Cisco CCNA 200-301 Questions & Answers

• Question 1291:

  Refer to the exhibit.

  

  Which password must an engineer use to enter the enable mode?

  A. adminadmin123

  B. cisco123

  C. default

  D. testing1234

  Correct Answer: D

  If neither the enable password command nor the enable secret command is configured, and if there is a line password configured for the console, the console line password serves as the enable password for all VTY sessions -> The “enable secret” will be used first if available, then “enable password” and line password.

• Question 1292:

  Which two conditions must be met before SSH can operate normally on a Cisco IOS switch? (Choose two.)

  A. IP routing must be enabled on the switch.

  B. A console password must be configured on the switch.

  C. Telnet must be disabled on the switch.

  D. The switch must be running a k9 (crypto) IOS image.

  E. The ip domain-name command must be configured on the switch.

  Correct Answer: DE

  To use SSH in Cisco Router

  01.

  IOS image must a k9(Crypto) image

  02.

  Configure DNS domain for the router ( eg: ip domain-name R1.Contoso.lk)

  Reference: https://www.cisco.com/c/en/us/support/docs/security-vpn/secure-shell-ssh/4145-ssh.html

• Question 1293:

  Which statement about Link Aggregation when implementing on a Cisco Wireless LAN Controller is true?

  A. The EtherChannel must be configured in "mode active".

  B. When enabled, the WLC bandwidth drops to 500 Mbps.

  C. To pass client traffic, two or more ports must be configured.

  D. One functional physical port is needed to pass client traffic.

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-2/config-guide/b_cg82/b_cg82_chapter_010101011.html

• Question 1294:

  When configuring IPv6 on an interface, which two IPv6 multicast groups are joined? (Choose two.)

  A. 2000::/3

  B. 2002::5

  C. FC00::/7

  D. FF02::1

  E. FF02::2

  Correct Answer: DE

  When an interface is configured with IPv6 address, it automatically joins the all nodes (FF02::1) and solicited-node (FF02::1:FFxx:xxxx) multicast groups. The all-node group is used to communicate with all interfaces on the local link, and the solicited-nodes multicast group is required for link-layer address resolution. Routers also join a third multicast group, the all-routers group (FF02::2).

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6/configuration/xe-3s/ipv6-xe-36s-book/ip6-multicast.html

• Question 1295:

  What is the default behavior of a Layer 2 switch when a frame with an unknown destination MAC address is received?

  A. The Layer 2 switch forwards the packet and adds the destination MAC address to its MAC address table.

  B. The Layer 2 switch sends a copy of a packet to CPU for destination MAC address learning.

  C. The Layer 2 switch floods packets to all ports except the receiving port in the given VLAN.

  D. The Layer 2 switch drops the received frame.

  Correct Answer: C

  If the destination MAC address is not in the CAM table (unknown destination MAC address), the switch sends the frame out all other ports that are in the same VLAN as the received frame. This is called flooding. It does not flood the frame out the same port on which the frame was received.

• Question 1296:

  An engineer must configure a /30 subnet between two routes. Which usable IP address and subnet mask combination meets this criteria?

  A. interface e0/0 description to HQ-A370:98968 ip address 10.2.1.3 255.255.255.252

  B. interface e0/0 description to HQ-A370:98968 ip address 192.168.1.1 255.255.255.248

  C. interface e0/0 description to HQ-A370:98968 ip address 172.16.1.4 255.255.255.248

  D. interface e0/0 description to HQ-A370:98968 ip address 209.165.201.2 225.255.255.252

  Correct Answer: D

  Option D is the correct (the question has a typo, mask is 255.255.255.252) Network: 209.165.201.0 Broadcast: 209.165.201.3 Usable IPs: 209.165.201.1 - 209.165.201.2

  Option A not correct because that IP is broadcast Network: 10.2.1.0 Broadcast: 10.2.1.3 Usable IPs: 10.2.1.1 - 10.2.1.2

  Option B and C are wrong because they have a /29 mask

• Question 1297:

  Which IPv6 address type communication between subnets and cannot route on the Internet?

  A. link-local

  B. unique local

  C. multicast

  D. global unicast

  Correct Answer: B

  A IPv6 Unique Local Address is an IPv6 address in the block FC00::/7. It is the approximate IPv6 counterpart of the IPv4 private address. It is not routable on the global Internet.

  Note: In the past, Site-local addresses (FEC0::/10) are equivalent to private IP addresses in IPv4 but now they are deprecated.

  Link-local addresses only used for communications within the local subnet. It is usually created dynamically using a link-local prefix of FE80::/10 and a 64-bit interface identifier (based on 48-bit MAC address).

• Question 1298:

  Which network allows devices to communicate without the need to access the Internet?

  A. 172.9.0.0/16

  B. 172.28.0.0/16

  C. 192.0.0.0/8

  D. 209.165.201.0/24

  Correct Answer: B

  This question asks about the private ranges of IPv4 addresses. The private ranges of each class of IPv4 are listed below:

  1.

  Class A private IP address ranges from 10.0.0.0 to 10.255.255.255

  2.

  Class B private IP address ranges from 172.16.0.0 to 172.31.255.255

  3.

  Class C private IP address ranges from 192.168.0.0 to 192.168.255.255

  Only the network 172.28.0.0/16 belongs to the private IP address (of class B).

• Question 1299:

  Refer to exhibit.

  

  Which statement explains the configuration error message that is received?

  A. It belongs to a private IP address range.

  B. The router does not support /28 mask.

  C. It is a network IP address.

  D. It is a broadcast IP address.

  Correct Answer: D

• Question 1300:

  Refer to the exhibit.

  

  Which prefix does CertBus-R use to Host A?

  A. 10.10.10.0/28

  B. 10.10.13.0/25

  C. 10.10.13.144/28

  D. 10.10.13.208/29

  Correct Answer: D

  Host A address fall within the address range. However, if more than one route to the same subnet exist (router will use the longest stick match, which match more specific route to the subnet). If there are route 10.10.13.192/26 and 10.10.13.208/29, the router will forward the packet to /29 rather than /28.