Cisco CCNA 200-301 Questions & Answers

• Question 151:

  A packet from a company's branch office is destined to host 172.31.0.1 at headquarters. The sending router has three possible matches in its routing table for the packet: prefixes 172.31.0.0/16, 172.31.0.0/24, and 172.31.0.0/25. How does the router handle the packet?

  A. It sends the traffic via prefix 172.31.0.0/24.

  B. It sends the traffic via prefix 172.31.0.0/16.

  C. It sends the traffic via prefix 172.31.0.0/25.

  D. It sends the traffic via the default gateway 0.0.0.0/0.

  Correct Answer: C

• Question 152:

  Refer to the exhibit.

  

  The router R1 is in the process of being configured. Routers R2 and R3 are configured correctly for the new environment. Which two commands must be configured on R1 for PC1 to communicate to all PCs on the 10.10.10.0/24 network? (Choose two.)

  A. ip route 10.10.10.0 255.255.255.0 192.168.2.3

  B. ip route 10.10.10.10 255.255.255.255 192.168.2.2

  C. ip route 10.10.10.10 255.255.255.255 g0/1

  D. ip route 10.10.10.8 255.255.255.248 g0/1

  E. ip route 10.10.10.0 255.255.255.248 192.168.2.2

  Correct Answer: AB

  10.10.10.0 255.255.255.248 Usable address range 10.10.10.1 to 10.10.10.6

• Question 153:

  A project objective is to minimize the association time to the different access points as mobile devices move around the office. The ideal solution must cover numerous devices and device types, including laptops, mobile phones, tablets and wireless printers. What must be configured?

  A. 802.11v BSS Max Idle Service

  B. 802.11v Disassociation Imminent

  C. 802.11ax BSS configure

  D. 802.11k neighbor List Dual Band

  Correct Answer: B

  802.11v

  Basic Service Set (BSS) transition management - BSS transition management with Disassociation Imminent allows the network's control layer to influence client roaming behavior by providing it the load information of nearby access points.

  The device takes this information into account when deciding among the possible roam targets.

  Directed Multicast Service (DMS) - DMS optimizes multicast traffic transmission on wireless networks. The device uses this information to enhance multicast communication and preserve device battery life.

  BSS Max Idle Service - The BSS Max Idle Service helps clients and access points efficiently decide how long to remain associated when no traffic is being transmitted. The device uses this information to preserve device battery life.

  Disassociation Imminent - The Disassociation Imminent option sets a flag in 11v request telling the client that it needs to roam, or it will be disassociated after a certain amount of time.

  https://support.accessagility.com/hc/802.11k-802.11r-and-802.11v

• Question 154:

  An application in the network is being scaled up from 300 servers to 600. Each server requires 3 network connections to support production, backup, and management traffic. Each connection resides on a different subnet. The router configuration for the production network must be configured first using a subnet in the 10.0.0.0/8 network. Which command must be configured on the interface of the router to accommodate the requirements and limit wasted IP address space?

  A. ip address 10.10.10.1 255.255.254.0

  B. ip address 10.10.10.1 255.255.252.0

  C. ip address 10.10.10.1 255.255.240.0

  D. ip address 10.10.10.1 255.255.255.240

  Correct Answer: B

  /23 can holds 500 hosts aprox, /22 reachs 1000 hosts.

• Question 155:

  When an access point is seeking to join wireless LAN controller, which message is sent to the AP-Manager interface?

  A. Discovery response

  B. DHCP request

  C. DHCP discover

  D. Discovery request

  Correct Answer: D

  https://mrncciew.com/2013/03/17/ap-registration/

• Question 156:

  Refer to the exhibit.

  

  When an administrator executes the show ip route command on router D to view its routing table, which value is displayed for the administrative distance for the route to network 192.168 1.0?

  A. 110

  B. 120

  C. 170

  D. 90

  Correct Answer: A

  If you test in Packet Tracer, you will see that every route redistributed from another protocol (interface X) on the router to (interface Y) OSPF, appears ON THE NEXT router as "O E2", but the administrative distance remains the same "AD 110".

  Unlike EIGRP - when a router receives a redistributed route from another protocol (in this case RIPv2), it will appear as an EIGRP route with the initials "D EX", but its administrative distance will no longer be 90, in this case it will appear as "AD 170".

  In the question we have both, AD 110 (O E2) or AD 170 (D EX) for the same destination network 192.168 1.0. AD 110 will be the winner and will appear in the routing table of router D… AD 170 will be a backup and will only be displayed if the first one fails.

• Question 157:

  What is a function of MAC learning on a switch?

  A. MAC address learning is disabled by default on all VLANs.

  B. Frames received for a destination MAC address not listed in the address table are dropped.

  C. The MAC address table is used to populate the ARP table.

  D. A static MAC address is manually added to the MAC table.

  Correct Answer: D

  In MAC table learning, the addresses are learned by dynamically received frames, but it can also be learned statically, adding manually, when you want to force a destination for a specific host. Perhaps, in this case the static form can be considered a form of learning.

• Question 158:

  Refer to the exhibit.

  

  The network engineer is configuring a new WLAN and is told to use a setup password for authentication instead of the RADIUS servers. Which additional set of tasks must the engineer perform to complete the configuration?

  A. Disable PMF Enable PSK Enable 802.1x

  B. Select WPA Policy Enable CCKM Enable PSK

  C. Select WPA Policy Select WPA2 Policy Enable FT PSK

  D. Select WPA2 Policy Disable PMF Enable PSK

  Correct Answer: D

  When configuring a WLAN to use a setup password for authentication instead of RADIUS servers, the following tasks must be performed:

  Select WPA2 Policy: The engineer should select WPA2 (Wi-Fi Protected Access II) as the security policy for the WLAN. WPA2 is a widely used security protocol that provides strong encryption and authentication for wireless networks.

  Disable PMF: PMF (Protected Management Frames) is a security feature that helps protect against certain types of attacks on wireless networks. However, it may cause compatibility issues with some client devices. Therefore, it should be

  disabled when using a setup password for authentication.

  Enable PSK: PSK (Pre-Shared Key) is a form of authentication that uses a shared password or passphrase to authenticate clients on the wireless network. When using a setup password for authentication, the engineer should enable PSK

  and set the shared password or passphrase.

• Question 159:

  By default, how long will the switch continue to know a workstation MAC address after the workstation stops sending traffic?

  A. 200 seconds

  B. 300 seconds

  C. 600 seconds

  D. 900 seconds

  Correct Answer: B

  Command or Action Purpose Step 1 switch# configure terminal Enters configuration mode. Specifies the time before an entry ages out and is discarded from the MAC address table. The range is from 0 to 1000000; the default is 300 switch(config)# mac-address-table aging-time seconds [vlan vlan_id] Step 2 seconds. Entering the value 0 disables the MAC aging. If a VLAN is not specified, the aging specification applies to all VLANs.

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/layer2/503_n2_1/b_Cisco_n5k_layer2_config_gd_rel_503_N2_1/b_Cisco_n5k_layer2_config_gd_rel_503_N2_1_chapter_01111.pdf

• Question 160:

  Which WLC interface provides out-of-band management in the Cisco Unified Wireless Network Architecture?

  A. AP-Manager

  B. service port

  C. dynamic

  D. virtual

  Correct Answer: B

  The service port is used for out-of-band management of the controller and system recovery and maintenance in the event of a network failure. It is important to note that the service port does not support VLAN trunking or VLAN tagging and is therefore required to connect to an access port on the switch.

  It is also recommended not to connect the service port to the same VLAN as the wired clients network because by doing so, administrators will not be able to access the management interface (analysed later) of the controller.