Cisco CCNA 200-301 Questions & Answers

• Question 91:

  What are two differences between WPA2 and WPA3 wireless security? (Choose two.)

  A. WPA2 uses 192-bit key encryption, and WPA3 requires 256-bit key encryption.

  B. WPA3 uses AES for stronger protection than WPA2, which uses SAE.

  C. WPA2 uses 128-bit key encryption, and WPA3 supports 128-bit and 192-bit key encryption.

  D. WPA3 uses SAE for stronger protection than WPA2, which uses AES.

  E. WPA3 uses AES for stronger protection than WPA2, which uses TKIP.

  Correct Answer: CD

• Question 92:

  A network engineer must configure an access list on a new Cisco IOS router. The access list must deny HTTP traffic to network 10.125.128.32/27 from the 192.168.240.0/20 network, but it must allow the 192.168.240.0/20 network to reach the rest of the 10.0.0.0/8 network.

  Which configuration must the engineer apply?

  A. ip access-list extended deny_outbound 10 permit ip 192.168.240.0 255.255.240.0 10.0.0.0 255.0.0.0 20 deny tcp 192.168.240.0 255.255.240.0 10.125.128.32 255.255.255.224 eq 443 30 permit ip any any

  B. ip access-list extended deny_outbound 10 deny tcp 192.168.240.0 0.0.15.255 10.125.128.32 0.0.0.31 eq 80

  20 permit ip 192.168.240.0 0.0.15.255 10.0.0.0 0.255.255.255

  30 deny ip any any log

  C. ip access-list extended deny_outbound 10 deny tcp 10.125.128.32 255.255.255.224 192.168.240.0 255.255.240.0 eq 443 20 deny tcp 192.168.240.0 255.255.240.0 10.125.128.32 255.255.255.224 eq 443 30 permit ip 192.168.240.0 255.255.240.0 10.0.0.0 255.0.0.0

  D. ip access-list extended deny_outbound 10 deny tcp 192.168.240.0 0.0.15.255 any eq 80 20 deny tcp 192.168.240.0 0.0.15.255 10.125.128.32 0.0.0.31 eq 80 30 permit ip 192.168.240.0 0.0.15.255 10.0.0.0 0.255.255.255

  Correct Answer: B

• Question 93:

  Refer to the exhibit.

  

  What does apple represent within the JSON data?

  A. array

  B. object

  C. number

  D. string

  Correct Answer: D

  https://restfulapi.net/json-data-types/

• Question 94:

  Under the CRUD model, which two HTTP methods support the UPDATE operation? (Choose two.)

  A. PATCH

  B. DELETE

  C. GET

  D. POST

  E. PUT

  Correct Answer: AE

• Question 95:

  A network architect is considering whether to implement Cisco DNA Center to deploy devices on a new network. The organization is focused on reducing the time it currently takes to deploy devices in a traditional campus design. For which reason would Cisco DNA Center be more appropriate than traditional management options?

  A. Cisco DNA Center supports deployment with a single pane of glass.

  B. Cisco DNA Center provides zero-touch provisioning to third-party devices.

  C. Cisco DNA Center reduces the need for analytics on third-party access points and devices.

  D. Cisco DNA Center minimizes the level of syslog output when reporting on Cisco devices.

  Correct Answer: A

• Question 96:

  In a cloud-computing environment, what is rapid elasticity?

  A. control and monitoring or resource consumption by the tenant

  B. automatic adjustment of capacity based on need

  C. pooling resources in a multitenant model based on need

  D. self-service of computing resources by the tenant

  Correct Answer: B

• Question 97:

  Refer to the exhibit.

  

  How many arrays are present in the JSON data?

  A. one

  B. three

  C. six

  D. nine

  Correct Answer: B

• Question 98:

  Which interface type enables an application running on a client to send data over an IP network to a server?

  A. northbound interface

  B. application programming interface

  C. southbound interface

  D. Representational State Transfer application programming interface

  Correct Answer: B

• Question 99:

  Which type of encryption does WPA1 use for data protection?

  A. PEAP

  B. TKIP

  C. AES

  D. EAP

  Correct Answer: B

  WPA1 (Wi-Fi Protected Access 1) uses TKIP (Temporal Key Integrity Protocol) encryption for data protection. TKIP is an encryption protocol that was designed to provide stronger security than the previous WEP (Wired Equivalent Privacy) encryption standard, which was known to have vulnerabilities. TKIP uses a combination of encryption techniques, including a per-packet key mixing function, to provide data confidentiality and integrity. However, TKIP is now considered insecure and has been replaced by AES (Advanced Encryption Standard) in modern Wi-Fi security protocols such as WPA2 and WPA3.

• Question 100:

  Refer to the exhibit.

  

  In which structure does the word “warning” directly reside?

  A. array

  B. object

  C. Boolean

  D. string

  Correct Answer: A