[Jan 11, 2024] Get New 200-301 Practice Test Questions Answers
200-301 Dumps and Exam Test Engine
Cisco 200-301 certification exam covers a wide range of topics that are essential for network engineers, including network topology, network protocols, network security, and network management. 200-301 exam is designed to test the candidate's ability to configure, troubleshoot, and manage Cisco networks. 200-301 exam is divided into two parts: the first part tests the candidate's knowledge of networking fundamentals, while the second part tests their ability to apply this knowledge in real-world scenarios.
NEW QUESTION # 346
Refer to the exhibit.
Which route does R1 select for traffic that is destined to 192 168.16.2?
- A. 192.168 26.0/26
- B. 192.168.16.0/24
- C. 192.168.16.0/21
- D. 192.168.16.0/27
Answer: B
NEW QUESTION # 347
Refer to the exhibit.
An engineer is required to verify that the network parameters are valid for the users wireless LAN connectivity on a /24 subnet. Drag and drop the values from the left onto the network parameters on the right. Not all values are used.
Answer:
Explanation:
NEW QUESTION # 348
Refer to the exhibit.
Which password must an engineer use to enter the enable mode?
- A. adminadmin123
- B. default
- C. cisco123
- D. testing 1234
Answer: D
Explanation:
Explanation
If neither the enable password command nor the enable secret command is configured, and if there is a line password configured for the console, the console line password serves as the enable password for all VTY sessions -> The "enable secret" will be used first if available, then "enable password" and line password.
NEW QUESTION # 349
Which protocol must be implemented to support separate authorization and authentication solutions for wireless APs?
- A. 802.1X
- B. TACACS+
- C. RADIUS
- D. Kerberos
Answer: B
Explanation:
Authentication and Authorization
RADIUS combines authentication and authorization. The access-accept packets sent by the RADIUS server to the client contain authorization information. This makes it difficult to decouple authentication and authorization.
TACACS+ uses the AAA architecture, which separates AAA. This allows separate authentication solutions that can still use TACACS+ for authorization and accounting. For example, with TACACS+, it is possible to use Kerberos authentication and TACACS+ authorization and accounting. After a NAS authenticates on a Kerberos server, it requests authorization information from a TACACS+ server without having to re-authenticate. The NAS informs the TACACS+ server that it has successfully authenticated on a Kerberos server, and the server then provides authorization information.
NEW QUESTION # 350
Refer to Exhibit. How does SW2 interact with other switches in this VTP domain?
- A. It processes VTP updates from any VTP clients on the network on its access ports.
- B. It receives updates from all VTP servers and forwards all locally configured VLANs out all trunk ports
- C. It forwards only the VTP advertisements that it receives on its trunk ports.
- D. It transmits and processes VTP updates from any VTP Clients on the network on its trunk ports
Answer: C
Explanation:
The VTP mode of SW2 is transparent so it only forwards the VTP updates it receives to its trunk links without processing them.
NEW QUESTION # 351
Refer to the exhibit. Which configuration must be applied to the router that configures PAT to translate all addresses in VLAN 200 while allowing devices on VLAN
100 to use their own IP addresses?
- A. Router1(config)#access-list 99 permit 209.165.201.2 255.255.255.255
Router1(config)#ip nat inside source list 99 interface gi1/0/0 overload Router1(config)#interface gi2/0/1.200 Router1(config)#ip nat inside Router1(config)#interface gi1/0/0 Router1(config)#ip nat outside - B. Router1(config)#access-list 99 permit 192.168.100.0 0.0.0.255
Router1(config)#ip nat inside source list 99 interface gi1/0/0 overload Router1(config)#interface gi2/0/1.200 Router1(config)#ip nat inside Router1(config)#interface gi1/0/0 Router1(config)#ip nat outside - C. Router1(config)#access-list 99 permit 192.168.100.32 0.0.0.31
Router1(config)#ip nat inside source list 99 interface gi1/0/0 overload Router1(config)#interface gi2/0/1.200 Router1(config)#ip nat inside Router1(config)#interface gi1/0/0 Router1(config)#ip nat outside - D. Router1(config)#access- list 99 permit 209.165.201.2 0.0.0.0
Router1(config)#ip nat inside source list 99 interface gi1/0/0 overload Router1(config)#interface gi2/0/1.200 Router1(config)#ip nat inside Router1(config)#interface gi1/0/0 Router1(config)#ip nat outside
Answer: D
NEW QUESTION # 352
When a switch receives a frame for an unknown destination MAC address, how is the frame handled?
- A. inspected and dropped by the switch
- B. broadcast to all ports on the switch
- C. forwarded to the first available port
- D. flooded to all ports except the origination port
Answer: A
NEW QUESTION # 353
Refer to the exhibit. What is identified by the word `switch` within line 2 of the JSON Schema?
- A. array
- B. object
- C. key
- D. value
Answer: D
Explanation:
Key-value pairs have a colon between them as in "key" : "value".
NEW QUESTION # 354
Drag the descriptions of device management from the left onto the types of device management on the right.
Answer:
Explanation:
NEW QUESTION # 355
What is a function of Wireless LAN Controller?
- A. send LWAPP packets to access points.
- B. register with a single access point that controls traffic between wired and wireless endpoints.
- C. monitor activity on wireless and wired LANs
- D. use SSIDs to distinguish between wireless clients.
Answer: A
Explanation:
Lightweight APs (LAPs) is devices require no initial configuration. LAPs use the Lightweight Access Point Protocol (LWAPP) to communicate with a WLAN controller (WLC), as shown in the below figure. Controller-based APs are useful in situations where many APs are required in the network. As more APs are added, each AP is automatically configured and managed by the WLC.
NEW QUESTION # 356
Refer to the exhibit.
Which route type does the routing protocol Code D represent in the output?
- A. /24 route of a locally configured IP
- B. statically assigned route
- C. internal BGP route
- D. route learned through EIGRP
Answer: D
NEW QUESTION # 357
Refer to the exhibit. Which address and mask combination represents a summary of the routes learned by EIGRP?
- A. 192.168.25.0 255.255.255.252
- B. 192.168.25.16 255.255.255.240
- C. 192.168.25.28 255.255.255.252
- D. 192.168.25.28 255.255.255.240
- E. 192.168.25.0 255.255.255.240
- F. 192.168.25.16 255.255.255.252
Answer: B
Explanation:
The binary version of 20 is 10100.
The binary version of 16 is 10000.
The binary version of 24 is 11000.
The binary version of 28 is 11100.
The subnet mask is /28. The mask is 255.255.255.240.
Note:
From the output above, EIGRP learned 4 routes and we need to find out the summary of them:
+ 192.168.25.16
+ 192.168.25.20
+ 192.168.25.24
+ 192.168.25.28
-> The increment should bE. 28 ?16 = 12 but 12 is not an exponentiation of 2 so we must choose
16 (24). Therefore the subnet mask is /28 (=1111 1111.1111 1111.1111 1111.11110000) =
255.255.255.240
So the best answer should be 192.168.25.16 255.255.255.240
NEW QUESTION # 358
Which WPA3 enhancement protects against hackers viewing traffic on the Wi-Fi network?
- A. scrambled encryption key
- B. TKiP encryption
- C. AES encryption
- D. SAE encryption
Answer: D
NEW QUESTION # 359
What are two advantages of implementing a controller-based architecture instead of a traditional network architecture? (Choose two.)
- A. It enables configuration task automation.
- B. It increases security against denial-of-service attacks.
- C. It provides increased scalability and management options.
- D. It allows for seamless connectivity to virtual machines.
- E. It supports complex and high-scale IP addressing schemes.
Answer: A,C
NEW QUESTION # 360
Refer to the exhibit.
To which device does Router1 send packets that are destined to host 10.10.13.165?
- A. Router4
- B. Router5
- C. Router3
- D. Router2
Answer: C
NEW QUESTION # 361
Refer to the exhibit. After you apply the given configuration to a router, the DHCP clients behind the device cannot communicate with hosts outside of their subnet. Which action is most likely to correct the problem?
- A. Configure the default gateway
- B. Configure the dns server on the same subnet as the clients
- C. Correct the subnet mask
- D. Activate the dhcp pool
Answer: A
Explanation:
Configuring a DHCP server on a router:
conf t
service dhcp
ip dhcp pool <pool name>
network <network address of the pool>
default-router <ip address of the interface facing the hosts, or ip adress of the interface facing downstream clients> dns-server <ip address of dns-server> exit
NEW QUESTION # 362
What are two reasons a switch experiences frame flooding? (Choose two.)
- A. The forwarding table has overflowed
- B. An aged MAC (able entry is causing excessive updates
- C. A defective patch cable is connected to the switch port
- D. Port-security is configured globally
- E. Topology changes are occurring within spanning-tree
Answer: C,E
NEW QUESTION # 363
Drag and drop the Cisco Wireless LAN Controller security settings from the left onto the correct security mechanism categories on the right.
Answer:
Explanation:
NEW QUESTION # 364
Refer to the exhibit.
After running the code in the exhibit, which step reduces the amount of data that the NETCONF server returns to the NETCONF client, to only the interface's configuration?
- A. Use the Ixml library to parse the data returned by the NETCONF server for the interface's configuration.
- B. Create an XML filter as a string and pass it to get_config() method as an argument.
- C. Use the JSON library to parse the data returned by the NETCONF server for the interface's configuration.
- D. Create a JSON filter as a string and pass it to the get_config() method as an argument.
Answer: C
NEW QUESTION # 365
Which two functions are performed by the core layer in a three-tier architecture? (Choose two)
- A. Inspect packets for malicious activity.
- B. Ensure timely data transfer between layers.
- C. Provide direct connectivity for end user devices.
- D. Police traffic that is sent to the edge of the network.
- E. Provide uninterrupted forwarding service.
Answer: B,E
Explanation:
Cisco is very clear about the purpose of this layer. Its only role is to forward traffic, the fastest it can. Here you don't apply any policy, as you must try to reduce the load of the core so it can focus on routing.
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Campus/campover.html#wp708831
NEW QUESTION # 366
Refer to the exhibit.
Router R1 is running three different routing protocols. Which route characteristic is used by the router to forward the packet that it receives for destination IP 172.16.32.1?
- A. cost
- B. administrative distance
- C. metric
- D. longest prefix
Answer: B
NEW QUESTION # 367
Drag and drop the descriptions of file-transfer protocols from the left onto the correct protocols on the right.
Answer:
Explanation:
NEW QUESTION # 368
Refer to the exhibit.
The default-information originate command is configured under the R1 OSPF configuration. After testing, workstations on VLAN 20 at Site B cannot reach a DNS server on the Internet.
Which action corrects the configuration issue?
- A. Add the always keyword to the default-information originate command on R1.
- B. Configure the ip route 0.0.0.0 0.0.0.0 10.10.10.2 command on R2.
- C. Configure the ip route 0.0.0.0 0.0.0.0 10.10.10.18 command on R1.
- D. Add the default-information originate command on R2.
Answer: C
NEW QUESTION # 369
Which type of ipv6 address is publicly routable in the same way as ipv4 public addresses?
- A. global unicast
- B. unique local
- C. link-local
- D. multicast
Answer: A
NEW QUESTION # 370
......
Cisco 200-301 exam comprises of 120 questions, and the time duration for 200-301 exam is 120 minutes. 200-301 exam is available in multiple languages, and it can be taken at any Pearson VUE testing center worldwide. 200-301 exam fee for this certification is $300, and it may vary according to the country and the currency.
2024 New DumpsMaterials 200-301 PDF Recently Updated Questions: https://www.dumpsmaterials.com/200-301-real-torrent.html
Cisco 200-301 DUMPS WITH REAL EXAM QUESTIONS: https://drive.google.com/open?id=1ZpIoGE-yfAL-h13jbkl_u9IRAG9SYIr-
