Cisco CCNA 200-301 Questions & Answers

• Question 651:

  Which state does the switch port move to when PortFast is enabled?

  A. forwarding

  B. listening

  C. blocking

  D. learning

  Correct Answer: A

• Question 652:

  Refer to the exhibit.

  

  An access list is created to deny Telnet access from host PC-1 to RTR-1 and allow access from all other hosts A Telnet attempt from PC-2 gives this message:"% Connection refused by remote host" Without allowing Telnet access from PC1, which action must be taken to permit the traffic?

  A. Add the access-list 10 permit any command to the configuration

  B. Remove the access-class 10 in command from line vty 0.4.

  C. Add the ip access-group 10 out command to interface g0/0.

  D. Remove the password command from line vty 0 4.

  Correct Answer: A

• Question 653:

  Refer to the exhibit.

  

  PC1 is trying to ping PC3 for the first time and sends out an ARP to S1 Which action is taken by S1?

  A. It forwards it out G0/3 only

  B. It is flooded out every port except G0/0.

  C. It drops the frame.

  D. It forwards it out interface G0/2 only.

  Correct Answer: B

• Question 654:

  Refer to the exhibit.

  

  A network administrator has been tasked with securing VTY access to a router Which access-list entry accomplishes this task?

  A. access-list 101 permit tcp 10.1.1.0 0.0.0.255 172.16.1.0 0.0.0.255 eq telne

  B. access-list 101 permit tcp 10.1.1.0 0.0.0.255 172.16.1.0 0.0.0.255 eq scp

  C. access-list 101 permit tcp 10.1.1.0 0.0.0.255 172.16.1.0 0.0.0.255 eq https

  D. access-list 101 permit tcp 10.1.1.0 0.0.0.255 172.16.1.0 0.0.0.255 eq ssh

  Correct Answer: A

  Router(config)#access-list 101 permit tcp 10.1.1.0 0.0.0.255 172.16.1.0 0.0.0.255 eq ?

  <0-65535> Port number

  ftp File Transfer Protocol (21)

  pop3 Post Office Protocol v3 (110)

  smtp Simple Mail Transport Protocol (25)

  telnet Telnet (23)

  www World Wide Web (HTTP, 80)

  D. access-list 101 permit tcp 10.1.1.0 0.0.0.255 172.16.1.0 0.0.0.255 eq ssh - incorrect. access-list 101 permit tcp 10.1.1.0 0.0.0.255 172.16.1.0 0.0.0.255 eq 22 - correct

• Question 655:

  A network administrator needs to aggregate 4 ports into a single logical link which must negotiate layer 2 connectivity to ports on another switch What must be configured when using active mode on both sides of the connection?

  A. 802.1q trunks

  B. Cisco vPC

  C. LLDP

  D. LACP

  Correct Answer: D

  LACP-Active, Passive (Industry standard) PAgP -Desirable, Auto (Cisco Proprietary)

• Question 656:

  In which situation is private IPv4 addressing appropriate for a new subnet on the network of an organization?

  A. There is limited unique address space, and traffic on the new subnet will stay local within the organization.

  B. The network has multiple endpoint listeners, and it is desired to limit the number of broadcasts.

  C. Traffic on the subnet must traverse a site-to-site VPN to an outside organization.

  D. The ISP requires the new subnet to be advertised to the internet for web services.

  Correct Answer: A

• Question 657:

  What is a practice that protects a network from VLAN hopping attacks?

  A. Enable dynamic ARP inspection

  B. Configure an ACL to prevent traffic from changing VLANs

  C. Change native VLAN to an unused VLAN ID

  D. Implement port security on internet-facing VLANs

  Correct Answer: C

• Question 658:

  Which technology can prevent client devices from arbitrarily connecting to the network without state remediation?

  A. 802.1x

  B. IP Source Guard

  C. MAC Authentication Bypass

  D. 802.11n

  Correct Answer: A

• Question 659:

  What facilitates a Telnet connection between devices by entering the device name?

  A. SNMP

  B. DNS lookup

  C. syslog

  D. NTP

  Correct Answer: B

• Question 660:

  How does the dynamically-learned MAC address feature function?

  A. The CAM table is empty until ingress traffic arrives at each port

  B. Switches dynamically learn MAC addresses of each connecting CAM table.

  C. The ports are restricted and learn up to a maximum of 10 dynamically-learned addresses

  D. It requires a minimum number of secure MAC addresses to be filled dynamically

  Correct Answer: A