Weekend Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: scxmas70

200-301 Exam Dumps - Cisco Certified Network Associate

Question # 4

Which network action occurs within the data plane?

A.

compare the destination IP address to the IP routing table.

B.

run routing protocols (OSPF, EIGRP, RIP, BGP)

C.

make a configuration change from an incoming NETCONF RPC

D.

reply to an incoming ICMP echo request

Full Access
Question # 5

Which QoS Profile is selected in the GUI when configuring a voice over WLAN deployment?

A.

Bronze

B.

Platinum

C.

Silver

D.

Gold

Full Access
Question # 6

Which configuration ensures that the switch is always the root for VLAN 750?

A.

Switch(config)#spanning-tree vlan 750 priority 38003685

B.

Switch(config)#spanning-tree vlan 750 root primary

C.

Switch(config)#spanning-tree vlan 750 priority 614440

D.

Switch(config)#spanning-tree vlan 750 priority 0

Full Access
Question # 7

Refer to the exhibit.

What is the next hop address for traffic that is destined to host 10.0.1.5?

A.

10.0.1.3

B.

10.0.1.50

C.

10.0.1.4

D.

Loopback D

Full Access
Question # 8

A network engineer is configuring an OSPFv2 neighbor adjacency Drag and drop the parameters from the left onto their required categories on the right. Not all parameters are used

Full Access
Question # 9

Drag and drop the WLAN components from the left onto the correct descriptions on the right.

Full Access
Question # 10

What is the purpose of traffic shaping?

A.

to mitigate delays over slow links

B.

to provide fair queuing for buffered flows

C.

to limit the bandwidth that a flow can use to

D.

be a marking mechanism that identifies different flows

Full Access
Question # 11

What is a DNS lookup operation?

A.

DNS server pings the destination to verify that it is available

B.

serves requests over destination port 53

C.

DNS server forwards the client to an alternate IP address when the primary IP is down

D.

responds to a request for IP address to domain name resolution to the DNS server

Full Access
Question # 12

Which device tracks the state of active connections in order to make a decision to forward a packet through?

A.

wireless access point

B.

firewall

C.

wireless LAN controller

D.

router

Full Access
Question # 13

Which mode must be used to configure EtherChannel between two switches without using a negotiation protocol?

A.

on

B.

auto

C.

active

D.

desirable

Full Access
Question # 14

An email user has been lured into clicking a link in an email sent by their company's security organization. The webpage that opens reports that it was safe but the link could have contained malicious code. Which type of security program is in place?

A.

Physical access control

B.

Social engineering attack

C.

brute force attack

D.

user awareness

Full Access
Question # 15

An engineer is asked to protect unused ports that are configured in the default VLAN on a switch.

Which two steps will fulfill the request? (Choose two)

A.

Configure the ports in an EtherChannel.

B.

Administratively shut down the ports

C.

Configure the port type as access and place in VLAN 99

D.

Configure the ports as trunk ports

E.

Enable the Cisco Discovery Protocol

Full Access
Question # 16

Which technology allows for multiple operating systems to be run on a single host computer?

A.

virtual routing and forwarding

B.

network port ID visualization

C.

virtual device contexts

D.

server visualization

Full Access
Question # 17

How does Cisco DNA Center gather data from the network?

A.

Network devices use different services like SNMP, syslog, and streaming telemetry to send data to the controller

B.

Devices establish an iPsec tunnel to exchange data with the controller

C.

Devices use the call-home protocol to periodically send data to the controller.

D.

The Cisco CU Analyzer tool gathers data from each licensed network device and streams it to the controller.

Full Access
Question # 18

Which command enables a router to become a DHCP client?

A.

ip address dhcp

B.

ip helper-address

C.

ip dhcp pool

D.

ip dhcp client

Full Access
Question # 19

Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they mitigate on the right.

Full Access
Question # 20

Refer to the exhibit.

An access list is required to permit traffic from any host on interface G0/0 and deny traffic from interface G/0/1. Which access list must be applied?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 21

What are two benefits of controller-based networking compared to traditional networking?

A.

controller-based increases network bandwidth usage, while traditional lightens the load on the network.

B.

controller-based inflates software costs, while traditional decreases individual licensing costs

C.

Controller-based reduces network configuration complexity, while traditional increases the potential for errors

D.

Controller-based provides centralization of key IT functions. While traditional requires distributes management function

E.

controller-based allows for fewer network failure, while traditional increases failure rates.

Full Access
Question # 22

Refer to the exhibit.

Which two commands, when configured on router R1, fulfill these requirements? (Choose two.)

Packets towards the entire network 2001:db8:2::/64 must be forwarded through router R2.

Packets toward host 2001:db8:23::14 preferably must be forwarded through R3.

A.

Ipv6 route 2001:db8:23::/128 fd00:12::2

B.

Ipv6 route 2001:db8:23::14/128 fd00:13::3

C.

Ipv6 route 2001:db8:23::14/64 fd00:12::2

D.

Ipv6 route 2001:db8:23::/64 fd00:12::2

E.

Ipv6 route 2001:db8:23::14/64 fd00:12::2 200

Full Access
Question # 23

Which command automatically generates an IPv6 address from a specified IPv6 prefix and MAC address of an interface?

A.

ipv6 address dhcp

B.

ipv6 address 2001:DB8:5:112::/64 eui-64

C.

ipv6 address autoconfig

D.

ipv6 address 2001:DB8:5:112::2/64 link-local

Full Access
Question # 24

What mechanism carries multicast traffic between remote sites and supports encryption?

A.

ISATAP

B.

GRE over iPsec

C.

iPsec over ISATAP

D.

GRE

Full Access
Question # 25

Which function does the range of private IPv4 addresses perform?

A.

allows multiple companies to each use the same addresses without conflicts

B.

provides a direct connection for hosts from outside of the enterprise network

C.

ensures that NAT is not required to reach the internet with private range addressing

D.

enables secure communications to the internet for all external hosts

Full Access
Question # 26

What are two functions of an SDN controller? (Choose two)

A.

Layer 2 forwarding

B.

coordinating VTNs

C.

tracking hosts

D.

managing the topology

E.

protecting against DDoS attacks

Full Access
Question # 27

Drag and drop the 802.11 wireless standards from the left onto the matching statements on the right

Full Access
Question # 28

What are two functions of a Layer 2 switch? (Choose two)

A.

acts as a central point for association and authentication servers

B.

selects the best route between networks on a WAN

C.

moves packets within a VLAN

D.

moves packets between different VLANs

E.

makes forwarding decisions based on the MAC address of a packet

Full Access
Question # 29

Which 802.11 frame type is association response?

A.

management

B.

protected frame

C.

control

D.

action

Full Access
Question # 30

Refer to the exhibit.

An engineer configured NAT translations and has verified that the configuration is correct.

Which IP address is the source IP?

A.

10.4.4.4

B.

10.4.4.5

C.

172.23.103.10

D.

172.23.104.4

Full Access
Question # 31

Refer to the exhibit.

Which type of route does R1 use to reach host 10.10.13.10/32?

A.

floating static route

B.

host route

C.

default route

D.

network route

Full Access
Question # 32

Refer to the exhibit.

How does the router manage traffic to 192.168.12.16?

A.

It selects the RIP route because it has the longest prefix inclusive of the destination address.

B.

It chooses the OSPF route because it has the longest prefix inclusive of the destination address.

C.

it load-balances traffic between all three routes

D.

It chooses the EIGRP route because it has the lowest administrative distance

Full Access
Question # 33

What causes a port to be placed in the err-disabled state?

A.

latency

B.

port security violation

C.

shutdown command issued on the port

D.

nothing plugged into the port

Full Access
Question # 34

When implementing a router as a DHCP server, which two features must be configured'? (Choose two)

A.

relay agent information

B.

database agent

C.

address pool

D.

smart-relay

E.

manual bindings

Full Access
Question # 35

Refer to the exhibit.

Router R4 is dynamically learning the path to the server. If R4 is connected to R1 via OSPF Area 20, to R2 v2ia R2 BGP, and to R3 via EIGRP 777, which path is installed in the routing table of R4?

A.

the path through R1, because the OSPF administrative distance is 110

B.

the path through R2. because the IBGP administrative distance is 200

C.

the path through R2 because the EBGP administrative distance is 20

D.

the path through R3. because the EIGRP administrative distance is lower than OSPF and BGP

Full Access
Question # 36

Which spanning-tree enhancement avoids the learning and listening states and immediately places ports in the forwarding state?

A.

BPDUfilter

B.

PortFast

C.

Backbonefast

D.

BPDUguard

Full Access
Question # 37

Drag and drop the QoS congestion management terms from the left onto the description on the right.

Full Access
Question # 38

Drag and drop the functions from the left onto the correct network components on the right

Full Access
Question # 39

What criteria is used first during me root port selection process?

A.

local port ID

B.

lowest path cost to the root bridge

C.

lowest neighbor's bridge ID

D.

lowest neighbor's port ID

Full Access
Question # 40

Refer to the exhibit.

An administrator must turn off the Cisco Discovery Protocol on the port configured with address last usable address in the 10.0.0.0/30 subnet. Which command set meets the requirement?

A.

interface gi0/1

no cdp enable

B.

interface gi0/1

clear cdp table

C.

interface gi0/0

no cdp advertise-v2

D.

interface gi0/0

no cdp run

Full Access
Question # 41

What is a function of Wireless LAN Controller?

A.

register with a single access point that controls traffic between wired and wireless endpoints.

B.

use SSIDs to distinguish between wireless clients.

C.

send LWAPP packets to access points.

D.

monitor activity on wireless and wired LANs

Full Access
Question # 42

Refer to the exhibit.

Which switch becomes the root of the spanning tree for VLAN 110?

A.

Switch 1

B.

Switch 2

C.

Switch 3

D.

Switch 4

Full Access
Question # 43

What is the difference regarding reliability and communication type between TCP and UDP?

A.

TCP is reliable and is a connection-oriented protocol UDP is not reliable and is a connectionless protocol

B.

TCP is not reliable and is a connection-oriented protocol; UDP is reliable and is a connectionless protocol

C.

TCP is not reliable and is a connectionless protocol; UDP is reliable and is a connection-oriented protocol

D.

TCP is reliable and is a connectionless protocol; UDP is not reliable and is a connection-oriented protocol

Full Access
Question # 44

Refer to the exhibit. All routers in the network are configured R2 must be the DR. After the engineer connected the devices, R1 was elected as the DR. Which command sequence must be configure on R2 to Be elected as the DR in the network?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 45

How does a switch process a frame received on Fa0/1 with the destination MAC address of 0e38.7363.657b when the table is missing the address?

A.

lt drops the frame immediately.

B.

It forwards the frame back out of interface Fa0/1.

C.

It floods the frame to all interfaces except Fa0/1.

D.

It holds the frame until the MAC address timer expires and then drops the frame.

Full Access
Question # 46

Drag drop the descriptions from the left onto the correct configuration-management technologies on the right.

Full Access
Question # 47

Drag and drop the attack-mitigation techniques from the left onto the Types of attack that they mitigate on the right.

Full Access
Question # 48

Which type of attack can be mitigated by dynamic ARP inspection?

A.

worm

B.

malware

C.

DDoS

D.

man-in-the-middle

Full Access
Question # 49

Which action does the router take as it forwards a packet through the network?

A.

The router replaces the original source and destination MAC addresses with the sending router MAC address as the source and neighbor MAC address as the destination

B.

The router encapsulates the original packet and then includes a tag that identifies the source router MAC address and transmits it transparently to the destination

C.

The router encapsulates the source and destination IP addresses with the sending router IP address as the source and the neighbor IP address as the destination

D.

The router replaces the source and destination labels with the sending router interface label as a source and the next hop router label as a destination

Full Access
Question # 50

Why was the RFC 1918 address space defined?

A.

conserve public IPv4 addressing

B.

preserve public IPv6 address space

C.

reduce instances of overlapping IP addresses

D.

support the NAT protocol

Full Access
Question # 51

What are two reasons that cause late collisions to increment on an Ethernet interface? (Choose two)

A.

when the sending device waits 15 seconds before sending the frame again

B.

when the cable length limits are exceeded

C.

when one side of the connection is configured for half-duplex

D.

when Carrier Sense Multiple Access/Collision Detection is used

E.

when a collision occurs after the 32nd byte of a frame has been transmitted

Full Access
Question # 52

Refer to the exhibit.

R5 is the current DR on the network, and R4 is the BDR. Their interfaces are flapping, so a network engineer wants the OSPF network to elect a different DR and BDR. Which set of configurations must the engineer implement?

A)

B)

C)

D)

A.

Option

B.

Option

C.

Option

D.

Option

Full Access
Question # 53

Drag and drop the AAA terms from the left onto the description on the right.

Full Access
Question # 54

What is the same for both copper and fiber interfaces when using SFP modules?

A.

They support an inline optical attenuator to enhance signal strength

B.

They provide minimal interruption to services by being hot-swappable

C.

They offer reliable bandwidth up to 100 Mbps in half duplex mode

D.

They accommodate single-mode and multi-mode in a single module

Full Access
Question # 55

Why does a switch flood a frame to all ports?

A.

The frame has zero destination MAC addresses.

B.

The source MAC address of the frame is unknown

C.

The source and destination MAC addresses of the frame are the same

D.

The destination MAC address of the frame is unknown.

Full Access
Question # 56

Which type of organization should use a collapsed-core architecture?

A.

large and requires a flexible, scalable network design

B.

large and must minimize downtime when hardware fails

C.

small and needs to reduce networking costs currently

D.

small but is expected to grow dramatically in the near future

Full Access
Question # 57

Refer to the exhibit.

Which route type is configured to reach the internet?

A.

host route

B.

default route

C.

floating static route

D.

network route

Full Access
Question # 58

Which network plane is centralized and manages routing decisions?

A.

policy plane

B.

management plane

C.

control plane

D.

data plane

Full Access
Question # 59

A packet is destined for 10.10.1.22. Which static route does the router choose to forward the packet?

A.

ip route 10.10.1.0 255.255.255.240 10.10.255.1

B.

ip route 10.10.1.16 255.255.255.252 10.10.255.1

C.

ip route 10.10.1.20 255.255.255.252 10.10.255.1

D.

ip route 10.10.1.20 255.255.255.254 10.10.255.1

Full Access
Question # 60

Which two primary drivers support the need for network automation? (Choose two.)

A.

Eliminating training needs

B.

Increasing reliance on self-diagnostic and self-healing

C.

Policy-derived provisioning of resources

D.

Providing a ship entry point for resource provisioning

E.

Reducing hardware footprint

Full Access
Question # 61

Drag and drop the descriptions from the left onto the configuration-management technologies on the right.

Full Access
Question # 62

What does an SDN controller use as a communication protocol to relay forwarding changes to a southbound API?

A.

OpenFlow

B.

Java

C.

REST

D.

XML

Full Access
Question # 63

Which two actions influence the EIGRP route selection process? (Choose two)

A.

The router calculates the reported distance by multiplying the delay on the exiting Interface by 256.

B.

The router calculates the best backup path to the destination route and assigns it as the feasible successor.

C.

The router calculates the feasible distance of all paths to the destination route

D.

The advertised distance is calculated by a downstream neighbor to inform the local router of the bandwidth on the link

E.

The router must use the advertised distance as the metric for any given route

Full Access
Question # 64

Refer to the exhibit.

The New York router is configured with static routes pointing to the Atlanta and Washington sites. Which two tasks must be performed so that the Serial0/0/0 interfaces on the Atlanta and Washington routers can reach one another?

(Choose two.)

A.

Configure the ipv6 route 2012::/126 2023::1 command on the Washington router.

B.

Configure the ipv6 route 2023::/126 2012::1 command on the Atlanta router.

C.

Configure the Ipv6 route 2012::/126 s0/0/0 command on the Atlanta router.

D.

Configure the ipv6 route 2023::/126 2012::2 command on the Atlanta router.

E.

Configure the ipv6 route 2012::/126 2023::2 command on the Washington router.

Full Access
Question # 65

Refer to the exhibit.

Router R1 is running three different routing protocols. Which route characteristic is used by the router to forward the packet that it receives for destination IP 172.16.32.1?

A.

longest prefix

B.

metric

C.

cost

D.

administrative distance

Full Access
Question # 66

Refer to the exhibit.

What does router R1 use as its OSPF router-ID?

A.

10.10.1.10

B.

10.10.10.20

C.

172.16.15.10

D.

192.168.0.1

Full Access
Question # 67

Refer to the exhibit.

Drag and drop the networking parameters from the left onto the correct values on the right.

Full Access
Question # 68

An administrator must secure the WLC from receiving spoofed association requests. Which steps must be taken to configure the WLC to restrict the requests and force the user to wait 10 ms to retry an association request?

A.

Enable Security Association Teardown Protection and set the SA Query timeout to 10

B.

Enable MAC filtering and set the SA Query timeout to 10

C.

Enable 802.1x Layer 2 security and set me Comeback timer to 10

D.

Enable the Protected Management Frame service and set the Comeback timer to 10

Full Access
Question # 69

A device detects two stations transmitting frames at the same time. This condition occurs after the first 64 bytes of the frame is received interface counter increments?

A.

collision

B.

CRC

C.

runt

D.

late collision

Full Access
Question # 70

Drag and drop the lightweight access point operation modes from the left onto the descriptions on the right

Full Access
Question # 71

Which 802.11 frame type is indicated by a probe response after a client sends a probe request?

A.

action

B.

management

C.

control

D.

data

Full Access
Question # 72

What is the benefit of configuring PortFast on an interface?

A.

After the cable is connected, the interface uses the fastest speed setting available for that cable type

B.

After the cable is connected, the interface is available faster to send and receive user data

C.

The frames entering the interface are marked with higher priority and then processed faster by a switch.

D.

Real-time voice and video frames entering the interface are processed faster

Full Access
Question # 73

When a site-to-site VPN is used, which protocol is responsible for the transport of user data?

A.

IKEv2

B.

IKEv1

C.

IPsec

D.

MD5

Full Access
Question # 74

What is the effect when loopback interfaces and the configured router ID are absent during the OSPF Process configuration?

A.

No router ID is set, and the OSPF protocol does not run.

B.

The highest up/up physical interface IP address is selected as the router ID.

C.

The lowest IP address is incremented by 1 and selected as the router ID.

D.

The router ID 0.0.0.0 is selected and placed in the OSPF process.

Full Access
Question # 75

Refer to the exhibit.

A packet is being sent across router R1 to host 172.16.0.14. What is the destination route for the packet?

A.

209.165.200.254 via Serial0/0/1

B.

209.165.200.254 via Serial0/0/0

C.

209.165.200.246 via Serial0/1/0

D.

209.165.200.250 via Serial0/0/0

Full Access
Question # 76

Refer to the exhibit.

An engineer is bringing up a new circuit to the MPLS provider on the Gi0/1 interface of Router1 The new circuit uses eBGP and teams the route to VLAN25 from the BGP path What s the expected behavior for the traffic flow for route 10.10.13.0/25?

A.

Traffic to 10.10.13.0.25 is load balanced out of multiple interfaces

B.

Route 10.10.13.0/25 is updated in the routing table as being learned from interface Gi0/1.

C.

Traffic to 10.10.13.0/25 is asymmeteical

D.

Route 10.10.13.0/25 learned via the GiO/0 interface remains in the routing table

Full Access
Question # 77

An engineer observes high usage on the 2.4GHz channels and lower usage on the 5GHz channels. What must be configured to allow clients to preferentially use 5GH2 access points?

A.

Re- Anchor Roamed Clients

B.

11ac MU-MIMO

C.

OEAP Split Tunnel

D.

Client Band Select

Full Access
Question # 78

Where does a switch maintain DHCP snooping information?

A.

in the MAC address table

B.

in the CAM table

C.

in the binding database

D.

in the frame forwarding database

Full Access
Question # 79

Refer to the exhibit.

Which IPv6 configuration is required for R17 to successfully ping the WAN interface on R18?

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 80

Refer to the exhibit.

Based on the LACP neighbor status, in which mode is the SW1 port channel configured?

A.

passive

B.

mode on

C.

auto

D.

active

Full Access
Question # 81

Which statement about Link Aggregation when implemented on a Cisco Wireless LAN Controller is true?

A.

To pass client traffic two or more ports must be configured.

B.

The EtherChannel must be configured in "mode active"

C.

When enabled the WLC bandwidth drops to 500 Mbps

D.

One functional physical port is needed to pass client traffic

Full Access
Question # 82

A wireless administrator has configured a WLAN; however, the clients need access to a less congested 5-GHz network for their voice quality. What action must be taken to meet the requirement?

A.

enable AAA override

B.

enable RX-SOP

C.

enable DTIM

D.

enable Band Select

Full Access
Question # 83

Refer to the exhibit.

An engineer is tasked with verifying network configuration parameters on a client workstation to report back to the team lead. Drag and drop the node identifiers from the left onto the network parameters on the right.

Full Access
Question # 84

Refer to Exhibit.

An engineer is configuring the NEW York router to reach the Lo1 interface of the Atlanta router using interface Se0/0/0 as the primary path. Which two commands must be configured on the New York router so that it can reach the Lo1 interface of the Atlanta router via Washington when the link between New York and Atlanta goes down? (Choose two)

A.

ipv6 router 2000::1/128 2012::1

B.

ipv6 router 2000::1/128 2012::1 5

C.

ipv6 router 2000::1/128 2012::2

D.

ipv6 router 2000::1/128 2023::2 5

E.

ipv6 router 2000::1/128 2023::3 5

Full Access
Question # 85

Refer to the exhibit.

Which two prefixes are included in this routing table entry? (Choose two.)

A.

192.168.1.17

B.

192.168.1.61

C.

192.168.1.64

D.

192.168.1.127

E.

192.168.1.254

Full Access
Question # 86

Refer to the exhibit.

An administrator must configure interfaces Gi1/1 and Gi1/3 on switch SW11 PC-1 and PC-2 must be placed in the Data VLAN and Phone-1 must be placed in the Voice VLAN Which configuration meets these requirements?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 87

What is a role of access points in an enterprise network?

A.

connect wireless devices to a wired network

B.

support secure user logins to devices or the network

C.

integrate with SNMP in preventing DDoS attacks

D.

serve as a first line of defense in an enterprise network

Full Access
Question # 88

An office has 8 floors with approximately 30-40 users per floor What command must be configured on the router Switched Virtual Interface to use address space efficiently?

A.

ip address 192.168.0.0 255.255.0.0

B.

ip address 192.168.0.0 255.255.254.0

C.

ip address 192.168.0.0 255.255.255.128

D.

ip address 192.168.0.0 255.255.255.224

Full Access
Question # 89

A user configured OSPF and advertised the Gigabit Ethernet interface in OSPF By default, which type of OSPF network does this interface belong to?

A.

point-to-multipoint

B.

point-to-point

C.

broadcast

D.

nonbroadcast

Full Access
Question # 90

A network administrator must to configure SSH for remote access to router R1 The requirement is to use a public and private key pair to encrypt management traffic to and from the connecting client.

Which configuration, when applied, meets the requirements?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 91

Refer to the exhibit.

An engineer configured the New York router with state routes that point to the Atlanta and Washington sites. When command must be configured on the Atlanta and Washington routers so that both sites are able to reach the loopback2 interface on the New York router?

A.

ipv6 route ::/0 Serial 0/0/1

B.

ipv6 route 0/0 Serial 0/0/0

C.

ipv6 route ::/0 Serial 0/0/0

D.

ip route 0.0.0.0.0.0.0.0 Serial 0/0/0

E.

ipv6 route ::/0 2000::2

Full Access
Question # 92

Which IPv6 address type provides communication between subnets and is unable to route on the Internet?

A.

global unicast

B.

unique local

C.

link-local

D.

multicast

Full Access
Question # 93

Which statement correctly compares traditional networks and controller-based networks?

A.

Only traditional networks offer a centralized control plane

B.

Only traditional networks natively support centralized management

C.

Traditional and controller-based networks abstract policies from device configurations

D.

Only controller-based networks decouple the control plane and the data plane

Full Access
Question # 94

Refer to the exhibit.

Which configuration issue is preventing the OSPF neighbor relationship from being established between the two routers?

A.

R2 is using the passive-interface default command

B.

R1 has an incorrect network command for interface Gi1/0

C.

R2 should have its network command in area 1

D.

R1 interface Gil/0 has a larger MTU size

Full Access
Question # 95

Refer to the exhibit.

Between which zones do wireless users expect to experience intermittent connectivity?

A.

between zones 1 and 2

B.

between zones 2 and 5

C.

between zones 3 and 4

D.

between zones 3 and 6

Full Access
Question # 96

Which two protocols must be disabled to increase security for management connections to a Wireless LAN Controller? (Choose two )

A.

Telnet

B.

SSH

C.

HTTP

D.

HTTPS

E.

TFTP

Full Access
Question # 97

How do traditional campus device management and Cisco DNA Center device management differ in regards to deployment?

A.

Cisco DNA Center device management can deploy a network more quickly than traditional campus device management

B.

Traditional campus device management allows a network to scale more quickly than with Cisco DNA Center device management

C.

Cisco DNA Center device management can be implemented at a lower cost than most traditional campus device management options

D.

Traditional campus device management schemes can typically deploy patches and updates more quickly than Cisco DNA Center device management

Full Access
Question # 98

An engineer must configure an OSPF neighbor relationship between router R1 and R3 The authentication configuration has been configured and the connecting interfaces are in the same 192.168 1.0/30 sublet. What are the next two steps to complete the configuration? (Choose two.)

A.

configure the hello and dead timers to match on both sides

B.

configure the same process ID for the router OSPF process

C.

configure the same router ID on both routing processes

D.

Configure the interfaces as OSPF active on both sides.

E.

configure both interfaces with the same area ID

Full Access
Question # 99

All physical cabling between the two switches is installed. Configure the network connectivity between the switches using the designated VLANs and interfaces.

1. Configure VLAN 100 named Compute and VLAN 200 named Telephony where required for each task.

2. Configure Ethernet0/1 on SW2 to use the existing VLAN named Available.

3. Configure the connection between the switches using access ports.

4. Configure Ethernet0/1 on SW1 using data and voice VLANs.

5. Configure Ethemet0/1 on SW2 so that the Cisco proprietary neighbor discovery protocol is turned off for the designated interface only.

Full Access
Question # 100

Configure IPv4 and IPv6 connectivity between two routers. For IPv4, use a /28 network from the 192.168.1.0/24 private range. For IPv6, use the first /64 subnet from the 2001:0db8:aaaa::/48 subnet.

1. Using Ethernet0/1 on routers R1 and R2, configure the next usable/28 from the 192.168.1.0/24 range. The network 192.168.1.0/28 is unavailable.

2. For the IPv4 /28 subnet, router R1 must be configured with the first usable host address.

3. For the IPv4 /28 subnet, router R2 must be configured with the last usable host address.

4. For the IPv6 /64 subnet, configure the routers with the IP addressing provided from the topology.

5. A ping must work between the routers on the IPv4 and IPv6 address ranges.

Full Access
Question # 101

All physical cabling is in place. Router R4 and PCI are fully configured and

inaccessible. R4's WAN interfaces use .4 in the last octet for each subnet.

Configurations should ensure that connectivity is established end-to-end.

1 . Configure static routing to ensure RI prefers the path through R2 to

reach only PCI on R4's LAN

2. Configure static routing that ensures traffic sourced from RI will take

an alternate path through R3 to PCI in the event of an outage along

the primary path

3. Configure default routes on RI and R3 to the Internet using the least number of hops

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using

the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Full Access
Question # 102

Connectivity between four routers has been established. IP connectivity must be configured in the order presented to complete the implementation. No dynamic routing protocols are included.

1. Configure static routing using host routes to establish connectivity from router R3 to the router R1 Loopback address using the source IP of 209.165.200.230.

2. Configure an IPv4 default route on router R2 destined for router R4.

3. Configure an IPv6 default router on router R2 destined for router R4.

Full Access
Question # 103

Three switches must be configured for Layer 2 connectivity. The company requires only the designated VLANs to be configured on their respective switches and permitted accross any links between switches for security purposes. Do not modify or delete VTP configurations.

The network needs two user-defined VLANs configured:

VLAN 110: MARKETING

VLAN 210: FINANCE

1. Configure the VLANs on the designated switches and assign them as access ports to the interfaces connected to the PCs.

2. Configure the e0/2 interfaces on Sw1 and Sw2 as 802.1q trunks with only the required VLANs permitted.

3. Configure the e0/3 interfaces on Sw2 and Sw3 as 802.1q trunks with only the required VLANs permitted.

Full Access
Question # 104

Physical connectivity is implemented between the two Layer 2 switches,

and the network connectivity between them must be configured.

I . Configure an LACP EtherChanneI and number it as 44; configure it

between switches SWI and SW2 using interfaces EthernetO/O and

Ethernet0/1 on both sides. The LACP mode must match on both ends.

2. Configure the EtherChanneI as a trunk link.

3. Configure the trunk link with 802. Iq tags.

4. Configure VLAN 'MONITORING' as the untagged VLAN of the

EtherChannel.

==================

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using

the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Full Access
Question # 105

Connectivity between three routers has been established, and IP services must be configured jn the order presented to complete the implementation Tasks assigned include configuration of NAT, NTP, DHCP, and SSH services.

1. All traffic sent from R3 to the R1 Loopback address must be configured for NAT on R2. All source addresses must be translated from R3 to the IP address of Ethernet0/0 on R2, while using only a standard access list named NAT To verify, a ping must be successful to the R1 Loopback address sourced from R3. Do not use NVI NAT configuration.

2. Configure R1 as an NTP server and R2 as a client, not as a peer, using the IP address of the R1 Ethernet0/2 interface. Set the clock on the NTP server for midnight on January 1, 2019.

3. Configure R1 as a DHCP server for the network 10.1.3.0/24 in a pool named TEST. Using a single command, exclude addresses 1-10 from the range. Interface Ethernet0/2 on R3 must be issued the IP address of 10.1.3.11 via DHCP.

4. Configure SSH connectivity from R1 to R3, while excluding access via other remote connection protocols. Access for user root and password Cisco must be set on router R3 using RSA and 1024 bits. Verify connectivity using an SSH session from router R1 using a destination address of 10.1.3.11. Do NOT modify console access or line numbers to accomplish this task.

Full Access
Question # 106

IP connectivity between the three routers is configured. OSPF adjacencies must be established.

1. Configure R1 and R2 Router IDs using the interface IP addresses from the link that is shared between them.

2. Configure the R2 links with a max value facing R1 and R3. R2 must become the DR. R1 and R3 links facing R2 must remain with the default OSPF configuration for DR election. Verify the configuration after clearing the OSPF process.

3. Using a host wildcard mask, configure all three routers to advertise their respective Loopback1 networks.

4. Configure the link between R1 and R3 to disable their ability to add other OSPF routers.

Full Access
Question # 107

IP connectivity and OSPF are preconfigured on all devices where necessary. Do not make any changes to the IP addressing or OSPF. The company policy uses connected interfaces and next hops when configuring static routes except for load balancing or redundancy without floating static. Connectivity must be established between subnet 172.20.20.128/25 on the Internet and the LAN at 192.168.0.0/24 connected to SW1:

1. Configure reachability to the switch SW1 LAN subnet in router R2.

2. Configure default reachability to the Internet subnet in router R1.

3. Configure a single static route in router R2 to reach to the Internet subnet considering both redundant links between routers R1 and R2. A default route is NOT allowed in router R2.

4. Configure a static route in router R1 toward the switch SW1 LAN subnet where the primary link must be through Ethernet0/1. and the backup link must be through Ethernet0/2 using a floating route. Use the minimal administrative distance value when required.

Full Access
Question # 108

All physical cabling is in place. A company plans to deploy 32 new sites.

The sites will utilize both IPv4 and IPv6 networks.

1 . Subnet 172.25.0.0/16 to meet the subnet requirements and maximize

the number of hosts

Using the second subnet

• Assign the first usable IP address to e0/0 on Sw1O1

• Assign the last usable IP address to e0/0 on Sw102

2. Subnet to meet the subnet requirements and maximize

the number of hosts

c Using the second subnet

• Assign an IPv6 GUA using a unique 64-Bit interface identifier

on e0/0 on Sw101

• Assign an IPv6 GUA using a unique 64-Bit interface identifier

on eO/O on swi02

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using

the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Full Access
Question # 109

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

Full Access
Question # 110

Physical connectivity is implemented between the two Layer 2 switches, and the network connectivity between them must be configured

1. Configure an LACP EtherChannel and number it as 1; configure it between switches SW1 and SVV2 using interfaces Ethernet0/0 and Ethernet0/1 on both sides. The LACP mode must match on both ends

2 Configure the EtherChannel as a trunk link.

3. Configure the trunk link with 802.1 q tags.

4. Configure the native VLAN of the EtherChannel as VLAN 15.

Full Access
Question # 111

Refer to the exhibit.

What are two conclusions about this configuration? {Choose two.)

A.

The spanning-tree mode is Rapid PVST+.

B.

This is a root bridge.

C.

The root port is FastEthernet 2/1.

D.

The designated port is FastEthernet 2/1.

E.

The spanning-tree mode is PVST+.

Full Access
Question # 112

Which advantage does the network assurance capability of Cisco DNA Center provide over traditional campus management?

A.

Cisco DNA Center correlates information from different management protocols to obtain insights, and traditional campus management requires manual analysis.

B.

Cisco DNA Center handles management tasks at the controller to reduce the load on infrastructure devices, and traditional campus management uses the data backbone.

C.

Cisco DNA Center leverages YANG and NETCONF to assess the status of fabric and nonfabric devices, and traditional campus management uses CLI exclusively.

D.

Cisco DNA Center automatically compares security postures among network devices, and traditional campus management needs manual comparisons.

Full Access
Question # 113

Refer to the exhibit.

A network engineer must configure communication between PC A and the file server. Which commend must be configured on switch A to prevent interruption of other communications?

A.

switch port trunk allowed vlan 12

B.

switchport trunk allowed vlan none

C.

switchport trunk allowed vlan add 13

D.

switch port trunk allowed vlan remove 10-11

Full Access
Question # 114

What is the role of disaggregation in controller-based networking?

A.

It divides the control-plane and data-plane functions.

B.

It summarizes the routes between the core and distribution layers of the network topology.

C.

It enables a network topology to quickly adjust from a ring network to a star network

D.

It streamlines traffic handling by assigning individual devices to perform either Layer 2 or Layer 3 functions.

Full Access
Question # 115

Why would VRRP be implemented when configuring a new subnet in a multivendor environment?

A.

when a gateway protocol is required that support more than two Cisco devices for redundancy

B.

to enable normal operations to continue after a member failure without requiring a change In a host ARP cache

C.

to ensure that the spanning-tree forwarding path to the gateway is loop-free

D.

to interoperate normally with all vendors and provide additional security features for Cisco devices

Full Access
Question # 116

What are two purposes of HSRP? (Choose two.)

A.

It groups two or more routers to operate as one virtual router.

B.

It improves network availability by providing redundant gateways.

C.

It passes configuration information to hosts in a TCP/IP network.

D.

It helps hosts on the network to reach remote subnets without a default gateway.

E.

It provides a mechanism for diskless clients to autoconfigure their IP parameters during boot.

Full Access
Question # 117

Refer to the exhibit.

A packet sourced from 10.10.10.1 is destined for 10.10.8.14. What is the subnet mask of the destination route?

A.

255.255.254.0

B.

255.255.255.240

C.

255.255.255.248

D.

255.255.255.252

Full Access
Question # 118

What describes the functionality of southbound APIs?

A.

They use HTTP messages to communicate.

B.

They enable communication between the controller and the network device.

C.

They convey information from the controller to the SDN applications.

D.

They communicate with the management plane.

Full Access
Question # 119

Which interface is used for out-of-band management on a WLC?

A.

dynamic

B.

service port

C.

virtual

D.

management

Full Access
Question # 120

What is the definition of backdoor malware?

A.

malicious code that is installed onto a computer to allow access by an unauthorized user

B.

malicious code with the main purpose of downloading other malicious code

C.

malicious program that is used to launch other malicious programs

D.

malicious code that infects a user machine and then uses that machine to send spam

Full Access
Question # 121

Refer to the exhibit.

Packets are flowing from 192.168 10.1 to the destination at IP address 192.168.20 75. Which next hop will the router select for the packet?

A.

10.10101

B.

10.10.10.11

C.

10.10.10.12

D.

10.101014

Full Access
Question # 122

What is the role of SNMP in the network?

A.

to monitor network devices and functions using a TCP underlay that operates on the presentation layer

B.

to collect data directly from network devices using an SSL underlay that operates on the transport layer

C.

to monitor and manage network devices using a UDP underlay that operates on the application layer

D.

to collect telemetry and critical information from network devices using an SSH underlay that operates on the network layer

Full Access
Question # 123

A Cisco engineer at a new branch office is configuring a wireless network with access points that connect to a controller that is based at corporate headquarters Wireless client traffic must terminate at the branch office and access-point survivability is required in the event of a WAN outage Which access point mode must be selected?

A.

Lightweight with local switching disabled

B.

Local with AP fallback enabled

C.

OfficeExtend with high availability disabled

D.

FlexConnect with local switching enabled

Full Access
Question # 124

What is a specification for SSIDS?

A.

They are a Cisco proprietary security feature.

B.

They must include one number and one letter.

C.

They define the VLAN on a switch.

D.

They are case sensitive.

Full Access
Question # 125

How does encryption project the wireless network?

A.

via integrity checks to identify wireless forgery attacks in the frame

B.

via specific ciphers to detect and prevent zero-day network attacks

C.

via an algorithm to change wireless data so that only the access point and client understand it

D.

via a policy to prevent unauthorized users from communicating on the wireless network

Full Access
Question # 126

What is the primary purpose of a console port on a Cisco WLC?

A.

In-band management via an asynchronous transport

B.

out-of-band management via an IP transport

C.

in-band management via an IP transport

D.

out-of-band management via an asynchronous transport

Full Access
Question # 127

Refer to the exhibit.

A network engineer must update the configuring on switch2 so that it sends LLDP packets.

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 128

Drag and drop the use cases for device-management technologies from the left onto the corresponding.

Full Access
Question # 129

Drag and drop the AAA features from the left onto the corresponding AAA security services on the right. Not all options are used.

Full Access
Question # 130

How does authentication differ from authorization?

A.

Authentication verifies the identity of a person accessing a network, and authorization determines what resource a user can access.

B.

Authentication is used to record what resource a user accesses, and authorization is used to determine what resources a user can access

C.

Authentication is used to determine what resources a user is allowed to access, and authorization is used to track what equipment is allowed access to the network

D.

Authentication is used to verify a person's identity, and authorization is used to create syslog messages for logins.

Full Access
Question # 131

A network engineer must configure an interface with IP address 10.10.10.145 and a subnet mask equivalent to 11111111.11111111.11111111.11111000. Which subnet mask must the engineer use?

A.

/29

B.

/30

C.

/27

D.

/28

Full Access
Question # 132

Which (unction generally performed by a traditional network device is replaced by a software-defined controller?

A.

encryption and decryption for VPN link processing

B.

building route tables and updating the forwarding table

C.

changing the source or destination address during NAT operations

D.

encapsulation and decapsulation of packets in a data-link frame

Full Access
Question # 133

When the LAG configuration is updated on a Cisco WLC which additional task must be performed when changes are complete?

A.

Flush all MAC addresses from the WLC

B.

Re-associate the WLC with the access point.

C.

Re-enable the WLC interfaces

D.

Reboot the WLC

Full Access
Question # 134

Refer to the exhibit.

What is the subnet mask for route 172.16.4.0?

A.

255.255.248.0

B.

255.255.254.0

C.

255.255.255.192

D.

255.255.240.0

Full Access
Question # 135

Which device segregates a network into separate zones that have their own security policies?

A.

IPS

B.

firewall

C.

access point

D.

switch

Full Access
Question # 136

What is a function of the core and distribution layers in a collapsed-core architecture?

A.

The router must use IPv4 and IPv6 addresses at Layer 3.

B.

The core and distribution layers are deployed on two different devices to enable failover.

C.

The router can support HSRP for Layer 2 redundancy in an IPv6 network.

D.

The router operates on a single device or a redundant pair.

Full Access
Question # 137

Refer to the exhibit.

An engineer is configuring a new Cisco switch NewSW, to replace SW2 The details have been provided

• Switches SW1 and SW2 are third-party devices without support for trunk ports

• The existing connections must be maintained between PC1 PC2 and PC3

• Allow the switch to pass traffic from future VLAN 10. Which configuration must be applied?

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 138

Refer to the exhibit.

The network administrator must prevent the switch Cat9K-2 IP address from being visible in LLDP without disabling the protocol. Which action must be taken must be taken to complete the task?

A.

Configure the no lldp tlv-select-management-address command globally on Cat9K-2

B.

Configure the no lldp transmit command on interface G1/0/21 in Cat9K-1

C.

Configure the no lldp receive command on interface G1/0/21 on Cat9K-1

D.

Configure the no lldp mac-phy-cfg command globally on Cat9K-2

Full Access
Question # 139

Refer to the exhibit.

How many objects, Keys and JSON list values are present?

A.

three objects, two Keys, and three JSON list values

B.

three objects, three keys and two JSON Ml values

C.

one object, three keys, and three JSON list values

D.

one object, three keys and two JSON list values

Full Access
Question # 140

Which IP header field is changed by a Cisco device when QoS marking is enabled?

A.

Header Checksum

B.

Type of service

C.

DSCP

D.

ECN

Full Access
Question # 141

What is a reason to implement LAG on a Cisco WLC?

A.

Increase the available throughput on the link.

B.

Increase security by encrypting management frames

C.

Allow for stateful failover between WLCs

D.

Enable the connected switch ports to use different Layer 2 configurations

Full Access
Question # 142

Refer to the exhibit.

Which action must be taken so that neighbofing devices rapidly discover switch Cat9300?

A.

Configure the cdp timer 10 command on switch Cat9300.

B.

Enable portfast on the ports that connect to neighboring devices.

C.

Configure the cdp holdtime 10 command on switch Cat9300.

D.

Configure the cdp timer 10 command on the neighbors of switch Cat9300.

Full Access
Question # 143

Refer to the exhibit.

A network engineer must configure NETCONF. After creating the configuration, the engineer gets output from the command show line but not from show running- config. Which command completes the configuration?

A.

Device(config)# netconf lock-time 500

B.

Device(config)# netconf max-message 1000

C.

Device(config)# no netconf ssh acl 1

D.

Device(config)# netconf max-sessions 100

Full Access
Question # 144

Refer to the exhibit.

A network engineer must configure the link with these requirements:

• Consume as few IP addresses as possible.

• Leave at least two additional useable IP addresses for future growth.

Which set of configurations must be applied?

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 145

Which interface enables communication between a program on the controller and a program on the networking devices?

A.

northbound interface

B.

software virtual interface

C.

southbound interface

D.

tunnel Interface

Full Access
Question # 146

What are two characteristics of a small office / home office connection environment? (Choose two.)

A.

It requires 10Gb ports on all uplinks.

B.

It supports between 50 and 100 users.

C.

It supports between 1 and 50 users.

D.

It requires a core, distribution, and access layer architecture.

E.

A router port connects to a broadband connection.

Full Access
Question # 147

Refer to the exhibit.

What is missing from this output for it to be executed?

A.

double quotes C") around the "Cisco Devices" string

B.

curly brace ()) at the end

C.

exclamation point (!) at the beginning of each line

D.

square bracket ([) at the beginning

Full Access
Question # 148

Refer to the exhibit.

Which configuration establishes a Layer 2 LACP EtherChannel when applied to both switches?

A.

Interface range G1/1 – 1/3 switchport mode trunk channel-group 1 mode active no shutdown

B.

Interface range G1/1 – 1/3 switchport mode access channel-group 1 mode passive no shutdown

C.

Interface range G1/1 – 1/3 switchport mode trunk

channel-group 1 mode desirable

no shutdown

D.

Interface range G1/1 – 1/3 switchport mode access channel-group 1 mode on no shutdown

Full Access
Question # 149

Refer to the exhibit.

Which two values does router R1 use to identify valid routes for the R3 loopback address 1.1.1.3/32? (Choose two.)

A.

lowest cost to teach the next hop

B.

highest metric

C.

highest administrative distance

D.

lowest metric

E.

lowest administrative distance

Full Access
Question # 150

Refer to the exhibit.

Routers R1 and R2 are configured with RIP as the dynamic routing protocol. A network engineer must configure R1 with a floating static route to serve as a backup route to network 192.168.23. Which command must the engineer configure on R1?

A.

ip route 192.168.23.0 255.255.255.0 192.168.13.3 100

B.

ip route 192.168.23.0 255.255.255.0 192.168.13.3 121

C.

ip route 192.168.23.0 255.255.255.255 192.168.13.3 121

D.

ip route 192.168.23.0 255.255.255.0 192.168.13.3

Full Access
Question # 151

What is the purpose of configuring different levels of syslog for different devices on the network?

A.

to rate-limit messages for different seventy levels from each device

B.

to set the severity of syslog messages from each device

C.

to identify the source from which each syslog message originated

D.

to control the number of syslog messages from different devices that are stored locally

Full Access
Question # 152

Which command configures the Cisco WLC to prevent a serial session with the WLC CLI from being automatical togged out?

A.

config sessions maxsessions 0

B.

config sessions timeout 0

C.

config serial timeout 0

D.

config serial timeout 9600

Full Access
Question # 153

Refer to the exhibit.

A network engineer must configure R1 so that it sends all packets destined to the 10.0.0.0/24 network to R3, and all packets destined to PCI to R2. Which configuration must the engineer implement?

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 154

Drag and drop the statements about AAA services firm the left onto the corresponding AAA services on the right Not all options are used.

Full Access
Question # 155

How is a configuration change made to a wireless AP in lightweight mode?

A.

SSH connection to the management IP of the AP

B.

EolP connection via the parent WLC

C.

CAPWAP/LWAPP connection via the parent WLC

D.

HTTPS connection directly to the out-of-band address of the AP

Full Access
Question # 156

Refer lo the exhibit. What is the next-hop P address for R2 so that PC2 reaches the application server via ElGRP?

A.

192.168.30.1

B.

10.10 105

C.

10.10.10.6

D.

192.168.201

Full Access
Question # 157

A network engineer is implementing a corporate SSID for WPA3-Personal security with a PSK. Which encryption cipher must be configured?

A.

GCMP2S6

B.

GCMP128

C.

CCMP256

D.

CCMP128

Full Access
Question # 158

What is an advantage of using auto mode versus static mode for power allocation when an access point is connected to a PoE switch port?

A.

All four pairs of the cable are used

B.

It detects the device is a powered device

C.

The default level is used for the access point

D.

Power policing is enabled at the same time

Full Access
Question # 159

Which properly is shared by 10GBase-SR and 10GBase-LR interfaces?

A.

Both require fiber cable media for transmission.

B.

Both require UTP cable media for transmission.

C.

Both use the single-mode fiber type.

D.

Both use the multimode fiber type.

Full Access
Question # 160

Refer to the exhibit. User traffic originating within site 0 is failing to reach an application hosted on IP address 192.168 0 10. Which is located within site A What is determined by the routing table?

A.

The default gateway for site B is configured incorrectly

B.

The lack of a default route prevents delivery of the traffic

C.

The traffic is blocked by an implicit deny in an ACL on router2

D.

The traffic to 192 168 010 requires a static route to be configured in router 1.

Full Access
Question # 161

What is an enhancement implemented in WPA3?

A.

employs PKI and RADIUS to identify access points

B.

applies 802.1x authentication and AES-128 encryption

C.

uses TKIP and per-packet keying

D.

defends against deauthentication and disassociation attacks

Full Access
Question # 162

What does a switch do when it receives a frame whose destination MAC address is missing from the MAC address table?

A.

It floods the frame unchanged across all remaining ports in the incoming VLAN.

B.

It appends the table with a static entry for the MAC and shuts down the port.

C.

It updates the CAM table with the destination MAC address of the frame.

D.

It changes the checksum of the frame to a value that indicates an invalid frame.

Full Access
Question # 163

Drag and drop the characteristic from the left onto the IPv6 address type on the right.

Full Access
Question # 164

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 165

Refer to the exhibit.

An engineer assigns IP addressing to the current VLAN with three PCs. The configuration must also account for the expansion of 30 additional VLANS using the same Class C subnet for subnetting and host count. Which command set fulfills the request while reserving address space for the expected growth?

A.

Switch(config)#interface vlan 10

Switch(config-if)#ip address 192.168.0.1 265 255.255.252

B.

Switch(config)#interface vlan 10

Switch(config-if)#ip address 192.168.0.1 255 255.255.248

C.

Switch(config)#interface vlan 10

Switch(config-if)#ip address 192.168.0.1 255 255.255.0

D.

Switch(config)#interface vlan 10

Switch(config-if)#ip address 192.168.0.1 255.255.255.128

Full Access
Question # 166

Drag and drop the functions of AAA supporting protocols from the left onto the protocols on the right.

Full Access
Question # 167

What must be considered for a locally switched FlexConnect AP if the VLANs that are used by the AP and client access are different?

A.

The APs must be connected to the switch with multiple links in LAG mode

B.

The switch port mode must be set to trunk

C.

The native VLAN must match the management VLAN of the AP

D.

IEEE 802.10 trunking must be disabled on the switch port.

Full Access
Question # 168

Refer to the exhibit.

Site A was recently connected to site B over a new single-mode fiber path. Users at site A report Intermittent connectivity Issues with applications hosted at site B. What is the reason for the problem?

A.

Heavy usage is causing high latency.

B.

An incorrect type of transceiver has been inserted into a device on the link.

C.

physical network errors are being transmitted between the two sites.

D.

The wrong cable type was used to make the connection.

Full Access
Question # 169

Refer to the exhibit.

Which configuration enables DHCP addressing for hosts connected to interface FastEthernetO/1 on router R4?

A.

interface FastEthernet0/0

ip helper-address 10.0.1.1

i

access-list 100 permit udp host 10.0.1.1 eq bootps host 10.148.2.1

B.

interface FastEthernot0/1

ip helper-address 10.0.1.1

!

access-list 100 permit tcp host 10.0.1.1 eq 67 host 10.148.2.1

C.

interface FastEthernetO/0

ip helper-address 10.0.1.1

I

access-list 100 permit host 10.0.1.1 host 10.148.2.1 eq bootps

D.

interface FastEthernet0/1

ip helper-address 10.0.1.1

!

access-list 100 permit udp host 10.0.1.1 eq bootps host 10.148.2.1

Full Access
Question # 170

Drag and drop the statements about networking from the left onto the corresponding networking types on the right.

Full Access
Question # 171

An engineer must configure R1 for a new user account. The account must meet these requirements:

* It must be configured in the local database.

* The username is engineer.

* It must use the strongest password configurable. Which command must the engineer configure on the router?

A.

R1 (config)# username engineer2 algorithm-type scrypt secret test2021

B.

R1(config)# username engineer2 secret 5 .password S1$b1Ju$kZbBS1Pyh4QzwXyZ

C.

R1(config)# username engineer2 privilege 1 password 7 test2021

D.

R1(config)# username englneer2 secret 4 S1Sb1Ju$kZbBS1Pyh4QzwXyZ

Full Access
Question # 172

Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they mitigate on the right.

Full Access
Question # 173

What is a function of a Next-Generation IPS?

A.

makes forwarding decisions based on learned MAC addresses

B.

serves as a controller within a controller-based network

C.

integrates with a RADIUS server to enforce Layer 2 device authentication rules

D.

correlates user activity with network events

Full Access
Question # 174

What is the function of the controller in a software-defined network?

A.

multicast replication at the hardware level

B.

fragmenting and reassembling packets

C.

making routing decisions

D.

forwarding packets

Full Access
Question # 175

An engineer is tasked to configure a switch with port security to ensure devices that forward unicasts multicasts and broadcasts are unable to flood the port The port must be configured to permit only two random MAC addresses at a time Drag and drop the required configuration commands from the left onto the sequence on the right Not all commands are used.

Full Access
Question # 176

Which protocol uses the SSL?

A.

HTTP

B.

SSH

C.

HTTPS

D.

Telnet

Full Access
Question # 177

Refer to the exhibit.

An engineer assumes a configuration task from a peer Router A must establish an OSPF neighbor relationship with neighbor 172 1 1 1 The output displays the status of the adjacency after 2 hours. What is the next step in the configuration process for the routers to establish an adjacency?

A.

Configure router A to use the same MTU size as router B.

B.

Set the router B OSPF ID to a nonhost address.

C.

Configure a point-to-point link between router A and router B.

D.

Set the router B OSPF ID to the same value as its IP address

Full Access
Question # 178

Refer to the exhibit.

Which switch becomes the root of a spanning tree for VLAN 20 if all li links are of equal speed?

A.

SW1

B.

SW2

C.

SW3

D.

SW4

Full Access
Question # 179

Refer to the exhibit.

Which two commands must be configured on router R1 to enable the router to accept secure remote-access connections? (Choose two)

A.

transport input telnet

B.

crypto key generate rsa

C.

ip ssh pubkey-chain

D.

login console

E.

username cisco password 0 Cisco

Full Access
Question # 180

A network administrator is setting up a new IPv6 network using the 64-bit address 2001 0EB8 00C1 2200:0001 0000 0000 0331/64 To simplify the configuration the administrator has decided to compress the address Which IP address must the administrator configure?

A.

ipv6 address 21:EB8:C1:2200:1::331/64

B.

ipv6 address 2001:EB8:C1:22:1::331/64

C.

ipv6 address 2001 :EB8:C 1:2200.1 ::331-64

D.

ipv6 address 2001:EB8:C1:2200:1:0000:331/64

Full Access
Question # 181

Which characteristic differentiates the concept of authentication from authorization and accounting?

A.

user-activity logging

B.

service limitations

C.

consumption-based billing

D.

identity verification

Full Access
Question # 182

Refer to the exhibit.

Which command must be issued to enable a floating static default route on router A?

A.

lp route 0.0.0.0 0.0.0.0 192.168.1.2

B.

ip default-gateway 192.168.2.1

C.

ip route 0.0.0.0 0.0.0.0 192.168.2.1 10

D.

ip route 0.0.0.0 0.0.0.0 192.168.1.2 10

Full Access
Question # 183

Which protocol is used for secure remote CLI access?

A.

HTTPS

B.

HTTP

C.

Telnet

D.

SSH

Full Access
Question # 184

Refer to the exhibit.

Traffic that is flowing over interface TenGigabitEthernet0/0 experiences slow transfer speeds. What is the reason for the issue?

A.

heavy traffic congestion

B.

a duplex incompatibility

C.

a speed conflict

D.

queuing drops

Full Access
Question # 185

What is the purpose of the ip address dhcp command?

A.

to configure an Interface as a DHCP server

B.

to configure an interface as a DHCP helper

C.

to configure an interface as a DHCP relay

D.

to configure an interface as a DHCP client

Full Access
Question # 186

Which implementation provides the strongest encryption combination for the wireless environment?

A.

WPA2 + AES

B.

WPA + AES

C.

WEP

D.

WPA + TKIP

Full Access
Question # 187

What is a DHCP client?

A.

a workstation that requests a domain name associated with its IP address

B.

a host that is configured to request an IP address automatically

C.

a server that dynamically assigns IP addresses to hosts.

D.

a router that statically assigns IP addresses to hosts.

Full Access
Question # 188

How do servers connect to the network in a virtual environment?

A.

wireless to an access point that is physically connected to the network

B.

a cable connected to a physical switch on the network

C.

a virtual switch that links to an access point that is physically connected to the network

D.

a software switch on a hypervisor that is physically connected to the network

Full Access
Question # 189

Drag and drop the functions of DHCP from the left onto any of the positions on the right Not all functions are used

Full Access
Question # 190

Which QoS per-hop behavior changes the value of the ToS field in the IPv4 packet header?

A.

shaping

B.

classification

C.

policing

D.

marking

Full Access
Question # 191

Refer to the exhibit.

An engineer is configuring an EtherChannel using LACP between Switches 1 and 2 Which configuration must be applied so that only Switch 1 sends LACP initiation packets?

A.

Switch 1 (config-if)#channel-group 1 mode on

Swrtch2(config-if)#channel-group 1 mode passive

B.

Switch1(config-if)#channel-group 1 mode passive

Switch2(config-if)#channel-group 1 mode active

C.

Switch1{config-if)£channel-group 1 mode active

Switch2(config-if)#channel-group 1 mode passive

D.

Switch1(config-if)#channel-group 1 mode on

Switch2(config-if)#channel-group 1 mode active

Full Access
Question # 192

Refer to the exhibit.

R1 learns all routes via OSPF Which command configures a backup static route on R1 to reach the 192 168.20.0/24 network via R3?

A.

R1(config)#ip route 192.168.20.0 255.255.0.0 192.168.30.2

B.

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2 90

C.

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2 111

D.

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2

Full Access
Question # 193

Refer to the exhibit.

Users need to connect to the wireless network with IEEE 802. 11r-compatible devices. The connection must be maintained as users travel between floors or to other areas in the building What must be the configuration of the connection?

A.

Select the WPA Policy option with the CCKM option.

B.

Disable AES encryption.

C.

Enable Fast Transition and select the FT 802.1x option.

D.

Enable Fast Transition and select the FT PSK option.

Full Access
Question # 194

A network engineer is configuring a switch so that it is remotely reachable via SSH. The engineer has already configured the host name on the router. Which additional command must the engineer configure before entering the command to generate the RSA key?

A.

password password

B.

crypto key generate rsa modulus 1024

C.

ip domain-name domain

D.

ip ssh authentication-retries 2

Full Access
Question # 195

What causes a port to be placed in the err-disabled state?

A.

nothing plugged into the port

B.

link flapping

C.

shutdown command issued on the port

D.

latency

Full Access
Question # 196

R1 as an NTP server must have:

• NTP authentication enabled

• NTP packets sourced from Interface loopback 0

• NTP stratum 2

• NTP packets only permitted to client IP 209.165 200 225

How should R1 be configured?

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 197

Refer to the exhibit.

An engineer has started to configure replacement switch SW1. To verify part of the configuration, the engineer issued the commands as shown and noticed that the entry for PC2 is missing. Which change must be applied to SW1 so that PC1 and PC2 communicate normally?

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 198

Refer to the exhibit.

Which command configures OSPF on the point-to-point link between routers R1 and R2?

A.

router-id 10.0.0.15

B.

neighbor 10.1.2.0 cost 180

C.

ipospf priority 100

D.

network 10.0.0.0 0.0.0.255 area 0

Full Access
Question # 199

Which WLC management connection type is vulnerable to man-in-the-middle attacks?

A.

SSH

B.

HTTPS

C.

Telnet

D.

console

Full Access
Question # 200

Refer to the exhibit.

Which two commands when used together create port channel 10? (Choose two.)

A.

int range g0/0-1

channel-group 10 mode active

B.

int range g0/0-1 chanm.l-group 10 mode desirable

C.

int range g0/0-1

channel-group 10 mode passive

D.

int range g0/0-1 channel-group 10 mode auto

E.

int range g0/0-1 channel-group 10 mode on

Full Access
Question # 201

A Cisco engineer must configure a single switch interface to meet these requirements

• accept untagged frames and place them in VLAN 20

• accept tagged frames in VLAN 30 when CDP detects a Cisco IP phone

Which command set must the engineer apply?

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 202

Drag and drop the Rapid PVST+ forwarding slate actions from the loft to the right. Not all actions are used.

Full Access
Question # 203

Refer to the exhibit.

What is a reason for poor performance on the network interface?

A.

The interface is receiving excessive broadcast traffic.

B.

The cable connection between the two devices is faulty.

C.

The interface is operating at a different speed than the connected device.

D.

The bandwidth setting of the interface is misconfigured

Full Access
Question # 204

Refer to the exhibit.

Which two configurations must the engineer apply on this network so that R1 becomes the DR? (Choose two.)

A)

B)

C)

D)

E)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

E.

Option E

Full Access
Question # 205

Refer to the exhibit.

A company is configuring a failover plan and must implement the default routes in such a way that a floating static route will assume traffic forwarding when the primary link goes down. Which primary route configuration must be used?

A.

ip route 0.0.0.0 0.0.0.0 192.168.0.2 GigabitEthernetl/0

B.

ip route 0.0.0.0 0.0.0.0 192.168.0.2 tracked

C.

ip route 0.0.0.0 0.0.0.0 192.168.0.2 floating

D.

ip route 0.0.0.0 0.0.0.0 192.168.0.2

Full Access
Question # 206

Refer to the exhibit.

An engineer is asked to insert the new VLAN into the existing trunk without modifying anything previously configured Which command accomplishes this task?

A.

switchport trunk allowed vlan 100-104

B.

switchport trunk allowed vlan add 104

C.

switchport trunk allowed vlan all

D.

switchport trunk allowed vlan 104

Full Access
Question # 207

Refer to the exhibit.

An IP subnet must be configured on each router that provides enough addresses for the number of assigned hosts and anticipates no more than 10% growth for now hosts. Which configuration script must be used?

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 208

Refer to the exhibit.

Which two commands must be added to update the configuration of router R1 so that it accepts only encrypted connections? (Choose two )

A.

username CNAC secret R!41!4319115@

B.

ip ssh version 2

C.

line vty 0 4

D.

crypto key generate rsa 1024

E.

transport input ssh

Full Access
Question # 209

Refer to the exhibit.

Packets received by the router from BGP enter via a serial interface at 209.165.201.10. Each route is present within the routing table. Which interface is used to forward traffic with a destination IP of 10.10.10.24?

A.

F0/10

B.

F0/11

C.

F0/12

D.

F0/13

Full Access
Question # 210

Drag and drop the facts about wireless architectures from the left onto the types of access point on the right. Not all options are used.

Full Access
Question # 211

Refer to the exhibit.

Which plan must be Implemented to ensure optimal QoS marking practices on this network?

A.

As traffic traverses MLS1 remark the traffic, but trust all markings at the access layer.

B.

Trust the IP phone markings on SW1 and mark traffic entering SW2 at SW2.

C.

Remark traffic as it traverses R1 and trust all markings at the access layer.

D.

As traffic enters from the access layer on SW1 and SW2. trust all traffic markings.

Full Access
Question # 212

Which field within the access-request packet is encrypted by RADIUS?

A.

authorized services

B.

authenticator

C.

username

D.

password

Full Access
Question # 213

What is one reason to implement LAG on a Cisco WLC?

A.

to increase security and encrypt management frames

B.

to provide link redundancy and load balancing

C.

to allow for stateful and link-state failover

D.

to enable connected switch ports to failover and use different VLANs

Full Access
Question # 214

Which interface mode must be configured to connect the lightweight APs in a centralized architecture?

A.

WLAN dynamic

B.

management

C.

trunk

D.

access

Full Access
Question # 215

Refer to the exhibit.

Host A sent a data frame destined for host D

What does the switch do when it receives the frame from host A?

A.

It drops the frame from the switch CAM table.

B.

It floods the frame out of all ports except port Fa0/1.

C.

It shuts down the port Fa0/1 and places it in err-disable mode.

D.

It experiences a broadcast storm.

Full Access
Question # 216

Refer to the exhibit.

An engineer built a new L2 LACP EtherChannel between SW1 and SW2 and executed these show commands to verify the work. Which additional task allows the two switches to establish an LACP port channel?

A.

Change the channel-group mode on SW2 to auto

B.

Change the channel-group mode on SW1 to desirable.

C.

Configure the interface port-channel 1 command on both switches.

D.

Change the channel-group mode on SW1 to active or passive.

Full Access
Question # 217

Refer to the exhibit.

An engineer is configuring a new router on the network and applied this configuration. Which additional configuration allows the PC to obtain its IP address from a DHCP server?

A.

Configure the ip dhcp relay information command under interface Gi0/1.

B.

Configure the ip dhcp smart-relay command globally on the router

C.

Configure the ip helper-address 172.16.2.2 command under interface Gi0/0

D.

Configure the ip address dhcp command under interface Gi0/0

Full Access
Question # 218

OSPF must be configured between routers R1 and R2. Which OSPF configuration must be applied to router R1 to avoid a DR/BDR election?

A.

router ospf 1

network 192.168.1.1 0.0.0.0 area 0

interface e1/1

ip address 192.168.1.1 255.255.255.252

ip ospf network broadcast

B.

router ospf 1

network 192.168.1.1 0.0.0.0 area 0

interface e1/1

ip address 192.168.1.1 255.255.255.252

ip ospf network point-to-point

C.

router ospf 1

network 192.168.1.1 0.0.0.0 area 0

interface e1/1

ip address 192.168.1.1 255.255.255.252

ip ospf cost 0

D.

router ospf 1

network 192.168.1.1 0.0.0.0 area 0

hello interval 15

interface e1/1

Ip address 192.168.1.1 255.255.255.252

Full Access
Question # 219

Drag and drop the descriptions of AAA services from the left onto the corresponding services on the right.

Full Access
Question # 220

Refer to the exhibit.

Which route must be configured on R1 so that OSPF routing is used when OSPF is up. but the server is still reachable when OSPF goes down?

A.

ip route 10.1.1.10 255.255.255.255 172.16.2.2 100

B.

ip route 10.1.1.0 255.255.255.0 gi0/1 125

C.

ip route 10.1.1.0 255.255.255.0 172.16.2.2 100

D.

ip route 10.1.1.10 255.255.255.255 gi0/0 125

Full Access
Question # 221

Refer to the exhibit.

Which action must be taken to ensure that router A is elected as the DR for OSPF area 0?

A.

Configure the OSPF priority on router A with the lowest value between the three routers.

B.

Configure router B and router C as OSPF neighbors of router A.

C.

Configure the router A interfaces with the highest OSPF priority value within the area.

D.

Configure router A with a fixed OSPF router ID

Full Access
Question # 222

Refer to the exhibit.

The router has been configured with a supernet to accommodate the requirement for 380 users on a subnet The requirement already considers 30% future growth. Which configuration verifies the IP subnet on router R4?

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 223

Which two components comprise part of a PKI? (Choose two.)

A.

preshared key that authenticates connections

B.

RSA token

C.

CA that grants certificates

D.

clear-text password that authenticates connections

E.

one or more CRLs

Full Access
Question # 224

Refer to the exhibit.

Users on existing VLAN 100 can reach sites on the Internet. Which action must the administrator take to establish connectivity to the Internet for users in VLAN 200?

A.

Define a NAT pool on the router.

B.

Configure static NAT translations for VLAN 200.

C.

Configure the ip nat outside command on another interface for VLAN 200.

D.

Update the NAT INSIDF RANGFS ACL

Full Access
Question # 225

Refer to the exhibit.

How should the configuration be updated to allow PC1 and PC2 access to the Internet?

A.

Modify the configured number of the second access list.

B.

Add either the ip nat {inside|outside} command under both interfaces.

C.

Remove the overload keyword from the ip nat inside source command.

D.

Change the ip nat inside source command to use interface GigabitEthernet0/0.

Full Access
Question # 226

Refer to the exhibit.

Routers R1 and R3 have the default configuration The router R2 priority is set to 99 Which commands on R3 configure it as the DR in the 10.0 4.0/24 network?

A.

R3(config)#interface Gig0/1 R3(config-if)#ip ospf priority 100

B.

R3(config)#interface Gig0/0 R3(config-if)#ip ospf priority 100

C.

R3(config)#interface Gig0/0 R3(config-if)i=ip ospf priority 1

D.

R3(config)#interface Gig0/1 R3(config-if)#ip ospf priority 0

Full Access
Question # 227

Refer to the exhibit.

An engineer is updating the R1 configuration to connect a new server to the management network. The PCs on the management network must be blocked from pinging the default gateway of the new server. Which command must be configured on R1 to complete the task?

A.

R1(config)#lp route 172.16.2.2 255.255.255.248 gi0/1

B.

R1(config)#jp route 172.16.2.2 255.255.255.255 gi0/0

C.

R1(config>#ip route 172.16.2.0 255.255.255.0 192.168.1.15

D.

R1(conflg)#ip route 172.16.2.0 255.255.255.0 192.168.1.5

Full Access
Question # 228

Refer to the exhibit.

The link between PC1 and the switch is up. but it is performing poorly. Which interface condition is causing the performance problem?

A.

There is a duplex mismatch on the interface

B.

There is an issue with the fiber on the switch interface.

C.

There is a speed mismatch on the interface.

D.

There is an interface type mismatch

Full Access
Question # 229

Which type of network attack overwhelms the target server by sending multiple packets to a port until the half-open TCP resources of the target are exhausted?

A.

SYIM flood

B.

reflection

C.

teardrop

D.

amplification

Full Access
Question # 230

Which command on a port enters the forwarding state immediately when a PC is connected to it?

A.

switch(config)#spanning-tree portfast default

B.

switch(config)#spanning-tree portfast bpduguard default

C.

switch(config-if)#spanning-tree portfast trunk

D.

switch(config-if)#no spanning-tree portfast

Full Access
Question # 231

In software defined architectures, which plane is distributed and responsible for traffic forwarding?

A.

management plane

B.

control plane

C.

policy plane

D.

data plane

Full Access
Question # 232

Refer to the exhibit.

The network administrator wants VLAN 67 traffic to be untagged between Switch 1 and Switch 2 while all other VLANs are to remain tagged.

Which command accomplishes this task?

A.

switchport access vlan 67

B.

switchport trunk allowed vlan 67

C.

switchport private-vlan association host 67

D.

switchport trunk native vlan 67

Full Access