Cisco CCNA 200-301 Questions & Answers

• Question 461:

  What is the role of disaggregation in controller-based networking?

  A. It divides the control-plane and data-plane functions.

  B. It summarizes the routes between the core and distribution layers of the network topology.

  C. It enables a network topology to quickly adjust from a ring network to a star network

  D. It streamlines traffic handling by assigning individual devices to perform either Layer 2 or Layer 3 functions.

  Correct Answer: A

  This answer is mentioned in multiple search results , including [1], [2], [3], and [4]. Answer B is also mentioned in some search results as a description of controller-based networking, but it is not the specific role of disaggregation within that architecture. Answers C and D are not mentioned in any relevant search results for this question.

• Question 462:

  What is a zero-day exploit?

  A. It is when a new network vulnerability is discovered before a fix is available

  B. It is when the perpetrator inserts itself in a conversation between two parties and captures or alters data.

  C. It is when the network is saturated with malicious traffic that overloads resources and bandwidth

  D. It is when an attacker inserts malicious code into a SQL server.

  Correct Answer: A

• Question 463:

  Refer to the exhibit.

  

  The given Windows PC is requesting the IP address of the host at www.cisco.com. To which IP address is the request sent?

  A. 192.168.1.226

  B. 192.168.1.100

  C. 192.168.1.254

  D. 192.168.1.253

  Correct Answer: D

  web address uses DNS server

• Question 464:

  Refer to the exhibit. All routers in the network are configured. R2 must be the DR. After the engineer connected the devices, R1 was elected as the DR. Which command sequence must be configured on R2 to be elected as the DR in the network?

  

  A. R2(config)#router ospf 1 R2(config-router)#router-id 10.100.100.100

  B. R2(config)#router ospf 1 R2(config-router)#router-id 192.168.2.7

  C. R2(config)#interface gi0/0 R2(config-if)#ip ospf priority 100

  D. R2(config)#interface gi0/0 R2(config-if)#ip ospf priority 1

  Correct Answer: C

  R1 was initially elected as the DR because they would have the same priority by default (1). The next step in the election process would be the highest IP address which R1 has over R2. Thus, setting the priority of R2 to 100 would elect it as DR. The highest priority wins for DR once it is within scope.

• Question 465:

  A network engineer is replacing the switches that belong to a managed-services client with new Cisco Catalyst switches. The new switches will be configured for updated security standards, including replacing Telnet services with encrypted connections and doubling the modulus size from 1024. Which two commands must the engineer configure on the new switches? (Choose two.)

  A. crypto key generate rsa general-keys modulus 1024

  B. transport input all

  C. crypto key generate rsa usage-keys

  D. crypto key generate rsa modulus 2048

  E. transport Input ssh

  Correct Answer: DE

• Question 466:

  Which QoS queuing method discards or marks packets that exceed the desired bit rate of traffic flow?

  A. shaping

  B. policing

  C. CBWFQ

  D. LLQ

  Correct Answer: B

  Use the police command to mark a packet with different quality of service (QoS) values based on conformance to the service-level agreement. Traffic policing allows you to control the maximum rate of traffic transmitted or received on an

  interface.

  Reference:

  https://www.cisco.com/c/en/us/td/docs/ios/qos/configuration/guide/12_2sr/qos_12_2sr_book/traffic_policing.html

• Question 467:

  Refer to the exhibit. Router R1 must be configured to reach the 10.0.3.0/24 network from the 10.0.1.0/24 segment. Which command must be used to configure the route?

  

  A. route add 10.0.3.0 mask 255.255.255.0 10.0.4.3

  B. route add 10.0.3.0 0.255.255.255 10.0.4.2

  C. ip route 10.0.3.0 255.255.255.0 10.0.4.3

  D. ip route 10.0.3.0 0.255.255.255 10.0.4.2

  Correct Answer: C

• Question 468:

  Refer to the exhibit. What is the next hop for traffic entering R1 with a destination of 10.1.2.126?

  

  A. 10.165 20.126

  B. 10.165.20.146

  C. 10.165.20.166

  D. 10.165 20.226

  Correct Answer: A

• Question 469:

  After a recent security breach and a RADIUS failure, an engineer must secure the console port of each enterprise router with a local username and password. Which configuration must the engineer apply to accomplish this task?

  A. aaa new-model line con 0 password plaintextpassword privilege level 15

  B. username localuser secret plaintextpassword line con 0 login authentication default privilege level 15

  C. username localuser secret plaintextpassword line con 0 no login local privilege level 15

  D. aaa new-model aaa authorization exec default local aaa authentication login default radius username localuser privilege 15 secret plaintextpassword

  Correct Answer: B

• Question 470:

  An engineer is configuring SSH version 2 exclusively on the R1 router. What is the minimum configuration required to permit remote management using the cryptographic protocol?

  A. hostname R1 ip domain name cisco crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input ssh login local

  B. hostname R1 crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input all login local

  C. hostname R1 service password-encryption crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password O cisco123 ip ssh version 2 line vty 0 15 transport input ssh login local

  D. hostname R1 ip domain name cisco crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input all login local

  Correct Answer: A