200-301 practice questions 1,201–1,210

1. Question 1201 · 1334 in bank

   

   Refer to the exhibit. The SW1 and SW2 Gi0/0 ports have been preconfigured. An engineer is given these requirements: • Allow all PCs to communicate with each other at Layer 3. • Configure untagged traffic to use VLAN 5. • Disable VLAN 1 from being used. Which configuration set meets these requirements?

   • ASW1# interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 switchport trunk native vlan 5 interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 SW2# interface Gi0/1 switchport mode access switchport access vlan 7 interface Gi0/7 switchport mode trunk switchport trunk allowed vlan 7,9,108
   • BSW1# interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 switchport trunk native vlan 5 interface Gi0/2 switchport mode access switchport trunk allowed vlan 7,9,108 SW2# interface Gi0/1 switchport mode access no switchport access vlan 1 switchport access vlan 7 interface Gi0/7 switchport mode trunk switchport trunk allowed vlan 7,9,108 switchport trunk native vlan 5
   • CSW#1 - interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 switchport trunk native vlan 5 interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 SW2# interface Gi0/1 switchport mode access switchport access vlan 7 interface Gi0/7 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 switchport trunk native vlan 5
   • DSW1# interface Gi0/1 switchport mode trunk switchport trunk allowed vian 5,7,9,108 interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 7,9,108 SW2# interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 7 interface Gi0/7 switchport mode trunk switchport trunk allowed vlan 5,7,9,108

   Show answer

   Answer: C

   Explanation

   Letter A - Two mismatch (between SW1 and SW2): Native Vlan and Vlan Allowed. Letter B - A mismatch (between SW1 and SW2): Vlan Allowed. Letter C - Working, best option! Letter D - Native Vlan 5 not configured. (*wrong command vian)

   Source: Adapted from community discussion — dropspablo

   Next question

2. Question 1202 · 1334 in bank

   

   Refer to the exhibit. How must router A be configured so that it only sends Cisco Discovery Protocol information to router C?

   • A#config t Router A (config)#no cdp run - Router A (config)#interface gi0/0/1 Router A (config-if)#cdp enable -
   • B#config t Router A (config)#cdp run - Router A (config)#interface gi0/0/0 Router A (config-if)#no cdp enable C.#config t - Router A (config)#cdp run - Router A (config)#interface gi0/0/1 Router A (config-if)#cdp enable -
   • C#config t Router A (config)#cdp run - Router A (config)#interface gi0/0/0 Router A (config-if)#cdp enable

   Show answer

   Answer: B

   Explanation

   Router(config)# no cdp run Router(config)# end Router# show cdp % CDP is not enabled Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# interface TenGigabitEthernet4/1 Router(config-if)# cdp enable % Cannot enable CDP on this interface, since CDP is not running Router(config-if)# https://www.cisco.com/c/en/us/td/docs/optical/cpt/r9_5/command/reference/cpt95_cr/cpt95_cr_chapter_01101.pdf

   Source: Adapted from community discussion — saoETo

   References

   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation
   • Cisco documentation

   Next question

3. Question 1203 · 1334 in bank

   

   Refer to the exhibit. An administrator must turn off the Cisco Discovery Protocol on the port configured with address last usable address in the 10.0.0.0/30 subnet. Which command set meets the requirement?

   • Ainterface gi0/1 no cdp enable
   • Binterface gi0/0 no cdp run
   • Cinterface gi0/0 no cdp advertise-v2
   • Dinterface gi0/1 clear cdp table

   Show answer

   Answer: A

   Explanation

   Answer is A, .254 is last usable address and no cdp run is not a valid interface command so it can't be B anyway. [no] cdp run is a global command. The valid config-if command is no cdp enable

   Source: Adapted from community discussion — oatmealturkey

   References

   • Cisco documentation

   Next question

4. Question 1204 · 1334 in bank

   Which WLC port connects to a switch to pass normal access-point traffic?

   • Aredundancy
   • Bservice
   • Cconsole
   • Ddistribution system

   Show answer

   Answer: D

   Explanation

   The correct answer is B. service. In a Wireless LAN Controller (WLC) setup, the service port is the one that connects to a switch to pass normal access-point traffic. This port is responsible for handling the communication between the access points and the WLC, allowing the access points to send and receive data to and from the wired network. The other options are as follows: A. redundancy: This port is used for communication between redundant WLCs for failover and backup purposes. C. console: This port is typically used for out-of-band management and configuration of the WLC. D. distribution system: This term is often used in the context of the wireless network itself, referring to the infrastructure that connects the access points and provides wireless coverage. It's not specifically related to the port on the WLC that connects to a switch. So, the correct choice for the port that connects to a switch to pass normal access-point traffic is B. service.

   Source: Adapted from community discussion — shaney67

   References

   • Cisco documentation
   • Cisco documentation

   Next question

5. Question 1205 · 1334 in bank

   Which default condition must be considered when an encrypted mobility tunnel is used between two Cisco WLCs?

   • AThe tunnel uses the IPses protocol for encapsulation.
   • BControl and data traffic encryption are enabled.
   • CThe tunnel uses the EoIP protocol to transmit data traffic.
   • DTCP port 443 and UDP 21 are used.

   Show answer

   Answer: B

   Explanation

   D is incorrect. The controller uses UDP port 16667 to send data traffic. EoIP is not used to send data traffic across an encrypted mobility tunnel. Data traffic is encrypted in an encrypted mobility tunnel and control traffic is always encrypted, so the answer is B. https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/107188-mobility-groups-faq.pdf

   Source: Adapted from community discussion — oatmealturkey

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

6. Question 1206 · 1334 in bank

   What is a characteristic of cloud-based network topology?

   • Aonsite network services are provided with physical Layer 2 and Layer 3 components
   • Bwireless connections provide the sole access method to services
   • Cphysical workstations are configured to share resources
   • Dservices are provided by a public, private, or hybrid deployment

   Show answer

   Answer: D

   Explanation

   D would be correct Definitly not A as its physical when we are talking about cloud services B talks about access to a service but doesn't talk about topologies. C feels like its refering to shared resources on a network between workstations and not on cloud.

   Source: Adapted from community discussion — onikafei

   Next question

7. Question 1207 · 1334 in bank

   

   Refer to the exhibit. After a recent internal security audit, the network administrator decided to block all P2P-capable devices from the selected SSID. Which configuration setting must the administrator apply?

   • ASet the Wi-Fi Direct Client Policy to Not-Allow.
   • BSelect a correctly configured Layer 2 ACL.
   • CSet the MFP Client Protection to Required.
   • DSet the P2P Block Action to Drop.

   Show answer

   Answer: D

   Explanation

   To block all P2P-capable devices from the selected SSID, the network administrator should set the P2P Block Action to "Drop". P2P (Peer-to-Peer) traffic is often used by file sharing applications and other unauthorized software, which can pose a security risk to the network. By setting the P2P Block Action to "Drop", the network administrator can prevent P2P traffic from being transmitted over the selected SSID. The other configuration settings listed are not directly related to blocking P2P traffic. Wi-Fi Direct Client Policy, for example, is used to control Wi-Fi Direct clients, while MFP (Management Frame Protection) Client Protection helps prevent forged management frames. A Layer 2 ACL (Access Control List) can be used to control access to network resources based on MAC addresses, IP addresses, and other criteria, but it is not specifically designed to block P2P traffic.

   Source: Adapted from community discussion — Ciscoman021

   References

   • Cisco documentation
   • cisco.com documentation

   Next question

8. Question 1208 · 1334 in bank

   What is the primary purpose of a console port on a Cisco WLC?

   • Ain-band management via an asynchronous transport
   • Bin-band management via an IP transport
   • Cout-of-band management via an asynchronous transport
   • Dout-of-band management via an IP transport

   Show answer

   Answer: C

   Explanation

   Well if it makes you feel any better, I have used several dumps from various sites (paid) and they all have wrong answers, but those questions we learn very well from searching material etc... and actually helps retain the material. At least here there are people who are willing and able to contribute.

   Source: Adapted from community discussion — XuniLrve4

   References

   • Cisco documentation

   Next question

9. Question 1209 · 1334 in bank

   Which port type does a lightweight AP use to connect to the wired network when it is configured in local mode?

   • AEtherChannel
   • Baccess
   • CLAG
   • Dtrunk

   Show answer

   Answer: B

   Explanation

   While the Cisco WLCs always connect to 802.1Q trunks, Cisco lightweight APs do not understand VLAN tagging and must only be connected to the access ports of the neighbor switch. https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/69719-wlc-lwap-config.html Thanks to CAPWAP data tunnel between the LAP and the WLC, the LAP does not need to know anything about VLANs. https://study-ccna.com/lightweight-access-point-configuration/

   Source: Adapted from community discussion — oatmealturkey

   References

   • Cisco documentation

   Next question

10. Question 1210 · 1334 in bank

    Which step immediately follows receipt of the EAP success message when session resumption is disabled for an EAP-TLS connection?

    • APMKID caching
    • Bfour-way handshake
    • C802.1X authentication
    • DEAPOL-key frame

    Show answer

    Answer: D

    Explanation

    Here is a more detailed explanation of the steps involved in EAP-TLS authentication when session resumption is disabled: The client sends an EAP-Request message to the authentication server. The authentication server selects an EAP method and sends an EAP-Response message to the client. The client and authentication server exchange EAP messages until the authentication is successful. The authentication server sends an EAP-Success message to the client. The client sends an EAPOL-Key frame to the authenticator. The authenticator sends an EAPOL-Key frame to the authentication server. The authentication server validates the EAPOL-Key frame and sends an EAPOL-Key frame to the authenticator. The authenticator sends an EAPOL-Key frame to the client. The client and authenticator exchange four-way handshake messages to establish a new TLS session. Once the four-way handshake is complete, the client can access the network.

    Source: Adapted from community discussion — picho707

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 1201. 1334 questions available.