Cisco CCNA 200-301 Questions & Answers

• Question 301:

  What is a characteristic of encryption in wireless networks?

  A. used to ensure data integrity

  B. uses 802.1x as the standard encoding method

  C. uses protocols such as TKIP and CCMP to secure data

  D. only works with the 5Ghz frequency

  Correct Answer: C

  Encryption in wireless networks is a security measure designed to protect the confidentiality of data as it is transmitted over the airwaves. The widely used encryption protocols for securing wireless communications are TKIP (Temporal Key Integrity Protocol) and CCMP (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol).

  TKIP is commonly used with WPA (Wi-Fi Protected Access), and CCMP is used with WPA2 and WPA3. These protocols ensure that data transmitted between a wireless client and an access point is encrypted, preventing unauthorized parties from intercepting and deciphering the information.

• Question 302:

  Which two tasks support the physical access control element of a security program? (Choose two.)

  A. Deploy a video surveillance system

  B. Run a workshop on corporate security policies

  C. Implement badge access to critical locations

  D. Develop slideshows about new security regulations

  E. Disperse information about how to protect the organization's confidential data

  Correct Answer: AC

• Question 303:

  What is a characteristic of a Layer 2 switch?

  A. provides a single broadcast domain for all connected devices

  B. tracks the number of active TCP connections

  C. offers one collision domain for all connected devices D. makes forwarding decisions based on MAC addresses

  Correct Answer: A

• Question 304:

  Company has decided to require multifactor authentication for all systems. Which set of parameters meets the requirement?

  A. personal 10-digit PIN and RSA certificate

  B. complex password and personal 10-digit PIN

  C. password of 8 to 15 characters and personal 12-digit PIN

  D. fingerprint scanning and facial recognition

  Correct Answer: A

• Question 305:

  Network security team noticed that an increasing number of employees are becoming victims of phishing attacks. Which security program should be implemented to mitigate the problem?

  A. email system patches

  B. physical access control

  C. software firewall enabled on all PCs

  D. user awareness training

  Correct Answer: D

• Question 306:

  Which type of wired port is required when an AP offers one unique SSID, passes client data and management traffic, and is in autonomous mode?

  A. trunk

  B. default

  C. access

  D. LAG

  Correct Answer: C

  In this scenario, the AP is offering only one unique SSID, meaning there is no need for a trunk port which carries multiple VLANs. The AP is also passing both client data and management traffic, so an access port that carries both types of traffic would be appropriate. Autonomous mode simply means that the AP is functioning independently and not connected to a centralized controller, so there is no need for any specific type of port like LAG (Link Aggregation Group) or default. Therefore, the access port would be used in this situation.

• Question 307:

  In what way does a network supervisor reduce maintenance costs while maintaining network integrity on a traditionally managed network?

  A. They install an automated network-monitoring system to provide early warning of network issues.

  B. They employ additional network administrators to proactively manage the network.

  C. They use automation to centralize network-management tasks.

  D. They automate change-management processes that verify issue resolution.

  Correct Answer: C

  Using automation to centralize network-management tasks is a strategy that can help reduce maintenance costs while maintaining network integrity. By automating routine and repetitive tasks, a network supervisor can streamline operations, reduce the likelihood of errors, and enhance overall efficiency. Centralized management through automation allows for more effective monitoring, configuration management, and troubleshooting, contributing to network stability.

• Question 308:

  What is a function of a firewall on an enterprise network?

  A. It allows and denies ingress and egress traffic.

  B. It serves as a default gateway to hosts on the internet.

  C. It processes traffic based on stateless inspection.

  D. It acts as the intermediary device between the enterprise and its ISP.

  Correct Answer: A

• Question 309:

  Which standard is required when more than one distribution system port and only one IP address are configured for a Cisco WLC?

  A. 802.3ad

  B. 802.1q

  C. 802.1d

  D. 802.1af

  Correct Answer: A

  The 802.3ad (Link Aggregation Control Protocol or LACP) standard is used to group multiple physical interfaces into a single logical interface, known as an aggregation port. However, this standard is not used when there is more than one port of a distribution system and only one IP address configured on a Cisco WLC (Cisco Wireless LAN Controller).

  Instead, the standard needed in this scenario is 802.1q. This standard is used to support VLAN tags on an Ethernet switch. It allows a single physical port to support multiple VLANs and can therefore accommodate multiple distribution systems using only one IP address on the WLC.

• Question 310:

  Which action protects a network from VLAN hopping attacks?

  A. Implement port security on internet-facing VLANs.

  B. Change the native VLAN to an unused VLAN ID.

  C. Enable dynamic ARP inspection.

  D. Configure an ACL to prevent traffic from changing VLANs.

  Correct Answer: B