Cisco CCNA 200-301 Questions & Answers

• Question 521:

  Refer to the exhibit. Users on existing VLAN 100 can reach sites on the Internet. Which action must the administrator take to establish connectivity to the Internet for users in VLAN 200?

  

  A. Define a NAT pool on the router.

  B. Configure static NAT translations for VLAN 200.

  C. Configure the ip nat outside command on another interface for VLAN 200.

  D. Update the NAT_INSIDE_RANGES ACL

  Correct Answer: D

  "ip nat inside source list NAT_INSIDE_RANGES interfaces G0/0 Overload".

  This command essentially tells the router all ip addresses specified from the access list "NAT_INSIDE_RANGES" will be translated via port address translation (PAT) using the ip address of G0/0.

  By reconfiguring the ACL to include the 200 vlan it will provide the easiest way to get VLAN 200 access to the internet.

• Question 522:

  Refer to the exhibit.

  

  An engineer is configuring an EtherChannel using LACP between Switches 1 and 2. Which configuration must be applied so that only Switch 1 sends LACP initiation packets?

  A. Switch 1 (config-if)#channel-group 1 mode on Swrtch2(config-if)#channel-group 1 mode passive

  B. Switch1(config-if)#channel-group 1 mode passive Switch2(config-if)#channel-group 1 mode active

  C. Switch1{config-if)#channel-group 1 mode active Switch2(config-if)#channel-group 1 mode passive

  D. Switch1(config-if)#channel-group 1 mode on Switch2(config-if)#channel-group 1 mode active

  Correct Answer: C

• Question 523:

  Refer to the exhibit.

  

  Which switch becomes the root of a spanning tree for VLAN 20 if all links are of equal speed?

  A. SW1

  B. SW2

  C. SW3

  D. SW4

  Correct Answer: A

  The root bridge is the bridge with the lowest Bridge ID

• Question 524:

  An engineer is configuring remote access to a router from IP subnet 10.139.58.0/28. The domain name, crypto keys, and SSH have been configured. Which configuration enables the traffic on the destination router?

  A. line vty 0 15 access-class 120 in ! ip access-list extended 120 permit tcp 10.139.58.0 0.0.0.15 any eq 22

  B. interface FastEthernet0/0 ip address 10.122.49.1 255.255.255.252 ip access-group 10 in ! ip access-list standard 10 permit udp 10.139.58.0 0.0.0.7 host 10.122.49.1 eq 22

  C. interface FastEthernet0/0 ip address 10.122.49.1 255.255.255.252 ip access-group 110 in ! ip access-list standard 110 permit tcp 10.139.58.0 0.0.0.15 eq 22 host 10.122.49.1

  D. line vty 0 15 access-group 120 in ! ip access-list extended 120 permit tcp 10.139.58.0 0.0.0.15 any eq 22

  Correct Answer: A

• Question 525:

  Refer to the exhibit. How should the configuration be updated to allow PC1 and PC2 access to the Internet?

  

  A. Modify the configured number of the second access list.

  B. Add either the ip nat {inside|outside} command under both interfaces.

  C. Remove the overload keyword from the ip nat inside source command.

  D. Change the ip nat inside source command to use interface GigabitEthernet0/0.

  Correct Answer: B

  ip nat inside source list INSIDE-NET pool SHARED-IP (g0/1)overload (in this case G0/1). Only inside/outside on the interfaces is missing.

• Question 526:

  Refer to the exhibit. Users need to connect to the wireless network with IEEE 802. 11r-compatible devices. The connection must be maintained as users travel between floors or to other areas in the building. What must be the configuration of the connection?

  

  A. Select the WPA Policy option with the CCKM option.

  B. Disable AES encryption.

  C. Enable Fast Transition and select the FT 802.1x option.

  D. Enable Fast Transition and select the FT PSK option.

  Correct Answer: D

• Question 527:

  Refer to the exhibit. Which minimum configuration items are needed to enable Secure Shell version 2 access to R15?

  

  A. Router(config)#hostname R15 R15(config)#crypto key generate rsa general-keys modulus 1024 R15(config-line #line vty 0 15 R15(config-line)#transport input ssh R15(config)#ip ssh source-interface Fa0/0 R15(config)#ip ssh stricthostkeycheck

  B. Router(config)#crypto key generate rsa general-keys modulus 1024 Router(config)#ip ssh version 2 Router(config-line #line vty 0 15 Router(config-line)#transport input ssh Router(config)#ip ssh logging events R15(config)#ip ssh stricthostkeycheck

  C. Router(config)#ip domain-name cisco.com Router(config)#crypto key generate rsa general-keys modulus 1024 Router(config)#ip ssh version 2 Router(config-line)#line vty 0 15 Router(config-line)#transport input all Router(config)#ip ssh logging events

  D. Router(config)#hostname R15 R15(config)#ip domain-name cisco.com R15(config)#crypto key generate rsa general-keys modulus 1024 R15(config)#ip ssh version 2 R15(config-line)#line vty 0 15 R15(config-line)#transport input ssh

  Correct Answer: D

• Question 528:

  Refer to the exhibit. Web traffic is coming in from the WAN interface. Which route takes precedence when the router is processing traffic destined for the LAN network at 10.0.10.0/24?

  

  A. via next-hop 10.0.1.5

  B. via next-hop 10 0 1.4

  C. via next-hop 10.0 1.50

  D. via next-hop 10.0 1 100

  Correct Answer: A

• Question 529:

  Refer to the exhibit.

  

  All VLANs are present in the VLAN database.

  Which command sequence must be applied to complete the configuration?

  A. interface FastEthernet0/1 switchport trunk native vlan 10 switchport trunk allowed vlan 10,15

  B. interface FastEthernet0/1 switchport mode trunk switchport trunk allowed vlan 10,15

  C. interface FastEthernet0/1 switchport mode access switchport voice vlan 10

  D. Interface FastEthernet0/1 switchport trunk allowed vlan add 10 vlan 10 private-vlan isolated

  Correct Answer: C

• Question 530:

  Refer to the exhibit. An engineer is updating the R1 configuration to connect a new server to the management network. The PCs on the management network must be blocked from pinging the default gateway of the new server. Which command must be configured on R1 to complete the task?

  

  A. R1(config)#lp route 172.16.2.2 255.255.255.248 gi0/1

  B. R1(config)#jp route 172.16.2.2 255.255.255.255 gi0/0

  C. R1(config>#ip route 172.16.2.0 255.255.255.0 192.168.1.15

  D. R1(conflg)#ip route 172.16.2.0 255.255.255.0 192.168.1.5

  Correct Answer: B