200-301 — questions

Page 29 of 60 · 1182 total questions.

200-301 Question 610

Topic 1 · Question 610

What is the difference between AAA authentication and authorization?

AAuthentication identifies and verifies a user who is attempting to access a system, and authorization controls the tasks the user performs. (correct answer)
BAuthentication controls the system processes a user accesses, and authorization logs the activities the user initiates.
CAuthentication verifies a username and password, and authorization handles the communication between the authentication agent and the user database.
DAuthentication identifies a user who is attempting to access a system, and authorization validates the user's password.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Authentication identifies and verifies a user who is attempting to access a system, and authorization controls the tasks the user performs.

200-301 Question 611

Single page →

Topic 1 · Question 611 · Select all that apply

When configuring a WLAN with WPA2 PSK in the Cisco Wireless LAN Controller GUI, which two formats are available to select? (Choose two.)

Adecimal
BASCII (correct answer)
Chexadecimal (correct answer)
Dbinary
Ebase64

Reveal answer & explanation

Correct answer: B, C

The correct answer is B, C. Option B: ASCII Option C: hexadecimal

200-301 Question 613

Single page →

Topic 1 · Question 613 · Select all that apply

An engineer is asked to protect unused ports that are configured in the default VLAN on a switch. Which two steps will fulfill the request? (Choose two.)

AConfigure the ports as trunk ports.
BEnable the Cisco Discovery Protocol.
CConfigure the port type as access and place in VLAN 99. (correct answer)
DAdministratively shut down the ports. (correct answer)
EConfigure the ports in an EtherChannel.

Reveal answer & explanation

Correct answer: C, D

The correct answer is C, D. Option C: Configure the port type as access and place in VLAN 99. Option D: Administratively shut down the ports.

Explanation

A VLAN creates a separate Layer 2 broadcast domain on switched infrastructure.

An email user has been lured into clicking a link in an email sent by their company's security organization. The webpage that opens reports that it was safe, but the link may have contained malicious code. Which type of security program is in place?

Auser awareness (correct answer)
Bbrute force attack
Cphysical access control
Dsocial engineering attack

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: user awareness This option keeps traffic private / properly secured as required.

200-301 Question 616

Single page →

Topic 1 · Question 616

Which feature on the Cisco Wireless LAN Controller when enabled restricts management access from specific networks?

ATACACS
BCPU ACL (correct answer)
CFlex ACL
DRADIUS

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: CPU ACL

Explanation

An access control list evaluates ordered permit and deny entries and ends with an implicit deny.

200-301 Question 617

Single page →

Topic 1 · Question 617

Which set of actions satisfy the requirement for multifactor authentication?

AThe user enters a user name and password, and then re-enters the credentials on a second screen.
BThe user swipes a key fob, then clicks through an email link.
CThe user enters a user name and password, and then clicks a notification in an authentication app on a mobile device. (correct answer)
DThe user enters a PIN into an RSA token, and then enters the displayed RSA key on a login screen.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: The user enters a user name and password, and then clicks a notification in an authentication app on a mobile device.

200-301 Question 618

Single page →

Topic 1 · Question 618

Which configuration is needed to generate an RSA key for SSH on a router?

AConfigure VTY access.
BConfigure the version of SSH.
CAssign a DNS domain name. (correct answer)
DCreate a user with a password.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Assign a DNS domain name.

Explanation

DNS resolves domain names to resource records such as IP addresses.

200-301 Question 619

Single page →

Topic 1 · Question 619 · Select all that apply

Refer to the exhibit. An extended ACL has been configured and applied to router R2. The configuration failed to work as intended. Which two changes stop outbound traffic on TCP ports 25 and 80 to 10.0.20.0/26 from the 10.0.10.0/26 subnet while still allowing all other traffic? (Choose two.)

AAdd a "permit ip any any" statement at the end of ACL 101 for allowed traffic. (correct answer)
BAdd a "permit ip any any" statement to the beginning of ACL 101 for allowed traffic.
CThe ACL must be moved to the Gi0/1 interface outbound on R2.
DThe source and destination IPs must be swapped in ACL 101. (correct answer)
EThe ACL must be configured the Gi0/2 interface inbound on R1.

Reveal answer & explanation

Correct answer: A, D

The correct answer is A, D. Option A: Add a "permit ip any any" statement at the end of ACL 101 for allowed traffic. Option D: The source and destination IPs must be swapped in ACL 101.

Explanation

NAT translates addresses between network domains, commonly conserving public IPv4 addresses. An access control list evaluates ordered permit and deny entries and ends with an implicit deny.

200-301 Question 620

Single page →

Topic 1 · Question 620

An engineer must configure a WLAN using the strongest encryption type for WPA2-PSK. Which cipher fulfills the configuration requirement?

AWEP
BAES (correct answer)
CRC4
DTKIP

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: AES This option keeps traffic private / properly secured as required.

200-301 Question 622

Single page →

Topic 1 · Question 622

Refer to the exhibit. Which configuration for RTR-1 denies SSH access from PC-1 to any RTR-1 interface and allows all other traffic? A. B. C. D.

A (correct answer)
B
C
D

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A:

200-301 Question 623

Single page →

Topic 1 · Question 623 · Select all that apply

While examining excessive traffic on the network, it is noted that all incoming packets on an interface appear to be allowed even though an IPv4 ACL is applied to the interface. Which two misconfigurations cause this behavior? (Choose two.)

AThe ACL is empty
BA matching permit statement is too broadly defined (correct answer)
CThe packets fail to match any permit statement
DA matching deny statement is too high in the access list
EA matching permit statement is too high in the access list (correct answer)

Reveal answer & explanation

Correct answer: B, E

The correct answer is B, E. Option B: A matching permit statement is too broadly defined Option E: A matching permit statement is too high in the access list

200-301 Question 624

Single page →

Topic 1 · Question 624

The service password-encryption command is entered on a router. What is the effect of this configuration?

Arestricts unauthorized users from viewing clear-text passwords in the running configuration (correct answer)
Bprevents network administrators from configuring clear-text passwords
Cprotects the VLAN database from unauthorized PC connections on the switch
Dencrypts the password exchange when a VPN tunnel is established

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: restricts unauthorized users from viewing clear-text passwords in the running configuration

Explanation

REST APIs commonly manipulate resources over HTTP using methods such as GET, POST, PUT, PATCH, and DELETE. This option keeps traffic private / properly secured as required.

200-301 Question 625

Single page →

Topic 1 · Question 625

Which WPA3 enhancement protects against hackers viewing traffic on the Wi-Fi network?

ASAE encryption (correct answer)
BTKIP encryption
Cscrambled encryption key
DAES encryption

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: SAE encryption

200-301 Question 626

Single page →

Topic 1 · Question 626

Refer to the exhibit. If the network environment is operating normally, which type of device must be connected to interface fastethernet 0/1?

ADHCP client
Baccess point
Crouter (correct answer)
DPC

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: router

200-301 Question 627

Single page →

Topic 1 · Question 627

Refer to the exhibit. An administrator configures four switches for local authentication using passwords that are stored as a cryptographic hash. The four switches must also support SSH access for administrators to manage the network infrastructure. Which switch is configured correctly to meet these requirements?

ASW1
BSW2
CSW3 (correct answer)
DSW4

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: SW3

200-301 Question 628

Single page →

Topic 1 · Question 628

Refer to the exhibit. What is the effect of this configuration?

AThe switch discards all ingress ARP traffic with invalid MAC-to-IP address bindings. (correct answer)
BAll ARP packets are dropped by the switch.
CEgress traffic is passed only if the destination is a DHCP server.
DAll ingress and egress traffic is dropped because the interface is untrusted.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: The switch discards all ingress ARP traffic with invalid MAC-to-IP address bindings.

Explanation

ARP resolves an IPv4 address to a local-segment MAC address. OSPF elects a designated router on multiaccess networks to reduce adjacency and LSA exchange overhead.

200-301 Question 629

Single page →

Topic 1 · Question 629

When a site-to-site VPN is used, which protocol is responsible for the transport of user data?

AIPsec (correct answer)
BIKEv1
CMD5
DIKEv2

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: IPsec

200-301 Question 630

Single page →

Topic 1 · Question 630

Which type of wireless encryption is used for WPA2 in preshared key mode?

AAES-128 (correct answer)
BTKIP with RC4
CAES-256
DRC4

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: AES-128 This option keeps traffic private / properly secured as required.

200-301 Question 631

Single page →

Topic 1 · Question 631

What is the difference between an IPv6 link-local address and a unique local address?

AThe scope of an IPv6 link-local address is limited to a directly attached interface, but an IPv6 unique local address is used throughout a company site or network. (correct answer)
BThe scope of an IPv6 link-local address is global, but the scope of an IPv6 unique local address is limited to a loopback address.
CThe scope of an IPv6 link-local address can be used throughout a company site or network, but an IPv6 unique local address is limited to a loopback address.
DThe scope of an IPv6 link-local address is limited to a loopback address, and an IPv6 unique local address is limited to a directly attached interface.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: The scope of an IPv6 link-local address is limited to a directly attached interface, but an IPv6 unique local address is used throughout a company site or network.

Explanation

OSPF elects a designated router on multiaccess networks to reduce adjacency and LSA exchange overhead. IPv6 uses 128-bit addresses and relies on Neighbor Discovery rather than ARP. An IPv6 link-local address is valid only on the local link and commonly begins with FE80::/10.

200-301 Question 632

Single page →

Topic 1 · Question 632

Which command prevents passwords from being stored in the configuration as plain text on a router or switch?

Aenable secret
Benable password
Cservice password-encryption (correct answer)
Dusername cisco password encrypt

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: service password-encryption

Showing questions 561–580 of 1182 · Page 29 of 60