Cisco CCNA 200-301 Questions & Answers

• Question 471:

  Refer to the exhibit. All traffic enters the CPE router from interface Serial0/3 with an IP address of 192.168.50.1. Web traffic from the WAN is destined for a LAN network where servers are load balanced. An IP packet with a destination address of the HTTP virtual IP of 192.168.1.250 must be forwarded. Which routing table entry does the router use?

  

  A. 192.168.1.0/24 via 192.168.12.2

  B. 192.168.1.128/25 via 192.168.13.3

  C. 192.168.1.192/26 via 192.168.14.4

  D. 192.168.1.224/27 via 192.168.15.5

  Correct Answer: D

• Question 472:

  An engineer is installing a new wireless printer with a static IP address on the Wi-Fi network. Which feature must be enabled and configured to prevent connection issues with the printer?

  A. passive client

  B. client exclusion

  C. DHCP address assignment

  D. static IP tunneling

  Correct Answer: B

• Question 473:

  An engineer is configuring router R1 with an IPv6 static route for prefix 2019:C15C:0CAF:E001::/64. The next hop must be 2019:C15C:0CAF:E002::1

  The route must be reachable via the R1 Gigabit 0/0 interface.

  Which command configures the designated route?

  A. R1(config)#ipv6 route 2019:C15C:0CAF:E001::/64 2019:C15C:0CAF:E002::1

  B. R1(config-if)#ipv6 route 2019:C15C:0CAF:E001::/64 2019:C15C:0CAF:E002::1

  C. R1(config-if)#ip route 2019:C15C:0CAF:E001::/64 GigabitEthernet0/0

  D. R1(config)#ip route 2019:C15C:0CAF:E001::/64 GigabitEthernet0/0

  Correct Answer: A

• Question 474:

  Which Layer 2 switch function encapsulates packets for different VLANs so that the packets traverse the same port and maintain traffic separation between the VLANs?

  A. VLAN numbering

  B. VLAN DSCP

  C. VLAN tagging

  D. VLAN marking

  Correct Answer: C

  "marking" is for QoS stuff.

• Question 475:

  What is an expected outcome when network management automation is deployed?

  A. A distributed management plane must be used.

  B. Software upgrades are performed from a central controller

  C. Complexity increases when new device configurations are added

  D. Custom applications are needed to configure network devices

  Correct Answer: B

• Question 476:

  A network engineer must implement an IPv6 configuration on the vlan 2000 interface to create a routable locally-unique unicast address that is blocked from being advertised to the internet. Which configuration must the engineer apply?

  A. interface vlan 2000 ipv6 address ffc0:0000:aaaa::1234:2343/64

  B. interface vlan 2000 Ipv6 address fc00:0000:aaaa:a15d:1234:2343:8aca/64

  C. interface vlan 2000 ipv6 address fe80;0000:aaaa::1234:2343/64

  D. interface vlan 2000 ipv6 address fd00::1234:2343/64

  Correct Answer: D

  both FC00/FD00 are unique local addresses routable within organization....but in "B" answer there is only 7 octets....there must be 8 octets.....

• Question 477:

  Which two spanning-tree states are bypassed on an interface running PortFast? (Choose two.)

  A. disabled

  B. listening

  C. forwarding

  D. learning

  E. blocking

  Correct Answer: BD

  PortFast is a Spanning-Tree Protocol feature used to speed up convergence time on ports which are connected to a workstation by causing a port to enter the forwarding state instantly, bypassing the listening and learning state.

• Question 478:

  Refer to the exhibit. What must be configured to enable 802.11w on the WLAN?

  

  A. Set PMF to Required.

  B. Enable MAC Filtering.

  C. Enable WPA Policy.

  D. Set Fast Transition to Enabled

  Correct Answer: A

  To enable 802.11w (also known as Protected Management Frames or PMF) on the WLAN, the action that must be taken is to set PMF to Required.

  PMF is a security feature in Wi-Fi networks that provides protection for management frames, such as association and disassociation frames, against various attacks. By setting PMF to Required, all clients connecting to the WLAN will be required to support and use PMF for enhanced security. This ensures that management frames exchanged between the access point and clients are protected from potential tampering or exploitation.

• Question 479:

  Which value is the unique identifier that an access point uses to establish and maintain wireless connectivity to wireless network devices?

  A. VLANID

  B. SSID

  C. RFID

  D. WLANID

  Correct Answer: B

  The SSID is a unique identifier that wireless networking devices use to establish and maintain wireless connectivity. Multiple access points on a network or subnetwork may use the same SSIDs.

• Question 480:

  A network engineer is configuring a switch so that it is remotely reachable via SSH. The engineer has already configured the host name on the router. Which additional command must the engineer configure before entering the command to generate the RSA key?

  A. password password

  B. crypto key generate rsa modulus 1024

  C. ip domain-name domain

  D. ip ssh authentication-retries 2

  Correct Answer: C