Cisco CCNA 200-301 Questions & Answers

• Question 671:

  Which technology can prevent client devices from arbitrarily connecting to the network without state remediation?

  A. 802.1x

  B. IP Source Guard

  C. MAC Authentication Bypass

  D. 802.11n

  Correct Answer: A

  802.1x is a security standard that prevents client devices from arbitrarily connecting to the network without state remediation. It provides a framework for authenticating devices that are attempting to access a LAN or WLAN.

  802.1x uses a supplicant (client device) and an authenticator (network access device) to establish a secure connection. The supplicant sends an authentication request to the authenticator, which then forwards the request to an authentication server. If the authentication server approves the request, the supplicant is allowed to access the network. If the request is denied, the supplicant is not allowed to access the network.

• Question 672:

  A port security violation has occurred on a switch port due to the maximum MAC address count being exceeded,which command must be configured to increment the security-violation count and forward an SNMP trap?

  A. switchport port-security violation access

  B. switchport port-security violation protect

  C. switchport port-security violation restrict

  D. switchport port-security violation shutdown

  Correct Answer: D

• Question 673:

  Refer to the exhibit,which command configures a floating static route to provide a backup to the primary link?

  

  A. ip route 209.165.201.0 255.255.255.224 209.165.202.130

  B. ip route 0.0.0.0 0.0.0.0 209.165.200.224

  C. ip route 209.165.200.224 255.255.255.224 209.165.202.129 254

  D. ip route 0.0.0.0 0.0.0.0 209.165.202.131

  Correct Answer: C

  You will only see one of 2 routes in the the table cause the floating route will be only in the table when the primary route fails and comes as alternate. The route with 254 AD should be the floating route, and the primary route has problems (not in table). I agree with yasuke, the question should have stated " which command configured the floating static route...."

• Question 674:

  A network administrator enters the following command on a router: logging trap 3. What are three message types that will be sent to the Syslog server? (Choose three.)

  A. informational

  B. emergency

  C. warning

  D. critical

  E. debug

  F. error

  Correct Answer: BDF

• Question 675:

  Which effete does the aaa new-model configuration command have?

  A. It enables AAA services on the device.

  B. It configures the device to connect to a RADIUS server for AAA.

  C. It associates a RADIUS server to the group.

  D. It configures a local user on the device.

  Correct Answer: A

  To enable AAA, you need to configure the aaa new-model command in global configuration.

  https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/10384-security.html

• Question 676:

  What software-defined architecture plane assists network devices with making packet-forwarding decisions by providing Layer 2 reachability and Layer 3 routing information?

  A. management plane

  B. control plane

  C. data plane

  D. policy plane

  Correct Answer: B

• Question 677:

  Which command must be entered to configure a DHCP relay?

  A. ip helper-address

  B. ip address dhcp

  C. ip dhcp pool

  D. ip dhcp relay

  Correct Answer: A

  The DHCP relay agent is an IP Helper address on a Cisco device

• Question 678:

  When implementing a router as a DHCP server, which two features must be configured? (Choose two)

  A. relay agent information

  B. address pool

  C. smart-relay

  D. database agent

  E. manual bindings

  Correct Answer: BE

• Question 679:

  How does the dynamically-learned MAC address feature function?

  A. The CAM table is empty until ingress traffic arrives at each port

  B. Switches dynamically learn MAC addresses of each connecting CAM table.

  C. The ports are restricted and learn up to a maximum of 10 dynamically-learned addresses

  D. It requires a minimum number of secure MAC addresses to be filled dynamically

  Correct Answer: A

• Question 680:

  Refer to the exhibit. Which feature is enabled by this configuration?

  

  A. static NAT translation

  B. a DHCP pool

  C. a dynamic NAT address pool

  D. PAT

  Correct Answer: C