Cisco CCNA 200-301 Questions & Answers

• Question 561:

  Refer to the exhibit. Which two configurations must the engineer apply on this network so that R1 becomes the DR? (Choose two.)

  

  A. R1(config)#router ospf 1 R1(config-router)#router-id 192.168.100.1

  B. R1(config)#interface fastethernet 0/0 R1(config-if)#ip ospf priority 200

  C. R3(config)#interface fastethernet 0/0 R3(config-if)#ip ospf priority 0

  D. R1(config)#interface fastethernet 0/0 R1(config-if)#ip ospf priority 0

  E. R3(config)#interface fastethernet 0/0 R3(config-if)#ip ospf priority 200

  Correct Answer: BC

• Question 562:

  Which field within the access-request packet is encrypted by RADIUS?

  A. authorized services

  B. password

  C. authenticator

  D. username

  Correct Answer: B

  RADIUS by itself provides no encryption of all traffic. It protects only a small part of the traffic, notably the passwords.

• Question 563:

  A Cisco engineer is configuring a factory-default router with these three passwords:

  1.

  The user EXEC password for console access is p4ssw0rd1.

  2.

  The user EXEC password for Telnet access is s3cr3t2.

  3.

  The password for privileged EXEC mode is priv4t3p4ss.

  Which command sequence must the engineer configure?

  A. enable secret priv4t3p4ss ! line con 0 password p4ssw0rd1 ! line vty 0 15 password s3cr3t2

  B. enable secret priv4t3p4ss ! line con 0 password p4ssw0rd1 login ! line vty 0 15 password s3cr3t2 login

  C. enable secret priv4t3p4ss ! line con 0 password login p4ssw0rd1 ! line vty 0 15 password login s3cr3t2 login

  D. enable secret privilege 15 priv4t3p4ss ! line con 0 password p4ssw0rd1 login ! line vty 0 15 password s3cr3t2 login

  Correct Answer: B

  The correct command sequence is:

  1.

  enable secret priv4t3p4ss

  2.

  line con 0 password p4ssw0rd1 login

  3.

  line vty 0 15 password s3cr3t2 login

  This will configure the password for privileged EXEC mode as "priv4t3p4ss", the user EXEC password for console access as "p4ssw0rd1", and the user EXEC password for Telnet access as "s3cr3t2". The "login" keyword is used to enable password authentication for the console and Telnet access.

• Question 564:

  Refer to the exhibit. Which configuration enables DHCP addressing for hosts connected to interface FastEthernetO/1 on router R4?

  

  A. interface FastEthernet0/0 ip helper-address 10.0.1.1 ! access-list 100 permit udp host 10.0.1.1 eq bootps host 10.148.2.1

  B. interface FastEthernot0/1 ip helper-address 10.0.1.1 ! access-list 100 permit tcp host 10.0.1.1 eq 67 host 10.148.2.1

  C. interface FastEthernetO/0 ip helper-address 10.0.1.1 ! access-list 100 permit host 10.0.1.1 host 10.148.2.1 eq bootps

  D. interface FastEthernet0/1 ip helper-address 10.0.1.1 ! access-list 100 permit udp host 10.0.1.1 eq bootps host 10.148.2.1

  Correct Answer: D

  As port 67 and bootps is kind of similar in the sense that it doesn't really give you a huge differentiating factor notice the transport protocols. Bootps and DHCP both are listed as UDP 67.

• Question 565:

  What is a function of Opportunistic Wireless Encryption in an environment?

  A. provide authentication

  B. protect traffic on open networks

  C. offer compression

  D. increase security by using a WEP connection

  Correct Answer: B

  The function of Opportunistic Wireless Encryption (OWE) in an environment is to protect traffic on open networks. Open networks, such as public Wi-Fi hotspots, do not typically have encryption enabled by default, making them vulnerable to eavesdropping and data interception. OWE provides a mechanism to encrypt wireless communication on these open networks, adding a layer of security to protect the transmitted data. It helps ensure the confidentiality and integrity of the network traffic, even in the absence of a pre-shared key or a separate authentication mechanism.

• Question 566:

  What differentiates device management enabled by Cisco DNA Center from traditional campus device management?

  A. CLI-oriented device

  B. centralized

  C. device-by-device hands-on

  D. per-device

  Correct Answer: B

  When using Cisco DNA Center to manage network device, device management is centralized and is managed from the DNA center GUI. Using DNA Center allows for us to have a more centralized management of network infrastructure as configuration changes can be applied to an many devices at once when these changes are done through DNA Center

• Question 567:

  Refer to the exhibit. What is represented beginning with line 1 and ending with line 5?

  

  A. object

  B. value

  C. key

  D. array

  Correct Answer: D

  Netacad Mod 3 14.2.6

  These are some of the characteristics of JSON:

  It uses a hierarchical structure and contains nested values.

  It uses braces { } to hold objects and square brackets [ ] hold arrays.

  Its data is written as key/value pairs.

• Question 568:

  Refer to the exhibit. What must be configured to enable 802.11w on the WLAN?

  

  A. Set Fast Transition to Enabled.

  B. Enable WPA Policy.

  C. Set PMF to Required.

  D. Enable MAC Filtering.

  Correct Answer: C

  IEEE 802.11w is an amendment to the IEEE 802.11 standard that defines enhancements to the security of wireless local area networks (WLANs). It specifies the use of Protected Management Frames (PMFs), which provide an additional layer of security for management frames that are used to control the operation of a WLAN. This includes management frames such as Beacon frames, which are used to advertise the presence of a WLAN, and Association Request frames, which are used to initiate the connection process between a client device and an access point. 802.11w aims to prevent certain types of attacks, such as man-in-the-middle attacks, which can be used to intercept and modify management frames in order to disrupt the operation of a WLAN.

• Question 569:

  Refer to the exhibit. Clients on the WLAN are required to use 802.11r. What action must be taken to meet the requirement?

  

  A. Under Protected Management Frames, set the PMF option to Required.

  B. Enable CCKM under Authentication Key Management.

  C. Set the Fast Transition option and the WPA gtk-randomize State to disable.

  D. Set the Fast Transition option to Enable and enable FT 802.1X under Authentication Key Management.

  Correct Answer: D

  https://blogs.cisco.com/networking/what-is-802-11r-why-is-this-important

• Question 570:

  Which action implements physical access control as part of the security program of an organization?

  A. setting up IP cameras to monitor key infrastructure

  B. configuring a password for the console port

  C. backing up syslogs at a remote location

  D. configuring enable passwords on network devices

  Correct Answer: A

  Physical access control: Infrastructure locations, such as network closets and data centers, should remain securely locked. Badge access to sensitive locations is a scalable solution, offering an audit trail of identities and timestamps when access is granted. Administrators can control access on a granular basis and quickly remove access when an employee is dismissed. (Official-Cert-Guide-Volume-2)