200-301 — questions

Page 28 of 60 · 1182 total questions.

200-301 Question 589

Single page →

Topic 1 · Question 589

What is a syslog facility?

Ahost that is configured for the system to send log messages
Bpassword that authenticates a Network Management System to receive log messages
Cgroup of log messages associated with the configured severity level
Dset of values that represent the processes that can generate a log message (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: set of values that represent the processes that can generate a log message

200-301 Question 591

Single page →

Topic 1 · Question 591

Refer to the exhibit. A newly configured PC fails to connect to the internet by using TCP port 80 to www.cisco.com. Which setting must be modified for the connection to work?

ASubnet Mask
BDNS Servers (correct answer)
CDefault Gateway
DDHCP Servers

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: DNS Servers

Explanation

DNS resolves domain names to resource records such as IP addresses.

200-301 Question 592

Single page →

Topic 1 · Question 592

Which QoS queuing method discards or marks packets that exceed the desired bit rate of traffic flow?

ACBWFQ
Bpolicing (correct answer)
CLLQ
Dshaping

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: policing

200-301 Question 593

Single page →

Topic 1 · Question 593

Which QoS per-hop behavior changes the value of the ToS field in the IPv4 packet header?

AShaping
BPolicing
CClassification
DMarking (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Marking

200-301 Question 594

Single page →

Topic 1 · Question 594

What is the function of FTP?

AAlways operated without user connection validation
BUses block number to identify and mitigate data-transfer errors (correct answer)
CRelies on the well-known UDO port 69 for data transfer
DUses two separate connections for control and data traffic

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Uses block number to identify and mitigate data-transfer errors

200-301 Question 595

Single page →

Topic 1 · Question 595

How does TFTP operate in a network?

AProvides secure data transfer
BRelies on the well-known TCP port 20 to transmit data
CUses block numbers to identify and mitigate data-transfer errors (correct answer)
DRequires two separate connections for control and data traffic

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Uses block numbers to identify and mitigate data-transfer errors

200-301 Question 596

Single page →

Topic 1 · Question 596

Refer to the exhibit. Which plan must be implemented to ensure optimal QoS marking practices on this network?

ATrust the IP phone markings on SW1 and mark traffic entering SW2 at SW2 (correct answer)
BAs traffic traverses MLS1 remark the traffic, but trust all markings at the access layer
CRemark traffic as it traverses R1 and trust all markings at the access layer.
DAs traffic enters from the access layer on SW1 and SW2, trust all traffic markings.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Trust the IP phone markings on SW1 and mark traffic entering SW2 at SW2

200-301 Question 597

Single page →

Topic 1 · Question 597

How does QoS optimize voice traffic?

Aby reducing bandwidth usage
Bby reducing packet loss (correct answer)
Cby differentiating voice and video traffic
Dby increasing jitter

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: by reducing packet loss

200-301 Question 598

Single page →

Topic 1 · Question 598

Which QoS tool can you use to optimize voice traffic on a network that is primarily intended for data traffic?

AWRED
BFIFO
CPQ (correct answer)
DWFQ

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: PQ

200-301 Question 599

Single page →

Topic 1 · Question 599

Refer to the exhibit. Users on existing VLAN 100 can reach sites on the Internet. Which action must the administrator take to establish connectivity to the Internet for users in VLAN 200?

ADefine a NAT pool on the router.
BConfigure the ip nat outside command on another interface for VLAN 200
CConfigure static NAT translations for VLAN 200.
DUpdate the NAT_INSIDE_RANGES ACL. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Update the NAT_INSIDE_RANGES ACL.

Explanation

NAT translates addresses between network domains, commonly conserving public IPv4 addresses. An access control list evaluates ordered permit and deny entries and ends with an implicit deny.

An organization secures its network with multi-factor authentication using an authenticator app on employee smartphones. How is the application secured in the case of a user's smartphone being lost or stolen?

AThe application requires the user to enter a PIN before it provides the second factor
BThe application requires an administrator password to reactivate after a configured interval
CThe application verifies that the user is in a specific location before it provides the second factor
DThe application challenges a user by requiring an administrator password to reactivate when the smartphone is rebooted (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: The application challenges a user by requiring an administrator password to reactivate when the smartphone is rebooted This option keeps traffic private / properly secured as required.

200-301 Question 601

Single page →

Topic 1 · Question 601

Which device performs stateful inspection of traffic?

Aswitch
Bfirewall (correct answer)
Caccess point
Dwireless controller

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: firewall

200-301 Question 602

Single page →

Topic 1 · Question 602

A network administrator enabled port security on a switch interface connected to a printer. What is the next configuration action in order to allow the port to learn the MAC address of the printer and insert it into the table automatically?

Aenable dynamic MAC address learning
Bimplement static MAC addressing
Cenable sticky MAC addressing (correct answer)
Dimplement auto MAC address learning

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: enable sticky MAC addressing

Explanation

OSPF elects a designated router on multiaccess networks to reduce adjacency and LSA exchange overhead. This option keeps traffic private / properly secured as required.

200-301 Question 603

Single page →

Topic 1 · Question 603

Refer to the exhibit. An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate directly to enable privilege mode via Telnet using a local username and password?

AR1(config)#username admin R1(config-if)#line vty 0 4 R1(config-line)#password p@ss1234 R1(config-line)#transport input telnet
BR1(config)#username admin privilege 15 secret p@ss1234 R1(config-if)#line vty 0 4 R1(config-line)#login local (correct answer)
CR1(config)#username admin secret p@ss1234 R1(config-if)#line vty 0 4 R1(config-line)#login local R1(config)#enable secret p@ss1234
DR1(config)#username admin R1(config-if)#line vty 0 4 R1(config-line)#password p@ss1234

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: R1(config)#username admin privilege 15 secret p@ss1234 R1(config-if)#line vty 0 4 R1(config-line)#login local

200-301 Question 604

Single page →

Topic 1 · Question 604

Which effect does the aaa new-model configuration command have?

AIt enables AAA services on the device. (correct answer)
BIt configures the device to connect to a RADIUS server for AAA.
CIt associates a RADIUS server to the group.
DIt configures a local user on the device.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: It enables AAA services on the device.

Explanation

AAA centralizes authentication, authorization, and accounting for administrative or network access.

200-301 Question 605

Single page →

Topic 1 · Question 605 · Select all that apply

Refer to the exhibit. Which two events occur on the interface, if packets from an unknown Source address arrive after the interface learns the maximum number of secure MAC address? (Choose two.)

AThe security violation counter dose not increment (correct answer)
BThe port LED turns off
CThe interface is error-disabled
DA syslog message is generated
EThe interface drops traffic from unknown MAC address (correct answer)

Reveal answer & explanation

Correct answer: A, E

The correct answer is A, E. Option A: The security violation counter dose not increment Option E: The interface drops traffic from unknown MAC address

Explanation

OSPF elects a designated router on multiaccess networks to reduce adjacency and LSA exchange overhead. This option keeps traffic private / properly secured as required.

200-301 Question 606

Single page →

Topic 1 · Question 606

Which technology must be implemented to configure network device monitoring with the highest security?

AIP SLA
Bsyslog
CNetFlow
DSNMPv3 (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: SNMPv3

Explanation

SNMP lets a management system monitor and configure supported device information through MIB objects. This option keeps traffic private / properly secured as required.

200-301 Question 607

Single page →

Topic 1 · Question 607

Refer to the exhibit. Which two statements about the interface that generated the output are true? (Choose two.)

Alearned MAC addresses are deleted after five minutes of inactivity
Bthe interface is error-disabled if packets arrive from a new unknown source address
Cit has dynamically learned two secure MAC addresses (correct answer)
Dit has dynamically learned three secure MAC addresses
Ethe security violation counter increments if packets arrive from a new unknown source address

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: it has dynamically learned two secure MAC addresses

Explanation

OSPF elects a designated router on multiaccess networks to reduce adjacency and LSA exchange overhead.

200-301 Question 608

Single page →

Topic 1 · Question 608

Refer to the exhibit. Which statement about the interface that generated the output is true?

AA syslog message is generated when a violation occurs.
BOne secure MAC address is manually configured on the interface. (correct answer)
COne secure MAC address is dynamically learned on the interface.
DFive secure MAC addresses are dynamically learned on the interface.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: One secure MAC address is manually configured on the interface.

Explanation

OSPF elects a designated router on multiaccess networks to reduce adjacency and LSA exchange overhead.

200-301 Question 609

Single page →

Topic 1 · Question 609

Refer to the exhibit. What is the effect of this configuration?

AThe switch port remains administratively down until the interface is connected to another switch.
BDynamic ARP Inspection is disabled because the ARP ACL is missing.
CThe switch port interface trust state becomes untrusted. (correct answer)
DThe switch port remains down until it is configured to trust or untrust incoming packets.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: The switch port interface trust state becomes untrusted.

Showing questions 541–560 of 1182 · Page 28 of 60