200-301 — questions

Page 33 of 60 · 1182 total questions.

200-301 Question 700

Single page →

Topic 1 · Question 700

SW1 supports connectivity for a lobby conference room and must be secured. The engineer must limit the connectivity from PC1 to the SW1 and SW2 network. The MAC addresses allowed must be limited to two. Which configuration secures the conference room connectivity?

Ainterface gi1/0/15 switchport port-security switchport port-security maximum 2 (correct answer)
Binterface gi1/0/15 switchport port-security switchport port-security mac-address 0000.abcd.0004vlan 100
Cinterface gi1/0/15 switchport port-security mac-address 0000.abcd.0004 vlan 100
Dinterface gi1/0/15 switchport port-security mac-address 0000.abcd.0004 vlan 100 interface switchport secure-mac limit 2

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: interface gi1/0/15 switchport port-security switchport port-security maximum 2 This option keeps traffic private / properly secured as required.

200-301 Question 701

Single page →

Topic 1 · Question 701 · Select all that apply

Refer to the exhibit. An engineer is updating the management access configuration of switch SW1 to allow secured, encrypted remote configuration. Which two commands or command sequences must the engineer apply to the switch? (Choose two.)

ASW1(config)#enable secret ccnaTest123 (correct answer)
BSW1(config)#username NEW secret R3mote123
CSW1(config)#line vty 0 15 SW1(config-line)#transport input ssh (correct answer)
DSW1(config)# crypto key generate rsa
ESW1(config)# interface f0/1 SW1(confif-if)# switchport mode trunk

Reveal answer & explanation

Correct answer: A, C

The correct answer is A, C. Option A: SW1(config)#enable secret ccnaTest123 Option C: SW1(config)#line vty 0 15 SW1(config-line)#transport input ssh

Explanation

NAT translates addresses between network domains, commonly conserving public IPv4 addresses. SSH provides encrypted remote CLI administration and should replace insecure Telnet. This option keeps traffic private / properly secured as required.

200-301 Question 702

Single page →

Topic 1 · Question 702

Which port security violation mode allows from valid MAC addresses to pass but blocks traffic from invalid MAC addresses?

Arestrict
Bshutdown
Cprotect
Dshutdown VLAN (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: shutdown VLAN

Explanation

A VLAN creates a separate Layer 2 broadcast domain on switched infrastructure. This option keeps traffic private / properly secured as required.

200-301 Question 703

Single page →

Topic 1 · Question 703

A customer wants to provide wireless access to contractors using a guest portal on Cisco ISE. The portal is also used by employees. A solution is implemented, but contractors receive a certificate error when they attempt to access the portal. Employees can access the portal without any errors. Which change must be implemented to allow the contractors and employees to access the portal?

AInstall an Internal CA signed certificate on the Cisco ISE.
BInstall a trusted third-party certificate on the Cisco ISE. (correct answer)
CInstall an internal CA signed certificate on the contractor devices.
DInstall a trusted third-party certificate on the contractor devices.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Install a trusted third-party certificate on the Cisco ISE.

200-301 Question 704

Single page →

Topic 1 · Question 704 · Select all that apply

Which two wireless security standards use counter mode cipher block chaining Message Authentication Code Protocol for encryption and data integrity? (Choose two.)

AWi-Fi 6
BWPA3 (correct answer)
CWEP
DWPA2 (correct answer)
EWPA

Reveal answer & explanation

Correct answer: B, D

The correct answer is B, D. Option B: WPA3 Option D: WPA2

Explanation

WPA2 uses AES-based CCMP to protect wireless traffic. WPA3 strengthens wireless authentication, including SAE for personal networks. This option keeps traffic private / properly secured as required.

200-301 Question 705

Single page →

Topic 1 · Question 705

A network engineer is implementing a corporate SSID for WPA3-Personal security with a PSK. Which encryption cipher must be configured?

ACCMP128 (correct answer)
BGCMP256
CCCMP256
DGCMP128

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: CCMP128 This option keeps traffic private / properly secured as required.

200-301 Question 706

Single page →

Topic 1 · Question 706

What is a practice that protects a network from VLAN hopping attacks?

AImplement port security on internet-facing VLANs
BEnable dynamic ARP inspection
CAssign all access ports to VLANs other than the native VLAN (correct answer)
DConfigure an ACL to prevent traffic from changing VLANs

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Assign all access ports to VLANs other than the native VLAN

Explanation

An access port carries traffic for one assigned VLAN and normally sends untagged frames. Frames in the native VLAN are untagged by default on an 802.1Q trunk. A VLAN creates a separate Layer 2 broadcast domain on switched infrastructure.

200-301 Question 707

Single page →

Topic 1 · Question 707

An administrator must use the password complexity not manufacturer-name command to prevent users from adding `Cisco` as a password. Which command must be issued before this command?

Alogin authentication my-auth-list
Bservice password-encryption
Cpassword complexity enable (correct answer)
Dconfreg 0x2142

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: password complexity enable

200-301 Question 708

Single page →

Topic 1 · Question 708

An organization has decided to start using cloud-provided services. Which cloud service allows the organization to install its own operating system on a virtual machine?

Aplatform-as-a-service
Bnetwork-as-a-service
Csoftware-as-a-service
Dinfrastructure-as-a-service (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: infrastructure-as-a-service

200-301 Question 709

Single page →

Topic 1 · Question 709

How do traditional campus device management and Cisco DNA Center device management differ in regards to deployment?

ATraditional campus device management allows a network to scale more quickly than with Cisco DNA Center device management.
BCisco DNA Center device management can deploy a network more quickly than traditional campus device management. (correct answer)
CCisco DNA Center device management can be implemented at a lower cost than most traditional campus device management options.
DTraditional campus device management schemes can typically deploy patches and updates more quickly than Cisco DNA Center device management.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Cisco DNA Center device management can deploy a network more quickly than traditional campus device management.

200-301 Question 710

Single page →

Topic 1 · Question 710

Which purpose does a northbound API serve in a controller-based networking architecture?

Afacilitates communication between the controller and the applications (correct answer)
Breports device errors to a controller
Cgenerates statistics for network hardware and traffic
Dcommunicates between the controller and the physical network hardware

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: facilitates communication between the controller and the applications

Explanation

Controller-based networking centralizes policy and exposes programmable management interfaces.

200-301 Question 711

Single page →

Topic 1 · Question 711

What benefit does controller-based networking provide versus traditional networking?

Aallows configuration and monitoring of the network from one centralized point (correct answer)
Bprovides an added layer of security to protect from DDoS attacks
Ccombines control and data plane functionality on a single device to minimize latency
Dmoves from a two-tier to a three-tier network architecture to provide maximum redundancy

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: allows configuration and monitoring of the network from one centralized point

200-301 Question 712

Single page →

Topic 1 · Question 712

What is an advantage of Cisco DNA Center versus traditional campus device management?

AIt is designed primarily to provide network assurance.
BIt supports numerous extensibility options, including cross-domain adapters and third-party SDKs. (correct answer)
CIt supports high availability for management functions when operating in cluster mode.
DIt enables easy autodiscovery of network elements in a brownfield deployment.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: It supports numerous extensibility options, including cross-domain adapters and third-party SDKs.

200-301 Question 714

Single page →

Topic 1 · Question 714 · Select all that apply

What are two fundamentals of virtualization? (Choose two.)

AIt allows logical network devices to move traffic between virtual machines and the rest of the physical network. (correct answer)
BIt allows multiple operating systems and applications to run independently on one physical server. (correct answer)
CIt allows a physical router to directly connect NICs from each virtual machine into the network.
DIt requires that some servers, virtual machines, and network gear reside on the Internet.
EThe environment must be configured with one hypervisor that serves solely as a network manager to monitor SNMP traffic.

Reveal answer & explanation

Correct answer: A, B

The correct answer is A, B. Option A: It allows logical network devices to move traffic between virtual machines and the rest of the physical network. Option B: It allows multiple operating systems and applications to run independently on one physical server.

Explanation

REST APIs commonly manipulate resources over HTTP using methods such as GET, POST, PUT, PATCH, and DELETE.

200-301 Question 715

Single page →

Topic 1 · Question 715

How does Cisco DNA Center gather data from the network?

ADevices use the call-home protocol to periodically send data to the controller
BDevices establish an IPsec tunnel to exchange data with the controller
CThe Cisco CLI Analyzer tool gathers data from each licensed network device and streams it to the controller
DNetwork devices use different services like SNMP, syslog, and streaming telemetry to send data to the controller (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Network devices use different services like SNMP, syslog, and streaming telemetry to send data to the controller

Explanation

SNMP lets a management system monitor and configure supported device information through MIB objects. Syslog sends timestamped device events to local or remote logging destinations by severity. Controller-based networking centralizes policy and exposes programmable management interfaces.

200-301 Question 716

Single page →

Topic 1 · Question 716

Which statement compares traditional networks and controller-based networks?

AOnly controller-based networks decouple the control plane and the data plane. (correct answer)
BTraditional and controller-based networks abstract policies from device configurations.
COnly traditional networks natively support centralized management.
DOnly traditional networks offer a centralized control plane.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Only controller-based networks decouple the control plane and the data plane.

Explanation

Controller-based networking centralizes policy and exposes programmable management interfaces.

200-301 Question 717

Single page →

Topic 1 · Question 717 · Select all that apply

What are two benefits of network automation? (Choose two.)

Areduced hardware footprint
Breduced operational costs (correct answer)
Cfaster changes with more reliable results (correct answer)
Dfewer network failures
Eincreased network security

Reveal answer & explanation

Correct answer: B, C

The correct answer is B, C. Option B: reduced operational costs Option C: faster changes with more reliable results

200-301 Question 718

Single page →

Topic 1 · Question 718 · Select all that apply

Which two encoding methods are supported by REST APIs? (Choose two.)

ASGML
BYAML
CXML (correct answer)
DJSON (correct answer)
EEBCDIC

Reveal answer & explanation

Correct answer: C, D

The correct answer is C, D. Option C: XML Option D: JSON

Explanation

JSON represents structured data using objects, arrays, names, and values.

200-301 Question 719

Single page →

Topic 1 · Question 719 · Select all that apply

What are two characteristics of a controller-based network? (Choose two.)

AIt uses Telnet to report system issues.
BThe administrator can make configuration updates from the CLI.
CIt uses northbound and southbound APIs to communicate between architectural layers. (correct answer)
DIt decentralizes the control plane, which allows each device to make its own forwarding decisions.
EIt moves the control plane to a central point. (correct answer)

Reveal answer & explanation

Correct answer: C, E

The correct answer is C, E. Option C: It uses northbound and southbound APIs to communicate between architectural layers. Option E: It moves the control plane to a central point.

Explanation

A northbound API connects a controller to applications and orchestration systems. A southbound API connects a controller to managed network devices.

200-301 Question 720

Single page →

Topic 1 · Question 720

Which output displays a JSON data representation? A. B. C. D.

A
B
C (correct answer)
D

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C:

Showing questions 641–660 of 1182 · Page 33 of 60