Cisco Certified Network Associate (CCNA) practice questions

1. Question 1 of 25

   Which command automatically generates an IPv6 address from a specified IPv6 prefix and MAC address of an interface?

   • Aipv6 address dhcp
   • Bipv6 address 2001:DB8:5:112::/64 eui-64
   • Cipv6 address autoconfig
   • Dipv6 address 2001:DB8:5:112::2/64 link-local

   Show answer

   Correct answer: B

   How others answered

   • B64%
   • C32%

   Only 64% agreed on this answer — treat it as contested rather than settled.

   Explanation

   The needed is an IPv6 address generated from a specified prefix and not from a delegated one, so I think that B is the right answer

   Adapted from community discussion by Wissba · 2020-05-16 · 53 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

   1. W

      Wissba

      2020-05-16

      53 upvotes

      The needed is an IPv6 address generated from a specified prefix and not from a delegated one, so I think that B is the right answer

   2. J

      JoJoRa33it

      2021-11-10

      26 upvotes

      Implementing IPv6 Addressing on Routers ipv6 address address/prefix-length: Static configuration of a specific address ipv6 address prefix/prefix-length eui-64: Static configuration of a specific prefix and prefix length, with the router calculating the interface ID using EUI-64 rules ipv6 address dhcp: Dynamic learning on the address and prefix length using DHCP ipv6 address autoconfig: Dynamic learning of the prefix and prefix length, with the router calculating the interface ID using EUI-64 rules (SLAAC)

   3. T

      Thodoris85

      2020-06-08

      17 upvotes

      The simplest method is to enable stateless autoconfiguration on the interface. Enabling stateless autoconfiguration on the interface configures IPv6 addresses based on prefixes received in Router Advertisement messages. A link-local address, based on the Modified EUI-64 interface ID, is automatically generated for the interface when stateless autoconfiguration is enabled. To enable stateless autoconfiguration, enter the following command: hostname(config-if)# ipv6 address autoconfig

   4. J

      JWMcInSC

      2020-06-11

      10 upvotes

      EUI-64 (Extended Unique Identifier) is a method we can use to automatically configure IPv6 host addresses. An IPv6 device will use the MAC address of its interface to generate a unique 64-bit interface ID. However, a MAC address is 48 bit and the interface ID is 64 bit.

2. Question 2 of 25

   Select 2

   What are two functions of a firewall within an enterprise? (Choose two.)

   • AIt enables traffic filtering based on URLs.
   • BIt serves as an endpoint for a site-to-site VPN in standalone mode.
   • CIt provides support as an endpoint for a remote access VPN in multiple context mode.
   • DIt offers Layer 2 services between hosts.
   • EIt enables wireless devices to connect to the network.

   Show answer

   Correct answer: A, B

   How others answered

   • AB64%
   • AC36%

   Only 64% agreed on this answer — treat it as contested rather than settled.

   Explanation

   A. It enables traffic filtering based on URLs. B. It serves as an endpoint for a site-to-site VPN in standalone mode. A firewall within an enterprise has multiple functions, including traffic filtering based on URLs (A) and serving as an endpoint for a site-to-site VPN in standalone mode (B). Firewalls help protect the network by inspecting and controlling incoming and outgoing traffic based on predetermined security rules. They can also establish secure connections between networks through VPNs.

   Adapted from community discussion by Leethy · 2023-10-07 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

   1. L

      Leethy

      2023-10-07

      11 upvotes

      A. It enables traffic filtering based on URLs. B. It serves as an endpoint for a site-to-site VPN in standalone mode. A firewall within an enterprise has multiple functions, including traffic filtering based on URLs (A) and serving as an endpoint for a site-to-site VPN in standalone mode (B). Firewalls help protect the network by inspecting and controlling incoming and outgoing traffic based on predetermined security rules. They can also establish secure connections between networks through VPNs.

   2. S

      Stevens0103

      2024-02-06

      6 upvotes

      Multiple context mode does not support the following features: •Dynamic routing protocols Security contexts support only static routes. You cannot enable OSPF or RIP in multiple context mode. •VPN •Multicast https://www.cisco.com/c/en/us/td/docs/security/asa/asa72/configuration/guide/conf_gd/contexts.html

   3. M

      Mizuchan

      2023-11-23

      Selected A, B2 upvotes

      A. Traffic Filtering based on URLs: A firewall can be configured to filter network traffic based on Uniform Resource Locators (URLs) or website addresses. This feature allows organizations to enforce web access policies by blocking or allowing specific URLs or categories of websites. B. Endpoint for Site-to-Site VPN in Standalone Mode: A firewall can act as an endpoint for a site-to-site Virtual Private Network (VPN) connection. In this mode, the firewall establishes secure communication tunnels between different locations or networks, ensuring the confidentiality and integrity of data transmitted over the VPN.

   4. S

      Starlord2535

      2024-10-03

      2 upvotes

      The statement that enterprise firewalls provide support as an endpoint for a remote access VPN in multiple context mode is true. Enterprise firewalls, such as Cisco Secure Firewall, can serve as endpoints for remote access VPNs using SSL and IPsec-IKEv2 protocols. They can provide secure gateway capabilities and support remote access SSL and IPsec-IKEv2 VPNs. The full tunnel client, Secure Client, allows remote users to establish secure SSL and IPsec-IKEv2 connections to the security gateway. The Secure Client is the only client supported on endpoint devices for remote VPN connectivity to threat defense devices. This client gives remote users the benefits of an SSL or IPsec-IKEv2 VPN client without the need for network administrators to install and configure clients on remote computers.

3. Question 3 of 25

   When more than one AP-Manager interface is provisioned on a wireless LAN controller, how is the request handled by the AP?

   • AThe discovery response from the AP to the AP-Manager interface disables the WLAN port.
   • BThe AP join request fails and must be configured statically on the AP-Manager interface.
   • CThe AP-Manager with the fewest number of APs is used by the AP to join.
   • DThe first AP-Manager interface to respond is chosen by the AP.

   Show answer

   Correct answer: C

   How others answered

   • C80%
   • D20%

   Explanation

   "Before an access point joins a controller, it sends out a discovery request. From the discovery response that it receives, the access point can tell the number of AP-manager interfaces on the controller and the number of access points on each AP-manager interface. The access point generally joins the AP-manager with the least number of access points. In this way, the access point load is dynamically distributed across the multiple AP-manager interfaces. " Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/m_configuring_multiple_ap_manager_interfaces.html

   Adapted from community discussion by [Removed] · 2023-12-15 · 8 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation

   View community discussion4

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

   1. [

      [Removed]

      2023-12-15

      Selected C8 upvotes

      "Before an access point joins a controller, it sends out a discovery request. From the discovery response that it receives, the access point can tell the number of AP-manager interfaces on the controller and the number of access points on each AP-manager interface. The access point generally joins the AP-manager with the least number of access points. In this way, the access point load is dynamically distributed across the multiple AP-manager interfaces. " Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/m_configuring_multiple_ap_manager_interfaces.html

   2. S

      Starlord2535

      2024-02-04

      Selected C3 upvotes

      The Access Point boots and sends a discovery request to the management interface of the controller using the IP you configured as Option 43 in DHCP. It’s also possible to specify the IP addresses of the controller in DNS. The Controller sends a discovery reply containing the system name, AP-Manager addresses, the number of access points already connected to each AP-Manager interface and the overall capacity of the controller. The access point joints the controller using the least-loaded AP-Manager interface. https://community.cisco.com/t5/wireless-mobility-knowledge-base/configuring-multiple-ap-manager-interfaces-on-wireless-lan/ta-p/3148746

   3. M

      MaYingJoJo

      2023-10-23

      Selected C2 upvotes

      When multiple AP-Manager interfaces are available, the AP will send requests to all AP-Manager interfaces and then select the interface based on the first response. This helps ensure that the AP can quickly connect to the wireless LAN controller and start communicating with the wireless network. The other options describe different situations, but do not correspond to how they are handled when there are multiple AP-Manager interfaces.

   4. [

      [Removed]

      2024-04-08

      Selected C1 upvote

      C is correct The access point generally joins the AP-manager with the least number of access points. In this way, the access point load is dynamically distributed across the multiple AP-manager interfaces. https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/m_configuring_multiple_ap_manager_interfaces.pdf page 1

4. Question 4 of 25

   What differentiates the Cisco OfficeExtend AP mode from the Cisco FlexConnect AP mode?

   • AFlexConnect allows a personal SSID to be configured on the AP, and personal SSIDs are not supported with OfficeExtend.
   • BOfficeExtend does not support DTLS tunneling of traffic to the WLC, and FlexConnect tunnels traffic to the WLC with DTLS.
   • CFlexConnect must be deployed behind a router that NATs the client traffic, and OfficeExtend uses public IP sources.
   • DOfficeExtend mode requires indoor APs with internal antennas, and indoor and outdoor APs use FlexConnect mode.

   Show answer

   Correct answer: D

   How others answered

   • D100%

   Explanation

   A wrong : All OfficeExtend access points should be in the same access point group, and that group should contain no more than 15 WLANs. A controller with OfficeExtend access points in an access point group publishes only up to 15 WLANs to each connected OfficeExtend access point because it reserves one WLAN for the personal SSID. B wrong: Datagram Transport Layer Security (DTLS) encryption between the access point and the controller ensures that all communications have the highest level of security. DTLS is permanently enabled on the Cisco OEAP. You cannot disable DTLS on this access point. C worng: Cisco OEAPs are designed to work behind a router or other gateway device that is using network address translation (NAT). D correct: The OfficeExtend AP feature is supported on all internal antenna AP models. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/configuring_officeextend_access_points.html

   Adapted from community discussion by [Removed] · 2024-04-20 · 8 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

   1. S

      squagmire

      2024-09-02

      19 upvotes

      damn, 5 months of studying and never heard of this, nice one cisco you almost got me

   2. [

      [Removed]

      2024-04-20

      Selected D8 upvotes

      A wrong : All OfficeExtend access points should be in the same access point group, and that group should contain no more than 15 WLANs. A controller with OfficeExtend access points in an access point group publishes only up to 15 WLANs to each connected OfficeExtend access point because it reserves one WLAN for the personal SSID. B wrong: Datagram Transport Layer Security (DTLS) encryption between the access point and the controller ensures that all communications have the highest level of security. DTLS is permanently enabled on the Cisco OEAP. You cannot disable DTLS on this access point. C worng: Cisco OEAPs are designed to work behind a router or other gateway device that is using network address translation (NAT). D correct: The OfficeExtend AP feature is supported on all internal antenna AP models. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/configuring_officeextend_access_points.html

   3. [

      [Removed]

      2024-10-08

      Selected D3 upvotes

      It‘s D https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/configuring_officeextend_access_points.html#:~:text=The%20OfficeExtend%20AP%20feature%20is%20supported%20on%20all%20internal%20antenna%20AP%20models.&text=Rogue%20detection%20is%20disabled%20automatically,mode%20for%20an%20access%20point. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-7/config-guide/b_cg87/m_configuring_officeextend_access_points.html

   4. L

      lmmujsi

      2024-09-28

      2 upvotes

      The Cisco OfficeExtend Access Point (OEAP) mode is designed specifically to extend the corporate network to remote workers at home or in small branch offices. One of its key features is that it supports a secure Datagram Transport Layer Security (DTLS) tunnel back to the Wireless LAN Controller (WLC), allowing both corporate and personal SSIDs to be configured. Personal SSID allows remote employees' personal traffic to be segmented from corporate traffic. Cisco FlexConnect AP mode, formerly known as H-REAP, allows access points to switch network traffic locally and only send control traffic to the controller. This mode is used primarily for branch office and remote deployments where it might not be ideal to tunnel all client traffic back to the WLC.

5. Question 5 of 25

   Which PoE mode enables powered-devices detection and guarantees power when the device detected?

   • Aauto
   • Bstatic
   • Cdynamic
   • Dactive

   Show answer

   Correct answer: B

   How others answered

   • B75%
   • A24%

   Explanation

   auto - Enables powered-device detection; if enough power is available, automatically allocates power to the PoE port after device detection (default setting). max max-wattage - limits the power allowed on the port; if no value is specified, the maximum is allowed. max max-wattage - limits the power allowed on the port; range is 4000 to 30000 mW; if no value is specified, the maximum is allowed. never - disables device detection, and disable power to the port. Note: If a port has a Cisco powered device connected to it, do not use the power inline never command to configure the port. A false link-up can occur, placing the port into the error-disabled state. static - Enables powered-device detection; pre-allocate (reserve) power for a port before the switch discovers the powered device; the switch reserves power for this port even when no device is connected and guarantees that power will be provided upon device detection. The switch allocates power to a port configured in static mode before it allocates power to a port configured in auto mode.

   Adapted from community discussion by BATSIE · 2023-01-06 · 25 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation

   View community discussion4

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

   1. B

      BATSIE

      2023-01-06

      25 upvotes

      auto - Enables powered-device detection; if enough power is available, automatically allocates power to the PoE port after device detection (default setting). max max-wattage - limits the power allowed on the port; if no value is specified, the maximum is allowed. max max-wattage - limits the power allowed on the port; range is 4000 to 30000 mW; if no value is specified, the maximum is allowed. never - disables device detection, and disable power to the port. Note: If a port has a Cisco powered device connected to it, do not use the power inline never command to configure the port. A false link-up can occur, placing the port into the error-disabled state. static - Enables powered-device detection; pre-allocate (reserve) power for a port before the switch discovers the powered device; the switch reserves power for this port even when no device is connected and guarantees that power will be provided upon device detection. The switch allocates power to a port configured in static mode before it allocates power to a port configured in auto mode.

   2. [

      [Removed]

      2022-09-05

      9 upvotes

      Answer B is correct. Not A https://www.thinlabs.com/faq/configure-cisco-switch-for-powering-poe-client#:~:text=static%20%2D%20Enables%20powered%2Ddevice%20detection,be%20provided%20upon%20device%20detection.

   3. R

      RougePotatoe

      2022-10-21

      Selected B5 upvotes

      Static reserves power and guarantees its availability when it detects a device that requires PoE is connected. Auto does NOT guarantee the availability of power. Auto is first come first serve static is pre-allocated. "Because power is pre-allocated, any powered device that uses less than or equal to the maximum wattage is guaranteed to be powered when it is connected to the static port...The device powers the port only if it discovers a powered device. Use the static setting on a high-priority interface." https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/switches/lan/catalyst9200/software/release/16-12/configuration_guide/int_hw/b_1612_int_and_hw_9200_cg/configuring_poe.html.xml#id_114542

   4. S

      splashy

      2022-09-21

      5 upvotes

      keyword is "guarantees" auto : Enables powered-device detection. If enough power is available, automatically allocates power to the PoE port after device detection. This is the default setting. static : Enables powered-device detection. Pre-allocate (reserve) power for a port before the device discovers the powered device. The device reserves power for this port even when no device is connected and guarantees that power will be provided upon device detection. Static does not provide/allocate power, it pre-allocates/reserves it. The power is reserved (will not be spent on anything else) and only applied to port after device detection.

6. Question 6 of 25

   What is the primary effect of the spanning-tree portfast command?

   • AIt immediately enables the port in the listening state.
   • BIt immediately puts the port into the forwarding state when the switch is reloaded.
   • CIt enables BPDU messages.
   • DIt minimizes spanning-tree convergence time.

   Show answer

   Correct answer: D

   How others answered

   • D71%
   • B29%

   Only 71% agreed on this answer — treat it as contested rather than settled.

   Explanation

   I believe D is the right answer. When you enable PortFast on the switch, spanning tree places ports in the forwarding state immediately, instead of going through the listening, learning, and forwarding states. If answer B did not say " when the switch is reloaded" then it would have been the correct answer.

   Adapted from community discussion by Tidestar · 2020-06-29 · 61 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

   1. T

      Tidestar

      2020-06-29

      61 upvotes

      I believe D is the right answer. When you enable PortFast on the switch, spanning tree places ports in the forwarding state immediately, instead of going through the listening, learning, and forwarding states. If answer B did not say " when the switch is reloaded" then it would have been the correct answer.

   2. T

      Tag

      2020-05-30

      24 upvotes

      guys, note, the question asks, what is the "primary" effect. Which would be D

   3. P

      pfwxmneydgygqyhekw

      2022-01-02

      7 upvotes

      "You can use Port Fast on interfaces connected to a single workstation or server to allow those devices to immediately connect to the network, rather than waiting for the spanning tree to converge." This is not the same as reducing spanning tree convergence time.

   4. N

      NewJeans

      2023-10-23

      Selected D6 upvotes

      The portfast command does not put the port into the forwarding state when the switch is reloaded. The portfast command takes effect immediately after it is configured on a port, regardless of whether the switch is reloaded or not.

7. Question 7 of 25

   An engineer needs to configure LLDP to send the port description type length value (TLV). Which command sequence must be implemented?

   • Aswitch(config-if)#lldp port-description
   • Bswitch#lldp port-description
   • Cswitch(config-line)#lldp port-description
   • Dswitch(config)#lldp port-description

   Show answer

   Correct answer: D

   How others answered

   • D56%
   • A44%

   Only 56% agreed on this answer — treat it as contested rather than settled.

   Explanation

   Yeah... the command sucks in this question. luckily to answer this one you don't even need to look at the command. LLDP is configured from global configuration mode and only one prompt is in that mode - regardless of the command, any LLDP configuration needs to be done from global config mode.

   Adapted from community discussion by IxlJustinlxl · 2021-05-13 · 25 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

   1. J

      Joe_Q

      2021-04-06

      38 upvotes

      The command should be: SW(config)#lldp tlv-select port-description

   2. I

      IxlJustinlxl

      2021-05-13

      25 upvotes

      Yeah... the command sucks in this question. luckily to answer this one you don't even need to look at the command. LLDP is configured from global configuration mode and only one prompt is in that mode - regardless of the command, any LLDP configuration needs to be done from global config mode.

   3. A

      ajiron

      2022-01-06

      18 upvotes

      How about lldp transmit and lldp receive int-config commands?

   4. [

      [Removed]

      2023-02-10

      7 upvotes

      I think this question will not be on ccna 200-301 exam topic.

8. Question 8 of 25

   In a CDP environment, what happens when the CDP interface on an adjacent device is configured without an IP address?

   • ACDP becomes inoperable on that neighbor
   • BCDP uses the IP address of another interface for that neighbor
   • CCDP operates normally, but it cannot provide IP address information for that neighbor
   • DCDP operates normally, but it cannot provide any information for that neighbor

   Show answer

   Correct answer: B

   How others answered

   • B52%
   • C48%

   Only 52% agreed on this answer — treat it as contested rather than settled.

   Explanation

   I tested in Packet tracer and I don't see that CDP uses an IP address of another interface for the CDP neighbor, it just leaves it empty but still works as usual. I don't see how you guys say it is B, but the simulation on PT says otherwise. I'm going with C.

   Adapted from community discussion by ddban · 2021-04-27 · 72 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation

   View community discussion4

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

   1. D

      ddban

      2021-04-27

      72 upvotes

      I tested in Packet tracer and I don't see that CDP uses an IP address of another interface for the CDP neighbor, it just leaves it empty but still works as usual. I don't see how you guys say it is B, but the simulation on PT says otherwise. I'm going with C.

   2. G

      Gere

      2021-02-09

      34 upvotes

      The Right answer is B. If a neighbor has no IP address on an interface enabled with Cisco Discovery Protocol, the IP address of another interface will be updated as IP address for the non-IP address interface. Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cdp/configuration/15-mt/cdp-15-mt-book/nm-cdp-discover.html

   3. [

      [Removed]

      2022-04-03

      Selected B10 upvotes

      Just go with B and pray the Cisco gods bestow mercy upon thee

   4. A

      Aval0n1

      2021-03-22

      9 upvotes

      What is the another interface? The C is correct. CDP does not need IPs to works normally https://learningnetwork.cisco.com/s/question/0D53i00000Kt3Mp/how-does-cdp-work-without-l3-addresses

9. Question 9 of 25

   Select 2

   Which two statements about VTP are true? (Choose two.)

   • AAll switches must be configured with the same VTP domain name
   • BAll switches must be configured to perform trunk negotiation
   • CAll switches must be configured with a unique VTP domain name
   • DThe VTP server must have the highest revision number in the domain
   • EAll switches must use the same VTP version

   Show answer

   Correct answer: A, E

   How others answered

   • AE48%
   • AD40%

   Only 48% agreed on this answer — treat it as contested rather than settled.

   Explanation

   "All switches in a VTP domain must have the same domain name, but they do not need to run the same VTP version."https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_52_se/configuration/guide/3560scg/swvtp.html#wp1107364 A&D are correct

   Adapted from community discussion by [Removed] · 2021-03-26 · 41 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

   1. [

      [Removed]

      2021-03-26

      41 upvotes

      "All switches in a VTP domain must have the same domain name, but they do not need to run the same VTP version."https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_52_se/configuration/guide/3560scg/swvtp.html#wp1107364 A&D are correct

   2. J

      jerry19

      2021-05-06

      7 upvotes

      I used your link and think the answer is A & D based off: "Before adding a VTP client switch to a VTP domain, always verify that its VTP configuration revision number is lower than the configuration revision number of the other switches in the VTP domain. Switches in a VTP domain always use the VLAN configuration of the switch with the highest VTP configuration revision number. If you add a switch that has a revision number higher than the revision number in the VTP domain, it can erase all VLAN information from the VTP server and VTP domain. See the "Adding a VTP Client Switch to a VTP Domain" section for the procedure for verifying and resetting the VTP configuration revision number."

   3. [

      [Removed]

      2022-06-16

      4 upvotes

      Ref: Troubleshooting VLAN Trunk Protocol (VTP) – Cisco “... Catalyst Switches Do Not Exchange VTP Information … Verify these items if switches that run VTP fail to exchange VLAN information: ... • The VTP domain name must match and it is case sensitive. CISCO and cisco are two different domain names. ... • Every switch in the VTP domain must use the same VTP version. VTP V1 and VTP V2 are not compatible on switches in the same VTP domain. Do not enable VTP V2 unless every switch in the VTP domain supports V2. ...” A. All switches must be configured with the same VTP domain name Correct answer. B. All switches must be configured to perform trunk negotiation Wrong answer. C. All switches must be configured with a unique VTP domain name Wrong answer. D. The VTP server must have the highest revision number in the domain Wrong answer. E. All switches must use the same VTP version Correct answer.

   4. S

      sgashashf

      2022-02-26

      Selected A, E4 upvotes

      This is such a difficult question. My vote is A and E, and here is why: If all switches in a VTP domain don't have the same domain name and version number, then VTP literally will not function. You cannot argue that "the VTP domain doesn't need to be the same because there could be multiple domains on the network" without in turn acknowledging that those separate domains could then also be running different versions of VTP. On the other hand, if another switch with a higher revision number happens to be brought into the VTP domain, yes, the VTP servers will rewrite their table and things will get messed up, but VTP itself still technically functions.

10. Question 10 of 25

    Select 2

    What are two reasons a network administrator would use CDP? (Choose two.)

    • Ato verify the type of cable interconnecting two devices
    • Bto determine the status of network services on a remote device
    • Cto obtain VLAN information from directly connected switches
    • Dto verify Layer 2 connectivity between two devices when Layer 3 fails
    • Eto obtain the IP address of a connected device in order to telnet to the device
    • Fto determine the status of the routing protocols between directly connected routers

    Show answer

    Correct answer: D, E

    How others answered

    • DE75%
    • CD17%

    Explanation

    Two reasons a network administrator would use CDP (Cisco Discovery Protocol) are: C. To obtain VLAN information from directly connected switches: CDP can provide information about the directly connected switches, including their device type, platform, and VLAN information. This can be helpful for understanding the network topology and configuration. D. To verify Layer 2 connectivity between two devices when Layer 3 fails: CDP can be used to verify the physical and data link layer connectivity between two Cisco devices. When Layer 3 connectivity fails, CDP can help in identifying and diagnosing Layer 2 issues that may be causing the problem. The other options (A, B, E, F) do not directly relate to the typical use cases of CDP.

    Adapted from community discussion by wakaish · 2023-09-04 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • cisco.com documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. W

       wakaish

       2023-09-04

       4 upvotes

       Two reasons a network administrator would use CDP (Cisco Discovery Protocol) are: C. To obtain VLAN information from directly connected switches: CDP can provide information about the directly connected switches, including their device type, platform, and VLAN information. This can be helpful for understanding the network topology and configuration. D. To verify Layer 2 connectivity between two devices when Layer 3 fails: CDP can be used to verify the physical and data link layer connectivity between two Cisco devices. When Layer 3 connectivity fails, CDP can help in identifying and diagnosing Layer 2 issues that may be causing the problem. The other options (A, B, E, F) do not directly relate to the typical use cases of CDP.

    2. T

       Targaryen

       2021-05-14

       4 upvotes

       C. to obtain VLAN information from directly connected switches - You can get the Native VLAN. D. to verify Layer 2 connectivity between two devices when Layer 3 fails - Can get information even without L3. E. to obtain the IP address of a connected device in order to telnet to the device - You can get the Management Address of a Switch. I guess D and E are the best options.

    3. [

       [Removed]

       2021-08-01

       1 upvote

       D is a primary benefit to quickly track down network errors E would help with D and also viewing logs for native vlan mismatch errors which would precede C (once you have config terminal and log view access for the CDP info, then you can further verify task relating to C) https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cdp/configuration/15-mt/cdp-15-mt-book/nm-cdp-discover.html https://www.learncisco.net/courses/icnd-1/network-environment-management/neighbors-on-the-network.html https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx-os/system_management/configuration/guide/sm_nx_os_cg/sm_4cdp.pdf CDP logging message for native VLAN mismatch on access and trunk ports https://www.cisco.com/c/en/us/support/docs/network-management/discovery-protocol-cdp/118736-technote-cdp-00.html https://networkengineering.stackexchange.com/questions/50175/solving-native-vlan-mismatch-error https://community.cisco.com/t5/switching/native-vlan-mismatch-detected-by/td-p/3316606 https://community.cisco.com/t5/switching/native-vlan-mismatch-error-on-access-port/td-p/1534103

    4. [

       [Removed]

       2024-03-14

       Selected D, E2 upvotes

       D & E are correct C is not 100% correct because by default CDP shows the Native VLAN of the neighbor.

11. Question 11 of 25

    What is a difference between local AP mode and FlexConnect AP mode?

    • ALocal AP mode creates two CAPWAP tunnels per AP to the WLC
    • BLocal AP mode causes the AP to behave as if it were an autonomous AP
    • CFlexConnect AP mode fails to function if the AP loses connectivity with the WLC
    • DFlexConnect AP mode bridges the traffic from the AP to the WLC when local switching is configured

    Show answer

    Correct answer: A

    How others answered

    • A78%
    • D22%

    Explanation

    This link supports "A" as the answer: "In local mode, an AP creates two CAPWAP tunnels to the WLC. One is for management, the other is data traffic. This behavior is known as "centrally switched" because the data traffic is switched(bridged) from the ap to the controller where it is then routed by some routing device." https://community.cisco.com/t5/wireless-and-mobility/what-s-the-difference-between-local-mode-and-flex-connect-mode/td-p/2532657

    Adapted from community discussion by dave369 · 2020-06-14 · 48 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • Cisco documentation
    • cisco.com documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. D

       dave369

       2020-06-14

       48 upvotes

       This link supports "A" as the answer: "In local mode, an AP creates two CAPWAP tunnels to the WLC. One is for management, the other is data traffic. This behavior is known as "centrally switched" because the data traffic is switched(bridged) from the ap to the controller where it is then routed by some routing device." https://community.cisco.com/t5/wireless-and-mobility/what-s-the-difference-between-local-mode-and-flex-connect-mode/td-p/2532657

    2. E

       Ebenezer

       2020-09-14

       21 upvotes

       Actually, the right answer is A. The FlexConnect AP can locally switch traffic between a VLAN and SSID when the CAPWAP tunnel to the WLC is down. If option D had said, "when it is down," it would have been the right answer. But here, they said, "configured."

    3. C

       chr

       2021-04-29

       7 upvotes

       ANSWER D A. Local AP mode creates two CAPWAP tunnels per AP to the WLC This is not a difference, all lightweight AP modes (not autonomous APs) create two tunnels, one for control and one for data. B. Local AP mode causes the AP to behave as if it were an autonomous AP This is not a difference. An autonomous AP stands alone and runs separate code to one that is in lightweight mode. Lightweight mode in "Local" mode transmits as an AP and also scans for noise, discovers rogue devices and performs IDS when not busy. C. FlexConnect AP mode fails to function if the AP loses connectivity with the WLC This is not a difference. A lightweight AP in FlexConnect mode can route traffic between a VLAN and an SSID if the CAPWAP tunnel goes down. D. FlexConnect AP mode bridges the traffic from the AP to the WLC when local switching is configured This is a difference though poorly worded. See above explanation.

    4. M

       mikexb

       2020-07-08

       8 upvotes

       A is not the correct answer. The question asks for the "difference" between the two, and both Local and Flexconnect modes create CAPWAP tunnels. It's not untrue, it's just not what they're asking.

12. Question 12 of 25

    

    Refer to the exhibit. An engineer must configure GigabitEthernet1/1 to accommodate voice and data traffic. Which configuration accomplishes this task?

    • Ainterface gigabitethernet1/1 switchport mode access switchport access vlan 300 switchport voice vlan 400
    • Binterface gigabitethernet1/1 switchport mode trunk switchport trunk vlan 300 switchport trunk vlan 400
    • Cinterface gigabitethernet1/1 switchport mode access switchport voice vlan 300 switchport access vlan 400
    • Dinterface gigabitethernet1/1 switchport mode trunk switchport trunk vlan 300 switchport voice vlan 400

    Show answer

    Correct answer: A

    How others answered

    • A94%

    Explanation

    While A seems to be incorrect syntax and an invalid command line, of the choices listed A is the best answer. https://www.learncisco.net/courses/icomm-ccna-voice/cisco-uc-solution-maintenance/switch-configuration.html#:~:text=Cisco%20allows%20us%20to%20have%20two%20VLANs%20connected%20to%20one%20port%2C%20it%27s%20a%20multi-VLAN%20access%20port.%20And%20Cisco%20allows%20us%20to%20bend%20the%20rules%20if%20and%20only%20if%20one%20of%20those%20two%20VLANs%20is%20a%20voice%20VLAN https://community.cisco.com/t5/switching/subinterface-to-access-port/td-p/3804800 https://www.reddit.com/r/networking/comments/m5ruhr/8021x_and_allowing_phones_on_voice_vlan/ https://www.cisco.com/c/en/us/support/docs/switches/catalyst-2950-series-switches/113260-voice-vlan-00.html#:~:text=Configure%20specified%20VLANs%20for%20voice%20and%20data%20traffic https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_40_se/configuration/guide/scg/swvoip.pdf

    Adapted from community discussion by [Removed] · 2021-07-24 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation
    • cisco.com documentation
    • cisco.com documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. S

       sdokmak

       2021-06-26

       13 upvotes

       VoIP phones work in a weird way. The access port is split into two ports, one for voice and one for data. So somehow the access access port behaves like a trunk.

    2. [

       [Removed]

       2021-07-24

       2 upvotes

       While A seems to be incorrect syntax and an invalid command line, of the choices listed A is the best answer. https://www.learncisco.net/courses/icomm-ccna-voice/cisco-uc-solution-maintenance/switch-configuration.html#:~:text=Cisco%20allows%20us%20to%20have%20two%20VLANs%20connected%20to%20one%20port%2C%20it%27s%20a%20multi-VLAN%20access%20port.%20And%20Cisco%20allows%20us%20to%20bend%20the%20rules%20if%20and%20only%20if%20one%20of%20those%20two%20VLANs%20is%20a%20voice%20VLAN https://community.cisco.com/t5/switching/subinterface-to-access-port/td-p/3804800 https://www.reddit.com/r/networking/comments/m5ruhr/8021x_and_allowing_phones_on_voice_vlan/ https://www.cisco.com/c/en/us/support/docs/switches/catalyst-2950-series-switches/113260-voice-vlan-00.html#:~:text=Configure%20specified%20VLANs%20for%20voice%20and%20data%20traffic https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_40_se/configuration/guide/scg/swvoip.pdf

    3. S

       Sten111

       2021-06-21

       5 upvotes

       It is a trunk but not configured as a trunk. Voice VLANS are weird. https://networklessons.com/cisco/ccna-routing-switching-icnd1-100-105/voice-vlan

    4. S

       siri_8932

       2024-09-03

       3 upvotes

       The answer is 'A'. For some people, this might be confusing since the port has to be enabled as trunk port to carry different types of data/two vlans. but Voice VLAN config is an exception, although we might need to config it as trunk, we are doing it as an access port only. the access port itself acts as trunk port This is an exception.

13. Question 13 of 25

    An administrator must secure the WLC from receiving spoofed association requests. Which steps must be taken to configure the WLC to restrict the requests and force the user to wait 10 ms to retry an association request?

    • AEnable MAC filtering and set the SA Query timeout to 10.
    • BEnable 802.1x Layer 2 security and set the Comeback timer to 10.
    • CEnable Security Association Teardown Protection and set the SA Query timeout to 10.
    • DEnable the Protected Management Frame service and set the Comeback timer to 10.

    Show answer

    Correct answer: D

    How others answered

    • D78%
    • C22%

    Explanation

    A is not as effective with hardening the controller and AP association requests at an enterprise level https://www.portnox.com/blog/network-security/the-truth-about-mac-spoofing/ B 802.1x is secure, encrypted and effective for client authentication especially with RADIUS config. However 802.1x/802.11x are not as specifically robust as the Protected Management Frame service mechanism and processes on WLC with 802.11w. C while Security Association is an excellent added protection with Association Comeback, this answer is wrong as the SA Query retry value is between 100 to 500 ms SA teardown protection is a mechanism to prevent replay attacks from tearing down the session of an existing client. It consists of an Association Comeback Time and an SA-Query procedure preventing spoofed association requests from disconnecting an already connected client. https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/802-11w.html.xml

    Adapted from community discussion by [Removed] · 2022-02-13 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • cisco.com documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. M

       MrPOW

       2021-12-29

       18 upvotes

       Has to be D based on.. https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/212576-configure-802-11w-management-frame-prote.html#anc8

    2. [

       [Removed]

       2022-02-13

       5 upvotes

       A is not as effective with hardening the controller and AP association requests at an enterprise level https://www.portnox.com/blog/network-security/the-truth-about-mac-spoofing/ B 802.1x is secure, encrypted and effective for client authentication especially with RADIUS config. However 802.1x/802.11x are not as specifically robust as the Protected Management Frame service mechanism and processes on WLC with 802.11w. C while Security Association is an excellent added protection with Association Comeback, this answer is wrong as the SA Query retry value is between 100 to 500 ms SA teardown protection is a mechanism to prevent replay attacks from tearing down the session of an existing client. It consists of an Association Comeback Time and an SA-Query procedure preventing spoofed association requests from disconnecting an already connected client. https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/802-11w.html.xml

    3. [

       [Removed]

       2022-02-13

       4 upvotes

       Yes D is the best answer with 802.11w PMF with protection and validation via secure hash to verify signed frames with MIC IE from a BSSID in the network. The secure pmf command is used together with the association-comeback time to configure a portion of this setup. In addition helps more with capwap debugging for Cisco proprietary CCX/MFP messages between controller, APs, and devices. This method is supported on the newer WLCs. https://www.cisco.com/c/en/us/support/docs/smb/wireless/cisco-small-business-wireless-access-points/smb5442-frequently-asked-questions-about-management-frame-protection.html#q3 https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/802-11w.html.xml

    4. M

       MaxaMillion

       2024-04-17

       3 upvotes

       Option D suggests enabling the "Protected Management Frame service" and setting the "Comeback timer to 10." However, this option is not relevant to the scenario described in the question, which is about securing the Wireless LAN Controller (WLC) from spoofed association requests and introducing a delay before retries. The "Protected Management Frame service" is typically used to secure management frames in a wireless network. It's not directly related to managing or restricting association requests from client devices or controlling the delay before they can retry association. Option C, on the other hand, specifically addresses the issue of securing the WLC against spoofed association requests by using the Security Association Teardown Protection and configuring the SA Query timeout to introduce a delay. This is the appropriate approach for mitigating spoofed association requests, and that's why option C is the correct answer.

14. Question 14 of 25

    

    Refer to the exhibit. An engineer is configuring a Layer 3 port-channel interface with LACP. The configuration on the first device is complete, and it is verified that both interfaces have registered the neighbor device in the CDP table. Which task on the neighbor device enables the new port channel to come up without negotiating the channel?

    • AConfigure the IP address of the neighboring device.
    • BBring up the neighboring interfaces using the no shutdown command.
    • CChange the EtherChannel mode on the neighboring interfaces to auto.
    • DModify the static EtherChannel configuration of the device to passive mode.

    Show answer

    Correct answer: D

    How others answered

    • D64%
    • B36%

    Only 64% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Yes... it's D But it's also a bad answer as per cisco documentation (current netacad course) static/manual = etherchannel ON dynamic/negotiation = LACP PagP So they provide an answer with a partially incorrect statement to confuse you and look at an other option with an even worse or incorrect statement... .

    Adapted from community discussion by splashy · 2023-03-11 · 18 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. S

       splashy

       2023-03-11

       18 upvotes

       Yes... it's D But it's also a bad answer as per cisco documentation (current netacad course) static/manual = etherchannel ON dynamic/negotiation = LACP PagP So they provide an answer with a partially incorrect statement to confuse you and look at an other option with an even worse or incorrect statement... .

    2. A

       Andu93

       2024-07-10

       Selected D6 upvotes

       The LACP protocol defines two modes: LACP active: This LACP mode places a port in an active negotiating state. In this state, the port initiates negotiations with other ports by sending LACP packets. LACP passive: This LACP mode places a port in a passive negotiating state. In this state, the port responds to the LACP packets that it receives but it does not initiate LACP packet negotiation. The passive mode is useful when you do not know whether the remote system supports LACP.

    3. J

       jeremykebir

       2024-06-05

       7 upvotes

       Guys you have to pay attention when you're reading They say "Which task on the neighbor device enables the new port channel to come up without negotiating the channel?" This is the neighbor devices that must not negotiate, so this D = Passive Mode Good answer : D

    4. A

       AbdullahMohammad251

       2024-05-20

       Selected D2 upvotes

       The interfaces of the switch are UP by default so we don't need the (no shutdown) command.(Tested in Packet tracer) The on mode forces a port to join an EtherChannel without negotiations. Passive places a port into a passive negotiating state in which the port responds to LACP packets that it receives, but does not start LACP packet negotiation. It should be On but Passive is the closest to the right answer. https://learningnetwork.cisco.com/s/question/0D53i00000KsyD3CAJ/when-is-interface-shutdown https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuration_guide/b_consolidated_config_guide_3850_chapter_0111110.pdf

15. Question 15 of 25

    Which command entered on a switch configured with Rapid PVST+ listens and learns for a specific time period?

    • Aswitch(config)#spanning-tree vlan 1 priority 4096
    • Bswitch(config)#spanning-tree vlan 1 hello-time 10
    • Cswitch(config)#spanning-tree vlan 1 max-age 6
    • Dswitch(config)#spanning-tree vlan 1 forward-time 20

    Show answer

    Correct answer: D

    How others answered

    • D86%

    Explanation

    The answer is D, folks. To quote the Official Certification Guide Volume 1 Page 612: Max Age -> "How long any switch should wait, after ceasing to hear Hellos, before trying to change the STP topology. Forward Delay -> "Delay that affects the process that occurs when an interface changes from blocking state to forwarding state. A port stays in an interim listening state, and then an interim learning state, for the number of seconds defined by the forward delay timer." Now, looking at official Cisco docs, we can see the command to change the forward delay time is indeed "forward-time". https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/15-02SG/configuration/guide/config/spantree.html#56177

    Adapted from community discussion by [Removed] · 2023-12-06 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. B

       Bonesaw

       2022-09-06

       13 upvotes

       It says the forward delay timer has a listening and learning state here: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3000/sw/layer2/503_U1_1/Cisco_n3k_layer2_config_gd_503_U1_1_chapter7.html#con_1205111

    2. F

       foreach

       2022-09-03

       13 upvotes

       Strange question... In Rapid-PVST+, there's no listening state anymore

    3. [

       [Removed]

       2023-12-06

       Selected D5 upvotes

       The answer is D, folks. To quote the Official Certification Guide Volume 1 Page 612: Max Age -> "How long any switch should wait, after ceasing to hear Hellos, before trying to change the STP topology. Forward Delay -> "Delay that affects the process that occurs when an interface changes from blocking state to forwarding state. A port stays in an interim listening state, and then an interim learning state, for the number of seconds defined by the forward delay timer." Now, looking at official Cisco docs, we can see the command to change the forward delay time is indeed "forward-time". https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/15-02SG/configuration/guide/config/spantree.html#56177

    4. X

       xbololi

       2023-07-07

       Selected D3 upvotes

       Answer D explanation, it is a backup configuration but it still valid... "Determines how long each of the listening and learning states last before the port begins forwarding. This timer is generally not used by the protocol but is used as a backup. The default is 15 seconds, and the range is from 4 to 30 seconds."

16. Question 16 of 25

    DRAG DROP - Drag and drop the statements about access-point modes from the left onto the corresponding modes on the right. Select and Place:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer

    Explanation

    For me it would be more logic that way : Monitor It supports analytics for wireless performance testing it supports real time wifi client troubleshooting when network engineers are offline Sensor It enables RFID-tag location tracking It enables air-quality data and interference detection across all enabled devices Sniffer It supports software that analyzes wireless frames on a remote device it captures and forwards packets on a specific wireless channel

    Adapted from community discussion by ShadyAbdekmalek · 2022-09-18 · 28 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    Answer figure

    

    View community discussion4

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. S

       ShadyAbdekmalek

       2022-09-18

       28 upvotes

       For me it would be more logic that way : Monitor It supports analytics for wireless performance testing it supports real time wifi client troubleshooting when network engineers are offline Sensor It enables RFID-tag location tracking It enables air-quality data and interference detection across all enabled devices Sniffer It supports software that analyzes wireless frames on a remote device it captures and forwards packets on a specific wireless channel

    2. C

       chuchuu

       2022-10-18

       12 upvotes

       Monitor It enables RFID-tag location tracking It supports analytics for wireless performance testing Sensor it supports real time wifi client troubleshooting when network engineers are offline It supports software that analyzes wireless frames on a remote device Sniffer it captures and forwards packets on a specific wireless channel It enables air-quality data and interference detection across all enabled devices monitor mode：https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/monitor-mode.pdf sensor mode：https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/b_wl_16_10_cg_chapter_01101110.pdf sniffer mode：https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/sniffer-mode.pdf

    3. R

       RougePotatoe

       2022-11-16

       11 upvotes

       Based off the text from the cert guide I think the following fits best. It enables enhanced RFID-tag location tracking ( bit of a stretch but location services) it provides air-quality data and interference detection across all enabled channels (detect rouge APs) it supports analytics for wireless performance testing it supports real-time wifi client troubleshooting when network engineers are offsite it supports software that analyzes wireless frames on a remote device ("forwarded to a pc") IT captures and forwards packets on a specific wireless channel (packet capture device)

    4. [

       [Removed]

       2024-03-21

       10 upvotes

       Monitor It enables RFID-tag location tracking It enables air-quality data and interference detection across all enabled devices Sensor it supports real time wifi client troubleshooting when network engineers are offline It supports analytics for wireless performance testing Sniffer it captures and forwards packets on a specific wireless channel It supports software that analyzes wireless frames on a remote device https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/monitor-mode.html https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/b_wl_16_10_cg_chapter_01101110.html https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/sniffer-mode.html

17. Question 17 of 25

    A WLC sends alarms about a rogue AP, and the network administrator verifies that the alarms are caused by a legitimate autonomous AP. How must the alarms be stopped for the MAC address of the AP?

    • ARemove the AP from WLC management
    • BPlace the AP into manual containment.
    • CManually remove the AP from Pending state.
    • DSet the AP Class Type to Friendly.

    Show answer

    Correct answer: D

    How others answered

    • D94%

    Explanation

    Keyword is "legitimate autonomous AP" Answer is D I think option B will kick the clients, which you probably don't want https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html#anc23 https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html#anc34 https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html#anc32 Also search for "Valid client on Rogue AP" in provided links

    Adapted from community discussion by splashy · 2022-09-14 · 19 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • cisco.com documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. S

       splashy

       2022-09-14

       19 upvotes

       Keyword is "legitimate autonomous AP" Answer is D I think option B will kick the clients, which you probably don't want https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html#anc23 https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html#anc34 https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html#anc32 Also search for "Valid client on Rogue AP" in provided links

    2. I

       Isuzu

       2023-05-16

       Selected D3 upvotes

       A WLC will send alarms about a rogue AP when it detects an AP that is not under its management. This can happen when a legitimate autonomous AP is installed on the network. To stop the alarms, the network administrator must set the AP Class Type to Friendly. This will tell the WLC that the AP is a legitimate AP and that it should not send alarms about it. The other options are incorrect for the following reasons: Removing the AP from WLC management will stop the alarms, but it will also prevent the WLC from managing the AP. This is not necessary, since the AP is a legitimate AP. Placing the AP into manual containment will stop the alarms, but it will also prevent the AP from being used by clients. This is not necessary, since the AP is a legitimate AP. Manually removing the AP from Pending state will not stop the alarms. The WLC will continue to send alarms about the AP until the AP Class Type is set to Friendly.

    3. F

       fjori

       2022-11-26

       Selected D2 upvotes

       https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010111001.html Internal—If the unknown access point is inside the network and poses no threat to WLAN security, you would manually configure it as Friendly, Internal. An example is the access points in your lab network. External—If the unknown access point is outside the network and poses no threat to WLAN security, you would manually configure it as Friendly, External. An example is an access point that belongs to a neighboring coffee shop. Alert—The unknown access point is moved to Alert if it is not in the neighbor list or in the user-configured friendly MAC list.

    4. A

       aklas

       2023-12-04

       Selected D1 upvote

       Answer is D: "If a rogue AP is classified as friendly, it means that the rogue AP exists in the vicinity, is a known AP, and need not be tracked. Therefore, all the rogue clients are either deleted or not tracked if they are associated with the friendly rogue AP." https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/wireless/controller/7-5/configuration-guide/b_cg75/b_cg75_chapter_0111010.html.xml B will remove the client from the network by using the nearby legitimate APs to jam it. This doesn't turn off the alarms either: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html#toc-hId--1159393380

18. Question 18 of 25

    Refer to the exhibit. Router R1 is running three different routing protocols. Which route characteristic is used by the router to forward the packet that it receives for destination IP 172.16.32.1?

    

    • Alongest prefix
    • Badministrative distance
    • Ccost
    • Dmetric

    Show answer

    Correct answer: A

    How others answered

    • A93%

    Explanation

    I saw a bunch, bunch, bunch of these on the CCNA. They were all pretty easy. Find the network that the IP fits in, look at the prefix length, if you have 1 that is longer than the rest chhose that as answer. If there is more than 1 with the same longest prefix move over to AD and pick the lowest value. Once again if duplicate lowest move over to metric. Watch for the tricky non-default AD and DO NOT pick by code letter because they change ADs on some of them.

    Adapted from community discussion by rlelliott · 2022-02-26 · 53 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation
    • Cisco documentation
    • Cisco documentation
    • AWS documentation

    View community discussion4

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. R

       rlelliott

       2022-02-26

       53 upvotes

       I saw a bunch, bunch, bunch of these on the CCNA. They were all pretty easy. Find the network that the IP fits in, look at the prefix length, if you have 1 that is longer than the rest chhose that as answer. If there is more than 1 with the same longest prefix move over to AD and pick the lowest value. Once again if duplicate lowest move over to metric. Watch for the tricky non-default AD and DO NOT pick by code letter because they change ADs on some of them.

    2. U

       UmbertoReed

       2021-04-14

       14 upvotes

       The way I understand it, when you have multiple routes to reach a destination, the first criteria for choosing is which one has the longest prefix. If one of the routes has a longer prefix than the other ones, that's the only criteria considered and that route is chosen. If the routes had the same prefix length, in that case administrative distance would come into play. But since one of the routes had a longer prefix, it didn't come down to the AD.

    3. I

       ismatdmour

       2022-03-02

       Selected A4 upvotes

       Surely A. Answers B, C and D plays ahead in building the routing table while choice A (longest prefix match) plays later in selecting which route for a host that fits in the many target subnets in the routing table. Remember first that the routing table shall have only one route to any one subnet (except for load balancing cases which needs more detail I like to skip here). Two subnets are not the same subnet if they differ in either subnet ID and/or Subnet mask. Answer B, Administrative distance plays first to select which route to be inserted when we have 2 routes learned by the router using 2 different routing protocols. In this case the route with the lowest AD will be inserted. Answer C (Cost for ospf) and answer D (metric in general) are used (lowest value) to select between 2 routes learned using the same protocol) In the question, we have 3 routes to 3 different subnets, but if the host belongs to more then one (all of them in this case), we select the more specific subnet (the one with the longest match as our route)

    4. S

       Stonetales987

       2021-11-11

       4 upvotes

       It's easier to see when you convert the Network addresses to binary. I associate the longest prefix to more specific. The /27 has 27 1 bits in the network address portion of the IP vs the 24 and 19... /27 11111111.11111111.11111111.111 00000 /24 11111111.11111111.11111111 .00000000 /19 11111111.11111111.111 00000.00000000 https://www.cisco.com/c/en/us/support/docs/ip/enhanced-interior-gateway-routing-protocol-eigrp/8651-21.html#classless

19. Question 19 of 25

    Refer to the exhibit. Which action establishes the OSPF neighbor relationship without forming an adjacency?

    

    • Amodify hello interval
    • Bmodify process ID
    • Cmodify priority
    • Dmodify network type

    Show answer

    Correct answer: A

    How others answered

    • A77%
    • D23%

    Explanation

    According to OCG Volume 1 Chapter 21 page 515 : "Interestingly, if you misconfigure network type settings such that one router uses broadcast, and the other uses point-to-point, the following occurs: ■ The two routers become fully adjacent neighbors (that is, they reach a full state). ■ They exchange their LSDBs. ■ They do not add IP routes to the IP routing table. The reason for not adding the routes has to do with the details of LSAs and how the use of a DR (or not) changes those LSAs. Basically, the two routers expect different details in the LSAs, and the SPF algorithm notices those differences and cannot trust the LSAs because of those differences." So D cannot be the correct answer.

    Adapted from community discussion by iGlitch · 2022-04-28 · 14 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • cisco.com documentation
    • cisco.com documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. I

       iGlitch

       2022-04-28

       14 upvotes

       According to OCG Volume 1 Chapter 21 page 515 : "Interestingly, if you misconfigure network type settings such that one router uses broadcast, and the other uses point-to-point, the following occurs: ■ The two routers become fully adjacent neighbors (that is, they reach a full state). ■ They exchange their LSDBs. ■ They do not add IP routes to the IP routing table. The reason for not adding the routes has to do with the details of LSAs and how the use of a DR (or not) changes those LSAs. Basically, the two routers expect different details in the LSAs, and the SPF algorithm notices those differences and cannot trust the LSAs because of those differences." So D cannot be the correct answer.

    2. A

       anonymous1966

       2021-03-06

       15 upvotes

       Correct is D Pay attention to the statement: "establishes the OSPF neighbor relationship without forming an adjacency" This two conditions (1) NO Neighbor Missing AND (2) no adjacency occurs only in two situations: 1) Neighboring interfaces with MTU mismatch. 2) Neighboring interfaces with OSPF network type mismatch https://learning.oreilly.com/library/view/ccna-200-301-official/9780136755562/vol1_ch21.xhtml

    3. J

       jahinchains

       2022-04-29

       Selected A9 upvotes

       even you modify network type they will never become neighbor if it has hello interval mismatch

    4. L

       liviuml

       2023-04-14

       3 upvotes

       NOT possible - NO right answered if we get all request conditions. First of all, "B. modify process ID" has nothing to do with relationship between devices, is internal. To establishes the OSPF neighbor relationship we need to change timers to be the same. No matter if routers are in Broadcast or P2P, they cannot become neighbors if timers are not the same (even the Hello packets are transmitted, they will be ignored). With presented settings if we adjust timers the routers will form ADJACENCY (again no matter if network types are Broadcast or P2P). The only way to force routers to not form adjacency is to change PRIORITY to 0. In this way the routers will not become DR/BDR and will remain both DROTHERs (Neighbor Count is 1, Adjacent neighbor count is 0). They will continue to send Hello messages, will be neighbors, but never achieve adjacency. So, regarding the question there are 2 necessary actions to take to fulfill the request: changing timers to be the same & priority 0. With only one action is impossible. Tested all variants in PT. Regards to the person who invented this impossible question/situation,

20. Question 20 of 25

    Select 2

    An engineer must configure an OSPF neighbor relationship between router R1 and R3. The authentication configuration has been configured and the connecting interfaces are in the same 192.168.1.0/30 subnet. What are the next two steps to complete the configuration? (Choose two.)

    • Aconfigure the interfaces as OSPF active on both sides
    • Bconfigure both interfaces with the same area ID
    • Cconfigure the hello and dead timers to match on both sides
    • Dconfigure the same process ID for the router OSPF process
    • Econfigure the same router ID on both routing processes

    Show answer

    Correct answer: A, B

    How others answered

    • AB77%
    • BC23%

    Explanation

    Ospf isn't active on the interfaces until you configure both interfaces to be inside of area 0 which you do with the network xxxx xxxx area 0 statement inside the ospf process or by using "ip ospf area 0" inside the interface configuration

    Adapted from community discussion by Murphy2022 · 2022-10-04 · 16 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. I

       ITstudent123

       2020-11-02

       32 upvotes

       Timers match by default The process ID can be the same or not The router ID mustn't be the same So answer is A and B

    2. M

       Murphy2022

       2022-10-04

       16 upvotes

       Ospf isn't active on the interfaces until you configure both interfaces to be inside of area 0 which you do with the network xxxx xxxx area 0 statement inside the ospf process or by using "ip ospf area 0" inside the interface configuration

    3. D

       Dante_Dan

       2022-02-01

       9 upvotes

       And also the interface is ISPF active by default... Tricky question.

    4. R

       radity_am

       2023-11-10

       Selected A, B5 upvotes

       "OSPF is enabled on an interface when the network address for the interface matches the range of addresses that is specified by thenetworkarea command, which is entered in router configuration mode. Alternatively, you can enable OSPFv2 explicitly on an interface by using the ip ospf area command, which is entered in interface configuration mode. This capability simplifies the configuration of unnumbered interfaces with different areas." https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/xe-3e/iro-xe-3e-book/iro-mode-ospfv2.pdf You're welcome

21. Question 21 of 25

    When the active router in a VRRP group fails, which router assumes the role and forwards packets?

    • Aforwarding
    • Bstandby
    • Cbackup
    • Dlistening

    Show answer

    Correct answer: C

    How others answered

    • C82%
    • B18%

    Explanation

    The only answer is Cisco's, because that's their certification. There are several docs that talk about standby or backup. The most important thing is to see the real state in the router configuration. For this, the show command does perfectly the job. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/command/reference/unicast/n5500-ucast-cr/n5k-vrrp_cmds_show.pdf https://community.cisco.com/t5/switching/vrrp-state-is-backup/td-p/2389647 (ps Peter Paluch is a CCIE employee of Cisco, I think if he uses the word backup for VVRP, then the state is backup)

    Adapted from community discussion by dorian81 · 2024-03-27 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. D

       DaBest

       2021-09-22

       95 upvotes

       HSRP usese Active/Standby VRRP usese Master/Backup these roles are for the routers in the virtual group

    2. D

       dicksonpwc

       2021-08-22

       9 upvotes

       In a VRRP configuration, one router is elected as the virtual router master, with the other routers acting as backups in case the virtual router master fails

    3. D

       dorian81

       2024-03-27

       Selected C2 upvotes

       The only answer is Cisco's, because that's their certification. There are several docs that talk about standby or backup. The most important thing is to see the real state in the router configuration. For this, the show command does perfectly the job. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/command/reference/unicast/n5500-ucast-cr/n5k-vrrp_cmds_show.pdf https://community.cisco.com/t5/switching/vrrp-state-is-backup/td-p/2389647 (ps Peter Paluch is a CCIE employee of Cisco, I think if he uses the word backup for VVRP, then the state is backup)

    4. J

       jaaks

       2022-06-28

       4 upvotes

       On Vol. 2 p260 of the Official Certification Guide, Wendell says that VRRP uses an active/standby, NOT master/backup redundancy approach.

22. Question 22 of 25

    An engineer is installing a new wireless printer with a static IP address on the Wi-Fi network. Which feature must be enabled and configured to prevent connection issues with the printer?

    • Aclient exclusion
    • BDHCP address assignment
    • Cpassive client
    • Dstatic IP tunneling

    Show answer

    Correct answer: C

    How others answered

    • C86%

    Explanation

    Passive clients are wireless devices, such as scales and printers that are configured with a static IP address. These clients do not transmit any IP information such as IP address, subnet mask, and gateway information when they associate with an access point. As a result, when passive clients are used, the controller never knows the IP address unless they use the DHCP. https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/m_configuring_passive_clients.html

    Adapted from community discussion by raydel92 · 2021-11-27 · 16 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. R

       raydel92

       2021-11-27

       Selected C16 upvotes

       Passive clients are wireless devices, such as scales and printers that are configured with a static IP address. These clients do not transmit any IP information such as IP address, subnet mask, and gateway information when they associate with an access point. As a result, when passive clients are used, the controller never knows the IP address unless they use the DHCP. https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/m_configuring_passive_clients.html

    2. F

       firstblood

       2021-08-29

       8 upvotes

       A is correct. Static IP should be excluded from the DHCP pool.

    3. [

       [Removed]

       2023-12-08

       Selected C2 upvotes

       This question seems to be asking what feature should be enabled on the WLC. A -> WRONG. Client exclusion refers to a mechanism to prevent overload caused by malicious/faulty EAP clients. B -> WRONG The IP is static; DHCP address assignment doesn't work here. D -> WRONG Static IP tunneling (Dynamic Anchoring) is if you want to configure a Static IP address on a device that may move around the network, to ensure connectivity even if it associates with another WLC. So that only leaves C, which is right anyway because enabling Passive Client is necessary to ensure that the controller can learn static IP addresses, which it otherwise wouldn't because devices with a static IP don't transmit that information when connecting to an AP. See: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/16-12/config-guide/b_wl_16_12_cg/passive-client.html#concept_FC84F350446D4D76A965400D13DA122A

    4. Y

       yasuke

       2021-09-19

       3 upvotes

       For enhanced security, we recommend that you require all clients to obtain their IP addresses from a DHCP server. To enforce this requirement, you can configure all WLANs with a DHCP Addr. Assignment Required setting, which disallows client static IP addresses. If DHCP Addr. Assignment Required is selected, clients must obtain an IP address via DHCP. Any client with a static IP address is not allowed on the network. The controller monitors DHCP traffic because it acts as a DHCP proxy for the clients. https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_01001001.html

23. Question 23 of 25

    An engineer is configuring switch SW1 to act as an NTP server when all upstream NTP server connectivity fails. Which configuration must be used?

    • ASW1# config t SW1(config)#ntp peer 192.168.1.1 SW1(config)#ntp access-group peer accesslist1
    • BSW1# config t SW1(config)#ntp master SW1(config)#ntp server192.168.1.1
    • CSW1# config t SW1(config)#ntp backup SW1(config)#ntp server192.168.1.1
    • DSW1# config t SW1(config)#ntp server192.168.1.1 SW1(config)#ntp access-group peer accesslist1

    Show answer

    Correct answer: B

    How others answered

    • B82%

    Explanation

    Correct me if I'm wrong but I think it's B because: The "NTP Master" command sets this device (SW1) as an NTP server, the second command "NTP server 192.168.1.1" synchronises this device to 192.168.1.1's time. if the upstream connectivity to 192.168.1.1 is lost, this device will continue to act as a NTP server for the rest of the hosts in the network.

    Adapted from community discussion by MDK94 · 2022-12-30 · 12 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. Z

       zaguy

       2022-03-09

       18 upvotes

       Correct Answer therefore : B. SW1# config t SW1(config)#ntp master SW1(config)#ntp server192.168.1.1

    2. M

       MDK94

       2022-12-30

       12 upvotes

       Correct me if I'm wrong but I think it's B because: The "NTP Master" command sets this device (SW1) as an NTP server, the second command "NTP server 192.168.1.1" synchronises this device to 192.168.1.1's time. if the upstream connectivity to 192.168.1.1 is lost, this device will continue to act as a NTP server for the rest of the hosts in the network.

    3. H

       Holko18

       2022-05-25

       Selected B3 upvotes

       From official Cisco 200-301 guide: 1. Establish an association with the NTP servers per the ntp server command. 2. Establish an association with your internal clock using the ntp master stratum command. 3. Set the stratum level of the internal clock (per the ntp master {stratum-level} command) to a higher (worse) stratum level than the Internet-based NTP servers . 4. Synchronize with the best (lowest) known time source, which will be one of the Internet NTP servers in this scenario I think answer is B.

    4. E

       Elmasquentona963

       2024-03-09

       Selected B3 upvotes

       The correct explanation would be: SW(config)# ntp server 192.168.1.1 Makes the SW1 a client to the primary server reachable with an IP address of 192.168.1.1 SW1(config)# ntp master Makes SW1 a server and uses its own internal clock to provide the time when the connectivity to the primary server 192.168.1.1 fails. - The key is the following statement "SW1 act as an NTP server". - It implies issue an "ntp master" configuration command obligatory. - So, answer is B

24. Question 24 of 25

    Which port state processes BPDUs, but does not forward packets or update the address database in Rapid PVST+?

    • Ablocking
    • Blearning
    • Clistening
    • Ddisabled

    Show answer

    Correct answer: A

    How others answered

    • A63%
    • B36%

    Only 63% agreed on this answer — treat it as contested rather than settled.

    Explanation

    The answer is 100% A. First of all, please do not confuse.. RSTP is NOT the same as Rapid PVST+. Rapid PVST+ has 4 different states, Blocking, Learning, Forwarding, Disabled. But RSTP has 3 different states, Discarding, Learning, Forwarding. For Rapid PVST+, the exact answer described by the question is "Blocking" state. For RSTP, it is "Learning" state. Again, the question is regarding Rapid PVST+. So the answer is A. Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/layer2/503_n1_1/Cisco_n5k_layer2_config_gd_rel_503_N1_1_chapter9.html#con_1205207

    Adapted from community discussion by NewJeans · 2023-10-12 · 15 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. N

       NewJeans

       2023-10-12

       Selected A15 upvotes

       The answer is 100% A. First of all, please do not confuse.. RSTP is NOT the same as Rapid PVST+. Rapid PVST+ has 4 different states, Blocking, Learning, Forwarding, Disabled. But RSTP has 3 different states, Discarding, Learning, Forwarding. For Rapid PVST+, the exact answer described by the question is "Blocking" state. For RSTP, it is "Learning" state. Again, the question is regarding Rapid PVST+. So the answer is A. Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/layer2/503_n1_1/Cisco_n5k_layer2_config_gd_rel_503_N1_1_chapter9.html#con_1205207

    2. S

       Stevens0103

       2023-08-03

       Selected A5 upvotes

       Configuring Rapid PVST+ https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/layer2/503_n1_1/Cisco_n5k_layer2_config_gd_rel_503_N1_1_chapter9.html#con_1241802 Blocking State A LAN port in the blocking state does not participate in frame forwarding. A LAN port in the blocking state performs as follows: Discards frames received from the attached segment. Discards frames switched from another port for forwarding. Does not incorporate the end station location into its address database. (There is no learning on a blocking LAN port, so there is no address database update.) Receives BPDUs and directs them to the system module. Receives, processes, and transmits BPDUs received from the system module. Receives and responds to network management messages.

    3. P

       purenuker

       2023-02-28

       7 upvotes

       https://www.ii.pwr.edu.pl/~kano/course/module4/4.2.3.1/4.2.3.1.html "RSTP does not have a blocking port state. RSTP defines port states as discarding, learning, or forwarding." WTF ?!?!?

    4. D

       DMc

       2023-06-01

       4 upvotes

       A - 100% as per Cisco https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/layer2/503_n1_1/Cisco_n5k_layer2_config_gd_rel_503_N1_1_chapter9.html Blocking State A LAN port in the blocking state does not participate in frame forwarding. A LAN port in the blocking state performs as follows: Discards frames received from the attached segment. Discards frames switched from another port for forwarding. Does not incorporate the end station location into its address database. (There is no learning on a blocking LAN port, so there is no address database update.) Receives BPDUs and directs them to the system module. Receives, processes, and transmits BPDUs received from the system module. Receives and responds to network management messages.

25. Question 25 of 25

    

    Refer to the exhibit. How must router A be configured so that it only sends Cisco Discovery Protocol information to router C?

    • A#config t Router A (config)#no cdp run - Router A (config)#interface gi0/0/1 Router A (config-if)#cdp enable -
    • B#config t Router A (config)#cdp run - Router A (config)#interface gi0/0/0 Router A (config-if)#no cdp enable C.#config t - Router A (config)#cdp run - Router A (config)#interface gi0/0/1 Router A (config-if)#cdp enable -
    • C#config t Router A (config)#cdp run - Router A (config)#interface gi0/0/0 Router A (config-if)#cdp enable

    Show answer

    Correct answer: B

    How others answered

    • B84%
    • A16%

    Explanation

    Router(config)# no cdp run Router(config)# end Router# show cdp % CDP is not enabled Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# interface TenGigabitEthernet4/1 Router(config-if)# cdp enable % Cannot enable CDP on this interface, since CDP is not running Router(config-if)# https://www.cisco.com/c/en/us/td/docs/optical/cpt/r9_5/command/reference/cpt95_cr/cpt95_cr_chapter_01101.pdf

    Adapted from community discussion by saoETo · 2023-04-07 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 200-301 or CertExamHQ.

    1. R

       Rynurr

       2023-02-17

       Selected B23 upvotes

       "B" is the correct answer. interface gi0/0/0 Router A (config-if)#no cdp enable

    2. J

       JJY888

       2023-03-02

       Selected B6 upvotes

       It's can't be A because : R3(config)#no cdp run R3(config)#inter R3(config)#interface g0/1 R3(config-if)#cd R3(config-if)#cdp en R3(config-if)#cdp enable R3(config-if)#exi R3(config-if)#exit R3(config)#exi R3(config)#exit R3# %SYS-5-CONFIG_I: Configured from console by console R3#sh R3#show cd R3#show cdp inter R3#show cdp interface % CDP is not enabled I did this on packet tracer myself

    3. S

       saoETo

       2023-04-07

       Selected B5 upvotes

       Router(config)# no cdp run Router(config)# end Router# show cdp % CDP is not enabled Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# interface TenGigabitEthernet4/1 Router(config-if)# cdp enable % Cannot enable CDP on this interface, since CDP is not running Router(config-if)# https://www.cisco.com/c/en/us/td/docs/optical/cpt/r9_5/command/reference/cpt95_cr/cpt95_cr_chapter_01101.pdf

    4. M

       matteodd90

       2023-10-16

       Selected B5 upvotes

       CDP Configuration: CDP is enabled by default on Cisco Device. Disabling CDP globally and enabling on an interface is not possible. https://learningnetwork.cisco.com/s/article/cisco-discovery-protocol-cdp-x

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 1 of 25