Cisco CCNA 200-301 Questions & Answers

• Question 81:

  What are two protocols within the IPsec suite? (Choose two.)

  A. 3DES

  B. AES

  C. ESP

  D. TLS

  E. AH

  Correct Answer: CE

  IPsec (Internet Protocol Security) is a suite of protocols used for securing internet protocol (IP) communications. The two protocols within the IPsec suite are:

  Authentication Header (AH): AH provides data authentication and integrity protection for IP packets, but does not provide encryption. AH calculates a hash value over the IP packet and some additional data, and places the result in a new header that is added to the packet.

  Encapsulating Security Payload (ESP): ESP provides both encryption and data authentication for IP packets. ESP encrypts the original IP packet and places it inside a new packet, along with a new ESP header that provides data authentication and integrity protection. Both AH and ESP protocols can be used alone or in combination to provide secure communication between two network devices. AH and ESP are often used in conjunction with the Internet Key Exchange (IKE) protocol, which is used to

  negotiate and establish security associations (SAs) between devices. https://www.ibm.com/docs/en/i/7.1?topic=concepts-ip-security-protocols

• Question 82:

  Refer to the exhibit.

  

  Local access for R4 must be established and these requirements must be met:

  1.

  Only Telnet access is allowed.

  2.

  The enable password must be stored securely.

  3.

  The enable password must be applied in plain text.

  4.

  Full access to R4 must be permitted upon successful login.

  Which configuration script meets the requirements?

  A. ! conf t ! username test1 password testpass1 enable secret level 15 0 Test123 ! line vty 0 15

  login local

  transport input telnet

  B. ! config t ! username test1 password testpass1 enable password level 15 0 Test123 ! line vty 0 15

  login local

  transport input all

  C. ! config t ! username test1 password testpass1 enable password level 1 7 Test123 ! line vty 0 15

  accounting exec default

  transport input all

  D. ! config t ! username test1 password testpass1 enable secret level 1 0 Test123 ! line vty 0 15

  login authentication

  password Test123

  transport input telnet

  Correct Answer: A

• Question 83:

  What is a characteristic of RSA?

  A. It uses preshared keys for encryption.

  B. It is an asymmetric encryption algorithm.

  C. It is a symmetric decryption algorithm.

  D. It requires both sides to have identical keys for encryption.

  Correct Answer: B

  RSA (Rivest-Shamir-Adleman) is an asymmetric encryption algorithm, which is a type of public-key cryptography. In asymmetric encryption, a public key is used for encryption, and a private key is used for decryption. The two keys are mathematically related, but it is computationally infeasible to derive the private key from the public key.

• Question 84:

  What is used as a solution for protecting an individual network endpoint from attack?

  A. antivirus software

  B. wireless controller

  C. router

  D. Cisco DNA Center

  Correct Answer: A

• Question 85:

  Which action must be taken when password protection is implemented?

  A. Use less than eight characters in length when passwords are complex.

  B. Include special characters and make passwords as long as allowed.

  C. Share passwords with senior IT management to ensure proper oversight.

  D. Store passwords as contacts on a mobile device with single-factor authentication.

  Correct Answer: B

• Question 86:

  Refer to the exhibit.

  

  With which metric was the route to host 172.16.0.202 learned?

  A. 0

  B. 110

  C. 38443

  D. 3184439

  Correct Answer: C

  Both the line “O 172.16.0.128/25” and “S 172.16.0.0/24” cover the host 172.16.0.202 but with the “longest (prefix) match” rule the router will choose the first route.

• Question 87:

  A user configured OSPF in a single area between two routers. A serial interface connecting R1 and R2 is running encapsulation PPP. By default, which OSPF network type is seen on this interface when the user types show ip ospf interface on R1 and R2?

  A. nonbroadcast

  B. point-to-point

  C. point-to-multipoint

  D. broadcast

  Correct Answer: B

  The default OSPF network type for HDLC and PPP on Serial link is point-to-point (while the default OSPF network type for Ethernet link is Broadcast).

• Question 88:

  Which statement correctly compares traditional networks and controller-based networks?

  A. Only controller-based networks decouple the control plane and the data plane.

  B. Traditional and controller-based networks abstract policies from device configurations.

  C. Only traditional networks natively support centralized management.

  D. Only traditional networks offer a centralized control plane.

  Correct Answer: A

  Most traditional devices use a distributed architecture, in which each control plane is resided in a networking device. Therefore they need to communicate with each other via messages to work correctly. In contrast to distributed architecture, centralized (or controller-based) architectures centralizes the control of networking devices into one device, called SDN controller.

• Question 89:

  What does WPA3 provide in wireless networking?

  A. backward compatibility with WPA and WPA2

  B. safeguards against brute force attacks with SAE

  C. increased security and requirement of a complex configuration

  D. optional Protected Management Frame negotiation

  Correct Answer: B

  https://www.swascan.com/wi-fi-security/

• Question 90:

  Which global command encrypts all passwords in the running configuration?

  A. service password-encryption

  B. enable password-encryption

  C. enable secret

  D. password-encrypt

  Correct Answer: A

  https://community.cisco.com/t5/other-network-architecture-subjects/service-password-encryption-command/td-p/269324