Cisco CCNA 200-301 Questions & Answers

• Question 61:

  DRAG DROP

  Drag and drop the cloud-computing components from the left onto the correct descriptions on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 62:

  Which two transport layer protocols carry syslog messages? (Choose two.)

  A. IP

  B. RTP

  C. TCP

  D. UDP

  E. ARP

  Correct Answer: CD

• Question 63:

  What is the purpose of classifying network traffic in QoS?

  A. configures traffic-matching rules on network devices

  B. services traffic according to its class

  C. identifies the type of traffic that will receive a particular treatment

  D. writes the class identifier of a packet to a dedicated field in the packet header

  Correct Answer: C

• Question 64:

  Refer to the exhibit.

  

  The DHCP server is configured with a DHCP pool for each of the subnets represented. Which command must be configured on switch SW1 to allow DHCP clients on VLAN 10 to receive dynamic IP addresses from the DHCP server?

  A. SW1(config-if)#ip helper-address 192.168.10.1

  B. SW1(config-if)#ip helper-address 192.168.20.1

  C. SW1(config-if)#ip helper-address 192.168.20.2

  D. SW1(config-if)#ip helper-address 192.168.10.2

  Correct Answer: C

• Question 65:

  Refer to the exhibit.

  

  An engineer executed the script and added commands that were not necessary for SSH and now must remove the commands. Which two commands must be executed to correct the configuration? (Choose two.)

  A. no ip name-serveer 198.51.100.210

  B. no login local

  C. no service password-encryption

  D. no ip domain mame ccna.cisco.com

  E. no hostname CPE

  Correct Answer: AC

  Login local is required to implement SSH in this case because we are not using AAA authentication. But password service-encryption is not needed because all it does is encrypt any plaintext passwords displayed in the running configuration. It has nothing to do with SSH. For example, you can configure a plaintext password for Telnet access, do service password-encryption to scramble it in the running config, but then when you Telnet into the device, sniff the packet and see that the password is still in plaintext.

• Question 66:

  Which two actions are taken as the result of traffic policing? (Choose two.)

  A. bursting

  B. dropping

  C. remarking

  D. fragmentation

  E. buffering

  Correct Answer: BC

  Traffic policing propagates bursts. When the traffic rate reaches the configured maximum rate, excess traffic is dropped (or remarked). The result is an output rate that appears as a saw-tooth with crests and troughs. In contrast to policing, traffic shaping retains excess packets in a queue and then schedules the excess for later transmission over increments of time. The result of traffic shaping is a smoothed packet output rate.

• Question 67:

  Which two server types support domain name to IP address resolution? (Choose two.)

  A. authoritative

  B. web

  C. file transfer

  D. resolver

  E. ESX host

  Correct Answer: AD

  What is DNS resolver?

  DNS Resolvers are responsible for providing the correct IP address of a domain name to the requesting host. For example, if you make a request from your web browser and there is no information on your computer about this domain name

  (it is not cached), your computer will send the request to DNS resolvers. The resolver will then try to find the name servers, that are responsible for this domain name and contain the necessary records. These name servers are called

  authoritative.

  What is authoritative name server?

  Authoritative DNS nameservers provide answers to DNS resolvers with the correct IP addresses and records. These name servers contain the DNS zone with all information, like the IP address of the server, the responsible mail servers, etc

  for a domain name.

  Both servers work hand in hand - resolvers ask the authoritative name servers. They cannot be used for different purposes - e.g. authoritative name server cannot be used as DNS resolver or vice versa.

• Question 68:

  A DHCP pool has been created with the name CONTROL. The pool uses the next to last usable IP address as the default gateway for the DHCP clients. The server is located at 172.16.32.15. What is the next step in the process for clients on the 192.168.52.0/24 subnet to reach the DHCP server?

  A. ip helper-address 172.16.32.15

  B. ip default-gateway 192.168.52.253

  C. ip forward-protocol udp 137

  D. ip detault-network 192.168.52.253

  Correct Answer: A

  The question states that the pool has been created and that it uses the next to last usable IP address as the default gateway for the DHCP clients. So that already implies that B is not the answer. But just to confirm once and for all,

  192.168.52.253 is NOT the last usable address, that would be 192.168.52.254. The answer is A because we need to configure a helper address since the DHCP server is on a different subnet.

• Question 69:

  Refer to the exhibit.

  

  A public IPv6 address must be configured for internet access. Which command must be configured on the R2 WAN interface to the service provider?

  A. ipv6 address fe80::/10

  B. ipv6 address 2001:db8:433:37:7710:ffff:ffff:ffff/64 anycast

  C. ipv6 address 2001:db8:123:45::4/64

  D. ipv6 address fe80::260:3EFF:FE11:6770 link-local

  Correct Answer: C

• Question 70:

  Refer to the exhibit.

  

  IPv6 is being implemented within the enterprise. The command ipv6 unicast-routing is configured. Interface Gig0/0 on R1 must be configured to provide a dynamic assignment using the assigned IPv6 block. Which command accomplishes this task?

  A. ipv6 address 2001:DB8:FFFF:FCF3::64 link-local

  B. ipv6 address 2001:DB8:FFFF:FCF3::1/64

  C. ipv6 address 2001:DB8:FFFF:FCF3::64 eui-64

  D. ipv6 address autoconfig 2001:DB8:FFFF:FCF2::/64

  Correct Answer: C