Cisco CCNA 200-301 Questions & Answers

• Question 441:

  Which command must you enter to configure a DHCP relay?

  A. ip helper-address

  B. ip address dhcp

  C. ip dhcp relay

  D. ip dhcp poo

  Correct Answer: A

• Question 442:

  Which feature can you implement to reserve bandwidth for VoIP calls across the call path?

  A. round robin

  B. CBWFQ

  C. PQ

  D. RSVP

  Correct Answer: D

• Question 443:

  An organization has implemented Cisco Firepower without IPS capabilities and now wants to enable inspection for their traffic. They need to be able to detect protocol anomalies and utilize the Snort rule sets to detect malicious behavior. How is this accomplished?

  A. Modify the network discovery policy to detect new hosts to inspect.

  B. Modify the access control policy to redirect interesting traffic to the engine.

  C. Modify the intrusion policy to determine the minimum severity of an event to inspect.

  D. Modify the network analysis policy to process the packets for inspection.

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/670/fdm/fptd-fdm-config-guide-670/fptd-fdm-intrusion.html

• Question 444:

  When deploying a Cisco ASA Firepower module, an organization wants to evaluate the contents of the traffic without affecting the network. It is currently configured to have more than one instance of the same device on the physical appliance. Which deployment mode meets the needs of the organization?

  A. inline tap monitor-only mode

  B. passive monitor-only mode

  C. passive tap monitor-only mode

  D. inline mode

  Correct Answer: B

• Question 445:

  An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently. How must the devices be implemented in this environment?

  A. in active/active mode

  B. in a cluster span EtherChannel

  C. in active/passive mode

  D. in cluster interface mode

  Correct Answer: C

• Question 446:

  An engineer is tasked with deploying an internal perimeter firewall that will support multiple DMZs. Each DMZ has a unique private IP subnet range. How is this requirement satisfied?

  A. Deploy the firewall in transparent mode with access control policies

  B. Deploy the firewall in routed mode with access control policies

  C. Deploy the firewall in routed mode with NAT configured

  D. Deploy the firewall in transparent mode with NAT configured ,

  Correct Answer: C

  Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/intro-fw.html

• Question 447:

  An organization has a Cisco FTD that uses bridge groups to pass traffic from the inside interfaces to the outside interfaces. They are unable to gather information about neighboring Cisco devices or use multicast in their environment. What must be done to resolve this issue?

  A. Create a firewall rule to allow CDP traffic

  B. Create a bridge group with the firewall interfaces

  C. Change the firewall mode to transparent

  D. Change the firewall mode to routed

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/transparent_or_routed_firewall_mode_for_firepower_threat_defense.html

• Question 448:

  A network engineer implements a new Cisco Firepower device on the network to take advantage of its intrusion detection functionality. There is a requirement to analyze the traffic going across the device, alert on any malicious traffic, and appear as a bump in the wire. How should this be implemented?

  A. Specify the BVI IP address as the default gateway for connected devices

  B. Enable routing on the Cisco Firepower

  C. Add an IP address to the physical Cisco Firepower interfaces

  D. Configure a bridge group in transparent mode

  Correct Answer: D

• Question 449:

  An administrator must use the password complexity not manufacturer-name command to prevent users from adding "cisco" as a password. Which command must be issued before this command?

  A. password complexity enable

  B. confreg 0x2142

  C. login authentication my-auth-list

  D. service password-encryption

  Correct Answer: A

  https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-small-business-300-series-managed-switches/smb5563-configure-password-settings-on-a-switch-through-the-command.html

• Question 450:

  Which REST method updates an object in the Cisco DNA Center Intent API?

  A. CHANGE

  B. UPDATE

  C. POST

  D. PUT

  Correct Answer: D

  PUT is most-often utilized for **update** capabilities, PUT-ing to a known resource URI with the request body containing the newly-updated representation of the original resource.However, PUT can also be used to create a resource in the case where the resource ID is chosen by the client instead of by the server. In other words, if the PUT is to a URI that contains the value of a non-existent resource ID. Again, the request body contains a resource representation. Many feel this is convoluted and confusing. Consequently, this method of creation should be used sparingly, if at all.Alternatively, use POST to create new resources and provide the client-defined ID in the body representation--presumably to a URI that doesn't include the ID of the resource (see POST below).On successful update, return 200 (or 204 if not returning any content in the body) from a PUT. If using PUT for create, return HTTP status 201 on successful creation. A body in the response is optional--providing one consumes more bandwidth. It is not necessary to return a link via a Location header in the creation case since the client already set the resource ID.PUT is not a safe operation, in that it modifies (or creates) state on the server, but it is idempotent. In other words, if you create or update a resource using PUT and then make that same call again, the resource is still there and still has the same state as it did with the first call.If, for instance, calling PUT on a resource increments a counter within the resource, the call is no longer idempotent. Sometimes that happens and it may be enough to document that the call is not idempotent. However, it's recommended to keep PUT requests idempotent. It is strongly recommended to use POST for non-idempotent requests.Examples:

  https://www.restapitutorial.com/lessons/httpmethods.html