Cisco CCNA 200-301 Questions & Answers

• Question 1:

  Which two wireless security stewards use Counter Mode Cipher Block Chaining Message Authentication Code Protocol for encryption and data integrity'? (Choose two.)

  A. WPA2

  B. WPA3

  C. Wi-Fi 6

  D. WEP

  E. WPA

  Correct Answer: AB

  CCMP is an encryption protocol based on the Advanced Encryption Standard (AES) algorithm. It provides both encryption and data integrity by combining the Counter Mode (CTR) for encryption and the Cipher Block Chaining Message Authentication Code (CBC-MAC) for data integrity.

  WPA3 (Wi-Fi Protected Access 3) and WPA2 (Wi-Fi Protected Access 2) are the latest and most commonly used wireless security standards. Both WPA3 and WPA2 support the use of CCMP as the encryption and integrity protocol for securing wireless communications.

  On the other hand, WEP (Wired Equivalent Privacy) is an older and weaker security standard that uses the RC4 encryption algorithm, not CCMP. WEP has been found to have significant security vulnerabilities and is no longer recommended for use.

• Question 2:

  What are two features of PortFast? (Choose two.)

  A. Convergence is fast after a link failure.

  B. STP loops are mitigated for uplinks to other switches.

  C. Ports transition directly from the blocking state to the forwarding state.

  D. Ports operate normally without receiving BPDUs.

  E. Ports that connect to the backbone automatically detect indirect link failures.

  Correct Answer: CD

  When the switch powers up, or when a device is connected to a port, the port enters the spanning tree listening state. When the Forward Delay timer expires, the port enters the learning state. When the Forward Delay timer expires a second

  time, the port is transitioned to the forwarding or blocking state.

  When you enable PortFast on a switch or trunk port, the port is immediately transitioned to the spanning tree forwarding state.

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4000/8-2glx/configuration/guide/stp_enha.html#wp1046787

• Question 3:

  How must a switch interface be configured when an AP is in FlexConnect mode?

  A. access port

  B. EtherChannel

  C. PoE port

  D. trunk port

  Correct Answer: A

  Trunk. Since it puts the traffict directly on the switch in flexconnect mode it and it supports multiple vlans it needs to put it on the proper vlan.

• Question 4:

  Which EtherChannel mode must be configured when using LAG on a WLC?

  A. on

  B. passive

  C. active

  D. auto

  Correct Answer: A

  LAG requires the EtherChannel to be configured for 'mode on' on both the controller and the Catalyst switch.

• Question 5:

  Which switch concept is used to create separate broadcast domains?

  A. STP

  B. VTP

  C. VLAN

  D. CSMA/CD

  Correct Answer: C

• Question 6:

  A switch is forwarding a frame out of all interfaces except the interface that received the frame. What is the technical term for this process?

  A. ARP

  B. CDP

  C. flooding

  D. multicast

  Correct Answer: C

• Question 7:

  Which command enables HTTP access to the Cisco WLC?

  A. config network telnet enable

  B. config network secureweb enable

  C. config certificate generate webadmin

  D. config network webmode enable

  Correct Answer: D

• Question 8:

  Which port state processes BPDUs, but does not forward packets or update the address database in Rapid PVST+?

  A. blocking

  B. learning

  C. listening

  D. disabled

  Correct Answer: A

  Blocking State

  A LAN port in the blocking state does not participate in frame forwarding.

  A LAN port in the blocking state performs as follows:

  Discards frames received from the attached segment.

  Discards frames switched from another port for forwarding.

  Does not incorporate the end station location into its address database. (There is no learning on a blocking LAN port, so there is no address database update.)

  Receives BPDUs and directs them to the system module.

  Receives, processes, and transmits BPDUs received from the system module.

  Receives and responds to network management messages.

• Question 9:

  Refer to the exhibit.

  

  Routers R1, R2, and R3 use a protocol to identify the neighbors’ IP addresses, hardware platforms, and software versions. A network engineer must configure R2 to avoid sharing any neighbor information with R3, and maintain its relationship with R1. What action meets this requirement?

  A. Configure the no lldp receive command on g0/1.

  B. Configure the no cdp run command globally.

  C. Configure the no cdp enable command on g0/2.

  D. Configure the no lldp run command globally.

  Correct Answer: C

  Configuring no lldp run, assuming the routers are using LLDP, will mean that R1 and R2 don't maintain a relationship, so that answer is incorrect.

• Question 10:

  Refer to the exhibit.

  

  A network administrator configures an interface on a new switch so that it connects to interface Gi1/0/1 on switch Cat9300-1. Which configuration must be applied to the new interface?

  A. switchport mode trunk switchport trunk native vlan 321 switchport trunk allowed vlan 100,200,300

  B. switchport mode dynamic desirable switchport trunk native vlan 321 switchport trunk allowed vian 100,200,300

  C. switchport trunk encapsulation dot1q switchport trunk native vlan 321 switchport trunk allowed vlan 100-300

  D. switchport nonegotiate switchport access vlan 321 switchport trunk allowed vlan except 2-1001

  Correct Answer: A