Cisco CCNA 200-301 Questions & Answers

• Question 1311:

  Refer to the exhibit.

  

  An engineer ts building a new Layer 2 LACP EtherChannel between SW1 and SW2, and they executed the given show commands to verify the work. Which additional task must be performed so that the switches successfully bundle the second member in the LACP port-channel?

  A. Configure the switchport trunk allowed vlan 300 command on SW1 port-channel 1.

  B. Configure the switchport trunk allowed vlan add 300 command on interface Fa0/2 on SW2.

  C. Configure the switchport trunk allowed vlan add 300 command on SW1 port-channel 1.

  D. Configure the switchport trunk allowed vlan 300 command on interface Fa0/2 on SW1.

  Correct Answer: C

• Question 1312:

  Refer to the exhibit.

  

  

  VLAN 23 is being implemented between SW1 and SW2. The command show interface ethernet0/0 switchport has been issued on SW1. Ethernet0/0 on SW1 is the uplink to SW2. Which command when entered on the uplink interface allows PC 1 and PC 2 to communicate without impact to the communication between PC 11 and PC 12?

  A. switchport trunk allowed vlan 2-1001

  B. switchport trunk allowed vlan 23

  C. switchport trunk allowed vian add 23

  D. switchport trunk allowed vian 22-23

  Correct Answer: C

• Question 1313:

  A network engineer starts to implement a new wireless LAN by configuring the authentication server and creating the dynamic interface. What must be performed next to complete the basic configuration?

  A. Create the new WLAN and bind the dynamic interface to it.

  B. Configure high availability and redundancy for the access points.

  C. Enable Telnet and RADIUS access on the management interface.

  D. Install the management interface and add the management IP.

  Correct Answer: A

  After configuring the authentication server and creating the dynamic interface, the next step in configuring a new WLAN is to create the WLAN and bind the dynamic interface to it. This will allow the wireless clients to connect to the WLAN and authenticate using the configured authentication server. Configuring high availability and redundancy for the access points, enabling Telnet and RADIUS access on the management interface, and installing the management interface and adding the management IP are all important steps in configuring a wireless LAN, but they come after creating the WLAN and binding the dynamic interface to it.

• Question 1314:

  Refer to the exhibit.

  

  

  An architect is managing a wireless network with APs from several branch offices connecting to the WLC in the data center. There is a new requirement for a single WLAN to process the client data traffic without sending it to the WLC. Which action must be taken to complete the request?

  A. Enable local HTTP profiling.

  B. Enable FlexConnect Local Switching.

  C. Enable local DHCP Profiling.

  D. Enable Disassociation Imminent.

  Correct Answer: B

  The action that must be taken to complete the request of processing client data traffic without sending it to the WLC is to enable FlexConnect Local Switching.

  FlexConnect Local Switching (also known as "local switching" or "central switching") is a feature of Cisco wireless networks that allows for client traffic to be switched locally at the access point (AP) rather than being sent to the wireless LAN controller (WLC) for processing. This can improve network performance and reduce the load on the WLC.

• Question 1315:

  Refer to the exhibit.

  

  A Cisco WLC administrator is creating a new wireless network with enhanced SSID security. The new network must operate at 2.4 Ghz with 54 Mbps of throughput. Which set of tasks must the administrator perform to complete the configuration?

  A. Uncheck the Broadcast SSID check box and set the Radio Policy to 802.11a/g only.

  B. Check the Broadcast SSID check box and set the Radio Policy to 802.11g only.

  C. Uncheck the Broadcast SSID check box and set the Radio Policy to 802.11g only.

  D. Check the Broadcast SSID check box and set the Radio Policy to 802.11a only.

  Correct Answer: C

• Question 1316:

  Which switching feature removes unused MAC addresses from the MAC address table, which allows new MAC addresses to be added?

  A. MAC address aging

  B. MAC move

  C. MAC address auto purge

  D. dynamic MAC address learning

  Correct Answer: A

  MAC address aging is a switching feature that removes unused MAC addresses from the MAC address table after a certain period of inactivity. This frees up space in the MAC address table, allowing new MAC addresses to be added when new devices are connected to the network. The aging time determines how long a MAC address can remain in the table without any activity before it is considered unused and eligible for removal. This feature helps optimize the usage of MAC address table resources in a switch.

• Question 1317:

  Refer to the exhibit.

  

  A network engineer configures the CCNA WLAN so that clients must reauthenticate hourly and to limit the number of simultaneous connections to the WLAN to 10. Which two actions complete this configuration? (Choose two.)

  A. Enable the Wi-Fi Direct Clients Policy option

  B. Enable the Enable Session Timeout option and set the value to 3600.

  C. Enable the Client Exclusion option and set the value to 3600.

  D. Set the Maximum Allowed Clients value to 10.

  E. Set the Maximum Allowed Clients Per AP Radio value to 10.

  Correct Answer: BD

• Question 1318:

  Refer to the exhibit.

  

  The SW1 and SW2 Gi0/0 ports have been preconfigured. An engineer is given these requirements:

  1.

  Allow all PCs to communicate with each other at Layer 3.

  2.

  Configure untagged traffic to use VLAN 5.

  3.

  Disable VLAN 1 from being used.

  Which configuration set meets these requirements?

  A. SW1# interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 switchport trunk native vlan 5

  interface Gi0/2

  switchport mode trunk

  switchport trunk allowed vlan 5,7,9,108

  SW2#

  interface Gi0/1

  switchport mode access

  switchport access vlan 7

  interface Gi0/7

  switchport mode trunk

  switchport trunk allowed vlan 7,9,108

  B. SW1# interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 switchport trunk native vlan 5

  interface Gi0/2

  switchport mode access

  switchport trunk allowed vlan 7,9,108

  SW2#

  interface Gi0/1

  switchport mode access

  no switchport access vlan 1

  switchport access vlan 7

  interface Gi0/7

  switchport mode trunk

  switchport trunk allowed vlan 7,9,108

  switchport trunk native vlan 5

  C. SW#1 interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 switchport trunk native vlan 5

  interface Gi0/2

  switchport mode trunk

  switchport trunk allowed vlan 5,7,9,108

  SW2#

  interface Gi0/1

  switchport mode access

  switchport access vlan 7

  interface Gi0/7

  switchport mode trunk

  switchport trunk allowed vlan 5,7,9,108

  switchport trunk native vlan 5

  D. SW1# interface Gi0/1 switchport mode trunk switchport trunk allowed vian 5,7,9,108

  interface Gi0/2

  switchport mode trunk

  switchport trunk allowed vlan 7,9,108

  SW2#

  interface Gi0/1

  switchport mode trunk

  switchport trunk allowed vlan 7

  interface Gi0/7

  switchport mode trunk

  switchport trunk allowed vlan 5,7,9,108

  Correct Answer: C

• Question 1319:

  Which default condition must be considered when an encrypted mobility tunnel is used between two Cisco WLCs?

  A. The tunnel uses the IPses protocol for encapsulation.

  B. Control and data traffic encryption are enabled.

  C. The tunnel uses the EoIP protocol to transmit data traffic.

  D. TCP port 443 and UDP 21 are used.

  Correct Answer: B

  https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/107188-mobility-groups-faq.pdf

• Question 1320:

  Refer to the exhibit.

  

  After a recent internal security audit, the network administrator decided to block all P2P-capable devices from the selected SSID. Which configuration setting must the administrator apply?

  A. Set the Wi-Fi Direct Client Policy to Not-Allow.

  B. Select a correctly configured Layer 2 ACL.

  C. Set the MFP Client Protection to Required.

  D. Set the P2P Block Action to Drop.

  Correct Answer: D

  To block all P2P-capable devices from the selected SSID, the network administrator should set the P2P Block Action to "Drop".

  P2P (Peer-to-Peer) traffic is often used by file sharing applications and other unauthorized software, which can pose a security risk to the network. By setting the P2P Block Action to "Drop", the network administrator can prevent P2P traffic from being transmitted over the selected SSID.

  The other configuration settings listed are not directly related to blocking P2P traffic. Wi-Fi Direct Client Policy, for example, is used to control Wi-Fi Direct clients, while MFP (Management Frame Protection) Client Protection helps prevent forged management frames. A Layer 2 ACL (Access Control List) can be used to control access to network resources based on MAC addresses, IP addresses, and other criteria, but it is not specifically designed to block P2P traffic.