Cisco 200-301 Exam

QUESTION NO: 381

Refer to the network diagram in the exhibit. Host A is configured with an incorrect default gateway.
All other computers and the Router are known to be configured correctly (Click the Exhibit(s)
button.)

Which of the following statements is TRUE?

A.
Host C on Network A cannot communicate with Host A on Network A.

B.
Host A on Network A can communicate with all other hosts on Network A.

C.
Host A on Network A can communicate with Router R.

D.
Host C on Network A cannot communicate with Router R.

E.
Host D on Network B cannot communicate with Host B on Network A.

Answer: B,C
Explanation:

Host A on Network A can communicate with all other hosts on Network A and with Router R. To
communicate with local hosts and the interface of Router R (which are all in the same subnet) only
a correct IP address is reqired. If the default gateway of Host A is incorrect, then it will not be able
to communicate with any host on the other side of the router, which includes Network B in the
diagram. Packets from hosts on Network B will reach Host A on Network A without any problem,
"Pass Any Exam. Any Time." - www.actualtests.com 601
 Cisco 200-301 Exam
because they possess the correct address of the default gateway or router, but Host A will send
the packet to a dead end because Host A has an incorrect default gateway. On the other hand,
Host A does not require a default gateway to communicate with other hosts on same network.

Host C on Network A WILL be able to communicate with Host A on Network A , even though Host
A has an incorrect default gateway because Host A and C are in the same subnet, which requires
no use of the of the gateway or router..

Host C on Network A WILL be able to communicate with Router R because Host C has the correct
default gateway address which is the address of Router R.

Host D on Network B WILL be able to communicate with Host B on Network A because both hosts
have a correct default gateway address.

Objective:

Routing Fundamentals

Sub-Objective:

Troubleshoot basic Layer 3 end-to-end connectivity issues

References:

Cisco > Internetworking Technology Handbook > Internetworking Basics > Routing Basics

http://www.microsoft.com/technet/community/columns/cableguy/cg0903.mspx

http://kb.iu.edu/data/ajfx.html

QUESTION NO: 382

What is the Institute of Electrical and Electronics Engineers (IEEE) specification for Spanning Tree
Protocol (STP)?

A.
802.1d

B.
802.1q

C.

"Pass Any Exam. Any Time." - www.actualtests.com 602

 Cisco 200-301 Exam
802.3u

D.
802.3z

Answer: A
Explanation:

The IEEE specification for STP is 802.1d. STP uses the spanning-tree algorithm to find and
prevent loops in redundant network topologies. This helps mitigate broadcast storms, multiple
copies of frames, and Media Access Control (MAC) address database inconsistencies.

The IEEE committee developed the 802.1 series of specifications for bridging. The IEEE 802.1q
specification is for Virtual LAN (VLAN) trunking. Per this specification, a 4-byte 802.q header,
which contains the Priority and VLAN ID fields, is inserted in the middle of the original Ethernet
header.

802.3 is the IEEE committee specification that defines the Ethernet group. Ethernet is a LAN
protocol that specifies physical layer and MAC sublayer media access. IEEE 802.3 uses carrier
sense multiple access collision detect (CSMA/CD) to provide access for many devices on the
same network. 802.3u is the IEEE specification for Fast Ethernet. 802.3z is the IEEE specification
for Gigabit Ethernet.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot STP protocols

References:

Cisco > Support > Configuring Spanning Tree-Protocol > How STP Works

QUESTION NO: 383

When transmitting to a remote destination, what two things will occur after a host has determined
the IP address of the destination to which it is transmitting? (Choose two.)

"Pass Any Exam. Any Time." - www.actualtests.com 603

 Cisco 200-301 Exam
A.
The sending host will perform an ARP broadcast in its local subnet using the IP address of the
destination host.

B.
The sending host will perform an ARP broadcast in its local subnet using the IP address of the
local router interface.

C.
The local router interface will respond with the MAC address of the destination host.

D.
The local router interface will respond with its own MAC address.

E.
The destination host will respond with its own MAC address.

Answer: B,D
Explanation:

When a transmission is made to a remote location, the sending host will perform an Address
Resolution Protocol (ARP) broadcast in its local subnet using the IP address of the local router
interface, and the local router interface will respond with its own MAC address. A remote address
is defined as an address in a different subnet.

When a host determines (through a process called ANDing) that a destination address is remote, it
will send the packet to the local router interface, which is known as the default gateway on the
host. But when it performs ANDing on the IP address of the local router interface, it will discover
that the interface is local. When transmitting to a local IP address, a conversion to a MAC address
must occur. Therefore, it will perform a local ARP broadcast, and the local router interface will
respond with its MAC address.

Regardless of whether the host is broadcasting for the MAC address of the destination locally on
the same LAN, or if it is broadcasting for the MAC address of the router interface (remotely), the
broadcast will be a Layer 2 broadcast using the MAC address ff-ff-ff-ff-ff. It will be received by all
devices on the LAN, but only the device with the specified IP address will reply.

The ARP resolution process does take a second or two to complete if no mapping for the
destination devices IP address to MAC address is found in the ARP cache. For example, if the
MAC address must be resolved through the ARP broadcast when pinging from one device to
another, it can cause the first several echo requests to go unanswered, as shown on the output
below. After this resolution has been completed, however, the second ping attempt should receive
an answer to all five ICMP echo requests.

Router1#ping 50.6.3.26

"Pass Any Exam. Any Time." - www.actualtests.com 604

 Cisco 200-301 Exam
Type escape sequence to abort

Sending 5, 100-byte ICMP Echos to 50.6.3.26, timeout is 2 seconds:

!!!

Router1#ping 50.6.3.26

Type escape sequence to abort

Sending 5, 100-byte ICMP Echos to 50.6.3.26, timeout is 2 seconds:

!!!!!

The sending host will not perform an ARP broadcast in its local subnet using the IP address of the
destination host. A local ARP broadcast is only performed when the ANDing process deduces that
the destination IP address is local. In this case, the destination is remote.

The destination host will not respond with its MAC address. The process of learning the MAC
address of the destination computer is the responsibility of the local router interface on the subnet
where the destination host resides.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Describe and verify switching concepts

References:

Cisco > Cisco IOS XR IP Addresses and Services Configuration Guide for the Cisco XR 12000
Series Router, Release 4.3.x > Configuring ARP

QUESTION NO: 384

Which command enables HSRP on an interface?

A.
hsrp

"Pass Any Exam. Any Time." - www.actualtests.com 605

 Cisco 200-301 Exam
B.
standby ip

C.
standby mode hsrp

D.
switchport mode hsrp

Answer: B
Explanation:

The standby ip interface configuration command enables Hot Standby Router Protocol (HSRP).
The syntax for this command is as follows:

switch(config-if)# standby group-number ip ip-address

The group-number argument specifies the HSRP group number on the interface. You do not need
to enter a group number if there is only one HSRP group.

At least one interface on one of the routers in the group must be configured with the virtual IP
address of the group. It is optional on all other interfaces on the other routers, which can learn the
address through the hellos sent among the group.

A complete HSRP configuration is shown below with an explanation of each command.

RouterA (config) #interface Fa0/1

RouterA (config-if) # ip address 192.168.5.6 255.255.255.0

RouterA (config-if) # standby 2 ip 192.168.5.10

RourerA(config-if) # standby 2 priority 150

RouterA (config-if) #standby 2 Preempt

RouterA(config-if) #standby 2 track interface fa0/2

In the above, the router is tracking its own Fa0/2 interface. If that interface goes down it will reduce
its priority by 10 (this is the default decrement when not specified). The new value would be 140 if
that happened. To specify a decrement value, add it to the track command, as in this example:
track interface Fa0/2 20.

When you configure routers to be part of an HSRP group, they listen for the HSRP MAC address
"Pass Any Exam. Any Time." - www.actualtests.com 606
 Cisco 200-301 Exam
for that group as well as their own burned-in MAC addresses.

HSRP uses the following MAC address:

0000.0c07.ac** (where ** is the HSRP group number)

The switchport mode interface configuration command will configure the VLAN membership mode
of a port. It is not used to enable HSRP.

The options standby mode hsrp and hsrp are not valid commands.

Objective:

Infrastructure Services

Sub-Objective:

Configure, verify, and troubleshoot basic HSRP

References:

Cisco > Home > Technology Support > IP > IP Application Services > Design > Design Technotes
> Hot Standby Router Protocol Features and Functionality

Cisco > Cisco IOS IP Application Services Configuration Guide, Release 12.4 > Part 1: First Hop
Redundancy Protocols > Configuring HSRP

QUESTION NO: 385

What IOS command produced the following output?

A.
"Pass Any Exam. Any Time." - www.actualtests.com 607
 Cisco 200-301 Exam
show interface mac

B.
show mac

C.
show mac-address-table

D.
show ip interface

Answer: C
Explanation:

The output was produced by the show mac-address-table command. The show mac-address-table
command displays a table of every learned MAC address and the switch port associated with the
MAC address. The output shown in the question indicates that four MAC addresses have been
learned by this switch, and the last column indicates the switch port over which each MAC address
was learned, and for which frames destined for each MAC address will be forwarded. The MAC
address table is built dynamically by examining the source MAC address of received frames.

The show ip interface command is a router command, and displays no information on MAC
address tables.

The show interface mac and show mac commands are incorrect because they are not valid Cisco
IOS commands.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Describe and verify switching concepts

References:

QUESTION NO: 386

You know that Router2 is configured for RIP. Which Cisco Internetwork Operating System (IOS)
command is used to view the current state of all active routing protocols?
"Pass Any Exam. Any Time." - www.actualtests.com 608
 Cisco 200-301 Exam
A.
show ip arp

B.
debug ip rip

C.
show ip protocols

D.
show ip routing process

E.
show arp

F.
show interfaces

Answer: C
Explanation:

The show ip protocols command is used to view the current state of active routing protocols. This
command is issued from Privileged EXEC mode. The syntax of the command is as follows:

Router2# show ip protocols

Output of the command would resemble the following:

This command shows additional information about individual protocols. The version number of RIP
being used is shown on the seventh line of the output. This output also indicates on lines 12-14
"Pass Any Exam. Any Time." - www.actualtests.com 609
 Cisco 200-301 Exam
that it is routing for three networks: 201.19.0.0, 16.2.0.0, and 10.3.0.0. This means that the router
will be sending and receiving RIP updates on any interfaces that have IP addresses in those
networks.

Also note that the router at 16.2.0.10 has not sent an update in 3 minutes and 10 seconds. If an
update is not received in 50 seconds (for a total of 4 minutes), the route-flush timer (240 seconds
from the last valid update) will have expired, causing the local router to remove all networks
learned from the router at 16.2.0.10 from the routing table.

For more specific information about those interfaces, in terms such as S0 or Fa0/0, you could
execute the show ip interface brief command as shown below. The output displays the addresses
of the interfaces, which would indicate which interfaces were enabled for RIP and thus sending
and receiving updates.

The show ip arp command is incorrect because this command is executed on a router to
determine the IP and MAC addresses of hosts on a LAN connected to the router.

The debug ip rip command is incorrect because this command is used to capture RIP traffic
between the routers in real time. This command could also be used to determine the version of
RIP being used as shown in line 2 of the partial output of the command below:

Router2#debug ip rip

RIP protocol debugging is on

*Mar 3 02:11:39.207:RIP:received packet with text authentication 234

*Mar 3 02:11:39.211:RIP:received v1 update from 122.108.0.10 on Serial0

*Mar 3 02:11:39.211:RIP: 79.0.0.0/8 via 0.0.0.0 in 2 hops

*Mar 3 02:11:40.212:RIP: ignored v2 packet from 192.168.5.6 (illegal version)

In the above output Router 2 has received a version 1 update from a router at 122.108.0.10 which
indicates that a ping to that router should succeed. It also shows what was learned from the router
at 122.108.0.10, which is the router to network 79.0.0.0/8 via 0.0.0.0. The 0.0.0.0 indicates that the
next hop for that route is the router that sent this advertising (the router at 122.108.0.10).

The output also shows that a RIP router at 192.168.5.6 sent a version 2 update that was ignored
"Pass Any Exam. Any Time." - www.actualtests.com 610
 Cisco 200-301 Exam
by Router 2, which is using version 1. This mismatch of versions will prevent Router 2 from
forming an adjacency with the router at 192.168.5.6.

Note: Before running any debug command you should execute the show processes command and
verify that the CPU utilization on the router is low enough to handle the effects of running the
debug command.

The show ip routing process command is incorrect because it is not a valid Cisco IOS command.

The show arp command is used to identify the IP address to MAC address mappings the router
has leaned through the ARP broadcast process. It is helpful when you have identified errors
associated with a MAC address and you need to learn the IP address or vice versa. Sample
output is below.

router# show arp

Protocol Address Age (min) Hardware Addr Type Interface

Internet 10.0.0.3 0 0004.dd0c.ffcb ARPA Ethernet01

Internet 10.0.0.1 - 0004.dd0c.ff86 ARPA Ethernet0

The difference between the show arp command and the show ip arp command is that show arp
will also include mappings learned through non-IP protocols such as when inverse ARP is used to
learn and map DLCIs to IP addresses.

The show interface command can also be used to identify IP addresses from MAC addresses and
vice versa, but also indicates the state of the interface; IP addresses MTU and much more about
each interface. Sample output is below.

router# show interfaces

Ethernet 0 is up, line protocol is up

Hardware is MCI Ethernet,address is 0000.0c00.750c(bia 0000.0c00.750c)

Internet address is 10.108.28.8, subnet mask is 255.255.255.0

MTU 1500 bytes, BW 10000 Kbit, DLY 100000 usec, rely 255/255, load 1/255

Objective:

Routing Fundamentals

Sub-Objective:

"Pass Any Exam. Any Time." - www.actualtests.com 611

 Cisco 200-301 Exam
Interpret the components of routing table

References:

Cisco > Cisco IOS IP Routing Protocols Command Reference > IP Routing Protocol-Independent
Commands: S through T > show ip protocols

QUESTION NO: 387

You apply the following commands to a router named R2:

R2(config)# interface Tunnel1

R2(config-if)# ip address 172.16.1.2 255.255.255.0

R2(config-if)# ip mtu 1400

R2(config-if)# ip tcp adjust-mss 1360

R2(config-if)# tunnel source 2.2.2.2

R2(config-if)# tunnel destination 1.1.1.1

Which statement is NOT true with regard to this configuration?

A.
The physical IP address of R2 is 2.2.2.2

B.
The connection will operate in IP mode

C.
The configuration will increase packet fragmentation

D.
The configuration alters the maximum segment size

Answer: C
Explanation:

The configuration will not increase packet fragmentation. Conversely, it will reduce it by lowering
the maximum transmission unit to 1400 and the maximum segment size to 1360 bytes.
"Pass Any Exam. Any Time." - www.actualtests.com 612
 Cisco 200-301 Exam
Most transport MTUs are 1500 bytes. Simply reducing the MTU will account for the extra overhead
added by GRE. Setting the MTU to a value of 1400 is a common practice, and it will ensure
unnecessary packet fragmentation is kept to a minimum.

The other statements are true. The physical address of R2 is 2.2.2.2, while the tunnel interface
address is 172.16.1.2.

Because you have not issued any command that changes the connection, it will operate in the
default mode of IP.

The configuration does alter the maximum segment size with the ip tcp adjust-mss 1360
command.

Objective:

WAN Technologies

Sub-Objective:

Configure, verify, and troubleshoot GRE tunnel connectivity

References:

Home > Network Infrastructure > WAN, Routing and Switching > How to configure a GRE tunnel

QUESTION NO: 388

Which Cisco IOS command configures the clock rate to 64,000 bits per second on an interface?

A.
clock-rate 64000

B.
clock rate 64k

C.
clock rate 64000

D.
clockrate 64000

"Pass Any Exam. Any Time." - www.actualtests.com 613

 Cisco 200-301 Exam
Answer: C
Explanation:

The clock rate 64000 command would configure the clock rate to 64,000 bits per second on an
interface. The clock rate command is used to configure the clock rate for hardware connections on
serial interfaces. These interfaces can be network interface modules (NIMs) and interface
processors. The syntax of this command is clock rate bps.

A serial connection between two routers that are connected with a v.35 serial cable requires a
clock rate on the Data Communications Equipment (DCE) end of the cable, but not on the Data
Terminal Equipment (DTE) end. When the router is connected to a CSU/DSU for connection to the
outside world, the DCE end will be the CSU/DSU. In a lab environment or any situation where you
have two routers connected with this type of serial cable, a clock rate must be set on the DCE end
of the cable.

When troubleshooting a connection of this type between routers, the state of the clock rate (set or
unset) can be determined by running the show controllers command on the DCE end. The output
will display as follows if the clock rate is NOT set:

Router#show controllers s0/0

Interface Serial0/0

Hardware is PowerQUICC MPC860

DTE V.35 clocks stopped

More output omitted

Notice the DTE V.35 clocks stopped line, which indicates no clock rate is set. Another clue that
there is a Layer 2 problem is the output of the show ip interface S0/0 command, executed on the
same interface below:

Router# show ip interface s0/0

Serial0/0 is up, line protocol is down

Internet address is 192.168.1.2/24

Broadcast address is 255.255.255.255

Notice the Serial0/0 is up, line protocol is down line. Serial0/0 is up indicates that the physical
connection is good, but line protocol is down indicates a problem with Layer 2 . If you were
troubleshooting from the bottom layer to the top, you would now check Layer 2, which would be
the clock rate.

"Pass Any Exam. Any Time." - www.actualtests.com 614

 Cisco 200-301 Exam
If you want to change a DCE interface to a DTE device, you should use the no clock rate
command.

All the other options are incorrect because these commands are syntactically incorrect.

Objective:

WAN Technologies

Sub-Objective:

Describe WAN access connectivity options

References:

QUESTION NO: 389

Which switch will be selected as the root bridge by Spanning Tree Protocol (STP)?

A.
switch with lowest bridge ID

B.
switch with lowest IP address

C.
switch with lowest Media Access Control (MAC) address

D.
switch with lowest number of root ports

Answer: A
Explanation:

STP will use elections to arrive at a fully converged state that will ensure a switching loop free
network. It will select:

The switch with the lowest bridge ID will be selected as the root bridge by STP. A bridge ID has
two components: the priority number and the MAC address. On Cisco devices, the priority number
may range from 0 to 65535. The priority number constitutes the most significant bits of the bridge

"Pass Any Exam. Any Time." - www.actualtests.com 615

 Cisco 200-301 Exam
ID. If you want to ensure that a particular switch in a topology always becomes a root bridge,
regardless of the MAC address, you can set the priority number of that switch to the lowest value
among all switches in the topology.

Since the selection of the root bridge influences all other decisions and thus the single loop free
path for each VLAN, the selection and location of the root bridge is important and best not left to
chance. Once you have determined the best switch for the role of root bridge, you can ensure its
election by lowering its bridge priority.

It is best for the root bridge to be centrally located with respect to the clients and the servers that
generate the most traffic on the VLAN. For example, in the diagram below, if most of the traffic
travels between the clients and the servers on VLAN 20, the best choice for the root bridge for
VLAN 20 would be SwitchD. SwitchD is centrally located between the clients on VLAN 20 and the
servers on VLAN 20.

To illustrate the type of inefficient traffic that could occur when care is not given to the location of
the root bridge, consider the diagram above and assume that Switch B was chosen the root
bridge. Next, assume that traffic needs to go from VLAN 10 connected to Switch C to VLAN 10
connected to Switch A. The shortest path would be from Switch C to Switch A. However, because
the only port that is forwarding on Switch C is the port that leads to the root bridge (Switch B), then
the actual path would be from Switch C, to Switch B, to Switch E, and then to Switch A.

By default, the priority number of all Cisco switches is configured to a value of 32768. For
example, consider three switches in network topology with the following MAC addresses and the
same default priority number:

0000.0B02.AAAA
"Pass Any Exam. Any Time." - www.actualtests.com 616
 Cisco 200-301 Exam
0000.0B02.BBBB

0000.0B02.CCCC

The switch with the lowest MAC address, 0000.0B02.AAAA, will become the root bridge.

The switch with the lowest IP address will not be selected as the root bridge by STP because the
IP address of the switch does not influence the selection of the root bridge.

The switch with the lowest MAC address will not be selected as the root bridge by STP. A
combination of priority number and MAC address determines the selection of the root bridge. The
MAC address will determine the root bridge only if there is a tie for the switch with the lowest
priority number.

The switch with the lowest number of root ports will not be selected as the root bridge by STP.
Root ports are the interfaces on non-root bridges. On a non-root bridge, the least-root-cost
interface is known as a root port. Therefore, the switch having the fewest root ports is not the root
bridge.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot STP protocols

References:

Cisco > Support > Configuring Spanning Tree Protocol > How STP Works > How a Switch or Port
Becomes the Root Switch or Port

Cisco Documentation > Cisco 7600 Series Cisco IOS Software Configuration Guide, 12.2SX >
Configuring STP and IEEE 802.1s MST > Understanding the Bridge ID

QUESTION NO: 390

Which command would be used to list the timers, version of spanning tree and the bridge ID of the
local and designated switch for a specific VLAN on a Cisco Catalyst 2950 series switch?

A.
"Pass Any Exam. Any Time." - www.actualtests.com 617
 Cisco 200-301 Exam
show spanning-tree vlan vlan-id

B.
show vlan database

C.
show vlan vlan-id

D.
show vlan brief

Answer: A
Explanation:

The show spanning-tree vlan vlan-id command is correct because this command shows timers,
version of spanning tree, and the bridge ID of the local and designated switches for a specific
VLAN on a Cisco Catalyst 2950 series switch.

The show vlan id vlan-id command is incorrect because it will show only the ports assigned to
each VLAN.

The show vlan database command is incorrect because this is not a valid Cisco IOS command.

The show vlan brief command is incorrect because this command is used view the entire VLAN
database, and does not provide information for a specific VLAN.

Objective:

Infrastructure Management

Sub-Objective:

Use Cisco IOS tools to troubleshoot and resolve problems

References:

Cisco > Cisco IOS LAN Switching Command Reference, Release 12.4 > show vlan

QUESTION NO: 391

Which of the following commands sets the local router to serve as an authoritative time source?

"Pass Any Exam. Any Time." - www.actualtests.com 618

 Cisco 200-301 Exam
A.
ntp server

B.
ntp master

C.
ntp authenticate

D.
ntp peer

Answer: B
Explanation:

The ntp master command sets the local router to serve as an authoritative time source.

The ntp server command is used to specify an external time source that the local router should
use as its time source.

The ntp authenticate command is used to enable the authentication of time source to which the
local router has been configured to use. It is the first step in a process that must also include the
specification of a hashing algorithm and a key, both of which must match on the time source.

The ntp peer command is used to configure the local router to synchronize a peer or to be
synchronized by a peer. It does not make the local router authoritative as a time source like the
ntp master command.

Objective:

Infrastructure Services

Sub-Objective:

Configure and verify NTP operating in a client/server mode

References:

Cisco > Support > Cisco IOS Basic System Management Command Reference > ntp master

"Pass Any Exam. Any Time." - www.actualtests.com 619

 Cisco 200-301 Exam
QUESTION NO: 392

Which two are TRUE of straight-through cable? (Choose two.)

A.
The wires on the cable are crossed over.

B.
It is also known as a patch cable.

C.
You can connect two routers using a straight-through cable.

D.
You can connect a hub to a switch using a straight through cable.

E.
You can connect a switch to a router using a straight through cable.

Answer: B,E
Explanation:

A straight-through cable is also known as a patch cable, and a straight-through cable is used to
connect a switch to a router. The following are the characteristics of a straight-through cable:

All the other options are incorrect because they are the characteristics of a crossover cable.

Objective:

Network Fundamentals

Sub-Objective:

Select the appropriate cabling type based on implementation requirements

References:

Cisco > Support > Product Support > Routers > Cisco 10000 Series Routers > Troubleshoot and
Alerts > Troubleshooting Technotes > Ethernet 100BaseTX and 10BaseT Cables: Guidelines and
Specifications

QUESTION NO: 393

"Pass Any Exam. Any Time." - www.actualtests.com 620
 Cisco 200-301 Exam
File Transfer Protocol (FTP) and Simple Mail Transfer Protocol (SMTP) work at which layer in the
Open Systems Interconnection (OSI) model?

A.
the Session layer

B.
the Presentation layer

C.
the Application layer

D.
the Network layer

Answer: C
Explanation:

FTP and SMTP work at the application layer in the OSI model. The application layer is responsible
for interacting directly with the application. It provides application services, such as e-mail and
FTP. The following protocols work on the application layer:

The Session layer is incorrect because this layer creates, manages, and terminates sessions
between communicating nodes. NetBIOS and Session Control Protocol (SCP) work at the session
layer.

The Presentation layer is incorrect because this layer enables coding and conversion functions for
application layer data. The Presentation layer includes graphic image formats, such as Graphics
Interchange Format (GIF), Joint Photographic Experts Group (JPEG), and Tagged Image File
Format (TIFF).

The Network layer is incorrect because this layer defines the network address or the Internet
Protocol (IP) address, which are then used by the routers to make forwarding decisions.

Objective:

Network Fundamentals

Sub-Objective:

Compare and contrast OSI and TCP/IP models

References:

Cisco Documentation > Internetworking Technology Handbook > Internetworking Basics > OSI

"Pass Any Exam. Any Time." - www.actualtests.com 621

 Cisco 200-301 Exam
Model and Communication Between Systems

QUESTION NO: 394

A packet is received with a destination IP address of 10.2.16.10. What would the next hop IP
address be for this packet?

A.
192.168.1.10

B.
192.168.4.2

C.
192.168.10.254

D.
None; the packet will be dropped.

Answer: B
Explanation:

The packet will be routed to the next hop IP address of 192.168.4.2, since this routing table entry
is the most specific match for the remote network. Packets are routed according to the most
specific, or "longest," match in the routing table.

The packet in the scenario has a destination IP address of 10.2.16.10, which matches two entries
in the routing table.

Therefore, the 10.2.16.0 /24 entry is selected for routing this packet because it most specifically
matches the destination IP address, or has the longest number of matching bits.

"Pass Any Exam. Any Time." - www.actualtests.com 622

 Cisco 200-301 Exam
The next hops of 192.168.1.10 and 192.168.10.254 will not be used, as these routes are not the
most specific matches for the destination IP address of the packet.

It is interesting to note that packets that are destined for the 10.2.32.0 network will be load
balanced across both serial 0/0 and serial 0/1 because the cost (2172425) is the same for both
paths.

The packet will not be dropped because there is at least one routing table entry that matches the
destination IP address of the packet.

To ensure that no packets are dropped, even if there is no matching route in the routing table, a
default route could be configured as follows (next hop picked at random for illustration):

Router(config)# ip route 0.0.0.0 0.0.0.0 192.168.1.1

This configuration would instruct the router to send any packets that do match the existing routes
to 192.168.1.1. For example, a packet destined for 201.50.6.8/24 would not match any routes in
the table, and would thus be forwarded to 192.168.1.1.

If you understand how routing tables and routing advertisements work, it is relatively simple to
describe the contents of a router's routing table without seeing the table directly. To do so, you
would view the router's configuration and the configuration of its neighbors using show run, along
with a diagram of its network connections. For example, examine the diagram of the two routers
shown below along with their respective configurations:

"Pass Any Exam. Any Time." - www.actualtests.com 623

 Cisco 200-301 Exam

It will contain S*0.0.0.0/0 [1/0] via 192.35.87.5 because of the static default route indicated in line 4
of its configuration output.

It will contain R 192.168.110.128/26 [120/1] via 192.35.87.5 00:00:22, Serial 0/0 because Router 2
has a network 192.168.110.128 statement indicating that it will advertise this network to its
neighbors.

It will contain the two routes C 192.35.87.4/30 is directly connected, S0/0 and C 192.168.54.64/26
is directly connected, Fa0/0 because all directly connected routes are automatically placed in the
table.

Objective:

Routing Fundamentals

Sub-Objective:

Interpret the components of routing table

References:

Cisco > Support > IP > IP Routing > Design > Design TechNotes > Route Selection in Cisco
Routers > Document ID: 8651

QUESTION NO: 395

Which three statements are TRUE regarding a Local Area Network (LAN)? (Choose three.)

A.
A LAN is confined to one building or campus.

B.
A LAN can cover great distances.
"Pass Any Exam. Any Time." - www.actualtests.com 624
 Cisco 200-301 Exam
C.
A LAN provides fast data transmission.

D.
A LAN is easily expandable.

E.
LANs require the use of a router to communicate between local hosts.

Answer: A,C,D
Explanation:

A LAN is confined to one building or campus, provides fast data transmission, and is easily
expandable. A LAN refers to the interconnection of computers within a building or a group of
buildings. A LAN generally uses twisted pair cables for data transmission.

The following are some characteristics of LANs:

The option stating that a LAN can cover great distances is incorrect. A Wide Area Network (WAN)
is a network that does not have any geographical boundaries. The Internet is the best example of
a WAN.

LANs do not require the use of a router to communicate (although they can be used to connect
subnets) between local hosts. Hosts can communicate through a hub or switch.

Objective:

Network Fundamentals

Sub-Objective:

Compare and contrast network topologies

References:

Cisco Documentation > Internetworking Technology Handbook > Introduction to LAN Protocols

QUESTION NO: 396

A router is running several routing protocols, and as a result has learned three routes to the

"Pass Any Exam. Any Time." - www.actualtests.com 625

 Cisco 200-301 Exam
192.168.5.0 network. Below are the details about the three learned routes:

Based on this information, which route will be placed in the routing table?

A.
the RIP route

B.
the OSPF route

C.
the EIGRP route

D.
all of the routes

Answer: C
Explanation:

The EIGRP route will be placed in the routing table. When a router learns multiple routes to a
network from different routing table population methods, which includes routes from routing
protocols and static routes created by the administrator, it does so in two steps:

Since EIGRP has the lowest default administrative distance (90), the EIGRP route will be chosen.

The RIP route will not be chosen because it has a default administrative distance of 120.

The OSPF route will not be chosen because it has a default administrative distance of 110.

Objective:

Routing Fundamentals

Sub-Objective:

Describe how a routing table is populated by different routing information sources

References:

"Pass Any Exam. Any Time." - www.actualtests.com 626

 Cisco 200-301 Exam
Support > Technology Support > IP > IP Routing > Troubleshoot and Alerts > Troubleshooting
TechNotes > Route Selection in Cisco Routers

QUESTION NO: 397

How will SwitchB handle the frame it just received?

A.
It will forward the frame out all ports

B.
It will forward the frame out FastEthernet0/4 only

C.
It will drop the frame

D.
It will record the source MAC address

E.
It will forward the frame out FastEthernet0/10 only

Answer: E
Explanation:

SwitchB will forward the frame out FastEthernet0/10 only. The MAC address table indicates that
the switch has the destination MAC address in its table and the destination is located on switch
port FastEthernet 0/10, therefore it will switch the frame to that interface.

It will not forward the frame out all ports. It will only do that when it receives a frame for which it
knows no destination and then it will forward it out all ports except the one on which it arrived. For
"Pass Any Exam. Any Time." - www.actualtests.com 627
 Cisco 200-301 Exam
example if it were sending a frame to 00c0.5658.d26e, which is nowhere to be found in the table
and the frame arrived on port FastEthernet0/10 it would send the frame to very port except
FastEthernet0/10.

It will not forward the frame out FastEthernet0/4. The MAC address located on that port is
00c0.57ce.ce33, which means that is the port on which the frame arrived.

It will not drop the frame. It will not drop the frame when it has the destination in its MAC table.

It will record the source MAC address. That address is already present in the table.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Describe and verify switching concepts

References:

Cisco Documentation > Internetworking Case Studies > LAN Switching

QUESTION NO: 398

Which of the following features is used with the ip nat inside command to translate multiple
devices in the internal network to the single address in the IP address pool?

A.
static

B.
override

C.
overload

D.
dynamic

Answer: C
"Pass Any Exam. Any Time." - www.actualtests.com 628
 Cisco 200-301 Exam
Explanation:

The overload keyword, when specified with the ip nat inside command, translates multiple devices
in the internal network to a single address in the IP address pool.

For example:

ip nat pool test 172.28.15.1 172.28.15.1 prefix 24

In this example, the NAT pool named "test" only has a range of one address. Another variation of
this command is as follows:

ip nat inside source list 3 interface serial 0 overload

This command configures NAT to overload on the address assigned to the serial 0 interface.

When this variation is used, the command uses a list named 3 to determine the addresses in the
pool

With static NAT, translation mappings are created statically and are placed in the translation tables
regardless of whether there is traffic flowing.

With dynamic NAT, the translation mappings table is populated as the required traffic flows
through NAT-enabled devices.

Override is not a valid NAT option. There is no such option.

Objective:

Infrastructure Services

Sub-Objective:

Configure, verify, and troubleshoot inside source NAT

References:

Cisco > Technology Support > IP > IP Routing > Design Technotes > Configuring Network
Address Translation: Getting Started > Document ID: 13772 > Quick Start Steps for Configuring
and Deploying NAT

"Pass Any Exam. Any Time." - www.actualtests.com 629

 Cisco 200-301 Exam

QUESTION NO: 399

Which feature enables a host to obtain an IP address from a DHCP server on another subnet?

A.
DHCP relay agent

B.
DHCP BOOTP agent

C.
DHCP relay protocol

D.
DHCP BOOTP relay

Answer: A
Explanation:

A Dynamic Host Configuration Protocol (DHCP) relay agent enables hosts to obtain IP addresses
from a DHCP server on another subnet. Hosts use DHCPDISCOVER broadcast messages to
locate the DHCP server because they don't know the location of the DHCP server. Because
routers are designed to filter broadcasts, the DHCPDISCOVER packet would be dropped unless
the router is configured to forward such packets. Enabling a DHCP relay agent on a Cisco router
allows it to receive certain types of broadcasts and forward them to special helper addresses.

The following sequence describes an IP address relay process:

The ip helper-address interface configuration command enables a DHCP relay agent on a Cisco
router.

DHCP is an enhancement over Bootstrap Protocol (BOOTP) and is used to automate the
distribution of IP address to clients from a central server. The BOOTP protocol was also used
distribute IP addresses, but was inflexible to changes in the network. DHCP offers three
advantages that also address the inflexibility of the BOOTP protocol:

When a DHCP relay is unnecessary, the following steps describe the address allocation process:

While DHCP is very useful in reducing the administrative burden of issuing IP configurations in a
large network, Cisco best practices call for using static IP addressing in a small (6 or fewer hosts)
network.

"Pass Any Exam. Any Time." - www.actualtests.com 630

 Cisco 200-301 Exam
All other options are invalid devices or features.

Objective:

Infrastructure Services

Sub-Objective:

Troubleshoot client- and router-based DHCP connectivity issues

References:

Cisco > Cisco IOS IP Addressing Services Configuration Guide, Release 12.4 > Part 3: DHCP >
Configuring the Cisco IOS DHCP Relay Agent

Cisco > Cisco IOS IP Application Services Command Reference > ip helper-address

QUESTION NO: 400

What is the default administrative distance of a static route?

A.
90

B.
0

C.
1

D.
110

Answer: C
Explanation:

While the administrative distance of a route can be altered, there are default administrative
distance values assigned to various methods of learning routes. When a static route is defined, it
will have an administrative distance of 1.

An administrative distance value of 90 is the default assigned to EIGRP.

"Pass Any Exam. Any Time." - www.actualtests.com 631

 Cisco 200-301 Exam
An administrative distance value of 0 is the default assigned to directly connected routes.

An administrative distance value of 110 is the default assigned to OSPF.

Objective:

Routing Fundamentals

Sub-Objective:

Describe how a routing table is populated by different routing information sources

References:

Support > Technology Support > IP > IP Routing > Troubleshoot and Alerts > Troubleshooting
TechNotes > Route Selection in Cisco Routers

QUESTION NO: 401

Which of the following statements are true when discussing link state and distance vector routing
protocols? (Choose all that apply.)

A.
After convergence, routing advertisements are only triggered by changes in the network with
distance vector protocols

B.
Packets are routed based upon the shortest path calculated by an algorithm with link state
protocols

C.
Only one router in an OSPF area can represent the entire topology of the network

D.
Distance vector protocols send the entire routing table to a neighbor

E.
Distance vector protocols send updates regarding the status of their own links to all routers in the
network

F.
Link-state protocols place a high demand on router resources running the link-state algorithm

"Pass Any Exam. Any Time." - www.actualtests.com 632

 Cisco 200-301 Exam
G.
Distance vector protocols require a hierarchical IP addressing scheme for optimal functionality

H.
Link-state protocols use hello packets and LSAs from other routers to build and maintain the
topological database

I.
Link-state protocols require a hierarchical IP addressing scheme for optimal functionality.

Answer: B,D,F,H,I
Explanation:

The following statements are true of link-state and distance vector routing protocols:

Link state protocols like OSPF use the Shortest Path First algorithm to calculate the shortest path
based on a metric called cost, while distance vector protocols like RIP consider only hop count
when determining the best route. Running the algorithm places a high demand on router
resources. Distance vector protocols are required to send the entire routing table with each
update, while link state protocols only send updates when required by changes in the network.
Therefore, less traffic is created with link state protocols.

Sending routing advertisements after convergence only when changes occur in the network is a
characteristic of link state protocol's not distance vector protocols. With distance vector protocols,
updates occur regularly and include the entire routing table.

All routers in an OSPF area can represent the entire topology of the network, not just one.

Distance vector protocols do not send updates regarding the status of their own links to all routers
in the network. Updating link status is a characteristic of link state protocols. Distance vector
protocols send the entire routing table.

Distance vector protocols do NOT require a hierarchical IP addressing scheme for optimal
functionality. Link-state protocols do require this for optimal functionality, as it supports more
efficient route aggregation or summarization. This reduces the number of routes in the table and
the number of calculations required by the SPF algorithm, thereby lowering router resource
demand.

Objective:

Routing Fundamentals

Sub-Objective:

Compare and contrast distance vector and link-state routing protocols

"Pass Any Exam. Any Time." - www.actualtests.com 633
 Cisco 200-301 Exam
References:

Cisco>Internetworking Technology Handbook>Routing Basics>Link-State versus Distance Vector

QUESTION NO: 402

In the given exhibit, which combination shows the components of a bridge ID used for Spanning
Tree Protocol (STP)?

A.
1

B.
2

C.
3

D.
4

Answer: C
Explanation:

The bridge ID, also known as the switch ID, is used to elect the root bridge in a redundant network
"Pass Any Exam. Any Time." - www.actualtests.com 634
 Cisco 200-301 Exam
topology. The bridge ID has two components:

The switch with the lowest bridge ID is elected as the root bridge. If the same priority number is
configured on two or more switches in the network, the switch with the lowest MAC address will
become the root.

Bridge Protocol Data Units (BPDUs) communicate the details of the switch with the lowest bridge
ID in the network. The election process for the root bridge takes place every time there is a
topology change in the network. A topology change may occur due to the failure of a root bridge or
the addition of a new switch in the network. The root bridge originates BPDUs every two seconds,
which are propagated by other switches throughout the network. BPDUs are used as keepalives
between switches. If a switch stops receiving BPDUs from a neighboring switch for ten intervals
(20 seconds), it will assume a designated role for the network segment.

The combinations of the remaining options are incorrect because Virtual LAN (VLAN) numbers
and serial numbers are not components of a bridge ID.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot STP protocols

References:

Cisco Documentation > Cisco 7600 Series Cisco IOS Software Configuration Guide, 12.2SX >
Configuring STP and IEEE 802.1s MST > Understanding the Bridge ID

CCNA Routing and Switching Complete Study Guide: Exam 100-105, Exam 200-105, Exam 200-
125, 2nd Edition, Chapter 2: LAN Switching Technologies - Configure, verify, and troubleshoot
STP protocols

QUESTION NO: 403

Which of the following commands configures an SNMP host to authenticate a user by username
and send clear text notifications, the receipt of which will be acknowledged by the receiver?

A.
Router(config)# snmp-server host 192.168.5.5 informs version 3 noauth public
"Pass Any Exam. Any Time." - www.actualtests.com 635
 Cisco 200-301 Exam
B.
Router(config)# snmp-server host 192.168.5.5 traps version 3 auth public

C.
Router(config)# snmp-server host 192.168.5.5 informs version 2c public

D.
Router(config)# snmp-server host 192.168.5.5 informs version 3 authpriv public

Answer: A
Explanation:

The command snmp-server host 192.168.5.5 informs version 3 noauth CISCO will configure the
host to authenticate a user by username and send clear text notifications. The receiver will then
acknowledge receipt of the notification. The keyword informs indicates that an inform message
type will be used. Unlike a trap, an inform message is acknowledged by the receiver.

The version 3 keyword indicates that version 3 is in use, which is the ONLY version that supports
authentication and encryption. Finally, the noauth keyword specifies authentication by username
only and no encryption.

The command snmp-server host 192.168.5.5 traps version 3 auth public configures the host to
send traps rather than informs.

The command snmp-server host 192.168.5.5 informs version 2c public specifies version 2c, which
only support community string-based authentication.

The command snmp-server host 192.168.5.5 informs version 3 authpriv public specifies the
keyword authpriv, which indicates encryption will be used and authentication based on HMAC-
MD5 or HMAC-SHA algorithms.

Objective:

Infrastructure Management

Sub-Objective:

Configure and verify device-monitoring protocols

References:

Configuring SNMP Support > Understanding SNMP > SNMP Versions

Cisco IOS Network Management Command Reference > snmp-server engineID local through

"Pass Any Exam. Any Time." - www.actualtests.com 636

 Cisco 200-301 Exam
snmp trap link-status > snmp-server host

QUESTION NO: 404

What configuration is needed to span a user defined Virtual LAN (VLAN) between two or more
switches?

A.
A VTP domain must be configured.

B.
VTP pruning should be enabled.

C.
The VTP mode of operation should be server.

D.
A trunk connection should be set up between the switches.

Answer: D
Explanation:

To span a user defined VLAN between two or more switches, a trunk connection must be
established. Trunk connections can carry frames for multiple VLANs. If the link between switches
is not trunked, by default only VLAN 1 information will be switched across the link.

A VLAN trunking protocol (VTP) domain is not necessary to span VLANs across multiple switches.
VTP is used to have consistent VLAN configuration throughout the domain.

VTP pruning is used to detect whether a trunk connection is carrying unnecessary traffic for
VLANs that do not exist on downstream switches. By default, all trunk connections carry traffic
from all VLANs in the management domain. However, a switch does not always need a local port
configured for each VLAN. In such situations, it is not necessary to flood traffic from VLANs other
than the ones supported by that switch. VTP pruning enables switching fabric to prevent flooding
traffic on trunk ports that do not need it.

VTP server mode is not required for a server to span multiple switches. In VTP server mode of
operation, VLANs can be created, modified, deleted, and other VLAN configuration parameters
can be modified for the entire VTP domain. VTP messages are sent over all trunk links, and
configuration changes are propagated to all switches in the VTP domain.

"Pass Any Exam. Any Time." - www.actualtests.com 637

 Cisco 200-301 Exam
Objective:

LAN Switching Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot VLANs (normal/extended range) spanning multiple switches

References:

Cisco > Support > LAN Switching > Virtual LANS / VLAN Trunking Protocol (VLANS/VTP) >
Configure > Configuration Examples and Technotes > Configuring VLAN Trunk Protocol (VTP) >
Document ID: 98154Cisco > Catalyst 4500 Series Switch Cisco IOS Software Configuration
Guide, 12.2(25) > Understanding and Configuring VLANs, VTP, and VMPS

QUESTION NO: 405

Which two are NOT features of Cisco NAT implementation? (Choose two.)

A.
overload

B.
override

C.
overrule

D.
static NAT

E.
dynamic NAT

Answer: B,C
Explanation:

Override and overrule are NOT features of Cisco's Network Address Translation (NAT)
implementation. NAT translates internal IP address to external IP address and vice versa. NAT is
typically used by firewalls or routers.

The following are some of the characteristics of NAT:

"Pass Any Exam. Any Time." - www.actualtests.com 638
 Cisco 200-301 Exam
All of the other options are incorrect because they are valid NAT features.

With static NAT, translation mappings are created statically and are placed in the translation tables
whether or not there is traffic flowing. In this case, no registered addresses are saved because a
registered address is still required for each mapping.

With dynamic NAT, the translation table is populated as the required traffic flows through NAT-
enabled devices. In this case, a single address or multiple public addresses can be used multiple
times to represent multiple private addresses.

The overload keyword allows the ip nat inside command to translate multiple devices in the
internal network to the single address in the IP address pool. This process is also called
overloading in that the same public IP address is mapped to all private addresses from inside the
network. Since the router performing the NAT overload function will use the unique TCP source
port from each host for identification, while mapping all of them to the same public IP address, it is
sometimes referred to as Port Address Translation or PAT.

For example:

ip nat pool test 172.28.15.1 172.28.15.1 prefix 24

In this example, the NAT pool named "test" only has a range of one address.

Another variant of this command is given below, which configures NAT to overload on the address
assigned to the serial 0 interface:

ip nat inside source list 3 interface serial 0 overload

When this variation is used, the command uses a list named 3 to determine the addresses in the
pool.

Objective:

Infrastructure Services

Sub-Objective:

Configure, verify, and troubleshoot inside source NAT

References:

Cisco > Technology Support > IP > IP Routing > Design Technotes > Configuring Network
Address Translation: Getting Started > Document ID: 13772 > Quick Start Steps for Configuring

"Pass Any Exam. Any Time." - www.actualtests.com 639

 Cisco 200-301 Exam
and Deploying NAT

QUESTION NO: 406

Which classful protocols perform an automatic summarization of routes when routers send
updates across major classful network boundaries? (Choose two.)

A.
RIPv1

B.
RIPv2

C.
IGRP

D.
OSPF

E.
EIGRP

F.
BGPv4

Answer: A,C
Explanation:

The classful routing protocols Routing Information Protocol version1 (RIPv1) and Interior Gateway
Routing Protocol (IGRP) summarize routes at classful network boundaries. RIPv1 is a standard
distance vector protocol that uses hop count as a metric. IGRP is a Cisco Systems proprietary
distance vector routing protocol that has a composite metric based on bandwidth, delay, load,
reliability, and maximum transmission unit (MTU).

In classless routing protocols RIPv2, Open Shortest Path First (OSPF), Enhanced IGRP (EIGRP)
and Border Gateway Protocol version 4 (BGPv4), route summarization can be controlled manually
at any bit position in the IP address. Classless routing protocols transmit subnet mask along with
the routes, and therefore manual summarization may be required at times to keep the routing table
size in control.

It should be noted that RIPv2 and EIGRP, although classless protocols, will perform automatic

"Pass Any Exam. Any Time." - www.actualtests.com 640

 Cisco 200-301 Exam
summarization by default unless the no auto-summary command is configured. Once no auto-
summary is configured, you can manually configure summarization on any bit position in the IP
address. Since you can override auto-summarization in both RIPv2 and EIGRP, RIPv1 and IGRP
are better answers to this question.

Objective:

Routing Fundamentals

Sub-Objective:

Compare and contrast interior and exterior routing protocols

References:

Cisco > Articles > Cisco Networking Academy > CCNP 1: Advanced IP Addressing Management

QUESTION NO: 407

A newly implemented IP-based video conferencing application is causing the network to slow
down.

Which OSI layer needs to be addressed to resolve the problem?

A.
Layer 1

B.
Layer 2

C.
Layer 3

D.
Layer 4

E.
Layer 5

F.
Layer 6

G.

"Pass Any Exam. Any Time." - www.actualtests.com 641

 Cisco 200-301 Exam
Layer 7

Answer: A
Explanation:

You need to address Open System Interconnect (OSI) Layer 1, the Physical layer, to resolve the
problem. IP-based video conferencing applications are bandwidth-intensive and may cause the
network to slow down unless there is enough bandwidth to ensure proper network operation. To
resolve bandwidth problems, you may need to switch to a higher capacity network backbone,
which may require a change of cabling or media types, such as fiber optics. Cabling and network
media types are defined at OSI Layer 1.

The seven layers of the OSI model are as follows, in descending order from Layer 7 to Layer 1:

Objective:

Network Fundamentals

Sub-Objective:

Apply troubleshooting methodologies to resolve problems

References:

Cisco Documentation > Internetworking Technology Handbook > Internetworking Basics > Open
System Interconnection Reference Model

QUESTION NO: 408

You have configured a router as shown in the following output:

"Pass Any Exam. Any Time." - www.actualtests.com 642

 Cisco 200-301 Exam

Hosts on the LAN cannot receive an IP address. What is wrong?

A.
The IP address on the serial interface is incorrect.

B.
The default-router command in the DHCP pool is incorrect.

C.
An IP address needs to be configured on the FastEthernet interface.

D.
The NAT pool is not large enough.

Answer: C
Explanation:

An IP address needs to be configured on the FastEthernet interface. Dynamic Host Control

Protocol (DHCP) is used to dynamically provide IP network configurations to workstations as they
are booted up. DHCP minimizes network administration overload, allowing devices to be added to
the network with little or no manual configuration.

The router configuration in the scenario has created a DHCP address pool called POOLNAME.
The network statement in the exhibit, network 10.2.10.0 255.255.255.0, identifies the range of IP
addresses that the pool will provide to host systems (10.2.10.0 /24). However, a DHCP pool can
only provide IP addresses over a subnet to which it is directly connected. Because neither of the
interfaces in the exhibit has an IP address on the 10.2.10.0 /24 subnet, the solution is to assign
the FastEthernet0/0 interface the IP address specified in the default-router statement, 10.2.10.254
/24.

The IP address on the serial interface has no impact on the DHCP pool.

The default-router statement is correctly providing the IP address that DHCP hosts will use as their
"Pass Any Exam. Any Time." - www.actualtests.com 643
 Cisco 200-301 Exam
default gateway. The problem is not with the default-router statement, but with the lack of a correct
IP address assigned to the FastEthernet0/0 interface.

The NAT configuration in the exhibit has no impact on the DHCP pool. If the NAT pool were not
large enough, the result would be that some of the hosts would be able to get to the Internet and
others would not. For example, the output from the diagram shown below indicates that there are
fourteen addresses in the pool (205.2.1.1 to 205.2.1.14). If the network contained 30 computers,
only fourteen would be able to use the Internet at the same time because of the number of public
addresses in the pool:

ip nat pool NATPOOL 205.2.1.1 205.2.1.14 netmask 255.255.255.240

ip nat inside source list 1 pool NATPOOL

Objective:

Infrastructure Services

Sub-Objective:

Configure and verify DHCP on a router (excluding static reservations)

References:

Cisco > Support > Cisco IOS Software > Configuring the Cisco IOS DHCP Server > Configuring
DHCP Address Pools

QUESTION NO: 409

Which of the following commands could you use to verify the type of serial cable you are
connected to (DCE or DTE)?

A.
show interfaces

B.
show controllers

C.
show ip interface

D.

"Pass Any Exam. Any Time." - www.actualtests.com 644

 Cisco 200-301 Exam
show interface dce

E.
show interface switchport

Answer: B
Explanation:

The show controllers command provides hardware-related information used to troubleshoot and
diagnose issues with Cisco router interfaces. The output of the command is as follows:

routerA# show controllers serial 0

HD unit 1, idb = 0x1C44E8, driver structure at 0x1CBAC8

buffer size 1524 HD unit 1

V.35 DTE cable, clock rate 64000

The preceding output indicates that a V.35 DTE cable is currently connected to interface Serial 0,
and that a clock rate of 64000 bps has been detected from the DCE (the other side of the serial
link). When the other end is a CSU/DSU, as is usually the case, the clock rate is provided by the
CSU/DSU. The clocks stopped portion of the following output would indicate that a clock rate has
not been detected from the DCE:

routerA# show controllers serial 0

HD unit 1, idb = 0x1C44E8, driver structure at 0x1CBAC8

buffer size 1524 HD unit 1

V.35 DTE cable, clocks stopped

This condition would be rectified by configuring a clock rate on the DCE router.

The show interfaces, show ip interface, and show interface switchport commands do not display
any hardware-related information, such as connected cable types.

The show interface dce command is incorrect because this is not a valid Cisco IOS command.

Objective:

WAN Technologies

Sub-Objective:

"Pass Any Exam. Any Time." - www.actualtests.com 645

 Cisco 200-301 Exam
Describe WAN access connectivity options

References:

QUESTION NO: 410

You are the network administrator for your company. You have been assigned the task of
configuring an appropriate IP addressing scheme in the network.

Assuming that the network address is 192.16.100.0/28, what will be the number of hosts per
network in this scenario?

A.
2

B.
6

C.
14

D.
30

Answer: C
Explanation:

In this scenario, there will be 14 hosts per network. The formula for calculating the number of
hosts on a subnet is 2n - 2, where n is the number of host bits in the summary mask. The n can be
calculated by subtracting host bits from the total number of bits in a subnet mask (32). In this case,
n would be 32 - 28 = 4. Therefore, the formula to calculate the number of bits in this scenario
would be:

2(32 -28) - 2 = 24 - 2 = 14 hosts

You always subtract 2 from 2n because the all-zero-bit address is reserved for the network
address (called the network ID) and the all-one-bit address is reserved for the broadcast address.

The 192.16.100.0/28 network address would not have 30 hosts per network. The 192.16.100.0/27

"Pass Any Exam. Any Time." - www.actualtests.com 646

 Cisco 200-301 Exam
network address would actually yield 30 hosts per network. In this case, n would be 32 - 27 = 5, so
the number of host bits in the subnet mask would be 32 - 2, which is equal to 30.

The 192.16.100.0/28 network address would not have 6 hosts per network. The 192.16.100.0/29
network address would yield 6 hosts per network. In this case, n would be 32 - 29 = 3, so the
number of host bits in the subnet mask would be 8 - 2, which is equal to 6.

The 192.16.100.0/28 network address would not have 2 hosts per network. The 192.16.100.0/30
network address would yield 2 hosts per network. In this case, n would be 32 - 30 = 2, so the
number of host bits in the subnet mask would be 4 - 2, which is equal to 2.

Objective:

Network Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot IPv4 addressing and subnetting

References:

Cisco > Technology Support > IP > IP Routing > Design Technotes > IP Addressing and
Subnetting for New Users > Document ID: 13788 > Understanding IP Addresses

QUESTION NO: 411

What is the HSRP virtual router MAC address for the virtual router for HSRP group 31?

A.
0000.0c07.ac1f

B.
ac1f

C.
0c07

D.
07.ac

Answer: A

"Pass Any Exam. Any Time." - www.actualtests.com 647

 Cisco 200-301 Exam
Explanation:

The Hot Standby Router Protocol (HSRP) virtual MAC address for the virtual router for HSRP
group 31 is 0000.0c07.ac1f. A Media Access Control (MAC) address is a 6-byte value that is
unique for every networked device. MAC addresses are typically written in hexadecimal notation.
The address 0000.0c07.ac1f is a MAC address for an HSRP virtual router; this address can also
be written as 00-00-0c-07-ac-1f or 00.00.0c.07.ac.1f. Hexadecimal letters can be written as either
lowercase or uppercase letters.

The MAC address for an HSRP virtual router consists of the vendor ID, the HSRP code and the
group ID. The vendor ID corresponds to the first three bytes of the MAC address. A vendor ID of
0000.0c indicates that the device was manufactured by Cisco. The HSRP code corresponds to the
fourth and fifth bytes of the MAC address. The HSRP code for a virtual router is always equal to
07.ac. Finally, the group ID corresponds to the last byte of the MAC address. For example, a
group ID of 1f, when converted to decimal, indicates that the virtual router belongs to HSRP group
31.

Objective:

Infrastructure Services

Sub-Objective:

Configure, verify, and troubleshoot basic HSRP

References:

Internetworking Case Studies > Using HSRP for Fault-Tolerant IP Routing

QUESTION NO: 412

You manage the EIGRP subnet in your organization. You have enabled EIGRP for IPv6 on all the
routers in the EIGRP AS 260 using the following commands on all the routers:

"Pass Any Exam. Any Time." - www.actualtests.com 648

 Cisco 200-301 Exam
During verification, you discover that EIGRP for IPv6 is not running on the routers.

Which of the following should be done to fix the issue?

A.
The ipv6 address command should be executed in interface configuration mode.

B.
The ipv6 address command should be executed in router configuration mode.

C.
The eigrp router-id command should be executed in interface configuration mode.

D.
The eigrp router-id command should be executed in router configuration mode.

Answer: D
Explanation:

The eigrp router-id command should be executed in router configuration mode to fix the issue.
This command specifies a fixed router IPv4 address to the router. If this command is missing or
incorrectly configured on the router, EIGRP for IPv6 will not run properly.

Another command that you should perform so that EIGRP for IPv6 runs on the routers is the no
shutdown command. You should execute this command in interface configuration mode. The no
shutdown command is necessary because all the interfaces with EIGRP for IPv6 enabled on them
are in a shutdown state by default.

A sample configuration to implement EIGRP for IPv6 on a router is as follows:

The two options stating that the ipv6 address command should be executed on the routers are
incorrect. EIGRP for IPv6 can be configured on router interfaces without explicitly specifying a
global unicast IPv6 address. If you specify the ipv6 enable command, as in this scenario, then the
IPv6 address command is not required.

"Pass Any Exam. Any Time." - www.actualtests.com 649

 Cisco 200-301 Exam
The option stating that the eigrp router-id command should be executed in interface configuration
mode is incorrect. This command should be executed in router configuration mode instead of
interface or global configuration modes.

Objective:

Routing Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot EIGRP for IPv6 (excluding authentication, filtering, manual
summarization, redistribution, stub)

References:

Cisco IPv6 Implementation Guide, Release 15.2M&T > Implementing EIGRP for IPv6 > How to
Implement EIGRP for IPv6 > Enabling EIGRP for IPv6 on an Interface

QUESTION NO: 413

You have multiple departments sharing a common network. You are concerned about network
traffic from one department reaching another department.

What would be a solution for isolating the departments? (Choose all that apply.)

A.
Configure separate VLANs for each department.

B.
Assign a unique VTP domain for each department.

C.
Put each department in a separate collision domain.

D.
Configure trunk links between departmental switches.

E.
Configure separate subnets for each department

Answer: A,E

"Pass Any Exam. Any Time." - www.actualtests.com 650

 Cisco 200-301 Exam
Explanation:

You could either configure separate VLANs for each department or configure separate subnets for
each department. Either approach has the effect of restricting each department's traffic to its local
subnet or VLAN, unless you configure and allow inter-VLAN routing.

VLANs logically divide a switched network into multiple independent broadcast domains.
Broadcast traffic within one VLAN will never be sent to hosts in other VLANs. In this respect,
VLANs operate exactly as subnets do. The only way for hosts in different VLANs to communicate
is through a router or multilayer switch configured to perform inter-VLAN routing between the
VLANs.

The VLAN Trunking Protocol (VTP) is used to synchronize VLAN databases across multiple
switches, and is not a method for isolating departmental traffic.

Collision domains cannot be used to isolate traffic between departments. Multiple departments
cannot share a collision domain when using switches. Every port on a switch is a separate
collision domain, which allows the switch to forward more than one frame at a time. This also
reduces collisions, since each host is therefore in a separate collision domain. The switch
processes data based only on MAC addresses, and has no knowledge of which host is in which IP
subnet or department.

Trunk links are used to connect switches to other switches and to routers for the purpose of
carrying traffic from multiple VLANs, and are not a method of isolating traffic between different
departments.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot VLANs (normal/extended range) spanning multiple switches

References:

Cisco > Internetwork Design Guide > Designing Switched LAN Internetworks > Benefits of VLANs

QUESTION NO: 414

"Pass Any Exam. Any Time." - www.actualtests.com 651

 Cisco 200-301 Exam
During the process of connecting four switches to the central router and implementing VLANS
between the devices, it becomes apparent that there was a misunderstanding about which
encapsulation protocol to use on the links between the switches and the router.

If there is mismatch between the encapsulation types used on the router interface and the type
used on the connected switch port, what will be the result?

A.
The relevant switch ports will be green.

B.
The relevant switch ports will be amber.

C.
The relevant switch ports will be neither green nor amber.

D.
The relevant switch ports will be green and flashing.

Answer: C
Explanation:

If there is a mismatch between the encapsulation types used on the router interface and the type
used on the connected switch port, the link will not be functional and there will be neither an amber
nor a green light. The same outcome will be produced when there is a bad cable, an incorrect
cable type, or a lack of signal. An example of a cable mismatch would be the use of a straight-
through cable when the situation required a crossover cable, or vice versa.

When connecting switch ports to routers, there are two possible encapsulation types: the default
Interswitch Link (ISL) and the 802.1q standard. ISL is a Cisco proprietary technology; therefore, it
can only be used between Cisco products. 802.1q is an industry standard that can be used
between Cisco and non-Cisco products. If the same type is not configured on each end, the link
will not work.

The relevant switch ports will not be green. Green indicates normal operation with no activity.

The relevant switch ports will not be amber. Amber indicates the link is administratively down. The
amber light is usually flashing as well.

The relevant switch ports will not be green and flashing. This display indicates normal operation
with activity on the line.

Objective:

"Pass Any Exam. Any Time." - www.actualtests.com 652

 Cisco 200-301 Exam
LAN Switching Fundamentals

Sub-Objective:

Troubleshoot interface and cable issues (collisions, errors, duplex, speed)

References:

QUESTION NO: 415

You know that Router2 is configured for RIP. Which Cisco Internetwork Operating System (IOS)
command is used to view the current state of all active routing protocols?

A.
show ip arp

B.
debug ip rip

C.
show ip protocols

D.
show ip routing process

E.
show arp

F.
show interfaces

Answer: C
Explanation:

The show ip protocols command is used to view the current state of active routing protocols. This
command is issued from Privileged EXEC mode. The syntax of the command is as follows:

Router2# show ip protocols

Output of the command would resemble the following:

"Pass Any Exam. Any Time." - www.actualtests.com 653

 Cisco 200-301 Exam

This command shows additional information about individual protocols. The version number of RIP
being used is shown on the seventh line of the output. This output also indicates on lines 12-14
that it is routing for three networks: 201.19.0.0, 16.2.0.0, and 10.3.0.0. This means that the router
will be sending and receiving RIP updates on any interfaces that have IP addresses in those
networks.

Also note that the router at 16.2.0.10 has not sent an update in 3 minutes and 10 seconds. If an
update is not received in 50 seconds (for a total of 4 minutes), the route-flush timer (240 seconds
from the last valid update) will have expired, causing the local router to remove all networks
learned from the router at 16.2.0.10 from the routing table.

For more specific information about those interfaces, in terms such as S0 or Fa0/0, you could
execute the show ip interface brief command as shown below. The output displays the addresses
of the interfaces, which would indicate which interfaces were enabled for RIP and thus sending
and receiving updates.

The show ip arp command is incorrect because this command is executed on a router to
determine the IP and MAC addresses of hosts on a LAN connected to the router.

The debug ip rip command is incorrect because this command is used to capture RIP traffic
between the routers in real time. This command could also be used to determine the version of
RIP being used as shown in line 2 of the partial output of the command below:

"Pass Any Exam. Any Time." - www.actualtests.com 654

 Cisco 200-301 Exam
Router2#debug ip rip

RIP protocol debugging is on

*Mar 3 02:11:39.207:RIP:received packet with text authentication 234

*Mar 3 02:11:39.211:RIP:received v1 update from 122.108.0.10 on Serial0

*Mar 3 02:11:39.211:RIP: 79.0.0.0/8 via 0.0.0.0 in 2 hops

*Mar 3 02:11:40.212:RIP: ignored v2 packet from 192.168.5.6 (illegal version)

In the above output Router 2 has received a version 1 update from a router at 122.108.0.10 which
indicates that a ping to that router should succeed. It also shows what was learned from the router
at 122.108.0.10, which is the router to network 79.0.0.0/8 via 0.0.0.0. The 0.0.0.0 indicates that the
next hop for that route is the router that sent this advertising (the router at 122.108.0.10).

The output also shows that a RIP router at 192.168.5.6 sent a version 2 update that was ignored
by Router 2, which is using version 1. This mismatch of versions will prevent Router 2 from
forming an adjacency with the router at 192.168.5.6.

Note: Before running any debug command you should execute the show processes command and
verify that the CPU utilization on the router is low enough to handle the effects of running the
debug command.

The show ip routing process command is incorrect because it is not a valid Cisco IOS command.

The show arp command is used to identify the IP address to MAC address mappings the router
has leaned through the ARP broadcast process. It is helpful when you have identified errors
associated with a MAC address and you need to learn the IP address or vice versa. Sample
output is below.

router# show arp

Protocol Address Age (min) Hardware Addr Type Interface

Internet 10.0.0.3 0 0004.dd0c.ffcb ARPA Ethernet01

Internet 10.0.0.1 - 0004.dd0c.ff86 ARPA Ethernet0

The difference between the show arp command and the show ip arp command is that show arp
will also include mappings learned through non-IP protocols such as when inverse ARP is used to
learn and map DLCIs to IP addresses.

The show interface command can also be used to identify IP addresses from MAC addresses and
"Pass Any Exam. Any Time." - www.actualtests.com 655
 Cisco 200-301 Exam
vice versa, but also indicates the state of the interface; IP addresses MTU and much more about
each interface. Sample output is below.

router# show interfaces

Ethernet 0 is up, line protocol is up

Hardware is MCI Ethernet, address is 0000.0c00.750c(bia 0000.0c00.750c)

Internet address is 10.108.28.8, subnet mask is 255.255.255.0

MTU 1500 bytes, BW 10000 Kbit, DLY 100000 usec, rely 255/255, load 1/255

Objective:

Routing Fundamentals

Sub-Objective:

Compare and contrast distance vector and link-state routing protocols

References:

Cisco > Cisco IOS IP Routing Protocols Command Reference > IP Routing Protocol-Independent
Commands: S through T > show ip protocols

QUESTION NO: 416

You are the network administrator for your company. You want to implement a routing protocol
that can support hierarchical routing, multiple vendor environments, and authentication, and
provides fast convergence.

Which routing protocol will you implement?

A.
Enhanced Interior Gateway Routing Protocol (EIGRP)

B.
Open Shortest Path First (OSPF)

C.
Routing Information Protocol version 2 (RIPv2)

"Pass Any Exam. Any Time." - www.actualtests.com 656

 Cisco 200-301 Exam
D.
Interior Gateway Routing Protocol (IGRP)

Answer: B
Explanation:

Open Shortest Path First (OSPF) is the routing protocol that accomplishes this task. The following
are characteristics of OSPF:

In OSPF networks, a hierarchical IP addressing design and the use of areas yields the following
benefits:

Electing a designated router (DR) in each area reduces update traffic because all updates occur
through the DR. The DR election is based on the router ID. This is the highest IP address of the
active interfaces when no loopback interface is configured. When a loopback address is present,
its address is used for the purposes of DR election. In either case, the router with highest router ID
becomes the DR.

EIGRP and IGRP are incorrect because they are Cisco-proprietary routing protocols, and thus do
not support multiple vendor environments. They also do not support hierarchical routing. IGRP is
no longer being supported by Cisco.

RIPv2 is incorrect because it does not support hierarchical routing or provide fast convergence.

Objective:

Routing Fundamentals

Sub-Objective:

Compare and contrast distance vector and link-state routing protocols

References:

Cisco > Articles > Cisco Certification > CCNP > Shooting Trouble with IPCisco > Internetworking
Technology Handbook > Open Shortest Path First (OSPF)

QUESTION NO: 417

"Pass Any Exam. Any Time." - www.actualtests.com 657

 Cisco 200-301 Exam
Which feature is NOT provided by flow control?

A.
buffering

B.
windowing

C.
full duplex transmission

D.
source-quench messaging

Answer: C
Explanation:

The full duplex mode of transmission is not provided by flow control. Full duplex transmission is an
Ethernet concept where hosts are able to send and receive at the same time. There are no
collisions in a full-duplex Ethernet network. A dedicated switch port is required for each node in a
full-duplex Ethernet network. Both the host's NIC and the switch port must be capable of operating
in full-duplex mode. When full duplex is implemented, no collisions will occur on the link between
the switch and the device. That will be one error condition that can be removed from consideration
when troubleshooting a full duplex link.

Flow control is a function that prevents network congestion. It does so by ensuring that the
transmitting device does not flood the receiving device with data. The following statements are
true regarding flow control:

Flow control generally operates at the Transport layer in the OSI model. The Transport layer is
responsible for error-free and sequential delivery of data. This layer is used to manage data
transmission between devices.

Buffering is a method by which network devices use to save temporary overflows of excess data
into the memory. The data is stored in the memory until it is processed.

Source-quench messages are used by the devices that receive the data to avoid buffer overflow.

Windowing is a scheme in which an acknowledgement is required by the source device from the
destination after the transmission of a fixed number of packets.

Objective:

Network Fundamentals
"Pass Any Exam. Any Time." - www.actualtests.com 658
 Cisco 200-301 Exam
Sub-Objective:

Compare and contrast OSI and TCP/IP models

References:

Cisco Documentation > Internetworking Technology Handbook > Routing Basics > Internet
Protocols > TCP

QUESTION NO: 418

Which device creates broadcast domains and enables communication across separate broadcast
domains?

A.
router

B.
switch

C.
hub

D.
access points

Answer: A
Explanation:

A router allows communication across separate broadcast domains. A broadcast domain is group
of hosts and network devices in which a broadcast frame sent by one host can be received by all
of the other hosts in the broadcast domain. A router determines the path to other destination
networks, and forwards data packets to the next hop along this path. A router operates at Layer 3
of the Open System Interconnect (OSI) layered communication model and uses an Internet
Protocol (IP) address hierarchy to identify and route data through source and destination devices.

A switch does not allow communication across separate broadcast domains. A switch creates
collision domains and enables communications across different collision domains. A collision
domain is a logical group of hosts and network devices where packets can potentially collide with
one another, causing a communications disruption. Switches forward broadcasts so they do not
form a separate broadcast domain unless Virtual LANs (VLANs) are created.

"Pass Any Exam. Any Time." - www.actualtests.com 659

 Cisco 200-301 Exam
A hub does not allow communication across separate broadcast domains. A hub transmits frames,
which means that they neither form separate collision or broadcast domains nor allow
communication across these domains. Hubs are multiport devices that allow consolidation of
various LAN segments and amplify signals that pass through them. Hubs operate at OSI Layer 1.

An access point does not allow communication across separate broadcast domains. Access points
(APs) are OSI Layer 2 wireless hubs that allow client hosts to connect to the backbone network
wirelessly.

Objective:

Network Fundamentals

Sub-Objective:

Describe the impact of infrastructure components in an enterprise network

References:

Cisco > Home > Internetworking Technology Handbook > Internetworking Basics> Bridging and
Switching Basics

QUESTION NO: 419

Which of the following is NOT a dynamic table maintained by a router running the EIGRP routing
protocol?

A.
topology table

B.
CAM table

C.
routing table

D.
neighbor table

Answer: B
Explanation:

"Pass Any Exam. Any Time." - www.actualtests.com 660

 Cisco 200-301 Exam
All are tables maintained by a router running the EIGRP routing protocol except a Content
Addressable Memory (CAM) table. This table is only present on a switch. It is used to maintain the
two MAC addresses involved in a conversation between computers so that the conversation can
be routed once and then switched thereafter which is a much faster process.

EIGRP maintains three dynamic tables in RAM:

Objective:

Routing Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot EIGRP for IPv4 (excluding authentication, filtering, manual
summarization, redistribution, stub)

References:

Cisco > Support > IP > IP Routing > Technology Information > Technology White Paper >
Enhanced Interior Gateway Routing Protocol > Document ID: 16406 > Feasible Distance,
Reported Distance, and Feasible Successor

CCNA ICND2 Official Exam Certification Guide (Cisco Press, ISBN 1-58720-181-X), Chapter 10:
EIGRP, pp. 392-395.

QUESTION NO: 420

Which of the following protocols is responsible for negotiating upper-layer protocols that will be
carried across a Point-to-Point Protocol (PPP) connection?

A.
LCP

B.
NCP

C.
LMI

D.
ISDN

"Pass Any Exam. Any Time." - www.actualtests.com 661

 Cisco 200-301 Exam
Answer: B
Explanation:

Network Control Protocol (NCP) is responsible for negotiating upper-layer protocols that will be
carried across the PPP connection. NCP defines how the two PPP peers negotiate with the
network layer protocols, such as IP and IPX, which will be used across the PPP connection.

Link Control protocol (LCP) is not responsible for negotiating upper-layer protocols that will be
carried across a PPP connection. Link Control protocol (LCP) has the primary responsibility of
negotiating and maintaining the PPP connection. LCP, defined in Request for Comments (RFCs)
1548 and 1570, has the primary responsibility to establish, configure, authenticate, and test a PPP
connection. LCP negotiates the following when setting up a PPP connection:

Local Management Interface (LMI) is not responsible for negotiating upper-layer protocols that will
be carried across the PPP connection. LMI is a characteristic of a frame relay connection. There
are three types of LMIs supported by Cisco routers:

LMI has nothing to do with PPP connections.

Integrated Services Digital Network (ISDN) is a type of WAN connection and has nothing to do
with PPP connections.

Objective:

WAN Technologies

Sub-Objective:

Configure and verify PPP and MLPPP on WAN interfaces using local authentication

References:

Cisco > Internetworking Technology Handbook > Point-to-Point Protocol

Cisco > Support > Technology Support > WAN > Point-to-Point Protocol (PPP) > Design > Design
Technotes > Understanding and Configuring PPP CHAP Authentication > Document ID: 25647

CCNA ICND2 Official Exam Certification Guide (Cisco Press, ISBN 1-58720-181-X), Chapter 12:
Point-to-Point WANs, pp. 436-441.

"Pass Any Exam. Any Time." - www.actualtests.com 662

 Cisco 200-301 Exam
QUESTION NO: 421

How many collision and broadcast domains are in the network shown below?

A.
4 collision domains and 3 broadcast domains

B.
7 collision domains and 2 broadcast domains

C.
8 collision domains and 1 broadcast domain

D.
6 collision domains and 2 broadcast domains

Answer: B
Explanation:

There are 7 collision domains and 2 broadcast domains. They are labeled as shown below. Each
router interface makes a broadcast domain and each switch interface creates a collision domain.
The hub interfaces do neither.

"Pass Any Exam. Any Time." - www.actualtests.com 663

 Cisco 200-301 Exam

Objective:

Routing Fundamentals

Sub-Objective:

Describe the routing concepts

References:

Internetwork Design Guide -- Designing Switched LAN Internetworks > Comparison of LAN
Switches and Routers

QUESTION NO: 422

Which Cisco IOS command would you use to troubleshoot IP addressing problems?

"Pass Any Exam. Any Time." - www.actualtests.com 664

 Cisco 200-301 Exam
A.
ipconfig /all

B.
show config

C.
show running-config

D.
show config-file

Answer: C
Explanation:

The show running-config command will help troubleshoot IP addressing problems, because it
shows the details of the router configuration, including the IP address configured on each
interface.

The ipconfig /all command is a Microsoft command used to verify IP address configuration on a
workstation running Windows. This is not a valid Cisco command.

The show config command has been replaced by the show startup-config command. Both of these
commands are used to display the startup configuration of the router stored in NVRAM.

The show config-file command is not a valid Cisco command.

Objective:

Routing Fundamentals

Sub-Objective:

Troubleshoot basic Layer 3 end-to-end connectivity issues

References:

Cisco > Cisco IOS Configuration Fundamentals Command Reference > show gsr through
showmon > show running-config

"Pass Any Exam. Any Time." - www.actualtests.com 665

 Cisco 200-301 Exam
QUESTION NO: 423

Your network consists of one HSRP group of six routers. All of the routers are functioning properly.
The network has been stable for several days.

In which HSRP state are most of the routers?

A.
Learn

B.
Listen

C.
Standby

D.
Active

Answer: B
Explanation:

If all of the routers in the Hot Standby Routing Protocol (HSRP) group are functioning properly,
then most of the routers in the group are in the listen state. Four routers will be in the listen state,
one router will be in the standby state, and one router will be in the active state.

HSRP is used by a group of routers to create the appearance of a virtual router with which end
stations can communicate in the event that the default gateway becomes unavailable. The active
router is responsible for forwarding packets that are sent to the virtual router. The standby router is
responsible for assuming the role of active router should the active router fail or become
unavailable. All other HSRP routers monitor the hello messages sent by the active and standby
routers. Should the active and standby routers both become unavailable, the HSRP router with the
highest priority is elected to become the active router by default. For routers with equal priority
values, the router with the highest IP address becomes the active router.

HSRP routers can exist in one of the following six states:

All HSRP routers start in the initial state. A router in the learn state is waiting for its first hello
message from the active router so that it can learn the virtual router's IP address. When the hello
message is received and the virtual router's IP address is discovered, the HSRP router is in the
listen state. A router in the listen state listens for hello messages from the active and standby
routers. If an election for a new active router and a new standby router is required, then an HSRP
router will enter the speak state and begin transmitting hello messages. The standby state is
reserved for the standby router, and the active state is reserved for the active router. Only routers
in speak, standby, and active states will transmit hello packets.
"Pass Any Exam. Any Time." - www.actualtests.com 666
 Cisco 200-301 Exam
Objective:

Infrastructure Services

Sub-Objective:

Configure, verify, and troubleshoot basic HSRP

References:

Cisco > Home > Technology Support > IP > IP Application Services > Design > Design Technotes
> Hot Standby Router Protocol Features and FunctionalityCisco > Cisco IOS IP Application
Services Configuration Guide, Release 12.4 > Part 1: First Hop Redundancy Protocols >
Configuring HSRP

QUESTION NO: 424

What is the default Administrative Distance (AD) value for an Enhanced Interior Gateway Routing
Protocol (EIGRP) summary route?

A.
1

B.
5

C.
90

D.
20

Answer: B
Explanation:

The default Administrative Distance (AD) value for an Enhanced Interior Gateway Routing
Protocol (EIGRP) summary route is 5. The following table shows the AD values for different
protocols and their IP routes:

"Pass Any Exam. Any Time." - www.actualtests.com 667

 Cisco 200-301 Exam

The option 1 is incorrect because this is the default AD value for static routes.

The option 90 is incorrect because this is the default AD value for internal EIGRP routes.

The option 20 is incorrect because this is the default AD value for external BGP routes.

Objective:

Routing Fundamentals

Sub-Objective:

Compare and contrast interior and exterior routing protocols

References:

QUESTION NO: 425

You are the network administrator for your company. The network at the company's office is due
to be upgraded, and you have been assigned the responsibility of identifying the requirements for
designing the network. You need to provide network connectivity to 200 client computers that will
reside in the same sub network, and each client computer must be allocated dedicated bandwidth.

Which device should you use to accomplish the task?

"Pass Any Exam. Any Time." - www.actualtests.com 668

 Cisco 200-301 Exam
A.
router

B.
hub

C.
switch

D.
firewall

Answer: C
Explanation:

You should use a switch to accomplish the task in this scenario. A switch is used to provide
dedicated bandwidth to each node by eliminating the possibility of collisions on the switch port
where the node resides. Switches work at Layer 2 in the Open System Interconnection (OSI)
model and perform the function of separating collision domains. When a node resides in its own
collision domain, the possibility of collisions (which slow throughput due to the subsequent but
necessary retransmission) is eliminated. The advantage of using a switch instead of a hub is that a
switch provides dedicated bandwidth to each client, while all connected clients share the
bandwidth on a hub.

A router will not be a suitable device in this scenario. Routers are Network layer devices that are
used to separate broadcast domains and connect two or more different subnets or network types.
There is only a single subnet in the scenario so a router is not required.

A hub will not be a suitable device in this scenario. Hubs are Physical layer (Layer 1) devices that
are used to connect clients to the network. A hub simply broadcasts data to all its ports; it does not
create separate collision domains. All clients connected to a hub are a member of a single collision
domain. In a scenario where a number of devices connected to a hub are experiencing network
slowdowns, especially when using network-based applications, replacing the hub with a switch is
almost always the best solution.

A firewall will not be a suitable device in this scenario. A firewall is a device used to secure the
network against unauthorized intrusions and malicious attacks.

Objective:

Network Fundamentals

Sub-Objective:

Describe the impact of infrastructure components in an enterprise network

"Pass Any Exam. Any Time." - www.actualtests.com 669

 Cisco 200-301 Exam
References:

Cisco Documentation > Internetwork Design Guide > Internetworking Design Basics

QUESTION NO: 426

The following is a partial output of the show interfaces command:

What does the Serial 0 is up, line protocol is down statement signify in the output? (Choose all that
apply.)

A.
the shutdown interface command is present in the router configuration

B.
a cable is unplugged

C.
the interface is displaying normal operation

D.
there are no problems with physical connectivity

E.
there is a configuration problem in the local or remote router

"Pass Any Exam. Any Time." - www.actualtests.com 670

 Cisco 200-301 Exam
Answer: D,E
Explanation:

The Serial 0 is up, line protocol is down statement in the output signifies the following:

The option stating that the shutdown interface command is present in the router configuration is
incorrect because if the shutdown interface command is present in the router configuration, the
message displayed would be Serial 0 is administratively down, line protocol is down.

The option stating that a cable is unplugged is incorrect because that would be indicated by Serial
0 is down, line protocol is down. Physical problems such as a bad cable or cable unplugged are
addressed in the first part of the output (serial0 is up/down).

The option stating that the message refers to normal operation of the interface is incorrect
because the line protocol is shown as down, which indicates a problem.

Objective:

Routing Fundamentals

Sub-Objective:

Troubleshoot basic Layer 3 end-to-end connectivity issues

References:

QUESTION NO: 427

Which command would you use to see which interfaces are currently operating as trunks?

A.
show interface switchports

B.
show trunk interface

C.
show interfaces trunk

D.

"Pass Any Exam. Any Time." - www.actualtests.com 671

 Cisco 200-301 Exam
show switchport trunk

Answer: C
Explanation:

The show interfaces trunk command displays a list of interfaces currently operating as trunks, and
their configuration (such as supported VLANs or frame tagging method). Sample output would
resemble the following:

Switch# show interfaces trunk

Port Mode Encapsulation Status Native vlan

Gi0/1 desirable 802.1q trunking 1

Gi0/2 desirable 802.1q trunking 1

Port Vlans allowed on trunk

Gi0/1 1-4094

Gi0/2 1-4094

<<output omitted>>

This output indicates that switch ports Gi0/1 and Gi0/2 are both currently operating as trunks
(Status), and that 802.1q frame tagging is being used on the trunk links.

The remaining options are incorrect because they are not valid Cisco IOS commands.

Objective:

Infrastructure Management

Sub-Objective:

Use Cisco IOS tools to troubleshoot and resolve problems

References:

"Pass Any Exam. Any Time." - www.actualtests.com 672

 Cisco 200-301 Exam
QUESTION NO: 428

Which Cisco Internetwork Operating System (IOS) command is used to view information about
Open Shortest Path First (OSPF) routing processes?

A.
show ip ospf database

B.
show ip ospf statistics

C.
show ip ospf

D.
show ip ospf traffic

Answer: C
Explanation:

The show ip ospf command is used to view information about the OSPF routing processes. It does
so by displaying the collection of link states present in the database. The syntax of the command
is as follows:

Router# show ip ospf [process-id]

The process-id parameter of the command specifies the process ID. The output of the command is
as follows:

"Pass Any Exam. Any Time." - www.actualtests.com 673

 Cisco 200-301 Exam

The show ip ospf database command is incorrect because this command is used to view the
OSPF database for a specific router.

The show ip ospf statistics command is incorrect because this command is no longer valid in IOS
version 12.4.

The show ip ospf traffic command is incorrect because this command is no longer valid in IOS
version 12.4.

Objective:

Routing Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot single area and multi-area OSPFv2 for IPv4 (excluding
authentication, filtering, manual summarization, redistribution, stub, virtual-link, and LSAs)

References:

QUESTION NO: 429

"Pass Any Exam. Any Time." - www.actualtests.com 674

 Cisco 200-301 Exam
What is the term used for the Ethernet communication mechanism by which hosts can send and
receive data simultaneously?

A.
full-duplex

B.
multiplex

C.
half-duplex

D.
duplex

Answer: A
Explanation:

Full-duplex communication occurs when workstations can send and receive data simultaneously.
To support full-duplex communication, both communicating hosts should be configured to transmit
in full-duplex mode. With the use of full-duplex communication, the bandwidth can effectively be
doubled. Hubs are not capable of handling full-duplex communication, and you need a dedicated
switch port to allow full-duplex communication.

Half-duplex is the term used for the Ethernet communication mechanism when hosts can send or
receive data, but not simultaneously.

It is important that the switch and the device connected to the switch have the same duplex and
speed settings, or there will intermittent connectivity and loss of connection. To verify the duplex
and speed settings on a switch, execute the show interfaces command, specifying the interface
and the setting can be verified (as shown in line 8 in the output below):

switch# show interface fastethernet 0/3

Fast Ethernet 0/3 is down, line protocol is down (not connect)

Hardware is Fast Ethernet, address is 00e0.1e3e.2a02

MTU 1500 bytes, BW 10000 Kbit, DLY 100 usec, rely 1/255, tx load

1/255, rxload 1/255

Encapsulation ARPA, loopback not set,

"Pass Any Exam. Any Time." - www.actualtests.com 675

 Cisco 200-301 Exam
Keepalive set (10 sec)

Half-duplex, 100Mb/s

ARP type: ARPA, ARP Timeout 04:00:00

From the output above it can be seen that the switch interface is set for half duplex and the speed
is set for 100Mb/s. This means that if the host connected to this switch port is set differently, for
example set to 1 Gb/s because it has a 1 Gb NIC, the host and the switch interface will not
communicate and the host will not be able to connect to the network.

Multiplex is the term used when multiple signals are combined to be transferred via one signal.

Duplex implies that there are two communication paths. However, the term does not specify the
required functionality, which is full duplex.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Describe and verify switching concepts

References:

Cisco > Support > Technology Support > LAN Switching > Ethernet > Design > Design Technotes
> Configuring and Troubleshooting Ethernet 10/100/1000Mb Half/Full Duplex Auto-Negotiation >
Document ID: 10561

QUESTION NO: 430

Which two statements are TRUE of default routes? (Choose two.)

A.
Default routes are used for routing packets destined only for networks that are listed in the routing
table.

B.
Default routes are used for routing packets destined for networks that are not listed in the routing
"Pass Any Exam. Any Time." - www.actualtests.com 676
 Cisco 200-301 Exam
table.

C.
Default routes should not be used in a stub network.

D.
Default routes are ideal for use in stub networks.

E.
Network security is increased by using default routes.

Answer: B,D
Explanation:

Default routes are to route packets that are destined for networks not listed in the routing table.
Also, default routes are ideal for use in stub networks. Stub networks are those that have only one
adjacent router interface and therefore only one interface to send any packet, regardless of
destination. When used in this fashion the default route will be the only route in the routing table.

The following statements are also true of default routes:

The option stating that default routes are used to route packets destined only for networks that are
listed in the routing table is incorrect. Default routes are used for routing packets that are destined
for networks not listed in the routing table.

The option stating that default routes should not be used in a stub network is incorrect. Default
routes are helpful in topologies where it is not necessary to learn specific networks, making them
ideal for use in a stub network.

The option stating that network security is increased by using default routes is incorrect. Default
routes are not concerned with enhancing network security.

Objective:

Routing Fundamentals

Sub-Objective:

Describe the routing concepts

References:

Cisco > Technology Support > IP > IP Routing > Design > Design Technotes > Configuring a
Gateway of Last Resort Using IP Commands > Document ID: 16448 > Flag a Default Network

"Pass Any Exam. Any Time." - www.actualtests.com 677

 Cisco 200-301 Exam

QUESTION NO: 431

The following shows the partial output of the show cdp neighbors command:

DevicID Local Intrfce Holdtme Capability Platform Port ID

lab-7206 Eth 0 157 R 7206VXR Fas 0/0/0

lab-as5300-1 Eth 0 163 R AS5300 Fas 0

lab-as5300-2 Eth 0 159 R AS5300 Eth 0

lab-as5300-3 Eth 0 122 R AS5300 Eth 0

lab-as5300-4 Eth 0 132 R AS5300 Fas 0/0

lab-3621 Eth 0 140 R S 3631-telcoFas 0/0

008024 2758E0 Eth 0 132 T CAT3000 1/2

lab-400-1 Eth 0 130 r FH400 Fas 0/0

What does "r" represent in this output?

A.
Router

B.
Route bridge

C.
Hub

D.
Repeater

Answer: D
Explanation:

The "r" in the output of the show cdp neighbors command is a capability code that represents a
repeater. The capability codes from the output of the show cdp neighbors command along with
their descriptions are:

Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge

"Pass Any Exam. Any Time." - www.actualtests.com 678

 Cisco 200-301 Exam
S - Switch, H - Host, I - IGMP, r - Repeater

The show cdp neighbors command is used to view details about neighboring devices discovered
by Cisco Discovery Protocol (CDP). The following code is the full output of the command:

Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge

S - Switch, H - Host, I - IGMP, r - Repeater

DevicID Local Intrfce Holdtme Capability Platform Port ID

lab-7206 Eth 0 157 R 7206VXR Fas 0/0/0

lab-as5300-1 Eth 0 163 R AS5300 Fas 0

lab-as5300-2 Eth 0 159 R AS5300 Eth 0

lab-as5300-3 Eth 0 122 R AS5300 Eth 0

lab-as5300-4 Eth 0 132 R AS5300 Fas 0/0

lab-3621 Eth 0 140 R S 3631-telcoFas 0/0

008024 2758E0 Eth 0 132 T CAT3000 1/2

lab-400-1 Eth 0 130 r FH400 Fas 0/0

The fields in the output are as follows:

Device ID: The ID, Media Access Control (MAC) address or the serial number of the neighboring
device.

Local Intrfce: The protocol which the connectivity media uses.

Holdtme: The time duration for which the CDP advertisement will be held back by the current
device from a transmitting router before it gets discarded.

Capability: The type of device discovered by the CDP. It can have the following values:

Platform: The product number of the device.

Port ID: The protocol and port number of the device.

The "r" in the output does not represent a router. A router would be represented by a capital "R."

The "r" in the output does not represent a route bridge. A source route bridge would be
represented by a capital "B."

"Pass Any Exam. Any Time." - www.actualtests.com 679

 Cisco 200-301 Exam
The "r" in the output does not represent a hub. The show cdp neighbors command does not
include a capability code for this device.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Configure and verify Layer 2 protocols

References:

Cisco > Cisco IOS Network Command Reference, Release 12.4 > show cdp neighbors

QUESTION NO: 432

Which of the following splits the network into separate broadcast domains?

A.
bridges

B.
VLANs

C.
switches

D.
hubs

Answer: B
Explanation:

Virtual LANs (VLANs) split the network into separate broadcast domains, as would a router.
VLANs are a software implementation embedded in a switch's software that allows the switch's
hardware to switch packets only to ports that belong to the same VLAN.

Neither a switch nor a bridge splits the network into separate broadcast domains. Both a switch
and a bridge are used to create collision domains for each connected node. Collision domains
confine traffic destined to or coming from a particular host to the switch port of that node in the
switch. This reduces collisions, which in turn decreases retransmissions and elevates throughput.
"Pass Any Exam. Any Time." - www.actualtests.com 680
 Cisco 200-301 Exam
Switches work at Layer 2 in the OSI model and perform the function of separating collision
domains. Neither switches nor bridges filter broadcasts and distribute them across all ports.

A hub does not split the network into separate broadcast domains. A hub regenerates signal when
it passes through its ports, which means that it acts as a repeater and port concentrator only. Hubs
and repeaters are Layer 1 devices that can be used to enlarge the area covered by a single LAN
segment, but cannot be used to segment the LAN as they have no intelligence with regards to
either MAC addresses or IP addresses. Hubs provide a common connection point for network
devices, and connect different network segments. Hubs are generally used for LAN segmentation.
Hubs work at Layer 1 of the OSI model, which is the physical layer. Hubs do not filter broadcasts
or create collision domains.

Objective:

Network Fundamentals

Sub-Objective:

Describe the impact of infrastructure components in an enterprise network

References:

Cisco Documentation > Internetworking Case Studies > LAN Switching

QUESTION NO: 433

Users on the LAN are unable to access the Internet. How would you correct the immediate
problem?

"Pass Any Exam. Any Time." - www.actualtests.com 681

 Cisco 200-301 Exam

Router# show ip interface brief

Interface IP-Address OK? Method Status Protocol

FastEthernet 0/0 unassigned YES unset down down

FastEthernet 0/1 172.16.1.254 YES NVRAM up up

Serial0/0 200.16.4.25 YES NVRAM administratively down down

Serial0/1 unassigned YES unset down down

A.
Configure a bandwidth on the serial interface.

B.
Perform a no shutdown command on the serial interface.

C.
Configure a private IP address on the Fastethernet0/0 LAN interface.

D.
Change the IP address on the serial interface.

Answer: B
Explanation:

The output indicates that the serial interface leading to the Internet is administratively down. All
router interfaces are disabled by default due to the presence of a shutdown command in the
running configuration. The no shutdown command removes this configuration, and the interface
becomes active. The command sequence is:

"Pass Any Exam. Any Time." - www.actualtests.com 682

 Cisco 200-301 Exam
Router(config)# interface serial0/0

Router(config-if)# no shutdown

Although it was not the problem in the scenario, the S0/0 interface could also cause an error if it is
configured as shown in this output:

Interface IP-Address OK? Method Status Protocol

Serial0/0 200.16.4.25 YES NVRAM up down

In this example, the S0/0 interface has been enabled, and while there is Layer 1 connectivity (the
Status column), Layer 2 is not functioning (the Protocol column). There are two possible reasons
for this result:

Configuring a bandwidth on the serial interface is incorrect because the output indicates the
interface is administratively down, which does not pertain to bandwidth.

Configuring a private IP address on the Fastethernet0/0 LAN interface is incorrect because the
output indicates the problem is with the disabled serial interface.

The IP address on the serial interface may or may not be valid, but it is not the immediate cause of
the connectivity problem. The serial interface is disabled.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Troubleshoot interface and cable issues (collisions, errors, duplex, speed)

References:

Cisco > Support > Administrative Commands > shutdown

QUESTION NO: 434

Which Cisco Internetwork Operating System (IOS) command is used to copy the configuration

"Pass Any Exam. Any Time." - www.actualtests.com 683

 Cisco 200-301 Exam
stored in Random Access Memory (RAM) to Non-Volatile Random Access Memory (NVRAM)?

A.
router# copy running-config startup-config

B.
router(config)# copy running-config startup-config

C.
router# copy startup-config running-config

D.
router(config)# copy startup-config running-config

Answer: A
Explanation:

The router# copy running-config startup-config command is used to copy the configuration stored
in Random Access Memory (RAM) to Non-Volatile Random Access Memory (NVRAM). This
command is issued in privileged EXEC mode. The syntax of the command is as follows:

router# copy running-config startup-config

The parts of the command are as follows:

The router(config)# copy running-config startup-config command is incorrect because the copy run
start command (abbreviated) is not issued in global configuration mode. It is executed in privileged
EXEC mode.

The router# copy startup-config running-config command is incorrect because this command is
used to copy the configuration stored in NVRAM to RAM.

The router(config)# copy startup-config running-config command is incorrect because neither the
copy run start nor the copy start run commands are executed in global configuration mode.
Moreover, the copy startup-config running-config command is used to copy the configuration
stored in NVRAM to RAM.

Objective:

Infrastructure Management

Sub-Objective:

Perform device maintenance

"Pass Any Exam. Any Time." - www.actualtests.com 684

 Cisco 200-301 Exam
References:

Cisco > Support > IOS and Configuration Basics > Saving Configuration Changes

QUESTION NO: 435

You have executed the following commands on a switch:

Switch64(config)# interface range gigabitethernet2/0/1 -2

Switch64(config-if-range)# switchport mode access

Switch64(config-if-range)# switchport access vlan 10

Switch64(config-if-range)# channel-group 5 mode auto

In which of the following situations will Switch64 create an Etherchannel?

A.
If the other switch is set for desirable mode

B.
If the other switch is set for auto mode

C.
If the other switch is set for on mode

D.
If the other switch is set for passive mode

Answer: A
Explanation:

The Etherchannel will be created if the other end is set to desirable mode. The configuration
shown in the example is using Port Aggregation protocol (PAGP). This protocol has two settings:
desirable and auto. Two ends will negotiate and will only create an Etherchannel under two
conditions: if one end is set to auto and the other end is set to desirable, or if both ends are set for
desirable.

It will not form an Etherchannel if the other end is set to auto mode. When both ends are set to
auto mode, an Etherchannel will not form.

"Pass Any Exam. Any Time." - www.actualtests.com 685

 Cisco 200-301 Exam
It will not form an Etherchannel if the other end is set to on mode. On mode disables negotiation of
any kind, which will prevent an Etherchannel from forming unless the other end is also set for on.

It will not form an Etherchannel if the other end is set to passive mode. Passive is a setting used in
Link Aggregation Protocol (LACP). The two protocols are not compatible.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot (Layer 2/Layer 3) EtherChannel

References:

Catalyst 3750-X and 3560-X Switch Software Configuration Guide, Release 12.2(55)SE >
Chapter: Configuring EtherChannels

QUESTION NO: 436

Which Network Address Translation (NAT) term is used for the IP address that is assigned to a
host on the inside network?

A.
Inside local address

B.
Inside global address

C.
Outside local address

D.
Outside global address

Answer: A
Explanation:

An inside local address is the NAT term that is used to describe the IP address assigned to a host
on the inside network. It is usually a private IP address.

"Pass Any Exam. Any Time." - www.actualtests.com 686

 Cisco 200-301 Exam
An inside global address is the registered IP address assigned by the ISP, which represents one
or more inside local IP addresses externally.

An outside local address is the IP address of an external host as it appears to the internal network.

An outside global address is the IP address assigned to a host on the external network by the host
owner. The address is allocated from a globally routable address space.

NAT enables companies to use one IP addressing scheme within their network but translate those
IP addresses for external communication. Static NAT assigns a permanent one-to-one mapping of
local addresses to global addresses. Dynamic NAT assigns address mappings by using a pool of
available addresses. NAT overloading or Port Address Translation (PAT) reduces the number of
global addresses required by allowing multiple local hosts to share a global address.

Objective:

Infrastructure Services

Sub-Objective:

Configure, verify, and troubleshoot inside source NAT

References:

Cisco > Support > Technology Support > IP > IP Addressing Services > Design > Design
TechNotes > NAT: Local and Global Definitions

Cisco > Articles > Network Technology > General Networking > Network Address Translation

QUESTION NO: 437

The workstation at 10.0.1.3 sends a packet to the workstation at 10.1.1.3.

"Pass Any Exam. Any Time." - www.actualtests.com 687

 Cisco 200-301 Exam

When the packet leaves the R2 router, what addresses will be located in the header? (Choose
two.)

A.
Source MAC bb.bb.bb.bb.bb.bb Dest MAC ab.ab.ab.ab.ab.ab

B.
Source MAC dd.dd.dd.dd.dd.dd Dest MAC ab.ab.ab.ab.ab.ab

C.
Source MAC ee.ee.ee.ee.ee.ee Dest MAC ab.ab.ab.ab.ab.ab

D.
Source IP 10.0.1.3 Dest IP 10.1.1.3

E.
Source IP 10.0.1.1 Dest IP 10.1.1.2

F.
Source IP 10.0.1.2 Dest IP 10.1.1.3

G.
Source IP 10.0.1.1 Dest IP 10.1.1.3

Answer: B,D
Explanation:

When the packet leaves the R2 router, the addresses that will be located in the header are:

Source MAC dd.dd.dd.dd.dd.dd

Dest MAC ab.ab.ab.ab.ab.ab

"Pass Any Exam. Any Time." - www.actualtests.com 688

 Cisco 200-301 Exam
Source IP 10.0.1.3

Dest IP 10.1.1.3

If we executed the ipconfig/all command on the computer located at 10.1.1.3/24, it would look
somewhat like what is shown below. The router interface (10.1.1.1/24) would use an ARP
broadcast to determine the MAC address associated with the IP address 10.1.1.3/24 and it would
be returned as ab.ab.ab.ab.ab. The router interface would then encapsulate the packet in a frame
addressed to ab.ab.ab.ab.ab.

The source and destination IP address never change as the packet is routed across the network.
The MAC address will change each time a router sends the packet to the next router or to the
ultimate destination. The switches do not change either set of addresses in the header; they just
switch the frame to the correct switch port according to the MAC address table. Therefore, when
the packet leaves R2, the source MAC address will be that of R2, and the destination will be that
of the workstation at 10.1.1.3. The IP addresses will be those of the two workstations, 10.0.1.3 and
10.1.1.3.

When the workstation at 10.0.1.3 starts the process, it will first determine that the destination
address is in another subnet, and will send the packet to its default gateway at 10.0.1.2. It will
perform an ARP broadcast for the MAC address that goes with 10.0.1.2, and R1 will respond with
its MAC address, bb.bb.bb.bb.bb.bb.

After R2 determines the next-hop address to send to 10.0.1.3 by parsing the routing table, it will
send the packet to R1 at 10.0.6.2. When R2 receives the packet, R2 will determine that the
network 10.0.1.0/24 is directly connected and will perform an ARP broadcast for the MAC address
that goes with 10.0.1.3. The workstation at 10.0.1.3 will respond with its MAC address,
ab.ab.ab.ab.ab.ab.

Objective:

Routing Fundamentals

"Pass Any Exam. Any Time." - www.actualtests.com 689

 Cisco 200-301 Exam
Sub-Objective:

Describe the routing concepts

References:

Cisco > IOS Technology Handbook > Routing Basics

QUESTION NO: 438

You have added a new router to your network using all of the default settings. You can connect to
everything by IP address, but the router doesn't seem to be resolving names to IP addresses. The
DNS server is in a directly connected network.

Which of the following is most likely the problem?

A.
You configured an incorrect IP address for the DNS server

B.
You configured an incorrect default gateway on the router

C.
You failed to execute the ip domain lookup command

D.
You failed to create an IP helper address

Answer: A
Explanation:

The most likely problem is that you configured an incorrect IP address for the DNS server.
Although it is impossible to know without executing the show run command, the other options can
all be eliminated, making this the most likely option.

Even if the router has an incorrect default gateway, or has no default gateway configured, the
router should be able to connect to resources by name if it can connect to them by IP address.
The gateway will only be required if the DNS server is in a network not found in the routing table of
the local router. Since the network containing the DNS server is directly connected, that network is
automatically in the routing table.

"Pass Any Exam. Any Time." - www.actualtests.com 690

 Cisco 200-301 Exam
The ip domain lookup command is enabled by default, so it does not need to be executed. If the
scenario had not stated that all defaults were in place, it could be verified with the show run
command as shown below, where line 4 indicates the ip domain lookup command is disabled:

routera# show run

<output omitted>

hostname routera

no ip domain lookup

ip domain name acme.com

ip name-server 192.31.1.6

It is not required to have an IP helper address for DNS to function for the router. It is only required
by the non-routing devices connected to the router, and only for those that are not on the same
network with their DHCP server.

Objective:

Infrastructure Services

Sub-Objective:

Troubleshoot client- and router-based DHCP connectivity issues

References:

QUESTION NO: 439

You are the network administrator for your company. You wanted to connect the host computers
to the switches.

Which cable should you use to ensure the connectivity?

A.
Straight-through cable

B.

"Pass Any Exam. Any Time." - www.actualtests.com 691

 Cisco 200-301 Exam
Rollover cable

C.
Crossover cable

D.
Serial cable

Answer: A
Explanation:

A straight-through cable is a normal four-pair cable with the same order of pin configuration on
both ends. These are usually used to connect a computer to the switch or hub's Ethernet ports.
The following table shows the pin layout of a straight-through cable:

A rollover cable, also known as rolled cable or Cisco console cable, is used to connect a computer
terminal to the console port of a router. The cable pin order at one end of the cable is the reverse
of the order at another end. Pin 1 is connected to pin 8, pin 2 to pin 7, and so on.

A crossover cable is used to connect two similar devices such as a computer to computer or a
switch to a switch, and a computer to a router's Ethernet port.

A serial cable is used on a router's wide area network (WAN) interface to connect to the serial
ports. Cisco serial cables generally have a male DB-25 connector on one end and a female DB-25
connector on the other.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Troubleshoot interface and cable issues (collisions, errors, duplex, speed)

References:

Cisco > Product Support > End-of-Sale and End-of-Life Products > Cisco 7000 Series Routers >

"Pass Any Exam. Any Time." - www.actualtests.com 692

 Cisco 200-301 Exam
Troubleshooting TechNotes > Cabling Guide for Console and AUX Ports > Document ID: 12223

QUESTION NO: 440

Which protocol is responsible for negotiating and maintaining Point-to-Point Protocol (PPP)
connections?

A.
LCP

B.
NCP

C.
BRI

D.
ISDN

Answer: A
Explanation:

Link Control protocol (LCP) has the primary responsibility of negotiating and maintaining a PPP
connection. LCP, defined in Request for Comments (RFCs) 1548 and 1570, has the primary
responsibility to establish, configure, authenticate, and test a PPP connection. LCP negotiates the
following when setting up a PPP connection:

The ability to utilize compression, authentication, and multilink are three options that make PPP a
popular choice for Layer 2 encapsulation over a WAN link.

Network Control Protocol (NCP) defines how the two PPP peers negotiate with network layer
protocols, such as IP and IPX, will be used across the PPP connection. LCP is responsible for
negotiating and maintaining a PPP connection whereas NCP is responsible for negotiating upper-
layer protocols that will be carried across the PPP connection.

In summary, the three steps in the establishment of a PPP session are:

Basic Rate Interface (BRI) and Integrated Services Digital Network (ISDN) are not components of
PPP, so these options are incorrect. BRI is a type of ISDN connection that contains three circuits,
two 64K B or bearer channels, and one D or Delta channel. ISDN circuits are a type of WAN
"Pass Any Exam. Any Time." - www.actualtests.com 693
 Cisco 200-301 Exam
connection.

Objective:

WAN Technologies

Sub-Objective:

Configure and verify PPP and MLPPP on WAN interfaces using local authentication

References:

Cisco > Internetworking Technology Handbook > Point-to-Point Protocol

Cisco > Support > Technology Support > WAN > Point-to-Point Protocol (PPP) > Design > Design
TechNotes > Understanding and Configuring PPP CHAP Authentication > Document ID: 25647

QUESTION NO: 441

Which of the following commands would allow you to determine the bandwidth of an interface?

A.
show interfaces

B.
show interfaces accounting

C.
show cdp

D.
show cdp neighbors

Answer: A
Explanation:

The show interfaces command shows information about each interface including a section on the
bandwidth of the connection. If you wanted to locate this information in the output, it would be in
the third down line as follows:

MTU 1500 bytes, BW 10000 Kbit, DLY 100000 usec, rely 255/255, load 1/255

"Pass Any Exam. Any Time." - www.actualtests.com 694

 Cisco 200-301 Exam
Where BW = bandwidth

The show interfaces accounting command focuses on the relative amounts of traffic going through
each interface, but does not indicate the bandwidth.

The show cdp command shows information about the Cisco Discovery protocol, a Layer 2 protocol
used by Cisco devices to advertise their existence and capabilities to other Cisco devices ion the
network.

The show cdp neighbors command shows information about each discovered neighbor, but does
not display the bandwidth of an interface.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Troubleshoot interface and cable issues (collisions, errors, duplex, speed)

References:

QUESTION NO: 442

What is the significance of the 1 in the following configuration?

router(config)# router eigrp 1

A.
It is the process ID for EIGRP and is locally significant to this router.

B.
It is the process ID for EIGRP and must be the same on all EIGRP routers.

C.
It is the AS number for EIGRP and is locally significant to this router.

D.
It is the AS number for EIGRP and must be the same on all EIGRP routers.

"Pass Any Exam. Any Time." - www.actualtests.com 695

 Cisco 200-301 Exam
Answer: D
Explanation:

Enhanced Interior Gateway Routing Protocol (EIGRP) configuration requires the specification of
an Autonomous System (AS) number with the router eigrp command. Any number can be chosen,
but it must match on all EIGRP routers in the domain. This value may appear to be is similar to
one used in enabling OSPF, which demands a process ID number but that value is locally
significant to each router and need not match on each router.

The syntax of this command is router eigrp [autonomous-system]. Therefore, the 1 in the example
indicates an Autonomous System (AS) number, not a process ID.

The Autonomous System (AS) number is not locally significant to each router, and must match on
all EIGRP routers.

Objective:

Routing Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot EIGRP for IPv4 (excluding authentication, filtering, manual
summarization, redistribution, stub)

References:

QUESTION NO: 443

Based on the output of the show mac-address-table command shown below, where will the switch
that produced this output send a frame with a destination MAC address of ffff.ffff.ffff?

Vlan Mac address Type Ports

<output omitted>

1 000f.e544.c2b3 dynamic Fa0/10

1 000d.4589.00b8 dynamic Fa0/5

1 00bd.000b.005bb dynamic Fa0/8

"Pass Any Exam. Any Time." - www.actualtests.com 696

 Cisco 200-301 Exam
1 0001.0d44.bbdb dynamic Fa0/12

1 0014.0bd4.0054 dynamic Fa0/15

1 00bb.224b.0ac5 dynamic Fa0/1

A.
to all ports, listed and unlisted, except the originating port

B.
to Fa0/10, Fa0/5, Fa0/8, Fa0/12, Fa0/15, and Fa0/1

C.
to no ports, since the MAC address isn't in the table

D.
to all ports excluding the ports listed in the table

E.
to port Fa0/15

Answer: A
Explanation:

The MAC address ffff.ffff.ffff is called the Layer 2 broadcast address. It will be sent to all ports
listed in the table, or known to the switch, as well as to all those unlisted, or not yet known by the
switch. This excludes the originating port only.

It will not send the frame only to the ports listed in the table (Fa0/10, Fa0/5, Fa0/8, Fa0/12, Fa0/15,
and Fa0/1). It will also be sent to ports that are as yet unknown by the switch.

It will not prevent the frame from being sent to any ports because the MAC address is not listed.
Broadcast addresses are not listed in the MAC address table. These addresses are only used to
send to all hosts.

It will not send the frame to all ports except the ports listed. This would be the switch's behavior if
the address of the frame in question was not a broadcast address and was not listed in the MAC
address table. Until a switch knows where a frame goes, it will send the frame to all ports that are
still unknown or unlisted, with the exception of the port on which it arrived.

It will not send the frame to port Fa0/15 only. If the frame were addressed to 0014.0bd4.0054, the
switch would forward the frame to that port only. When a switch receives a unicast frame with a
destination MAC address that is listed in the table, it will only send the frame to that port.

Objective:
"Pass Any Exam. Any Time." - www.actualtests.com 697
 Cisco 200-301 Exam
LAN Switching Fundamentals

Sub-Objective:

Describe and verify switching concepts

References:

Cisco > Internetworking Technology Handbook > Bridging Basics > Bridging and Switching Basics

QUESTION NO: 444

You need to set the Telnet password to "john" on a Cisco router. Which set of commands would
you use?

A.
Router(config)#line vty 0 4Router(config-line)#loginRouter(config-line)#password john

B.
Router(config)#line con 0Router(config-line)#loginRouter(config-line)#password john

C.
Router(config)#line vty 0 4Router(config-line)#loginRouter(config-line)#enable secret john

D.
Router(config)#line con 0Router(config-line)#loginRouter(config-line)#enable password john

Answer: A
Explanation:

The set of commands which would be used to configure the Telnet password to "john" on a Cisco
router is:

Router(config)#line vty 0 4

Router(config-line)#login

Router(config-line)#password john

The line vty command is used to configure the router to enable Telnet access. By using this
command, the router can be configured to accept one or more Telnet sessions.

"Pass Any Exam. Any Time." - www.actualtests.com 698

 Cisco 200-301 Exam
The login and password parameters are the line configuration commands used to configure the
password. The password command specifies the password and the login command instructs the
router to require the password. By default, the login parameter is present in the configuration of
the VTY lines. Because its presence indicates that a password is required for connecting to the
VTY lines, if a password has not been configured on the VTY lines, a connection cannot be made.
If an attempt were made to connect to the VTY line with the login parameter in effect and no
password present, the following error message would be generated:

Router2# telnet 10.3.1.1

Trying 10.3.1.1Open

Password Required, but none set

[Connection to 10.3.1.1 closed by foreign host]

Router2#

The following set of commands would be used to configure the console password on a Cisco
router, and so it is incorrect for this scenario.

Router(config)# line con 0

Router(config-line)# login

Router(config-line)# password john

The commands enable secret john and enable password john would be used to configure the
enable secret password and the enable password for the router. However, they cannot be used to
configure the Telnet password. Therefore, these options are incorrect.

Objective:

Infrastructure Management

Sub-Objective:

Configure and verify device management

References:

"Pass Any Exam. Any Time." - www.actualtests.com 699

 Cisco 200-301 Exam
QUESTION NO: 445

Which Cisco IOS command would produce the following output?

A.
show ip interface

B.
show ip interface brief

C.
show interfaces

D.
show interface brief

Answer: C
Explanation:

The output given in the question is produced with the show interfaces command. This command is
used to view the statistics for the configured interfaces on the router. From the sample output, we
can determine the following facts:

Two fields worth mentioning in the output of the show interfaces command are the no buffer and
the ignored fields. The ignored field shows the number of received packets ignored by the
interface because the interface hardware ran low on internal buffers. The no buffer field shows the

"Pass Any Exam. Any Time." - www.actualtests.com 700

 Cisco 200-301 Exam
number of received packets discarded because there was no buffer space in the main system.
When either of these two counters begins to increment, it could be the result of a broadcast storm.

Since the show interfaces command displays the up/down state of the interfaces, it is a good
command for troubleshooting. For example, any time users cannot access a resource that
requires them to traverse a router, it is always a good idea to use show interfaces to take a quick
look at the state of the interfaces. In the example diagram below, users cannot access the
resource in the network of the Acme Company from the LAN in the Ajax Company. The first step
would be to execute the show interfaces command in R1 to verify functionality of the interfaces on
R1.

The show ip interface command is incorrect because this command is used to view whether the
interfaces configured for Internet Protocol (IP) are usable. Following is a sample output of the
show ip interface command:

"Pass Any Exam. Any Time." - www.actualtests.com 701

 Cisco 200-301 Exam

The show ip interface brief command is incorrect because this command provides an overview of
all the interfaces configured for IP on the router. The following is sample output from the show ip
interface brief command. It can be quite useful for troubleshooting as well. For example, if you
cannot ping the Ethernet1 interface from a host on the Ethernet 0 LAN, you could determine from
the output below that the Ethernet 1 interface is administratively down.

Router# show ip interface brief

Interface IP-Address OK? Method Status Protocol

Ethernet0 12.17.10.5 YES NVRAM up up

Ethernet1 unassigned YES unset administratively down down

Loopback0 12.17.20.5 YES NVRAM up up

Serial0 12.17.30.5 YES NVRAM up up

"Pass Any Exam. Any Time." - www.actualtests.com 702

 Cisco 200-301 Exam
The solution here would be to enter configuration mode for the interface Ethernet 1 and enable it
with the no shutdown command.

The show interface brief command is incorrect because this command is not a valid Cisco IOS
command.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Troubleshoot interface and cable issues (collisions, errors, duplex, speed)

References:

QUESTION NO: 446

You are a network administrator for your organization. Your organization has two Virtual LANs
(VLANs) named Marketing and Production. All switches in the network have both VLANs
configured on them. Switches A, C, F, and G have user machines connected for both VLANs,
while switches B, D, and E have user machines connected for the Production VLAN only. (Click
the Exhibit(s) button to view the network diagram.)

"Pass Any Exam. Any Time." - www.actualtests.com 703

 Cisco 200-301 Exam

To reduce broadcast traffic on the network, you want to ensure that broadcasts from the Marketing
VLAN are flooded only to those switches that have Marketing VLAN users.

Which Cisco switch feature should you use to achieve the objective?

A.
PVST

B.
RSTP

C.
VTP Pruning

D.
Dynamic VLANs

Answer: C
Explanation:

The VLAN Trunking Protocol (VTP) pruning feature of Cisco VTP allows switches to dynamically
delete or add VLANs to a trunk. It restricts unnecessary traffic, such as broadcasts, to only those
switches that have user machines connected for a particular VLAN. It is not required to flood a
frame to a neighboring switch if that switch does not have any active ports in the source VLAN. A
trunk can also be manually configured with its allowed VLANs, as an alternative to VTP pruning.

"Pass Any Exam. Any Time." - www.actualtests.com 704

 Cisco 200-301 Exam
All other options are incorrect because none of these features can be used to achieve the
objective in this scenario.

The Per-VLAN Spanning Tree (PVST) feature allows a separate instance of Spanning Tree
Protocol (STP) per VLAN. Each VLAN will have its own root switch and, within each VLAN, STP
will run and remove loops for that particular VLAN.

Rapid Spanning Tree Protocol (RSTP) is an Institute of Electrical and Electronics Engineers
(IEEE) standard. It reduces high convergence time that was previously required in STP
implementations. It is interoperable with STP (802.1d).

With dynamic VLANs, the switch automatically assigns a switch port to a VLAN using information
from the user machine, such as its Media Access Control (MAC) address or IP address. The
switch then verifies information with a VLAN Membership Policy Server (VMPS) that contains a
mapping of user machine information to VLANs.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot VLANs (normal/extended range) spanning multiple switches

References:

Cisco > Catalyst 6500 Series Cisco IOS Software Configuration Guide, 12.1E > Configuring
VTPCisco > Technology Support > LAN Switching > Virtual LANs/VLAN Trunking Protocol
(VLANs/VTP) > Design > Design TechNotes > How LAN Switches Work > Document ID: 10607

QUESTION NO: 447

You are the switch administrator for InterConn. The network is physically wired as shown in the
diagram. You are planning the configuration of STP. The majority of network traffic runs between
the hosts and servers within each VLAN.

"Pass Any Exam. Any Time." - www.actualtests.com 705

 Cisco 200-301 Exam

You would like to designate the root bridges for VLANS 10 and 20. Which switches should you
designate as the root bridges?

A.
Switch A for VLAN 10 and Switch E for VLAN 20

B.
Switch A for VLAN 10 and Switch B for VLAN 20

C.
Switch A for VLAN 10 and Switch C for VLAN 20

D.
Switch D for VLAN 10 and Switch B for VLAN 20

E.
Switch E for VLAN 10 and Switch A for VLAN 20

F.
Switch B for VLAN 10 and Switch E for VLAN 20

Answer: B
Explanation:

You should designate Switch A for VLAN 10 and Switch B for VLAN 20. The STP root bridge for a
particular VLAN should be placed as close as possible to the center of the VLAN. If the majority of
network traffic is between the hosts and servers within each VLAN, and the servers are grouped
into a server farm, then the switch that all hosts will be sending their data to is the ideal choice for
the STP root. Cisco's default implementation of STP is called Per-VLAN Spanning Tree (or PVST),
"Pass Any Exam. Any Time." - www.actualtests.com 706
 Cisco 200-301 Exam
which allows individual tuning of the spanning tree within each VLAN. Switch A can be configured
as the root bridge for VLAN 10, and Switch B can be configured as the root bridge for VLAN 20,
resulting in optimized traffic flow for both.

None of the other switches is in the traffic flow of all data headed towards the VLAN 20 or VLAN
10 server farms, so they would not be good choices for the root bridge for either VLAN. Care
should be taken when adding any switch to the network. The addition of an older, slower switch
could cause inefficient data paths if the old switch should become the root bridge.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot STP protocols

References:

Cisco > Support > Technology Support > LAN Switching > Spanning Tree Protocol > Configure >
Configuration Examples and TechNotes > Understanding and Configuring Spanning Tree Protocol
(STP) on Catalyst Switches

QUESTION NO: 448

Which command is used on the Cisco Catalyst 2950 series switch to configure a port as a VLAN
trunk port?

A.
switchport mode trunk

B.
set trunk on

C.
switchport trunk on

D.
trunk mode on

Answer: A

"Pass Any Exam. Any Time." - www.actualtests.com 707

 Cisco 200-301 Exam
Explanation:

The switchport mode trunk command is used on the Cisco Catalyst 2950 switch to configure a port
as a VLAN trunk port. The syntax of the command is as follows:

Switch(config-if)# switchport mode trunk

Trunk links are required between devices in any situation where traffic from multiple VLANs will
traverse the link. This is also true when using VTP on the switches and in that case, even if inter-
VLAN routing is not required. For example, if two switches in a VTP domain are connected
together via an access link with no router present, then when you create a new VLAN on one of
the switches, it will NOT be learned by the other switch.

When you configure a trunk link, there are two choices for encapsulation: 802.1q, which is the
industry standard, and ISL, which is Cisco proprietary and will only work when both ends are Cisco
equipment. Both protocols perform a crucial role in inter-VLAN routing by tagging packets with the
VLAN to which the packets belong.

The following commands should be issued to configure FastEthernet 0/1 to function as a VLAN
trunk port and use 802.1q encapsulation:

Switch# configure terminal

Switch(config)# interface fastethernet 0/1

Switch(config-if)# switchport mode trunk

Switch(config-if)# switchport trunk encapsulation dot1q

When configuring a trunk link between a switch and switch, the above commands would be used
in both switches. However, when a trunk link is configured between a router and a switch, the
process is different on the router. On the router end, you must do the following:

1. Enable the physical interface hosting the trunk link.

2. Ensure that no IP address exists on the physical interface.

3. Create a subinterface for each VLAN on the physical interface.

4. Set the trunking protocol on each subinterface.

5. Configure an IP address on each subinterface.

The command set that would create a subinterface for VLAN 10, set the trunking protocol for the
subinterface, and assign the subinterface an IP address is:
"Pass Any Exam. Any Time." - www.actualtests.com 708
 Cisco 200-301 Exam
Router(config)#interface fastethernet 0/0

Router(config)#no ip address

Router(config-if)#no shutdown

Router(config)-if)exit

Router(config)#interface fastethernet 0/0.1

Router(config-if)#encapsulation dot1q 10

Router(config-if)#ip address 192.168.5.1 255.255.255.0

The set trunk on, switchport trunk on , and trunk mode on commands are incorrect because these
are not valid Cisco IOS commands.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot VLANs (normal/extended range) spanning multiple switches

References:

Cisco Catalyst 2950 Desktop Switch Software Configuration Guide, 12.0(5.2)WC(1) > Creating
and Maintaining VLANs > CLI: Configuring a Trunk PortCisco > Cisco IOS Interface and Hardware
Component Command Reference >squelch through system jumbomtu > switchport mode

QUESTION NO: 449

You are considering a candidate for a job as a Cisco network technician. As part of the
assessment process, you ask the candidate to write down the commands required to configure a
serial interface, in the proper order with the correct command prompts. The candidate submits the
set of commands shown below (line numbers are for reference only):

1 Router# configure terminal

2 Router(config)# interface S0

3 Router(config)# ip address 192.168.5.5

"Pass Any Exam. Any Time." - www.actualtests.com 709

 Cisco 200-301 Exam
4 Router(config-if)# enable interface

5 Router(config-if)# description T1 to Raleigh

What part(s) of this submission are incorrect? (Choose all that apply.)

A.
The prompt is incorrect on line 1

B.
The IP address is missing a subnet mask

C.
The prompt is incorrect on line 5

D.
The prompt is incorrect on line 3

E.
The command on line 4 is incorrect

F.
The prompt is incorrect on line 4

G.
The description command must be executed before the interface is enabled

Answer: B,D,E
Explanation:

The IP address is missing a subnet mask, the prompt is incorrect on line 3, and the command
enabling the interface (line 4) is incorrect.

The correct prompts and commands are as follows:

Router# configure terminal

Router(config)# interface S0

Router(config-if)# ip address 192.168.5.5 255.255.255.0

Router(config-if)# no shutdown

Router(config-if)# description T1 to Raleigh

The prompt for line 3 would be Router(config-if)# because the interface S0 command was issued
immediately prior to the ip address 192.168.5.5 command. The prompt will remain Router(config-
"Pass Any Exam. Any Time." - www.actualtests.com 710
 Cisco 200-301 Exam
if)# for lines 3, 4, and 5 as each command that applies to the S0 interface is executed, including
the description command.

The command to enable the interface is no shutdown, not enable interface. Therefore, the
command executed on line 4 was incorrect.

Objective:

Network Fundamentals

Sub-Objective:

Apply troubleshooting methodologies to resolve problems

References:

Home > Support > Using the Command-Line Interface in Cisco IOS Software

QUESTION NO: 450 DRAG DROP

Click and drag the components on the left to their appropriate descriptions on the right.

Answer:

Explanation:

"Pass Any Exam. Any Time." - www.actualtests.com 711

 Cisco 200-301 Exam

The following are the components used for network and Internet communications and their
appropriate descriptions:

Objective:

Network Fundamentals

Sub-Objective:

Describe the impact of infrastructure components in an enterprise network

Reference:

Cisco > Home > Internetworking Technology Handbook > Internetworking Basics> Bridging and
Switching Basics

QUESTION NO: 451

You have discovered that Router 8 on your network is not receiving updates from Router 10.
Router10 has an IP address of 201.56.41.9. All routers run RIP. Since you are new and not
completely familiar with the topology of the network, you execute the debug ip rip command on
Router 8 and receive the results shown below:

Router8# debug ip rip

*Mar 1 07:35:12.070: RIP: sending v2 update to 201.56.41.9 via Serial0/0 (201.56.41.88)

*Mar 1 07:35:12.074: RIP: build update entries

*Mar 1 07:35:19.638: RIP: ignored v2 packet from 201.56.41.9 (invalid authentication)

What can be the problem? (Choose all that apply.)

"Pass Any Exam. Any Time." - www.actualtests.com 712

 Cisco 200-301 Exam
A.
Router 10 has not yet been configured for authentication

B.
Router 10 is configured for RIPv2 and Router 8 is configured for RIP v1.

C.
There is a connectivity problem between the routers.

D.
Router 10 is over 16 hops away

E.
The password is not correct.

Answer: A,E
Explanation:

The problem can be that Router 10 has not yet been configured for authentication or that the
password is not correct. This can be ascertained by the line in the debug output shown below:

*Mar 1 07:35:19.638: RIP: ignored v2 packet from 201.56.41.9 (invalid authentication)

It is not a problem with RIP version mismatch. If that were the problem, the following statement
would be a line in the output:

*Mar 1 07:35:19.638: RIP: ignored v2 packet from 201.56.41.9 (illegal version)

It is not a connectivity problem. If there were a connectivity problem, we would not be receiving an
attempt at an update from Router 10.

Router 10 is not more than 16 hops away. If that were the case, that information would be
received from another router in its updates as shown below:

*Mar 1 07:35:19.638: RIP: received update from 201.56.41.10 via Serial0/0

201.56.41.9 in 16 hops (inaccessible)

Objective:

Routing Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot RIPv2 for IPv4 (excluding authentication, filtering, manual
"Pass Any Exam. Any Time." - www.actualtests.com 713
 Cisco 200-301 Exam
summarization, redistribution)

References:

Cisco IOS Debug Command Reference, Release 12.4 > Commands: debug ip http all through
debug ip rsvp > debug ip rip

QUESTION NO: 452

What command produced the following output?

"Pass Any Exam. Any Time." - www.actualtests.com 714

 Cisco 200-301 Exam

A.
show ip process

B.
show ip route

C.
show ip protocols

D.
show ip routing process

Answer: C

"Pass Any Exam. Any Time." - www.actualtests.com 715

 Cisco 200-301 Exam
Explanation:

The show ip protocols command is used to view the current state of active routing protocols. This
command is issued from Privileged EXEC mode. It has the following syntax:

Router# show ip protocols

This command does not have any parameters.

The output was not produced by the command show ip process or the show ip routing process.
The show ip routing process and show ip process commands are incorrect because these are not
valid Cisco IOS commands.

The output was not produced by the command show ip route. The show ip route command is is
used to view the current state of the routing table. An example of the output is shown below.

"Pass Any Exam. Any Time." - www.actualtests.com 716

 Cisco 200-301 Exam
Objective:

Routing Fundamentals

Sub-Objective:

Compare and contrast distance vector and link-state routing protocols

References:

CCNA ICND2 Official Exam Certification Guide (Cisco Press, ISBN 1-58720-181-X), Chapter 11:
Troubleshooting Routing Protocols, pp. 410-413.

QUESTION NO: 453

Which of the following statements are NOT part of the guidelines for configuring VLAN Trunking
Protocol (VTP) to ensure that VLAN information is distributed to all Cisco switches in the network?
(Choose all that apply.)

A.
The VTP version must be the same on all switches in a VTP domain.

B.
The configuration revision number must be configured identically on all switches in a VTP domain.

C.
The VTP password must be the same on all switches in a VTP domain.

D.
The VTP domain name must be the same on all switches in a VTP domain.

E.
VLANs configured on clients should exist on the server switch.

F.
The switch(s) that will share VLAN information is(are) operating in VTP server mode

G.
The switches must be configured to use the same method of VLAN tagging

H.
The switches must be connected with trunk links

Answer: B,E
"Pass Any Exam. Any Time." - www.actualtests.com 717
 Cisco 200-301 Exam
Explanation:

For all switches in a VTP domain, the VTP version, VTP password, and VTP domain name must
be the same. Moreover, switches that will share VLAN information must be operating in VTP
server mode, must be using the same VLAN tagging method (either 802.1q or ISL), and must be
connected with trunk links.

Many of these settings can be verified by using the show vtp status command. By viewing the
output of the command on two switches that are not sharing information, inconsistencies that
prevent the sharing of VLAN information can be identified. Consider the output from the two
switches below:

Based on the output for the four switches, you should NOT expect Switch62 to exchange VLAN
information with the other switches because the VTP domain names do not match. Line 6 shows
that Swicth62 is set to Corp and the others are set to Corporate. The command to set the VTP
domain name is:

Switch62(config)#vtp domain corporate

Switch62 is operating in Client mode, which means it will accept VLAN changes sent by switches
operating in Server mode once the domain name mismatch is corrected. It will both process them
and forward them, but will not allow VLAN changes to be made locally, and it will not save any of
the VLAN information in NVRAM (line 5). The command to place a switch into Client mode is:

Switch62(config)#vtp mode client

Switch60 is operating in Server mode and will allow changes to be made locally, will send those
changes to other switches, and WILL save all changes (both learned and made locally) in
NVRAM, as shown by line 5. The command to place a switch into Server mode is:
"Pass Any Exam. Any Time." - www.actualtests.com 718
 Cisco 200-301 Exam
Switch62(config)#vtp mode server

Switch61 is operating in Transparent mode. It will allow changes to be made locally and WILL
save all changes made locally in NVRAM, but will NOT send those changes to other switches, as
shown in line 5. It will accept and pass along VTP changes from switches operating in Server
mode, but will not save those changes in NVRAM. The command to place a switch in Transparent
mode is:

Switch62(config)#vtp mode transparent

Switch63 will ignore any information it receives from the other switches, even though the domain
name matches, because it has a higher configuration revision number (63) than the other
switches. These revision numbers are used by the switches to prevent unnecessary processing of
changes that have already been received.

VTP is used to synchronize Virtual Local Area Network (VLAN) databases across switches. VTP
server switches can be used to add, delete, or rename VLANs, which are then synchronized over
the network with VTP client switches. This allows a network administrator to create a VLAN once,
as opposed to having to create it individually on every switch on the network. The password is
used to validate the source of the VTP advertisements sent between the switches in the VTP
domain.

The option stating that the configuration revision number must be configured identically on all
switches in a VTP domain is incorrect. The configuration number cannot be directly configured, but
is instead synchronized during VTP updates.

The option stating that VLANs configured on clients should exist on the server switch is incorrect.
VTP clients do not allow local VLAN configuration, and can only receive VLANs via VTP
synchronization over the network.

Objective:

LAN Switching Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot VLANs (normal/extended range) spanning multiple switches

References:

"Pass Any Exam. Any Time." - www.actualtests.com 719

 Cisco 200-301 Exam
QUESTION NO: 454

Which Cisco IOS command would prompt for input in the following format?

A.
ping 10.1.1.1

B.
ping

C.
traceroute

D.
tracert

Answer: B
Explanation:

The extended ping command prompts the user for input in the format given in this scenario. The
extended ping command is accessed by issuing a ping command without specifying an IP
address. This causes the ping command to transit into extended ping command mode, where you
can specify and modify various parameters, such as packet size, timeout, and repeat count.

The following code is a sample partial output of the extended ping command:

"Pass Any Exam. Any Time." - www.actualtests.com 720

 Cisco 200-301 Exam

The true value of the extended ping command lies in the ability to ping FROM a different device
than the one you are working from. As shown in the above output, you can specify the source
address on line 8.

The ping 10.1.1.1 command is incorrect because it sends an ICMP "echo request" to the target
host. In turn, the target host replies with the "echo reply" packets. When pinging from one device
to another on the network, ICMP and Address Resolution Protocol (ARP) are used. ARP resolves
an IP address to its associated MAC addresses.

The tracert command is incorrect because this command is used by Microsoft Windows, not
Cisco. It is not a valid utility to run via the Cisco IOS command-line interface. The tracert command
is similar to the traceroute Cisco utility as the tracert command tests the connectivity or
"reachability" of a network device or host. It reports back a reply at each hop, allowing one to
determine where the communication link is "broken".

The traceroute command is used to display the path that a packet follows to its destination. This
command displays the IP address of each router in the path from the source to the destination
address. Unlike the Microsoft tracert command, which uses the ICMP protocol, the Cisco
traceroute command is based on User Datagram Protocol (UDP). The following code is the partial
output of the traceroute command.

RouterA#traceroute 124.10.23.41

Type escape sequence to abort.

Tracing the route to 124.10.23.41

1 121.10.1.3 6 msec 6 msec 6 msec

2 134.10.10.13 30 msec 17 msec 14 msec

"Pass Any Exam. Any Time." - www.actualtests.com 721
 Cisco 200-301 Exam
3 32.1.2.4 36 msec * 23 msec

Objective:

Routing Fundamentals

Sub-Objective:

Troubleshoot basic Layer 3 end-to-end connectivity issues

References:

Cisco > Tech Notes > Using the Extended ping and Extended traceroute Commands > Document
ID: 13730

Cisco > Tech Notes > Understanding the Ping and Traceroute Commands > The Traceroute
Command > Document ID: 12778

QUESTION NO: 455

You are configuring all your devices for IPv6. Which of the following is the only device that
requires the ipv6 unicast-routing command?

A.
Layer 2 switch

B.
Router

C.
Adaptive security appliance

D.
Wireless AP

Answer: B
Explanation:

Only the router requires the ipv6 unicast-routing command. The command ipv6 unicast-routing
enables the routing of IPv6 packets on a router. It is not required when you are simply configuring
interfaces on devices that participate in IPv6.

"Pass Any Exam. Any Time." - www.actualtests.com 722

 Cisco 200-301 Exam
A Layer 2 switch can have an IPv6 address applied to its management interface and to any VLAN
interfaces. However, because the switch does no routing, it does not require the ipv6 unicast-
routing command.

An adaptive security appliance (ASA) can also have IPv6 addresses applied to its interfaces and
can route both IPv6 and IPv4 traffic. However, it does not require the ipv6 unicast-routing
command.

A wireless access point differs from a wireless router in that it operates as a switch or hub and
does no routing. Therefore, it does not require this command.

Objective:

Network Fundamentals

Sub-Objective:

Configure, verify, and troubleshoot IPv6 addressing

References:

Cisco > Support > IPv6 Configuration Guide, Cisco IOS Release 15.2S > Chapter: IPv6 Unicast
RoutingCisco > Support > Cisco IOS IPv6 Command Reference > ipv6 unicast-routing

"Pass Any Exam. Any Time." - www.actualtests.com 723