Cisco CCNA 200-301 Questions & Answers

• Question 1361:

  Which protocol must be implemented to support separate authorization and authentication solutions for wireless APs?

  A. RADIUS

  B. TACACS+

  C. 802.1X

  D. Kerberos

  Correct Answer: B

  Authentication and Authorization

  RADIUS combines authentication and authorization. The access-accept packets sent by the RADIUS server to the client contain authorization information. This makes it difficult to decouple authentication and authorization.

  TACACS+ uses the AAA architecture, which separates AAA. This allows separate authentication solutions that can still use TACACS+ for authorization and accounting. For example, with TACACS+, it is possible to use Kerberos

  authentication and TACACS+ authorization and accounting. After a NAS authenticates on a Kerberos server, it requests authorization information from a TACACS+ server without having to re-authenticate. The NAS informs the TACACS+

  server that it has successfully authenticated on a Kerberos server, and the server then provides authorization information.

  Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/13838-10.html

• Question 1362:

  Refer to the exhibit.

  

  What is the prefix length for the route that router1 will use to reach host A?

  A. /25

  B. /27

  C. /28

  D. /29

  Correct Answer: D

  32 bit mask -29 bit mask=3 bits

  2 to the power of 3 is 8 per subnet while 6 host in a subnet(2 power of 3 minus 2)

  So 8 bits in a subnet. Take this questions example.

  1st Subnet = 10.10.13.0 - 10.10.13.7

  2nd Subnet = 10.10.13.8 - 10.10.13.15

  3rd Subnet = 10.10.13.16 - 10.10.13.23

  ....

  ...

  Some numbered Subnet later =10.10.13.208 - 10.10.13.216 so 10.10.13.214 is in the range so that's the answer right there

  Reminder

  Each subnet has a Network and Broadcast Bit so for knowing how many host in a subnet need to ALWAYS MINUS 2. That's why we minus 2(remember just now with 2 power of 3 minus 2 so yup).

• Question 1363:

  A client experiences slow throughput from a server that is directly connected to the core switch in a data center. A network engineer finds minimal latency on connections to the server, but data transfers are unreliable, and the output of the show Interfaces counters errors command shows a high FCS-Err count on the interface that is connected to the server. What is the cause of the throughput issue?

  A. high bandwidth usage

  B. a physical cable fault

  C. a speed mismatch

  D. a cable that is too long

  Correct Answer: B

  The cause of the throughput issue described in the scenario is a physical cable fault.

  The scenario mentions that the network engineer found minimal latency on connections to the server, but data transfers are unreliable, and the output of the "show interfaces counters errors" command shows a high FCS-Err count on the

  interface that is connected to the server. FCS-Err (Frame Check Sequence error) indicates that there is a physical issue with the cable, such as noise or interference, that is causing the data transfer errors.

  A speed mismatch or high bandwidth usage may cause slow throughput or delays, but it would not cause FCS-Err errors. Similarly, a cable that is too long may cause signal attenuation, but it would not cause FCS-Err errors.

• Question 1364:

  Refer to the exhibit.

  

  Which two values does router R1 use to identify valid routes for the R3 loopback address 1.1.1.3/32? (Choose two.)

  A. lowest cost to teach the next hop

  B. highest metric

  C. highest administrative distance

  D. lowest metric

  E. lowest administrative distance

  Correct Answer: AE

  The two values that router R1 uses to identify valid routes for the R3 loopback address 1.1.1.3/32 are:

  A. Lowest cost to reach the next hop: Router R1 will look for the route with the lowest cost to reach the next hop, as determined by the routing protocol being used. This is typically the metric or cost associated with the path to the next hop.

  E. Lowest administrative distance: If there are multiple routes with the same cost, router R1 will use the administrative distance to determine the best path. The administrative distance is a value assigned to each routing protocol that indicates the reliability of the routing information. A lower administrative distance indicates a more reliable source of routing information.

• Question 1365:

  How does frame switching function on a switch?

  A. forwards frames to a neighbor port using CDP

  B. modifies frames that contain a known source VLAN

  C. inspects and drops frames from unknown destinations

  D. forwards known destinations to the destination port

  Correct Answer: D

• Question 1366:

  Which interface condition is occurring in this output?

  

  A. collisions

  B. broadcast storm

  C. duplex mismatch

  D. queueing

  Correct Answer: C

• Question 1367:

  What is represented by the word "port" within this JSON schema?

  

  A. value

  B. array

  C. key

  D. object

  Correct Answer: C

• Question 1368:

  Refer to the exhibit.

  

  A newly configured PC fails to connect to the internet by using TCP port 80 to www.cisco.com. Which setting must be modified for the connection to work?

  A. Subnet Mask

  B. DNS Servers

  C. Default Gateway

  D. DHCP Servers

  Correct Answer: C

  10.2.2.0/29, 10.2.2.0 - 10.2.2.7, the current config is 10.2.2.10, which is out of range, and needs to be changed

• Question 1369:

  Refer to the exhibit.

  

  Which switch becomes the root bridge?

  A. SW 1 Bridge Priority - 32768 mac-address 0f:d7:9e:13:ab:82

  B. SW 2 Bridge Priority - 40960 mac-address 05:d8:33:09:8f:89

  C. SW 3 Bridge Priority - 32768 mac-address 01:1c:6c:66:b7:70

  D. SW 4 Bridge Priority - 40960 mac-address 04:44:97:51:63:17

  Correct Answer: C

  lowest priority, and lowest MAC address

• Question 1370:

  What is represented by the word "fe5/42" within this JSON schema?

  

  A. array

  B. object

  C. value

  D. key

  Correct Answer: C

  in this array this is specifically asking about a key : value pair. In this instance it would also be considered a string