Cisco CCNA 200-301 Questions & Answers

• Question 271:

  The address block 192 168 32 0/24 must be subnetted into smaller networks The engineer must meet these requirements:

  1.

  Create 8 new subnets

  2.

  Each subnet must accommodate 30 hosts

  3.

  Interface VLAN 10 must use the last usable IP in the first new subnet

  4.

  A Layer 3 interface is used

  Which configuration must be applied to the interface?

  A. no switchport mode trunk ip address 192.168.32.97 255.255.255.224

  B. switchport ip address 192.168.32.65 255.255.255.240

  C. no switchport ip address 192.168.32.30 255.255.255.224

  D. no switchport mode access ip address 192.168.32.62 255.255.255.240

  Correct Answer: C

  Requirement is 8 networks with 30 hosts

  255.255.255.0 = 11111111.11111111.11111111.00000000 8 networks = 1111 with increment of 16 which is less host number than require. 30 hosts = 11100000 with increment of 32

  255.255.255.224 or 11111111.11111111.11111111.11100000 8 networks for /27 are 0,32,64,96,128,160,192,224

• Question 272:

  A network engineer is upgrading a small data center to host several new applications, including server backups that are expected to account for up to 90% of the bandwidth during peak times. The data center connects to the MPLS network provider via a primary circuit and a secondary circuit. How does the engineer inexpensively update the data center to avoid saturation of the primary circuit by traffic associated with the backups?

  A. Assign traffic from the backup servers to a dedicated switch.

  B. Configure a dedicated circuit for the backup traffic.

  C. Place the backup servers in a dedicated VLAN.

  D. Advertise a more specific route for the backup traffic via the secondary circuit.

  Correct Answer: D

  To inexpensively update the data center and avoid saturation of the primary circuit by traffic associated with the backups, the network engineer can implement the following solution:

  Advertise a more specific route for the backup traffic via the secondary circuit.

  By advertising a more specific route for the backup traffic via the secondary circuit, the engineer can ensure that the backup traffic is directed through the secondary circuit instead of overwhelming the primary circuit. This can be achieved by configuring the routing protocols or static routes to prioritize the secondary circuit for the backup traffic.

  This approach allows the engineer to leverage the existing infrastructure and circuits without the need for additional dedicated equipment or circuits, making it a cost-effective solution. It effectively separates the backup traffic from other data center traffic and ensures efficient utilization of the available network resources.

• Question 273:

  Refer to the exhibit.

  

  An engineer must configure the interface that connects to PC 1 and secure it in a way that only PC1 is allowed to use the port No VLAN tagging can be used except for a voice VLAN. Which command sequence must be entered to configure the switch?

  A. SW1(config-if)#switchport mode dynamic auto SW1(config-if)#switchport port-security SW1(config-if)#switchport port-security violation restrict

  B. SW1(config-if)#switchport mode nonegotiate SW1(config-if)#switchport port-security SW1(config-if)#switchport port-security maximum 1

  C. SW1(config-if)#switchport mode access SW1(config-if)#switchport port-security SW1(config-if)#switchport port-security mac-address 0050.7966.6800

  D. SW1(config-if)#switchport mode dynamic desirable SW1(config-if)#switchport port-security mac-address 0050.7966.6800 SW1(config-if)#switchport port-security mac-address sticky

  Correct Answer: C

• Question 274:

  Which interface enables communication between a program on the controller and a program on the networking devices?

  A. northbound interface

  B. software virtual interface

  C. southbound interface

  D. tunnel Interface

  Correct Answer: B

• Question 275:

  Refer to the exhibit.

  

  How does router R1 handle traffic to the 172.16.1.4/30 subnet?

  A. It sends all traffic over the path via 172.16.9.5 using 172.16.4.4 as a backup.

  B. It sends all traffic over the path via 10.0.1.100.

  C. It load-balances traffic over 172.16.9.5 and 172.16.4.4.

  D. It sends all traffic over the path via 172.16.4.4.

  Correct Answer: C

• Question 276:

  Which two features introduced in SNMPv2 provides the ability to retrieve large amounts of data in one request

  A. Get

  B. GetNext

  C. Set

  D. GetBulk

  E. Inform

  Correct Answer: DE

  SNMPv2 introduced two features that provide the ability to retrieve large amounts of data in one request and acknowledge a trap using PDUs. These features are:

  GetBulkRequest: This feature allows a management station to retrieve a large amount of data in one request, reducing the number of requests needed to retrieve the same information. The GetBulkRequest PDU specifies a starting OID and a maximum number of variables to be returned in a single response.

  InformRequest: This feature is used to acknowledge receipt of a trap message from an agent. The InformRequest PDU is similar to the trap PDU, but it includes a request identifier, which allows the management station to match the acknowledgment with the original trap. The InformRequest also requires an acknowledgment from the receiving device, which provides greater reliability in trap delivery.

• Question 277:

  Refer to the exhibit.

  

  The P2P blocking action option is disabled on the WLC.The security team has a new requirement for each client to retain their assigned IP addressing as the clients move between locations in the campus network. Which action completes this configuration?

  A. Enable the Static IP Tunneling option.

  B. Disable the Coverage Hole Detection option.

  C. Check the DHCP Addr. Assignment check box.

  D. Set the P2P Blocking Action option to Forward-UpStream.

  Correct Answer: A

  Static IP Tunneling - allows clients to travel between different WLC on the network and retain connectivity even if the static ip is in a different subnet. https://mrncciew.com/2013/03/25/static-ip-clients-mobility/

• Question 278:

  Which enhancement is implemented in WPA3?

  A. applies 802.1x authentication

  B. usesTKIP

  C. employs PKI to identify access points

  D. protects against brute force attacks

  Correct Answer: D

  WPA3 (Wi-Fi Protected Access 3) implements an enhancement to protect against brute-force attacks

• Question 279:

  Refer to the exhibit. When router R1 receives a packet with destination IP address 10.56.0.62, through which interface does it route the packet?

  

  A. Null0

  B. VIan58

  C. Vlan60

  D. VIan59

  Correct Answer: B

  mask /26 seems 2^6 = 64 ,so 10.56.0.0/26 means 10.56.0.0 ~ 10.56.0.63 is the range,the broadcast is 10.56.0.63 and 10.56.0.62 is the final address can be used refer to the routing table, /26 go to vlan 58

• Question 280:

  Refer to the exhibit.

  

  A packet sourced from 172.18.33.2 is destined for 172.18.32.38. Where does the router forward the packet?

  A. GigabitEthernet0/0

  B. Loopback0

  C. 10.1.1.1

  D. 10.1.1.3

  Correct Answer: B