Cisco CCNA 200-301 Questions & Answers

• Question 1431:

  Physical connectivity is implemented between the two Layer 2 switches, and the network connectivity between them must be configured:

  1. Configure an LACP EtherChannel and number it as 1; configure it between switches SW1 and SVV2 using interfaces Ethernet0/0 and Ethernet0/1 on both sides. The LACP mode must match on both ends 2 Configure the EtherChannel as a trunk link.

  3.

  Configure the trunk link with 802.1 q tags.

  4.

  Configure the native VLAN of the EtherChannel as VLAN 15.

  

  

  A. Check the below

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  On SW1:

  conf terminal vlan 15 exit interface range eth0/0 - 1 channel-group 1 mode active exit interface port-channel 1 switchport trunk encapsulation dot1q switchport mode trunk switchport trunk native vlan 15 end copy run start

  on SW2:

  conf terminal vlan 15 exit interface range eth0/0 - 1 channel-group 1 mode active exit interface port-channel 1 switchport trunk encapsulation dot1q switchport mode trunk switchport trunk native vlan 15 end copy run start

• Question 1432:

  This is a lab item in which tasks will be performed on virtual devices

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4.

  All necessary preconfigurations have been applied.

  5.

  Do not change the enable password or hostname for any device.

  6.

  Save your configurations to NVRAM before moving to the next item.

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  8.

  When Next is clicked the lab closes and cannot be reopened.

  

  IP connectivity and OSPF are preconfigured on all devices where necessary. Do not make any changes to the IP addressing or OSPF. The company policy uses connected interfaces and next hops when configuring static routes except for load balancing or redundancy without floating static. Connectivity must be established between subnet 172.20.20.128/25 on the Internet and the LAN at 192.168.0.0/24 connected to SW1:

  1.

  Configure reachability to the switch SW1 LAN subnet in router R2.

  2.

  Configure default reachability to the Internet subnet in router R1.

  3.

  Configure a single static route in router R2 to reach to the Internet subnet considering both redundant links between routers R1 and R2. A default route is NOT allowed in router R2.

  4.

  Configure a static route in router R1 toward the switch SW1 LAN subnet where the primary link must be through Ethernet0/1. and the backup link must be through Ethernet0/2 using a floating route. Use the minimal administrative distance value when required.

  A. Check the below

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  On R2:

  Enable Conf t Ip route 192.168.1.0 255.255.255.0 10.10.31.1 Ip route 172.20.20.128 255.255.255.128 e0/2 Ip route 172.20.20.128 255.255.255.128 e0/1 Do wr Or Copy run start

  On R1:

  Enable Conf t Ip route 0.0.0.0 0.0.0.0 10.10.13.3 Ip route 192.168.0.0 255.255.255.0 e0/1 Ip route 192.168.0.0 255.255.255.0 10.10.12.2 3

  Save all configurations after every router from anyone of these command Do wr Or Copy run start

• Question 1433:

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4.

  All necessary preconfigurations have been applied.

  5.

  Do not change the enable password or hostname for any device.

  6.

  Save your configurations to NVRAM before moving to the next item.

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  8.

  When Next is clicked, the lab closes and cannot be reopened.

  Tasks

  All physical cabling between the two switches is installed. Configure the network connectivity between the switches using the designated VLANs and interfaces.

  1.

  Configure VLAN 100 named Compute and VLAN 200 named Telephony where required for each task.

  2.

  Configure Ethernet0/1 on SW2 to use the existing VLAN named Available.

  3.

  Configure the connection between the switches using access ports.

  4.

  Configure Ethernet0/1 on SW1 using data and voice VLANs.

  5.

  Configure Ethemet0/1 on SW2 so that the Cisco proprietary neighbor discovery protocol is turned off for the designated interface only.

  

  A. Check the below

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  on sw1

  enable conf t vlan 100 name Compute vlan 200 name Telephony int e0/1 switchport voice vlan 200 switchport access vlan 100 int e0/0 switchport mode access wr mem

  on sw2

  Vlan 99 Name Available Int e0/1 Switchport access vlan 99 wr mem

• Question 1434:

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4.

  All necessary preconfigurations have been applied.

  5.

  Do not change the enable password or hostname for any device.

  6.

  Save your configurations to NVRAM before moving to the next item.

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  8.

  When Next is clicked, the lab closes and cannot be reopened.

  

  Tasks

  Connectivity between three routers has been established, and IP services must be configured in the order presented to complete the implementation. Tasks assigned include configuration of NAT, NTP, DHCP, and SSH services.

  1.

  All traffic sent from R3 to the R1 Loopback address must be configured for NAT on R2. All source addresses must be translated from R3 to the IP address of Ethernet0/0 on R2, while using only a standard access list named PUBNET. To verify, a ping must be successful to the R1 Loopback address sourced from R3. Do not use NVI NAT configuration.

  2.

  Configure R1 as an NTP server and R2 as a client, not as a peer, using the IP address of the R1 Ethernet0/2 interface. Set the clock on the NTP server for midnight on May 1, 2018.

  3.

  Configure R1 as a DHCP server for the network 10.1.3.0/24 in a pool named NETPOOL. Using a single command, exclude addresses 1 - 10 from the range. Interface Ethernet0/2 on R3 must be issued the IP address of 10.1.3.11 via DHCP.

  4.

  Configure SSH connectivity from R1 to R3, while excluding access via other remote connection protocols. Access for user netadmin and password N3t4ccess must be set on router R3 using RSA and 1024 bits. Verify connectivity using an SSH session from router R1 using a destination address of 10.1.3.11. Do NOT modify console.

  A. Check the below

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  NAT: R2(config)# ip access list standard PUBNET R2(config-std-nacl)# permit 10.2.3.3 R2(config-std-nacl)# permit 10.1.3.11 R2(config-std-nacl)# permit 192.168.3.1 R2(config-std-nacl)# exit R2(config)# interface e0/1 R2(config-if)# ip nat inside R2(config)# interface e0/0 R2(config-if)# ip nat outside R2(config)# ip nat inside source list PUBNET interface e0/0 overload

  NTP: R1# clock set 00:00:00 jan 1 2019 R1(config)# ntp master 1 R2(config)# ntp server 10.1.3.1

  DHCP: R1(config)# ip dhcp pool NETPOOL R1(dhcp-config)# network 10.1.3.0 255.255.255.0 R1(config)# exit R1(config)# ip dhcp excluded-address 10.1. 3.1 10.1.3.10 R3(config)# interface e0/2 R3(config-if)# ip address dhcp

  SSH: R3(config)# username netadmin password N3t4ccess R3(config)# line vty 0 4 R3(config-line)# login local R3(config-line)# exit R3(config)# ip domain-name cisco.com R3(config)# crypto key generate rsa

• Question 1435:

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window

  4.

  All necessary preconfigurations have been applied

  5.

  Do not change the enable password or hostname for any device

  6.

  Save your configurations to NVRAM before moving to the next item

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question

  8.

  When Next is clicked, the lab closes and cannot be reopened

  Connectivity between four routers has been established. IP connectivity must be configured in the order presented to complete the implementation. No dynamic routing protocols are included.

  1.

  Configure static routing using host routes to establish connectivity from router R3 to the router R1 Loopback address using the source IP of 209.165.200.230.

  2.

  Configure an IPv4 default route on router R2 destined for router R4.

  3.

  Configure an IPv6 default router on router R2 destined for router R4.

  

  A. Check the below

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  1.- on R3

  config terminal ip route 192.168.1.1 255.255.255.255 209.165.200.229 end copy running start

  2.- on R2

  config terminal ip route 0.0.0.0 0.0.0.0 209.165.202.130 end copy running start

  3.- on R2

  config terminal ipv6 route ::/0 2001:db8:abcd::2 end copy running start

• Question 1436:

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window

  4.

  All necessary preconfigurations have been applied

  5.

  Do not change the enable password or hostname for any device

  6.

  Save your configurations to NVRAM before moving to the next item

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question

  8.

  When Next is clicked the lab closes and cannot be reopened

  Topology

  

  Tasks

  Physical connectivity is implemented between the two Layer 2 switches, and the network connectivity between them must be configured.

  1.

  Configure an LACP EtherChannel and number it as 44; configure it between switches SW1 and SW2 using interfaces Ethemet0/0 and Ethernet0/1 on both sides. The LACP mode must match on both ends.

  2.

  Configure the EtherChannel as a trunk link.

  3.

  Configure the trunk link with 802.1q tags.

  4.

  Configure VLAN 'MONITORING' as the untagged VLAN of the EtherChannel.

  A. Check the below

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  S1 interface range eth0/0-1 shut channel-group 44 mode active no shut interface port-channel 44 switchport mode trunk switchport trunk encapsulation dot1q switchport trunk native vlan 746

  S2 interface range eth0/0-1 shut channel-group 44 mode active no shut interface port-channel 44 switchport mode trunk switchport trunk encapsulation dot1q switchport trunk native vlan 746

  First before you create an etherchannel you have to shutdown the ports you going to create it on. Second when you go into the etherchannel interface to create the trunk you have to type the command interface port-channel 44. Lastly you have to you have issue the no shutdown command on the interface ranges on both switches at the end to bring them back up.

• Question 1437:

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices:

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4.

  All necessary preconfigurations have been applied.

  5.

  Do not change the enable password or hostname for any device.

  6.

  Save your configurations to NVRAM before moving to the next item.

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  8.

  When Next is clicked the lab closes and cannot be reopened.

  Topology

  

  Tasks

  Refer to the topology. All physical cabling is in place. Configure local users accounts, modify the Named ACL (NACL), and configure DHCP Snooping. The current contents of the NACL must remain intact.

  Task 1

  Configure a local account on Gw1 with telnet access only on virtual ports 0-4. Use the following information:

  1.

  Username: wheel

  2.

  Password: lock3path

  3.

  Algorithm type: Scrypt

  4.

  Privilege level: Exec mode

  Task 2

  Configure and apply a NACL on Gw1 to control network traffic from VLAN 10:

  1.

  Name: CORP_ACL

  2.

  Allow BOOTP and HTTPS

  3.

  Restrict all other traffic and log the ingress interface, source MAC address, the packet's source and destination IP addresses, and ports

  Task 3

  Configure Sw1:

  1.

  Enable DNCP Snooping for VLAN 10

  2.

  Disable DHCP Option-82 data insertion

  3.

  Enable DHCP Snooping MAC address verification

  4.

  Enable trusted interfaces

  

  A. Check the below

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  GW1:

  R1(config)#username wheel privilege 15 algorithm-type scrypt secret lock3path

  line vty 0 4

  login local

  transport input telnet

  task2 on GW1: bootp = udp; https = tcp

  access-list CORP_ACL permit udp any any eq bootp (67,68)

  access-list CORP_ACL permit tcp any any eq https (443)

  access-list CORP_ACL deny ip any any log

  on the router Gw1 find the gateway-subinterface for Vlan10 (router ont the stick) and apply ACL

  Gw1(config-subif)#ip access-group CORP_ACL in

  task3 on Sw1:

  Sw1(config)#ip dhcp snooping vlan 10

  Sw1(config)#ip dhcp snooping verify mac-address

  Sw1(config)#no ip dhcp snooping information option

  Sw1(config)interface e0/2

  Sw1(config-if)#ip dhcp snooping trust

• Question 1438:

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4.

  All necessary preconfigurations have been applied.

  5.

  Do not change the enable password or hostname for any device.

  6.

  Save your configurations to NVRAM before moving to the next item.

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  8.

  When Next is clicked the lab closes and cannot be reopened.

  Topology

  

  Tasks

  Refer to the topology. All physical cabling is in place. Configure a local user account, a Named ACL (NACL), and security.

  Task 1

  Configure a local account on Sw101 with telnet access only on virtual ports 0-4. Use the following information:

  1.

  Username: support

  2.

  Password: max2learn

  3.

  Privilege level: Exec mode Task 2 Configure and apply a single NACL on Sw101 using the following:

  1.

  Name: ENT_ACL

  2.

  Restrict only PC2 on VLAN 200 from pinging PC1

  3.

  Allow only PC2 on VLAN 200 to telnet to Sw101

  4.

  Prevent all other devices from telnetting from VLAN 200

  5.

  Allow all other network traffic from VLAN 200

  Task 3

  Configure security on interface Ethernet 0/0 of Sw102:

  1.

  Set the maximum number of secure MAC addresses to four.

  2.

  Drop packets with unknown source addresses until the number of secure MAC addresses drops below the configured maximum value. No notification action is required.

  3.

  Allow secure MAC addresses to be learned dynamically.

  

  A. Check the below

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

• Question 1439:

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window

  4.

  All necessary preconfigurations have been applied

  5.

  Do not change the enable password or hostname for any device

  6.

  Save your configurations to NVRAM before moving to the next item

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question

  8.

  When Next is clicked the lab closes and cannot be reopened

  Topology Tasks

  

  R1 has been pre-configured with all the necessary commands. All physical cabling is in place and verified. Connectivity from PC1, PC3, and the Server must be established to the switches, and each port must only allow one VLAN.

  1.

  Configure the VLAN connecting to the switch port for PC3 with the name "SALES"

  2.

  Configure the switch port connecting to Server1

  3.

  Configure the switch port connecting to PC3

  4.

  Ensure R1 discovers SW-1 via the Cisco proprietary neighbor discovery protocol and all other devices on the network are unable to discover SW-1

  A. Check the below

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  1.

  sw-2#conf t sw-2(config)#vlan 20 sw-2(config-vlan)#aname SERVER1 sw-2(config-vlan)#exit sw-2(config)#vlan 30 sw-2(config-vlan)#name SALES sw-2(config-vlan)#exit

  2.

  sw-2(config)#interface ETH0/2 sw-2(config-if)#sw-1port mode access sw-2(config-if)#sw-1port access vlan 20 sw-2(config-if)#no sh sw-2(config-if)#exit

  3 sw-2(config)#interface ETH0/3 sw-2(config-if)#sw-1port mode access sw-2(config-if)#sw-1port access vlan 30 sw-2(config-if)#no sh sw-2(config-if)#end sw-2#wr

  4. sw-1#configure t sw-1(config)#cdp run sw-1(config)#interface fastEthernet 0/1 sw-1(config-if)#cdp enable sw-1(config-if)#no sh sw-1(config)#interface fastEthernet 0/2 sw-1(config-if)#no cdp enable sw-1(config-if)#no sh sw-1(config-if)#end sw-1#wr

• Question 1440:

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window

  4.

  All necessary preconfigurations have been applied

  5.

  Do not change the enable password or hostname for any device

  6.

  Save your configurations to NVRAM before moving to the next item

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question

  8.

  When Next is clicked the lab closes and cannot be reopened

  Topology Tasks

  

  All physical cabling is in place. Routers R3 and R4 are fully configured and inaccessible. Configure static routes for various connectivity to the ISP and the LAN that resides on R4.

  1.

  Configure a route on R1 to ensure that R1 prefers R2 when traffic is destined to the server only.

  2.

  Configure a default route on R2 to the ISP

  3.

  Configure a route on R1 to ensure that R1 will use R2 for the R4 LAN if the link fails between R3 and R4

  4.

  Configure a route on R1 to ensure that R1 prefers R3 when traffic is destined to the R4 LAN at 10.0.41.0/24

  A. Check the below

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A