12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

https://www.examtopics.com/exams/cisco/200-301/view/12/ 1/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1351 Topic 1

SIMULATION

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab doses and cannot be reopened.

Topology

Tasks

Refer to the topology. All physical cabling is in place. Configure a local user account, a Named ACL (NACL) and security.

1. Configure a local account on Sw101 with telnet access only on virtual ports 0-4. Use the following information:

https://www.examtopics.com/exams/cisco/200-301/view/12/ 2/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

o Username: netops

o Password: ipsec4all

o Algorithm: "Vigenere"

o Privilege level: Exec mode

2. Configure and apply a single NACL on Sw103 using the following:

o name: ENT_ACL

o Restrict only PC1 on VLAN 10 from pinging PC2

o Allow only PC1 on VLAN 10 to telnet to R1 (172.16.30.2)

o Prevent all other devices from telnetting from VLAN 10

o Allow all other network traffic from VLAN 10

3. Configure security on interface Ethernet 0/0 of Sw102:

o Set the maximum number of secure MAC addresses to two

o Ensure that the port discards the packet, counts the number of violations and sends a syslog message

o Allow secure mac addresses to be learned dynamically

Correct Answer:

https://www.examtopics.com/exams/cisco/200-301/view/12/ 3/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1352 Topic 1

Refer to the exhibit. The IPv6 address for the LAN segment on router R2 must be configured using the EUI-64 format. When configured which ipv6

address is produced by the router?

A. 2001:db8:9bb6:6bb9:C801:B6FF:FEB4:1 Most Voted

B. 2001:db8:9bb6:6bb9:C001:6BFE:FF01:1

C. 2001:db8:9bb6:6bb9:C081:B6FF:FF4B:1

D. 2001:db8:9bb6:6bb9:4736:931F:FE37:1

Correct Answer: A

Community vote distribution

A (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 4/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1353 Topic 1

Refer to the exhibit. What is the metric for the route to the 192.168.10.33 host?

A. 84

B. 110

C. 192

D. 193 Most Voted

Correct Answer: D

Community vote distribution

D (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 5/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1354 Topic 1

Refer to the exhibit. The IPv6 address for the LAN segment on router R1 must be configured using the EUI-64 format. When configured which ipv6

address is produced by the router?

A. 2001:db8:8bb3:8bb1:C001:8BFE:FF31:1

B. 2001:db8:8bb3:8bb1:C081:B8FF:FF3B:1

C. 2001:db8:8bb3:8bb1:C801:B8FF:FEB3:1 Most Voted

D. 2001:db8:8bb3:8bb4:7397:79FF:EF41:1

Correct Answer: C

Community vote distribution

C (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 6/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1355 Topic 1

Refer to the exhibit. A secondary route is required on router R1 to pass traffic to the LAN network on R2 if the primary link fails. Which command

must be entered to configure the router?

A. ip route 10.0.2.0 255.255.255.240 10.0.0.7 92

B. ip route 10.0.2.0 255.255.255.240 10.0.0.6 91

C. ip route 10.0.2.0 255.255.255.248 null0 93

D. ip route 10.0.2.0 255.255.255.248 10.0.0.6 91 Most Voted

Correct Answer: D

Community vote distribution

D (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 7/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1356 Topic 1

Refer to the exhibit. The LACP EtherChannel is configured, and the last change is to modify the interfaces on SwitchA to respond to packets

received, but not to initiate negotiation. The interface range gigabitethernet0/0/0-15 command is entered. What must be configured next?

A. SwitchA(config-if-range)#channel-group 1 mode auto

B. SwitchA(config-if-range)#channel-group 1 mode active

C. SwitchA(config-if-range)#channel-group 1 mode desirable

D. SwitchA(config-if-range)#channel-group 1 mode passive Most Voted

Correct Answer: D

Community vote distribution

D (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 8/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1357 Topic 1

SIMULATION

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Topology

Tasks

IP connectivity between the three routers is established. IP Services must be configured in the order presented to complete the implementation.

1. Configure dynamic one-to-one address mapping on R2 using a standard list named XLATE, which allows all traffic to translate the source

address of R3 to a pool named test_pool using the 10.10.10.0/24 network for traffic sent from R3 to R1. Avoid using an NVI configuration. Verify

reachability by sending a ping to 192.168.100.1 from R3.

2. Configure R3 to dynamically receive an IP address on Ethernet0/2 from the DHCP server.

3. Configure R1 as an NTP server and R2 as a client, not as a peer, using the IP address 10.1.2.1.

4. Configure SSH access from R1 to R3, while excluding access via other remote connection protocols using the user root and password s3cret on

router R3 using RSA. Verify connectivity from router R1 to R3 using a destination address assigned to interface E0/2 on R3.

https://www.examtopics.com/exams/cisco/200-301/view/12/ 9/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Correct Answer:

https://www.examtopics.com/exams/cisco/200-301/view/12/ 10/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1358 Topic 1

SIMULATION

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Topology

Tasks

All physical cabling is in place and verified. Connectivity for PC1, PC2 and PC3 must be established to the switches. Each port connecting to the

PCs must be configured as an end-user port and only allow the designated VLAN.

1. Configure VLAN 99 on all three switches and label it exactly as FINANCIAL

2. Configure the switch ports connecting to PC1, PC2 and PC3

3. Cisco's neighbor discovery protocol has been disabled on SW-1 and must be re-enabled

4. PC1 must not be able to discover SW-1

https://www.examtopics.com/exams/cisco/200-301/view/12/ 11/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Correct Answer:

https://www.examtopics.com/exams/cisco/200-301/view/12/ 12/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1359 Topic 1

Refer to the exhibit. Network services must be enabled on interface Gi1/0/34. Which configuration meets the needs for this implementation?

A. interface Gi1/0/34

switchport mode trunk

switchport

trunk allowed native vlan 400

switchport

voice vlan 4041

B. interface Gi1/0/34

switchport mode trunk

switchport

trunk allowed vlan 400, 4041

switchport voice vlan 4041

C. interface Gi1/0/34

switchport mode access

switchport

access vlan 400

switchport voice vlan 4041

D. interface Gi1/0/34

switchport mode access

switchport

access vlan 4041

switchport voice vlan 400

Correct Answer: C

Community vote distribution

C (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 13/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1360 Topic 1

Refer to the exhibit. How will the device handle a packet destined to IP address 100.100.100.100?

A. It will always prefer the static route over dynamic routes and choose the route

S 100.100.0.0/16 [1/0] via 192.168.4.1.

B. It will choose the route with the lowest metric,

R 100.0.0.0/8 [120/2] via 192.168.3.1, 00:00:13, Ethernet0/3.

C. It will choose the route with the highest metric,

D 100.100.100.0/24 [90/435200] via 192.168.2.1, 00:00:13, Ethernet0/2.

D. It will choose the route with the longest match,

O 100.100.100.100/32 [110/21] via 192.168.1.1, 00:05:57, Ethernet0/1. Most Voted

Correct Answer: D

Community vote distribution

D (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 14/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1361 Topic 1

SIMULATION

Guidelines

This is a lab item in which tasks will be performed on virtual devices:

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

• All necessary pre-configurations have been applied.

• Do not remove any existing configurations from the devices, only those necessary to make the appropriate changes required to fulfill the listed

tasks.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Topology

Tasks

Reference Topology Diagram and table. Configure IPv4 and IPv6 between the two routers.

Task 1:

• Configure R1 with the first usable host IP address in the IPv4 network.

• Configure R2 with the last usable host IP address in the IPv4 network.

• Verify connectivity using ping.

Task 2:

https://www.examtopics.com/exams/cisco/200-301/view/12/ 15/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

• Do not assign the subnet router anycast address to either router.

• Configure R1 with the first usable host IP address in the IPv6 network.

• Configure R2 with the last usable host IP address in the IPv6 network.

• Verify connectivity using ping.

Correct Answer:

https://www.examtopics.com/exams/cisco/200-301/view/12/ 16/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1362 Topic 1

SIMULATION

Guidelines

This is a lab item in which tasks will be performed on virtual devices

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

• All necessary pre-configurations have been applied.

• Do not remove any existing configurations from the devices, only those necessary to make the appropriate changes required to fulfill the listed

tasks.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Topology

Tasks

https://www.examtopics.com/exams/cisco/200-301/view/12/ 17/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Task 1

• Configure a host route on R5 for the destination of 10.200.220.6.

• Configure a static default route on R1 preferring the path through R3 towards R6.

• From R5, use traceroute and ping to verify the path towards and reachability of R6.

Task 2

• Configure a floating static default route on R1, preferring the path through R2 towards R6 if the link to R3 should fail.

• Configure the administrative distance for 225.

• Configure a static route on R2 to forward the return traffic towards 10.100.110.0/25.

• After shutting interface e0/1 on R1, use traceroute and ping from R5 to verify path towards and reachability of R6.

Correct Answer:

Question #1363 Topic 1

Which two statements distinguish authentication from accounting? (Choose two.)

A. Only authentication supports user-activity audits.

B. Only authentication challenges users for their credentials and returns a response. Most Voted

C. Only authentication validates "who you are." Most Voted

D. Only authentication records the duration of a user's connection.

E. Only authentication provides supporting information for billing users.

Correct Answer: BC

Community vote distribution

BC (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 18/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1364 Topic 1

Refer to the exhibit. Which switch in this configuration will be elected as the root bridge?

SW1: 0C:E4:82:33:62:23 -

SW2: 0C:0E:16:11:05:97 -

SW3: 0C:E0:16:1A:3C:9D -

SW4: 0C:00:18:A1:B3:19

A. SW1

B. SW2 Most Voted

C. SW3

D. SW4

Correct Answer: B

Community vote distribution

B (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 19/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1365 Topic 1

Refer to the exhibit. Which switch in this configuration will be elected as the root bridge?

A. SW1: 0C:4A:82.:65:62:72

B. SW2: 0C:0A:A8:1A:3C:9D

C. SW3: 0C:0A:18:81:B3:19

D. SW4: 0C:0A:05:22:05:97

Correct Answer: D

Community vote distribution

D (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 20/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1366 Topic 1

Refer to the exhibit. All routers in the network are configured correctly, and the expected routes are being exchanged among the routers. Which set

of routes are learned from neighbors and installed on router 2?

A. 10.129.9.0/23

10.139.2.0/30

10.2.191.0/30

10.129.9.0/25

Most Voted

B. 10.129.9.0/23

10.40.1.0/30

10.2.191.0/30

10.129.9.0/25

C. 10.40.1.0/30

10.139.2.0/30

10.2.191.0/30

10.129.9.0/25

D. 10.129.9.0/23

10.139.2.0/30

10.129.9.0/25

10.22.1.0/24

Correct Answer: A

Community vote distribution

A (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 21/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1367 Topic 1

Refer to the exhibit. Router-WAN1 has a new connection via Gi0/0 to the ISP. Users running the web applications indicate that connectivity is

unstable to the internet. What is causing the interface issue?

A. The receive buffer is full due to a broadcast storm.

B. Frames are discarded due to a half-duplex negotiation. Most Voted

C. Broadcast packets are rejected because ARP timeout is enabled.

D. Small frames less than 64 bytes are rejected due to size.

Correct Answer: B

Community vote distribution

B (63%) A (38%)

Question #1368 Topic 1

A network engineer is configuring a new router at a branch office. The router is connected to an upstream WAN network that allows the branch to

communicate with the head office. The central time server with IP address 172.24.54.8 is located behind a firewall at the head office. Which

command must the engineer configure so that the software clock of the new router synchronizes with the time server?

A. ntp server 172.24.54.8 Most Voted

B. ntp master 172.24.54.8

C. ntp peer 172.24.54.8

D. ntp client 172.24.54.8

Correct Answer: A

Community vote distribution

A (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 22/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1369 Topic 1

SIMULATION

Guidelines

This is a lab item in which tasks will be performed on virtual devices

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

• All necessary pre-configurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Topology

Tasks

Refer to the topology. All physical cabling is in place. Configure local user account, configure a Named ACL (NACL), and Dynamic Arp Inspection.

1. Configure a local account on Sw3 with telnet access only on virtual ports 0-4. Use the following information:

o Username: tech12

o Password: load1key

o Algorithm type: md5

https://www.examtopics.com/exams/cisco/200-301/view/12/ 23/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

o Privilege level: Exec mode

2. Configure and apply a NACL on R1 to control network traffic towards ISP:

o Name: ISP_ACL

o Restrict RFC 1918 class A and B addresses

o Allow all other addresses

3. A DHCP IP Pool is preconfigured on R1 for VLAN 5, and DHCP Snooping is configured on Sw2. Configure on Sw2:

o Dynamic Arp Inspection for VLAN 5

o Enable validation of the ARP packet destination MAC address

o Enable validation of the ARP packet source MAC address

o Enable validation of the ARP Packet IP address

Correct Answer:

Question #1370 Topic 1

Refer to the exhibit. Which type of JSON data is represented?

A. number

B. array Most Voted

C. object

D. string

Correct Answer: B

Community vote distribution

B (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 24/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1371 Topic 1

What is the RFC 4627 default encoding for JSON text?

A. UCS-2

B. GB18030

C. UTF-8 Most Voted

D. Hex

Correct Answer: C

Community vote distribution

C (100%)

Question #1372 Topic 1

Refer to the exhibit. A network engineer is configuring a WLAN to use a WPA2 PSK and allow only specific clients to join. Which two actions must

be taken to complete the process? (Choose two.)

A. Enable the OSEN Policy option.

B. Enable the 802.1X option for Authentication Key Management.

C. Enable the WPA2 Policy option. Most Voted

D. Enable the MAC Filtering option. Most Voted

E. Enable the CCKM option for Authentication Key Management.

Correct Answer: CD

Community vote distribution

CD (67%) BC (33%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 25/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1373 Topic 1

SIMULATION

Guidelines

This is a lab item in which tasks will be performed on virtual devices

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

• All necessary pre-configurations have been applied.

• Do not remove any existing configurations from the devices, only those necessary to make the appropriate changes required to fulfill the listed

tasks.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Topology

Tasks

Task 1

Configure trunks between Sw1 and Sw2 on ports E0/0 and E0/1 using the IEEE standard frame tagging method.

https://www.examtopics.com/exams/cisco/200-301/view/12/ 26/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

• Add VLAN 99 as untagged on the trunk ports.

• Only extend VLAN 110 and the untagged VLAN across the trunk.

• Verify that PC1 is capable of pinging PC2.

Task 2

On Sw1 and Sw2, use IEEE 802.3ad link aggregation.

• Combine E0/0 and E0/1 into a single logical link while leaving the trunk configurations intact.

• Assign number 20 to the link.

• Both links must negotiate aggregation.

Correct Answer:

https://www.examtopics.com/exams/cisco/200-301/view/12/ 27/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1374 Topic 1

Refer to the exhibit. Which configuration parameter is preventing host С from reaching the internet?

A. IP address assignment

B. IP network mask

C. default gateway Most Voted

D. automatic DNS

Correct Answer: C

Community vote distribution

C (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 28/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1375 Topic 1

Refer to the exhibit. Which switch in this configuration will be elected as the root bridge?

SW1 0С:0A:05:22:05:97 -

SW2 0С:4A:82:07:57:58 -

SW3 0C:0A:A8:1A:3C:9D -

SW4 0С:0A:18:A1:B3:19

A. SW1

B. SW2

C. SW3

D. SW4 Most Voted

Correct Answer: D

Community vote distribution

D (71%) C (29%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 29/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1376 Topic 1

SIMULATION

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab doses and cannot be reopened.

Topology

Tasks

All physical cabling is in place and verified. Connectivity for the Switches on ports E0/1, E0/2, and E0/3 must be configured and available for voice

and data capabilities.

1. Configure Sw1 and Sw2 with the VLAN naming as indicated.

2. Assign the VLANs to the appropriate interfaces and set a non-trunking, non-tagged, single-VLAN for each interface according to the topology.

3. Configure both switches to use the L2 vendor-neutral discovery protocol to broadcast device information, including the native VLAN across the

e0/0 interfaces.

https://www.examtopics.com/exams/cisco/200-301/view/12/ 30/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

https://www.examtopics.com/exams/cisco/200-301/view/12/ 31/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Correct Answer:

https://www.examtopics.com/exams/cisco/200-301/view/12/ 32/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

https://www.examtopics.com/exams/cisco/200-301/view/12/ 33/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1377 Topic 1

SIMULATION

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab doses and cannot be reopened.

Topology

Tasks

Refer to the topology. All physical cabling is in place. Routers 2 and 3 are inaccessible. Configure OSPF routing for the network and ensure R1 has

joined Area 0 without using network statements.

Task 1

• Configure OSPF on R1 with a process ID and router- ID only as follows:

o use process ID 33

o use EO/1 IP as the router ID

https://www.examtopics.com/exams/cisco/200-301/view/12/ 34/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Task 2

• Configure R1 to establish neighbor adjacencies with R2 and R3. The network statement under the OSPF process must not be used.

• Configure R1 to always become the DR for Area 0

Correct Answer:

https://www.examtopics.com/exams/cisco/200-301/view/12/ 35/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1378 Topic 1

Refer to the exhibit. An engineer is creating a secure preshared key based SSID using WPA2 for a wireless network running on 2.4 GHz and 5 GHz.

Which two tasks must the engineer perform to complete the process? (Choose two.)

A. Select the 802.1x option for Auth Key Management

B. Select the AES (CCMP128) option for WPA2 WPA3 Encryption

C. Select the AES option for Auth Key Management

D. Select the PSK option for Auth Key Management

E. Select the WPA Policy option.

Correct Answer: BD

Question #1379 Topic 1

Which Rapid PVST+ port state does a port operate in without receiving BPDUs from neighbors or updating the address database?

A. listening

B. forwarding

C. disabled Most Voted

D. blocking

Correct Answer: C

Community vote distribution

C (60%) D (40%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 36/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1380 Topic 1

Which protocol should be used to transfer large files on a company intranet that allows TCP 20 and 21 through the firewall?

A. SMTP

B. REST API

C. TFTP

D. FTP Most Voted

Correct Answer: D

Community vote distribution

D (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 37/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1381 Topic 1

Refer to the exhibit. What is the cause of poor performance on router R19?

A. excessive collisions

B. excessive CRC errors

C. port oversubscription Most Voted

D. speed and duplex mismatch

Correct Answer: C

Community vote distribution

C (83%) D (17%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 38/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1382 Topic 1

Why is UDP more suitable than TCP for applications that require low latency, such as VoIP?

A. UDP uses sequencing data for packets to arrive in order, and TCP offers the capability to receive packets in random order.

B. TCP uses congestion control for efficient packet delivery, and UDP uses flow control mechanisms for the delivery of packets

C. UDP reliably guarantees delivery of all packets, and TCP drops packets under heavy load.

D. TCP sends an acknowledgment for every packet that is received, and UDP operates without acknowledgments. Most Voted

Correct Answer: D

Community vote distribution

D (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 39/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1383 Topic 1

Refer to the exhibit. Which switch in this configuration will be elected as the root bridge?

SW1: 0С:0А:05:22:05:97 -

SW2: 0C:0A:A8:1A:3C:9D -

SW3: 0С:0А:18:81:ВЗ:19 -

SW4: 0С:4А:82:56:35:78

A. SW1

B. SW2

C. SW3 Most Voted

D. SW4

Correct Answer: C

Community vote distribution

C (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 40/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1384 Topic 1

Which alternative to password authentication is implemented to allow enterprise devices to log in to the corporate network?

A. 90-day renewal policies

B. magic links

C. one-time passwords

D. digital certificates Most Voted

Correct Answer: D

Community vote distribution

D (100%)

Question #1385 Topic 1

Refer to the exhibit. An engineer is using the Cisco WLC GUI to configure a WLAN for WPA2 encryption with AES and preshared key Cisc0123456.

After the engineer selects the WPA + WPA2 option from the Layer 2 Security drop-down list, which two tasks must they perform to complete the

process? (Choose two.)

A. Select CCKM from the Auth Key Mgmt drop-down list, set the PSK Format to Hex, and enter the key

B. Select PSK from the Auth Key Mgmt drop-down list, set the PSK Format to ASCII, and enter the key.

C. Select ASCII from the PSK Format drop-down list, enter the key, and leave the Auth Key Mgmt setting blank

D. Select the WPA2 Policy and AES check boxes.

E. Select the WPA2 Policy, AES, and TKIP check boxes

Correct Answer: BD

Community vote distribution

BD (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 41/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1386 Topic 1

Which authentication method requires the user to provide a physical attribute to authenticate successfully?

A. biometric Most Voted

B. password

C. multifactor

D. certificate

Correct Answer: A

Community vote distribution

A (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 42/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1387 Topic 1

Refer to the exhibit. Which switch in this configuration will be elected as the root bridge?

SW1 0С:E4:85:71:03:80 -

SW2 0С:0E:1A:22:05:97 -

SW3 0C:E0:A1:1A:3C:9D -

SW4 0С:00:18:A1:B3:19

A. SW1

B. SW2

C. SW3

D. SW4

Correct Answer: C

Community vote distribution

B (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 43/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1388 Topic 1

Refer to the exhibit. Which switch in this configuration will be elected as the root bridge?

SW1 0С:B4:86:22:42:37 -

SW2 0С:0B:15:22:05:97 -

SW3 0C:0B:15:1A:3C:9D -

SW4 0С:B0:18:A1:B3:19

A. SW1

B. SW2

C. SW3

D. SW4

Correct Answer: C

Community vote distribution

https://www.examtopics.com/exams/cisco/200-301/view/12/ 44/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics
C (100%)

Question #1389 Topic 1

Which mechanism allows WPA3 to provide a higher degree of security than its predecessors?

A. automatic device pairing

B. SAE password-based key exchange

C. certificate-based authentication

D. special-character support in preshared keys

Correct Answer: B

Community vote distribution

B (100%)

Question #1390 Topic 1

Which protocol does Ansible use to push modules to nodes in a network?

A. Telnet

B. Kerberos

C. SNMP

D. SSH

Correct Answer: D

Community vote distribution

D (100%)

Question #1391 Topic 1

Which function does an iterative DNS query serve in the domain name resolution process?

A. Obtain information directly from all root DNS servers configured within the scope.

B. Encrypt communication automatically between DNS clients and servers.

C. Allow a DNS client to contact several DNS servers until the correct information is found.

D. Update records dynamically across multiple DNS servers at the same time.

Correct Answer: B

Community vote distribution

C (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 45/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1392 Topic 1

What is the difference between controller-based networks and traditional networks as they relate to control-plane and/or data-plane functions?

A. Controller-based networks centralize all important data-plane functions, and traditional networks distribute data-plane functions.

B. Traditional networks centralize all important control-plane functions, and controller-based networks distribute control-plane functions.

C. Traditional networks centralize all important data-plane functions, and controller-based networks distribute data-plane functions.

D. Controller-based networks centralize all important control-plane functions, and traditional networks distribute control-plane functions.

Most Voted

Correct Answer: D

Community vote distribution

D (100%)

Question #1393 Topic 1

Why choose Cisco DNA Center for automated lifecycle management?

A. to allow SSH access to ail nodes in the network

B. to provide software redundancy in the network

C. to perform upgrades without service interruption

D. to provide fast and accurate deployment of patches and updates

Correct Answer: D

Community vote distribution

D (100%)

Question #1394 Topic 1

What is the default interface for in-band wireless network management on a WLC?

A. out-of-band

B. redundant port

C. service port

D. wireless management

Correct Answer: D

Community vote distribution

D (100%)

https://www.examtopics.com/exams/cisco/200-301/view/12/ 46/47
12/26/24, 10:35 AM 200-301 Exam - Free Actual Q&As, Page 12 | ExamTopics

Question #1395 Topic 1

Which factor must be considered during the implementation of an IPsec VPN?

A. In IPsec tunnel mode, the entire original IP datagram is encrypted. Most Voted

B. IPsec transport mode increases GRE tunnel security over tunnel mode.

C. In IPsec tunnel mode, only the IP payload is encrypted.

D. IPsec transport mode leaves the Layer 4 header unencrypted for inspection.

Correct Answer: A

Community vote distribution

A (100%)

Browse atleast 50% to increase passing rate

 Previous Questions

Viewing page 12 out of 12 pages.

Viewing questions 551-595 out of 1395 questions

https://www.examtopics.com/exams/cisco/200-301/view/12/ 47/47