200-301 — questions

Page 27 of 60 · 1182 total questions.

200-301 Question 566

Single page →

Topic 1 · Question 566

R1 as an NTP server must have: • NTP authentication enabled • NTP packets sourced from Interface loopback 0 • NTP stratum 2 • NTP packets only permitted to client IP 209.165.200.225 How should R1 be configured?

Antp authenticate ntp authentication-key 2 sha1 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp master 2 ! access-list 10 permit udp host 209.165.200.225 any eq 123
Bntp authenticate ntp authentication-key 2 md5 CISCO123 ntp interface Loopback0 ntp access-group server-only 10 ntp stratum 2 ! access-list 10 permit 209.165.200.225
Cntp authenticate ntp authentication-key 2 md5 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp master 2 ! access-list 10 permit 209.165.200.225 (correct answer)
Dntp authenticate ntp authentication-key 2 md5 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp stratum 2 ! access-list 10 permit udp host 209.165.200.225 any eq 123

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: ntp authenticate ntp authentication-key 2 md5 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp master 2 ! access-list 10 permit 209.165.200.225

Explanation

NTP synchronizes device clocks so logs, certificates, and operations share consistent time.

200-301 Question 567

Single page →

Topic 1 · Question 567

What is a capability of FTP in network management operations?

Aoffers proprietary support at the session layer when transferring data
Buses separate control and data connections to move files between server and client (correct answer)
Cencrypts data before sending between data resources
Ddevices are directly connected and use UDP to pass file information

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: uses separate control and data connections to move files between server and client

200-301 Question 568

Single page →

Topic 1 · Question 568

A network engineer is configuring a switch so that it is remotely reachable via SSH. The engineer has already configured the host name on the router. Which additional command must the engineer configure before entering the command to generate the RSA key?

Apassword password
Bip ssh authentication-retries 2
Cip domain-name domain (correct answer)
Dcrypto key generate rsa modulus 1024

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: ip domain-name domain

200-301 Question 569

Single page →

Topic 1 · Question 569

Which QoS traffic handling technique retains excess packets in a queue and reschedules these packets for later transmission when the configured maximum bandwidth has been surpassed?

Atraffic policing
Bweighted random early detection
Ctraffic prioritization
Dtraffic shaping (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: traffic shaping

200-301 Question 570

Single page →

Topic 1 · Question 570

Which command must be entered to configure a DHCP relay?

Aip dhcp relay
Bip dhcp pool
Cip address dhcp
Dip helper-address (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: ip helper-address

Explanation

OSPF elects a designated router on multiaccess networks to reduce adjacency and LSA exchange overhead.

200-301 Question 571

Single page →

Topic 1 · Question 571

Refer to the exhibit. The DHCP server and clients are connected to the same switch. What is the next step to complete the DHCP configuration to allow clients on VLAN 1 to receive addresses from the DHCP server?

AConfigure the ip dhcp snooping trust command on the interface that is connected to the DHCP client.
BConfigure ip dhcp relay information option command on the interface that is connected to the DHCP server.
CConfigure ip dhcp snooping trust command on the interface that is connected to the DHCP server. (correct answer)
DConfigure the ip dhcp information option command on the interface that is connected to the DHCP client.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Configure ip dhcp snooping trust command on the interface that is connected to the DHCP server.

Explanation

DHCP dynamically supplies clients with IP configuration parameters. DHCP snooping blocks untrusted DHCP server messages and builds a trusted binding database.

200-301 Question 572

Single page →

Topic 1 · Question 572

A network analyst is tasked with configuring the date and time on a router using EXEC mode. The date must be set to January 1, 2020 and the time must be set to 12:00 am. Which command should be used?

Aclock timezone
Bclock summer-time date
Cclock summer-time recurring
Dclock set (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: clock set

200-301 Question 573

Single page →

Topic 1 · Question 573

Refer to the exhibit. What is the metric of the route to the 192.168.10.33/28 subnet?

A84
B110
C192
D193 (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: 193

200-301 Question 574

Single page →

Topic 1 · Question 574

Which command creates a static NAT binding for a PC address of 10.1.1.1 to the public routable address 209.165.200.225 assigned to the PC?

AR1(config)#ip nat inside source static 10.1.1.1 209.165.200.225 (correct answer)
BR1(config)#ip nat outside source static 209.165.200.225 10.1.1.1
CR1(config)#ip nat inside source static 209.165.200.225 10.1.1.1
DR1(config)#ip nat outside source static 10.1.1.1 209.165.200.225

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: R1(config)#ip nat inside source static 10.1.1.1 209.165.200.225

Explanation

NAT translates addresses between network domains, commonly conserving public IPv4 addresses.

200-301 Question 575

Single page →

Topic 1 · Question 575

What prevents a workstation from receiving a DHCP address?

ASTP (correct answer)
BVTP
C802.1Q
DDTP

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: STP

Explanation

Spanning Tree Protocol prevents Layer 2 loops by placing redundant paths into blocking states.

200-301 Question 576

Single page →

Topic 1 · Question 576

What is a feature of TFTP?

Aoffers anonymous user login ability (correct answer)
Buses two separate connections for control and data traffic
Crelies on the well-known TCP port 20 to transmit data
Dprovides secure data transfer

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: offers anonymous user login ability

200-301 Question 577

Single page →

Topic 1 · Question 577

Which QoS forwarding per-hop behavior changes a specific value in a packet header to set the class of service for the packet?

Ashaping
Bclassification
Cpolicing
Dmarking (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: marking

200-301 Question 578

Single page →

Topic 1 · Question 578

Refer to the exhibit. How should the configuration be updated to allow PC1 and PC2 access to the Internet?

AModify the configured number of the second access list
BChange the ip nat inside source command to use interface GigabitEthernet0/0
CRemove the overload keyword from the ip nat inside source command
DAdd either the ip nat {inside|outside} command under both interfaces (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Add either the ip nat {inside|outside} command under both interfaces

Explanation

NAT translates addresses between network domains, commonly conserving public IPv4 addresses.

200-301 Question 579

Single page →

Topic 1 · Question 579

What is the purpose of the ip address dhcp command?

Ato configure an interface as a DHCP relay
Bto configure an interface as a DHCP client (correct answer)
Cto configure an interface as a DHCP helper
Dto configure an interface as a DHCP server

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: to configure an interface as a DHCP client

Explanation

DHCP dynamically supplies clients with IP configuration parameters.

200-301 Question 580

Single page →

Topic 1 · Question 580

Refer to the exhibit. Which configuration enables DHCP addressing for hosts connected to interface FastEthernet0/1 on router R4?

Ainterface FastEthernet0/1 ip helper-address 10.0.1.1 ! access-list 100 permit tcp host 10.0.1.1 eq 67 host 10.148.2.1
Binterface FastEthernet0/0 ip helper-address 10.0.1.1 ! access-list 100 permit udp host 10.0.1.1 eq bootps host 10.148.2.1
Cinterface FastEthernet0/0 ip helper-address 10.0.1.1 ! access-list 100 permit host 10.0.1.1 host 10.148.2.1 eq bootps
Dinterface FastEthernet0/1 ip helper-address 10.0.1.1 ! access-list 100 permit udp host 10.0.1.1 eq bootps host 10.148.2.1 (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: interface FastEthernet0/1 ip helper-address 10.0.1.1 ! access-list 100 permit udp host 10.0.1.1 eq bootps host 10.148.2.1

Explanation

OSPF elects a designated router on multiaccess networks to reduce adjacency and LSA exchange overhead.

200-301 Question 582

Single page →

Topic 1 · Question 582

An engineer is configuring SSH version 2 exclusively on the R1 router. What is the minimum configuration required to permit remote management using the cryptographic protocol?

Ahostname R1 service password-encryption crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input ssh login local
Bhostname R1 ip domain name cisco crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input ssh login local (correct answer)
Chostname R1 crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input ssh login local
Dhostname R1 ip domain name cisco crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input all login local

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: hostname R1 ip domain name cisco crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input ssh login local

Explanation

SSH provides encrypted remote CLI administration and should replace insecure Telnet.

200-301 Question 583

Single page →

Topic 1 · Question 583

Which per-hop traffic-control feature does an ISP implement to mitigate the potential negative effects of a customer exceeding its committed bandwidth?

Apolicing (correct answer)
Bqueuing
Cmarking
Dshaping

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: policing

200-301 Question 585

Single page →

Topic 1 · Question 585

Which remote access protocol provides unsecured remote CLI access?

Aconsole
BTelnet (correct answer)
CSSH
DBash

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Telnet This option keeps traffic private / properly secured as required.

200-301 Question 587

Single page →

Topic 1 · Question 587

Refer to the exhibit. Which router or router group are NTP clients?

AR1
BR2 and R3
CR1, R3, and R4
DR1, R2, and R3 (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: R1, R2, and R3

200-301 Question 588

Single page →

Topic 1 · Question 588

Refer to the exhibit. What is the next step to complete the implementation for the partial NAT configuration shown?

AModify the access list for the internal network on e0/1.
BReconfigure the static NAT entries that overlap the NAT pool.
CApply the ACL to the pool configuration.
DConfigure the NAT outside interface. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Configure the NAT outside interface.

Explanation

NAT translates addresses between network domains, commonly conserving public IPv4 addresses.

Showing questions 521–540 of 1182 · Page 27 of 60