Latest Cisco 200-301 Dumps PDF Questions Answers 2025

Cisco Certified Network Associate Questions and Answers

Question 1

How does machine learning improve the detection of unauthorized network access?

Options:

It monitors for outdated software.

It dictates security policy updates.

It identifies patterns indicating intrusions.

It assigns security clearance levels.

Buy Now

Question 2

Refer to the exhibit. An engineer is creating a secure preshared key based SSID using WPA2 for a wireless network running on 2.4 GHz and 5 GHz. Which two tasks must the engineer perform to complete the process? (Choose two.)

Options:

Select the 802.1 x option for Auth Key Management.

Select the WPA Policy option.

Select the PSK option for Auth Key Management.

Select the AES option for Auth Key Management.

Select the AES (CCMP128) option for WPA2/WPA3 Encryption.

Question 3

A HCP pool has been created with the name CONTROL. The pool uses the next to last usable IP address as the default gateway for the DHCP clients. The server is located at 172.16 32.15. What is the step in the process for clients on the 192.168.52.0/24 subnet to reach the DHCP server?

Options:

ip forward-protocol udp 137

ip default-network 192.168.52.253

ip helper-address 172.16.32.15

ip default-gateway 192.168.52.253

Question 4

Connectivity between four routers has been established. IP connectivity must be configured in the order presented to complete the implementation. No dynamic routing protocols are included.

1. Configure static routing using host routes to establish connectivity from router R3 to the router R1 Loopback address using the source IP of 209.165.200.230.

2. Configure an IPv4 default route on router R2 destined for router R4.

3. Configure an IPv6 default router on router R2 destined for router R4.

Options:

Question 5

What is the main difference between traditional networks and controller-based networking?

Options:

Controller-based networks increase TCO for the company, and traditional networks require less investment.

Controller-based networks provide a framework for Innovation, and traditional networks create efficiency.

Controller-based networks are open for application requests, and traditional networks operate manually.

Controller-based networks are a closed ecosystem, and traditional networks take advantage of programmability.

Question 6

What are two facts that differentiate optical-fiber cabling from copper cabling? (Choose two.)

Options:

It is less expensive when purchasing patch cables.

It has a greater sensitivity to changes in temperature and moisture.

It provides greater throughput options.

It carries signals for longer distances.

It carries electrical current further distances for PoE devices.

Question 7

Which WLC management connection type is vulnerable to man-in-the-middIe attacks?

Options:

Telnet

console

HTTPS

SSH

Question 8

What is an Ansible inventory?

Options:

file that defines the target devices upon which commands and tasks are executed

unit of Python code to be executed within Ansible

collection of actions to perform on target devices, expressed in YAML format

device with Ansible installed that manages target devices

Question 9

Which two statements distinguish authentication from accounting? (Choose two.)

Options:

Only authentication records the duration of a user's connection.

Only authentication supports user-activity audits.

Only authentication provides supporting information for billing users.

Only authentication challenges users for their credentials and returns a response.

Only authentication validates "who you are."

Question 10

A network engineer is configuring a new router at a branch office. The router is connected to an upstream WAN network that allows the branch to communicate with the head office. The central time server with IP address 172.24.54.8 is located behind a firewall at the head office. Which command must the engineer configure so that the software clock of the new router synchronizes with the time server?

Options:

ntp master 172.24.54.8

ntp client 172.24.54.8

ntp peer 172.24.54.8

ntp server 172.24.54.8

Question 11

Physical connectivity is implemented between the two Layer 2 switches,

and the network connectivity between them must be configured.

I . Configure an LACP EtherChanneI and number it as 44; configure it

between switches SWI and SW2 using interfaces EthernetO/O and

Ethernet0/1 on both sides. The LACP mode must match on both ends.

2. Configure the EtherChanneI as a trunk link.

3. Configure the trunk link with 802. Iq tags.

4. Configure VLAN 'MONITORING' as the untagged VLAN of the

EtherChannel.

==================

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using

the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Options:

Answer:

Solution is given below explanation.

Explanation:

To configure an LACP EtherChannel and number it as 44, configure it between switches SW1 and SW2 using interfaces Ethernet0/0 and Ethernet0/1 on both sides, configure the EtherChannel as a trunk link, configure the trunk link with 802.1q tags, and configure VLAN ‘MONITORING’ as the untagged VLAN of the EtherChannel, you need to follow these steps:

On both SW1 and SW2, enter the global configuration mode by using the configure terminal command.

On both SW1 and SW2, select the two interfaces that will form the EtherChannel by using the interface range ethernet 0/0 - 1 command. This will enter the interface range configuration mode.

On both SW1 and SW2, set the protocol to LACP by using the channel-protocol lacp command.

On both SW1 and SW2, assign the interfaces to an EtherChannel group number 44 by using the channel-group 44 mode active command. This will create a logical interface named Port-channel44 and set the LACP mode to active on both ends. The LACP mode must match on both ends for the EtherChannel to form.

On both SW1 and SW2, exit the interface range configuration mode by using the exit command.

On both SW1 and SW2, enter the Port-channel interface configuration mode by using the interface port-channel 44 command.

On both SW1 and SW2, configure the Port-channel interface as a trunk link by using the switchport mode trunk command.

On both SW1 and SW2, configure the Port-channel interface to use 802.1q tags for VLAN identification by using the switchport trunk encapsulation dot1q command.

On both SW1 and SW2, configure VLAN ‘MONITORING’ as the untagged VLAN of the Port-channel interface by using the switchport trunk native vlan MONITORING command.

On both SW1 and SW2, exit the Port-channel interface configuration mode by using the exit command.

On both SW1 and SW2, save the configuration to NVRAM by using the copy running-config startup-config command.

Question 12

Refer to the exhibit. This ACL is configured to allow client access only to HTTP, HTTPS, and DNS services via UDP. The new administrator wants to add TCP access to the DNS service. Which configuration updates the ACL efficiently?

Options:

ip access-list extended Services

35 permit tcp 10.0.0.0 0.255.255.255 host 198.51.100.11 eq domain

no ip access-list extended Services

ip access-list extended Services

30 permit tcp 10.0.0.0 0.255.255.255 host 198.51.100.11 eq domain

ip access-list extended Services

permit tcp 10.0.0.0 0.255.255.255 host 198.51.100.11 eq domain

no ip access-list extended Services

ip access-list extended Services

permit udp 10.0.0.0 0.255.255.255 any eq 53

permit tcp 10.0.0.0 0.255.255.255 host 198.51.100.11 eq domain

deny ip any any log

Question 13

Configure IPv4 and IPv6 connectivity between two routers. For IPv4, use a /28 network from the 192.168.1.0/24 private range. For IPv6, use the first /64 subnet from the 2001:0db8:aaaa::/48 subnet.

1. Using Ethernet0/1 on routers R1 and R2, configure the next usable/28 from the 192.168.1.0/24 range. The network 192.168.1.0/28 is unavailable.

2. For the IPv4 /28 subnet, router R1 must be configured with the first usable host address.

3. For the IPv4 /28 subnet, router R2 must be configured with the last usable host address.

4. For the IPv6 /64 subnet, configure the routers with the IP addressing provided from the topology.

5. A ping must work between the routers on the IPv4 and IPv6 address ranges.

Options:

Question 14

What does the term "spirt MAC” refer to in a wireless architecture?

Options:

divides data link layer functions between the AP and WLC

combines the management and control functions from the data-forwarding functions

uses different MAC addresses for 2.4 GHz and 5 GHz bands on the same AP

leverages two APs to handle control and data traffic

Question 15

Refer to the exhibit. How will the device handle a packet destined to IP address 100.100.100.100?

Options:

If will choose the route with the longest match.

O 100.100.100.100'32 (110/21) via 192.168.1.1. 00:05:57. EmernetO/1.

It will always prefer the static route over dynamic routes and choose the route

S 100.100.0.0/16(1/0] via 192.168.4.1.

It will choose the route with the highest metric.

D 100.100.100.0/24 (90/435200) via 192.168.2.1. 00:00:13. EthernetO/2.

It will choose the route with the lowest metric,

R 100.0.0.0/8 [120/2] via 192.168.3.1. 00:00:13. EthernetO/3.

Question 16

What is the difference between controller-based networks and traditional networks as they relate to control-plane and/or data-plane functions?

Options:

Controller-based networks centralize all important data-plane functions, and traditional networks distribute data-plane functions.

Controller-based networks centralize all important control-plane functions, and traditional networks distribute control-plane functions.

Traditional networks centralize all important control-plane functions, and controller-based networks distribute control-plane functions.

Traditional networks centralize all important data-plane functions, and controller-based networks distribute data-plane functions.

Question 17

Refer to the exhibit. A network administrator is configuring a router for user access via SSH. The service-password encryption command has been issued. The configuration must meet these requirements:

• Create the username as CCUser.

• Create the password as NA!2Scc.

• Encrypt the user password.

What must be configured to meet the requirements?

Options:

username CCUser privies 10 password NA!2Scc

username CCUser password NA!2Scc enable password level 5 NA!2$cc

username CCUser secret NA!2Scc

username CCUser privilege 15 password NA!2Scc enable secret 0 NA!2$cc

Question 18

IP connectivity and OSPF are preconfigured on all devices where necessary. Do not make any changes to the IP addressing or OSPF. The company policy uses connected interfaces and next hops when configuring static routes except for load balancing or redundancy without floating static. Connectivity must be established between subnet 172.20.20.128/25 on the Internet and the LAN at 192.168.0.0/24 connected to SW1:

1. Configure reachability to the switch SW1 LAN subnet in router R2.

2. Configure default reachability to the Internet subnet in router R1.

3. Configure a single static route in router R2 to reach to the Internet subnet considering both redundant links between routers R1 and R2. A default route is NOT allowed in router R2.

4. Configure a static route in router R1 toward the switch SW1 LAN subnet where the primary link must be through Ethernet0/1. and the backup link must be through Ethernet0/2 using a floating route. Use the minimal administrative distance value when required.

Options:

Question 19

What is the RFC 4627 default encoding for JSON text?

Options:

UCS-2

UTF-8

Hex

GB18030

Question 20

Which plane is centralized in software-defined networking?

Options:

application

services

control

data

Question 21

An engineer must configure a core router with a floating static default route to the backup router at 10.200.0.2. Which command meets the requirements?

Options:

ip route 0.0.0.0 0.0.0.0 10.200.0.2 1

Ip route 0.0.0.0 0.0.0.0 10.200.0.2 floating

ip route 0.0.0.0 0.0.0.0 10.200.0.2

Ip route 0.0.0.0 0.0.0.0 10.200.0.2 10

Question 22

A network administrator wants the syslog server to filter incoming messages into different files based on their Importance. Which filtering criteria must be used?

Options:

level

message body

process ID

facility

Question 23

Which CRUD operation corresponds to me HTTP GET method?

Options:

delete

create

update

read

Question 24

Physical connectivity is implemented between the two Layer 2 switches, and the network connectivity between them must be configured

1. Configure an LACP EtherChannel and number it as 1; configure it between switches SW1 and SVV2 using interfaces Ethernet0/0 and Ethernet0/1 on both sides. The LACP mode must match on both ends

2 Configure the EtherChannel as a trunk link.

3. Configure the trunk link with 802.1 q tags.

4. Configure the native VLAN of the EtherChannel as VLAN 15.

Options:

Question 25

Connectivity between three routers has been established, and IP services must be configured jn the order presented to complete the implementation Tasks assigned include configuration of NAT, NTP, DHCP, and SSH services.

1. All traffic sent from R3 to the R1 Loopback address must be configured for NAT on R2. All source addresses must be translated from R3 to the IP address of Ethernet0/0 on R2, while using only a standard access list named NAT To verify, a ping must be successful to the R1 Loopback address sourced from R3. Do not use NVI NAT configuration.

2. Configure R1 as an NTP server and R2 as a client, not as a peer, using the IP address of the R1 Ethernet0/2 interface. Set the clock on the NTP server for midnight on January 1, 2019.

3. Configure R1 as a DHCP server for the network 10.1.3.0/24 in a pool named TEST. Using a single command, exclude addresses 1-10 from the range. Interface Ethernet0/2 on R3 must be issued the IP address of 10.1.3.11 via DHCP.

4. Configure SSH connectivity from R1 to R3, while excluding access via other remote connection protocols. Access for user root and password Cisco must be set on router R3 using RSA and 1024 bits. Verify connectivity using an SSH session from router R1 using a destination address of 10.1.3.11. Do NOT modify console access or line numbers to accomplish this task.

Options:

Question 26

Why is UDP more suitable than TCP tor applications that require low latency, such as VoIP?

Options:

UDP reliably guarantees delivery of all packets and TCP drops packets under heavy load.

TCP sends an acknowledgment for every packet that is received and UDP operates without acknowledgments.

UDP uses sequencing data for packets to arrive in order, and TCP offers the capability to receive packets in random order.

TCP uses congestion control for efficient packet delivery and UDP uses flow control mechanisms for the delivery of packets.

Question 27

All physical cabling is in place. A company plans to deploy 32 new sites.

The sites will utilize both IPv4 and IPv6 networks.

1 . Subnet 172.25.0.0/16 to meet the subnet requirements and maximize

the number of hosts

Using the second subnet

• Assign the first usable IP address to e0/0 on Sw1O1

• Assign the last usable IP address to e0/0 on Sw102

2. Subnet to meet the subnet requirements and maximize

the number of hosts

c Using the second subnet

• Assign an IPv6 GUA using a unique 64-Bit interface identifier

on e0/0 on Sw101

• Assign an IPv6 GUA using a unique 64-Bit interface identifier

on eO/O on swi02

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using

the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Options:

Answer:

See the Explanation for the solution.

Explanation:

To subnet 172.25.0.0/16 to meet the subnet requirements and maximize the number of hosts, you need to determine how many bits you need to borrow from the host portion of the address to create enough subnets for 32 sites. Since 32 is 2^5, you need to borrow 5 bits, which means your new subnet mask will be /21 or 255.255.248.0. To find the second subnet, you need to add the value of the fifth bit (32) to the third octet of the network address (0), which gives you 172.25.32.0/21 as the second subnet. The first usable IP address in this subnet is 172.25.32.1, and the last usable IP address is 172.25.39.254.

To assign the first usable IP address to e0/0 on Sw101, you need to enter the following commands on the device console:

Sw101#configure terminal Sw101(config)#interface e0/0 Sw101(config-if)#ip address 172.25.32.1 255.255.248.0 Sw101(config-if)#no shutdown Sw101(config-if)#end

To assign the last usable IP address to e0/0 on Sw102, you need to enter the following commands on the device console:

Sw102#configure terminal Sw102(config)#interface e0/0 Sw102(config-if)#ip address 172.25.39.254 255.255.248.0 Sw102(config-if)#no shutdown Sw102(config-if)#end

To subnet an IPv6 GUA to meet the subnet requirements and maximize the number of hosts, you need to determine how many bits you need to borrow from the interface identifier portion of the address to create enough subnets for 32 sites. Since 32 is 2^5, you need to borrow 5 bits, which means your new prefix length will be /69 or ffff:ffff:ffff:fff8::/69 (assuming that your IPv6 GUA has a /64 prefix by default). To find the second subnet, you need to add the value of the fifth bit (32) to the fourth hextet of the network address (0000), which gives you xxxx:xxxx:xxxx:0020::/69 as the second subnet (where xxxx:xxxx:xxxx is your IPv6 GUA prefix). The first and last IPv6 addresses in this subnet are xxxx:xxxx:xxxx:0020::1 and xxxx:xxxx:xxxx:0027:ffff:ffff:ffff:fffe respectively.

To assign an IPv6 GUA using a unique 64-bit interface identifier on e0/0 on Sw101, you need to enter the following commands on the device console (assuming that your IPv6 GUA prefix is 2001:db8::/64):

Sw101#configure terminal Sw101(config)#interface e0/0 Sw101(config-if)#ipv6 address 2001:db8::20::1/69 Sw101(config-if)#no shutdown Sw101(config-if)#end

To assign an IPv6 GUA using a unique 64-bit interface identifier on e0/0 on Sw102, you need to enter the following commands on the device console (assuming that your IPv6 GUA prefix is 2001:db8::/64):

Sw102#configure terminal Sw102(config)#interface e0/0 Sw102(config-if)#ipv6 address 2001:db8::27::fffe/69 Sw102(config-if)#no shutdown Sw102(config-if)#end

Question 28

Drag and drop the common functions from the left onto the cofresponding network topology architecture layer on the right. Not all common functions are used.

Options:

Question 29

Drag and drop the TCP and UDP characteristics from the left onto the supporting protocols on the right. Not all options are used.

Options:

Question 30

Refer to the exhibit. IPv6 is being Implemented within the enterprise. The command Ipv6 unlcast-routing is configure. Interlace GlgO/0 on R1 must be configured to provide a dynamic assignment using the assigned IPv6 block Which command accomplishes this task?

Options:

ipv6 address 2001:DB8:FFFF:FCF3::1/64

ipv6 address autoconfig 2001:DB8:FFFF:FCF2::/64

ipv6 address 2001:DB8:FFFF:FCF3::/64 eui-64

ipv6 address 2001:DB8:FFFF:FCF3::/64 link-local

Question 31

Refer to the exhibit Routers R1 R2 and R3 use a protocol to identify their neighbors' IP addresses hardware platforms, and software versions. A network engineer must configure R2 to avoid sharing any neighbor information with R3, and maintain its relationship with R1. What action meets this requirement?

Options:

Configure the no cdp enable command on gO/2.

Configure the no cdp run command globally.

Configure the no lldp run command globally.

Configure the no lldp receive command on gQV1.

Question 32

IP connectivity between the three routers is configured. OSPF adjacencies must be established.

1. Configure R1 and R2 Router IDs using the interface IP addresses from the link that is shared between them.

2. Configure the R2 links with a max value facing R1 and R3. R2 must become the DR. R1 and R3 links facing R2 must remain with the default OSPF configuration for DR election. Verify the configuration after clearing the OSPF process.

3. Using a host wildcard mask, configure all three routers to advertise their respective Loopback1 networks.

4. Configure the link between R1 and R3 to disable their ability to add other OSPF routers.

Options:

Question 33

Refer to the exhibit. An engineer just installed network 10.120.10.0/24. Which configuration must be applied to the R14 router to add the new network to its OSPF routing table?

Options:

router ospf 100

network 10.120.10.0 255.255.255.0 area 0

router ospf 120

network 10.120.10.0 255.255.255.0 area 0

ip route 10.120.10.0 255.255.255.0 fa0/1

router ospf 100 area 0

network 10.120.10.0 0.0.0.255

Question 34

Which solution is appropriate when mitigating password attacks where the attacker was able to sniff the clear-text password of the system administrator?

Options:

next-generation firewall to keep stateful packet inspection

multifactor authentication using two separate authentication sources

ACL to restrict incoming Telnet sessions "admin" accounts

IPS with a block list of known attack vectors

Question 35

All physical cabling between the two switches is installed. Configure the network connectivity between the switches using the designated VLANs and interfaces.

1. Configure VLAN 100 named Compute and VLAN 200 named Telephony where required for each task.

2. Configure Ethernet0/1 on SW2 to use the existing VLAN named Available.

3. Configure the connection between the switches using access ports.

4. Configure Ethernet0/1 on SW1 using data and voice VLANs.

5. Configure Ethemet0/1 on SW2 so that the Cisco proprietary neighbor discovery protocol is turned off for the designated interface only.

Options:

Question 36

All physical cabling is in place. Router R4 and PCI are fully configured and

inaccessible. R4's WAN interfaces use .4 in the last octet for each subnet.

Configurations should ensure that connectivity is established end-to-end.

1 . Configure static routing to ensure RI prefers the path through R2 to

reach only PCI on R4's LAN

2. Configure static routing that ensures traffic sourced from RI will take

an alternate path through R3 to PCI in the event of an outage along

the primary path

3. Configure default routes on RI and R3 to the Internet using the least number of hops

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using

the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Options:

Answer:

See the solution below in Explanation.

Explanation:

To configure static routing on R1 to ensure that it prefers the path through R2 to reach only PC1 on R4’s LAN, you need to create a static route for the host 10.0.0.100/8 with a next-hop address of 20.0.0.2, which is the IP address of R2’s interface connected to R1. You also need to assign a lower administrative distance (AD) to this route than the default AD of 1 for static routes, so that it has a higher preference over other possible routes. For example, you can use an AD of 10 for this route. To create this static route, you need to enter the following commands on R1’s console:

R1#configure terminal R1(config)#ip route 10.0.0.100 255.0.0.0 20.0.0.2 10 R1(config)#end

To configure static routing on R1 that ensures that traffic sourced from R1 will take an alternate path through R3 to PC1 in the event of an outage along the primary path, you need to create another static route for the host 10.0.0.100/8 with a next-hop address of 40.0.0.2, which is the IP address of R3’s interface connected to R1. You also need to assign a higher AD to this route than the AD of the primary route, so that it has a lower preference and acts as a backup route. For example, you can use an AD of 20 for this route. This type of static route is also known as a floating static route. To create this static route, you need to enter the following commands on R1’s console:

R1#configure terminal R1(config)#ip route 10.0.0.100 255.0.0.0 40.0.0.2 20 R1(config)#end

To configure default routes on R1 and R3 to the Internet using the least number of hops, you need to create a static route for the network 0.0.0.0/0 with a next-hop address of the ISP’s interface connected to each router respectively. A default route is a special type of static route that matches any destination address and is used when no other specific route is available. The ISP’s interface connected to R1 has an IP address of 10.0.0.4, and the ISP’s interface connected to R3 has an IP address of 50.0.0.4. To create these default routes, you need to enter the following commands on each router’s console:

On R1: R1#configure terminal R1(config)#ip route 0.0.0.0 0.0.0.0 10.0.0.4 R1(config)#end

On R3: R3#configure terminal R3(config)#ip route 0.0.0.0 0.0.0.0 50.0.0.4 R3(config)#end

Question 37

Refer to the exhibit. Which interface does a packet take to reach the destination address of 10.10.10.147?

Options:

FastEthemet 0/0

Senal0/0

FastEthemet 0/1

Question 38

Refer to the exhibit. A network engineer updates the existing configuration on interface fastethernet1/1 switch SW1. It must establish an EtherChannel by using the same group designation with another vendor switch. Which configuration must be performed to complete the process?

Options:

interface port-channel 2

channel-group 2 mode desirable

interface fasteinernet 1/1

channel-group 2 mode active

interface fasteinernet 1/1

channel-group 2 mode on

interface port-channel 2

channel-group 2 mode auto

Question 39

Which advantage does machine learning offer for network security?

Options:

It improves real-time threat detection.

It manages firewall rule sets.

It enforces password complexity requirements.

It controls VPN access permissions.

Question 40

Refer to the exhibit. A packet sourced from 10.10.10.32 is destined for the Internet. What is the administrative distance for the destination route?

Options:

Question 41

Which authentication method requires the user to provide a physical attribute to authenticate successfully?

Options:

password

muftifactor

biometric

certificate

Question 42

Which alternative to password authentication Is Implemented to allow enterprise devices to log in to the corporate network?

Options:

magic links

one-time passwords

digital certificates

90-day renewal policies

Question 43

Refer to the exhibit. An engineer is using the Cisco WLC GUI to configure a WLAN for WPA2 encryption with AES and preshared key Cisc0123456. After the engineer selects the WPA + WPA2 option from the Layer 2 Security drop-down list, which two tasks must they perform to complete the process? (Choose two.)

Options:

Select the WPA2 Policy, AES, and TKIP check boxes.

Select ASCII from the PSK Format drop-down list, enter the key, and leave the Auth Key Mgmt setting blank.

Select PSK from the Auth Key Mgmt drop-down list, set the PSK Format to ASCII, and enter the key.

Select the WPA2 Policy and AES check boxes.

Question 44

Refer to the exhibit. The user has connectivity to devices on network 192.168.3 0/24 but cannot reach users on the network 10.10.1.0724.

What is the first step to verify connectivity?

Options:

Is the internet reachable?

Is the default gateway reachable?

Is the DNS server reachable?

Question 45

Three switches must be configured for Layer 2 connectivity. The company requires only the designated VLANs to be configured on their respective switches and permitted accross any links between switches for security purposes. Do not modify or delete VTP configurations.

The network needs two user-defined VLANs configured:

VLAN 110: MARKETING

VLAN 210: FINANCE

1. Configure the VLANs on the designated switches and assign them as access ports to the interfaces connected to the PCs.

2. Configure the e0/2 interfaces on Sw1 and Sw2 as 802.1q trunks with only the required VLANs permitted.

3. Configure the e0/3 interfaces on Sw2 and Sw3 as 802.1q trunks with only the required VLANs permitted.

Options:

Question 46

Which AP feature provides a captive portal for users to authenticate register and accept terms before accessing the internet?

Options:

One-Click

Hotspot

Enhanced Bluetooth

Whole Home

Question 47

Refer to the exhibit. Which type of JSON data is shown?

Options:

sequence

string

object

Boolean

Question 48

Which goal is achieved by the implementation of private IPv4 addressing on a network?

Options:

provides an added level of protection against Internet exposure

provides a reduction in size of the forwarding table on network routers

allows communication across the Internet to other private networks

allows servers and workstations to communicate across public network boundaries

Question 49

What does an SDN controller use as a communication protocol to relay forwarding changes to a southbound API?

Options:

OpenFlow

Java

REST

XML

Question 50

Refer to the exhibit.

Router R1 is running three different routing protocols. Which route characteristic is used by the router to forward the packet that it receives for destination IP 172.16.32.1?

Options:

longest prefix

metric

cost

administrative distance

Question 51

An engineer must establish a trunk link between two switches. The neighboring switch is set to trunk or desirable mode. What action should be taken?

Options:

configure switchport nonegotiate

configure switchport mode dynamic desirable

configure switchport mode dynamic auto

configure switchport trunk dynamic desirable

Question 52

What is a role of access points in an enterprise network?

Options:

connect wireless devices to a wired network

support secure user logins to devices or the network

integrate with SNMP in preventing DDoS attacks

serve as a first line of defense in an enterprise network

Question 53

What is the primary function of a Layer 3 device?

Options:

to analyze traffic and drop unauthorized traffic from the Internet

to transmit wireless traffic between hosts

to pass traffic between different networks

forward traffic within the same broadcast domain

Question 54

Which type of API allows SDN controllers to dynamically make changes to the network?

Options:

northbound API

REST API

SOAP API

southbound API

Question 55

Which configuration management mechanism uses TCP port 22 by default when communicating with managed nodes?

Options:

Ansible

Python

Puppet

Chef

Question 56

When a WPA2-PSK WLAN is configured in the wireless LAN Controller, what is the minimum number of characters that in ASCll format?

Options:

Question 57

A wireless administrator has configured a WLAN; however, the clients need access to a less congested 5-GHz network for their voice quality. What action must be taken to meet the requirement?

Options:

enable AAA override

enable RX-SOP

enable DTIM

enable Band Select

Question 58

Refer to the exhibit.

A packet is being sent across router R1 to host 172.16.0.14. What is the destination route for the packet?

Options:

209.165.200.254 via Serial0/0/1

209.165.200.254 via Serial0/0/0

209.165.200.246 via Serial0/1/0

209.165.200.250 via Serial0/0/0

Question 59

A network administrator enabled port security on a switch interface connected to a printer. What is the next configuration action in order to allow the port to learn the MAC address of the printer and insert it into the table automatically?

Options:

enable dynamic MAC address learning

implement static MAC addressing.

enable sticky MAC addressing

implement auto MAC address learning

Question 60

The SW1 interface g0/1 is in the down/down state. Which two configurations are valid reasons for the interface conditions?(choose two)

Options:

There is a duplex mismatch

There is a speed mismatch

There is a protocol mismatch

The interface is shut down

The interface is error-disabled

Question 61

Which mode must be set for APs to communicate to a Wireless LAN Controller using the Control and Provisioning of Wireless Access Points (CAPWAP) protocol?

Options:

bridge

route

autonomous

lightweight

Question 62

Which protocol does an IPv4 host use to obtain a dynamically assigned IP address?

Options:

ARP

DHCP

CDP

DNS

Question 63

Which security program element involves installing badge readers on data-center doors to allow workers to enter and exit based on their job roles?

Options:

role-based access control

biometrics

multifactor authentication

physical access control

Question 64

Refer to the exhibit.

Which command provides this output?

Options:

show ip route

show ip interface

show interface

show cdp neighbor

Question 65

What are two similarities between UTP Cat 5e and Cat 6a cabling? (Choose two.)

Options:

Both operate at a frequency of 500 MHz.

Both support runs of up to 55 meters.

Both support runs of up to 100 meters.

Both support speeds of at least 1 Gigabit.

Both support speeds up to 10 Gigabit.

Question 66

What does a router do when configured with the default DNS lookup settings, and a URL is entered on the CLI?

Options:

initiates a ping request to the URL

prompts the user to specify the desired IP address

continuously attempts to resolve the URL until the command is cancelled

sends a broadcast message in an attempt to resolve the URL

Question 67

Refer to the exhibit.

Which switch in this configuration will be elected as the root bridge?

Options:

SW1

SW2

SW3

SW4

Question 68

An email user has been lured into clicking a link in an email sent by their company's security organization. The webpage that opens reports that it was safe but the link could have contained malicious code. Which type of security program is in place?

Options:

Physical access control

Social engineering attack

brute force attack

user awareness

Question 69

What criteria is used first during the root port selection process?

Options:

local port ID

lowest path cost to the root bridge

lowest neighbor's bridge ID

lowest neighbor's port ID

Question 70

Drag and drop the functions from the left onto the correct network components on the right

Options:

Question 71

Which type of security program is violated when a group of employees enters a building using the ID badge of only one person?

Options:

intrusion detection

user awareness

physical access control

network authorization

Question 72

Which type of address is the public IP address of a NAT device?

Options:

outside global

outsdwde local

inside global

insride local

outside public

inside public

Question 73

A network analyst is tasked with configured the date and time on a router using EXEC mode. The date must be set to 12:00am. Which command should be used?

Options:

Clock timezone

Clock summer-time-recurring

Clock summer-time date

Clock set

Question 74

A frame that enters a switch fails the Frame Check Sequence. Which two interface counters are incremented? (Choose two)

Options:

runts

giants

frame

CRC

input errors

Question 75

Refer to the exhibit.

What is the metric of the route to the 192.168.10.33/28 subnet?

Options:

110

128

192

193

Question 76

Which state does the switch port move to when PortFast is enabled?

Options:

learning

forwarding

blocking

listening

Question 77

Which global command encrypt all passwords in the running configuration?

Options:

password-encrypt

enable password-encryption

enable secret

service password-encryption

Question 78

What is an advantage of Cisco DNA Center versus traditional campus device management?

Options:

It supports numerous extensibility options including cross-domain adapters and third-party SDKs.

It supports high availability for management functions when operating in cluster mode.

It enables easy autodiscovery of network elements m a brownfield deployment.

It is designed primarily to provide network assurance.

Question 79

Which statement identifies the functionality of virtual machines?

Options:

Virtualized servers run most efficiently when they are physically connected to a switch that is separate from the hypervisor

The hypervisor can virtualize physical components including CPU. memory, and storage

Each hypervisor can support a single virtual machine and a single software switch

The hypervisor communicates on Layer 3 without the need for additional resources

Question 80

What is a role of wireless controllers in an enterprise network?

Options:

centralize the management of access points in an enterprise network

support standalone or controller-based architectures

serve as the first line of defense in an enterprise network

provide secure user logins to devices on the network.

Question 81

Refer to the exhibit.

Which type of route does R1 use to reach host 10.10.13.10/32?

Options:

floating static route

host route

default route

network route

Question 82

What are two roles of the Dynamic Host Configuration Protocol (DHCP)? (Choose two)

Options:

The DHCP server offers the ability to exclude specific IP addresses from a pool of IP addresses

The DHCP client can request up to four DNS server addresses

The DHCP server assigns IP addresses without requiring the client to renew them

The DHCP server leases client IP addresses dynamically.

The DHCP client maintains a pool of IP addresses it can assign.

Question 83

What is a benefit of VRRP?

Options:

It provides traffic load balancing to destinations that are more than two hops from the source.

It provides the default gateway redundancy on a LAN using two or more routers.

It allows neighbors to share routing table information between each other.

It prevents loops in a Layer 2 LAN by forwarding all traffic to a root bridge, which then makes the final forwarding decision.

Question 84

When DHCP is configured on a router, which command must be entered so the default gateway is automatically distributed?

Options:

default-router

default-gateway

ip helper-address

dns-server

Question 85

What are two functions of an SDN controller? (Choose two)

Options:

Layer 2 forwarding

coordinating VTNs

tracking hosts

managing the topology

protecting against DDoS attacks

Question 86

Two switches are connected and using Cisco Dynamic Trunking Protocol SW1 is set to Dynamic Desirable

What is the result of this configuration?

Options:

The link is in a down state.

The link is in an error disables state

The link is becomes an access port.

The link becomes a trunk port.

Question 87

An organization has decided to start using cloud-provided services. Which cloud service allows the organization to install its own operating system on a virtual machine?

Options:

platform-as-a-service

software-as-a-service

network-as-a-service

infrastructure-as-a-service

Question 88

Refer to the exhibit.

What is the next hop address for traffic that is destined to host 10.0.1.5?

Options:

10.0.1.3

10.0.1.50

10.0.1.4

Loopback D

Question 89

which purpose does a northbound API serve in a controller-based networking architecture?

Options:

communicates between the controller and the physical network hardware

reports device errors to a controller

generates statistics for network hardware and traffic

facilitates communication between the controller and the applications

Question 90

When configuring IPv6 on an interface, which two IPv6 multicast groups are joined? (Choose two)

Options:

2000::/3

2002::5

FC00::/7

FF02::1

FF02::2

Question 91

When a site-to-site VPN is configured, which IPsec mode provides encapsulation and encryption of the entire original P packet?

Options:

IPsec tunnel mode with AH

IPsec transport mode with AH

IPsec tunnel mode with ESP

IPsec transport mode with ESP

Question 92

What is the purpose of a southbound API in a control based networking architecture?

Options:

Facilities communication between the controller and the applications

Facilities communication between the controller and the networking hardware

allows application developers to interact with the network

integrates a controller with other automation and orchestration tools.

Question 93

In software-defined architecture, which place handles switching for traffic through a Cisco router?

Options:

Control

Management

Data

application

Question 94

Refer to the exhibit Routers R1 and R2 have been configured with their respective LAN interfaces The two circuits are operational and reachable across WAN Which command set establishes failover redundancy if the primary circuit goes down?

Options:

Option A

Option B

Option C

Option D

Question 95

Refer to the exhibit.

If OSPF Is running on this network, how does Router2 handle traffic from Site B to 10.10.13.128/25 at Site A?

Options:

It load-balances traffic out of Fa0/1 and Fa0/2.

It is unreachable and discards the traffic.

It sends packets out of interface FaO/2.

It sends packets out of interface Fa0/1.

Question 96

How does HSRP provide first hop redundancy?

Options:

It load-balances traffic by assigning the same metric value to more than one route to the same destination m the IP routing table.

It load-balances Layer 2 traffic along the path by flooding traffic out all interfaces configured with the same VLAN.

It forwards multiple packets to the same destination over different routed links n the data path

It uses a shared virtual MAC and a virtual IP address to a group of routers that serve as the default gateway for hosts on a LAN

Question 97

Drag and drop the characteristics of network architectures from the left onto the type of architecture on the right.

Options:

Question 98

A port security violation has occurred on a switch port due to the maximum MAC address count being exceeded. Which command must be configured to increment the security-violation count and forward an SNMP trap?

Options:

switchport port-security violation access

switchport port-security violation protect

switchport port-security violation restrict

switchport port-security violation shutdown

Question 99

What are network endpoints?

Options:

act as routers to connect a user to the service prowler network

a threat to the network if they are compromised

support inter-VLAN connectivity

enforce policies for campus-wide traffic going to the internet

Question 100

After installing a new Cisco ISE server, which task must the engineer perform on the Cisco WLC to connect wireless clients on a specific VLAN based on their credentials?

Options:

Enable the allow AAA Override

Enable the Even: Driven RRM.

Disable the LAG Mode or Next Reboot.

Enable the Authorized MIC APs against auth-list or AAA.

Question 101

A network engineer is configuring an OSPFv2 neighbor adjacency Drag and drop the parameters from the left onto their required categories on the right. Not all parameters are used

Options:

Question 102

Drag and drop the statement about networking from the left into the Corresponding networking types on the right. Not all statements are used.

Options:

Question 103

Which two functions are performed by the core layer in a three-tier architecture? (Choose two)

Options:

Provide uninterrupted forwarding service.

Police traffic that is sent to the edge of the network.

Provide direct connectivity for end user devices.

Ensure timely data transfer between layers.

Inspect packets for malicious activity.

Question 104

A network engineer must back up 20 network router configurations globally within a customer environment. Which protocol allows the engineer to perform this function using the Cisco IOS MIB?

Options:

CDP

SNMP

SMTP

ARP

Question 105

Refer to the exhibit Router R1 Fa0/0 is unable to ping router R3 Fa0'1. Which action must be taken in router R1 to help resolve the configuration issue?

Options:

set the default network as 20.20.20.0/24

set the default gateway as 20.20.20.2

configure a static route with Fa0/1 as the egress interface to reach the 20.20.20.0/24 network

configure a static route with 10.10.10.2 as the next hop to reach the 20.20.20.0/24 network

Question 106

Refer to the exhibit.

which path is used by the router for internet traffic ?

Options:

209.165.200.0/27

10.10.10.0/28

0.0.0.0/0

10.10.13.0/24

Question 107

Which command on a port enters the forwarding state immediately when a PC is connected to it?

Options:

switch(config)#spanning-tree portfast default

switch(config)#spanning-tree portfast bpduguard default

switch(config-if)#spanning-tree portfast trunk

switch(config-if)#no spanning-tree portfast

Question 108

Refer to the exhibit.

An engineer is configuring the router to provide static NAT for the webserver Drag and drop the configuration commands from the left onto the letters that correspond to its position in the configuration on the right.

Options:

Question 109

Which access layer threat-mitigation technique provides security based on identity?

Options:

Dynamic ARP Inspection

using a non-default native VLAN

802.1x

DHCP snooping

Question 110

A manager asks a network engineer to advise which cloud service models are used so employees do not have to waste their time installing, managing, and updating software which is only used occasionally Which cloud service model does the engineer recommend?

Options:

infrastructure-as-a-service

platform-as-a-service

business process as service to support different types of service

software-as-a-service

Question 111

Which QoS Profile is selected in the GUI when configuring a voice over WLAN deployment?

Options:

Bronze

Platinum

Silver

Gold

Question 112

A network administrator must enable DHCP services between two sites. What must be configured for the router to pass DHCPDISCOVER messages on to the server?

Options:

a DHCP Relay Agent

DHCP Binding

a DHCP Pool

DHCP Snooping

Question 113

Refer to the exhibit.

A network engineer must configured communication between PC A and the File Server. To prevent interruption for any other communications, which command must be configured?

Options:

Switch trunk allowed vlan 12

Switchport trunk allowed vlan none

Switchport trunk allowed vlan add 13

Switchport trunk allowed vlan remove 10-11

Question 114

Which two components are needed to create an Ansible script that configures a VLAN on a switch? (Choose two.)

Options:

cookbook

task

playbook

model

recipe

Question 115

What is a recommended approach to avoid co-channel congestion while installing access points that use the 2.4 GHz frequency?

Options:

different nonoverlapping channels

different overlapping channels

one overlapping channel

one nonoverlapping channel

Question 116

Why was the RFC 1918 address space defined?

Options:

conserve public IPv4 addressing

preserve public IPv6 address space

reduce instances of overlapping IP addresses

support the NAT protocol

Question 117

On workstations running Microsoft Windows, which protocol provides the default gateway for the device?

Options:

DHCP

STP

SNMP

DNS

Question 118

Which WLC port connects to a switch to pass normal access-point traffic?

Options:

redundancy

console

distribution system

service

Question 119

Refer to the exhibit.

How must router A be configured so that it only sends Cisco Discovery Protocol Information to router C?

Options:

Option A

Option B

Option C

Option D

Question 120

Refer to the exhibit.

If OSPF is running on this network, how does Router 2 handle traffic from Site B to 10.10.13/25 at Site A?

Options:

It sends packets out of interface Fa0/2 only.

It sends packets out of interface Fa0/1 only.

It cannot send packets to 10.10.13 128/25

It load-balances traffic out of Fa0/1 and Fa0/2

Question 121

What is the role of a firewall in an enterprise network?

Options:

Forwards packets based on stateless packet inspection

Processes unauthorized packets and allows passage to less secure segments of the network

determines which packets are allowed to cross from unsecured to secured networks

explicitly denies all packets from entering an administrative domain

Question 122

Drag drop the descriptions from the left onto the correct configuration-management technologies on the right.

Options:

Question 123

Refer to the exhibit.

Packets received by the router from BGP enter via a serial interface at 209 165 201 1 Each route is present within the routing table Which interface is used to forward traffic with a destination IP of 10.1.1.19?

Options:

F0/4

F0/0

F0/1

F0/3

Question 124

Drag and drop the facts about wireless architectures from the left onto the types of access point on the right. Not all options are used.

Options:

Question 125

Which QoS traffic handling technique retains excess packets in a queue and reschedules these packets for later transmission when the configured maximum bandwidth has been surpassed?

Options:

weighted random early detection

traffic policing

traffic shaping

traffic prioritization

Question 126

Which action implements physical access control as part of the security program of an organization?

Options:

configuring a password for the console port

backing up syslogs at a remote location

configuring enable passwords on network devices

setting up IP cameras to monitor key infrastructure

Question 127

Drag and drop the Rapid PVST+ forwarding slate actions from the loft to the right. Not all actions are used.

Options:

Question 128

Drag and drop the characteristics of networking from the left onto the networking types on the right.

Options:

Question 129

Refer to the exhibit.

Packets received by the router from BGP enter via a serial interface at 209.165.201.10. Each route is present within the routing table. Which interface is used to forward traffic with a destination IP of 10.10.10.24?

Options:

F0/10

F0/11

F0/12

F0/13

Question 130

Refer to the exhibit.

Which two configurations must the engineer apply on this network so that R1 becomes the DR? (Choose two.)

Options:

Option A

Option B

Option C

Option D

Option E

Question 131

An engineer is configuring remote access to a router from IP subnet 10.139.58.0/28. The domain name, crypto keys, and SSH have been configured. Which configuration enables the traffic on the destination router?

Options:

Option A

Option B

Option C

Option D

Question 132

Refer to the exhibit.

Which next-hop IP address does Routed use for packets destined to host 10 10.13.158?

Options:

10.10.10.5

10.10.11.2

10.10.12.2

10.10.10.9

Question 133

Refer to the exhibit.

Which plan must be Implemented to ensure optimal QoS marking practices on this network?

Options:

As traffic traverses MLS1 remark the traffic, but trust all markings at the access layer.

Trust the IP phone markings on SW1 and mark traffic entering SW2 at SW2.

Remark traffic as it traverses R1 and trust all markings at the access layer.

As traffic enters from the access layer on SW1 and SW2. trust all traffic markings.

Question 134

Refer to the exhibit.

Which two commands when used together create port channel 10? (Choose two.)

Options:

int range g0/0-1

channel-group 10 mode active

int range g0/0-1 chanm.l-group 10 mode desirable

int range g0/0-1

channel-group 10 mode passive

int range g0/0-1 channel-group 10 mode auto

int range g0/0-1 channel-group 10 mode on

Question 135

Which field within the access-request packet is encrypted by RADIUS?

Options:

authorized services

authenticator

username

password

Question 136

Refer to the exhibit.

Router R1 currently is configured to use R3 as the primary route to the Internet, and the route uses the default administrative distance settings. A network engineer must configure R1 so that it uses R2 as a backup, but only if R3 goes down. Which command must the engineer configure on R1 so that it correctly uses R2 as a backup route, without changing the administrative distance configuration on the link to R3?

Options:

ip route 0.0.0.0 0.0.0.0 g0/1 1

ip route 0.0.0.0 0.0.0.0 209.165.201.5 10

ip route 0.0.0.0 0.0.0.0 209.165.200.226 1

ip route 0,0.0.0 0.0.0.0 g0/1 6

Question 137

Refer to the exhibit.

Which minimum configuration items are needed to enable Secure Shell version 2 access to R15?

Options:

Option A

Option B

Option C

Option D

Question 138

Refer to the exhibit.

All traffic enters the CPE router from interface Serial0/3 with an IP address of 192 168 50 1 Web traffic from the WAN is destined for a LAN network where servers are load-balanced An IP packet with a destination address of the HTTP virtual IP of 192 1681 250 must be forwarded Which routing table entry does the router use?

Options:

192.168.1.0/24 via 192.168.12.2

192.168.1.128/25 via 192.168.13.3

192.168.1.192/26 via 192.168.14.4

192.168.1.224/27 via 192.168.15.5

Question 139

What is the purpose of the ip address dhcp command?

Options:

to configure an Interface as a DHCP server

to configure an interface as a DHCP helper

to configure an interface as a DHCP relay

to configure an interface as a DHCP client

Question 140

Which type of IPv6 address is similar to a unicast address but is assigned to multiple devices on the same network at the same time?

Options:

global unicast address

anycast address

multicast address

link-local address

Question 141

A network engineer must configure two new subnets using the address block 10 70 128 0/19 to meet these requirements:

• The first subnet must support 24 hosts

• The second subnet must support 472 hosts

• Both subnets must use the longest subnet mask possible from the address block

Which two configurations must be used to configure the new subnets and meet a requirement to use the first available address in each subnet for the router interfaces? (Choose two )

Options:

interface vlan 1234

ip address 10.70.159.1 255.255.254.0

interface vlan 1148

ip address 10.70.148.1 255.255.254.0

interface vlan 4722

ip address 10.70.133.17 255.255.255.192

interface vlan 3002

ip address 10.70.147.17 255.255.255.224

interface vlan 155

ip address 10.70.155.65 255.255.255.224

Question 142

Refer to the exhibit.

The DHCP server and clients are connected to the same switch. What is the next step to complete the DHCP configuration to allow clients on VLAN 1 to receive addresses from the DHCP server?

Options:

Configure the ip dhcp snooping trust command on the interlace that is connected to the DHCP client.

Configure the ip dhcp relay information option command on the interface that is connected to the DHCP client.

Configure the ip dhcp snooping trust command on the interface that is connected to the DHCP server.

Configure the Ip dhcp relay information option command on the interface that is connected to the DHCP server.

Question 143

Refer to the exhibit.

A network engineer must update the configuration on Switch2 so that it sends LLDP packets every minute and the information sent via LLDP is refreshed every 3 minutes Which configuration must the engineer apply?

Options:

Option A

Option B

Option C

Option D

Question 144

A network administrator is setting up a new IPv6 network using the 64-bit address 2001 0EB8 00C1 2200:0001 0000 0000 0331/64 To simplify the configuration the administrator has decided to compress the address Which IP address must the administrator configure?

Options:

ipv6 address 21:EB8:C1:2200:1::331/64

ipv6 address 2001:EB8:C1:22:1::331/64

ipv6 address 2001 :EB8:C 1:2200.1 ::331-64

ipv6 address 2001:EB8:C1:2200:1:0000:331/64

Question 145

What are two benefits of FHRPs? (Choose two.)

Options:

They enable automatic failover of the default gateway.

They allow multiple devices to serve as a single virtual gateway for clients in the network.

They are able to bundle multiple ports to increase bandwidth.

They prevent loops in the Layer 2 network.

They allow encrypted traffic.

Question 146

Refer to the exhibit.

An IP subnet must be configured on each router that provides enough addresses for the number of assigned hosts and anticipates no more than 10% growth for now hosts. Which configuration script must be used?

Options:

Option A

Option B

Option C

Option D

Question 147

Which two network actions occur within the data plane? (Choose two.)

Options:

Add or remove an 802.1Q trunking header.

Make a configuration change from an incoming NETCONF RPC.

Run routing protocols.

Match the destination MAC address to the MAC address table.

Reply to an incoming ICMP echo request.

Question 148

Which protocol is used for secure remote CLI access?

Options:

HTTPS

HTTP

Telnet

SSH

Question 149

Refer to the exhibit.

An engineer is asked to insert the new VLAN into the existing trunk without modifying anything previously configured Which command accomplishes this task?

Options:

switchport trunk allowed vlan 100-104

switchport trunk allowed vlan add 104

switchport trunk allowed vlan all

switchport trunk allowed vlan 104

Question 150

Drag and drop the statements about networking from the left onto the corresponding networking types on the right.

Options:

Question 151

Refer to the exhibit.

All VLANs are present in the VLAN database. Which command sequence must be applied to complete the configuration?

Options:

Interface FastEthernet0/1 switchport trunk native vlan 10 switchport trunk allowed vlan 10,15

Interface FastEthernet0/1 switchport mode trunk switchport trunk allowed vlan 10,15

interface FastEthernet0/1 switchport mode access switchport voice vlan 10

Interface FastEthernet0/1 switchport trunk allowed vlan add 10 vlan 10 private-vlan isolated

Question 152

A Cisco engineer is configuring a factory-default router with these three passwords:

• The user EXEC password for console access is p4ssw0rd1

• The user EXEC password for Telnet access is s3cr3t2

• The password for privileged EXEC mode is pnv4t3p4ss Which command sequence must the engineer configured

Options:

Option A

Option B

Option C

Option D

Question 153

Refer to the exhibit.

An engineer has started to configure replacement switch SW1. To verify part of the configuration, the engineer issued the commands as shown and noticed that the entry for PC2 is missing. Which change must be applied to SW1 so that PC1 and PC2 communicate normally?

Options:

Option A

Option B

Option C

Option D

Question 154

Refer to the exhibit.

Which route must be configured on R1 so that OSPF routing is used when OSPF is up. but the server is still reachable when OSPF goes down?

Options:

ip route 10.1.1.10 255.255.255.255 172.16.2.2 100

ip route 10.1.1.0 255.255.255.0 gi0/1 125

ip route 10.1.1.0 255.255.255.0 172.16.2.2 100

ip route 10.1.1.10 255.255.255.255 gi0/0 125

Question 155

Refer to the exhibit.

Switch A is newly configured. All VLANs are present in the VLAN database. The IP phone and PC A on Gi0/1 must be configured for the appropriate VLANs to establish connectivity between the PCs. Which command set fulfills the requirement?

Options:

Option A

Option B

Option C

Option D

Question 156

Which type of network attack overwhelms the target server by sending multiple packets to a port until the half-open TCP resources of the target are exhausted?

Options:

SYIM flood

reflection

teardrop

amplification

Question 157

What is a function of a Next-Generation IPS?

Options:

makes forwarding decisions based on learned MAC addresses

serves as a controller within a controller-based network

integrates with a RADIUS server to enforce Layer 2 device authentication rules

correlates user activity with network events

Question 158

Which WLC management connection type is vulnerable to man-in-the-middle attacks?

Options:

SSH

HTTPS

Telnet

console

Question 159

Which action is taken by the data plane within a network device?

Options:

forwards traffic to the next hop

constructs a routing table based on a routing protocol

provides CLI access to the network device

looks up an egress interface in the forwarding information base

Question 160

Refer to the exhibit.

Host A sent a data frame destined for host D

What does the switch do when it receives the frame from host A?

Options:

It drops the frame from the switch CAM table.

It floods the frame out of all ports except port Fa0/1.

It shuts down the port Fa0/1 and places it in err-disable mode.

It experiences a broadcast storm.

Question 161

Refer to the exhibit.

Which two commands must be configured on router R1 to enable the router to accept secure remote-access connections? (Choose two)

Options:

transport input telnet

crypto key generate rsa

ip ssh pubkey-chain

username cisco password 0 Cisco

Question 162

An engineer must configure R1 for a new user account. The account must meet these requirements:

* It must be configured in the local database.

* The username is engineer.

* It must use the strongest password configurable. Which command must the engineer configure on the router?

Options:

R1 (config)# username engineer2 algorithm-type scrypt secret test2021

R1(config)# username engineer2 secret 5 .password S1$b1Ju$kZbBS1Pyh4QzwXyZ

R1(config)# username engineer2 privilege 1 password 7 test2021

R1(config)# username englneer2 secret 4 S1Sb1Ju$kZbBS1Pyh4QzwXyZ

Question 163

Refer to the exhibit.

Traffic sourced from the loopback0 Interface is trying to connect via ssh to the host at 10.0.1.15. What Is the next hop to the destination address?

Options:

192.168.0.7

192.168.0.4

192.168.0.40

192.168.3.5

Question 164

What is an expected outcome when network management automation is deployed?

Options:

A distributed management plane must be used.

Software upgrades are performed from a central controller

Complexity increases when new device configurations are added

Custom applications are needed to configure network devices

Question 165

OSPF must be configured between routers R1 and R2. Which OSPF configuration must be applied to router R1 to avoid a DR/BDR election?

Options:

router ospf 1

network 192.168.1.1 0.0.0.0 area 0

interface e1/1

ip address 192.168.1.1 255.255.255.252

ip ospf network broadcast

router ospf 1

network 192.168.1.1 0.0.0.0 area 0

interface e1/1

ip address 192.168.1.1 255.255.255.252

ip ospf network point-to-point

router ospf 1

network 192.168.1.1 0.0.0.0 area 0

interface e1/1

ip address 192.168.1.1 255.255.255.252

ip ospf cost 0

router ospf 1

network 192.168.1.1 0.0.0.0 area 0

hello interval 15

interface e1/1

Ip address 192.168.1.1 255.255.255.252

Question 166

Which Layer 2 switch function encapsulates packets for different VLANs so that the packets traverse the same port and maintain traffic separation between the VLANs?

Options:

VLAN numbering

VLAN DSCP

VLAN tagging

VLAN marking

Question 167

An engineer is tasked to configure a switch with port security to ensure devices that forward unicasts multicasts and broadcasts are unable to flood the port The port must be configured to permit only two random MAC addresses at a time Drag and drop the required configuration commands from the left onto the sequence on the right Not all commands are used.

Options:

Question 168

Refer to the exhibit.

Which command configures OSPF on the point-to-point link between routers R1 and R2?

Options:

router-id 10.0.0.15

neighbor 10.1.2.0 cost 180

ipospf priority 100

network 10.0.0.0 0.0.0.255 area 0

Question 169

Refer to the exhibit.

Site A was recently connected to site B over a new single-mode fiber path. Users at site A report Intermittent connectivity Issues with applications hosted at site B. What is the reason for the problem?

Options:

Heavy usage is causing high latency.

An incorrect type of transceiver has been inserted into a device on the link.

physical network errors are being transmitted between the two sites.

The wrong cable type was used to make the connection.

Question 170

Refer to the exhibit.

R1 learns all routes via OSPF Which command configures a backup static route on R1 to reach the 192 168.20.0/24 network via R3?

Options:

R1(config)#ip route 192.168.20.0 255.255.0.0 192.168.30.2

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2 90

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2 111

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2

Question 171

Refer to the exhibit.

What is a reason for poor performance on the network interface?

Options:

The interface is receiving excessive broadcast traffic.

The cable connection between the two devices is faulty.

The interface is operating at a different speed than the connected device.

The bandwidth setting of the interface is misconfigured

Question 172

A Cisco engineer must configure a single switch interface to meet these requirements

• accept untagged frames and place them in VLAN 20

• accept tagged frames in VLAN 30 when CDP detects a Cisco IP phone

Which command set must the engineer apply?

Options:

Option A

Option B

Option C

Option D

Question 173

Which characteristic differentiates the concept of authentication from authorization and accounting?

Options:

user-activity logging

service limitations

consumption-based billing

identity verification

Question 174

What provides centralized control of authentication and roaming In an enterprise network?

Options:

a lightweight access point

a firewall

a wireless LAN controller

a LAN switch

Question 175

What is a requirement for nonoverlapping Wi-Fi channels?

Options:

different security settings

discontinuous frequency ranges

different transmission speeds

unique SSIDs

Question 176

Refer to the exhibit.

Routers R1 and R3 have the default configuration The router R2 priority is set to 99 Which commands on R3 configure it as the DR in the 10.0 4.0/24 network?

Options:

R3(config)#interface Gig0/1 R3(config-if)#ip ospf priority 100

R3(config)#interface Gig0/0 R3(config-if)#ip ospf priority 100

R3(config)#interface Gig0/0 R3(config-if)i=ip ospf priority 1

R3(config)#interface Gig0/1 R3(config-if)#ip ospf priority 0

Question 177

What causes a port to be placed in the err-disabled state?

Options:

nothing plugged into the port

link flapping

shutdown command issued on the port

latency

Question 178

Which interface mode must be configured to connect the lightweight APs in a centralized architecture?

Options:

WLAN dynamic

management

trunk

access

Question 179

Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they mitigate on the right.

Options:

Question 180

Refer to the exhibit.

Users need to connect to the wireless network with IEEE 802. 11r-compatible devices. The connection must be maintained as users travel between floors or to other areas in the building What must be the configuration of the connection?

Options:

Select the WPA Policy option with the CCKM option.

Disable AES encryption.

Enable Fast Transition and select the FT 802.1x option.

Enable Fast Transition and select the FT PSK option.

Question 181

R1 as an NTP server must have:

• NTP authentication enabled

• NTP packets sourced from Interface loopback 0

• NTP stratum 2

• NTP packets only permitted to client IP 209.165 200 225

How should R1 be configured?

Options:

Option A

Option B

Option C

Option D

Question 182

A network engineer is configuring a switch so that it is remotely reachable via SSH. The engineer has already configured the host name on the router. Which additional command must the engineer configure before entering the command to generate the RSA key?

Options:

password password

crypto key generate rsa modulus 1024

ip domain-name domain

ip ssh authentication-retries 2

Question 183

How does Rapid PVST+ create a fast loop-free network topology?

Options:

lt requires multiple links between core switches

It generates one spanning-tree instance for each VLAN

It maps multiple VLANs into the same spanning-tree instance

It uses multiple active paths between end stations.

Question 184

By default, how long will the switch continue to know a workstation MAC address after the workstation stops sending traffic?

Options:

200 seconds

300 seconds

600 seconds

900 seconds

Question 185

Which two server types support dornas name to IP address resolution? (Choose two >

Options:

ESX host

resolver

web

file transfer

authentication

Question 186

Drag and drop the Cisco IOS attack mitigation features from the left onto the types of network attack they mitigate on the right.

Options:

Question 187

Refer to the exhibit.

Router R14 is in the process of being configured. Which configuration must be used to establish a host route to PC 10?

Options:

ip route 10.80.65.10 255.255.255.254 10.80.65.1

ip route 10.8065.10 255.255.255.255 10.73.65.66

ip route 1073.65.65 255.0.0.0 10.80.65.10

ip route 10.73.65.66 0.0.0.255 10.80.65.10

Question 188

What determines the sequence in which materials are planned during the material requirements planning (MRP) run?

Options:

The control parameters of the MRP run

The creation date of the materials

The low-level code of the materials

The replenishment lead time of the materials

Question 189

Why is a first-hop redundancy protocol implemented?

Options:

to protect against default gateway failures

to prevent loops in a network

to enable multiple switches to operate as a single unit

to provide load-sharing for a multilink segment

Question 190

A client experiences slow throughput from a server that is directly connected to the core switch in a data center. A network engineer finds minimal latency on connections to the server, but data transfers are unreliable, and the output of the show Interfaces counters errors command shows a high FCS-Err count on the interface that is connected to the server. What is the cause of the throughput issue?

Options:

high bandwidth usage

a physical cable fault

a speed mismatch

a cable that is too long

Question 191

Refer to the exhibit.

Wireless LAN access must be set up to force all clients from the NA WLAN to authenticate against the local database. The WLAN is configured for local EAP authentication. The time that users access the network must not be limited. Which action completes this configuration?

Options:

Uncheck the Guest User check box

Check the Guest User Role check box

Set the Lifetime (seconds) value to 0

Clear the Lifetime (seconds) value

Question 192

What is the function of a controller in a software-defined network?

Options:

multicast replication at the hardware level

forwarding packets

fragmenting and reassembling packets

setting packet-handling policies

Question 193

Which 802.11 frame type is Association Response?

Options:

management

control

action

protected frame

Question 194

What should a network administrator consider when deciding to implement automation?

Options:

Automated systems may have difficulty expanding network changes at scale.

Network automation typically is limited to the configuration and management of virtual devices within a network.

Network automation typically increases enterprise management operating costs.

Manual changes frequently lead to configuration errors and inconsistencies.

Question 195

Refer to the exhibit.

An engineer must configure router R2 so it is elected as the DR on the WAN subnet. Which command sequence must be configured?

Options:

Option

Question 196

Why implement VRRP?

Options:

to provide end users with a virtual gateway in a multivendor network

to leverage a weighting scheme to provide uninterrupted service

to detect link failures without the overhead of Bidirectional Forwarding Detection

to hand over to end users the autodiscovery of virtual gateways

Question 197

Refer to the exhibit.

Which two values does router R1 use to determine the best path to reach destinations in network 1,0.0.0/8? (Choose two.)

Options:

longest prefix match

highest administrative distance

highest metric

lowest metric

lowest cost to reach the next hop

Question 198

Drag and drop the configuration management terms from the left onto the descriptions on the right. Not all terms are used.

Options:

Question 199

Refer to the exhibit.

The network administrator must prevent the switch Cat9K-2 IP address from being visible in LLDP without disabling the protocol. Which action must be taken must be taken to complete the task?

Options:

Configure the no lldp tlv-select-management-address command globally on Cat9K-2

Configure the no lldp transmit command on interface G1/0/21 in Cat9K-1

Configure the no lldp receive command on interface G1/0/21 on Cat9K-1

Configure the no lldp mac-phy-cfg command globally on Cat9K-2

Question 200

What describes the functionality of southbound APIs?

Options:

They use HTTP messages to communicate.

They enable communication between the controller and the network device.

They convey information from the controller to the SDN applications.

They communicate with the management plane.

Question 201

Which (unction generally performed by a traditional network device is replaced by a software-defined controller?

Options:

encryption and decryption for VPN link processing

building route tables and updating the forwarding table

changing the source or destination address during NAT operations

encapsulation and decapsulation of packets in a data-link frame

Question 202

What is a function of an endpoint?

Options:

It is used directly by an individual user to access network services

It passes unicast communication between hosts in a network

It transmits broadcast traffic between devices in the same VLAN

It provides security between trusted and untrusted sections of the network.

Question 203

What is a benefit for external users who consume public cloud resources?

Options:

implemented over a dedicated WAN

located in the same data center as the users

all hosted on physical servers

accessed over the Internet

Question 204

What is the functionality of the Cisco DNA Center?

Options:

data center network pokey con

console server that permits secure access to all network devices

IP address cool distribution scheduler

software-defined controller for automaton of devices and services

Question 205

What is a specification for SSIDS?

Options:

They are a Cisco proprietary security feature.

They must include one number and one letter.

They define the VLAN on a switch.

They are case sensitive.

Question 206

Refer to the exhibit.

An engineer configures interface fa0/1 on SW1 and SW2 to pass traffic from two different VLANs. For security reasons, company policy requires the native VLAN to be set to a nondefault value. Which configuration meets this requirement?

Options:

Option A

Option B

Option C

Option D

Question 207

What are two protocols within the IPsec suite? (Choose two)

Options:

3DES

ESP

TLS

AES

Question 208

An administrator must use the password complexity not manufacturer-name command to prevent users from adding “cisco” as a password. Which command must be issued before this command?

Options:

Password complexity enable

confreg 0x2142

service password-encryption

Question 209

Refer to the exhibit.

How many JSON objects are presented?

Options:

Question 210

Refer to the exhibit.

How many objects, Keys and JSON list values are present?

Options:

three objects, two Keys, and three JSON list values

three objects, three keys and two JSON Ml values

one object, three keys, and three JSON list values

one object, three keys and two JSON list values

Question 211

UESTION NO: 253

Refer to the exhibit.

Which command must be enable a floating default route on router A?

Options:

ip route 0.0.0.0 0.0.0.0 192.168.1.2

ip default-gateway 192.168.2.1

ip route 0.0.0.0 0.0.0.0 192.168.1.2 10

ip route 0.0.0.0 0.0.0.0 192.168.2.1 10

Question 212

What are two examples of multifactor authentication? (Choose two.)

Options:

single sign-on

unique user knowledge

passwords that expire

soft tokens

shared password responsibility

Question 213

Refer to the exhibit.

Which interface is chosen to forward traffic to the host at 192.168.0.55?

Options:

GigabitEthernet0

GigabitEthernet0/1

Null0

GigabitEthernet0/3

Question 214

Refer to the exhibit. IPv6 must be implemented on R1 to the ISP The uplink between R1 and the ISP must be configured with a manual assignment, and the LAN interface must be self-provisioned Both connections must use the applicable IPv6 networks Which two configurations must be applied to R1? (Choose two.)

Options:

interface Gi0/1

ipv6 address 2001:db8:0F1B:FCCB:ACCE:FCED:ABCD:FA02:/127

interface Gi0/0

ipv6 address 2001:db8:1:AFFF::/64 eui-64

interface Gi0/1

ipv6 address 2001:db8:0F1B:FCCB:ACCE:FCED:ABCD:FA00:/127

interface Gi0/0

ipv6 address 2001:db8:0:AFFF::/64 eui-64

interface Gi0/0

ipv6 address 2001:db8:0F1B:FCCB:ACCE:FCED:ABCD:FA03;/127

Question 215

A network engineer is implementing a corporate SSID for WPA3-Personal security with a PSK. Which encryption cipher must be configured?

Options:

GCMP2S6

GCMP128

CCMP256

CCMP128

Question 216

What is the difference between 1000BASE-LX/LH and 1000BASE-ZX interfaces?

Options:

1000BASE-ZX is supported on links up to 1000km, and 1000BASE-LX/LH operates over links up to 70 km.

1000BASE-LX/LH interoperates with multimode and single-mode fiber, and 10008ASE-ZX needs a conditioning patch cable with a multimode.

1000BASE-LX/LH is supported on links up to 10km, and 1000BASE-ZX operates over links up to 70 km

1000BASE-ZX interoperates with dual-rate 100M/1G 10Km SFP over multimode fiber, and 1000BASE-LX/LH supports only single-rate.

Question 217

Refer to the exhibit.

Host A switch interface is configured in VLAN 2. Host D sends a unicast packet destined for the IP address of host A.

What does the switch do when it receives the frame from host D?

Options:

It creates a broadcast storm.

It drops the frame from the MAC table of the switch.

It shuts down the source port and places It In err-disable mode.

It floods the frame out of every port except the source port.

Question 218

Drag and drop the AAA features from the left onto the corresponding AAA security services on the right. Not all options are used.

Options:

Question 219

Which type of port is used to connect lo the wired network when an autonomous AP maps two VLANs to its WLANs?

Options:

LAG

EtherChannel

trunk

access

Question 220

ESTION NO: 268

To improve corporate security, an organization is planning to implement badge authentication to limit access to the data center. Which element of a security program is being deployed?

Options:

user training

user awareness

vulnerability verification

physical access control

Question 221

Refer to the exhibit.

The loopback1 interface of the Atlanta router must reach the lookback3 interface of the Washington router.

Options:

ipv6 route 2000::1/128 2012::2

ipv6 route 2000::1/128 2012::1

ipv6 route 2000:3 123 s0/0/0

ipv6 route 2000::3/128 2023::3

ipv6 route 2000::1/128 s0/0/1

Question 222

Refer to the exhibit.

Load-balanced traffic is coming in from the WAN destined to a host at 172.16.1.190. Which next-hop is used by the router to forward the request?

Options:

192.168.7.4

192.168.7.7

192.168.7.35

192.168.7.40

Question 223

When the LAG configuration is updated on a Cisco WLC which additional task must be performed when changes are complete?

Options:

Flush all MAC addresses from the WLC

Re-associate the WLC with the access point.

Re-enable the WLC interfaces

Reboot the WLC

Question 224

Under which condition is TCP preferred over UDP?

Options:

UDP is used when low latency is optimal, and TCP is used when latency is tolerable.

TCP is used when dropped data is more acceptable, and UDP is used when data is accepted out- of-order.

TCP is used when data reliability is critical, and UDP is used when missing packets are acceptable.

UDP is used when data is highly interactive, and TCP is used when data is time-sensitive.

Question 225

An engineer is installing a new wireless printer with a static IP address on the Wi-Fi network. Which feature must be enabled and configured to prevent connection issues with the printer?

Options:

client exclusion

passive client

DHCP address assignment

static IP tunneling

Question 226

Which device separates networks by security domains?

Options:

firewall

access point

intrusion protection system

wireless controller

Question 227

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

Options:

Question 228

Which cable type must be used to interconnect one switch using 1000 BASE-SX GBiC modules and another switch using 1000 BASE-SX SFP modules?

Options:

LC to SC

SC t ST

SC to SC

LC to LC

Question 229

Refer to the exhibit.

An engineer must configure a floating static route on an external EIGRP network. The destination subnet is the /29 on the LAN Interface of R86. Which command must be executed on R14?

Options:

ip route 10.80.65.0.255.255.248.0.10.73.65.66.1

ip route 10.80.65.0.255.255.255..240 fa0/1 89

ip route 10.80.65.0.255.255.248.0.10.73.65.66.171

ip route 10.80.65.0.0.0.224.10.80.65.0. 255

Question 230

What is a characteristics of a collapsed-core network topology?

Options:

It allows the core and distribution layers to run as a single combined layer.

It enables the core and access layers to connect to one logical distribution device over an EtherChannel.

It enables all workstations in a SOHO environment to connect on a single switch with internet access.

It allows wireless devices to connect directly to the core layer, which enables faster data transmission.

Question 231

Refer to the exhibit.

What are the two steps an engineer must take to provide the highest encryption and authentication using domain credentials from LDAP?

Options:

Select PSK under Authentication Key Management

Select WPA+WPA2 on Layer 2 Security

Select Static-WEP + 802.1X on Layer 2 Security

Select WPA Policy with TKIP Encryption

Select 802.1X from under Authentication Key Management

Question 232

Which REST method updates an object in the Cisco DNA Center Intent API?

Options:

CHANGE

UPDATE

POST

PUT

Question 233

Refer to the exhibit. An engineer must translate the PC1 IP address to 10.199.77.100 and permit PC1 to ping the loopback 0 on router R2. What command set must be used?

Options:

Option A

Option B

Option C

Option D

Question 234

Which two VPN technologies are recommended by Cisco for multiple branch offices and large-scale deployments? (Choose two.)

Options:

site-to-site VPN

IDMVPN

IGETVPN

IPsec remote access

clientless VPN

Question 235

Which benefit does Cisco ONA Center provide over traditional campus management?

Options:

Cisco DNA Center leverages SNMPv3 tor encrypted management, and traditional campus management uses SNMPv2.

Cisco DNA Center automates HTTPS for secure web access, and traditional campus management uses HTTP.

Cisco DNA Center leverages APIs, and traditional campus management requires manual data gathering.

Cisco DNA Center automates SSH access for encrypted entry, and SSH Is absent from traditional campus management.

Question 236

Refer to the exhibit.

Which two values does router R1 use to identify valid routes for the R3 loopback address 1.1.1.3/32? (Choose two.)

Options:

lowest cost to teach the next hop

highest metric

highest administrative distance

lowest metric

lowest administrative distance

Question 237

Refer to the exhibit.

Traffic from R1 to the 10.10.2.0/24 subnet uses 192.168.1.2 as its next hop. An network engineer wants to update the R1 configuration so that traffic with destination 10.10.2.1 passes through router R3, and all other traffic to the 10.10.20/24 subnet passes through r2. Which command must be used?

Options:

Ip route 10.10.2.1 255.255.255.255 192.168.1.4 115

Ip route 10.10.2.0 255.255.255.0 192.168.1.4 100

Ip route 10.10.2.0 255.255.255.0 192.168.1.4 115

Ip route 10.10.2.1 255.255.255.255 192.168.1.4 100

Question 238

Refer to the exhibit.

An architect is managing a wireless network with APs from several branch offices connecting to the WLC in the data center. There is a new requirement for a single WLAN to process the client data traffic without sending it to the WLC. Which action must be taken to complete the request?

Options:

Enable local HTTP profiling.

Enable Disassociation Imminent.

Enable FlexConnect Local Switching.

Enable local DHCP Profiling.

Question 239

Refer to the exhibit.

What is represented by "R1" and "SW1" within the JSON output?

Options:

key

array

value

object

Question 240

Refer to the exhibit.

When router R1 receives a packet with destination IP address 10.56.0 62. through which interface does it route the packet?

Options:

Null0

VIan58

Vlan60

VIan59

Question 241

An engineer is configuring a switch port that is connected to a VoIP handset. Which command must the engineer configure to enable port security with a manually assigned MAC address of abod-bod on voice VLAN 4?

Options:

switchport port-security mac-address abcd.abcd.abcd

switchport port-security mac-address abed.abed.abed vlan 4

switchport port-security mac-address sticky abcd.abcd.abcd vlan 4

switchport port-security mac-address abcd.abcd.abcd vlan voice

Question 242

Which IPsec encryption mode is appropriate when the destination of a packet differs from the security termination point?

Options:

tunnel

transport

aggressive

main

Question 243

Exhibit.

The switches are connected via a Cat5 Ethernet cable that was successfully tested. The Interfaces are configured as access ports and are both in a 'down" status. What is the cause of this issue?

Options:

The switches are configured with incompatible duplex settings.

The distance between the two switches is not supported by Cut5.

The speed settings on the switches are mismatched.

The portfast command is missing from the configuration.

Question 244

Refer to the exhibit.

Drag and drop the destination IPs from the left onto the paths to reach those destinations on the right.

Options:

Exam Detail

Vendor: Cisco

Certification: CCNA

Exam Code: 200-301

Exam Name: Cisco Certified Network Associate

Last Update: Apr 18, 2025

200-301 Question Answers

Easter Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Free and Premium Cisco 200-301 Dumps Questions Answers

Cisco Certified Network Associate Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer: