Unlock Success with Authentic Cisco CCNA 200-301 PDF Exam Dumps

https://www.certs4exam.com/200-301-pdf-exam-questions.html
Cisco
200-301
Cisco Certiﬁed Network Associate
QUESTION & ANSWERS

Topics Number of Questions
Topic 1 283
Topic 2, 233
Topic 3 143
Topic 4 344
Mix Questions 120
Total 1123
Topic 1
QUESTION: 1
An engineer must configure the IPv6 address 2001:0db8:0000:0000:0700:0003:400F:572B on the serial0/0
interface of the HQ router and wants to compress it for easier configuration. Which command must be issued
on the router interface?
Option A : ipv6 address 2001:db8::700:3:400F:572B
Option B : ipv6 address 2001:db8:0::700:3:4F:572B
Option C : ipv6 address 2001:Odb8::7:3:4F:572B
Option D : ipv6 address 2001::db8:0000::700:3:400F:572B
Correct Answer: A
QUESTION: 2
How do servers connect to the network in a virtual environment?
Option A : wireless to an access point that is physically connected to the network
Option B : a cable connected to a physical switch on the network
Option C : a virtual switch that links to an access point that is physically connected to the network
Option D : a software switch on a hypervisor that is physically connected to the network
Correct Answer: D

QUESTION: 3
Drag the IPv6 DNS record types from the left onto the description on the right.
Answer
Answer :
QUESTION: 4
Which type of information resides on a DHCP server?
Option A : a list of the available IP addresses in a pool
Option B : a list of public IP addresses and their corresponding names
Option C : usernames and passwords for the end users in a domain
Option D : a list of statically assigned MAC addresses
Correct Answer: A

QUESTION: 5
Which 802.11 management frame type is sent when a client roams between access points on the same
SSID?
Option A : Reassociation Request
Option B : Probe Request
Option C : Authentication Request
Option D : Association Request
Correct Answer: A
QUESTION: 6
Which feature on the Cisco Wireless LAN Controller when enabled restricts management access from specific
networks?
Option A : CPU ACL
Option B : TACACS
Option C : Flex ACL
Option D : RADIUS
Correct Answer: A
QUESTION: 7
Which two outcomes are predictable behaviors for HSRP? (Choose two)
Option A : The two routers share a virtual IP address that is used as the default gateway for devices on
the LAN.
Option B : The two routers negotiate one router as the active router and the other as the standby router
Option C : Each router has a different IP address both routers act as the default gateway on the LAN, and
traffic is load balanced between them
Option D : The two routers synchronize configurations to provide consistent packet forwarding
Option E : The two routed share the same IP address, and default gateway traffic is load-balanced

between them
Correct Answer: A,B
QUESTION: 8
Refer to the exhibit.
An engineer configured NAT translations and has verified that the configuration is correct.Which IP address is
the source IP?
Option A : 10.4.4.4
Option B : 10.4.4.5
Option C : 172.23.103.10
Option D : 172.23.104.4
Correct Answer: D
QUESTION: 9
Router R4 is dynamically learning the path to the server. If R4 is connected to R1 via OSPF Area 20, to R2
v2ia R2 BGP, and to R3 via EIGRP 777, which path is installed in the routing table of R4?
Option A :

the path through R1, because the OSPF administrative distance is 110
Option B :
the path through R2. because the IBGP administrative distance is 200
Option C :
the path through R2 because the EBGP administrative distance is 20
Option D :
the path through R3. because the EIGRP administrative distance is lower than OSPF and BGP
Correct Answer: C
QUESTION: 10
Which network action occurs within the data plane?
Option A : compare the destination IP address to the IP routing table.
Option B : run routing protocols (OSPF, EIGRP, RIP, BGP)
Option C : make a configuration change from an incoming NETCONF RPC
Option D : reply to an incoming ICMP echo request
Correct Answer: A
QUESTION: 11
What mechanism carries multicast traffic between remote sites and supports encryption?
Option A : ISATAP
Option B : GRE over iPsec
Option C : iPsec over ISATAP

Option D : GRE
Correct Answer: B
QUESTION: 12
Refer to the exhibit Routers R1 and R2 have been configured with their respective LAN interfaces The two
circuits are operational and reachable across WAN Which command set establishes failover redundancy if the
primary circuit goes down?
Option A :
Option B :
Option C :
Option D :
Correct Answer: B
QUESTION: 13
How do TCP and UDP differ in the way they provide reliability for delivery of packets?

Option A : TCP is a connectionless protocol that does not provide reliable delivery of data, UDP is a
connection-oriented protocol that uses sequencing to provide reliable delivery.
Option B : TCP does not guarantee delivery or error checking to ensure that there is no corruption of
data UDP provides message acknowledgement and retransmits data if lost.
Option C : TCP provides flow control to avoid overwhelming a receiver by sending too many packets at
once, UDP sends packets to the receiver in a continuous stream without checking for sequencing
Option D : TCP uses windowing to deliver packets reliably; UDP provides reliable message transfer
between hosts by establishing a three-way handshake
Correct Answer: C
QUESTION: 14
Refer to the exhibit Router R1 Fa0/0 is unable to ping router R3 Fa0'1. Which action must be taken in router
R1 to help resolve the configuration issue?
Option A : set the default network as 20.20.20.0/24
Option B : set the default gateway as 20.20.20.2
Option C : configure a static route with Fa0/1 as the egress interface to reach the 20.20.20.0/24 network
Option D : configure a static route with 10.10.10.2 as the next hop to reach the 20.20.20.0/24 network
Correct Answer: D

QUESTION: 15
What is the default behavior of a Layer 2 switch when a frame with an unknown destination MAC address is
received?
Option A : The Layer 2 switch drops the received frame
Option B : The Layer 2 switch floods packets to all ports except the receiving port in the given VLAN.
Option C : The Layer 2 switch sends a copy of a packet to CPU for destination MAC address learning.
Option D : The Layer 2 switch forwards the packet and adds the destination MAC address to its MAC
address table
Correct Answer: B
Explanation/Reference:
If the destination MAC address is not in the CAM table (unknown destination MAC address), the switch sends the frame out all
other ports that are in the same VLAN as the received frame. This is called flooding. It does not flood the frame out the same
port on which the frame was received.
QUESTION: 16
Which WAN topology provides a combination of simplicity quality, and availability?
Option A : partial mesh
Option B : full mesh
Option C : point-to-point
Option D : hub-and-spoke
Correct Answer: C
QUESTION: 17

After running the code in the exhibit, which step reduces the amount of data that the NETCONF server
returns to the NETCONF client, to only the interface's configuration?
Option A : Use the Ixml library to parse the data returned by the NETCONF server for the interface's
configuration.
Option B : Create an XML filter as a string and pass it to get_config() method as an argument.
Option C : Create a JSON filter as a string and pass it to the get_config() method as an argument.
Option D : Use the JSON library to parse the data returned by the NETCONF server for the interface's
configuration.
Correct Answer: D
QUESTION: 18
How will Link Aggregation be Implemented on a Cisco Wireless LAN Controller?
Option A : One functional physical port is needed to pass client traffic.
Option B : The EthernetChannel must be configured in 'mode active'.
Option C : When enabled, the WLC bandwidth drops to 500 Mbps.
Option D : To pass client traffic, two or more ports must be configured.
Correct Answer: A
To pass client traffic, two or more ports must be configured.
QUESTION: 19
Which protocol is used to dynamically assign IP addresses to devices in a network?

Option A :
DNS (Domain Name System)
Option B :
DHCP (Dynamic Host Configuration Protocol)
Option C :
SNMP (Simple Network Management Protocol)
Option D :
FTP (File Transfer Protocol)
Correct Answer: B
QUESTION: 20
Which configuration ensures that the switch is always the root for VLAN 750?
Option A : Switch(config)#spanning-tree vlan 750 priority 38003685
Option B : Switch(config)#spanning-tree vlan 750 root primary
Option C : Switch(config)#spanning-tree vlan 750 priority 614440
Option D : Switch(config)#spanning-tree vlan 750 priority 0
Correct Answer: D
Although thespanning-tree vlan 10 root primarycommand will ensure a switch will have a bridge priority value lower than other
bridges introduced to the network, thespanning-tree vlan 10 priority 0command ensures the bridge priority takes precedence
over all other priorities.

QUESTION: 21
What is the result if Gig1/11 receives an STP BPDU?
Option A :
The port transitions to STP blocking
Option B :
The port transitions to the root port
Option C :
The port immediately transitions to STP forwarding.
Option D :
The port goes into error-disable state
Correct Answer: D
QUESTION: 22
Which device controls the forwarding of authentication requests for users when connecting to the network
using a lightweight access point?
Option A : TACACS server
Option B : wireless access point
Option C : RADIUS server
Option D : wireless LAN controller

Correct Answer: B
QUESTION: 23
What is the purpose of a southbound API in a control based networking architecture?
Option A : Facilities communication between the controller and the applications
Option B : Facilities communication between the controller and the networking hardware
Option C : allows application developers to interact with the network
Option D : integrates a controller with other automation and orchestration tools.
Correct Answer: B
https://www.ciscopress.com/articles/article.asp?p=2995354&seqNum=2#:~:text=The Southbound Interface,communicate to
the networking devices.&text=The overall goal is network,from being only a protocol.
The Southbound Interface
In a controller-based network architecture, the controller needs to communicate to the networking devices.
QUESTION: 24
What is a DHCP client?
Option A : a workstation that requests a domain name associated with its IP address
Option B : a host that is configured to request an IP address automatically
Option C : a server that dynamically assigns IP addresses to hosts.
Option D : a router that statically assigns IP addresses to hosts.
Correct Answer: B

QUESTION: 25
Which protocol is commonly used for secure remote access to network devices?
Option A :
Telnet
Option B :
SSH (Secure Shell)
Option C :
SNMP (Simple Network Management Protocol)
Option D :
FTP (File Transfer Protocol)
Correct Answer: B
QUESTION: 26
Which spanning-tree enhancement avoids the learning and listening states and immediately places ports in
the forwarding state?
Option A : BPDUfilter
Option B : PortFast
Option C : Backbonefast
Option D : BPDUguard
Correct Answer: B

PortFast
Spanning Tree Portfast causes layer 2 switch interfaces to enter forwarding state immediately, bypassing the listening and
learning states. It should be used on ports connected directly to end hosts like servers or workstations. Note: If portfast isn't
enabled, DHCP timeouts can occur while STP converges, causing more problems.
https://skminhaj.wordpress.com/2015/03/04/spanning-tree-stp-rstp-mst-enhancements/
QUESTION: 27
What is the purpose of the TTL (Time-to-Live) field in an IP header?
Option A :
To specify the maximum bandwidth
Option B :
To prevent routing loops
Option C :
To indicate the type of service
Option D :
To define the packet size
Correct Answer: B
QUESTION: 28
In software-defined architecture, which place handles switching for traffic through a Cisco router?
Option A : Control

Option B : Management
Option C : Data
Option D : application
Correct Answer: C
Data plane---Handles all the data traffic. The basic functionality of a Cisco NX-OS device is to forward packets from one
interface to another. The packets that are not meant for the switch itself are called the transit packets. These packets are
handled by the data plane
QUESTION: 29
What are two roles of Domain Name Services (DNS)? (Choose Two)
Option A : builds a flat structure of DNS names for more efficient IP operations
Option B : encrypts network Traffic as it travels across a WAN by default
Option C : improves security by protecting IP addresses under Fully Qualified Domain Names (FQDNs)
Option D : enables applications to identify resources by name instead of IP address
Option E : allows a single host name to be shared across more than one IP address
Correct Answer: D,E
QUESTION: 30
Drag and drop the AAA functions from the left onto the correct AAA services on the right

Answer
Answer :
QUESTION: 31
What is an appropriate use for private IPv4 addressing?
Option A : on the public-facing interface of a firewall
Option B : to allow hosts inside to communicate in both directions with hosts outside the organization
Option C : on internal hosts that stream data solely to external resources
Option D : on hosts that communicates only with other internal hosts

Correct Answer: D
QUESTION: 32
If OSPF Is running on this network, how does Router2 handle traffic from Site B to 10.10.13.128/25 at Site A?
Option A : It load-balances traffic out of Fa0/1 and Fa0/2.
Option B : It is unreachable and discards the traffic.
Option C : It sends packets out of interface FaO/2.
Option D : It sends packets out of interface Fa0/1.
Correct Answer: B
QUESTION: 33
Which technology is appropriate for communication between an SDN controller and applications running over
the network?
Option A : OpenFlow
Option B : REST API
Option C : NETCONF

Option D : Southbound API
Correct Answer: B
QUESTION: 34
After the election process what is the root bridge in the HQ LAN?
Option A :
Switch 1
Option B :
Switch 2
Option C :
Switch 3
Option D :
Switch 4
Correct Answer: D

Topic 2,
QUESTION: 35
In a TCP three-way handshake what is the purpose of the SYN/ACK packets?
Option A :
To establish a reliable connection
Option B :
To request data transmission
Option C :
To confirm the connection request
Option D :
To terminate the connection
Correct Answer: C
QUESTION: 36

Only four switches are participating in the VLAN spanning-tree process.Branch-1 priority 614440Branch-2:
priority 39082416Branch-3: priority 0Branch-4: root primaryWhich switch becomes the permanent root
bridge for VLAN 5?
Option A :
Branch-1
Option B :
Branch-2
Option C :
Branch-3
Option D :
Branch-4
Correct Answer: C
Dynamic ARP inspection is an ingress security feature; it does not perform any egress checking.

QUESTION: 37
What is the effect when loopback interfaces and the configured router ID are absent during the OSPF Process
configuration?
Option A : No router ID is set, and the OSPF protocol does not run.
Option B : The highest up/up physical interface IP address is selected as the router ID.
Option C : The lowest IP address is incremented by 1 and selected as the router ID.
Option D : The router ID 0.0.0.0 is selected and placed in the OSPF process.
Correct Answer: B
QUESTION: 38
Which routing protocol uses a link-state database to build the routing table?
Option A :
BGP (Border Gateway Protocol)
Option B :
EIGRP (Enhanced Interior Gateway Routing Protocol)
Option C :
OSPF (Open Shortest Path First)
Option D :
RIP (Routing Information Protocol)
Correct Answer: C

QUESTION: 39
How does the dynamically-learned MAC address feature function?
Option A : The CAM table is empty until ingress traffic arrives at each port
Option B : Switches dynamically learn MAC addresses of each connecting CAM table.
Option C : The ports are restricted and learn up to a maximum of 10 dynamically-learned addresses
Option D : It requires a minimum number of secure MAC addresses to be filled dynamically
Correct Answer: A
QUESTION: 40
Which type of traffic Is sent with pure iPsec?
Option A : broadcast packets from a switch that is attempting to locate a MAC address at one of several
remote sites
Option B : multicast traffic from a server at one site to hosts at another location
Option C : spanning-tree updates between switches that are at two different sites
Option D : unicast messages from a host at a remote site lo a server at headquarters
Correct Answer: D
''The original poster makes a correct observation that EIGRP does not work in a pure IPSEC environment. IPSEC was designed
to process unicast traffic.
QUESTION: 41

A network engineer is in the process of establishing IP connectivity between two sites. Routers R1 and R2 are
partially configured with IP addressing. Both routers have the ability to access devices on their respective
LANs. Which command set configures the IP connectivity between devices located on both LANs in each site?
Option A :
Option B :
Option C :
Option D :
Correct Answer: C
QUESTION: 42
What does router R1 use as its OSPF router-ID?

Option A : 10.10.1.10
Option B : 10.10.10.20
Option C : 172.16.15.10
Option D : 192.168.0.1
Correct Answer: C
OSPF uses the following criteria to select the router ID: 1. Manual configuration of the router ID (via the ''router-id x.x.x.x''
command under OSPF router configuration mode). 2. Highest IP address on a loopback interface. 3. Highest IP address on a
non-loopback and active (no shutdown) interface.
QUESTION: 43
Which command must be entered to configure a DHCP relay?
Option A : ip helper-address
Option B : ip address dhcp
Option C : ip dhcp pool
Option D : ip dhcp relay
Correct Answer: A
QUESTION: 44
Which configuration management mechanism uses TCP port 22 by default when communicating with
managed nodes?
Option A : Ansible
Option B : Python
Option C : Puppet
Option D : Chef

Correct Answer: A
QUESTION: 45
Which type of API allows SDN controllers to dynamically make changes to the network?
Option A : northbound API
Option B : REST API
Option C : SOAP API
Option D : southbound API
Correct Answer: D
Cisco overview doc for SDN here: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/VMDC/SDN/SDN.html
Topic 3, Exam Pool Feb 2022
QUESTION: 46
Which protocol is used for automatic IP address configuration in a network?
Option A :
ICMP
Option B :
ARP
Option C :
DNS
Option D :

DHCP
Correct Answer: D
QUESTION: 47
Router R1 is running three different routing protocols. Which route characteristic is used by the router to
forward the packet that it receives for destination IP 172.16.32.1?
Option A :
longest prefix
Option B :
metric
Option C :
cost
Option D :
administrative distance
Correct Answer: A
QUESTION: 48
What Is the path for traffic sent from one user workstation to another workstation on a separate switch In a
Ihree-lter architecture model?

Option A : access - core - distribution - access
Option B : access - distribution - distribution - access
Option C : access - core - access
Option D : access -distribution - core - distribution - access
Correct Answer: D
QUESTION: 49
An engineer is configuring NAT to translate the source subnet of 10.10.0.0/24 to any of three addresses
192.168.30.1, 192.168.3.2, 192.168.3.3 Which configuration should be used?
Option A :
Option B :
Option C :
Option D :

Correct Answer: C
QUESTION: 50
What does the acronym VLAN stand for in networking?
Option A :
Virtual Local Area Network
Option B :
Very Large Area Network
Option C :
Variable Length Address Network
Option D :
Virtual Layered Area Network
Correct Answer: A
QUESTION: 51
Which type of organization should use a collapsed-core architecture?
Option A : large and requires a flexible, scalable network design
Option B : large and must minimize downtime when hardware fails
Option C : small and needs to reduce networking costs currently
Option D : small but is expected to grow dramatically in the near future
Correct Answer: C

A collapsed-core architecture is a limited investment for a small company, and may be efficient and productive for a limited
time.
QUESTION: 52
Drag and drop the AAA terms from the left onto the description on the right.
Answer
Answer :
QUESTION: 53

An access list is created to deny Telnet access from host PC-1 to RTR-1 and allow access from all other hosts
A Telnet attempt from PC-2 gives this message:'% Connection refused by remote host' Without allowing
Telnet access from PC-1, which action must be taken to permit the traffic?
Option A :
Add the access-list 10 permit any command to the configuration
Option B :
Remove the access-class 10 in command from line vty 0.4.
Option C :
Add the ip access-group 10 out command to interface g0/0.
Option D :
Remove the password command from line vty 0 4.
Correct Answer: A

QUESTION: 54
Which command is used to verify the IP routing table on a Cisco router?
Option A :
show interfaces
Option B :
show running-config
Option C :
show ip route
Option D :
show version
Correct Answer: C
Topic 3
QUESTION: 55
Which protocol uses the SSL?
Option A : HTTP
Option B : SSH
Option C : HTTPS
Option D : Telnet
Correct Answer: C

QUESTION: 56
Which protocol is associated with the default gateway in a network?
Option A :
HTTP (Hypertext Transfer Protocol)
Option B :
DNS (Domain Name System)
Option C :
IP (Internet Protocol)
Option D :
DHCP (Dynamic Host Configuration Protocol)
Correct Answer: C
QUESTION: 57
Drag and drop the functions of SNMP fault-management from the left onto the definitions on the right.
Answer :
see explanation below

QUESTION: 58
What is the binary equivalent of the subnet mask 255.255.248.0?
Option A :
11111111.11111111.11111000.00000000
Option B :
11111111.11111111.11111111.11111110
Option C :
11111111.11111111.11111111.00000000
Option D :
11111111.11111111.11111111.11110000

Correct Answer: D
QUESTION: 59
Which Layer 2 switch function encapsulates packets for different VLANs so that the packets traverse the
same port and maintain traffic separation between the VLANs?
Option A : VLAN numbering
Option B : VLAN DSCP
Option C : VLAN tagging
Option D : VLAN marking
Correct Answer: C
QUESTION: 60
If a subnet mask is 255.255.255.252 how many usable host addresses are available in each subnet?
Option A :
2
Option B :
4
Option C :
8
Option D :
6

Correct Answer: A
QUESTION: 61
R1 as an NTP server must have:* NTP authentication enabled* NTP packets sourced from Interface loopback
0* NTP stratum 2* NTP packets only permitted to client IP 209.165 200 225How should R1 be configured?
Option A :
Option B :
Option C :
Option D :
Correct Answer: B
QUESTION: 62

The DHCP server and clients are connected to the same switch. What is the next step to complete the DHCP
configuration to allow clients on VLAN 1 to receive addresses from the DHCP server?
Option A : Configure the ip dhcp snooping trust command on the interlace that is connected to the DHCP
client.
Option B : Configure the ip dhcp relay information option command on the interface that is connected to
the DHCP client.
Option C : Configure the ip dhcp snooping trust command on the interface that is connected to the DHCP
server.
Option D : Configure the Ip dhcp relay information option command on the interface that is connected to
the DHCP server.
Correct Answer: C
QUESTION: 63
Which routing protocol uses a link-state database to make routing decisions?
Option A :
EIGRP (Enhanced Interior Gateway Routing Protocol)
Option B :
BGP (Border Gateway Protocol)
Option C :

RIP (Routing Information Protocol)
Option D :
OSPF (Open Shortest Path First)
Correct Answer: D
QUESTION: 64
How many subnets can be created from the network 172.16.0.0/16 using a subnet mask of 255.255.252.0?
Option A :
64
Option B :
256
Option C :
128
Option D :
512
Correct Answer: B
QUESTION: 65
What is the maximum number of hosts in a subnet with a subnet mask of 255.255.255.240?

Option A :
32
Option B :
30
Option C :
14
Option D :
16
Correct Answer: B
QUESTION: 66
A static route must be configured on R14 to forward traffic for the 172 21 34 0/25 network that resides on
R86 Which command must be used to fulfill the request?
Option A : ip route 172.21.34.0 255.255.255.192 10.73.65.65
Option B : ip route 172.21.34.0 255.255.255.0 10.73.65.65
Option C : ip route 172.21.34.0 255.255.128.0 10.73.65.64
Option D : ip route 172.21.34.0 255.255.255.128 10.73.65.66

Correct Answer: D
QUESTION: 67
A company is configuring a failover plan and must implement the default routes in such a way that a floating
static route will assume traffic forwarding when the primary link goes down. Which primary route
configuration must be used?
Option A : ip route 0.0.0.0 0.0.0.0 192.168.0.2 GigabitEthernetl/0
Option B : ip route 0.0.0.0 0.0.0.0 192.168.0.2 tracked
Option C : ip route 0.0.0.0 0.0.0.0 192.168.0.2 floating
Option D : ip route 0.0.0.0 0.0.0.0 192.168.0.2
Correct Answer: D
QUESTION: 68
What is a function of a Next-Generation IPS?
Option A : makes forwarding decisions based on learned MAC addresses
Option B : serves as a controller within a controller-based network
Option C : integrates with a RADIUS server to enforce Layer 2 device authentication rules
Option D : correlates user activity with network events

Correct Answer: D
QUESTION: 69
What is the subnet address for the IP address 192.168.5.36/28?
Option A :
192.168.5.16
Option B :
192.168.5.64
Option C :
192.168.5.32
Option D :
192.168.5.48
Correct Answer: C
Topic 4
QUESTION: 70
In a cloud-computing environment what is rapid elasticity?
Option A : control and monitoring of resource consumption by the tenant
Option B : automatic adjustment of capacity based on need
Option C : pooling resources in a multitenant model based on need
Option D : self-service of computing resources by the tenant

Correct Answer: B
QUESTION: 71
How do UTP and STP cables compare?
Option A : STP cables are cheaper to procure and easier to install and UTP cables are more expensive
and harder to install.
Option B : UTP cables are less prone to crosstalk and interference and STP cables are more prone to
crosstalk and interference.
Option C : UTP cables provide taster and more reliable data transfer rates and STP cables are slower and
less reliable.
Option D : STP cables are shielded and protect against electromagnetic interference and UTP lacks the
same protection against electromagnetic interference.
Correct Answer: D
QUESTION: 72
Refer to the exhibit. What is the cause of the issue?
Option A :
STP
Option B :
port security

Option C :
wrong cable type
Option D :
shutdown command
Correct Answer: B
QUESTION: 73
What does route 10.0.1.3/32 represent in the routing table?
Option A :
the 10.0.0.0 network
Option B :
a single destination address
Option C :
the source 10.0.1.100

Option D :
all hosts in the 10.0.1.0 subnet
Correct Answer: A
QUESTION: 74
Refer to the exhibit. A multivendor network exists and the company is implementing VoIP over the network
for the first time.
Option A :
Option B :
Option C :
Option D :
Correct Answer: B
QUESTION: 75
Drag and drop the IPv6 address details from the left onto the corresponding types on the right.

Answer:
Answer :
QUESTION: 76
How does encryption project the wireless network?
Option A : via integrity checks to identify wireless forgery attacks in the frame
Option B : via specific ciphers to detect and prevent zero-day network attacks
Option C : via an algorithm to change wireless data so that only the access point and client understand it
Option D : via a policy to prevent unauthorized users from communicating on the wireless network

Correct Answer: C
QUESTION: 77
Drag and drop the steps in a standard DNS lookup operation from the left into the order on the right.
Answer
Answer :
QUESTION: 78
When is the PUT method used within HTTP?
Option A : when a nonidempotent operation is needed
Option B : to update a DNS server
Option C : to display a web site
Option D : when a read-only operation it required

Correct Answer: B
QUESTION: 79
Which interface or port on the WLC is the default for in-band device administration and communications
between the controller and access points?
Option A :
virtual interface
Option B :
management interface
Option C :
console port
Option D :
service port
Correct Answer: B
QUESTION: 80
When should an engineer implement a collapsed-core architecture?
Option A : for small networks with minimal need for growth
Option B : the access and distribution layers must be on the same device
Option C : for large networks that are connected to multiple remote sites
Option D : only when using VSS technology

Correct Answer: C
QUESTION: 81
Which capability does TFTP provide?
Option A :
loads configuration files on systems without data storage devices
Option B :
provides authentication for data communications over a private data network
Option C :
provides encryption mechanisms for file transfer across a WAN
Option D :
provides secure file access within the LAN
Correct Answer: A
TFTP (Trivial File Transfer Protocol) is a simple file transfer protocol that is often used to transfer configuration files or firmware
to network devices, such as routers or switches, during the boot process. TFTP is lightweight and lacks advanced features like
authentication or encryption, making it suitable for basic file transfer operations in situations where security is not a primary
concern. Therefore, option A accurately describes one of the primary capabilities of TFTP. It is commonly used to load
configuration files onto systems, particularly those without extensive data storage devices, during the initialization or
configuration process.

QUESTION: 82
Clients on the WLAN are required to use 802.11r. What action must be taken to meet the requirement?
Option A :
Under Protected Management Frames, set the PMF option to Required.
Option B :
Enable CCKM under Authentication Key Management.
Option C :
Set the Fast Transition option and the WPA gtk-randomize State to disable.

Option D :
Set the Fast Transition option to Enable and enable FT 802.1X under Authentication Key Management.
Correct Answer: D
QUESTION: 83
Which two values does router R1 use to identify valid routes for the R3 loopback address 1.1.1.3/32? (Choose
two.)
Option A : lowest cost to teach the next hop

Option B : highest metric
Option C : highest administrative distance
Option D : lowest metric
Option E : lowest administrative distance
Correct Answer: D,E
QUESTION: 84
An engineer must configure a core router with a floating static default route to the backup router at
10.200.0.2.
Answer
Answer :

QUESTION: 85
Refer to the exhibit..
When router R1 is sending traffic to IP address 10.56.192 1, which interface or next hop address does it use
to route the packet?
Option A :
0.0.0.0.0/0
Option B :
10.56.0.1
Option C :
10.56.128.19
Option D :
Vlan57
Correct Answer: B

QUESTION: 86
Refer to the exhibit. Each router must be configured with the last usable IP address in the subnet.
Whichconfiguration fulfills this requirement?
Option A :
Option B :
Option C :
Option D :
Correct Answer: C

QUESTION: 87
How many host addresses are available in a subnet with a subnet mask of 255.255.255.192?
Option A :
126
Option B :
64
Option C :
128
Option D :
62
Correct Answer: D
QUESTION: 88
How must OSPF be configured on the GigabitEthernet0/0 interface of the neighbor device to achieve.

Option A :
Option B :
Option C :
Option D :
Correct Answer: A
QUESTION: 89
Drag and drop the HTTP methods used with REST-Based APIs from the left onto the descriptions on the right.
Answer:
Answer :

QUESTION: 90
What is the subnet mask of the route to the 10.10.13.160 prefix?
Option A :
255.255.255.240
Option B :
255.255.255.128
Option C :
255.255.248.
Option D :
255.255.255.248
Correct Answer: D

QUESTION: 91
A network engineer must configure the link with these requirements: • Consume as few IP addresses as
possible. • Leave at least two additional useable IP addresses for future growth. Which set of configurations
must be applied?
Option A :
Option B :
Option C :
Option D :
Correct Answer: B

We have to configure the link which will need 2 IP addresses, 1 for each port on each Router. We also need 2 spare IPs for
future growth, so overall we need 4 usable IP addresses. If we consider using the /30 (255.255.255.252) mask, it will give us
2^2 (=4) i.e., total 4 IPs and 2 usable IPs, which doesn’t fulfil the given requirements. So, we can consider using the next /29
(255.255.255.248) mask, which gives us 2^3 (=8) i.e., total 8 IP address and 6 usable IP addresses, which perfectly fulfil the
given requirements.
QUESTION: 92
What is an advantage of using auto mode versus static mode for power allocation when an access point is
connected to a PoE switch port?
Option A : All four pairs of the cable are used
Option B : It detects the device is a powered device
Option C : The default level is used for the access point
Option D : Power policing is enabled at the same time
Correct Answer: D
QUESTION: 93
When an access point is seeking to join wireless LAN controller, which message is sent to the AP- Manager
interface?
Option A : Discovery response
Option B : DHCP request
Option C : DHCP discover
Option D : Discovery request
Correct Answer: D

QUESTION: 94
What is a feature of WPA?
Option A : 802.1x authentication
Option B : preshared key
Option C : TKIP/MIC encryption
Option D : small Wi-Fi application
Correct Answer: A
QUESTION: 95
What is represented by the word "switch’’ in line 2 of the JSON schema?
Option A :
array
Option B :
key
Option C :
value
Option D :
object

Correct Answer: C
QUESTION: 96
Drag and drop the statements about access-point modes from the left onto the corresponding modes on the
right.
Answer
Answer :

QUESTION: 97
A network engineer must update the configuring on switch2 so that it sends LLDP packets.
Option A :
Option B :
Option C :
Option D :
Correct Answer: C
QUESTION: 98
SIP-based Call Admission Control must be configured in the Cisco WLC GUI. SIP call-snooping ports are
configured. Which two actions must be completed next? (Choose two.)
Option A : Set the QoS level to silver or greater for voice traffic.
Option B : Set the QoS level to platinum for voice traffic.
Option C : Enable Media Session Snooping on re WLAN.
Option D : Enable traffic shaping for the LAN interlace of the WLC.
Option E : Configure two different QoS rotes tor data and voice traffic.
Correct Answer: D,E

QUESTION: 99
A network administrator must permit traffic from the 10.10.0.0/24 subnet to the WAN on interlace Seria10.
What is the effect of the configuration as the administrator applies the command?
Option A :
The permit command fails and returns an error code.
Option B :
The router accepts all incoming traffic to Seria10 with the last octet of the source IP set to 0.
Option C :
The sourced traffic from IP range 10.0.0.0 -10.0.0.255 is allowed on Seria10.
Option D :
The router fails to apply the access list to the interface.
Correct Answer: C
QUESTION: 100

What are two conclusions about this configuration? {Choose two.)
Option A :
The spanning-tree mode is Rapid PVST+.
Option B :
This is a root bridge.
Option C :
The root port is FastEthernet 2/1.
Option D :
The designated port is FastEthernet 2/1.
Option E :
The spanning-tree mode is PVST+.
Correct Answer: A
MIXED Questions

QUESTION: 101
Drag and drop the TCP or UDP details from the left onto their corresponding protocols on the right.
Answer:
Answer :
QUESTION: 102
A network engineer must configure NETCONF. After creating the configuration, the engineer gets outputfrom
the command show line but not from show running- config. Which command completes theconfiguration?
Option A :
Device(config)# netconf lock-time 500
Option B :
Device(config)# netconf max-message 1000
Option C :

Device(config)# no netconf ssh acl 1
Option D :
Device(config)# netconf max-sessions 100
Correct Answer: B
QUESTION: 103
An engineer is configuring SSH version 2 exclusively on the R1 router. What is the minimum configuration
required to permit remote management using the cryptographic protocol?
Option A :
Option B :
Option C :
Option D :

Correct Answer: C
QUESTION: 104
PC A is communicating with another device at IP address 10.227.225.255. Through which router does router
Y route the traffic?
Option A : router A
Option B : router B
Option C : router C
Option D : router D
Correct Answer: C
QUESTION: 105
Which syslog severity level is considered the most severe and results in the system being considered
unusable?

Option A : Alert
Option B : Error
Option C : Emergency
Option D : Critical
Correct Answer: D
QUESTION: 106
What is a characteristics of a collapsed-core network topology?
Option A : It allows the core and distribution layers to run as a single combined layer.
Option B : It enables the core and access layers to connect to one logical distribution device over an
EtherChannel.
Option C : It enables all workstations in a SOHO environment to connect on a single switch with internet
access
Option D : It allows wireless devices to connect directly to the core layer, which enables faster data
transmission.
Correct Answer: B
QUESTION: 107
restricts unauthorized users from viewing clear-text passwords in the running configuration
Option A : restricts unauthorized users from viewing clear-text passwords in the running configuration
Option B : encrypts the password exchange when a VPN tunnel is established
Option C : prevents network administrators from configuring clear-text passwords
Option D : protects the VLAN database from unauthorized PC connections on the switch
Correct Answer: A

QUESTION: 108
Connectivity between four routers has been established. IP connectivity must be configured in the order
presented to complete the implementation. No dynamic routing protocols are included.1. Configure static
routing using host routes to establish connectivity from router R3 to the router R1 Loopback address using
the source IP of 209.165.200.230.2. Configure an IPv4 default route on router R2 destined for router R4.3.
Configure an IPv6 default router on router R2 destined for router R4.
Answer :
Answer as below configuration:
1.- on R3
config terminal
ip route 192.168.1.1 255.255.255.255 209.165.200.229
end
copy running start
2.- on R2
config terminal
ip route 0.0.0.0 0.0.0.0 209.165.202.130
end
copy running start
3.- on R2
config terminal
ipv6 route ::/0 2001:db8:abcd::2

end
copy running start
QUESTION: 109
Physical connectivity is implemented between the two Layer 2 switches, and the network connectivity
between them must be configured1. Configure an LACP EtherChannel and number it as 1; configure it
between switches SW1 and SVV2 using interfaces Ethernet0/0 and Ethernet0/1 on both sides. The LACP
mode must match on both ends2 Configure the EtherChannel as a trunk link.3. Configure the trunk link with
802.1 q tags.4. Configure the native VLAN of the EtherChannel as VLAN 15.
Answer :
Answer as below configuration:
On SW1:
conf terminal
vlan 15
exit
interface range eth0/0 - 1
channel-group 1 mode active
exit
interface port-channel 1
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk native vlan 15

end
copy run start
on SW2:
conf terminal
vlan 15
exit
interface range eth0/0 - 1
channel-group 1 mode active
exit
interface port-channel 1
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk native vlan 15
end
copy run start
QUESTION: 110
Drag and drop the descriptions of AAA services from the left onto the corresponding services on the right.
Answer:

Answer :
QUESTION: 111
Which protocol is used in Software Defined Access (SDA) to provide a tunnel between two edge nodes in
different fabrics?
Option A : Generic
Option B : Virtual Local Area Network (VLAN)
Option C : Virtual Extensible LAN (VXLAN)
Option D : Point-to-Point Protocol
Correct Answer: C
QUESTION: 112
Why implement VRRP?
Option A : to provide end users with a virtual gateway in a multivendor network
Option B : to leverage a weighting scheme to provide uninterrupted service
Option C : to detect link failures without the overhead of Bidirectional Forwarding Detection
Option D : to hand over to end users the autodiscovery of virtual gateways
Correct Answer: A
QUESTION: 113
All physical cabling is in place. Router R4 and PCI are fully configured and inaccessible. R4's WAN interfaces
use .4 in the last octet for each subnet. Configurations should ensure that connectivity is established end-to-
end. 1 . Configure static routing to ensure RI prefers the path through R2 to reach only PCI on R4's LAN 2.
Configure static routing that ensures traffic sourced from RI will take an alternate path through R3 to PCI in
the event of an outage along the primary path 3. Configure default routes on RI and R3 to the Internet using
the least number of hops Guidelines This is a lab item in which tasks will be performed on virtual devices. •
Refer to the Tasks tab to view the tasks for this lab item. • Refer to the Topology tab to access the device
console(s) and perform the tasks. • Console access is available for all required devices by clicking the device
icon or using the tab(s) above the console window. • All necessary preconfigurations have been applied. • Do

not change the enable password or hostname for any device. • Save your configurations to NVRAM before
moving to the next item. • Click Next at the bottom of the screen to submit this lab and move to the next
question. • When Next is clicked, the lab closes and cannot be reopened.
Answer :
See the solution below in Explanation.
To configure static routing on R1 to ensure that it prefers the path through R2 to reach only PC1 on R4’s LAN, you need to
create a static route for the host 10.0.0.100/8 with a next-hop address of 20.0.0.2, which is the IP address of R2’s interface
connected to R1. You also need to assign a lower administrative distance (AD) to this route than the default AD of 1 for static
routes, so that it has a higher preference over other possible routes. For example, you can use an AD of 10 for this route. To
create this static route, you need to enter the following commands on R1’s console: R1#configure terminal R1(config)#ip route

10.0.0.100 255.0.0.0 20.0.0.2 10 R1(config)#end To configure static routing on R1 that ensures that traffic sourced from R1
will take an alternate path through R3 to PC1 in the event of an outage along the primary path, you need to create another
static route for the host 10.0.0.100/8 with a next-hop address of 40.0.0.2, which is the IP address of R3’s interface connected to
R1. You also need to assign a higher AD to this route than the AD of the primary route, so that it has a lower preference and
acts as a backup route. For example, you can use an AD of 20 for this route. This type of static route is also known as a floating
static route. To create this static route, you need to enter the following commands on R1’s console: R1#configure terminal
R1(config)#ip route 10.0.0.100 255.0.0.0 40.0.0.2 20 R1(config)#end To configure default routes on R1 and R3 to the Internet
using the least number of hops, you need to create a static route for the network 0.0.0.0/0 with a next-hop address of the ISP’s
interface connected to each router respectively. A default route is a special type of static route that matches any destination
address and is used when no other specific route is available. The ISP’s interface connected to R1 has an IP address of 10.0.0.4,
and the ISP’s interface connected to R3 has an IP address of 50.0.0.4. To create these default routes, you need to enter the
following commands on each router’s console: On R1: R1#configure terminal R1(config)#ip route 0.0.0.0 0.0.0.0 10.0.0.4
R1(config)#end On R3: R3#configure terminal R3(config)#ip route 0.0.0.0 0.0.0.0 50.0.0.4 R3(config)#end

Unlock Success with Authentic Cisco CCNA 200-301 PDF Exam Dumps

Recommended

Recommended

More Related Content

Similar to Unlock Success with Authentic Cisco CCNA 200-301 PDF Exam Dumps

Similar to Unlock Success with Authentic Cisco CCNA 200-301 PDF Exam Dumps (20)

Recently uploaded

Recently uploaded (20)

Unlock Success with Authentic Cisco CCNA 200-301 PDF Exam Dumps