineer to back up 20 network router configurations globally while using the copy function?

Options:

A.

SMTP

B.

SNMP

C.

TCP

D.

FTP

Buy Now
Questions 101

200-301 Question 101

Refer to the exhibit Routers R1 and R2 have been configured with their respective LAN interfaces The two circuits are operational and reachable across WAN Which command set establishes failover redundancy if the primary circuit goes down?

200-301 Question 101

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 102

When configuring a WLAN with WPA2 PSK in the Cisco Wireless LAN Controller GUI, which two formats are available to select? (Choose two)

Options:

A.

ASCII

B.

base64

C.

binary

D.

decimal

E.

hexadecimal

Buy Now
Questions 103

Drag and drop the DNS lookup components from the left onto the functions on the right.

200-301 Question 103

Options:

Buy Now
Questions 104

Refer to the exhibit.

200-301 Question 104

Which configuration on RTR-1 denies SSH access from PC-1 to any RTR-1 interface and allows all other traffic?

Options:

A.

access-list 100 deny tcp host 172.16.1.33 any eq 22 access-list 100 permit ip any anyinterface GigabitEthernet0/0 ip access-group 100 in

B.

access-list 100 deny tcp host 172.16.1.33 any eq 22 access-list 100 permit ip any anyline vty 0 15 ip access-group 100 in

C.

access-list 100 deny tcp host 172.16.1.33 any eq 23 access-list 100 permit ip any anyinterface GigabitEthernet0/0 ip access-group 100 in

D.

access-list 100 deny tcp host 172.16.1.33 any eq 23 access-list 100 permit ip any anyline vty 0 15 ip access-group 100 in

Buy Now
Questions 105

Refer to the exhibit.

200-301 Question 105

Which command provides this output?

Options:

A.

show ip route

B.

show ip interface

C.

show interface

D.

show cdp neighbor

Buy Now
Questions 106

Which virtual MAC address is used by VRRP group 1?

Options:

A.

0050.0c05.ad81

B.

0007.c061.bc01

C.

0000.5E00.0101

D.

0500.3976.6401

Buy Now
Questions 107

In which situation is private IPv4 addressing appropriate for a new subnet on the network of an organization?

Options:

A.

There is limited unique address space, and traffic on the new subnet will stay local within the organization.

B.

The network has multiple endpoint listeners, and it is desired to limit the number of broadcasts.

C.

Traffic on the subnet must traverse a site-to-site VPN to an outside organization.

D.

The ISP requires the new subnet to be advertised to the internet for web services.

Buy Now
Questions 108

An engineering team asks an implementer to configure syslog for warning conditions and error conditions. Which command does the implementer configure to achieve the desired result?

Options:

A.

logging trap 5

B.

logging trap 2

C.

logging trap 4

D.

logging trap 3

Buy Now
Questions 109

How does automation affect network management processes?

Options:

A.

It interoperates with ISE to define and manage patch and update schedules.

B.

It performs configuration updates based on user profiles.

C.

It improves the efficiency of system lifecycle management.

D.

It provides a reactive support model.

Buy Now
Questions 110

What uses HTTP messages to transfer data to applications residing on different hosts?

Options:

A.

OpenFlow

B.

OpenStack

C.

OpFlex

D.

REST

Buy Now
Questions 111

What is the function of a controller in controller-based networking?

Options:

A.

It serves as the centralized management point of an SDN architecture.

B.

It centralizes the data plane for the network.

C.

It is the card on a core router that maintains all routing decisions for a campus.

D.

It is a pair of core routers that maintain all routing decisions for a campus

Buy Now
Questions 112

Drag and drop the network protocols from the left onto the correct transport services on the right.

200-301 Question 112

Options:

Buy Now
Questions 113

Physical connectivity is implemented between the two Layer 2 switches,

and the network connectivity between them must be configured.

I . Configure an LACP EtherChanneI and number it as 44; configure it

between switches SWI and SW2 using interfaces EthernetO/O and

Ethernet0/1 on both sides. The LACP mode must match on both ends.

2. Configure the EtherChanneI as a trunk link.

3. Configure the trunk link with 802. Iq tags.

4. Configure VLAN 'MONITORING' as the untagged VLAN of the

EtherChannel.

==================

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using

the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

200-301 Question 113

Options:

Buy Now
Questions 114

Which value is the unique identifier that an access point uses to establish and maintain wireless connectivity to wireless network devices?

Options:

A.

VLANID

B.

SSID

C.

RFID

D.

WLANID

Buy Now
Questions 115

What are two benefits of FHRPs? (Choose two.)

Options:

A.

They enable automatic failover of the default gateway.

B.

They allow multiple devices to serve as a single virtual gateway for clients in the network.

C.

They are able to bundle multiple ports to increase bandwidth.

D.

They prevent loops in the Layer 2 network.

E.

They allow encrypted traffic.

Buy Now
Questions 116

Drag and drop the facts about wireless architectures from the left onto the types of access point on the right. Not all options are used.

200-301 Question 116

Options:

Buy Now
Questions 117

Refer to the exhibit.

200-301 Question 117

Which network prefix was learned via EIGRP?

Options:

A.

172.16.0.0/16

B.

192.168.2.0/24

C.

207.165.200.0/24

D.

192.168.1.0/24

Buy Now
Questions 118

Which type of network attack overwhelms the target server by sending multiple packets to a port until the half-open TCP resources of the target are exhausted?

Options:

A.

SYIM flood

B.

reflection

C.

teardrop

D.

amplification

Buy Now
Questions 119

Which protocol uses the SSL?

Options:

A.

HTTP

B.

SSH

C.

HTTPS

D.

Telnet

Buy Now
Questions 120

Which wireless security protocol relies on Perfect Forward Secrecy?

Options:

A.

WPA3

B.

WPA

C.

WEP

D.

WPA2

Buy Now
Questions 121

Refer to the exhibit.

200-301 Question 121

Traffic that is flowing over interface TenGigabitEthernet0/0 experiences slow transfer speeds. What is the reason for the issue?

Options:

A.

heavy traffic congestion

B.

a duplex incompatibility

C.

a speed conflict

D.

queuing drops

Buy Now
Questions 122

What are two improvements provided by automation for network management in an SDN environment? (Choose two)

Options:

A.

Data collection and analysis tools establish a baseline for the network

B.

Artificial intelligence identifies and prevents potential design failures.

C.

Machine learning minimizes the overall error rate when automating troubleshooting processes

D.

New devices are onboarded with minimal effort

E.

Proprietary Cisco APIs leverage multiple network management tools.

Buy Now
Questions 123

Refer to the exhibit.

200-301 Question 123

An engineer is configuring a new router on the network and applied this configuration. Which additional configuration allows the PC to obtain its IP address from a DHCP server?

Options:

A.

Configure the ip dhcp relay information command under interface Gi0/1.

B.

Configure the ip dhcp smart-relay command globally on the router

C.

Configure the ip helper-address 172.16.2.2 command under interface Gi0/0

D.

Configure the ip address dhcp command under interface Gi0/0

Buy Now
Questions 124

Refer to the exhibit.

200-301 Question 124

An IP subnet must be configured on each router that provides enough addresses for the number of assigned hosts and anticipates no more than 10% growth for now hosts. Which configuration script must be used?

A)

200-301 Question 124

B)

200-301 Question 124

C)

200-301 Question 124

D)

200-301 Question 124

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 125

Refer to the exhibit.

200-301 Question 125

Which two configurations must the engineer apply on this network so that R1 becomes the DR? (Choose two.)

A)

200-301 Question 125

B)

200-301 Question 125

C)

200-301 Question 125

D)

200-301 Question 125

E)

200-301 Question 125

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

E.

Option E

Buy Now
Questions 126

A network engineer must implement an IPv6 configuration on the vlan 2000 interface to create a routable locally-unique unicast address that is blocked from being advertised to the internet. Which configuration must the engineer apply?

Options:

A.

interface vlan 2000ipv6 address ffc0:0000:aaaa::1234:2343/64

B.

interface vlan 2000Ipv6 address fc00:0000:aaaa:a15d:1234:2343:8aca/64

C.

interface vlan 2000ipv6 address fe80;0000:aaaa::1234:2343/64

D.

interface vlan 2000ipv6 address fd00::1234:2343/64

Buy Now
Questions 127

Refer to the exhibit.

200-301 Question 127

An engineer is configuring the HO router. Which IPv6 address configuration must be applied to the router fa0'1 interface for the router to assign a unique 64-brt IPv6 address to Itself?

Options:

A.

ipv6 address 2001:DB8:0:1:C601:42FF:FE0F:7/64

B.

ipv6 address 2001:DB8:0:1:C601:42FE:800F:7/64

C.

ipv6 address 2001 :DB8:0:1:FFFF:C601:420F:7/64

D.

iov6 address 2001 :DB8:0:1:FE80:C601:420F:7/64

Buy Now
Questions 128

What is a similarity between global and unique local IPv6 addresses?

Options:

A.

They are allocated by the same organization.

B.

They are routable on the global internet.

C.

They use the same process for subnetting.

D.

They are part of the multicast IPv6 group type.

Buy Now
Questions 129

An engineer must configure R1 for a new user account. The account must meet these requirements:

* It must be configured in the local database.

* The username is engineer.

* It must use the strongest password configurable. Which command must the engineer configure on the router?

Options:

A.

R1 (config)# username engineer2 algorithm-type scrypt secret test2021

B.

R1(config)# username engineer2 secret 5 password S1$b1Ju$kZbBS1Pyh4QzwXyZ

C.

R1(config)# username engineer2 privilege 1 password 7 test2021

D.

R1(config)# username englneer2 secret 4 S1Sb1Ju$kZbBS1Pyh4QzwXyZ

Buy Now
Questions 130

Refer to the exhibit.

200-301 Question 130

Of the routes learned with dynamic routing protocols, which has the least preferred metric?

Options:

A.

Local

B.

EIGRP

C.

OSPF

D.

RIP

Buy Now
Questions 131

200-301 Question 131

Refer to the exhibit. A network engineer is adding another physical interface as a new member to the existing Port-Channel1 bundle.

Which command set must be configured on the new interface to complete the process?

Options:

A.

switchport mode trunk channel-group 1 mode active

B.

no switchport channel-group 1 mode active

C.

no switchport channel-group 1 mode on

D.

switchport switchport mode trunk

Buy Now
Questions 132

What is a function of Opportunistic Wireless Encryption in an environment?

Options:

A.

offer compression

B.

increase security by using a WEP connection

C.

provide authentication

D.

protect traffic on open networks

Buy Now
Questions 133

Refer to the exhibit.

200-301 Question 133

The link between PC1 and the switch is up. but it is performing poorly. Which interface condition is causing the performance problem?

Options:

A.

There is a duplex mismatch on the interface

B.

There is an issue with the fiber on the switch interface.

C.

There is a speed mismatch on the interface.

D.

There is an interface type mismatch

Buy Now
Questions 134

Refer to the exhibit.

200-301 Question 134

Router R1 resides in OSPF Area 0. After updating the R1 configuration to influence the paths that it will use to direct traffic, an engineer verified that each of the four Gigabit interfaces has the same route to 10.10.0.0/16. Which interface will R1 choose to send traffic to reach the route?

Options:

A.

GigabitEthernet0/0

B.

GigabltEthornet0/1

C.

GigabitEthernet0/2

D.

GigabitEthernet0/3

Buy Now
Questions 135

What are two reasons that cause late collisions to increment on an Ethernet interface? (Choose two)

Options:

A.

when the sending device waits 15 seconds before sending the frame again

B.

when the cable length limits are exceeded

C.

when one side of the connection is configured for half-duplex

D.

when Carrier Sense Multiple Access/Collision Detection is used

E.

when a collision occurs after the 32nd byte of a frame has been transmitted

Buy Now
Questions 136

Which technology must be implemented to configure network device monitoring with the highest security?

Options:

A.

IP SLA

B.

syslog

C.

NetFlow

D.

SNMPv3

Buy Now
Questions 137

Which two outcomes are predictable behaviors for HSRP? (Choose two)

Options:

A.

The two routers share a virtual IP address that is used as the default gateway for devices on the LAN.

B.

The two routers negotiate one router as the active router and the other as the standby router

C.

Each router has a different IP address both routers act as the default gateway on the LAN, and traffic is load balanced between them.D The two routers synchronize configurations to provide consistent packet forwarding

D.

The two routed share the same IP address, and default gateway traffic is load-balanced between them

Buy Now
Questions 138

Which unified access point mode continues to serve wireless clients after losing connectivity to the Cisco Wireless LAN Controller?

Options:

A.

sniffer

B.

mesh

C.

flexconnect

D.

local

Buy Now
Questions 139

An organization secures its network with multi-factor authentication using an authenticator app on employee smartphone. How is the application secured in the case of a user’s smartphone being lost or stolen?

Options:

A.

The application requires an administrator password to reactivate after a configured Interval.

B.

The application requires the user to enter a PIN before it provides the second factor.

C.

The application challenges a user by requiring an administrator password to reactivate when the smartphone is rebooted.

D.

The application verifies that the user is in a specific location before it provides the second factor.

Buy Now
Questions 140

How does MAC learning function?

Options:

A.

Sends frames with unknown destinations to a multicast group.

B.

Increases security on the management VLAN.

C.

Rewrites the source and destination MAC address.

D.

Associates the MAC address with the port on which it is received.

Buy Now
Questions 141

Refer to the exhibit.

200-301 Question 141

R1 learns all routes via OSPF Which command configures a backup static route on R1 to reach the 192 168.20.0/24 network via R3?

Options:

A.

R1(config)#ip route 192.168.20.0 255.255.0.0 192.168.30.2

B.

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2 90

C.

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2 111

D.

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2

Buy Now
Questions 142

What is an advantage of using SDN versus traditional networking when it comes to security?

Options:

A.

SDN security is managed near the perimeter of the network with firewalls, VPNs, and IPS, and traditional networking security policies are created based on telemetry data.

B.

SDN exposes an API to configure locally per device for security policies, and traditional networking uses northbound API for network admin interface for configuring security policies.

C.

SDN creates a unified control point making security policies consistent across all devices, and traditional networking must be configured device by device, leaving room for error.

D.

SDN devices communicate with each other to establish a security policy, and in traditional networking, devices communicate upstream to a central location to establish a security policy.

Buy Now
Questions 143

Refer to the exhibit.

200-301 Question 143

The DHCP server and clients are connected to the same switch. What is the next step to complete the DHCP configuration to allow clients on VLAN 1 to receive addresses from the DHCP server?

Options:

A.

Configure the ip dhcp snooping trust command on the interlace that is connected to the DHCP client.

B.

Configure the ip dhcp relay information option command on the interface that is connected to the DHCP client.

C.

Configure the ip dhcp snooping trust command on the interface that is connected to the DHCP server.

D.

Configure the Ip dhcp relay information option command on the interface that is connected to the DHCP server.

Buy Now
Questions 144

What causes a port to be placed in the err-disabled state?

Options:

A.

latency

B.

port security violation

C.

shutdown command issued on the port

D.

nothing plugged into the port

Buy Now
Questions 145

An administrator must secure the WLC from receiving spoofed association requests. Which steps must be taken to configure the WLC to restrict the requests and force the user to wait 10 ms to retry an association request?

Options:

A.

Enable Security Association Teardown Protection and set the SA Query timeout to 10

B.

Enable MAC filtering and set the SA Query timeout to 10

C.

Enable 802.1x Layer 2 security and set me Comeback timer to 10

D.

Enable the Protected Management Frame service and set the Comeback timer to 10

Buy Now
Questions 146

Which two network actions occur within the data plane? (Choose two.)

Options:

A.

Add or remove an 802.1Q trunking header.

B.

Make a configuration change from an incoming NETCONF RPC.

C.

Run routing protocols.

D.

Match the destination MAC address to the MAC address table.

E.

Reply to an incoming ICMP echo request.

Buy Now
Questions 147

Which protocol is used for secure remote CLI access?

Options:

A.

HTTPS

B.

HTTP

C.

Telnet

D.

SSH

Buy Now
Questions 148

200-301 Question 148

Refer to the exhibit. An administrator must connect SW_1 and the printer to the network. SW_2 requires DTP to be used for the connection to SW_1. The printer is configured as an access port with VLAN 5. Which set of commands completes the connectivity?

Options:

A.

switchport mode dynamic autoswitchport private-vlan association host 5

B.

switchport mode dynamic autoswitchport trunk encapsulation negotiate

C.

switchport mode dynamic desirableswitchport trunk allowed vlan add 5

D.

switchport mode trunkswitchport trunk pruning vlan add 5

Buy Now
Questions 149

What is a characteristic of private IPv4 addressing?

Options:

A.

alleviates the shortage of IPv4 addresses

B.

reduces the forwarding table on network routers

C.

enables secure connectivity over the internet

D.

used as the NAT outside global IP address

Buy Now
Questions 150

Which fact must the engineer consider when implementing syslog on a new network?

Options:

A.

Syslog defines the software or hardware component that triggered the message.

B.

There are 16 different logging levels (0-15).

C.

By default, all message levels are sent to the syslog server.

D.

The logging level defines the severity of a particular message.

Buy Now
Questions 151

How does MAC learning function?

Options:

A.

inserts MAC addresses dynamically into the CAM table

B.

restricts ports to a maximum of 10 dynamically-learned addresses

C.

protects against denial of service attacks

D.

rewrites the source and destination MAC address

Buy Now
Questions 152

Refer to the exhibit.

200-301 Question 152

How should the configuration be updated to allow PC1 and PC2 access to the Internet?

Options:

A.

Modify the configured number of the second access list.

B.

Add either the ip nat {inside|outside} command under both interfaces.

C.

Remove the overload keyword from the ip nat inside source command.

D.

Change the ip nat inside source command to use interface GigabitEthernet0/0.

Buy Now
Questions 153

Refer to the exhibit.

200-301 Question 153

Which two commands must be added to update the configuration of router R1 so that it accepts only encrypted connections? (Choose two )

Options:

A.

username CNAC secret R!41!4319115@

B.

ip ssh version 2

C.

line vty 0 4

D.

crypto key generate rsa 1024

E.

transport input ssh

Buy Now
Questions 154

Refer to the exhibit.

200-301 Question 154

An administrator is tasked with configuring a voice VLAN. What is the expected outcome when a Cisco phone is connected to the GigabitEfriemet3/1/4 port on a switch?

Options:

A.

The phone and a workstation that is connected to the phone do not have VLAN connectivity

B.

The phone and a workstation that is connected to the phone send and receive data in VLAN 50.

C.

The phone sends and receives data in VLAN 50, but a workstation connected to the phone has no VLAN connectivity

D.

The phone sends and receives data in VLAN 50, but a workstation connected to the phone sends and receives data in VLAN 1

Buy Now
Questions 155

Refer to the exhibit.

200-301 Question 155

Which IPv6 configuration is required for R17 to successfully ping the WAN interface on R18?

A)

200-301 Question 155

B)

200-301 Question 155

C)

200-301 Question 155

D)

200-301 Question 155

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 156

Where does wireless authentication happen?

Options:

A.

SSID

B.

radio

C.

band

D.

Layer 2

Buy Now
Questions 157

An engineer configured an OSPF neighbor as a designated router. Which state verifies the designated router is in the proper mode?

Options:

A.

Exchange

B.

2-way

C.

Full

D.

Init

Buy Now
Questions 158

Refer to Exhibit.

200-301 Question 158

An engineer is configuring the NEW York router to reach the Lo1 interface of the Atlanta router using interface Se0/0/0 as the primary path. Which two commands must be configured on the New York router so that it can reach the Lo1 interface of the Atlanta router via Washington when the link between New York and Atlanta goes down? (Choose two)

Options:

A.

ipv6 router 2000::1/128 2012::1

B.

ipv6 router 2000::1/128 2012::1 5

C.

ipv6 router 2000::1/128 2012::2

D.

ipv6 router 2000::1/128 2023::2 5

E.

ipv6 router 2000::1/128 2023::3 5

Buy Now
Questions 159

Which role do predictive Al models play in network load balancing?

Options:

A.

They anticipate future traffic spikes.

B.

They assign IP addresses to devices.

C.

They select correct cabling types for deployment.

D.

They solely monitor historical traffic volumes.

Buy Now
Questions 160

Refer to the exhibit.

200-301 Question 160

What is the effect of this configuration?

Options:

A.

All ARP packets are dropped by the switch

B.

Egress traffic is passed only if the destination is a DHCP server.

C.

All ingress and egress traffic is dropped because the interface is untrusted

D.

The switch discard all ingress ARP traffic with invalid MAC-to-IP address bindings.

Buy Now
Questions 161

200-301 Question 161

Refer to the exhibit. Which tasks must be performed on the Download File tab to install new software using TCP port 22?)

Options:

A.

Set the File Type to Code, set the Transfer Mode to SFTP, and specify the IP address of the WLC.

B.

Set the File Type to Configuration, set the Transfer Mode to FTP, and specify the IP address of the file server.

C.

Set the File Type to Code, set the Transfer Mode to SFTP, and specify the IP address of the file server.

D.

Set the File Type to Configuration, set the Transfer Mode to SFTP, and specify the IP address of the WLC.

Buy Now
Questions 162

What is an advantage of Cisco DNA Center versus traditional campus device management?

Options:

A.

It supports numerous extensibility options including cross-domain adapters and third-party SDKs.

B.

It supports high availability for management functions when operating in cluster mode.

C.

It enables easy autodiscovery of network elements m a brownfield deployment.

D.

It is designed primarily to provide network assurance.

Buy Now
Questions 163

Which AP feature provides a captive portal for users to authenticate, register, and accept terms before accessing the internet?

Options:

A.

Whole Home

B.

Hotspot

C.

One-Click

D.

Enhanced Bluetooth

Buy Now
Questions 164

What is a characteristic of encryption in wireless networks?

Options:

A.

uses a unidirectional handshake for authentication

B.

Intercepts data threats before they attack a network

C.

uses integrity checks to identify forgery attacks

D.

prevents intercepted data from being easily read

Buy Now
Questions 165

Which statement describes virtual machines?

Options:

A.

They include a guest OS and the service.

B.

They enable the network to become agile and hardware-centric.

C.

They use a supervisor to provide management for services.

D.

They facilitate local management of infrastructure devices.

Buy Now
Questions 166

What are two behaviors of a point-to-point WAN topology? (Choose two.)

Options:

A.

It uses a single router to route traffic between sites.

B.

It leverages a dedicated connection.

C.

It connects remote networks through a single line.

D.

t delivers redundancy between the central office and branch offices.

E.

It provides direct connections between each router in the topology.

Buy Now
Questions 167

Which key function is provided by the data plane?

Options:

A.

Making routing decisions

B.

Originating packets

C.

Forwarding traffic to the next hop

D.

Exchanging routing table data

Buy Now
Questions 168

Which technology allows for logical Layer 3 separation on physical network equipment?

Options:

A.

Virtual Route Forwarding

B.

Virtual Switch System

C.

IPsec Transport Mode

D.

Time Division Multiplexer

Buy Now
Questions 169

What is the purpose of the service-set identifier?

Options:

A.

It identifies the wired network to which a network device is connected.

B.

It identifies a wireless network for a mobile device to connect.

C.

It identifies the wireless network to which an application must connect.

D.

It identifies the wired network to which a user device is connected.

Buy Now
Questions 170

200-301 Question 170

Refer to the exhibit. VLAN 23 is being implemented between SW1 and SW2. The command show interface ethernet0/0 switchport has been issued on SW1. Ethernet0/0 on SW1 is the uplink to SW2. Which command when entered on the uplink interface allows PC 1 and PC 2 to communicate without impact to the communication between PC 11 and PC 12?

Options:

A.

switchport trunk allowed vlan 2-1001

B.

switchport trunk allowed vlan add 23

C.

switchport trunk allowed vlan 23

D.

switchport trunk allowed vlan 22-23

Buy Now
Questions 171

Which network allows devices to communicate without the need to access the Internet?

Options:

A.

1729.0.0/16

B.

172.28.0.0/16

C.

192.0.0.0/8

D.

209.165.201.0/24

Buy Now
Questions 172

What is a requirement for nonoverlapping Wi-Fi channels?

Options:

A.

different security settings

B.

discontinuous frequency ranges

C.

different transmission speeds

D.

unique SSIDs

Buy Now
Questions 173

Refer to the exhibit.

200-301 Question 173

What is the next hop address for traffic that is destined to host 10.0.1.5?

Options:

A.

10.0.1.3

B.

10.0.1.50

C.

10.0.1.4

D.

Loopback D

Buy Now
Questions 174

Refer to the exhibit.

200-301 Question 174

Which type of configuration is represented in the output?

Options:

A.

Ansible

B.

JSON

C.

Chef

D.

Puppet

Buy Now
Questions 175

200-301 Question 175

Refer to the exhibit. What is the value of the administrative distance for the default gateway?

Options:

A.

10

B.

0

C.

1

D.

110

Buy Now
Questions 176

Which QoS per-hop behavior changes the value of the ToS field in the IPv4 packet header?

Options:

A.

shaping

B.

classification

C.

policing

D.

marking

Buy Now
Questions 177

Router A learns the same route from two different neighbors, one of the neighbor routers is an OSPF neighbor and the other is an EIGRP neighbor. What is the administrative distance of the route that will be installed in the routing table?

Options:

A.

20

B.

90

C.

110

D.

115

Buy Now
Questions 178

Which default condition must be considered when an encrypted mobility tunnel is used between two Cisco WLCs?

Options:

A.

TCP port 443 and UDP 21 are used.

B.

Control and data traffic encryption are enabled.

C.

The tunnel uses the IPsec protocol for encapsulation.

D.

The tunnel uses the EolP protocol to transmit data traffic.

Buy Now
Questions 179

Which technology allows multiple operating systems lo run a single physical server?

Options:

A.

cloud computing

B.

virtualization

C.

application hosting

D.

containers

Buy Now
Questions 180

Physical connectivity is implemented between the two Layer 2 switches, and the network connectivity between them must be configured

1. Configure an LACP EtherChannel and number it as 1; configure it between switches SW1 and SVV2 using interfaces Ethernet0/0 and Ethernet0/1 on both sides. The LACP mode must match on both ends

2 Configure the EtherChannel as a trunk link.

3. Configure the trunk link with 802.1 q tags.

4. Configure the native VLAN of the EtherChannel as VLAN 15.

200-301 Question 180 200-301 Question 180

Options:

Buy Now
Questions 181

Refer to the exhibit.

200-301 Question 181

Users will be using a preconfigured secret key and SSID and must have a secured key hashing algorithm configured. The AAA server must not be used for the user authentication method. Which action completes the task?

Options:

A.

Enable AutoConfig iPSK.

B.

SetCCMP128(AES).

C.

Configure PSK Format HEX with key string.

D.

Configure PSK-SHA2.

Buy Now
Questions 182

Refer to the exhibit.

200-301 Question 182

Packets received by the router from BGP enter via a serial interface at 209 165 201 1 Each route is present within the routing table Which interface is used to forward traffic with a destination IP of 10.1.1.19?

Options:

A.

F0/4

B.

F0/0

C.

F0/1

D.

F0/3

Buy Now
Questions 183

Which JSON data type is an unordered set of attribute- value pairs?

Options:

A.

array

B.

string

C.

object

D.

Boolean

Buy Now
Questions 184

What are two characteristics of a public cloud Implementation? (Choose two.)

Options:

A.

It is owned and maintained by one party, but it is shared among multiple organizations.

B.

It enables an organization to fully customize how It deploys network resources.

C.

It provides services that are accessed over the Internet.

D.

It Is a data center on the public Internet that maintains cloud services for only one company.

E.

It supports network resources from a centralized third-party provider and privately-owned virtual resources

Buy Now
Questions 185

An engineer requires a scratch interface to actively attempt to establish a trunk link with a neighbor switch. What command must be configured?

Options:

A.

switchport mode trunk

B.

switchport mode dynamic desirable

C.

switchport mode dynamic auto

D.

switchport nonegotiate

Buy Now
Questions 186

When a site-to-site VPN is used, which protocol is responsible for the transport of user data?

Options:

A.

IKEv2

B.

IKEv1

C.

IPsec

D.

MD5

Buy Now
Questions 187

A router running EIGRP has learned the same route from two different paths. Which parameter does the router use to select the best path?

Options:

A.

cost

B.

adminstrative distance

C.

metric

D.

as-path

Buy Now
Questions 188

Which command enables a router to become a DHCP client?

Options:

A.

ip address dhcp

B.

ip helper-address

C.

ip dhcp pool

D.

ip dhcp client

Buy Now
Questions 189

Which role does AI play in monitoring network data flow?

Options:

A.

It analyzes patterns for anomaly detection.

B.

It exclusively predicts device malfunctions.

C.

It simplifies traffic route mapping.

D.

It enhances data packet delivery speeds.

Buy Now
Questions 190

How does automation leverage data models to reduce the operational complexity of a managed network?

Options:

A.

Reduces the response time for specific requests to devices with many interfaces

B.

Categorizes traffic and provides insights

C.

Allows the controller to be vendor-agnostic

D.

Streamlines monitoring using SNMP and other polling tools

Buy Now
Questions 191

What is the main purpose of SSH management access?

Options:

A.

To support DES 56-bit and 3DES (168-bit) ciphers

B.

To enable secured access to the inbound management interface

C.

To validate management access with username and domain name only

D.

To allow passwords protected with HTTPS encryption to be sent

Buy Now
Questions 192

Refer to the exhibit.

200-301 Question 192

What is occurring on this switch?

Options:

A.

A high number of frames smaller than 64 bytes are received.

B.

Frames are dropped after 16 failed transmission attempts.

C.

The internal transmit buffer is overloaded.

D.

An excessive number of frames greater than 1518 bytes are received.

Buy Now
Questions 193

200-301 Question 193

Refer to the exhibit. The route for 10.220.100.96/27 has been very unstable. The same route has four backups to routers A, B, C, and D via the respective methods. The routing protocol defaults for router Y have not been changed. When the current route for 10.220.100.96/27 becomes unavailable, which router will router Y use to route traffic to 10.220.100.96/27?

Options:

A.

router D

B.

router B

C.

router C

D.

router A

Buy Now
Questions 194

200-301 Question 194

200-301 Question 194

200-301 Question 194

IP connectivity and OSPF are preconfigured on all devices where necessary. Do not make any changes to the IP addressing or OSPF. The company policy uses connected interfaces and next hops when configuring static routes except for load balancing or redundancy without floating static. Connectivity must be established between subnet 172.20.20.128/25 on the Internet and the LAN at 192.168.0.0/24 connected to SW1:

1. Configure reachability to the switch SW1 LAN subnet in router R2.

2. Configure default reachability to the Internet subnet in router R1.

3. Configure a single static route in router R2 to reach to the Internet subnet considering both redundant links between routers R1 and R2. A default route is NOT allowed in router R2.

4. Configure a static route in router R1 toward the switch SW1 LAN subnet where the primary link must be through Ethernet0/1. and the backup link must be through Ethernet0/2 using a floating route. Use the minimal administrative distance value when required.

Options:

Buy Now
Questions 195

Which two principles must be considered when using per-hop behavior in QoS? (Choose two.)

Options:

A.

Policing is not supported on subinterfaces.

B.

Shaping and rate limiting have the same effect.

C.

Shaping drops excessive traffic without adding traffic delay.

D.

Shaping levels out traffic bursts by delaying excess traffic.

E.

Policing is performed in the inbound and outbound directions.

Buy Now
Questions 196

How does MAC learning function?

Options:

A.

rewrites the source and destination MAC address

B.

adds unknown source MAC addresses to the CAM table

C.

sends the frame back to the source to verify availability

D.

drops received MAC addresses not listed in the address table

Buy Now
Questions 197

Why are API keys used to enforce rate limiting?

Options:

A.

to uniquely identify clients to monitor their usage patterns

B.

to encrypt data to prevent excessive usage

C.

to contain embedded permissions that automatically expire

D.

to track the geographical location of each request

Buy Now
Questions 198

Which switch port configuration must be configured when connected to an AP running in FlexConnect mode, and the WLANs use flex local switching?

Options:

A.

access port with one VLAN

B.

trunk port with pruned VLANs

C.

Layer 3 port with an IP address

D.

tagged port with MAC Filtering enabled

Buy Now
Questions 199

Which two northbound APIs are found in a software-defined network? (Choose two.)

Options:

A.

OpenFlow

B.

REST

C.

OpFlex

D.

SOAP

E.

NETCONF

Buy Now
Questions 200

An organization developed new security policies and decided to print the policies and distribute them to all personnel so that employees review and apply the policies. Which element of a security program is the organization implementing?

Options:

A.

Asset identification

B.

User training

C.

Physical access control

D.

Vulnerability control

Buy Now
Questions 201

Which security element uses a combination of one-time passwords, a login name, and a personal smartphone?

Options:

A.

software-defined segmentation

B.

multifactor authentication

C.

attribute-based access control

D.

rule-based access control

Buy Now
Questions 202

Which IP address is used when an administrator must open a web-based management session with a lightweight AP?

Options:

A.

WLCIP

B.

gateway IP

C.

autonomous AP IP

D.

ACS IP

Buy Now
Questions 203

Which AP mode wirelessly connects two separate network segments each set up within a different campus building?

Options:

A.

mesh

B.

local

C.

bridge

D.

point-to-point

Buy Now
Questions 204

200-301 Question 204

Refer to the exhibit. What is the administrative distance for the advertised prefix that includes the host IP address 10.30.0.1?

Options:

A.

10.0.0.2

B.

110

C.

30

D.

2

Buy Now
Questions 205

What is a characteristic of private IPv4 addressing?

Options:

A.

Reduces the forwarding table on network routers

B.

Used on the external interface of a firewall

C.

Used by ISPs when only one IP is needed to connect to the internet

D.

Address space which is isolated from the internet

Buy Now
Questions 206

200-301 Question 206

Refer to the exhibit. Which configuration enables SW2 to establish an LACP EtherChannel?

Options:

A.

200-301 Question 206 Option 1

B.

B. 206

C.

C. 206

D.

D. 206

Buy Now
Questions 207

An engineer must update the configuration on two PCs in two different subnets to communicate locally with each other. One PC is configured with IP address 192.168.25.128/25 and the other with 192.168.25.100/25. Which network mask must the engineer configure on both PCs to enable the communication?

Options:

A.

255.255.255.224

B.

255.255.255.248

C.

255.255.255.0

D.

255.255.255.252

Buy Now
Questions 208

200-301 Question 208

Refer to the exhibit. All routers In the network are configured. R2 must be the DR. After the engineer connected the devices, R1 was elected as the DR. Which command sequence must be configured on R2 to be elected as the DR in the network?

200-301 Question 208

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 209

200-301 Question 209

Refer to the exhibit. A packet sourced from 10.10.10.1 is destined for 172.16.3.254. What is the subnet mask of the destination route?

Options:

A.

0.0.0.0

B.

255.255.254.0

C.

255.255.255.0

D.

255.255.255.255

Buy Now
Questions 210

Which two features are provided by Ansible in network automation? (Choose two.)

Options:

A.

supplying network credentials

B.

role-based access control

C.

agentless deployment

D.

manual playbook runs

E.

launching job templates using version control

Buy Now
Questions 211

200-301 Question 211

Refer to the exhibit. Inter-VLAN routing is configured on SW1. Client A is running Linux as an OS in VLAN 10 with a default gateway IP 10.0.0.1 but cannot ping client B in VLAN 20 running Windows. What action must be taken to verify that client A has the correct IP settings?

Options:

A.

Run the ipconfig command on client A and ensure that the IP address is within the host range of 10.0.0.1 - 10.0.255.254.

B.

Run the ifconfig command on client A to confirm that its IP and subnet mask fall within 255.254.0.0.

C.

Run the ipconfig command on client A to confirm that the correct 10.0.0.1 default gateway is used.

D.

Run the ifconfig command on client A to confirm that the subnet mask is set to 255.255.128.0.

Buy Now
Questions 212

200-301 Question 212

Refer to the exhibit. What is the administrative distance for the advertised prefix that includes the host IP address 192.168.20.1?

Options:

A.

0

B.

192.168.10.2

C.

24

D.

1

Buy Now
Questions 213

Where are the real-time control functions processed in a split MAC architecture?

Options:

A.

Centralized cloud management platform

B.

Central WLC

C.

Individual AP

D.

Client device

Buy Now
Questions 214

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

200-301 Question 214

Options:

Buy Now
Questions 215

Refer to the exhibit.

200-301 Question 215

A router reserved these five routes from different routing information sources.

Which two routes does the router install in its routing table? (Choose two)

Options:

A.

RIP route 10.0.0.0/30

B.

iBGP route 10.0.0.0/30

C.

OSPF route 10.0.0.0/30

D.

EIGRP route 10.0.0.1/32

E.

OSPF route 10.0.0.0/16

Buy Now
Questions 216

200-301 Question 216

Refer to the exhibit.

A network administrator configures an interface control re switch so that it connects to interface Gi1/0/1 on switch Cat9300-1. Which configuration must be applied to the new interface?

A)

200-301 Question 216

B)

200-301 Question 216

C)

200-301 Question 216

D)

200-301 Question 216

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 217

Refer to the exhibit.

200-301 Question 217

A company is configuring a failover plan and must implement the default routes in such a way that a floating static route will assume traffic forwarding when the primary link goes down. Which primary route configuration must be used?

Options:

A.

ip route 0.0.0.0 0.0.0.0 192.168.0.2 GigabitEthernetl/0

B.

ip route 0.0.0.0 0.0.0.0 192.168.0.2 tracked

C.

ip route 0.0.0.0 0.0.0.0 192.168.0.2 floating

D.

ip route 0.0.0.0 0.0.0.0 192.168.0.2

Buy Now
Questions 218

Refer to the exhibit.

200-301 Question 218

A network engineer must configure R1 so that it sends all packets destined to the 10.0.0.0/24 network to R3, and all packets destined to PCI to R2. Which configuration must the engineer implement?

A)

200-301 Question 218

B)

200-301 Question 218

C)

200-301 Question 218

D)

200-301 Question 218

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 219

Refer to the exhibit.

200-301 Question 219

What is represented by "R1" and "SW1" within the JSON output?

Options:

A.

key

B.

array

C.

value

D.

object

Buy Now
Questions 220

Drag and drop the statements about networking from the left onto the corresponding networking types on the right. Not all statements are used.

200-301 Question 220

Options:

Buy Now
Questions 221

An engineer observes high usage on the 2.4GHz channels and lower usage on the 5GHz channels. What must be configured to allow clients to preferentially use 5GHz access points?

Options:

A.

Re-Anchor Roamed Clients

B.

OEAP Split Tunnel

C.

11ac MU-MIMO

D.

Client Band Select

Buy Now
Questions 222

Refer to the exhibit.

200-301 Question 222

Clients on the WLAN are required to use 802.11r. What action must be taken to meet the requirement?

Options:

A.

Under Protected Management Frames, set the PMF option to Required.

B.

Enable CCKM under Authentication Key Management.

C.

Set the Fast Transition option and the WPA gtk-randomize State to disable.

D.

Set the Fast Transition option to Enable and enable FT 802.1X under Authentication Key Management.

Buy Now
Questions 223

Which type of port is used to connect lo the wired network when an autonomous AP maps two VLANs to its WLANs?

Options:

A.

LAG

B.

EtherChannel

C.

trunk

D.

access

Buy Now
Questions 224

200-301 Question 224

Refer to the exhibit. An engineer is asked to confère router R1 so that it forms an OSPF single-area neighbor relationship with R2. Which command sequence must be implemented to configure the router?

200-301 Question 224

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 225

What is a link-local all-nodes IPv6 multicast address?

Options:

A.

ff02:0:0:0:0:0:0:1

B.

2004:31c:73d9:683e:255::

C.

fffe:034:0dd:45d6:789e::

D.

fe80:4433:034:0dd::2

Buy Now
Questions 226

Refer to the exhibit.

200-301 Question 226

Which two commands must be configured on router R1 to enable the router to accept secure remote-access connections? (Choose two)

Options:

A.

transport input telnet

B.

crypto key generate rsa

C.

ip ssh pubkey-chain

D.

login console

E.

username cisco password 0 Cisco

Buy Now
Questions 227

Which characteristic differentiates the concept of authentication from authorization and accounting?

Options:

A.

user-activity logging

B.

service limitations

C.

consumption-based billing

D.

identity verification

Buy Now
Questions 228

Refer to the exhibit.

200-301 Question 228

Which minimum configuration items are needed to enable Secure Shell version 2 access to R15?

A)

200-301 Question 228

B)

200-301 Question 228

C)

200-301 Question 228

D)

200-301 Question 228

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 229

A router has two static routes to the same destination network under the same OSPF process. How does the router forward packets to the destination if the next-hop devices are different?

Options:

A.

The router chooses the route with the oldest age.

B.

The router load-balances traffic over all routes to the destination.

C.

The router chooses the next hop with the lowest MAC address.

D.

The router chooses the next hop with the lowest IP address.

Buy Now
Questions 230

Which protocol is used in Software Defined Access (SDA) to provide a tunnel between two edge nodes in different fabrics?

Options:

A.

Generic Router Encapsulation (GRE)

B.

Virtual Local Area Network (VLAN)

C.

Virtual Extensible LAN (VXLAN)

D.

Point-to-Point Protocol

Buy Now
Questions 231

200-301 Question 231

Refer to the exhibit. An engineer is building a new Layer 2 LACP EtherChannel between SW1 and SW2. and they executed the given show commands to verify the work Which additional task must be performed so that the switches successfully bundle the second member in the LACP port-channel?

Options:

A.

Configure the switchport trunk allowed vlan 300 command on SW1 port-channel 1

B.

Configure the switchport trunk allowed vlan 300 command on interface Fa0/2 on SW1.

C.

Configure the switchport trunk allowtd vlan add 300 command on interface FaO 2 on SW2.

D.

Configure the switchport trunk allowtd vlan add 300 command on SW1 port-channel 1

Buy Now
Questions 232

Refer to the exhibit.

200-301 Question 232

What does route 10.0.1.3/32 represent in the routing table?

Options:

A.

a single destination address

B.

the source 10.0.1.100

C.

all hosts in the 10.0.1.0 subnet

D.

the 10.0.0.0 network

Buy Now
Questions 233

Drag and drop the statements about networking from the left onto the corresponding networking types on the right

200-301 Question 233

Options:

Buy Now
Questions 234

What is the effect when loopback interfaces and the configured router ID are absent during the OSPF Process configuration?

Options:

A.

No router ID is set, and the OSPF protocol does not run.

B.

The highest up/up physical interface IP address is selected as the router ID.

C.

The lowest IP address is incremented by 1 and selected as the router ID.

D.

The router ID 0.0.0.0 is selected and placed in the OSPF process.

Buy Now
Questions 235

Refer to the exhibit.

200-301 Question 235

All interfaces are in the same VLAN. All switches are configured with the default STP priorities. During the STP electronics, which switch becomes the root bridge?

Options:

A.

MDF-DC-4:08:E0:19: 08:B3:19

B.

MDF-DC-3:08:0E:18::1A:3C:9D

C.

MDF-DC-08:0E:18:22:05:97

D.

MDF-DC-1:DB:E:44:02:54:79

Buy Now
Questions 236

What does the implementation of a first-hop redundancy protocol protect against on a network?

Options:

A.

root-bridge loss

B.

spanning-tree loops

C.

default gateway failure

D.

BGP neighbor flapping

Buy Now
Questions 237

Which command enables HTTP access to the Cisco WLC?

Options:

A.

config network secureweb enable

B.

config certificate generate web admin

C.

config network webmode enable

D.

config network telnet enable

Buy Now
Questions 238

Which IPsec mode encapsulates the entire IP packet?

Options:

A.

tunnel

B.

Q-in-Q

C.

SSL VPN

D.

transport

Buy Now
Questions 239

How is a configuration change made to a wireless AP in lightweight mode?

Options:

A.

SSH connection to the management IP of the AP

B.

EolP connection via the parent WLC

C.

CAPWAP/LWAPP connection via the parent WLC

D.

HTTPS connection directly to the out-of-band address of the AP

Buy Now
Questions 240

Company has decided to require multifactor authentication for all systems. Which set of parameters meets the requirement?

Options:

A.

personal 10-digit PIN and RSA certificate

B.

complex password and personal 10-digit PIN

C.

password of 8 to 15 characters and personal 12-digit PIN

D.

fingerprint scanning and facial recognition

Buy Now
Questions 241

What are two reasons to implement DHCP in a network? (Choose two.)

Options:

A.

reduce administration time in managing IP address ranges for clients

B.

control the length of time an IP address is used by a network device

C.

manually control and configure IP addresses on network devices

D.

dynamic control over the best path to reach an IP address

E.

access a website by name instead of by IP address

Buy Now
Questions 242

What are two protocols within the IPsec suite? (Choose two)

Options:

A.

AH

B.

3DES

C.

ESP

D.

TLS

E.

AES

Buy Now
Questions 243

What is a characteristic of RSA?

Options:

A.

It uses preshared keys for encryption

B.

It requires both sides to have identical keys

C.

It is a private-key encryption algorithm

D.

It is a public-key cryptosystem

Buy Now
Questions 244

A switch is a forwarding a frame out of an interfaces except the interface that received the frame. What is the technical term for this process?

Options:

A.

ARP

B.

CDP

C.

flooding

D.

multicast

Buy Now
Questions 245

Drag and drop the steps in a standard DNS lookup operation from the left into the order on the right.

200-301 Question 245

Options:

Buy Now
Questions 246

200-301 Question 246

Refer to the exhibit. How should the configuration be updated to allow PC1 and PC2 access to the Internet?

Options:

A.

Change the ip nat inside source command to use interface GigabitEthernet0/0.

B.

Remove the overload keyword from the ip nat inside source command.

C.

Modify the configured number of the second access list.

D.

Add the ip nat inside and ip nat outside commands under both interfaces.

Buy Now
Questions 247

Which type of DNS record is used to specify the mail server responsible for accepting email messages on behalf of a recipient's domain?

Options:

A.

MX record

B.

TXT record

C.

A record

D.

SRV record

Buy Now
Questions 248

Drag and drop each characteristic of device-management technologies from the left onto the deployment type on the right.

200-301 Question 248

Options:

Buy Now
Questions 249

What are two protocols within the IPsec suite? (Choose two)

Options:

A.

AH

B.

3DES

C.

ESP

D.

TLS

E.

AES

Buy Now
Questions 250

What is a zero-day exploit?

Options:

A.

It is when a new network vulnerability is discovered before a fix is available

B.

It is when the perpetrator inserts itself in a conversation between two parties and captures or alters data.

C.

It is when the network is saturated with malicious traffic that overloads resources and bandwidth

D.

It is when an attacker inserts malicious code into a SOL server.

Buy Now
Questions 251

200-301 Question 251

Refer to the exhibit. A network engineer is configuring a WLAN to use a WPA2 PSK and allow only specific clients to join. Which two actions must be taken to complete the process? (Choose two.)

Options:

A.

Enable the 802.1X option for Authentication Key Management

B.

Enable the WPA2 Policy option

C.

Enable the CCKM option for Authentication Key Management

D.

Enable the MAC Filtering option

E.

Enable the OSEN Policy option

Buy Now
Questions 252

200-301 Question 252

Options:

Buy Now
Questions 253

Refer to the exhibit.

200-301 Question 253

What are two conclusions about this configuration? {Choose two.)

Options:

A.

The spanning-tree mode is Rapid PVST+.

B.

This is a root bridge.

C.

The root port is FastEthernet 2/1.

D.

The designated port is FastEthernet 2/1.

E.

The spanning-tree mode is PVST+.

Buy Now
Questions 254

Refer to the exhibit.

200-301 Question 254

A network engineer executes the show ip route command on router D. What is the next hop to network 192.168 1 0/24 and why?

Options:

A.

The next hop is 10.0.2.1 because it uses distance vector routing

B.

The next hop is 10.0.2.1 because it is a link-state routing protocol

C.

The next hop is 10.0.0.1 because it has a better administrative distance

D.

The next hop is 10.0.0.1 because it has a higher metric.

Buy Now
Questions 255

Which type of address is shared by routers in a HSRP implementation and used by hosts on the subnet as their default gateway address?

Options:

A.

multicast address

B.

loopback IP address

C.

virtual IP address

D.

broadcast address

Buy Now
Questions 256

Why implement VRRP?

Options:

A.

to provide end users with a virtual gateway in a multivendor network

B.

to leverage a weighting scheme to provide uninterrupted service

C.

to detect link failures without the overhead of Bidirectional Forwarding Detection

D.

to hand over to end users the autodiscovery of virtual gateways

Buy Now
Questions 257

Which command configures the Cisco WLC to prevent a serial session with the WLC CLI from being automatical togged out?

Options:

A.

config sessions maxsessions 0

B.

config sessions timeout 0

C.

config serial timeout 0

D.

config serial timeout 9600

Buy Now
Questions 258

What are two reasons lo configure PortFast on a switch port attached to an end host? (Choose two.)

Options:

A.

to enable the number of MAC addresses learned on the port to l

B.

to protect the operation of the port from topology change processes

C.

to enable the pod to enter the forwarding state immediately when the host boots up

D.

to prevent the port from participating in Spanning Tree Protocol operations

E.

to block another switch or host from communicating through the port

Buy Now
Questions 259

A network engineer is upgrading a small data center to host several new applications, including server backups that are expected to account for up to 90% of the bandwidth during peak times. The data center connects to the MPLS network provider via a primary circuit and a secondary circuit. How does the engineer inexpensively update the data center to avoid saturation of the primary circuit by traffic associated with the backups?

Options:

A.

Assign traffic from the backup servers to a dedicated switch.

B.

Configure a dedicated circuit for the backup traffic.

C.

Place the backup servers in a dedicated VLAN.

D.

Advertise a more specific route for the backup traffic via the secondary circuit.

Buy Now
Questions 260

What is the purpose of using First Hop Redundancy Protocol on a specific subnet?

Options:

A.

ensures a loop-free physical topology

B.

filters traffic based on destination IP addressing

C.

sends the default route to the hosts on a network

D.

forwards multicast hello messages between routers

Buy Now
Questions 261

Which architecture is best for small offices with minimal wireless needs and no central management?

Options:

A.

cloud-based AP

B.

split MAC

C.

autonomous AP

D.

mesh network

Buy Now
Questions 262

Refer to the exhibit.

200-301 Question 262

Clients on the WLAN are required to use 802.11r. What action must be taken to meet the requirement?

Options:

A.

Under Protected Management Frames, set the PMF option to Required.

B.

Enable CCKM under Authentication Key Management.

C.

Set the Fast Transition option and the WPA gtk-randomize State to disable.

D.

Set the Fast Transition option to Enable and enable FT 802.1X under Authentication Key Management.

Buy Now
Questions 263

What must be considered for a locally switched FlexConnect AP if the VLANs that are used by the AP and client access are different?

Options:

A.

The APs must be connected to the switch with multiple links in LAG mode

B.

The switch port mode must be set to trunk

C.

The native VLAN must match the management VLAN of the AP

D.

IEEE 802.10 trunking must be disabled on the switch port.

Buy Now
Questions 264

A network architect planning a new Wi-Fi network must decide between autonomous, cloud-based, and split MAC architectures. Which two facts should the architect consider? (Choose two.)

Options:

A.

Lightweight access points are solely used by split MAC architectures.

B.

Cloud-based architectures uniquely use the CAPWAP protocol to communicate between access points and clients.

C.

Each of the three architectures must use WLCs to manage their access points.

D.

All three architectures use access points to manage the wireless devices connected to the wired infrastructure.

E.

Autonomous architectures exclusively use tunneling protocols to manage access points remotely.

Buy Now
Questions 265

What are two facts that differentiate optical fiber cabling from copper cabling? (Choose two.)

Options:

A.

It has a greater sensitivity to changes in temperature and moisture.

B.

It carries signals for longer distances.

C.

It carries electrical current further distances for PoE devices.

D.

It is less expensive when purchasing patch cables.

E.

It provides greater throughput options.

Buy Now
Questions 266

200-301 Question 266

200-301 Question 266

Connectivity between three routers has been established, and IP services must be configured jn the order presented to complete the implementation Tasks assigned include configuration of NAT, NTP, DHCP, and SSH services.

1. All traffic sent from R3 to the R1 Loopback address must be configured for NAT on R2. All source addresses must be translated from R3 to the IP address of Ethernet0/0 on R2, while using only a standard access list named NAT To verify, a ping must be successful to the R1 Loopback address sourced from R3. Do not use NVI NAT configuration.

2. Configure R1 as an NTP server and R2 as a client, not as a peer, using the IP address of the R1 Ethernet0/2 interface. Set the clock on the NTP server for midnight on January 1, 2019.

3. Configure R1 as a DHCP server for the network 10.1.3.0/24 in a pool named TEST. Using a single command, exclude addresses 1-10 from the range. Interface Ethernet0/2 on R3 must be issued the IP address of 10.1.3.11 via DHCP.

4. Configure SSH connectivity from R1 to R3, while excluding access via other remote connection protocols. Access for user root and password Cisco must be set on router R3 using RSA and 1024 bits. Verify connectivity using an SSH session from router R1 using a destination address of 10.1.3.11. Do NOT modify console access or line numbers to accomplish this task.

Options:

Buy Now
Questions 267

Refer to the exhibit.

200-301 Question 267

The New York router is configured with static routes pointing to the Atlanta and Washington sites. Which two tasks must be performed so that the Serial0/0/0 interfaces on the Atlanta and Washington routers can reach one another?

(Choose two.)

Options:

A.

Configure the ipv6 route 2012::/126 2023::1 command on the Washington router.

B.

Configure the ipv6 route 2023::/126 2012::1 command on the Atlanta router.

C.

Configure the Ipv6 route 2012::/126 s0/0/0 command on the Atlanta router.

D.

Configure the ipv6 route 2023::/126 2012::2 command on the Atlanta router.

E.

Configure the ipv6 route 2012::/126 2023::2 command on the Washington router.

Buy Now
Questions 268

Which function is performed by DHCP snooping?

Options:

A.

propagates VLAN information between switches

B.

listens to multicast traffic for packet forwarding

C.

provides DDoS mitigation

D.

rate-limits certain traffic

Buy Now
Questions 269

Using direct sequence spread spectrum, which three 2.4-GHz channels are used to limit collisions?

Options:

A.

1,6,11

B.

1,5,10

C.

1,2,3

D.

5,6,7

Buy Now
Questions 270

What is represented by the word "switch" within this JSON schema?

200-301 Question 270

Options:

A.

array

B.

value

C.

key

D.

object

Buy Now
Questions 271

200-301 Question 271

Refer to the exhibit. During initial configuration testing, the Windows workstation PC1 cannot connect with the 172.16.2.0/24 network.

Which set of actions corrects the configuration?

Options:

A.

Change the IP address to 172.16.1.6 and change the subnet mask to 255.255.255.248.

B.

Change the IP address to 172.16.1.6 and change the DNS servers to 172.16.1.12 and 172.16.1.13.

C.

Change the IP address to 172.16.1.9 and change the default gateway to 172.16.1.7.

D.

Change the IP address to 172.16.1.9 and change the DNS server to 172.16.1.12 only.

Buy Now
Questions 272

What differentiates the TCP and UDP protocols?

Options:

A.

TCP tracks segments being transmitted or received by assigning segment numbers, and UDP adjusts data flow according to network conditions.

B.

TCP establishes a connection with the device on the other end before transferring, and UDP transfers without establishing a connection.

C.

TCP sends data at a constant rate with error checking on upper protocol layers, and UDP provides error-checking and sequencing.

D.

TCP immediately transmits data without waiting for a handshake, and UDP awaits a response from the receiver before sending additional data.

Buy Now
Questions 273

What is the main capability of multifactor authentication?

Options:

A.

Identifying permissions for end users using three authentication factors

B.

Authenticating and authorizing end users using two authentication factors

C.

Confirming end-user identity using two or more authentication factors

D.

Verifying end-user access permissions using two authentication factors

Buy Now
Questions 274

In which way does generative AI aid network simulations?

Options:

Buy Now
Questions 275

200-301 Question 275

All physical cabling between the two switches is installed. Configure the network connectivity between the switches using the designated VLANs and interfaces.

1. Configure VLAN 100 named Compute and VLAN 200 named Telephony where required for each task.

2. Configure Ethernet0/1 on SW2 to use the existing VLAN named Available.

3. Configure the connection between the switches using access ports.

4. Configure Ethernet0/1 on SW1 using data and voice VLANs.

5. Configure Ethemet0/1 on SW2 so that the Cisco proprietary neighbor discovery protocol is turned off for the designated interface only.

200-301 Question 275

Options:

Buy Now
Questions 276

How does MAC learning function?

Options:

A.

Enabled by default on all VLANs and interfaces

B.

Forwards frames to a neighbor port using CDP

C.

Overwrites the known source MAC address in the address table

D.

Protects against denial of service attacks

Buy Now
Questions 277

A new DHCP server has been deployed in a corporate environment with lease time set to eight hours. Which CMD command on a Windows-based device allows the engineer to verify the DHCP lease expiration?

Options:

A.

ipconfig /renew

B.

ipconfig

C.

ipconfig /all

D.

ipconfig /displaydns

Buy Now
Questions 278

Which two capabilities of Cisco DNA Center make it more extensible as compared to traditional campus device management? (Choose two.)

Options:

A.

REST APIs that allow for external applications to interact natively

B.

adapters that support all families of Cisco IOS software

C.

SDKs that support interaction with third-party network equipment

D.

customized versions for small, medium, and large enterprises

E.

modular design that is upgradable as needed

Buy Now
Questions 279

200-301 Question 279

Refer to the exhibit. A secondary route is required on router R1 to pass traffic to the LAN network on R2 if the primary link fails. Which command must be entered to configure the router?

Options:

A.

ip route 10.0.2.0 255.255.255.240 10.0.0.7 92

B.

ip route 10.0.2.0 255.255.255.248 10.0.0.6 91

C.

ip route 10.0.2.0 256.255.255.240 10.0.0.6 91

D.

ip route 10.0.2.0 255.255.255.248 null0 93

Buy Now
Questions 280

200-301 Question 280

Refer to the exhibit. What is preventing host A from reaching the internet?

Options:

A.

The domain name server is unreachable.

B.

LAN and WAN network segments are different.

C.

IP address assignment is incorrect.

D.

The default gateway should be the first usable IP address.

Buy Now
Questions 281

Which two practices are recommended for an acceptable security posture in a network? (Choose two)

Options:

A.

Backup device configurations to encrypted USB drives for secure retrieval

B.

maintain network equipment in a secure location

C.

Use a cryptographic keychain to authenticate to network devices

D.

Place internal email and file servers in a designated DMZ

E.

Disable unused or unnecessary ports, interfaces and services

Buy Now
Questions 282

What is represented by the word "LB13" within this JSON schema?

200-301 Question 282

Options:

A.

value

B.

object

C.

array

D.

key

Buy Now
Questions 283

200-301 Question 283

Refer to the exhibit. A network engineer updates the existing configuration on interface fastethernet1/1 switch SW1. It must establish an EtherChannel by using the same group designation with another vendor switch. Which configuration must be performed to complete the process?

Options:

A.

interface port-channel 2channel-group 2 mode desirable

B.

interface fasteinernet 1/1channel-group 2 mode active

C.

interface fasteinernet 1/1channel-group 2 mode on

D.

interface port-channel 2channel-group 2 mode auto

Buy Now
Questions 284

Which function does an SNMP agent perform?

Options:

A.

it sends information about MIB variables in response to requests from the NMS

B.

it requests information from remote network nodes about catastrophic system events.

C.

it manages routing between Layer 3 devices in a network

D.

it coordinates user authentication between a network device and a TACACS+ or RADIUS server

Buy Now
Questions 285

How does network automation help reduce network downtime?

Options:

A.

Changes can be implemented in parallel across multiple devices at once, which increases the speed of the change rate.

B.

By using automation platforms with intent-based configuration, all changes are checked for possible outages before being implemented.

C.

Emails can be generated based on when a network admin performs a network change, which increases visibility.

D.

Configuration templates and testing can be built into implementation, which increases the success rate of a network change.

Buy Now
Questions 286

Refer to the exhibit.

200-301 Question 286

To which device does Router1 send packets that are destined to host 10.10.13.165?

Options:

A.

Router2

B.

Router3

C.

Router4

D.

Router5

Buy Now
Questions 287

Drag and drop the IPv6 address types from the left onto their description on the right.

200-301 Question 287

Options:

Buy Now
Questions 288

Which CRUD operation corresponds to me HTTP GET method?

Options:

A.

delete

B.

create

C.

update

D.

read

Buy Now
Questions 289

Drag and drop the IPv6 addresses from the left onto the corresponding address types on the right.

200-301 Question 289

Options:

Buy Now
Questions 290

What is the operating mode and role of a backup port on a shared LAN segment in Rapid PVST+?

Options:

A.

forwarding mode and provides the lowest-cost path to the root bridge for each VLAN

B.

learning mode and provides the shortest path toward the root bridge handling traffic away from the LAN

C.

blocking mode and provides an alternate path toward the designated bridge

D.

listening mode and provides an alternate path toward the root bridge

Buy Now
Questions 291

Which command implies the use of SNMPv3?

Options:

A.

snmp-server host

B.

snmp-server community

C.

snmp-server enable traps

D.

snmp-server user

Buy Now
Questions 292

What is the operating mode and role of a backup port on a shared LAN segment in Rapid PVST+?

Options:

A.

forwarding mode and provides the lowest-cost path to the root bridge for each VLAN

B.

learning mode and provides the shortest path toward the root bridge handling traffic away from the LAN

C.

blocking mode and provides an alternate path toward the designated bridge

D.

listening mode and provides an alternate path toward the root bridge

Buy Now
Questions 293

When deploying syslog, which severity level logs informational message?

Options:

A.

0

B.

2

C.

4

D.

6

Buy Now
Questions 294

Why would a network administrator implement the HSRP protocol?

Options:

A.

To provide network redundancy in the case of a router failure

B.

To use an open standard protocol that is configured on Cisco and third-party routers

C.

To allow hosts in a network to use the same default gateway virtual IP when load-balancing traffic

D.

To allow clients to be configured with multiple default gateway IPs

Buy Now
Questions 295

What is the maximum length of characters used in an SSID?

Options:

A.

16

B.

32

C.

48

D.

64

Buy Now
Questions 296

What is the difference between the TCP and UDP protocols?

Options:

A.

TCP ensures ordered, reliable data delivery, and UDP offers low latency and high throughput.

B.

TCP is used for transmitting data over the internet, and UDP is used for transmitting data over a local network.

C.

TCP manages multicast and broadcast data transfers, and UDP only handles unicast communications.

D.

TCP is used to ensure data integrity in a file transfer, and UDP is used to broadcast a message to multiple recipients.

Buy Now
Questions 297

Configure IPv4 and IPv6 connectivity between two routers. For IPv4, use a /28 network from the 192.168.1.0/24 private range. For IPv6, use the first /64 subnet from the 2001:0db8:aaaa::/48 subnet.

1. Using Ethernet0/1 on routers R1 and R2, configure the next usable/28 from the 192.168.1.0/24 range. The network 192.168.1.0/28 is unavailable.

2. For the IPv4 /28 subnet, router R1 must be configured with the first usable host address.

3. For the IPv4 /28 subnet, router R2 must be configured with the last usable host address.

4. For the IPv6 /64 subnet, configure the routers with the IP addressing provided from the topology.

5. A ping must work between the routers on the IPv4 and IPv6 address ranges.

200-301 Question 297 200-301 Question 297

Options:

Buy Now
Questions 298

Which type of IPv4 address type helps to conserve the globally unique address classes?

Options:

A.

multicast

B.

private

C.

loopback

D.

public

Buy Now
Questions 299

Which interface is used to send traffic to the destination network?

O 10.18.75.113/27 [110/6906] via GO/6

O 10.18.75.113/27 [110/23018] via GO/3

R 10.18.75.113/27 [120/16] via GO/16

R 10.18.75.113/27 [120/14] via GO/23

Options:

A.

G0/23

B.

G0/3

C.

G0/16

D.

G0/6

Buy Now
Questions 300

Which technology can prevent client devices from arbitrarily connecting to the network without state remediation?

Options:

A.

802.1x

B.

IP Source Guard

C.

MAC Authentication Bypass

D.

802.11n

Buy Now
Questions 301

A user configured OSPF and advertised the Gigabit Ethernet interface in OSPF By default, which type of OSPF network does this interface belong to?

Options:

A.

point-to-multipoint

B.

point-to-point

C.

broadcast

D.

nonbroadcast

Buy Now
Questions 302

What are two descriptions of three-tier network topologies? (Choose two)

Options:

A.

The core and distribution layers perform the same functions

B.

The access layer manages routing between devices in different domains

C.

The network core is designed to maintain continuous connectivity when devices fail.

D.

The core layer maintains wired connections for each host

E.

The distribution layer runs Layer 2 and Layer 3 technologies

Buy Now
Questions 303

Refer to the exhibit.

200-301 Question 303

Shortly after SiteA was connected to SiteB over a new single-mode fiber path users at SiteA report intermittent connectivity issues with applications hosted at SiteB What is the cause of the intermittent connectivity issue?

Options:

A.

Interface errors are incrementing

B.

An incorrect SFP media type was used at SiteA

C.

High usage is causing high latency

D.

The sites were connected with the wrong cable type

Buy Now
Questions 304

Drag and drop the AAA terms from the left onto the description on the right.

200-301 Question 304

Options:

Buy Now
Questions 305

How does the dynamically-learned MAC address feature function?

Options:

A.

The CAM table is empty until ingress traffic arrives at each port

B.

Switches dynamically learn MAC addresses of each connecting CAM table.

C.

The ports are restricted and learn up to a maximum of 10 dynamically-learned addresses

D.

It requires a minimum number of secure MAC addresses to be filled dynamically

Buy Now
Questions 306

What is the purpose of an SSID?

Options:

A.

It provides network security

B.

It differentiates traffic entering access posits

C.

It identities an individual access point on a WLAN

D.

It identifies a WLAN

Buy Now
Questions 307

Refer to the exhibit.

200-301 Question 307

The Router1 routing table has multiple methods to reach 10.10.10.0/24 as shown. The default Administrative Distance is used. Drag and drop the network conditions from the left onto the routing methods that Router1 uses on the right.

200-301 Question 307

Options:

Buy Now
Questions 308

Refer to the exhibit.

200-301 Question 308

A network engineer is configuring a WLAN to connect with the 172.16.10.0/24 network on VLAN 20. The engineer wants to limit the number of devices that connect to the WLAN on the USERWL SSID to 125. Which configuration must the engineer perform on the WLC?

Options:

A.

In the Management Software activation configuration, set the Clients value to 125.

B.

In the Controller IPv6 configuration, set the Throttle value to 125.

C.

In the WLAN configuration, set the Maximum Allowed Clients value to 125.

D.

In the Advanced configuration, set the DTIM value to 125.

Buy Now
Questions 309

Refer to the exhibit.

200-301 Question 309

A network engineer configures the Cisco WLC to authenticate local wireless clients against a RADIUS server Which task must be performed to complete the process?

Options:

A.

Change the Server Status to Disabled

B.

Select Enable next to Management

C.

Select Enable next to Network User

D.

Change the Support for CoA to Enabled.

Buy Now
Questions 310

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

200-301 Question 310

Options:

Buy Now
Questions 311

Which interface or port on the WLC is the default for in-band device administration and communications between the controller and access points?

Options:

A.

virtual interface

B.

management interface

C.

console port

D.

service port

Buy Now
Questions 312

Why choose Cisco DNA Center for automated lifecycle management?

Options:

A.

To perform upgrades without service interruption

B.

To provide fast and accurate deployment of patches and updates

C.

To allow SSH access to all nodes in the network.

D.

To provide software redundancy in the network.

Buy Now
Questions 313

What is a function of an endpoint?

Options:

A.

It is used directly by an individual user to access network services

B.

It passes unicast communication between hosts in a network

C.

It transmits broadcast traffic between devices in the same VLAN

D.

It provides security between trusted and untrusted sections of the network.

Buy Now
Questions 314

200-301 Question 314

Refer to the exhibit. R1 has taken the DROTHER role in the OSPF DR/BDR election process. Which configuration must an engineer implement so that R1 is elected as the DR?

Options:

A.

R1(config)#interface FastEthernet 0/0R1(config-if)#ip ospf priority 1R1#clear ip ospf process

B.

R2(config)#interface FastEthernet 0/2R2(config-if)#ip ospf priority 1R2#clear ip ospf process

C.

R1(config)#interface FastEthernet 0/0R1(config-if)#ip ospf priority 200R1#clear ip ospf process

D.

R3(config)#interface FastEthernet 0/1R3(config-if)#ip ospf priority 200R3#clear ip ospf process

Buy Now
Questions 315

Drag and drop the management connection types from the left onto the definitions on the right.

200-301 Question 315

Options:

Buy Now
Questions 316

Refer to the exhibit.

200-301 Question 316

What is the prefix length for the route that Router1 will use to reach Host A?

Options:

A.

/25

B.

/27

C.

/28

D.

/29

Buy Now
Questions 317

An engineer must configure a core router with a floating static default route to the backup router at 10.200.0.2. Which command meets the requirements?

Options:

A.

ip route 0.0.0.0 0.0.0.0 10.200.0.2 1

B.

Ip route 0.0.0.0 0.0.0.0 10.200.0.2 floating

C.

ip route 0.0.0.0 0.0.0.0 10.200.0.2

D.

Ip route 0.0.0.0 0.0.0.0 10.200.0.2 10

Buy Now
Questions 318

Which configuration management mechanism uses TCP port 22 by default when communicating with managed nodes?

Options:

A.

Ansible

B.

Python

C.

Puppet

D.

Chef

Buy Now
Questions 319

How does encryption project the wireless network?

Options:

A.

via integrity checks to identify wireless forgery attacks in the frame

B.

via specific ciphers to detect and prevent zero-day network attacks

C.

via an algorithm to change wireless data so that only the access point and client understand it

D.

via a policy to prevent unauthorized users from communicating on the wireless network

Buy Now
Questions 320

Refer to the exhibit.

200-301 Question 320

What is the subnet mask of the route to the 10.10.13.160 prefix?

Options:

A.

255.255.255.240

B.

255.255.255.128

C.

255.255.248.

D.

255.255.255.248

Buy Now
Questions 321

Which set of methods is supported with the REST API?

Options:

A.

GET, POST, MOD, ERASE

B.

GET, POST, ERASE, CHANGE

C.

GET, PUT, POST, DELETE

D.

GET, PUT, ERASE, CHANGE

Buy Now
Questions 322

R1 has learned route 10.10.10.0/24 via numerous routing protocols. Which route is installed?

Options:

A.

route with the lowest cost

B.

route with the next hop that has the highest IP

C.

route with the shortest prefix length

D.

route with the lowest administrative distance

Buy Now
Questions 323

which IPv6 address block forwards packets to a multicast address rather than a unicast address?

Options:

A.

2000::/3

B.

FC00::/7

C.

FE80::/10

D.

FF00::/12

Buy Now
Questions 324

Why does a switch flood a frame to all ports?

Options:

A.

The frame has zero destination MAC addresses.

B.

The source MAC address of the frame is unknown

C.

The source and destination MAC addresses of the frame are the same

D.

The destination MAC address of the frame is unknown.

Buy Now
Questions 325

A network administrator needs to aggregate 4 ports into a single logical link which must negotiate layer 2 connectivity to ports on another switch. What must be configured when using active mode on both sides of the connection?

Options:

A.

802.1q trunks

B.

Cisco vPC

C.

LLDP

D.

LACP

Buy Now
Questions 326

What are two benefits of FHRPs? (Choose two.)

Options:

A.

They prevent (oops in the Layer 2 network.

B.

They allow encrypted traffic.

C.

They are able to bundle muftlple ports to increase bandwidth

D.

They enable automatic failover of the default gateway.

E.

They allow multiple devices lo serve as a single virtual gateway for clients in the network

Buy Now
Questions 327

What are two differences between optical-fiber cabling and copper cabling? (Choose two)

Options:

A.

Light is transmitted through the core of the fiber

B.

A BNC connector is used for fiber connections

C.

The glass core component is encased in a cladding

D.

Fiber connects to physical interfaces using Rj-45 connections

E.

The data can pass through the cladding

Buy Now
Questions 328

Which 802.11 frame type is indicated by a probe response after a client sends a probe request?

Options:

A.

action

B.

management

C.

control

D.

data

Buy Now
Questions 329

What are two benefits of network automation? (Choose two)

Options:

A.

reduced operational costs

B.

reduced hardware footprint

C.

faster changes with more reliable results

D.

fewer network failures

E.

increased network security

Buy Now
Questions 330

A network engineer must configure the router R1 GigabitEthernet1/1 interface to connect to the router R2 GigabitEthernet1/1 interface. For the configuration to be applied the engineer must compress the address 2001:0db8:0000:0000:0500:000a:400F:583B. Which command must be issued on the interface?

Options:

A.

ipv6 address 2001:0db8::5: a: 4F 583B

B.

ipv6 address 2001:db8::500:a:400F:583B

C.

ipv6 address 2001 db8:0::500:a:4F:583B

D.

ipv6 address 2001::db8:0000::500:a:400F:583B

Buy Now
Questions 331

Refer to the exhibit.

200-301 Question 331

If configuring a static default route on the router with the ip route 0.0.0.0 0.0.0.0 10.13.0.1 120 command how does the router respond?

Options:

A.

It ignores the new static route until the existing OSPF default route is removed

B.

It immediately replaces the existing OSPF route in the routing table with the newly configured static route

C.

It starts load-balancing traffic between the two default routes

D.

It starts sending traffic without a specific matching entry in the routing table to GigabitEthernet0/1

Buy Now
Questions 332

An engineer configures interface Gi1/0 on the company PE router to connect to an ISP Neighbor discovery is disabled

200-301 Question 332

Which action is necessary to complete the configuration if the ISP uses third-party network devices?

Options:

A.

Enable LLDP globally

B.

Disable autonegotiation

C.

Disable Cisco Discovery Protocol on the interface

D.

Enable LLDP-MED on the ISP device

Buy Now
Questions 333

Refer to the exhibit.

200-301 Question 333

An engineer is required to verify that the network parameters are valid for the users wireless LAN connectivity on a /24 subnet. Drag and drop the values from the left onto the network parameters on the right. Not all values are used.

200-301 Question 333

Options:

Buy Now
Questions 334

Refer to Exhibit.

200-301 Question 334

Which action do the switches take on the trunk link?

Options:

A.

The trunk does not form and the ports go into an err-disabled status.

B.

The trunk forms but the mismatched native VLANs are merged into a single broadcast domain.

C.

The trunk does not form, but VLAN 99 and VLAN 999 are allowed to traverse the link.

D.

The trunk forms but VLAN 99 and VLAN 999 are in a shutdown state.

Buy Now
Questions 335

What is the primary function of a Layer 3 device?

Options:

A.

to analyze traffic and drop unauthorized traffic from the Internet

B.

to transmit wireless traffic between hosts

C.

to pass traffic between different networks

D.

forward traffic within the same broadcast domain

Buy Now
Questions 336

Refer to the exhibit.

200-301 Question 336

The show ip ospf interface command has been executed on R1 How is OSPF configured?

Options:

A.

The interface is not participating in OSPF

B.

A point-to-point network type is configured

C.

The default Hello and Dead timers are in use

D.

There are six OSPF neighbors on this interface

Buy Now
Questions 337

Refer to the exhibit.

200-301 Question 337

Which route type is configured to reach the internet?

Options:

A.

host route

B.

default route

C.

floating static route

D.

network route

Buy Now
Questions 338

Refer to the exhibit.

200-301 Question 338

An engineer is tasked with verifying network configuration parameters on a client workstation to report back to the team lead. Drag and drop the node identifiers from the left onto the network parameters on the right.

200-301 Question 338

Options:

Buy Now
Questions 339

Which goal is achieved by the implementation of private IPv4 addressing on a network?

Options:

A.

provides an added level of protection against Internet exposure

B.

provides a reduction in size of the forwarding table on network routers

C.

allows communication across the Internet to other private networks

D.

allows servers and workstations to communicate across public network boundaries

Buy Now
Questions 340

Which statement correctly compares traditional networks and controller-based networks?

Options:

A.

Only traditional networks offer a centralized control plane

B.

Only traditional networks natively support centralized management

C.

Traditional and controller-based networks abstract policies from device configurations

D.

Only controller-based networks decouple the control plane and the data plane

Buy Now
Questions 341

What is a function of TFTP in network operations?

Options:

A.

transfers a backup configuration file from a server to a switch using a username and password

B.

transfers files between file systems on a router

C.

transfers a configuration files from a server to a router on a congested link

D.

transfers IOS images from a server to a router for firmware upgrades

Buy Now
Questions 342

Refer to the exhibit.

200-301 Question 342

Between which zones do wireless users expect to experience intermittent connectivity?

Options:

A.

between zones 1 and 2

B.

between zones 2 and 5

C.

between zones 3 and 4

D.

between zones 3 and 6

Buy Now
Questions 343

What are two recommendations for protecting network ports from being exploited when located in an office space outside of an IT closer? (Choose two.)

Options:

A.

enable the PortFast feature on ports

B.

implement port-based authentication

C.

configure static ARP entries

D.

configure ports to a fixed speed

E.

shut down unused ports

Buy Now
Questions 344

Which protocol requires authentication to transfer a backup configuration file from a router to a remote server?

Options:

A.

DTP

B.

FTP

C.

SMTP

D.

TFTP

Buy Now
Questions 345

Refer to the exhibit.

200-301 Question 345

A network engineer must block access for all computers on VLAN 20 to the web server via HTTP All other computers must be able to access the web server Which configuration when applied to switch A accomplishes this task?

200-301 Question 345

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 346

Refer to the exhibit.

200-301 Question 346

Which action is expected from SW1 when the untagged frame is received on the GigabitEthernet0/1 interface?

Options:

A.

The frame is processed in VLAN 5.

B.

The frame is processed in VLAN 11

C.

The frame is processed in VLAN 1

D.

The frame is dropped

Buy Now
Questions 347

Refer to Exhibit.

200-301 Question 347

How does SW2 interact with other switches in this VTP domain?

Options:

A.

It processes VTP updates from any VTP clients on the network on its access ports.

B.

It receives updates from all VTP servers and forwards all locally configured VLANs out all trunk ports

C.

It forwards only the VTP advertisements that it receives on its trunk ports.

D.

It transmits and processes VTP updates from any VTP Clients on the network on its trunk ports

Buy Now
Questions 348

Refer to me exhibit.

200-301 Question 348

Which action is taken by the router when a packet is sourced from 10.10.10.2 and destined for 10.10.10.16?

Options:

A.

It uses a route that is similar to the destination address

B.

It discards the packets.

C.

It floods packets to all learned next hops.

D.

It Queues the packets waiting for the route to be learned.

Buy Now
Questions 349

Which IPv6 address type provides communication between subnets and is unable to route on the Internet?

Options:

A.

global unicast

B.

unique local

C.

link-local

D.

multicast

Buy Now
Questions 350

Refer to the exhibit.

200-301 Question 350

Which prefix does Router 1 use for traffic to Host A?

Options:

A.

10.10.10.0/28

B.

10.10.13.0/25

C.

10.10.13.144/28

D.

10.10.13.208/29

Buy Now
Questions 351

Which action is taken by a switch port enabled for PoE power classification override?

Options:

A.

When a powered device begins drawing power from a PoE switch port a syslog message is generated

B.

As power usage on a PoE switch port is checked data flow to the connected device is temporarily paused

C.

If a switch determines that a device is using less than the minimum configured power it assumes the device has failed and disconnects

D.

Should a monitored port exceeds the maximum administrative value for power, the port is shutdown and err-disabled

Buy Now
Questions 352

Refer to the exhibit.

200-301 Question 352

With which metric was the route to host 172.16.0.202 learned?

Options:

A.

0

B.

110

C.

38443

D.

3184439

Buy Now
Questions 353

Refer to the exhibit.

200-301 Question 353

A packet is being sent across router R1 to host 172.163.3.14. To which destination does the router send the packet?

Options:

A.

207.165.200.246 via Serial0/1/0

B.

207.165.200.254 via Serial0/0/1

C.

207.165.200.254 via Serial0/0/0

D.

207.165.200.250 via Serial/0/0/0

Buy Now
Questions 354

The service password-encryption command is entered on a router. What is the effect of this configuration?

Options:

A.

restricts unauthorized users from viewing clear-text passwords in the running configuration

B.

encrypts the password exchange when a VPN tunnel is established

C.

prevents network administrators from configuring clear-text passwords

D.

protects the VLAN database from unauthorized PC connections on the switch

Buy Now
Questions 355

What is a characteristic of spine-and-leaf architecture?

Options:

A.

Each device is separated by the same number of hops

B.

It provides variable latency

C.

It provides greater predictability on STP blocked ports.

D.

Each link between leaf switches allows for higher bandwidth.

Buy Now
Questions 356

The SW1 interface g0/1 is in the down/down state. Which two configurations are valid reasons for the interface conditions?(choose two)

Options:

A.

There is a duplex mismatch

B.

There is a speed mismatch

C.

There is a protocol mismatch

D.

The interface is shut down

E.

The interface is error-disabled

Buy Now
Questions 357

A network administrator must to configure SSH for remote access to router R1 The requirement is to use a public and private key pair to encrypt management traffic to and from the connecting client.

Which configuration, when applied, meets the requirements?

200-301 Question 357

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 358

While examining excessive traffic on the network, it is noted that all incoming packets on an interface appear to be allowed even though an IPv4 ACL is applied to the interface.

Which two misconfigurations cause this behavior? (Choose two)

Options:

A.

The packets fail to match any permit statement

B.

A matching permit statement is too high in the access test

C.

A matching permit statement is too broadly defined

D.

The ACL is empty

E.

A matching deny statement is too high in the access list

Buy Now
Questions 359

Refer to the exhibit.

200-301 Question 359

An engineer deploys a topology in which R1 obtains its IP configuration from DHCP. If

the switch and DHCP server configurations are complete and correct. Which two sets of commands must be configured on R1 and R2 to complete the task? (Choose two)

Options:

A.

R1(config)# interface fa0/0R1(config-if)# ip helper-address 198.51.100.100

B.

R2(config)# interface gi0/0R2(config-if)# ip helper-address 198.51.100.100

C.

R1(config)# interface fa0/0R1(config-if)# ip address dhcpR1(config-if)# no shutdown

D.

R2(config)# interface gi0/0R2(config-if)# ip address dhcp

E.

R1(config)# interface fa0/0R1(config-if)# ip helper-address 192.0.2.2

Buy Now
Exam Code: 200-301
Exam Name: Implementing and Administering Cisco Solutions (200-301 CCNA) v1.1
Last Update: Nov 6, 2025
Questions: 1197

PDF + Testing Engine

$65.27  $186.49

Testing Engine

$52.32  $149.49
buy now 200-301 testing engine

PDF (Q&A)

$48.12  $137.49
buy now 200-301 pdf