🔍

200-301 — questions

Page 11 of 60 · 1182 total questions.

200-301 Question 231

Single page →
Topic 1 · Question 231

How do AAA operations compare regarding user identification, user services, and access control?

  • AAuthorization provides access control, and authentication tracks user services
  • BAuthentication identifies users, and accounting tracks user services (correct answer)
  • CAccounting tracks user services, and authentication provides access control
  • DAuthorization identifies users, and authentication provides access control
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Authentication identifies users, and accounting tracks user services

200-301 Question 232

Single page →
Topic 1 · Question 232

What is the difference between RADIUS and TACACS+?

  • ARADIUS logs all commands that are entered by the administrator, but TACACS+ logs only start, stop, and interim commands.
  • BTACACS+ separates authentication and authorization, and RADIUS merges them. (correct answer)
  • CTACACS+ encrypts only password information, and RADIUS encrypts the entire payload.
  • DRADIUS is most appropriate for dial authentication, but TACACS+ can be used for multiple types of authentication.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: TACACS+ separates authentication and authorization, and RADIUS merges them.

Explanation

RADIUS commonly provides centralized network access AAA and encrypts only the password field. TACACS+ encrypts the full payload and separates authentication, authorization, and accounting.

200-301 Question 233

Single page →
Topic 1 · Question 233

What is a difference between local AP mode and FlexConnect AP mode?

  • ALocal AP mode creates two CAPWAP tunnels per AP to the WLC (correct answer)
  • BLocal AP mode causes the AP to behave as if it were an autonomous AP
  • CFlexConnect AP mode fails to function if the AP loses connectivity with the WLC
  • DFlexConnect AP mode bridges the traffic from the AP to the WLC when local switching is configured
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Local AP mode creates two CAPWAP tunnels per AP to the WLC

Explanation

CAPWAP tunnels wireless control and optionally data traffic between access points and a controller.

200-301 Question 234

Single page →
Topic 1 · Question 234 · Select all that apply

The SW1 interface g0/1 is in the down/down state. What are two reasons for the interface condition? (Choose two.)

  • AThere is a protocol mismatch
  • BThere is a duplex mismatch
  • CThe interface is shut down
  • DThe interface is error-disabled (correct answer)
  • EThere is a speed mismatch (correct answer)
Reveal answer & explanation
Correct answer: D, E

The correct answer is D, E. Option D: The interface is error-disabled Option E: There is a speed mismatch

200-301 Question 235

Single page →
Topic 1 · Question 235

How will Link Aggregation be implemented on a Cisco Wireless LAN Controller?

  • AThe EtherChannel must be configured in "mode active".
  • BWhen enabled, the WLC bandwidth drops to 500 Mbps.
  • CTo pass client traffic, two or more ports must be configured.
  • DOne functional physical port is needed to pass client traffic. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: One functional physical port is needed to pass client traffic.

200-301 Question 236

Single page →
Topic 1 · Question 236 · Select all that apply

Which two conditions must be met before SSH operates normally on a Cisco IOS switch? (Choose two.)

  • AIP routing must be enabled on the switch.
  • BA console password must be configured on the switch.
  • CTelnet must be disabled on the switch.
  • DThe switch must be running a k9 (crypto) IOS image. (correct answer)
  • EThe ip domain-name command must be configured on the switch. (correct answer)
Reveal answer & explanation
Correct answer: D, E

The correct answer is D, E. Option D: The switch must be running a k9 (crypto) IOS image. Option E: The ip domain-name command must be configured on the switch.

200-301 Question 237

Single page →
Topic 1 · Question 237

Refer to the exhibit. Which password must an engineer use to enter the enable mode?

Exhibit 1 for question 237
  • Aadminadmin123
  • Bcisco123
  • Cdefault
  • Dtesting1234 (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: testing1234

200-301 Question 238

Single page →
Topic 1 · Question 238

Which state does the switch port move to when PortFast is enabled?

  • Ablocking
  • Blistening
  • Clearning
  • Dforwarding (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: forwarding

200-301 Question 239

Single page →
Topic 1 · Question 239

Which protocol prompts the Wireless LAN Controller to generate its own local web administration SSL certificate for GUI access?

  • ARADIUS
  • BHTTPS (correct answer)
  • CTACACS+
  • DHTTP
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: HTTPS

200-301 Question 240

Single page →
Topic 1 · Question 240

An engineer must configure interswitch VLAN communication between a Cisco switch and a third-party switch. Which action should be taken?

  • Aconfigure DSCP
  • Bconfigure IEEE 802.1q (correct answer)
  • Cconfigure ISL
  • Dconfigure IEEE 802.1p
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: configure IEEE 802.1q

Explanation

IEEE 802.1Q inserts a VLAN tag into Ethernet frames carried over a trunk.

200-301 Question 241

Single page →
Topic 1 · Question 241

An engineer requires a switch interface to actively attempt to establish a trunk link with a neighbor switch. What command must be configured?

  • Aswitchport mode trunk
  • Bswitchport mode dynamic desirable (correct answer)
  • Cswitchport nonegotiate
  • Dswitchport mode dynamic auto
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: switchport mode dynamic desirable

200-301 Question 242

Single page →
Topic 1 · Question 242

Refer to the exhibit. After the election process, what is the root bridge in the HQ LAN? Switch 1: 0C:E0:38:81:32:58 - Switch 2: 0C:0E:15:22:1A:61 - Switch 3: 0C:0E:15:1D:3C:9A - Switch 4: 0C:E0:19:A1:4D:16 -

Exhibit 1 for question 242
  • ASwitch 1
  • BSwitch 2
  • CSwitch 3 (correct answer)
  • DSwitch 4
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Switch 3

200-301 Question 243

Single page →
Topic 1 · Question 243

An engineer must establish a trunk link between two switches. The neighboring switch is set to trunk or desirable mode. What action should be taken?

  • Aconfigure switchport nonegotiate
  • Bconfigure switchport mode dynamic desirable (correct answer)
  • Cconfigure switchport mode dynamic auto
  • Dconfigure switchport trunk dynamic desirable
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: configure switchport mode dynamic desirable

200-301 Question 244

Single page →
Topic 1 · Question 244

Which spanning-tree enhancement avoids the learning and listening states and immediately places ports in the forwarding state?

  • ABPDUfilter
  • BPortFast (correct answer)
  • CBackbonefast
  • DBPDUguard
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: PortFast

200-301 Question 245

Single page →
Topic 1 · Question 245

How does the dynamically-learned MAC address feature function?

  • AThe CAM table is empty until ingress traffic arrives at each port (correct answer)
  • BSwitches dynamically learn MAC addresses of each connecting CAM table.
  • CThe ports are restricted and learn up to a maximum of 10 dynamically-learned addresses
  • DIt requires a minimum number of secure MAC addresses to be filled dynamically
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: The CAM table is empty until ingress traffic arrives at each port

200-301 Question 246

Single page →
Topic 1 · Question 246

When using Rapid PVST+, which command guarantees the switch is always the root bridge for VLAN 200?

  • Aspanning-tree vlan 200 priority 614440
  • Bspanning-tree vlan 200 priority 0 (correct answer)
  • Cspanning-tree vlan 200 root primary
  • Dspanning-tree vlan 200 priority 38813258
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: spanning-tree vlan 200 priority 0

Explanation

A VLAN creates a separate Layer 2 broadcast domain on switched infrastructure.

200-301 Question 247

Single page →
Topic 1 · Question 247

Refer to the exhibit. Which command must be executed for Gi1/1 on SW1 to passively become a trunk port if Gi1/1 on SW2 is configured in desirable or trunk mode?

Exhibit 1 for question 247
  • Aswitchport mode dynamic auto (correct answer)
  • Bswitchport mode dot1-tunnel
  • Cswitchport mode dynamic desirable
  • Dswitchport mode trunk
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: switchport mode dynamic auto

200-301 Question 248

Single page →
Topic 1 · Question 248

Refer to the exhibit. The entire contents or the MAC address table are shown. Sales-4 sends a data frame to Sales-1. What does the switch do as it receives the frame from Sales-4?

Exhibit 1 for question 248Exhibit 2 for question 248
  • AMap the Layer 2 MAC address to the Layer 3 IP address and forward the frame.
  • BInsert the source MAC address and port into the forwarding table and forward the frame to Sales-1. (correct answer)
  • CPerform a lookup in the MAC address table and discard the frame due to a missing entry.
  • DFlood the frame out of all ports except on the port where Sales-1 is connected.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Insert the source MAC address and port into the forwarding table and forward the frame to Sales-1.

Explanation

OSPF elects a designated router on multiaccess networks to reduce adjacency and LSA exchange overhead.

200-301 Question 249

Single page →
Topic 1 · Question 249

Refer to the exhibit. An engineer must configure GigabitEthernet1/1 to accommodate voice and data traffic. Which configuration accomplishes this task?

Exhibit 1 for question 249
  • Ainterface gigabitethernet1/1 switchport mode access switchport access vlan 300 switchport voice vlan 400 (correct answer)
  • Binterface gigabitethernet1/1 switchport mode trunk switchport trunk vlan 300 switchport trunk vlan 400
  • Cinterface gigabitethernet1/1 switchport mode access switchport voice vlan 300 switchport access vlan 400
  • Dinterface gigabitethernet1/1 switchport mode trunk switchport trunk vlan 300 switchport voice vlan 400
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: interface gigabitethernet1/1 switchport mode access switchport access vlan 300 switchport voice vlan 400

Explanation

A VLAN creates a separate Layer 2 broadcast domain on switched infrastructure.

200-301 Question 250

Single page →
Topic 1 · Question 250

An engineer needs to add an old switch back into a network. To prevent the switch from corrupting the VLAN database, with action must be taken?

  • AAdd the switch in the VTP domain with a lower revision number. (correct answer)
  • BAdd the switch in the VTP domain with a higher revision number.
  • CAdd the switch with DTP set to dynamic desirable.
  • DAdd the switch with DTP set to desirable.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Add the switch in the VTP domain with a lower revision number.

Showing questions 201–220 of 1182 · Page 11 of 60