Cisco CCNA 200-301 Questions & Answers

• Question 591:

  A network administrator is setting up a new IPv6 network using the 64-bit address 2001:0EB8:00C1:2200:0001:0000:0000:0331/64. To simplify the configuration, the administrator has decided to compress the address. Which IP address must the administrator configure?

  A. ipv6 address 2001:EB8:C1:22:1::331/64

  B. ipv6 address 21:EB8:C1:2200:1::331/64

  C. ipv6 address 2001:EB8:C1:2200:1:0000:331/64

  D. ipv6 address 2001:EB8:C1:2200:1::331/64

  Correct Answer: D

• Question 592:

  A network engineer must configure two new subnets using the address block 10.70.128.0/19 to meet these requirements:

  1.

  The first subnet must support 24 hosts.

  2.

  The second subnet must support 472 hosts.

  3.

  Both subnets must use the longest subnet mask possible from the address block.

  Which two configurations must be used to configure the new subnets and meet a requirement to use the first available address in each subnet for the router interfaces? (Choose two.)

  A. interface vlan 1148 ip address 10.70.148.1 255.255.254.0

  B. interface vlan 3002 ip address 10.70.147.17 255.255.255.224

  C. interface vlan 4722 ip address 10.70.133.17 255.255.255.192

  D. interface vlan 1234 ip address 10.70.159.1 255.255.254.0

  E. interface vlan 155 ip address 10.70.155.65 255.255.255.224

  Correct Answer: AE

• Question 593:

  Refer to the exhibit.

  

  The link between PC1 and the switch is up, but it is performing poorly. Which interface condition is causing the performance problem?

  A. There is an issue with the fiber on the switch interface.

  B. There is a duplex mismatch on the interface.

  C. There is an interface type mismatch.

  D. There is a speed mismatch on the interface.

  Correct Answer: B

  The PC's port runs in full duplex, while the Fa0/1 port on the switch is in auto-negotiate mode.

  This results in a duplex mismatch that causes the switchport to operate as half-duplex, which culminates in poor performance on the link.

  "A duplex mismatch occurs when two connected devices are configured in different duplex modes.

  This may happen, for example, if one is configured for autonegotiation while the other one has a fixed mode of operation that is full duplex (no autonegotiation). In such conditions, the autonegotiation device correctly detects the speed of

  operation, but is unable to correctly detect the duplex mode.

  As a result, it sets the correct speed but assumes half-duplex mode.

  When a device is operating in full duplex while the other one operates in half duplex, the connection works reliably only at a very low throughput."

  Reference: https://en.wikipedia.org/wiki/Autonegotiation#Duplex_mismatch

• Question 594:

  An engineer must update the configuration on two PCs in two different subnets to communicate locally with each other. One PC is configured with IP address 192.168.25.128/25 and the other with 192.168.25.100/25.

  Which network mask must the engineer configure on both PCs to enable the communication?

  A. 255.255.255.248

  B. 255.255.255.224

  C. 255.255.255.0

  D. 255.255.255.252

  Correct Answer: C

• Question 595:

  Which key function is provided by the data plane?

  A. Originating packets

  B. Exchanging routing table data

  C. Making routing decisions

  D. Forwarding traffic to the next hop

  Correct Answer: D

  The data plane, also known as the forwarding plane, is responsible for the actual forwarding of data packets through a network. It consists of the hardware and software components in a network device that perform packet forwarding, routing, and switching. The data plane makes decisions about where packets should be forwarded to next and determines the appropriate ports to send them out. Therefore, the key function that is provided by the data plane is forwarding traffic to the next hop.

• Question 596:

  Which two network actions occur within the data plane? (Choose two.)

  A. Run routing protocols.

  B. Make a configuration change from an incoming NETCONF RPC.

  C. Add or remove an 802.1Q trunking header.

  D. Match the destination MAC address to the MAC address table.

  E. Reply to an incoming ICMP echo request.

  Correct Answer: CD

  https://www.ciscopress.com/articles/article.asp?p=2995354andseqNum=2

  De-encapsulating and re-encapsulating a packet in a data-link frame (routers, Layer 3 switches)

  Adding or removing an 802.1Q trunking header (routers and switches)

  Matching an Ethernet frame's destination Media Access Control (MAC) address to the MAC address table (Layer 2 switches)

  Matching an IP packet's destination IP address to the IP routing table (routers, Layer 3 switches)

  Encrypting the data and adding a new IP header (for virtual private network [VPN] processing)

  Changing the source or destination IP address (for Network Address Translation [NAT] processing)

  Discarding a message due to a filter (access control lists [ACLs], port security)

  All the items in the list make up the data plane, because the data plane includes all actions done per message.

• Question 597:

  What is a practice that protects a network from VLAN hopping attacks?

  A. Implement port security on internet-facing VLANs

  B. Enable dynamic ARP inspection

  C. Assign all access ports to VLANs other than the native VLAN

  D. Configure an ACL to prevent traffic from changing VLANs

  Correct Answer: C

  https://learningnetwork.cisco.com/s/blogs/a0D3i000002SKPREA4/vlan1-and-vlan-hopping-attack

• Question 598:

  Which command must be entered so that the default gateway is automatically distributed when DHCP is configured on a router?

  A. dns-server

  B. default-router

  C. ip helper-address

  D. default-gateway

  Correct Answer: B

• Question 599:

  Refer to the exhibit. R1 has just received a packet from host A that is destined to host B. Which route in the routing table is used by R1 to reach host B?

  

  A. 10.10.13.0/25 [1/0] via 10.10.10.2

  B. 10.10.13.0/25 [108/0] via 10.10.10.10

  C. 10.10.13.0/25 [110/2] via 10.10.10.6

  D. 10.10.13.0/25 [110/2] via 10.10.10.2

  Correct Answer: B

  Route Source Default Distance Values Connected interface 0 Static route 1 Enhanced Interior Gateway Routing Protocol (EIGRP) summary route 5 External Border Gateway Protocol (BGP) 20 Internal EIGRP 90 IGRP 100 OSPF 110 Intermediate System-to-Intermediate System (IS-IS) 115 Routing Information Protocol (RIP) 120 Exterior Gateway Protocol (EGP) 140 On Demand Routing (ODR) 160 External EIGRP 170 Internal BGP 200 Unknown* 255

• Question 600:

  What are two reasons to implement IPv4 private addressing on a network? (Choose two.)

  A. To enable internal applications to treat the private IPv4 addresses as unique

  B. To facilitate renumbering when merging networks

  C. To expand the routing table on the router

  D. To provide protection from external denial-of-service attacks

  E. To conserve global unique IPv4 addresses

  Correct Answer: AE

  E. To conserve global unique IPv4 addresses: Private addressing allows organizations to use non-routable IP addresses within their internal networks, which conserves globally unique IP addresses. This is especially important as the pool of available IPv4 addresses is exhausted.

  A. To enable internal applications to treat the private IPv4 addresses as unique: Private addressing allows organizations to use the same IP address ranges internally without having to worry about conflicting with IP addresses used by other organizations on the public Internet. This simplifies network design and reduces the risk of IP address conflicts.