200-301 practice questions 1,301–1,310

1. Question 1301 · 1334 in bank

   Select 2

   Which two server types support domain name to IP address resolution? (Choose two.)

   • Aauthoritative
   • Bweb
   • Cfile transfer
   • Dresolver
   • EESX host

   Show answer

   Answer: AD

   Explanation

   What is DNS resolver? DNS Resolvers are responsible for providing the correct IP address of a domain name to the requesting host. For example, if you make a request from your web browser and there is no information on your computer about this domain name (it is not cached), your computer will send the request to DNS resolvers. The resolver will then try to find the name servers, that are responsible for this domain name and contain the necessary records. These name servers are called authoritative. What is authoritative name server? Authoritative DNS nameservers provide answers to DNS resolvers with the correct IP addresses and records. These name servers contain the DNS zone with all information, like the IP address of the server, the responsible mail servers, etc for a domain name. Both servers work hand in hand - resolvers ask the authoritative name servers. They cannot be used for different purposes - e.g. authoritative name server cannot be used as DNS resolver or vice versa.

   Source: Adapted from community discussion — RidzV

   Next question

2. Question 1302 · 1334 in bank

   What is a purpose of traffic shaping?

   • AIt enables policy-based routing.
   • BIt enables dynamic flow identification.
   • CIt provides best-effort service.
   • DIt limits bandwidth usage.

   Show answer

   Answer: D

   Explanation

   The purpose of traffic shaping is to limit the bandwidth usage of certain types of network traffic in order to prevent congestion and ensure that critical applications receive the necessary network resources. Traffic shaping is typically used to enforce Quality of Service (QoS) policies that prioritize certain types of network traffic, such as voice and video traffic, over other less critical traffic. By limiting the bandwidth usage of non-critical traffic, traffic shaping can help prevent network congestion and ensure that the available bandwidth is allocated in a way that meets the organization's priorities. Therefore, the correct answer is option D: it limits bandwidth usage.

   Source: Adapted from community discussion — Ciscoman021

   Next question

3. Question 1303 · 1334 in bank

   An engineering team asks an implementer to configure syslog for warning conditions and error conditions. Which command does the implementer configure to achieve the desired result?

   • Alogging trap 5
   • Blogging trap 2
   • Clogging trap 3
   • Dlogging trap 4

   Show answer

   Answer: D

   Explanation

   0- Every - emergency 1-Awesome - alert 2-cisco - critical 3-engineer - error 4-will - warning 5-need - notification 6-ice - informational 7-dailly - debug

   Source: Adapted from community discussion — rogi2023

   References

   • Cisco documentation

   Next question

4. Question 1304 · 1334 in bank

   Which type of organization should use a collapsed-core architecture?

   • Asmall and needs to reduce networking costs
   • Blarge and must minimize downtime when hardware fails
   • Clarge and requires a flexible, scalable network design
   • Dcurrently small but is expected to grow dramatically in the near future

   Show answer

   Answer: A

   Explanation

   A is correct. It is ideal for small companies: "The collapsed core model is a reduced version of the three-tier model. The deduction was made to create a network for small and medium-sized campuses. Therefore, smaller institutions can get the advantage of using a collapsed core network while still gaining the same benefits they would if they were using a three-tier model. Small organizations often cannot afford the hardware and human resources to run the network can benefit greatly with less oversight necessary." And reduces cost: "In a traditional three-tier campus network, the core layer is typically a complex and expensive piece of hardware. This layer is eliminated with collapsed core architecture, reducing both cost and complexity."

   Source: Adapted from community discussion — Jbcrggddfhh

   Next question

5. Question 1305 · 1334 in bank

   DRAG DROP - Drag and drop the attack-mitigation techniques from the left onto the types of attack that they mitigate on the right.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   oatmeal turkey is correct: MITM Attacks - DHCP Snooping MAC Flooding - 802.1X Authentication 802.1Q Double Tagged VLAN Hopping Attacks - Change Native VLAN To non-default VLAN Switch Spoofing VLAN Hopping - Disable DTP (Set Switchport to Nonnegotiate)

   Source: Adapted from community discussion — MassNastty1

   

   Next question

6. Question 1306 · 1334 in bank

   Which WLC management connection type is vulnerable to man-in-the-middle attacks?

   • Aconsole
   • BTelnet
   • CSSH
   • DHTTPS

   Show answer

   Answer: B

   Next question

7. Question 1307 · 1334 in bank

   

   Refer to the exhibit. An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate directly to global configuration mode via Telnet using a local username and password?

   • AR1(config)#username admin - R1(config-if)#line vty 0 4 - R1(config-line)#password p@ss1234 R1(config-line)#transport input telnet
   • BR1(config)#username admin privilege 15 secret p@ss1234 R1(config-if)#line vty 0 4 - R1(config-line)#login local
   • CR1(config)#username admin secret p@ss1234 R1(config-if)#line vty 0 4 - R1(config-line)#login local - R1(config)#enable secret p@ss1234
   • DR1(config)#username admin - R1(config-if)#line vty 0 4 - R1(config-line)#password p@ss1234

   Show answer

   Answer: B

   Explanation

   To allow administrators to authenticate via Telnet directly to global configuration mode using a local username and password, the switch must be configured with a local username and corresponding password, and the VTY lines must be set to use local login credentials. Additionally, to ensure the user has the proper level of privilege to enter global configuration mode directly, the username should be created with the highest privilege level (15). Based on these requirements, the additional configuration that must be applied is: B. R1(config)#username admin privilege 15 secret p@ss1234 R1(config)#line vty 0 4 R1(config-line)#login local This configuration sets up a local user with full privileges and configures the VTY lines to require local username and password authentication for Telnet access. Note that there's a typographical error in the command R1(config-if)#line vty 0 4 -; it should be R1(config)#line vty 0 4, as line configuration is not done in interface configuration mode but directly in global configuration mode.

   Source: Adapted from community discussion — lmmujsi

   Next question

8. Question 1308 · 1334 in bank

   Which type of encryption does WPA1 use for data protection?

   • APEAP
   • BTKIP
   • CAES
   • DEAP

   Show answer

   Answer: B

   Explanation

   WPA1 (Wi-Fi Protected Access 1) uses TKIP (Temporal Key Integrity Protocol) encryption for data protection. TKIP is an encryption protocol that was designed to provide stronger security than the previous WEP (Wired Equivalent Privacy) encryption standard, which was known to have vulnerabilities. TKIP uses a combination of encryption techniques, including a per-packet key mixing function, to provide data confidentiality and integrity. However, TKIP is now considered insecure and has been replaced by AES (Advanced Encryption Standard) in modern Wi-Fi security protocols such as WPA2 and WPA3.

   Source: Adapted from community discussion — Ciscoman021

   Next question

9. Question 1309 · 1334 in bank

   

   Refer to the exhibit. A network administrator must permit traffic from the 10.10.0.0/24 subnet to the WAN on interface Serial0. What is the effect of the configuration as the administrator applies the command?

   • AThe router accepts all incoming traffic to Serial0 with the last octet of the source IP set to 0.
   • BThe permit command fails and returns an error code.
   • CThe router fails to apply the access list to the interface.
   • DThe sourced traffic from IP range 10.0.0.0 - 10.0.0.255 is allowed on Serial0.

   Show answer

   Answer: C

   Explanation

   The permit command does not fail, it is syntactically correct even though the ACL would not work as intended because it would not allow traffic from the 10.10.0.0/24 subnet. The answer is C because ip access-list 10 in is not a valid command and is rejected. The correct command would be ip access-group 10 in.

   Source: Adapted from community discussion — oatmealturkey

   Next question

10. Question 1310 · 1334 in bank

    DRAG DROP - Drag and drop the statements about AAA services from the left to the corresponding AAA services on the right. Not all options are used.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 1301. 1334 questions available.