[Oct 22, 2021] 200-301 Dumps Full Questions - Exam Study Guide
CCNA Free Certification Exam Material from Prep4sureExam with 216 Questions
Understanding functional and technical aspects of 200-301 CCNA Exam: Cisco Certified Network Associate Network Security Fundamentals
The following will be discussed here:
- Configure and verify access control lists
- Describe security password policies elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics)
- Describe security program elements (user awareness, training, and physical access control)
- Describe wireless security protocols (WPA, WPA2, and WPA- )
- Security Fundamentals
- Configure WLAN using WPA2 PSK using the GUI
- Describe remote access and site-to-site VPNs
- Configure device access control using local passwords
- Configure Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)
- Differentiate authentication, authorization, and accounting concepts
- Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)
NEW QUESTION 105
Refer to the exhibit.
The show ip ospf interface command has been executed on R1.
How is OSPF configured?
- A. There are six OSPF neighbors on this interface.
- B. The interface is not participating in OSPF.
- C. A point-to-point network type is configured.
- D. The default Hello and Dead timers are in use.
Answer: D
NEW QUESTION 106
Which benefit does controller-based networking provide versus traditional networking?
- A. combines control and data plane functionality on a single device to minimize latency
- B. provides an added layer of security to protect from DDoS attacks
- C. allows configuration and monitoring of the network from one centralized port
- D. moves from a two-tier to a three-tier network architecture to provide maximum redundancy
Answer: C
NEW QUESTION 107
When enabled, which feature prevents routing protocols from sending hello messages on an interface?
- A. directed neighbors
- B. passive-interface
- C. virtual links
- D. OSPF areas
Answer: B
NEW QUESTION 108
An engineer is configuring NAT to translate the source subnet of 10.10.0.0/24 to any of three addresses 192.168.30.1, 192.168.3.2, 192.168.3.3 Which configuration should be used?
- A. Option A
- B. Option B
- C. Option C
- D. Option D
Answer: C
NEW QUESTION 109
Which of the port is not part of STP protocol.
- A. Learning
- B. Listening
- C. Forwarding
- D. Discarding
Answer: D
NEW QUESTION 110
A network engineer must configure the router R1 GigabitEthernet1/1 interface to connect to the router R2 GigabitEthernet1/1 interface. For the configuration to be applied, the engineer must compress the address
2001:0db8:0000:0000:0500:000a:400F:583B. Which command must be issued on the interface?
- A. ipv6 address 2001:0db8::5:a:4F:583B
- B. ipv6 address 2001:db8::500:a:400F:583B
- C. ipv6 address 2001:db8:0::500:a:4F:583B
- D. ipv6 address 2001::db8:0000::500:a:400F:583B
Answer: B
Explanation:
Section: Network Fundamentals
NEW QUESTION 111
Refer to the exhibit. What is the effect of this configuration?
- A. Egress traffic is passed only if the destination is a DHCP server.
- B. All ingress and egress traffic is dropped because the interface is untrusted
- C. All ARP packets are dropped by the switch
- D. The switch discard all ingress ARP traffic with invalid MAC-to-IP address bindings.
Answer: D
Explanation:
Dynamic ARP inspection is an ingress security feature; it does not perform any egress checking.
NEW QUESTION 112
Which command is used to specify the delay time in seconds for LLDP to initialize on any interface?
- A. lldp holdtime
- B. lldp tlv-select
- C. lldp reinit
- D. lldp timer
Answer: C
NEW QUESTION 113
Drag and drop the network protocols from the left onto the correct transport services on the right.
Answer:
Explanation:
NEW QUESTION 114
Refer to the exhibit.
PC1 is trying to ping PC3 for the first time and sends out an ARP to S1 Which action is taken by S1?
- A. It forwards it out interface G0/2 only.
- B. It drops the frame.
- C. It is flooded out every port except G0/0.
- D. It forwards it out G0/3 only
Answer: C
NEW QUESTION 115
Which two pieces of information about a Cisco device can Cisco Discovery Protocol communicate? (Choose two.)
- A. the trunking protocol
- B. the spanning-tree priority
- C. the native VLAN
- D. the VTP domain
- E. the spanning tree protocol
Answer: C,D
Explanation:
Section: Network Access
NEW QUESTION 116
Refer to the exhibit.
An engineer must configure GigabitEthernet1/1 to accommodate voice and data traffic Which configuration accomplishes this task?
- A. Option C
- B. Option A
- C. Option B
- D. Option D
Answer: B
NEW QUESTION 117
Which two actions must you take to correctly configure PPPoE on a client? (Choose two)
- A. Create a dialer pool and bind it to the virtual template
- B. Create a BBA group and link it to the dialer interface
- C. Define a dialer interface
- D. Create a dialer pool and bind it to the physical interface.
- E. Define a virtual template interface
Answer: C,D
NEW QUESTION 118
Which value must you configure on a device before EIGRP for IPv6 can start running?
- A. public IP address
- B. process ID
- C. router ID
- D. loopback interface
Answer: C
NEW QUESTION 119
Refer to the exhibit.
A junior network administrator was given the task of configuring port security on SwitchA to allow only PC_A to access the switched network through port fa0/1. If any other device is detected, the port is to drop frames from this device. The administrator configured the interface and tested it with successful pings from PC_A to RouterA, and then observes the output from these two show commands.
Which two of these changes are necessary for SwitchA to meet the requirements? (Choose two.)
- A. Port security interface counters need to be cleared before using the show command.
- B. Port security needs to be configured to shut down the interface in the event of a violation.
- C. Port security needs to be globally enabled.
- D. Port security needs to be configured to allow only one learned MAC address.
- E. Port security needs to be enabled on the interface.
- F. The port security configuration needs to be saved to NVRAM before it can become active.
Answer: D,E
NEW QUESTION 120
Refer to the exhibit.
The default-information originate command is configured under the R1 OSPF configuration After testing workstations on VLAN 20 at Site B cannot reach a DNS server on the Internet Which action corrects the configuration issue?
- A. Configure the ip route 0.0.0.0 0.0.0.0 10.10.10.2 command on R2
- B. Add the default-information originate command onR2
- C. Configure the ip route 0.0.0.0 0.0.0.0 10.10.10.18 command on R1
- D. Add the always keyword to the default-information originate command on R1
Answer: D
NEW QUESTION 121
Which command is used to enable LLDP globally on a Cisco IOS ISR?
- A. lldp run
- B. lldp enable
- C. cdp run
- D. lldp transmit
- E. cdp enable
Answer: A
Explanation:
Section: Network Access
Explanation:
Link Layer Discovery Protocol (LLDP) is an industry standard protocol that allows devices to advertise, and discover connected devices, and there capabilities (same as CDP of Cisco). To enable it on Cisco devices, we have to use this command under global configuration mode:
Sw(config)# lldp run
NEW QUESTION 122
Where does the configuration reside when a helper address Is configured lo support DHCP?
- A. on every router along the path
- B. on the switch trunk interface
- C. on the router closest to the server
- D. on the router closest to the client
Answer: B
NEW QUESTION 123
What are two roles of Domain Name Services (DNS)? (Choose two.)
- A. improves security by protecting IP addresses under Fully Qualified Domain Names (FQDNs)
- B. allows a single host name to be shared across more than one IP address
- C. builds a flat structure of DNS names for more efficient IP operations
- D. encrypts network Traffic as it travels across a WAN by default
- E. enables applications to identify resources by name instead of IP address
Answer: B,E
Explanation:
Section: IP Services
NEW QUESTION 124
What is the maximum bandwidth of a T1 point-to-point connection?
- A. 34.368 Mbps
- B. 43.7 Mbps
- C. 2.048 Mbps
- D. 1.544 Mbps
Answer: D
Explanation:
Explanation
https://www.bsimplify.com/what-is-point-to-point-t1/#:~:text=A%20Point%20to%20Point%20T1,data%20speed Point to Point T1 A Point to Point T1 service is a private data connection securely connecting two or more locations with T1 data speeds (1.54Mbps).
NEW QUESTION 125
Refer to the exhibit.
Which switch becomes the root bridge?
- A. S2
- B. S3
- C. S1
- D. S4
Answer: A
NEW QUESTION 126
Refer to the exhibit.
Which switch becomes the root bridge?
- A. S2
- B. S3
- C. S4
- D. S1
Answer: D
NEW QUESTION 127
Drag and drop the SNMP components from the left onto the descriptions on the right.
Answer:
Explanation:
NEW QUESTION 128
Which type of ipv6 address is publicly routable in the same way as ipv4 public addresses?
- A. multicast
- B. unique local
- C. global unicast
- D. link-local
Answer: C
NEW QUESTION 129 
Refer to the exhibit. Which command configures a floating static route to provide a backup to the primary link?
- A. ip route 0.0.0.0 0.0.0.0 209.165.200.224
- B. ip route 209.165.200.224 255.255.255.224 209.165.202.129 254
- C. ip route 209.165.201.0 255.255.255.224 209.165.202.130
- D. ip route 0.0.0.0 0.0.0.0 209.165.202.131
Answer: B
Explanation:
Section: IP Connectivity
NEW QUESTION 130
......
IP Connectivity
This objective will test the configuration and verification of OSPFv2 and IPv6 and IPv4 static routing. It will also focus on the routing table, protocol of first-hop redundancy, and routing protocols.
Dumps Brief Outline Of The 200-301 Exam: https://www.prep4sureexam.com/200-301-dumps-torrent.html
Use Real 200-301 - 100% Cover Real Exam Questions: https://drive.google.com/open?id=1CJokQasiHGRHg-whhpkC4_31UcIEdh5j