Cisco CCNA 200-301 Questions & Answers

• Question 261:

  What is a benefit for external users who consume public cloud resources?

  A. implemented over a dedicated WAN

  B. located in the same data center as the users

  C. all hosted on physical servers

  D. accessed over the Internet

  Correct Answer: D

• Question 262:

  Refer to the exhibit.

  

  Traffic from R1 to the 10.10.2.0/24 subnet uses 192.168.1.2 as its next hop. An network engineer wants to update the R1 configuration so that traffic with destination 10.10.2.1 passes through router R3, and all other traffic to the 10.10.20/24

  subnet passes through r2.

  Which command must be used?

  A. Ip route 10.10.2.1 255.255.255.255 192.168.1.4 115

  B. Ip route 10.10.2.0 255.255.255.0 192.168.1.4 100

  C. Ip route 10.10.2.0 255.255.255.0 192.168.1.4 115

  D. Ip route 10.10.2.1 255.255.255.255 192.168.1.4 100

  Correct Answer: D

• Question 263:

  Which encryption method is used by WPA3?

  A. PSK

  B. TKIP

  C. SAE

  D. AES

  Correct Answer: D

  WPA3 (Wi-Fi Protected Access 3) primarily uses the Advanced Encryption Standard (AES) encryption method. AES is a strong and widely adopted encryption algorithm that provides secure and robust encryption for wireless communication.

  WPA3 improves the security of Wi-Fi networks by incorporating stronger encryption protocols, and AES is the recommended encryption algorithm for ensuring data confidentiality in WPA3.

  TKIP (Temporal Key Integrity Protocol) was used in the earlier WPA and WPA2 security standards but is not used in WPA3 due to its known security vulnerabilities.

  SAE (Simultaneous Authentication of Equals) is the authentication method used in WPA3-Personal (WPA3-PKS) mode, but it is not the encryption method.

  PSK (Pre-Shared Key) refers to a method of authentication rather than encryption and is commonly used in WPA2-Personal mode.

• Question 264:

  Refer to the exhibit.

  

  PC1 regularly sends 1800 Mbps of traffic to the server. A network engineer needs to configure the EtherChannel to disable Port Channel 1 between SW1 and SW2 when the Ge0/0 and Ge0/1 ports on SW2 go down. Which configuration must the engineer apply to the switch?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

• Question 265:

  Which type of address is shared by routers in a HSRP implementation and used by hosts on the subnet as their default gateway address?

  A. multicast address

  B. loopback IP address

  C. virtual IP address

  D. broadcast address

  Correct Answer: C

• Question 266:

  Refer to the exhibit.

  

  The administrator must configure a floating sialic default route that points to 2001:db8:1234:2::1 and replaces the current default route only if it fails. Which command must the engineer configure on the CPE?

  A. ipv6 route ::/0 2001:db8:1234:2::1 3

  B. ipv6 route ::/128 2001 :db8:1234:2::1 3

  C. ipv6 route ::/0 2001:db8:1234:2::1 1

  D. ipv6 route ::/0 2001:db8:1234:2::1 2

  Correct Answer: B

• Question 267:

  What does a switch do when it receives a frame whose destination MAC address is missing from the MAC address table?

  A. It floods the frame unchanged across all remaining ports in the incoming VLAN.

  B. It appends the table with a static entry for the MAC and shuts down the port.

  C. It updates the CAM table with the destination MAC address of the frame.

  D. It changes the checksum of the frame to a value that indicates an invalid frame.

  Correct Answer: A

• Question 268:

  What are two examples of multifactor authentication? (Choose two.)

  A. single sign-on

  B. unique user knowledge

  C. passwords that expire

  D. soft tokens

  E. shared password responsibility

  Correct Answer: CD

  Single sign-on allows users to access multiple applications, websites, resources with one set of login credentials. It is not a part of a MFA, it actually needs MFA to be secured.

  A soft (or hard) token can be a part of a MFA A password that expires can be a part of a MFA

• Question 269:

  Refer to the exhibit.

  

  Rapid PVST+ mode is on the same VLAN on each switch. Which switch becomes the root bridge and why?

  A. SW2, because its MAC address is the highest

  B. SW3, because its priority is the highest

  C. SW4, because its priority is highest and its MAC address is lower

  D. SW1, because its priority is the lowest and its MAC address is higher

  Correct Answer: C

• Question 270:

  What are two characteristics of a small office / home office connection environment? (Choose two.)

  A. It requires 10Gb ports on all uplinks.

  B. It supports between 50 and 100 users.

  C. It supports between 1 and 50 users.

  D. It requires a core, distribution, and access layer architecture.

  E. A router port connects to a broadband connection.

  Correct Answer: CE