[Oct 31, 2023] 200-301 Test Prep Training Practice Exam Questions Practice Tests
Exam Questions Answers Braindumps 200-301 Exam Dumps PDF Questions
NEW QUESTION # 91
Drag and drop the characteristics of northbound APIs from the left onto any position on the right. Not all characteristics are used.
Answer:
Explanation:
NEW QUESTION # 92
DRAG DROP
Drag and drop the network protocols from the left onto the correct transport services on the right.
Answer:
Explanation:
NEW QUESTION # 93
Refer to the exhibit.
An access list is created to deny Telnet access from host PC-1 to RTR-1 and allow access from all other hosts A Telnet attempt from PC-2 gives this message:"% Connection refused by remote host" Without allowing Telnet access from PC-1, which action must be taken to permit the traffic?
- A. Remove the access-class 10 in command from line vty 0.4.
- B. Remove the password command from line vty 0 4.
- C. Add the ip access-group 10 out command to interface g0/0.
- D. Add the access-list 10 permit any command to the configuration
Answer: D
NEW QUESTION # 94
Refer to the exhibit.
The New York router is configured with static routes pointing to the Atlanta and Washington sites. Which two tasks must be performed so that the Serial0/0/0 interfaces on the Atlanta and Washington routers can reach one another?
(Choose two.)
- A. Configure the ipv6 route 2012::/126 2023::2 command on the Washington router
- B. Configure the ipv6 route 2023::/126 2012::2 command on the Atlanta router
- C. Configure the ipv6 route 2012::/126 2023::1 command on the Washington router
- D. Configure the ipv6 route 2012::/126 s0/0/0 command on the Atlanta router
- E. Configure the ipv6 route 2023::/126 2012::1 command on the Atlanta router
Answer: A,B
Explanation:
Explanation
The short syntax of static IPv6 route is:ipv6 route <destination-IPv6-address> {next-hop-IPv6-address | exit-interface}
NEW QUESTION # 95
Refer to Exhibit.
An engineer is configuring the NEW York router to reach the Lo1 interface of the Atlanta router using interface Se0/0/0 as the primary path. Which two commands must be configured on the New York router so that it can reach the Lo1 interface of the Atlanta router via Washington when the link between New York and Atlanta goes down? (Choose two)
- A. ipv6 router 2000::1/128 2023::2 5
- B. ipv6 router 2000::1/128 2012::2
- C. ipv6 router 2000::1/128 2012::1
- D. ipv6 router 2000::1/128 2012::1 5
- E. ipv6 router 2000::1/128 2023::3 5
Answer: C,E
Explanation:
Floating static routes are static routes that have an administrative distance greater than the administrative distance (AD) of another static route or dynamic routes. By default a static route has an AD of 1 then floating static route must have the AD greater than 1. Floating static route has a manually configured administrative distance greater than that of the primary route and therefore would not be in the routing table until the primary route fails.
NEW QUESTION # 96
Which three are valid modes for a switch port used as a VLAN trunk? (choose three)
- A. Forwarding
- B. On
- C. Transparent
- D. Auto
- E. Blocking
- F. Desirable
Answer: B,D,F
NEW QUESTION # 97
Refer to the exhibit.
Which type of configuration is represented in the output?
- A. Chef
- B. JSON
- C. Puppet
- D. Ansible
Answer: C
NEW QUESTION # 98
Which statement describes the process ID that is used to run OSPF on a router?
- A. It is globally significant and is used to represent the AS number.
- B. It is globally significant and is used to identify OSPF stub areas.
- C. It is locally significant and must be the same throughout an area.
- D. It is locally significant and is used to identify an instance of the OSPF database.
Answer: D
NEW QUESTION # 99
Refer to the exhibit.
Which route does R1 select for traffic that is destined to 192 168.16.2?
- A. 192.168 26.0/26
- B. 192.168.16.0/27
- C. 192.168.16.0/24
- D. 192.168.16.0/21
Answer: A
NEW QUESTION # 100
Drag and Drop Question
Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they mitigate on the right.
Answer:
Explanation:
Explanation:
Double-Tagging attack:
In this attack, the attacking computer generates frames with two 802.1Q tags. The first tag matches the native VLAN of the trunk port (VLAN 10 in this case), and the second matches the VLAN of a host it wants to attack (VLAN 20).
When the packet from the attacker reaches Switch A, Switch A only sees the first VLAN 10 and it matches with its native VLAN 10 so this VLAN tag is removed. Switch A forwards the frame out all links with the same native VLAN 10. Switch B receives the frame with an tag of VLAN 20 so it removes this tag and forwards out to the Victim computer.
Note: This attack only works if the trunk (between two switches) has the same native VLAN as the attacker.
To mitigate this type of attack, you can use VLAN access control lists (VACLs, which applies to all traffic within a VLAN. We can use VACL to drop attacker traffic to specific victims/servers) or implement Private VLANs.
ARP attack (like ARP poisoning/spoofing) is a type of attack in which a malicious actor sends falsified ARP messages over a local area network as ARP allows a gratuitous reply from a host even if an ARP request was not received. This results in the linking of an attacker's MAC address with the IP address of a legitimate computer or server on the network. This is an attack based on ARP which is at Layer 2. Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network which can be used to mitigate this type of attack.
NEW QUESTION # 101
Refer to the exhibit.
To which device does Router1 send packets that are destined to host 10.10.13.165?
- A. Router3
- B. Router4
- C. Router5
- D. Router2
Answer: A
NEW QUESTION # 102
Drag and drop the DHCP snooping terms from the left onto the descriptions on the right.
Answer:
Explanation:
NEW QUESTION # 103
An engineer must configure R1 for a new user account. The account must meet these requirements:
* It must be configured in the local database.
* The username is engineer.
* It must use the strongest password configurable. Which command must the engineer configure on the router?
- A. R1(config)# username engineer2 privilege 1 password 7 test2021
- B. R1(config)# username englneer2 secret 4 S1Sb1Ju$kZbBS1Pyh4QzwXyZ
- C. R1 (config)# username engineer2 algorithm-type scrypt secret test2021
- D. R1(config)# username engineer2 secret 5 .password S1$b1Ju$kZbBS1Pyh4QzwXyZ
Answer: D
NEW QUESTION # 104
Drag and drop the DNS lookup components from the left onto the functions on the right.
Answer:
Explanation:
NEW QUESTION # 105
Refer to Exhibit.
How does SW2 interact with other switches in this VTP domain?
- A. It forwards only the VTP advertisements that it receives on its trunk ports.
- B. It receives updates from all VTP servers and forwards all locally configured VLANs out all trunk ports
- C. It processes VTP updates from any VTP clients on the network on its access ports.
- D. It transmits and processes VTP updates from any VTP Clients on the network on its trunk ports
Answer: A
NEW QUESTION # 106
Drag and drop the DHCP snooping terms from the left onto the descriptions on the right.
Answer:
Explanation:
NEW QUESTION # 107
With REST API, which standard HTTP header tells a server which media type is expected by the client?
- A. Accept-Encoding: gzip. deflate
- B. Content-Type: application/json; charset=utf-8
- C. Accept: application/json
- D. Accept-Patch: text/example; charset=utf-8
Answer: C
Explanation:
Accept header is a way for a client to specify the media type of the response content it is expecting and Content-type is a way to specify the media type of request being sent from the client to the server.
http://www.java-allandsundry.com/2012/08/accept-header-vs-content-type-header.html#:~:text=Accept%20and%20Content%2Dtype%20are,the%20client%20to%20the%20server
NEW QUESTION # 108
Drag and drop the Cisco Wireless LAN Controller security settings from the left onto the correct security mechanism categories on the right.
Answer:
Explanation:
NEW QUESTION # 109
Refer to the exhibit.
Which two commands must be added to update the configuration of router R1 so that it accepts only encrypted connections? (Choose two )
- A. line vty 0 4
- B. crypto key generate rsa 1024
- C. username CNAC secret R!41!4319115@
- D. ip ssh version 2
- E. transport input ssh
Answer: B,E
NEW QUESTION # 110
Refer to the exhibit. All routers in the network are configured. R2 must be the DR. After the engineer connected the devices, R1 was elected as the DR. Which command sequence must be configured on R2 to be elected as the DR in the network?
- A. R2(config)#router ospf 1
R2(config-router)#router-id 192.168.2.7 - B. R2(config)#router ospf 1
R2(config-router)#router-id 10.100.100.100 - C. R2(config)#intergface gi0/0
R2(config-if)#ip ospf priority 1 - D. R2(config)#intergface gi0/0
R2(config-if)#ip ospf priority 100
Answer: D
NEW QUESTION # 111
An email user has been lured into clicking a link in an email sent by their company's security organization. The webpage that opens reports that it was safe but the link could have contained malicious code. Which type of security program is in place?
- A. Physical access control
- B. Social engineering attack
- C. brute force attack
- D. user awareness
Answer: D
Explanation:
This is a training program which simulates an attack, not a real attack (as it says "The webpage that opens reports that it was safe") so we believed it should be called a "user awareness" program. Therefore the best answer here should be "user awareness". This is the definition of "User awareness" from CCNA 200-301 Offical Cert Guide Book:
"User awareness: All users should be made aware of the need for data confidentiality to protect corporate information, as well as their own credentials and personal information. They should also be made aware of potential threats, schemes to mislead, and proper procedures to report security incidents. " Note: Physical access control means infrastructure locations, such as network closets and data centers, should remain securely locked.
NEW QUESTION # 112
Refer to the exhibit.
What does router R1 use as its OSPF router-ID?
- A. 192.168.0.1
- B. 10.10.10.20
- C. 172.16.15.10
- D. 10.10.1.10
Answer: C
NEW QUESTION # 113
Which IPv6 address type provides communication between subnets and cannot route on the Internet?
- A. multicast
A IPv6 Unique Local Address is an IPv6 address in the block FC00::/7. It is the approximate IPv6 counterpart of the IPv4 private address. It is not routable on the global Internet. Note: In the past, Site-local addresses (FEC0::/10) are equivalent to private IP addresses in IPv4 but now they are deprecated. Link-local addresses only used for communications within the local subnet. It is usually created dynamically using a link-local prefix of FE80::/10 and a 64-bit interface identifier (based on 48-bit MAC address). - B. link-local
- C. unique local
- D. global unicast
Answer: C
NEW QUESTION # 114
Drag and drop the AAA lerms from the left onto the descriptions on the right.
Answer:
Explanation:
NEW QUESTION # 115
......
Download Free Cisco 200-301 Real Exam Questions: https://www.practicevce.com/Cisco/200-301-practice-exam-dumps.html
200-301 Exam Dumps, 200-301 Practice Test Questions: https://drive.google.com/open?id=1ySIyWNW-ptljjIcMSnMfN5M5fHtfjH8Q