Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the Cisco CCNA 200-301 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 200-301 Premium Access

View all detail and faqs for the 200-301 exam

Go to Exam

797 Students Passed

92% Average Score

91% Same Questions

Viewing page 5 out of 8 pages

Viewing questions 201-250 out of questions

Questions # 201:

Question # 201

Refer to the exhibit. An administrator is configuring a new WLAN for a wireless network that has these requirements:

Dual-band clients that connect to the WLAN must be directed to the 5-GHz spectrum.

Wireless clients on this WLAN must be able to apply VLAN settings from RADIUS attributes.

Which two actions meet these requirements? (Choose two.)

Options:

Enable the Aironet IE option.

Enable the Coverage Hole Detection option.

Set the MFP Client Protection option to Required

Enable the client band select option.

Enable the allow AAA Override option

Questions # 202:

All physical cabling is in place. Router R4 and PCI are fully configured and

inaccessible. R4's WAN interfaces use .4 in the last octet for each subnet.

Configurations should ensure that connectivity is established end-to-end.

1 . Configure static routing to ensure RI prefers the path through R2 to

reach only PCI on R4's LAN

2. Configure static routing that ensures traffic sourced from RI will take

an alternate path through R3 to PCI in the event of an outage along

the primary path

3. Configure default routes on RI and R3 to the Internet using the least number of hops

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using

the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Question # 202

Options:

Answer

Answer:

See the solution below in Explanation.

Explanation

To configure static routing on R1 to ensure that it prefers the path through R2 to reach only PC1 on R4’s LAN, you need to create a static route for the host 10.0.0.100/8 with a next-hop address of 20.0.0.2, which is the IP address of R2’s interface connected to R1. You also need to assign a lower administrative distance (AD) to this route than the default AD of 1 for static routes, so that it has a higher preference over other possible routes. For example, you can use an AD of 10 for this route. To create this static route, you need to enter the following commands on R1’s console:

R1#configure terminal R1(config)#ip route 10.0.0.100 255.0.0.0 20.0.0.2 10 R1(config)#end

To configure static routing on R1 that ensures that traffic sourced from R1 will take an alternate path through R3 to PC1 in the event of an outage along the primary path, you need to create another static route for the host 10.0.0.100/8 with a next-hop address of 40.0.0.2, which is the IP address of R3’s interface connected to R1. You also need to assign a higher AD to this route than the AD of the primary route, so that it has a lower preference and acts as a backup route. For example, you can use an AD of 20 for this route. This type of static route is also known as a floating static route. To create this static route, you need to enter the following commands on R1’s console:

R1#configure terminal R1(config)#ip route 10.0.0.100 255.0.0.0 40.0.0.2 20 R1(config)#end

To configure default routes on R1 and R3 to the Internet using the least number of hops, you need to create a static route for the network 0.0.0.0/0 with a next-hop address of the ISP’s interface connected to each router respectively. A default route is a special type of static route that matches any destination address and is used when no other specific route is available. The ISP’s interface connected to R1 has an IP address of 10.0.0.4, and the ISP’s interface connected to R3 has an IP address of 50.0.0.4. To create these default routes, you need to enter the following commands on each router’s console:

On R1: R1#configure terminal R1(config)#ip route 0.0.0.0 0.0.0.0 10.0.0.4 R1(config)#end

On R3: R3#configure terminal R3(config)#ip route 0.0.0.0 0.0.0.0 50.0.0.4 R3(config)#end

Questions # 203:

What is represented by the word "switch" within this JSON schema?

Question # 203

Options:

array

value

key

object

Questions # 204:

Question # 204

Refer to the exhibit. After a recent internal security audit, the network administrator decided to block all P2P-capable devices from the selected SSID. Which configuration setting must the administrator apply?

Options:

Set the P2P Block Action to Drop.

Select a correctly configured Layer 2 ACL.

Set the Wi-Fi Direct Client Policy to Not-Allow.

Set the MFP Client Protection to Required.

Questions # 205:

Which security element uses a combination of one-time passwords, a login name, and a personal smartphone?

Options:

software-defined segmentation

multifactor authentication

attribute-based access control

rule-based access control

Questions # 206:

Which two principles must be considered when using per-hop behavior in QoS? (Choose two.)

Options:

Policing is not supported on subinterfaces.

Shaping and rate limiting have the same effect.

Shaping drops excessive traffic without adding traffic delay.

Shaping levels out traffic bursts by delaying excess traffic.

Policing is performed in the inbound and outbound directions.

Questions # 207:

Which default condition must be considered when an encrypted mobility tunnel is used between two Cisco WLCs?

Options:

TCP port 443 and UDP 21 are used.

Control and data traffic encryption are enabled.

The tunnel uses the IPsec protocol for encapsulation.

The tunnel uses the EolP protocol to transmit data traffic.

Questions # 208:

What is a function of Layer 3 switches?

Options:

They route traffic between devices in different VLANs.

They forward Ethernet frames between VLANs using only MAC addresses.

They move frames between endpoints limited to IP addresses.

They transmit broadcast traffic when operating in Layer 3 mode exclusively.

Questions # 209:

What is the main capability of multifactor authentication?

Options:

Identifying permissions for end users using three authentication factors

Authenticating and authorizing end users using two authentication factors

Confirming end-user identity using two or more authentication factors

Verifying end-user access permissions using two authentication factors

Questions # 210:

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

Question # 210

Options:

Questions # 211:

Which IP address is used when an administrator must open a web-based management session with a lightweight AP?

Options:

WLCIP

gateway IP

autonomous AP IP

ACS IP

Questions # 212:

Which header must be included in a REST request from an application that requires JSON-formatted content?

Options:

Content-Type: application/json

Accept-Encoding: application/json

Accept: application/json

Accept-Language: application/json

Questions # 213:

How does MAC learning function?

Options:

inserts MAC addresses dynamically into the CAM table

restricts ports to a maximum of 10 dynamically-learned addresses

protects against denial of service attacks

rewrites the source and destination MAC address

Questions # 214:

Question # 214

Refer to the exhibit. Which configuration enables SW2 to establish an LACP EtherChannel?

Options:

Questions # 215:

Question # 215

Refer to the exhibit.

How does router R1 forward packets destined to 10.0.4.10?

Options:

via 10.0.4.2

via 10.0.0.2

via FastEthernet0/1

via FastEthernet1/1

Questions # 216:

Physical connectivity is implemented between the two Layer 2 switches,

and the network connectivity between them must be configured.

I . Configure an LACP EtherChanneI and number it as 44; configure it

between switches SWI and SW2 using interfaces EthernetO/O and

Ethernet0/1 on both sides. The LACP mode must match on both ends.

2. Configure the EtherChanneI as a trunk link.

3. Configure the trunk link with 802. Iq tags.

4. Configure VLAN 'MONITORING' as the untagged VLAN of the

EtherChannel.

==================

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using

the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Question # 216

Options:

Answer

Answer:

Solution is given below explanation.

Explanation

To configure an LACP EtherChannel and number it as 44, configure it between switches SW1 and SW2 using interfaces Ethernet0/0 and Ethernet0/1 on both sides, configure the EtherChannel as a trunk link, configure the trunk link with 802.1q tags, and configure VLAN ‘MONITORING’ as the untagged VLAN of the EtherChannel, you need to follow these steps:

On both SW1 and SW2, enter the global configuration mode by using the configure terminal command.

On both SW1 and SW2, select the two interfaces that will form the EtherChannel by using the interface range ethernet 0/0 - 1 command. This will enter the interface range configuration mode.

On both SW1 and SW2, set the protocol to LACP by using the channel-protocol lacp command.

On both SW1 and SW2, assign the interfaces to an EtherChannel group number 44 by using the channel-group 44 mode active command. This will create a logical interface named Port-channel44 and set the LACP mode to active on both ends. The LACP mode must match on both ends for the EtherChannel to form.

On both SW1 and SW2, exit the interface range configuration mode by using the exit command.

On both SW1 and SW2, enter the Port-channel interface configuration mode by using the interface port-channel 44 command.

On both SW1 and SW2, configure the Port-channel interface as a trunk link by using the switchport mode trunk command.

On both SW1 and SW2, configure the Port-channel interface to use 802.1q tags for VLAN identification by using the switchport trunk encapsulation dot1q command.

On both SW1 and SW2, configure VLAN ‘MONITORING’ as the untagged VLAN of the Port-channel interface by using the switchport trunk native vlan MONITORING command.

On both SW1 and SW2, exit the Port-channel interface configuration mode by using the exit command.

On both SW1 and SW2, save the configuration to NVRAM by using the copy running-config startup-config command.

Questions # 217:

What is the function of a controller in a software-defined network?

Options:

multicast replication at the hardware level

forwarding packets

fragmenting and reassembling packets

setting packet-handling policies

Questions # 218:

What are two examples of multifactor authentication? (Choose two.)

Options:

single sign-on

unique user knowledge

passwords that expire

soft tokens

shared password responsibility

Questions # 219:

Which protocol is used in Software Defined Access (SDA) to provide a tunnel between two edge nodes in different fabrics?

Options:

Generic Router Encapsulation (GRE)

Virtual Local Area Network (VLAN)

Virtual Extensible LAN (VXLAN)

Point-to-Point Protocol

Questions # 220:

What is the RFC 4627 default encoding for JSON text?

Options:

UCS-2

UTF-8

Hex

GB18030

Questions # 221:

Which EtherChannel mode must be configured when using LAG on a WLC?

Options:

active

auto

passive

Questions # 222:

Refer to the exhibit.

Traffic from R1 to the 10.10.2.0/24 subnet uses 192.168.1.2 as its next hop. An network engineer wants to update the R1 configuration so that traffic with destination 10.10.2.1 passes through router R3, and all other traffic to the 10.10.20/24 subnet passes through r2. Which command must be used?

Question # 222

Options:

Ip route 10.10.2.1 255.255.255.255 192.168.1.4 115

Ip route 10.10.2.0 255.255.255.0 192.168.1.4 100

Ip route 10.10.2.0 255.255.255.0 192.168.1.4 115

Ip route 10.10.2.1 255.255.255.255 192.168.1.4 100

Questions # 223:

What is used to identify spurious DHCP servers?

Options:

DHCPREQUEST

DHCPDISCOVER

DHCPACK

DHCPOFFER

Answer

Explanation

DHCPOFFER is used to identify spurious DHCP servers. A spurious DHCP server is any device that is configured to act as a DHCP server without the network administrator’s knowledge or permission. A spurious DHCP server can cause network problems by assigning incorrect or duplicate IP addresses to clients, or by redirecting traffic to malicious gateways. To prevent such attacks, the DHCP snooping feature can be enabled on switches to filter out invalid or unauthorized DHCP messages from untrusted sources1.

DHCP snooping works by intercepting and validating DHCP messages on a per-VLAN basis. The switch maintains a DHCP snooping binding database that contains information about the trusted hosts with leased IP addresses, such as MAC address, IP address, lease time, binding type, VLAN number, and interface information2. The switch also classifies its ports as trusted or untrusted. Trusted ports are those that connect to authorized DHCP servers or other trusted switches. Untrusted ports are those that connect to untrusted hosts or devices. The switch only allows DHCP messages from trusted ports, and drops any DHCP messages from untrusted ports that do not match the information in the binding database3.

The switch uses DHCPOFFER messages to identify spurious DHCP servers. A DHCPOFFER message is a response from a DHCP server to a client’s request for an IP address. The message contains the offered IP address, subnet mask, default gateway, and other configuration parameters for the client4. When the switch receives a DHCPOFFER message from an untrusted port, it compares the source MAC address and the offered IP address with the binding database. If there is no match, the switch considers the message as coming from a spurious DHCP server and drops it. The switch also logs an error message and increments a counter for the number of dropped messages5.

[References:, 1: Configuring DHCP Snooping - Cisco, 2: Catalyst 6500 Release 12.2SX Software Configuration Guide - DHCP Snooping Binding Database, 3: What is DHCP Snooping? - IONOS, 4: Dynamic Host Configuration Protocol (DHCP) and Bootstrap Protocol (BOOTP) Parameters, 5: Configuring DHCP Snooping - Cisco, , ]

Questions # 224:

Which selections must be used on the WLC when implementing a RADIUS server for wireless authentication?

Options:

Client Exclusion and SSH

802.1x and the MAC address of the server

Network Access Control State and SSH

AAA Override and the IP address of the server

Questions # 225:

An engineer is configuring a switch port that is connected to a VoIP handset. Which command must the engineer configure to enable port security with a manually assigned MAC address of abod-bod on voice VLAN 4?

Options:

switchport port-security mac-address abcd.abcd.abcd

switchport port-security mac-address abed.abed.abed vlan 4

switchport port-security mac-address sticky abcd.abcd.abcd vlan 4

switchport port-security mac-address abcd.abcd.abcd vlan voice

Questions # 226:

A network engineer must migrate a router loopback interface to the IPv6 address space. If the current IPv4 address of the interface is 10.54.73.1/32, and the engineer configures IPv6 address 0.0.0.0.0:ffff:a36:4901, which prefix length must be used?

Options:

/64

/96

/124

/128

Questions # 227:

Which protocol does a REST API use to communicate?

Options:

SSH

SNMP

HTTP

STP

Questions # 228:

Which IPsec mode encapsulates the entire IP packet?

Options:

tunnel

Q-in-Q

SSL VPN

transport

Questions # 229:

Question # 229

Refer to the exhibit. Which functionalities will this SSID have while being used by wireless clients?

Options:

decreases network security against offline dictionary attacks and encourages easy access to the network

increases network security against offline dictionary attacks and discourages time-consuming brute force attacks

increases network security against man in the middle attacks and discourages denial of service attacks

decreases network security against air sniffing attacks and discourages the use of complex passwords

Questions # 230:

Which CRUD operation corresponds to me HTTP GET method?

Options:

delete

create

update

read

Questions # 231:

Which Windows command is used instead of the route print command to display the contents of the IP routing table?

Options:

netstat-n

ipconfig

ifconfig

netstat-r

Questions # 232:

Refer to the exhibit.

Question # 232

An engineer must configure the interface that connects to PC 1 and secure it in a way that only PC1 is allowed to use the port No VLAN tagging can be used except for a voice VLAN. Which command sequence must be entered to configure the switch?

Question # 232

Options:

Option A

Option B

Option C

Option D

Questions # 233:

Drag and drop the virtualization concepts from the left onto the matching statements on the right.

Question # 233

Options:

Questions # 234:

What are two lacts that differentiate optical-fiber cabling from copper cabling? (Choose two.)

Options:

It is less expensive when purchasing patch cables.

It has a greater sensitivity to changes in temperature and moisture.

It provides greater throughput options.

It carries signals for longer distances.

It carries electrical current further distances for PoE devices.

Questions # 235:

When the LAG configuration is updated on a Cisco WLC which additional task must be performed when changes are complete?

Options:

Flush all MAC addresses from the WLC

Re-associate the WLC with the access point.

Re-enable the WLC interfaces

Reboot the WLC

Questions # 236:

Why would VRRP be implemented when configuring a new subnet in a multivendor environment?

Options:

when a gateway protocol is required that support more than two Cisco devices for redundancy

to enable normal operations to continue after a member failure without requiring a change In a host ARP cache

to ensure that the spanning-tree forwarding path to the gateway is loop-free

to interoperate normally with all vendors and provide additional security features for Cisco devices

Questions # 237:

Question # 237

Refer to the exhibit. Four load-balancing servers are reachable through this router; however, the company is removing all static and default routes on the router.

Server 1 - 10.12.14.14

Server 2 - 192.168.4.4

Server 3 - 209.165.200.5

Server 4 - 209.165.201.26

Which server will handle all traffic after the policy changes take effect?

Options:

Server 1 - 10.12.14.14

Server 2 - 192.168.4.4

Server 3 - 209.165.200.5

Server 4 - 209.165.201.26

Questions # 238:

Refer to the exhibit. User traffic originating within site 0 is failing to reach an application hosted on IP address 192.168 0 10. Which is located within site A What is determined by the routing table?

Options:

The default gateway for site B is configured incorrectly

The lack of a default route prevents delivery of the traffic

The traffic is blocked by an implicit deny in an ACL on router2

The traffic to 192 168 010 requires a static route to be configured in router 1.

Questions # 239:

Drag and drop the use cases for device-management technologies from the left onto the corresponding.

Question # 239

Options:

Questions # 240:

Question # 240

Refer to the exhibit. Traffic from R1 to the 10.10.2.0/24 subnet uses 192.168.1.2 as its next hop. A network engineer wants to update the R1 configuration so that traffic with destination 10.10.2.1 passes through router R3, and all other traffic to the 10.10.2.0/24 subnet passes through R2.

Which command must be used?

Options:

ip route 10.10.2.0 255.255.255.0 192.168.1.4 100

ip route 10.10.2.0 255.255.255.0 192.168.1.4 115

ip route 10.10.2.1 255.255.255.255 192.168.1.4 100

ip route 10.10.2.1 255.255.255.255 192.168.1.4 115

Questions # 241:

What is a functionality of the control plane in the network?

Options:

It exchanges topology information with other routers.

It forwards traffic to the next hop.

It looks up an egress interface in the forwarding information base.

It provides CLI access to the network device.

Questions # 242:

Refer to the exhibit.

Question # 242

The router has been configured with a subnet to accommodate the requirement for 380 users on a subnet. The requirement already considers 30% future growth. Which configuration verifies the IP subnet on router R4?

Options:

Subnet: 10.7.54.0Subnet mask: 255.255.254.0Broadcast address: 10.7.54.255Usable IP address range: 10.7.54.1 - 10.7.55.254

Subnet: 10.7.54.0Subnet mask: 255.255.128.0Broadcast address: 10.7.55.255Usable IP address range: 10.7.54.1 - 10.7.55.254

Subnet: 10.7.54.0Subnet mask: 255.255.255.0Broadcast address: 10.7.54.255Usable IP address range: 10.7.54.1 - 10.7.55.254

Subnet: 10.7.54.0Subnet mask: 255.255.254.0Broadcast address: 10.7.55.255Usable IP address range: 10.7.54.1 - 10.7.55.254

Questions # 243:

Question # 243

Refer to the exhibit. An engineer is using the Cisco WLC GUI to configure a WLAN for WPA2 encryption with AES and preshared key Cisc0123456. After the engineer selects the WPA + WPA2 option from the Layer 2 Security drop-down list, which two tasks must they perform to complete the process? (Choose two.)

Options:

Select the WPA2 Policy, AES, and TKIP check boxes.

Select ASCII from the PSK Format drop-down list, enter the key, and leave the Auth Key Mgmt setting blank.

Select PSK from the Auth Key Mgmt drop-down list, set the PSK Format to ASCII, and enter the key.

Select the WPA2 Policy and AES check boxes.

Questions # 244:

Refer to the exhibit.

Question # 244

All interfaces are in the same VLAN. All switches are configured with the default STP priorities. During the STP electronics, which switch becomes the root bridge?

Options:

MDF-DC-4:08:E0:19: 08:B3:19

MDF-DC-3:08:0E:18::1A:3C:9D

MDF-DC-08:0E:18:22:05:97

MDF-DC-1:DB:E:44:02:54:79

Questions # 245:

Refer to the exhibit.

Question # 245

Drag and drop the destination IPs from the left onto the paths to reach those destinations on the right.

Question # 245

Options:

Questions # 246:

Refer to the exhibit.

Question # 246

An engineer is configuring a Layer 3 port-channel interface with LACP. The configuration on the first device is complete, and it is verified that both interfaces have registered the neighbor device in the CDP table. Which task on the neighbor device enables the new port channel to come up without negotiating the channel?

Options:

Change the EtherChannel mode on the neighboring interfaces to auto.

Configure the IP address of the neighboring device.

Bring up the neighboring interfaces using the no shutdown command.

Modify the static EtherChannel configuration of the device to passive mode.

Questions # 247:

Refer to the exhibit.

Question # 247

The administrator must configure a floating sialic default route that points to 2001:db8:1234:2::1 and replaces the current default route only if it fails. Which command must the engineer configure on the CPE?

Options:

ipv6 route ::/0 2001:db8:1234:2::1 3

ipv6 route ::/128 2001 :db8:1234:2::1 3

ipv6 route ::/0 2001:db8:1234:2::1 1

ipv6 route ::/0 2001:db8:1234:2::1 2

Questions # 248:

Question # 248

Refer to the exhibit. R1 has taken the DROTHER role in the OSPF DR/BDR election process. Which configuration must an engineer implement so that R1 is elected as the DR?

Options:

R1(config)#interface FastEthernet 0/0R1(config-if)#ip ospf priority 1R1#clear ip ospf process

R2(config)#interface FastEthernet 0/2R2(config-if)#ip ospf priority 1R2#clear ip ospf process

R1(config)#interface FastEthernet 0/0R1(config-if)#ip ospf priority 200R1#clear ip ospf process

R3(config)#interface FastEthernet 0/1R3(config-if)#ip ospf priority 200R3#clear ip ospf process

Questions # 249:

What is a function performed by a web server?

Options:

provide an application that is transmitted over HTTP

send and retrieve email from client devices

authenticate and authorize a user's identity

securely store flies for FTP access

Questions # 250:

Drag and drop the HTTP methods used with REST-Based APIs from the left onto the descriptions on the right.

Question # 250

Options:

Viewing page 5 out of 8 pages

Viewing questions 201-250 out of questions

TOP CODES

Top selling exam codes in the certification world, popular, in demand and updated to help you pass on the first try.

2V0-11.25

ADM-201

Agentforce-Specialist

CMMC-CCP

Data-Cloud-Consultant

PDI

PSE-Strata-Pro-24

Secure-Software-Design

Sharing-and-Visibility-Architect

Workday-Pro-Integrations

ZDTA