Use Cisco 200-301 Dumps To Succeed Instantly in 200-301 Exam
Ultimate Guide to 200-301 Dumps - Enhance Your Future Career Now
Topics Covered in Cisco 200-301 Exam
In a nutshell, the Cisco 200-301 exam embodies the questions covering the basics of the latest technologies and software development knowledge. The skills measured in the test tackle various topics, including but not limited to:
- Security basics – 15%;
- IP services – 10%;
- Network fundamentals – 20%;
Why Pick Cisco 200-301 Exam?
Through this 200-301, you will demonstrate your expertise in handling significant security concerns. This exam puts into the spotlight your knowledge of the current security threat landscape, and threat defense technologies among the rest. Furthermore, you will become adept at dealing with the security configuration of device management.
NEW QUESTION # 1078
Refer to the exhibit.
What is the effect of this configuration?
- A. The switch port remains down until it is configured to trust or untrust incoming packets
- B. Dynamic ARP inspection is disabled because the ARP ACL is missing
- C. The switch port remains administratively down until the interface is connected to another switch
- D. The switch port interface trust state becomes untrusted
Answer: D
Explanation:
Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network. It intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. This capability protects the network from certain man-in-the-middle attacks. After enabling DAI, all ports become untrusted ports.
NEW QUESTION # 1079
Refer to the exhibit.
Which minimum configuration items are needed to enable Secure Shell version 2 access to R15?
A)
B)
C)
D)
- A. Option A
- B. Option B
- C. Option D
- D. Option C
Answer: D
NEW QUESTION # 1080
Drag and drop the functions of AAA supporting protocols from the left onto the protocols on the right.
Answer:
Explanation:
Explanation:
NEW QUESTION # 1081
Which two capabilities of Cisco DNA Center make it more extensible? (Choose two.)
- A. adapters that support all families of Cisco IOS Software
- B. SDKs that support interaction with third-party network equipment
- C. modular design that is upgradable as needed
- D. customized versions for small, medium, and large enterprises
- E. REST APIs that allow for external applications to interact natively with Cisco DNA Center
Answer: B,E
NEW QUESTION # 1082
Drag and drop the descriptions of IP protocol transmissions from the left onto the IP traffic types on the right.
Answer:
Explanation:
Explanation:
NEW QUESTION # 1083
Refer to the exhibit.
An engineer executed the script and added commands that were not necessary for SSH and now must remove the commands.
- A. cost
- B. longest prefix
- C. administrative distance
- D. metric
Answer: C
NEW QUESTION # 1084
When troubleshooting client DNS issues, which two tasks must you perform? (Choose two)
- A. Ping the DNS Server.
- B. Determine whether the hardware address is correct.
- C. Determine whether a DHCP address has been assigned.
- D. Ping a public website IP address.
- E. Determine whether the name servers have been configured
Answer: A,E
Explanation:
In order for DNS to work you have to have a name server configured (either statically or dynamically) and you must be able to reach it (which, presumably, could be verified via ping).
NEW QUESTION # 1085
Refer to the exhibit.
The New York router is configured with static routes pointing to the Atlanta and Washington sites. Which two tasks must be performed so that the Serial0/0/0 interfaces on the Atlanta and Washington routers can reach one another?
(Choose two.)
- A. Configure the ipv6 route 2023::/126 2012::1 command on the Atlanta router.
- B. Configure the Ipv6 route 2012::/126 s0/0/0 command on the Atlanta router
- C. Configure the ipv6 route 2012::/126 2023::1 command on the Washington router
- D. Configure the ipv6 route 2012::/126 2023::2 command on the Washington router
- E. Configure the ipv6 route 2023::/126 2012::2 command on the Atlanta router
Answer: B,D
NEW QUESTION # 1086
Which two actions influence the EIGRP route selection process? (Choose two)
- A. The router calculates the reported distance by multiplying the delay on the exiting Interface by 256.
- B. The router calculates the feasible distance of all paths to the destination route
- C. The router calculates the best backup path to the destination route and assigns it as the feasible successor.
- D. The advertised distance is calculated by a downstream neighbor to inform the local router of the bandwidth on the link
- E. The router must use the advertised distance as the metric for any given route
Answer: B,C
Explanation:
Explanation
The reported distance (or advertised distance) is the cost from the neighbor to the destination. It is calculated from the router advertising the route to the network. For example in the topology below, suppose router A & B are exchanging their routing tables for the first time. Router B says "Hey, the best metric (cost) from me to IOWA is 50 and the metric from you to IOWA is 90" and advertises it to router A.
Router A considers the first metric (50) as the Advertised distance. The second metric (90), which is from NEVADA to IOWA (through IDAHO), is called the Feasible distance.
The reported distance is calculated in the same way of calculating the metric. By default (K1 = 1, K2 = 0, K3
= 1, K4 = 0, K5 = 0), the metric is calculated as follows:
NEW QUESTION # 1087
Refer to the exhibit.
which path is used by the router for internet traffic ?
- A. 209.165.200.0/27
- B. 0.0.0.0/0
- C. 10.10.13.0/24
- D. 10.10.10.0/28
Answer: B
NEW QUESTION # 1088 
Refer to the exhibit.
Which configuration is needed to configure a WLAN with WPA2 only and with a password that is 63 characters long?
- A. Disable WPA Policy and WPA Encryption and then enable PSK using ASCII.
- B. Enable PSK and FT PSK and then disable WPA Policy.
- C. Enable PSK using Hex format and then disable WPA Policy.
- D. Disable WPA Encryption and then enable FT PSK.
Answer: A
NEW QUESTION # 1089
Refer to the exhibit. Which two commands were used to create port channel 10? (Choose two.)
- A. int range g0/0-1
channel-group 10 mode on - B. int range g0/0-1
channel-group 10 mode auto - C. int range g0/0-1
channel-group 10 mode passive - D. int range g0/0-1
channel-group 10 mode active - E. int range g0/0-1
channel-group 10 mode desirable
Answer: C,D
Explanation:
PAgP- Disirable/Auto (Link formation)
LACP- Active/Active or Active/Passive (Link formation)
NEW QUESTION # 1090
Refer to the exhibit.
Which set of commands must be applied to the two switches to configure an LACP Layer 2 EtherChannel?
- A.
- B.
- C.
- D.
Answer: C
NEW QUESTION # 1091
Which purpose does a northbound API serve in a controller-based networking architecture?
- A. reports device errors to a controller
- B. communicates between the controller and the physical network hardware
- C. facilitates communication between the controller and the applications
- D. generates statistics for network hardware and traffic
Answer: C
Explanation:
A northbound interface is an interface that allows a particular component of a network to communicate with a higher-level component. Conversely, a southbound interface allows a particular network component to communicate with a lower-level component.
In a figurative sense, northbound flow can be thought of as going upward, while southbound flow can be thought of as going downward. In architectural diagrams, northbound interfaces are drawn at the top of the applicable component, while southbound interfaces are drawn at the bottom of the component. While the terms northbound and southbound can apply to almost any type of network or computer system, in recent years they have been used increasingly in conjunction with application program interfaces (APIs) in software-defined networking (SDN).
In SDN, the southbound interface is the OpenFlow (or alternative) protocol specification. Its main function is to enable communication between the SDN controller and the network nodes (both physical and virtual switches and routers) so that the router can discover network topology, define network flows and implement requests relayed to it via northbound APIs. The northbound interface describes the area of protocol-supported communication between the controller and applications or higher layer control programs.
NEW QUESTION # 1092
An engineer must configure a/30 subnet between two routers. Which usable IP address and subnet mask combination meets this criteria?
- A. Option B
- B. Option D
- C. Option C
- D. Option A
Answer: D
NEW QUESTION # 1093
Drag and drop the application protocols from the left onto the transport protocols that it uses on the right
Answer:
Explanation:
NEW QUESTION # 1094
All physical cabling is in place. Router R4 and PCI are fully configured and inaccessible. R4's WAN interfaces use .4 in the last octet for each subnet.
Configurations should ensure that connectivity is established end-to-end.
1 . Configure static routing to ensure RI prefers the path through R2 to reach only PCI on R4's LAN
2. Configure static routing that ensures traffic sourced from RI will take an alternate path through R3 to PCI in the event of an outage along the primary path
3. Configure default routes on RI and R3 to the Internet using the least number of hops Guidelines This is a lab item in which tasks will be performed on virtual devices.
* Refer to the Tasks tab to view the tasks for this lab item.
* Refer to the Topology tab to access the device console(s) and perform the tasks.
* Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.
* All necessary preconfigurations have been applied.
* Do not change the enable password or hostname for any device.
* Save your configurations to NVRAM before moving to the next item.
* Click Next at the bottom of the screen to submit this lab and move to the next question.
* When Next is clicked, the lab closes and cannot be reopened.
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
* To configure static routing on R1 to ensure that it prefers the path through R2 to reach only PC1 on R4' s LAN, you need to create a static route for the host 10.0.0.100/8 with a next-hop address of 20.0.0.2, which is the IP address of R2's interface connected to R1. You also need to assign a lower administrative distance (AD) to this route than the default AD of 1 for static routes, so that it has a higher preference over other possible routes. For example, you can use an AD of 10 for this route. To create this static route, you need to enter the following commands on R1's console:
R1#configure terminal R1(config)#ip route 10.0.0.100 255.0.0.0 20.0.0.2 10 R1(config)#end
* To configure static routing on R1 that ensures that traffic sourced from R1 will take an alternate path through R3 to PC1 in the event of an outage along the primary path, you need to create another static route for the host 10.0.0.100/8 with a next-hop address of 40.0.0.2, which is the IP address of R3's interface connected to R1. You also need to assign a higher AD to this route than the AD of the primary route, so that it has a lower preference and acts as a backup route. For example, you can use an AD of
20 for this route. This type of static route is also known as a floating static route. To create this static route, you need to enter the following commands on R1's console:
R1#configure terminal R1(config)#ip route 10.0.0.100 255.0.0.0 40.0.0.2 20 R1(config)#end
* To configure default routes on R1 and R3 to the Internet using the least number of hops, you need to create a static route for the network 0.0.0.0/0 with a next-hop address of the ISP's interface connected to each router respectively. A default route is a special type of static route that matches any destination address and is used when no other specific route is available. The ISP's interface connected to R1 has an IP address of 10.0.0.4, and the ISP's interface connected to R3 has an IP address of 50.0.0.4. To create these default routes, you need to enter the following commands on each router's console:
On R1: R1#configure terminal R1(config)#ip route 0.0.0.0 0.0.0.0 10.0.0.4 R1(config)#end On R3: R3#configure terminal R3(config)#ip route 0.0.0.0 0.0.0.0 50.0.0.4 R3(config)#end
NEW QUESTION # 1095
What are two benefits of FHRPs? (Choose two.)
- A. They are able to bundle muftlple ports to increase bandwidth
- B. They enable automatic failover of the default gateway.
- C. They allow encrypted traffic.
- D. They prevent (oops in the Layer 2 network.
- E. They allow multiple devices lo serve as a single virtual gateway for clients in the network
Answer: B,E
NEW QUESTION # 1096
A Cisco IP phone receive untagged data traffic from an attached PC. Which action is taken by the phone?
- A. It allows the traffic to pass through unchanged
- B. It tags the traffic with the native VLAN
- C. It drops the traffic
- D. It tags the traffic with the default VLAN
Answer: A
Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/vlan
/configuration_guide/b_vlan_152ex_2960-x_cg/b_vlan_152ex_2960-x_cg_chapter_0110.pdf Untagged traffic from the device attached to the Cisco IP Phone passes through the phone unchanged, regardless of the trust state of the access port on the phone.
NEW QUESTION # 1097
What is a function of Wireless LAN Controller?
- A. use SSIDs to distinguish between wireless clients.
- B. register with a single access point that controls traffic between wired and wireless endpoints.
- C. monitor activity on wireless and wired LANs
- D. send LWAPP packets to access points.
Answer: D
Explanation:
Explanation
Lightweight APs (LAPs) is devices require no initial configuration. LAPs use the Lightweight Access Point Protocol (LWAPP) to communicate with a WLAN controller (WLC), as shown in the below figure.
Controller-based APs are useful in situations where many APs are required in the network. As more APs are added, each AP is automatically configured and managed by the WLC.
NEW QUESTION # 1098
Refer to the exhibit.
- A.
- B.
- C.
- D.
Answer: A
NEW QUESTION # 1099
Refer to the exhibit.
An administrator must turn off the Cisco Discovery Protocol on the port configured with address last usable address in the 10.0.0.0/30 subnet. Which command set meets the requirement?
- A. interface gi0/1no cdp enable
- B. interface gi0/0no cdp run
- C. interface gi0/1clear cdp table
- D. interface gi0/0no cdp advertise-v2
Answer: B
NEW QUESTION # 1100
Which type of wireless encryption is used for WPA2 in preshared key mode?
- A. AES-256
- B. AES-128
- C. RC4
- D. TKIP with RC4
Answer: A
Explanation:
Explanation
We can see in this picture we have to type 64 hexadecimal characters (256 bit) for the WPA2 passphrase so we can deduce the encryption is AES-256, not AES-128.
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/67134-wpa2-config.html
NEW QUESTION # 1101
Which type of ipv6 address is publicly routable in the same way as ipv4 public addresses?
- A. global unicast
- B. link-local
- C. multicast
- D. unique local
Answer: A
NEW QUESTION # 1102
......
Each of these objectives comes with a specific set of skills that are described in detail below:
This topic includes the following skills: explaining the network components role; describing network topology architectures; comparing cabling and physical interface types; defining cable and interface issues (collisions, speed, errors, mismatch duplex); comparing TCP and UDP; customizing and verifying subnetting IPv4 subnetting and addressing; describing the necessity of private IPv4 addressing; customizing and verifying IPv6 prefix and addressing; comparing IPv6 address types; verifying IP parameters for Client OS (Linux, Windows, Mac OS); describing switching principles; explaining wireless concepts; explaining virtualization basics (virtual machines).
Within this domain, the examinees need to demonstrate their ability to: interpret the routing table components (routing protocol code, network mask, prefix, next hop, last resort gateway, administrative distance, metric); customize IPv4 and IPv6 static routing (host route, default route, floating static, network route); identify how a router makes a forwarding decision by default (administrative distance, longest match, routing protocol metric); customize and verify single area OSPFv2 (point-to-point, neighbor adjacencies, router ID, broadcast); explain the objective of first hop redundancy protocol.
This subject area evaluates the following skills of the candidates: identifying core security concepts (vulnerabilities, threats, exploits, mitigation techniques); explaining security program elements (physical access control, user awareness, and training); customizing device access control using local passwords; explaining the elements of security password policies, including complexity, management, password alternatives (multifactor authentication, certificates, and biometrics); describing site-to-site VPNs and remote access; configuring and verifying access control lists; configuring security features of Layer 2 (dynamic ARP inspection, DHCP snooping, port security); differentiating accounting, authentication, and authorization concepts; describing WPA, WPA2, and WPA3 security protocols; customizing WLAN with the help of WPA2 PSK.
Here the applicants need to demonstrate that they are capable of: explaining how automation affects network management; distinguishing traditional networks from controller-based networking; describing software defined and controller-based architectures (fabric, overlay, underlay); distinguishing traditional campus device management from Cisco DNA Center enabled device management; describing REST-based APIs characteristics (data encoding, CRUD, HTTP verbs); recognizing the abilities of Puppet, Chef, and Ansible configuration management mechanisms; interpreting JSON encoded data.
This objective combines the questions that check competency of the test takers in: customizing and verifying within source NAT with the help of static and pools; customizing and verifying NTP operating in a server and client mode; explaining the function of DHCP and DNS within the network; explaining the role of SNMP in executing network operations; describing the utilization of syslog features including facilities and levels; customizing and verifying DHCP relay and client; explaining the forwarding per-hop behavior (PHB) for QoS, including classification, queuing, marking, shaping, congestion, policing; customizing remote access network devices with the help of SSH; describing the function of TFTP/FTP in the network.
Cisco Dumps - Learn How To Deal With The Exam Anxiety: https://pass4sure.trainingquiz.com/200-301-training-materials.html
