Cisco CCNA 200-301 Questions & Answers

• Question 431:

  Refer to the exhibit.

  An administrator configures the following ACL in order to prevent devices on the 192.168.1.0 subnet from accessing the server at 10.1.1.5:

  

  Where should the administrator place this ACL for the most efficient use of network resources?

  A. inbound on router A Fa0/0

  B. outbound on router B Fa0/0

  C. outbound on router A Fa0/1

  D. inbound on router B Fa0/1

  Correct Answer: A

• Question 432:

  Refer to the exhibit.

  Router R1 is configured with static NAT. Addressing on the router and the web server are correctly configured, but there is no connectivity between the web server and users on the Internet. What is a possible reason for this lack of connectivity?

  

  A. The router NAT configuration has an incorrect inside local address

  B. The inside global address is incorrect

  C. The NAT configuration on interface S0/0/1 is incorrect

  D. Interface Fa0/0 should be configured with the command ip nat outside

  Correct Answer: A

• Question 433:

  What does traffic shaping do to reduce congestion in a network?

  A. buffers and queues packets

  B. buffers without queuing packets

  C. queues without buffering packets

  D. drops packets

  Correct Answer: A

• Question 434:

  Which option is the main function of congestion management?

  A. discarding excess traffic

  B. queuing traffic based on priority

  C. classifying traffic

  D. providing long-term storage of buffered data

  Correct Answer: B

• Question 435:

  Which two QoS tools can provide congestion management? (Choose two)

  A. CBWFQ

  B. FRTS

  C. CAR

  D. PQ

  E. PBR

  Correct Answer: AD

• Question 436:

  Which command must be present in a Cisco Device configuration to enable the device to resolve an FQDN?

  A. ip host

  B. ip name-server

  C. ip domain-lookup

  D. ip domain-name

  Correct Answer: C

• Question 437:

  A hospital network needs to upgrade their Cisco FMC managed devices and needs to ensure that a disaster recovery process is in place. What must be done in order to minimize downtime on the network?

  A. Configure a second circuit to an ISP for added redundancy.

  B. Keep a copy of the current configuration to use as backup.

  C. Configure the Cisco FMCs for failover.

  D. Configure the Cisco FMC managed devices for clustering.

  Correct Answer: C

• Question 438:

  An engineer is monitoring network traffic from their sales and product development departments, which are on two separate networks. What must be configured in order to maintain data privacy for both departments?

  A. Use passive IDS ports for both departments.

  B. Use a dedicated IPS inline set for each department to maintain traffic separation.

  C. Use 802.1Q inline set Trunk interfaces with VLANs to maintain logical traffic separation.

  D. Use one pair of inline set in TAP mode for both departments.

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html

• Question 439:

  Refer to the exhibit.

  

  SW2 is replaced due to a hardware failure. A network engineer starts to configure SW2 by copying the Fa0/1 interface configuration from SW1. Which command must be configured on the Fa0/1 interface of SW2 to enable PC1 to connect to PC2?

  A. switchport mode trunk

  B. switchport trunk native vlan 10

  C. switchport trunk allowed remove 10

  D. switchport mode access

  Correct Answer: A

• Question 440:

  Refer to the exhibit.

  

  Which action must be taken so that neighboring devices rapidly discover switch Cat9300?

  A. Enable portfast on the ports that connect to neighboring devices

  B. Configure the cdp holdtime 10 command on switch Cat9300

  C. Configure the cdp timer 10 command on the neighbors of switch Cat9300

  D. Configure the cdp timer 10 command on switch Cat9300

  Correct Answer: D